Salta al contenuto principale


Mastodon says it doesn't 'have the means' to comply with age verification laws


Decentralized social network Mastodon says it can’t comply with Mississippi’s age verification law — the same law that saw rival Bluesky pull out of the state — because it doesn’t have the means to do so.

The social non-profit explains that Mastodon doesn’t track its users, which makes it difficult to enforce such legislation. Nor does it want to use IP address-based blocks, as those would unfairly impact people who were traveling, it says.

in reply to Lee Duna

There's going to come a point at which the Feds/States will lean on the ISPs to handle the censorship for them. We've had people all over the Nat Sec system staring at the "Great Firewall of China" and asking themselves "Can we get something like this over here?"
in reply to UnderpantsWeevil

This is why it's perfect time to get some tech literacy regarding tor, i2p, yggdrasil, and shadowsocks. It's not perfect solution to use tech to circumvent restrictions that shouldn't be there in the first place, but sometimes it really comes to that point and it's really nice to have all systems ready!
in reply to hisao

I have absolutely no idea what any of that is after tor. I have heard of i2p but I forget
Questa voce è stata modificata (1 mese fa)
in reply to moseschrute

  • Tor is optimized for accessing the regular internet anonymously. It uses onion routing with a small number of long-lived relays, and you exit back to the clearnet through an exit node. Hidden services (now called onion services) exist, but they’re secondary to Tor’s main use case.
  • I2P is designed primarily for internal services (called eepsites, torrents, chat, etc.) inside the I2P network itself. It doesn’t rely on exits the way Tor does. It uses garlic routing (a variant of onion routing with bundled messages), and every participant is both a client and a router, making it more peer-to-peer.
Questa voce è stata modificata (1 mese fa)
in reply to hisao

Could you be responsible for what someone else does while your using the network then?
in reply to irelephant [he/him]

Only if you're deliberately running an exit node (doing so requires special setup).
in reply to hisao

Arguably though, at some point they'll just say "if we can't read your traffic, you can't use the Internet."

Which still isn't a problem, as I'm sure we can come up with a means to encrypt traffic to make it look entirely legitimate. But it's going to take a while.

in reply to peoplebeproblems

At that point people would probably go to a p2p adhoc wireless meshnet to bypass the ISPs entirely.
in reply to einlander

Sneakernets, my friend. Never underestimate the bandwidth of a pocket full of microsd cards traveling on the subway.
in reply to Soggy

That’s why I find systems designed for high latency by being “offline-first” interesting. Sync large quantities of information when you can, then consume offline. Like Usenet and email used to be. Most things don’t actually need to be “instant”.
in reply to einlander

You mean "at which point, people will just say 'oh, ok'". (Assuming they even notice)
Questa voce è stata modificata (1 mese fa)
in reply to AnUnusualRelic

"People" will just comply. Tech savvy people like us are the only ones that could circumvent it
in reply to sexy_peach

Except we'll have to keep using it because the rest of our families and friends are going to still be on there or pester us about why we aren't there with them to share photos of your sister-in-law's baby photos and videos and your aunt Tammy's vacation photos.
in reply to sexy_peach

Except if the topic is wifi meshnets, no amount of tech savvyness will get you around an absence of other nodes nearby. General apathy is actually a huge problem here.
in reply to chicken

So what do you propose? People who aren't able should set up nodes?

Also if wifi mesh is our last hope, oof

I say that as a freifunk participant

Questa voce è stata modificata (1 mese fa)
in reply to sexy_peach

Also if wifi mesh is our last hope, oof


Yeah. What I propose is getting more people involved and caring about freedom preserving technologies before it gets to that point. A tiny minority of somewhat more tech literate people are not going to be magically immune to authoritarian checkmate scenarios through technical solutions alone.

Questa voce è stata modificata (1 mese fa)
in reply to chicken

For the last 20+ years, I've been trying to get people to understand the point of free and open formats with pretty much zero success. For the most, they just don't care if somebody else owns all they data. Maybe if something really bad was to happen to them or a loved one as a result, they'd change their mind. Then I'd get to tell them "that's what I've been telling you for literally decades", but what would be the point?

