@Jerry joys of federation - https://infosec.exchange/@thenexusofprivacy/115074913304859444
Posts
-
There's a lot of discussion of Mississippi's age verification law for social media today, after Bluesky announced they're blocking the state. -
There's a lot of discussion of Mississippi's age verification law for social media today, after Bluesky announced they're blocking the state.@Kirk It is. As their announcement says,
"This decision applies only to the Bluesky app, which is one service built on the AT Protocol. Other apps and services may choose to respond differently."
Of course, today 99.9%+ of the people using AT Protocol-based services are using Bluesky's app. But that was already in the process of changing, and stuff like this -- and the Online Services Act, and the (very justifiable) desire by Canadians and Europeans and everybody else not to be depending on US company's infrastructure are just giving it more momentum. So, it'll be interesting to see how it works out.
-
There's a lot of discussion of Mississippi's age verification law for social media today, after Bluesky announced they're blocking the state.@naught101 yeah, I just tagged the lemmy community ... and yes it is super cool! although, as the NSFW highlights, somewhat clunky around the edges ... if I don't include a CW here then it figures out the title on its own, and it's not always what I want.
-
There's a lot of discussion of Mississippi's age verification law for social media today, after Bluesky announced they're blocking the state.@naught101 it shouldn't, but anything posted on Mastodon with a CW is marked as NSFW on Lemmy. Similarly when the post bridged to Bluesky it got marked as "graphic media" lol. Not sure there's anything I can do about it in either case.
-
There's a lot of discussion of Mississippi's age verification law for social media today, after Bluesky announced they're blocking the state.Bluesky's announcement notes that
"This decision applies only to the Bluesky app, which is one service built on the AT Protocol. Other apps and services may choose to respond differently. We believe this flexibility is one of the strengths of decentralized systems—different providers can make decisions that align with their values and capabilities, especially during periods of regulatory uncertainty. We remain committed to building a protocol that enables openness and choice."
Of course, today 99.9%+ of the people using AT Protocol-based services are using Bluesky's app. More positively, though, there's a lot of momentum for non-Bluesky infrastructure. Over the last couple of weeks, hundreds of people have migrated their accounts to Blacksky; alternate apps were already getting a lot of attenition because they don't have to include the age verification Bluesky just introduced for UK users for the Online Safety Act; and projects like Northsky, Gander, and Eurosky are working on infrastructure that's not based in the US. So it'll be interesting to see how things play out.
-
There's a lot of discussion of Mississippi's age verification law for social media today, after Bluesky announced they're blocking the state.There's a lot of discussion of Mississippi's age verification law for social media today, after Bluesky announced they're blocking the state.
Note that Mississippi's requirements go far beyond the Online Safety Act, MIssissippi's law, HB 1126, requires age verification for all users, and parental consent for users under 18., no matter what the content of the site is. Last week the US Supreme Court declined to block the law while it's being challenged in the courts, even though Kavanaugh described it as "likely unconstitutional".
The law clearly should be found unconstitutional - the amicus brief from @CenDemTech, @eff et al discusses why. Still, with the current Supreme Court, who knows; they just the (somewhat narrower) Texas age verification law also should have been found unconstitutional, but SCOTUS said it was okay. So who knows. And of course this is exactly the kind of chilling effect they're aiming for, which is why it's so disappointing that SCOTUS didn't block its enforcement until the case is heard.
As far as I know there isn't any guidance yet for people running fedi instances (or message boards, which are also covered). If you're running a US-based fedi instance, it's might well be worth talking to your lawyer about this. Here's the legislation, and here's the langauge from Section 4 (1)
"A digital service provider may not enter into an agreement with a person to create an account with a digital service unless the person has registered the person's age with the digital service provider. A digital service provider shall make commercially reasonable efforts to verify the age of the person creating an account with a level of certainty appropriate to the risks that arise from the information management practices of the digital service provider."
-
@andypiper (or anybody else ...)Thanks!
-
@andypiper (or anybody else ...)@wizard thanks, very good point. I don't think they're planning on having open registrations but I"ll stress the importance of that!
-
@andypiper (or anybody else ...)thanks. Good point on not having open registration, I don't think they were planning on doing that but I'll stress the importance!
My initial response was that if they don't have an experienced sysadmin they'll almost certainly want to use a hosting service. That said I'm not sure about the costs of going that route if their posts get wide visibility -- I remember Marco Rogers needing a $39/month plan for a single-user instance -- but it still might be worth doing.
-
@andypiper (or anybody else ...)Thanks again. Yeah, completely agree about the importance of getting a team in place on moderation side, and great description of what to think about up front. And these are great suggestions even for a much smaller instance. If I do a post about this, is it okay if I quote you?
-
@andypiper (or anybody else ...)@risottobias good suggestions, thanks!
-
@andypiper (or anybody else ...)Thanks very much @ConnyDuck, great info!
-
@andypiper (or anybody else ...)Agreed. My initial response was that if they don't have an experienced sysadmin they'll almost certainly want to use a hosting service. On the number of users, they realize that a smaller instance is easier, but aren't sure at what point it starts to get significantly more difficult and how much more difficult it gets.
-
@andypiper (or anybody else ...)@andypiper (or anybody else ...)
Somebody working with a non-profit that is considering starting up a Mastodon instance to use as part of an activism campaign asked me for a rough estimate of how time consuming it is to administer a mastodon instance. Good question! Is there a good wrteeup of this I can point them to?