back
user profile

danabramov

9,674karma·1,751submissions·February 4, 2012
recent activity (1,751 total)
comment
I tried to make a pretty extensive case for it at https://overreacted.io/open-social/#open-social , I'd suggest reading it with an open mind to form an opinion. I think there…
10mo ago·view thread
comment
That's more or less how AT works, minus the Torrent part. There's a private key you own (which is normally held on your hosting but you can also add a "higher priority" key that wo…
10mo ago·view thread
comment
As stated near the end of the article, this isn’t something you’d do much as an app developer. The article describes how to pull but the predominant model for building apps is to have the data push…
10mo ago·view thread
comment
Backward names are not used for the "server". (I presume that by "server" you mean hosting , which is determined by the `serviceEndpoint` in the DID document rather than by someth…
10mo ago·view thread
comment
It builds on top of DNS (in at least in two places) so it’s not equivalent — and it fills a different function to it. See https://news.ycombinator.com/item?id=45469296 for a breakdo…
10mo ago·view thread
comment
I don’t think it would follow redirects. See https://atproto.com/specs/handle#https-well-known-method Edit: I'm wrong; see below …
10mo ago·view thread
comment
No, that’s really not the case. The Leaflet app “knows” about Bluesky posts by reading Leaflet's own database on the Leaflet servers . It doesn’t need Bluesky’s cooperation to use “Bluesky’s” pu…
10mo ago·view thread
comment
Yes, which is already the case with every app you use. But like I explain in the second half of https://news.ycombinator.com/item?id=45471337 , you’d still be able to restore your acco…
10mo ago·view thread
comment
The PLC is being spun out into a separate entity independent of Bluesky. The intention is for it to become something analogous to ICANN. So hopefully, with time, even Bluesky shutting down wouldn’t af…
10mo ago·view thread
comment
The "Discover" feed isn't that great on a fresh account. It does get better with time based on likes and follows but still not super great. I'd personally recommend the "For Y…
10mo ago·view thread
comment
Can you clarify what the proposed change is? I don't quite follow. For example, what does `at://did:plc:fpruhuo22xkm5o7ttr2ktxdo/sh.tangled.feed.star/3m23ddgjpgn22` become ?
10mo ago·view thread
comment
Technically sure, but (1) apps that Bob uses have no power over that database, and (2) if someone were to remove that row, Bob could change his handle to something else without losing his identity, da…
10mo ago·view thread
comment
>There is seemingly nothing in the AT protocol that prevents sites from defederating and enabling vendor lock-in, just like how every other social media site has switched to requiring you to log i…
10mo ago·view thread
comment
Which article are you talking about? I think https://overreacted.io/open-social/ (which is what I linked to) gives a pretty detailed explanation if that's what you wanted. A…
10mo ago·view thread
comment
As an example of that, if you open any `app.bsky.feed.post` in pdsls, the "Info" tab[1] links has a link to the "Lexicon document" for it: [1]: https://pdsls.dev/at…
10mo ago·view thread
comment
The private key is normally stored on your PDS (hosting). See https://www.da.vidbuchanan.co.uk/blog/adversarial-pds-migrat... for how to be prepared for adversarial migration.…
10mo ago·view thread
comment
It's an early time but https://tangled.org/ (sort of like GitHub) and https://leaflet.pub/ (sort of like Medium) are pretty cool and useful, in my opinion. As it…
10mo ago·view thread
comment
Yes, see here: https://news.ycombinator.com/item?id=45471337 . You can change your domain with no cooperation from whoever owns your current domain. And you can change your host, provi…
10mo ago·view thread
comment
I think they're saying using PLC as an identity method is not tied to buying into the whole AT spec. So you can use it for something else. >Isn’t PLC tied to bluesky (or some other central …
10mo ago·view thread
comment
I responded to this here ( https://news.ycombinator.com/item?id=45471337 ) but I want to emphasize this: your domain is "just" a handle. If something happens to it, you still …
10mo ago·view thread
comment
Neither of these is quite right. In AT, data is tied to identity (DID), not handles or hosting. That’s what my article tried to explain. If you lose the “handle” domain, all it means is that you won’t…
10mo ago·view thread
comment
There’s a bidirectional link between a user handle (domain) and their identity (a DID). But the data is logically rooted in the DID. Domain handle is an alias that can change over time — but your DID …
10mo ago·view thread
comment
This is a technical explanation for an audience already interested in the topic. The motivation ("explaining the problem") is described in the article linked in the very first sentence. Here…
10mo ago·view thread
comment
Yeah, you can't migrate a DID. You could bulk-import the content (and even fix internal links within it) but that wouldn't change the links pointing at the old DID.
10mo ago·view thread
comment
Right, I see. You can get a key that overrides your PDS if you're worried about your PDS going rogue. See https://www.da.vidbuchanan.co.uk/blog/adversarial-pds-migrat... and…
10mo ago·view thread
comment
Ah yes, this might be relevant then: https://www.da.vidbuchanan.co.uk/blog/adversarial-pds-migrat... …
10mo ago·view thread
comment
>Yes but if I've already hijacked the DNS to point to my own DID, what's stopping me from saying I go by your handle? The process of establishing "this handle points to this DID&qu…
10mo ago·view thread
comment
Great questions! Yeah, this is something I want to write about it in the future. An app can write to PDS if the user grants it access via OAuth. Currently this access is very coarse (which is bad!) al…
10mo ago·view thread