Spacc BBS Spacc BBS
    • Categorie
    • Recenti
    • Tag
    • Popolare
    • Mondo
    • Utenti
    • Gruppi
    • Registrati
    • Accedi
    La nuova BBS è in fase Alpha. I post precedenti al 22 luglio 2024 potrebbero non essere trasferibili, ma rimarranno disponibili per la lettura su /old/.

    Can anyone tell me what is #NodeBB and why is it scraping and republishing fediverse content without consent?

    Pianificato Fissato Bloccato Spostato Uncategorized
    nodebb
    41 Post 10 Autori 221 Visualizzazioni
    Caricamento altri post
    • Da Vecchi a Nuovi
    • Da Nuovi a Vecchi
    • Più Voti
    Rispondi
    • Topic risposta
    Effettua l'accesso per rispondere
    Questa discussione è stata eliminata. Solo gli utenti con diritti di gestione possono vederla.
    • rairii@labyrinth.zoneR Questo utente è esterno a questo forum
      rairii@labyrinth.zone @dentangle@chaos.social
      ultima modifica di

      @dentangle @onepict @julian @julian i agree, but that's technically a different issue: currently there is no support for the discoverable/indexable flags.
      1 Risposta Ultima Risposta Rispondi Cita 0
      • gargron@mastodon.socialG Questo utente è esterno a questo forum
        gargron@mastodon.social @jonny@neuromatch.social
        ultima modifica di

        @jonny @onepict @dentangle The copy of the profile should definitely not be served up in a way that can be indexed by search engines. This must be an oversight, I'll let them know. That being said, that kind of copy exists on every Mastodon server as well, the only difference is that NodeBB has a different look.

        dentangle@chaos.socialD 1 Risposta Ultima Risposta Rispondi Cita 0
        • dentangle@chaos.socialD Questo utente è esterno a questo forum
          dentangle@chaos.social @gargron@mastodon.social
          ultima modifica di

          @Gargron @jonny @onepict As far as I can tell all public and unlisted posts are being posted publicly on the web by nodebb and have been picked up by search engines.

          I realise everything on here is effectively "public" including DMs, but there has been strong resistance until now from the community to making the fediverse searchable.

          NodeBB has broken that expectation.

          jonny@neuromatch.socialJ dentangle@chaos.socialD 2 Risposte Ultima Risposta Rispondi Cita 0
          • jonny@neuromatch.socialJ Questo utente è esterno a questo forum
            jonny@neuromatch.social @dentangle@chaos.social
            ultima modifica di

            ^ @Taweret there is definitely something to nodebb's tendency to corndog the datasets

            1 Risposta Ultima Risposta Rispondi Cita 0
            • alex@anarres.familyA Questo utente è esterno a questo forum
              alex@anarres.family @dentangle@chaos.social
              ultima modifica di

              @dentangle @onepict @ordnung

              Forum software NodeBB joins the fediverse

              This might have something to do with it.

              I'm pretty sure a Fedi instance is supposed to cache posts. That is literally what one is supposed to do.

              (So I searched for some of my previously deleted accounts. They didn't cache any of those. It seems they're being reasonably good Fedi citizens and respecting deletes.)

              onepict@chaos.socialO dentangle@chaos.socialD 2 Risposte Ultima Risposta Rispondi Cita 0
              • dentangle@chaos.socialD Questo utente è esterno a questo forum
                dentangle@chaos.social @dentangle@chaos.social
                ultima modifica di

                @Gargron @jonny @onepict Instantly updated and searchable 🙂

                gargron@mastodon.socialG 1 Risposta Ultima Risposta Rispondi Cita 0
                • onepict@chaos.socialO Questo utente è esterno a questo forum
                  onepict@chaos.social @alex@anarres.family
                  ultima modifica di

                  @alex @dentangle @ordnung Well that explains why they just did it.

                  It's just another thing to connect 🙄

                  1 Risposta Ultima Risposta Rispondi Cita 0
                  • dentangle@chaos.socialD Questo utente è esterno a questo forum
                    dentangle@chaos.social @alex@anarres.family
                    ultima modifica di

                    @alex yes, it appears to be a forum that has recently patched in fediverse support without understanding or respecting our conventions.

                    1 Risposta Ultima Risposta Rispondi Cita 0
                    • gargron@mastodon.socialG Questo utente è esterno a questo forum
                      gargron@mastodon.social @dentangle@chaos.social
                      ultima modifica di

                      @dentangle @jonny @onepict As I said, that page should have a noindex tag on it (if you know what that is), and I consider it an oversight that it doesn't. I've let the NodeBB folks know about it a few minutes ago. However, the existence of this page is completely normal. The equivalent page on mastodon.social is mastodon.social/@dentangle@chaos.social, and it is how I can talk to you despite not having an account on chaos.social.

                      onepict@chaos.socialO dentangle@chaos.socialD 2 Risposte Ultima Risposta Rispondi Cita 0
                      • onepict@chaos.socialO Questo utente è esterno a questo forum
                        onepict@chaos.social @gargron@mastodon.social
                        ultima modifica di

                        @Gargron @dentangle @jonny I'm aware of backfilling and profiles existing on fediverse instances. So are other folks.

                        My main issue is it being searchable on search engines. Plus mushing everything together without respecting the public/quiet public stuff.

                        Thank you Eugen for making them aware.

