reddit’s been less accepting of truth year over year for 16+ years

you won’t even give them that in this kind of system. you will get a user hash that is based of your signature, the system your using’s key and some mux of time and entropy input. This hash will be how they track you in a database and as systems evolve could even be a way to communicate with the user directly (like email) without knowing or holding any PII/NPI

Anything you assign to them would be data they have (maybe a common display name). Anything truly important that needs to be up there can be encrypted with different techniques that would allow the provider to work with your data without ever having to access or decrypt your data.

so the idea of them “needing to have something” to function is true, but fundamentally, they don’t need as much to operate in this system and its possible to have standards that enforce security on your more sensitive details that are sent. Imagine the security of your data, on thier system, still being ruled by your security. Even if hackers get in and copy the entire database its effectively useless.

this is not dissimilar to how high security setups work for organizations now, really what this is is a scaling up of the kind of things IT administrators are already doing when locking down production among other systems (its a very common login pattern for Linux based systems for thier SSH terminals).

The big difference here is that your password changes from a password to a digital signature bound to time, hardware and the user. If the user so chooses they can always put a many levels on top of that that they want, be it passwords, additional keys, biometrics, what-have-you.

Since your credentials never leave your device data breeches do not compromise your account or access to it (only the data the provider failed to protect). This also enables even higher levels of security through the whole credential chain, want to end-to-end-encrypt your data and encode it with your own cipher while storing it in the providers database? This is not only possible it will end up changing how we develop some applications. As a developer I just want to give you the utility, if I can ensure strong encryption that I NEVER have access to, its a whole boat of liability I don’t even have to worry about.

In short we are taking the mechanics of auth and making it entirely cryptographic with keys without any worry about compromising a simple text input box. The possible combinations of certificate data and system parameters alone increases the difficulty of a breech through login significantly.

It will not stop everything of course, and the usual risks around a bad release, a failed audit and an admin bypassing things knowing or unknowingly are all still problems.

The other thing this enables, should it get that far, decentralized replacement of Google/MS/Amazon auth systems many of us MUST gate our sites with, youll be able to accept logins from multiple systems without ever having to write any new code. As the standard becomes adopted and supported firing up a site with all the usual traditional logins combined with the more-modern cert-style setup will no longer be a game of dealing with app setups and IAM, you can just load and go.

Example of difference here: I could paste my public key to my prod systems here on lemmy and it would not change a thing about access to my systems, no one with the key or any of my signatures could do anything. With certificate based auth we know both sides of the transaction as well so MITM is not a thing in most scenarios.

The system mentioned by Established here is called VRF, there is also technology called Self-Sovereign Identity aka DiD (a w3c standard)

To keep it simple, essentially we are moving to authenticators using systems that are similar to how a website identifies itself and secures your connection. For the user it will still be mostly the same, unlock device, unlock data (which I bet in some cases will STILL be password during the transition) do your thing. As time goes on and things like identity keys that we carry with us become a thing (think like a fancy version of the electronic door cards).

In general it will be much easier and less an issue to get into most systems and all of your accounts become more secure as we move away from having any data on the provider that could be used to reconstruct your password. Ofc all of this is still a bit away from being fully realized, expect rollouts to become more serious by the end of the decade.

these days password managers clear the clipboard, still the clipboard is not secure which would be why some still block it.

really its an indication we need to drop User/Pass auth once and for all.

problem is trusting those sources.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6204644/

https://academic.oup.com/nc/article/2016/1/niw013/2757133#:~:text=Subliminal manipulation is often considered,information such as single words.

simple phrases and mnemonics are amazing too, those short insulting names have more of a role than people realize.

SPE shows exactly how when you alter a worldview how that person changes. It was extreme and unintended but it showed how powerful it can be when the subjects willingly accept the game.

subliminal marketing in the form of showing single image frames was debuked, thats one of many techniques.

printed in the early 80s, written by the man who is considered the grandfather of the current Russian’ govt’s ideology and “plan”

he has the ear of putin, or did.

this guy

there were a number of university experiments on human choice often dealing with a disparity of information between the parties.

What was learned by the US government in its testing was also known. The reality is experiments like these were done very heavily up until the 60’s with the vast majority getting nixed by the early-to-late 70s

this coincides also with our release of mental patients which were as much experiment subjects as they were patients. We were mapping out people’s behavior to information stimulus for most of the 20th century.

the programs were all stopped but the information continued on and is used in many strata of our lives.

https://www.bbc.com/reel/video/p0by2ybb/mk-ultra-the-cia-s-secret-pursuit-of-mind-control-

https://en.wikipedia.org/wiki/Stanford_prison_experiment

Subliminal Marketing (one of many techniques) is banned however use of the technique in other mediums is not. https://smallbusiness.chron.com/laws-subliminal-marketing-69892.html

With regards to international actors and thier domestic collaborators, check into Foundations of Geopolitics. Its a playbook being followed.

Less social media IMO, more the weaponization of techniques first researched in the 60s-80s made real and pushed via automaton to all corners of the public internet.

The reason you become vulnerable is because you abdicate control (most had no idea) of your feed to providers that own domain names.

This was a co-option of how the internet worked previously.

• a number of nano-things
• everything monsanto has been spraying
• pfas
• micro-plastics

I want Local, Subscribed, All and Curated

Curated should be one or more filter sets that can be set by instance admins or users. Instance Curated lists are available to all users, personal are, personal.

bit of lore about the word “forum”

you would think it was the centralized providers marketing that moved from the word first but in reality it was the forums themselves. When you didn’t want your employees wasting time on the internet you would block certain words in the URI rather than certain domains. Words like “forum” and “chat” were perma-filtered at many workplaces like reddit or some other sites are today.

Many sites migrated away from using the word “forum” initially by hacking up thier default forum installs (some of those early php apps SUCKED) years before subs.

1-letter path names became a good way to obfuscate.

r=subReddit c=Community

good strat when you support that kind of thing but want to make “true” statements about dealing with hate speech.

spez has a history with some of the most disgusting subs on the site.

you sure can use imgur. also a free account at https://www.pinata.cloud/ or any other IPFS provider will let you use file storage that works similar to the fediverse itself.

ive been posting big ones on IPFS (a federated file storage network) and linking them. really might be the better way to send files around fedi. Reduces load on instances.

ive had issues on web as well, I have only managed to directly post smaller images (less than 1mb usually) since 0.18 for the most part mi9ght be a server setting now that i think on it