Not technical people will never get it.

in reply to AnUnusualRelic

How can you know the success is zero? Encryption is more widely used and much more resistant to political attack. Open source software is more powerful and accessible. A large portion of people loathe corporate tech platforms at a level they didn't years ago. Granted a lot of that is just down to how functional or trustworthy the software is, and what guarantees about it can be plausibly provided, and it isn't all wins. Maybe you can't exactly get everyone caring about this stuff in the same way or for the same reasons you do. But that doesn't mean there are no possible avenues to success, or that the tech habits of other groups can be written off as useless here, because it's probably the most important thing.
in reply to hisao

I've tried a few times to check out i2p, it seems to take hours of leaving it running to even get to the point where you can very slowly and inconsistently load even the official pages though.
in reply to chicken

In my experience, if you have anything but "Network: OK" status (for example, "Network: Firewalled"), it's not working properly. If you're behind a VPN, you need to port-forward and properly configure a port in I2P config/settings. Another sign that it's misconfigured is 0 participating tunnels. This is how properly configured I2P network statistics looks like with high internet bandwidth:

::: spoiler spoiler

:::

Questa voce è stata modificata (1 mese fa)
in reply to hisao

Thanks. Somehow the network actually seems to be working pretty well for me now, not sure why it wasn't before.
in reply to chicken

sometimes routers go offline before their routing commitments expire (12 minutes). maybe all your HTTP proxy tunnels got disconnected. Increasing the backup tunnel count could help
in reply to hisao

I'm making a website to aggregate all of this information. Pro net neutrality, anti censorship laymens guide. Still in the works but its called zoracle.life.
in reply to ezyryder

Confirm your URL? Domain is registered but not linking back to a website.
Questa voce è stata modificata (1 mese fa)
in reply to apftwb

it's still in the works friend!! Making the whole thing from scratch with some cameron's world esque aesthetics and a unique landing page. I can definitely let you know when its live 😀 appreciate the interest.
in reply to hisao

Hi I have no idea what any of that means. Please let me join this class.
in reply to UnderpantsWeevil

If this really about protecting kids, they could've done opt in blocking at the ISP level. Just a few new fields with ISPs and they have products that can take care of this already.

This is really about tracking every little thing you do online.

in reply to UnderpantsWeevil

All my IT and InfoSec friends have called me alarmist for suggesting even the possibility of a GFW of America, but every day that passes, it looks more and more likely to happen, doesn't it?

Start practicing circumvention techniques now, y'all, while it's still legal and cheap to do so. Learn amateur radio. Learn Meshtastic. Learn all the different censorship-resistant VPN technology out there. Host your own websites or services for friends, family, or your community. It doesn't make it impossible, but it does make it hard, and fascism is nothing if not lazy.

in reply to UnderpantsWeevil

staring at the “Great Firewall of China” and asking themselves “Can we get something like this over here?”


I've just been assuming that was the goal all along.

Fifteen years ago, I said on Reddit, "The U.S. is trying to become like China before China can become like the U.S." Of course, I got buried.

in reply to TrackinDaKraken

I've been saying some combination of China and Russia personally. It's easier to parallel now after China took over Hong Kong. Those poor kids fought so hard.

People need to understand the fascists were watching those instances too and they learned from them. The last 15 years have been like a road map for how to handle dissent and protests in a way that keeps you in power.

in reply to UnderpantsWeevil

Its already happening in Spain. Everyday there is a football match from the spanish league (thats from Friday to Monday, both included) LaLiga orders the ISPs to shutdown everything that uses Cloudflare under the pretext that the shady websites that offers pirated football use their services, killing easily 1/3 of the national traffic for like 4-6h.

Why the ISPs comply?
- The biggest ISP of the country (Movistar) also happens to be the main one that showcase legal football.

How is this legal?
- The judge that authorised this and the president of LaLiga have been friends since forever.

Eventually this will go the European court where they will rule this was illegal and anti-constitutional all along and give a Spain a fine (the the citizens have to pay), and revoke this bullshit, but untill then we are screwed. Nothing will happens to LaLiga, the judge, or Movistar, fucking privileged and corrupted bastards.

