I’m a reddit transplant and I’m excited about what I’m seeing so far in Lemmy and the Fediverse, but my brain keeps bugging me with concerns:
Maintainability and Scalability - There are a ton of instances now. Lemmy had made it easy to spin up and host your own instance. In some cases, this means people with little/no infrastructure experience are spinning things up and are unprepared for scalability challenges and costs. This post by the maintainer of a kbin instance highlighted this challenge quite well ( https://lemmy.one/post/302078 ). How do we know if an instance is properly maintained, backed up, and is able to scale? Or should we just be prepared to start over on another instance if ours fails?
Monetization - The above cost challenges bring up monetization issues. What mechanisms will instance maintainers have to help with maintenance/hosting costs? As the Fediverse grows, how do we prevent against ads and coordinated upvoting from taking over and pushing ad content?
Legal/Privacy - Privacy regulations are becoming a mine field… GDPR, CCPA, and other privacy frameworks are making it tougher to handle privacy properly. Is there a coordinated Lemmy legal defense or are instance maintainers on their own? How would you even approach a GDPR user delete request across the fediverse?
Mastodon faces all the same challenges, and has been dealing with them for 7 years.
Unfortunately, lemmy comes with some bad default settings for when you set it up, which is the cause of the current bots inflating the user-count.
As for how to tell if an instance is trustworthy... That'd be time. I picked mine because it's local and has had years of uptime already. lemmy.world is new, but run by people who've maintained a mastodon instance before. Basically, do your research, and wish for the best. Eventually, some day, we'll have established no-brainer options like gmail and proton are for email.
Monetization, that's up to each instance admin. Mine is straight up donating the instance to the world, and not asking for donations due to its near-nothing running costs. My instance is quite small, but active. But really, a given instance could go with whatever funding model they want, provided its users are on board with it. Some have already told our admin to speak up the moment he'd like some funds.
Where malicious activity is concerned, the fediverse may have to eventually switch to using whitelists, instead of blacklists, for who they federate with. Aside from that, there are already some tools for automatically detecting instances that are not populated by real users.
On privacy, ActivityPub has none. For that, you should look to matrix. ActivityPub is for public-only interactions and has no guarantees of security. Your posts or comments are not DMs, and if you reveal personal information, you may as well have published it in a newspaper. There are no real take-backs in that kind of forum. You can have facebook or reddit delete your stuff under GDPR requirements, but your content was out there, and any saved copies are out of reach.
The same goes for deleting things on the fediverse. ActivityPub does have the featureset for it, but it can only reach server's that are still online and federated. That's little different from how other public social media works.
@MentalEdge @homesnatch Therein lies the inherent risk of using social media. You must assume that once the genie is out of the bottle, there's no stuffing it back in there and corking it. I'm probably on some watch list by a few 3 letter agencies because I am pretty outspoken about my views and they run very contrary to the accepted establishment ones. I don't drink the capitalist lemonade, I don't support cops, and I criticize government.
At the same time, you can keep your online account separate from your real identity, if you are thorough. I don't even bother anymore (not on this account), but I'm not open about who I am, either.
Not like on matrix where I just straight up use my real name.
It makes sense to me. There's a place for public forums, and one for private communication. They are mutually exclusive and should not be served by the same systems, they should be entirely separate for anyone who wants them to be.
Not like Meta, with their main public platforms of facebook and instagram, while at the same time sticking their filthy fingers into the private communication pie that is messenger and whatsapp.