If you have a sufficiently horrible boss, you might have heard them use the phrase, "One throat to choke," by which they mean, "We must arrange this project so there's one person I can blame and punish if it goes awry.
--
If you'd like an essay-formatted version of this thread to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:
pluralistic.net/2025/09/16/too…
1/
Debby ⁂📎🐧 reshared this.
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
The problem with "one throat to choke" is that this is another word for *chokepoint*. If the person who has ultimate authority over the system somehow manages to evade your discipline, there's no one else you can approach to resolve any arguments about how the system should work. "One throat to choke" is a single point of failure. That can be a nice arrangement if you're in charge of that chokepoint, but if not, it means you're SOL.
2/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
The digital world is in the process of bifurcating. The dying, legacy systems are the zuckermuskian, centralized ones, where there's always one throat to choke. If you don't like the moderation, recommendation, or other policies on Google, Twitter, Facebook or Amazon, you know *exactly* who to blame. If you're a lawmaker or a regulator, you know exactly who to drag into court.
3/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Then there's the new, exiting, free and open digital technology that's crawling out of the half-dead carcass of Big Tech: federated and decentralized systems like Mastodon (and the Fediverse) and Bluesky (and the Atmosphere). While both of these networks have official maintainers who oversee their open source software projects.
4/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
While both groups of maintainers also run the servers that dominate their networks, you can absolutely join and participate without the consent of the organizations that created and maintain them, and they can't stop you or kick you off.
That's what decentralization means - if you don't like a user or their behavior, there's no manager to speak to in order to have them removed.
5/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Sure, a user can be kicked off of some servers, even *all* the servers, but the user can still stand up their *own* server. So long as there are other users, somewhere on the internet, who want to interact with that person, they can continue to connect with one another.
Now, you'd think that the Maga movement would love this - and they do...to a point. Trump's Truth Social is just a Mastodon server, albeit one that very few other Mastodon servers have any connections to.
6/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
But the Maga movement is incapable of imagining a world in which the power it arrogates to itself will ever fall into the hands of its enemies. They want the power to send troops into cities they don't like, to federally dictate election procedures, to fire any federal official without cause, to override Congress's budgetary edicts, to be insulated from all liability irrespective of criminality.
7/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Maga desires these powers within the borders of the United States because it intends to abolish free and fair elections and install a dictatorship, which means they they won't have to worry about Democrats ever controlling the presidency and turning those weapons around.
But even if they manage this trick in the USA, they won't be able to pull it off on the internet.
8/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
There are simply too many territories in which federated, decentralized services can domicile themselves, places that are not only outside America's jurisdiction, but where the local authorities are hostile to the idea of extraterritorial intrusions by the US state on their domestic affairs.
9/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
The American culture warriors, obsessed with the idea that tech platforms have shadow banned, downranked, deplatformed and demonetized them, want to bring Big Tech to heel. And since each Big Tech company has just one throat to choke, they think they can do it.
Take "age verification," the latest social contagion sweeping through authoritarian governments around the world.
10/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
In the name of keeping kids from seeing stuff that's not kid-friendly online (a reasonable goal), governments are demanding that tech companies somehow deduce the ages of their users and block them from seeing adult materials. Some age verification proponents claim that it's possible to verify a user's age without creating as massive privacy catastrophe that reveals the browsing habits of every internet user, of every age. These people are wrong:
pluralistic.net/2025/08/14/bel…
11/
Pluralistic: “Privacy preserving age verification” is bullshit (14 Aug 2025) – Pluralistic: Daily links from Cory Doctorow
pluralistic.netCory Doctorow
in reply to Cory Doctorow • • •Sensitive content
The only way to verify that a user is a child is to verify the user, which means performing extraordinarily invasive checks on *every* internet user, and storing the results of those checks, and, inevitable, *leaking* the result of those checks.
The Big Tech companies are delighted by this. Google and Meta have both offered to do a kind of digital phrenology on their users to determine their ages.
