So long as the checkmark isn't bought through some subscription service, I'm fine with this.
The whole reason why verification exists is because other will steal the name of someone famous and masquerade as them, with real world consequences. A verification system now means that certain platforms and people will get more attracted to be there, and thus Bluesky will grow.
Unfortunately, the forecast isn't good for the integrity of what should be a simple system. Under Dorsey, the Twitter blue checkmark had already become a tool for showing content approval by Twitter. In various instances users had their status removed based on their content and not on a question of if they were who they claimed to be.
Bluesky, the decentralized social network [...]
Were only one instance exist or did I miss something?
As I understand it, the protocol has the ability to decentralize built in. But the technical requirements are prohibitively high to the point only large businesses or corps could afford to do it. I also believe (someone correct me) the company hasn’t switched on the functionality yet.
Last heard (a few months ago) the cost is in storage. The protocol isn’t too complicated now, but it generates a shit ton of data, and IIRC you need a minimum of 3 copies.
Storage is cheap whwn it comes to webhosting and 3 replicas is honestly not much when it comes to enterprise standards. I think cloud storage providers like backblaze keep something like 9 copies of data across different mediums
my mom has always told me that I had the potential to work at NASA. but the requirements are prohibitively high
I believe in you!
The biggest thing is that you need to be manually authorized by them for federation. They will only ever federate with servers that arent serious enough competition to lead to democratization of the overall network.
Nope, it's 100% centralized.
It's 100% centralized, but with the ability to be decentralized. Sorta like Threads before they started federating
Sure, but until it actually gets used significantly in that way, we might as well just say it's centralized.
I think their initial selling point was that Eventually©®™ Bluesky would federate with the rest of the Fediverse.
Is anybody really surprised that a social media corporation didn't make it their utmost priority to allow their userbase to connect out of their proprietary platform?
idk man I haven't seen anyone complaining about it on Bluesky
This is a net positive, nice to have a social media where verification checks are...actually used for verifying the person behind an account
Most of the complaints I’ve seen were about Bluesky’s lack of a formal verification system.
They could never figure out how the current system of checking the username.
But isn’t the domain already doing that?
The problem with domains is that regular people would need to know what a domain is and what verified ownership says about the account in question.
Even then, reading domains is quite difficult, even for people who know about the topic: Humans are Bad at URLs and Fonts Don’t Matter
I feel like domain usernames are still inherently susceptible to phishing, you can get a typo or similar character to try and trick someone that your username is an official one
I saw some small talk about it, and it really just boiled down to domain verification is great for more tech savvy folks, but trying to get larger accounts (think politicians, celebrities, etc) is a lot harder. Having a visual check, using tools within the app or site, is a lot easier.
And personally I like the idea of verification checks as long as it remains a simple means to do just that: verify the owner of the account. Morons like Musk and his ilk always thought it was a clout thing, and for a small minority that was probably the case, but by and large before he ruined it, it was great.
Domains only help you verify organizations and individuals you recognize directly.
This verification system also allows 3rd parties (it's NOT just bluesky themselves!) to issue attestations that s given account belongs to who they say they are, which would help people like independent journalists, etc.
Based on how verification was revoked for some users on Twitter based on their content rather than question of their identity, I'm cautious about this system turning into the status symbol it became on Twitter rather than the verification it claimed to be.
This was always bait to keep people using corporate social media instead of decentralizing. I am not sorry for the users one bit.
I do not see anything to be angry or disappointed about?
Verification badge was good, the dumb thing Twitter did was throw it away by letting anyone pay for it.
Nah it was not good. Domain names already do that and are accessible to all at all times with full transparency and decentralization. Bluesky is literally regressing.
Even mastodon's verification system is better than checkmarks.
domain names do that for people with well known domain names, and verification processes do that for people without
Far from perfect, but I think it's good to have a layer that very visibly shows 'yes, this is the account you want'.
Domains are a worthwhile addition, but they run into almost the same problem as usernames and handles. Can be made misleading easily - sure, I could often go to the web address and verify it (if they don't put up a convincing fake site), but that's much lower visibilty.
Eg, you can probably register nintendo@nintendoamerico.com or similar and get it by some folks just as easily as registering the Twitter handle. There's a payment step to get the domain, but that's about it.
The centralization problem you mention is a good point though. It was a fine system, if you felt like you could trust Twitter as a verifier. Today obviously, one could not. But Bsky seems to at least theoretically have a 'choose your verification provider' idea in mind, which would (again theoretically) resolve a lot of that issue.
Anyone who is surprised that BlueSky is going down the same path as Twitter (X, not withstanding) belongs on BlueSky.
I think a few more people "get it" every time the cycle repeats, but also, a sucker is born every minute.
This shitshow sounds familiar.
Something like this unavoidable.
Example, ted cruz the car mechanic in marfa Texas has just has much right to use blusky as ~~professional shit bag~~ senator ted cruz. But hiw do tell the real one from the racid sack of weasels.
To quote my well known journalist friend after switching from twitter "what's that? Oh, that open source stuff? Hahaha nah bruh, mastodon is silly"
Reminds me of a meeting my co-worker and I had with the IT staff of a company that is a customer using research instruments in our facility. The meeting was to ask us to enable data synchronization through SharePoint. (We're a Linux shop.) We asked what the issue was with getting their data files with SFTP. They said, "It's open source."
Then, a few beats of silence as it sinks in for us that there is no next step in the chain of logic. That is the totality of their objection.
mastodon exists
You eeediots!
Ren from Ren and Stimpy?
I can't believe the guy who originally administered the creation of Twitter would do all the exact same things that originally made him billions of dollars selling the company to Elon Musk.
There's no way he's just speed-running what he did last time in hopes of another $44B buyout.
Tbh I've seen more people asking for this than the people complaining.
I don’t see anything controversial in the article. Did I miss something? Just looks like a way to make sure the public figures and companies you are communicating with are who they say they are.
The fuck did anyone expect?
The checkmark is the wrong approach. You should never trust accounts, because accounts get hacked. We should instead use cryptographic signatures on individual posts, and clients can warn when that signature doesn't match the account's public key, or if that key changed recently. The private key would never live on the server, and ideally live outside the app.
This doesn't verify identity, it just proves the key didn't change. To establish identity, the person needs to use the same key in multiple places, such as posting it on a personal website or something. If a service wants to add their own stamp of approval, they can sign these public keys and embed them into the apl for clients to use (e.g. show a blue checkmark if Bluesky can verify the public key outside its system).
If the private key is compromised, repeat the process, potentially signing the new key with both the old and new key to prove control of both (or start from scratch if needed). Repeat whenever they get hacked.
Then come over to Mastodon...
Decentralized, yeah sure!
This is a most excellent place for technology news and articles.