Questa voce è stata modificata (1 mese fa)
in reply to Tuxophil

Yeah, the soccer industry is full of some of the scummiest people on earth.

There's a lot of money to be made off of idiots who don't know any better for doing pretty much nothing.

Questa voce è stata modificata (1 mese fa)
in reply to hatsa122

Whoa whoa whoa! Callate chico!

You copied this from us Italians where we have the friend of Berlusconi providing the State with a censorship system (the Piracy Shield), allegedly exactly for the same reason since 2023.

Let's give the right Fascists what is theirs.

in reply to Lee Duna

Last time i checked "states rights" didn't mean the right to impose your laws on people or businesses running out of other states.

If anyone from Mississippi wants to use our services I'm totally ready to ignore any and all laws that don't acknowledge to sovereignty of the net.

Questa voce è stata modificata (1 mese fa)
in reply to Lee Duna

The more interesting question is, who would you arrest? Just ignore the law. It's unenforceable when it comes to the fediverse.
in reply to gedaliyah

Those hosting the more popular environments. The posts would live on perhaps but target enough people and it likely becomes too small for them to care anymore, sadly.
in reply to Sprawl

Yeah, considering it is not impossible to geoblock per instance, they could.
in reply to Sprawl

Push to decentralize, that is to push users from more popular instances to less popular ones, would be good then I guess.
in reply to gedaliyah

I think the instance owner would be responsible, but what if the instance is out of the state?

Unless the instance owner is on a visa, with a criminal record they could get him. But otherwise it’s hard to be enforced.

Maybe they could ask the app stores to ban apps in that states. Something like that

Also states could ask ISP blocking the main instances.

Questa voce è stata modificata (1 mese fa)
in reply to Lee Duna

So in this whole embarrassing dick measuring contest Eugen was wrong and Mike Masnick was right, then. Turns out "real decentralization" or not, Masto/Fedi's structure doesn't do anything to bypass this nonsense.

This is not new. People constanty claim AP and Fedi have benefits or features just for being decentralized that they absolutely do not have, but I have to admit I'm kinda shocked that Eugen will do that exact thing without any more self-awareness than the average Masto user. He should know better.

in reply to MudMan

Well even if mastodon.social complies, there are many many other instances to choose from, from all different countries

and even other similar platforms like Sharkey or Mbin that work with Mastodon

Questa voce è stata modificata (1 mese fa)
in reply to Die4Ever

It doesn't matter, though. They all have the same choice to make: comply, shut down in that territory... or be fined an insane amount.

Eugen argued... well, pretty much what you are arguing now. The question Bluesky guy posed to him is what Mastodon.social would do and how would the presence of smaller instances prevent the issue, especially for instances without the resources to comply at all in the first place.

Eugen did not respond to that, but Mastodon.social just did, and the answer is... Mastodon.social will do the same thing as Bluesky and so will every other instance.

Because of course it's pretty obvious that having a decentralized platform doesn't help with stupid regulation, because stupid regulation applies to every instance. There's no reason decentralization would bypass a blanket requirement unless the legal requirement has carved an exception for smaller platforms (and even then there's a question of what counts as a platform in that scenario).

And the thing is... I'm okay with you not having though that through, but Eugen certainly must have. Right? I mean, they had a pretty well thought out answer for Techcrunch in 24 hours, they must have given it some thought. It's an unforced communication error.

in reply to MudMan

It doesn’t matter, though. They all have the same choice to make: comply, shut down in that territory… or be fined an insane amount.


Those are not the only choices... not everyone can/will be fined (example: Pirate Bay)

Why are we focusing on mastodon.social? I'm not even a fan of mastodon.social. I'm not really interested in their original discussion either. Honestly I kinda hope mastodon.social does comply or lock users out so that users spread out more to other instances instead. But they aren't even close to the majority of the Fediverse anyways.

There are plenty of instances hosted in different countries that won't care about this law, or you can self host.

You do know that Eugen developed the Mastodon software, right? He's not advocating for mastodon.social, he's advocating for Mastodon.