12/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
After all, they spy on us so much that they can probably make a good guess about our ages. And if they guess wrong, well, no biggie, they'll just block all the edge cases and force users to provide them with *even more* sensitive data.
But the future-proof, federated, decentralized services *can't* do age verification.
13/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Oh, sure, some of the *servers* in these federations can verify their users' age, and they might have to, because you can always find that single throat to choke for the people running the main Mastodon and Bluesky servers. But you can use Mastodon and Bluesky without using those servers - and they can't stop you.
This is something that the Turkish dictator Recep Tayyip Erdoğan discovered last spring, whe he ordered Bluesky to block information about his political rivals.
14/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
All Bluesky can do in these cases is flag some messages as "banned in Turkiye" and then turn on the "block banned in Turkiye posts" filter for Turkish accounts. Those users can just turn that filter off, or avail themselves of a third-party client that doesn't auto-subscribe them to "block banned content" filters:
gizmodo.com/bluesky-just-bowed…
15/
Bluesky Just Bowed to Censorship Demands in Turkey, but There's a Loophole
Lucas Ropek (Gizmodo)Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
That's what it means for a service to be a protocol, not a platform. It means you can't demand to speak to the manager of the protocol if you don't like how someone is using it. It means there isn't a single throat to choke:
knightcolumbia.org/content/pro…
Today, the new, future-proof federated services are trying to figure out how to comply with age verification orders. Bluesky has announced that it will age verify UK users:
theverge.com/news/704468/blues…
16/
Bluesky is rolling out age verification in the UK
Emma Roth (The Verge)Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
But you don't have to interact with the Bluesky servers to use Bluesky. While Bluesky was (very) slow off the mark to enable the tooling that would allow anyone to talk to anyone else using Atproto (the underlying protocol) without Bluesky's permission, that day has arrived now.
17/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
There are now Bluesky (the service) implementations that are entirely separated from the authority of Bluesky (the company), most notably Blacksky, created by and for Black social media users who lived through Musk's enshittification of Black Twitter and won't get fooled again:
techdirt.com/2025/08/27/techdi…
Meanwhile, Mastodon (the organization) has said that it doesn't have "the means" to comply with age verification rules in Mississippi:
techcrunch.com/2025/08/29/mast…
18/
Mastodon says it doesn't 'have the means' to comply with age verification laws | TechCrunch
Sarah Perez (TechCrunch)Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
The Mastodon server operated by the Mastodon organization has a policy barring under-16s from getting an account there. But there are many, many Mastodon servers (including, you'll recall, Truth Social) and they are all technically capable of talking with one another.
19/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Even if Mastodon (the organization) implemented some kind of invasive age verification on its server, other organizations - so distant from Mississippi as to be beyond legal retribution - could sign up users of any age, at its discretion.
One wrinkle here is whether there is an "enforcement nexus" between one of these independent Mastodon or Bluesky servers and a government seeking to impose age verification or other censorship policies.
20/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
If you're running one of these servers, you wanna be sure your throat is out of choking range of these governments:
pluralistic.net/2023/03/05/the…
The easiest way to do this is to not have any personnel or assets in territories controlled by governments seeking to impose censorship requirements. Large corporations whose investors made a bet on global domination find this tradeoff difficult to make. They want to open sales offices in every country.
21/
They’re still trying to ban cryptography – Pluralistic: Daily links from Cory Doctorow
pluralistic.netCory Doctorow
in reply to Cory Doctorow • • •Sensitive content
But co-ops, individual tinkerers and small businesses typically don't have assets or personnel in a lot of countries or states, and avoiding the censorious ones doesn't pose much of a challenge.
The other enforcement nexus to worry about isn't enforcement against a server's operators, but rather, enforcement against its *data*.
22/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Territories with national firewalls (or heavily concentrated ISPs who represent a tractable number of chokeable throats) can block noncompliant servers from their users (who might or might not avail themselves of VPNs to evade thse blocks).