                        1 Risposta Ultima Risposta Rispondi Cita 0
                        • dentangle@chaos.socialD Questo utente è esterno a questo forum
                          dentangle@chaos.social @gargron@mastodon.social
                          ultima modifica di

                          @Gargron @jonny @onepict Thanks. Yes, I understand. I do hope it is merely an "oversight" as you put it.

                          Given the number of times we've had to slap down attempts to make the fediverse searchable it's astonishing that a fediverse developer wouldn't take more care. Mistake or not, it's a huge breach of trust.

                          thisismissem@hachyderm.ioT 1 Risposta Ultima Risposta Rispondi Cita 0
                          • thisismissem@hachyderm.ioT Questo utente è esterno a questo forum
                            thisismissem@hachyderm.io @dentangle@chaos.social
                            ultima modifica di

                            @dentangle @Gargron @jonny @onepict so at a protocol level "quiet public" doesn't really exist, all that happens in mastodon is that as:Public gets moved from `to`to `cc`, so they're effectively the same audience being addressed.

                            So NodeBB is actually right, at a protocol level, to treat public and "quiet public" as the same.

                            Though it sounds like steps will be taken to prevent indexing & display (when unauthenticated) of remote content outside of the context of a thread (you can't exactly mark sections of a page as noindex)

                            dentangle@chaos.socialD 1 Risposta Ultima Risposta Rispondi Cita 0
                            • dentangle@chaos.socialD Questo utente è esterno a questo forum
                              dentangle@chaos.social @thisismissem@hachyderm.io
                              ultima modifica di

                              @thisismissem @Gargron @jonny @onepict

                              The problem, as Gargron identified, appears to be the lack of a "noindex" tag, which in Fediverse terms is like running an SMTP open relay - a misconfiguration rather than a fault in protocol - but which should not be the default in any software, and which will get you instablocked by the entire Internet.

                              thisismissem@hachyderm.ioT 1 Risposta Ultima Risposta Rispondi Cita 0
                              • thisismissem@hachyderm.ioT Questo utente è esterno a questo forum
                                thisismissem@hachyderm.io @dentangle@chaos.social
                                ultima modifica di

                                @dentangle @Gargron @jonny @onepict right, best practice is to not make remote content directly viewable without authentication (but it may still appear in thread/reply views without authentication)

                                dentangle@chaos.socialD 1 Risposta Ultima Risposta Rispondi Cita 0
                                • dentangle@chaos.socialD Questo utente è esterno a questo forum
                                  dentangle@chaos.social @thisismissem@hachyderm.io
                                  ultima modifica di

                                  @thisismissem @Gargron @jonny @onepict yes, where "best practice" == "if I don't want my instance defederated by the majority of the fediverse"

                                  thisismissem@hachyderm.ioT 1 Risposta Ultima Risposta Rispondi Cita 0
                                  • thisismissem@hachyderm.ioT Questo utente è esterno a questo forum
                                    thisismissem@hachyderm.io @dentangle@chaos.social
                                    ultima modifica di

                                    @dentangle @Gargron @jonny @onepict the source of that best practice is more around rehosting random content and consequently having liability for that content.

                                    dentangle@chaos.socialD 1 Risposta Ultima Risposta Rispondi Cita 0
                                    • dentangle@chaos.socialD Questo utente è esterno a questo forum
                                      dentangle@chaos.social @thisismissem@hachyderm.io
                                      ultima modifica di

                                      @thisismissem @Gargron @jonny @onepict

                                      That may be the case for some instance admins, but most users are not admins.

                                      The bigger issue is that feeding fediverse toots into search engines violates conventions and the expectations of most users. That's what causes fedi-riots every time some bright spark does it.

                                      1 Risposta Ultima Risposta Rispondi Cita 0
                                      • dentangle@chaos.socialD Questo utente è esterno a questo forum
                                        dentangle@chaos.social @dentangle@chaos.social
                                        ultima modifica di

                                        Hi @julian

                                        I know you're very busy sitting on panels at #Fedicon and talking about how to make the fediverse better. Great.

                                        Unfortunately you are still running a scraper that is feeding search engines.

                                        You've been posting from the con (tip: we use alt text on pictures here on the fediverse), so I know you're online.

                                        You're following me, so you'll have seen my question. @Gargron has spoken to you too I believe.

                                        A day later, no acknowledgement or apology or fix or promise of a fix. Why?

                                        julian@community.nodebb.orgJ 1 Risposta Ultima Risposta Rispondi Cita 0
                                        • julian@community.nodebb.orgJ Questo utente è esterno a questo forum
                                          julian@community.nodebb.org @dentangle@chaos.social
                                          ultima modifica di

                                          Hi dentangle@chaos.social, I haven't been at a laptop this entire day since 7am this morning.

                                          Around then I added a change to the link tags sent for remote profiles so that they point to the canonical source (your actual profile).

                                          I'll likely just put in a redirect to your profile so it won't be accessible.

                                          1 Risposta Ultima Risposta Rispondi Cita 0
                                          • julian@community.nodebb.orgJ Questo utente è esterno a questo forum
                                            julian@community.nodebb.org
                                            ultima modifica di

                                            dentangle@chaos.social I appreciate your civility so far while I work through what needs to be done about this.

                                            1 Risposta Ultima Risposta Rispondi Cita 0
                                            • Primo post
                                              Ultimo post