I'm just talking about the Fediverse. Sure ATProto can theoretically avoid this too but they don't have as many choices for instances, if any at all that are outside the US and federated with Bluesky? And it seems like self hosting is much harder.

Questa voce è stata modificata (1 mese fa)
in reply to Die4Ever

We are focusing on mastodon.social because you jumped on a thread about mastodon.social confirming they won't be complying with Mississippi's age verification law, which in turn is a follow up to coverage of Bluesky doing the same thing. And also because Eugen Rochko jumped into that announcement to claim that Bluesky stepping away from that territory was an example of how Fedi's wider decentralization was an advantage, even though it turned out to no be an advantage at all.

Why would we be talking about anything else? That's literally the topic. You may be looking for a different thread. If anything, the uncontrolled impulse to talk about the ways in which AP is more decentralized than AT whether that's relevant to the conversation or not is the exact communication mistake Eugen made. Which makes doing that again even weirder.

To be clear, it doesn't matter where your instance is hosted. Mastodon.social is not hosted in Mississippi, either, it's hosted in Berlin. You're still taking on a TON of potential liability if you don't comply with their age verification or block that territory from access if the law stays in the books, just like you're risking a ton of liability if you breach GDPR even if your site isn't in the EU.

in reply to MudMan

The title says Mastodon, not mastodon.social, and it appears that Eugen was talking about the Fediverse or Mastodon, not mastodon.social specifically (hence the word decentralization, the discussion was not centralized on mastodon.social).

I think people are mixing up the discussion between Mastodon vs mastodon.social too much. Eugen and his non-profit are the developers of Mastodon, so it makes sense for them to be talking it up.

“One of the reasons Mastodon was founded was to allow different jurisdictions to have social media that is independent of the U.S.,” per the statement shared with TechCrunch. “People are free to choose to have their account on a Mastodon server whose policies meet their needs.”


That quote from the article does NOT say mastodon.social

To be clear, it doesn’t matter where your instance is hosted. Mastodon.social is not hosted in Mississippi, either, it’s hosted in Berlin.


There are other countries... watch and see how many instances just ignore the law, there will be many in the Fediverse.

I mean Pirate Bay is still running lol, so yeah I think decentralization works

Questa voce è stata modificata (1 mese fa)
in reply to Die4Ever

No, the article is about Mastodon.social's nonprofit following up with an official statement after not responding when approached about the original report.

Eugen himself was just shitting on Bluesky, his entire comment was that Bluesky leaving showed "why true decentralization is important". Ironically, that whole pissing match ended up hinging about how much Eugen was focusing on Bluesky rather than their protocol, too. Turns out to be a popular deflection and it turns out to not change anything practical.

You are retroactively trying to reinterpret the subject matter here to save face and I'm too tired right this minute to entertain it. We don't have to have a conversation, man, no hard feelings, but if you insist on having one here I'd appreciate if it wasn't about something else entirely.

in reply to MudMan

No, the article is about Mastodon.social’s nonprofit


Are you talking about Mastodon gGmbH? joinmastodon.org/de/about

Mastodon gGmbH is a non-profit from Germany that develops the Mastodon software. Mastodon started in 2016 as an open-source project by Eugen Rochko


github.com/mastodon

Mastodon gGmbH is a German non-profit developing a decentralized social network
Questa voce è stata modificata (1 mese fa)
in reply to Die4Ever

Yeah, Mastodon gGmbH also hosts mastodon.social, as far as I can tell. Or... I mean, at least that's the address and company info they show in mastodon.social's about page (not Mastodon, but mastodon.social, there are two separate About pages, both reference Mastodon's gGmbH's address).

The one thing I'll give you is that the statement they issued is talking about Mastodon software overall not having the technical tools to comply with the law in the first place and are explicitly refusing to comment on what mastodon.social will specifically do about it.

Which is irrelevant because, one presumes, if the answer was to build the tools to be able to comply with the age verification law they would have said that and put them into the Mastodon software, not just kept them exclusively for mastodon.social.

in reply to MudMan

And who are they going to address that fine to? Tell them to shove it up their fucking arse as their laws mean nothing to you if you don't live there.
in reply to Korhaka

Yeah, well, remind me not to do business with you under any circumstances.