There aren't many national firewalls, and enumerating all the noncompliant servers in the Fediverse is a big chore for their operators (less so for all the noncompliant Atmostphere servers, because there's just not that many of those-yet).
23/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
On the other hand, the mobile device duopoly of Google and Apple represent a pair of trivially chokeable throats that can be used to extinguish any app that displease a country's censors (all the more reason to make everything web-first and treat apps as unreliable adjuncts to core web functionality).
24/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
But there's one more potential chokepoint: to the extent that the Bluesky (the service) or Mastodon (the service) maintain some nexus of control over users, even users on independent servers, they could come under pressure to terminate users that displease governments.
25/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Now, Mastodon has no such control over users, and if it tried to exert that control (for example, by pressuring an independent server to terminate their users' access), they could be sued for tortious interference with contract.
Unfortunately, Bluesky has chosen to insulate itself from that hedge against being the chokeable throat that is used as a means to exerting pressure on independent servers in the Atmosphere.
26/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Bluesky's Terms of Service trap all of its users in a "binding arbitration" waiver that forces them to surrender their right to sue. That means that if Bluesky were to threaten Blacksky in a bid to force it to do age verification or engage in some other form of censorship, anyone involved with Blacksky who ever created a Bluesky account would be unable to use to courts to defend themselves:
pluralistic.net/2025/08/15/dog…
27/
Pluralistic: Bluesky creates the world’s weirdest, hardest-to-understand binding arbitration clause (15 Aug 2025) – Pluralistic: Daily links from Cory Doctorow
pluralistic.netCory Doctorow
in reply to Cory Doctorow • • •Sensitive content
(However, if you set up a Bluesky server without *ever* joining Bluesky (the service) and clicking through its ToS, you're golden.)
Of course, none of this matters to Maga - but it should. Decentralized systems with no readily chokeable throats are *good* for people with disfavored views, and that includes a *lot* of the Maga movement. Remember, Trump's agenda is *incredibly* unpopular:
navigatorresearch.org/wp-conte…
28/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Someday, Maga is going to find that their enemies have found the right throat to choke to silence them. But Maga's useful idiots just keep on stepping on this rake - these are the same self-owning fools who opposed municipal fiber and thus ensured that if just a handful of giant ISPs decided to deplatform you, you'd disappear from the internet:
pluralistic.net/2022/12/15/use…
29/
Pluralistic: How cable monopolists tricked conservatives into shooting themselves in the face (15 Dec 2022) – Pluralistic: Daily links from Cory Doctorow
pluralistic.netCory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Bluesky users were furious when JD Vance joined the service. Maga culture warriors were furious when Bluesky users called for his account to be terminated. Both groups are *nuts*. If Bluesky lives up to its promise - if it becomes an unchokeable, future-proof, decentralized social media protocol, and not merely a platform, then there's *no way* to kick JD Vance off Bluesky (the service).
30/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
All you can do is demand that Bluesky (the server) cut off his account, whereupon he will immediately decamp to another server where he is more welcome, and still able to communicate with any Bluesky user who wants to hear from him.
31/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
Progressives should want this, because it's *far* more likely that Bluesky will be pressured to terminate users for failing to be insufficiently demonstrative in their anguish over the Charlie Kirk shooting than it is that Bluesky will be pressured to terminate the Vice President of the USA.
32/
Cory Doctorow
in reply to Cory Doctorow • • •Sensitive content
But *Conservatives* should want this too - because if they're *really* worried about "deplatforming" and "Big Tech censorship," then they should be trying to create a new internet where deplatforming and Big Tech censorship are *impossible* - not an internet where *they* decide who gets deplatformed and censored.
eof/
Mina
in reply to Cory Doctorow • • •Sensitive content
Wait!
"Truth" social is a Mastodon server?
I had no idea.
Matt
in reply to Cory Doctorow • • •Cory Doctorow reshared this.