Self hosting is cool and all, but if you think decentralized networks and services are a get out of jail free to bypass regulations applying to their centralized counterparts you shouldn't be hosting decentralized networks and services.

For one thing if you have no understanding of legal compliance I don't want you to store any of my data at all.

in reply to MudMan

I don't need to comply with American laws as I am not American. Their law literally does not apply to me
in reply to Korhaka

If you run a social media platform that hosts American users they actually might.

Same as the bar for whether GDPR applies to you isn't whether your server is physically in the EU, it's whether you're processing data from EU users. Or, in fact, how you're supposed to get explicit permission from EU users to host their data anywhere outside the EU in the first place.

Now, I'm not a lawyer in Mississippi, so I'm not gonna give you legal advice, but I would definitely look into it if I'm setting up a public instance. The same way I'd be looking into what compliance things I need to do to host people's data, both due to GDPR and due to other privacy laws around the world. It's one thing to set up for friends and family, but if you're hosting data from outsiders you probably need to understand what you're doing.

I've also not looked into what happens if you are sharing data with a noncompliant server in a restricted territory (so someone is self hosting in Mississippi and then federating with your server elsewhere). I don't think the legislators who wrote this dumb rule know, either. They clearly haven't thought that far ahead. Common sense dictates that the outside server would be fine and it'd be the local server's problem to be compliant. I presume that's what Bluesky is counting on (i.e. that someone will set up a local instance and act as an ingest bridge for them without it having to be them). Then again, you have British legislators now claiming that all VPNs need to have age controls, so I am not taking common sense for granted when it comes to these things.

in reply to MudMan

How exactly do they plan on enforcing a fine when you have no business in their country? It works on companies that have an actual presence there. But if you just don't care about that country you could completely ignore it.
in reply to Korhaka

Yeah, see, I'm not a lawyer, but I am confident enough that "committing crimes in another country remotely is safe" is absolutely terrible legal advice. Don't do that. I am confident enough in my understanding of legal matters to issue that recommendation.

I mean, I've given Rochko crap here for not thinking things through when he incorrectly suggested more decentralization would make Masto behave differently than Bluesky in this issue. I don't for a second assume he meant "because fuck it, fine me if you can, USA" or I would be giving him way more crap and closing my Masto account just in case for good measure.

in reply to katy ✨

Would have been the smart move for business, too. Just don't comply until everyone else caves and then sue the state for favoring some businesses.
Questa voce è stata modificata (1 mese fa)
in reply to finitebanjo

Sadly they were all tripping over each other for a taste of that sweet extortion money.
in reply to katy ✨

Huawei was forced to not comply and look what happened to their phones
in reply to monogram

We are neither as popular as huawei and neither chinese. We will be fine
in reply to Lee Duna

I agree with mastodon, even though eventually Texas will enact similar legislation forcing me to use a vpn to read it
Questa voce è stata modificata (1 mese fa)
in reply to limer

Woudn't it be smarter to just leave the hellhole that is Texas? Either to the north or to the south, leaving is a win.
in reply to lambalicious

Your answer seems so out of touch with reality. It feels equivalent to suggesting a depressed person to simply don't be sad.

Moving out to a different state is not easy, either because of family, job, money, studies, life or any other situation.

in reply to lambalicious

Rather than encourage people to leave, we should encourage more enlightened people to move there, and change the political climate. A lot of states are closer to flipping than people think, and Texas is one of them.
in reply to BarneyPiccolo

Rather than encourage people to leave, we should encourage more enlightened people to move there, and change the political climate


You want to put those "more enlightened people" at risk of being Gestapo'd or killed? We need them where they can actually do a net positive effect!

First clean up the shit in Texas (or any other fascist shithole) and make it livable, then live there.

in reply to Lee Duna

The thing is that works fine for the people pushing this kind of legislation. They hate how easy it is right now to spread inflammation and opinions, how quickly people can organize. This isolates their little fiefdoms and makes them easier to control.