Email or username:

Password:

Forgot your password?
Elena Rossini ⁂

A PSA for people active on #Bluesky: your block list is PUBLIC information.

A website that tracks Bluesky stats – which I am not naming here on purpose – makes this job super easy: you can enter *any* username and see the accounts a user has blocked.

(Yes I tested it with my account and was horrified)

I'm alarmed by this because the information could be weaponized for abuse.

Muting may be the safer choice then?

Please read up about Bluesky here: dustycloud.org/blog/how-decent (by @cwebber)

99 comments
Elena Rossini ⁂

Oh and I also saw who blocked *ME* - that took about 3 seconds, the information is just a click away. (No hurt feelings there, but still, truly horrified this is public information - do the blockers know this?!?)

As @cwebber wrote: "[On Bluesky] everything is public, including who you block" dustycloud.org/blog/how-decent

Martin

@_elena @luciedigitalni Re-thinking my trial of a BlueSky presence. Only thought of it due to FOMO and I don"t really think I am. The quality is here, in mastodon

DELETED

@martintheg @_elena @luciedigitalni I was there via an invite. I looked around, found it too much like the bird site (at the time) and left. Mastodon suits my social media needs quite well

Elena Rossini ⁂

@lunaticatlarge I hear you! I joined at the height of hellthreads and shitposting (April 2023) and was so intimidated by the culture I think my first post was 2 months later.

Never enjoyed it much, but I love it here - a better fit for my values

DELETED

@_elena At least here one can talk with others without the teeth marks on one's butt. 😆

lobingera

@_elena @cwebber on the "do the know this?" - people early on bsky (esp. in the invite-only phase) are pretty much aware, recent newbies might have missed this information

lobingera

@cwebber @_elena "the september that never ended", again ...

Interested parties will use the features and parties with interest of gaming a social graph will try to hide features like this

Elena Rossini ⁂

@cwebber @lobingera yes! I joined in April 2023 when it was invite-only / there were only 30000 users - and heard but forgot the block list was public 🙃

DELETED

@_elena @cwebber this is great information. Thank you. Deleted my account there but still know plenty of folks I’ll forward this to. Thanks!

Nate
Always a tricky trade off when trying to keep information private on an open protocol. If I understand it right though, a Bluesky mute is the same as an Activity Pub block - you won't see blocked things locally and the action won't be public, but since it's not public other servers can't enforce it.
Maggie Maybe

@_elena holy crap that’s BAD. Can people browse Blue Sky without logging in? When Twitter allowed it it made it really easy for people who were blocked to just log out and look at anyone’s page they want to look at. I mean at least they couldn’t contact the person who blocked them to abuse them, but they could take screenshots of tweets and talk shit.

Does Blue Sky allow that too?

Elena Rossini ⁂

@maggiejk on Bluesky you have the option of displaying your content only for people who are logged in.

Now, I can't remember if this setting needs to be turned on / if it's off by default. Maybe others can chime in?

Emilia

@_elena @maggiejk I believe it’s off by default

Elena Rossini ⁂

@Emilia @maggiejk thank you Emilia! 🙏 I vaguely remember I had to turn this on manually for my account

amd

@_elena @maggiejk Be wary. This advice is not quite accurate.

The logged in toggle is only for the Bluesky app. Anyone can still retrieve your data with an easy api call and there are websites out there that will do it for you (I’m not linking them).

A screenshot from the Bluesky app of the toggle for preventing logged out users from seeing your account on the Bluesky app view. 

The text is: 

Logged-out visibility
Discourage apps from showing my account to logged-out users
Bluesky will not show your profile and posts to logged-out users. Other apps may not honor this request. This does not make your account private.
P Note: Bluesky is an open and public network. This setting only limits the visibility of your content on the Bluesky app and website, and other apps may not respect this setting.
Your content may still be shown to logged-out users by other apps and websites.
Learn more about what is public on Bluesky.
damon

@maggiejk @_elena you can also browse mastodon without logging in. Regarding blocks if you blocked someone often all they need to do is log out and they can still see your posts. Bluesky has been transparent from the beginning which Christine has acknowledged about everything being public. Anyone with API access can see all data but that’s also true of a lot of open networks projects. Bluesky is working on it

halva
@maggiejk @_elena you can soft-private your account by disabling anonymous browsing, yeah
Elena Rossini ⁂

@dc2fla of course! I remember hearing about this months ago but I didn't take any action.

This weekend I read @cwebber 's brilliant analysis + critique of Bluesky (which included the block list issue)... which prompted me to check for myself.

I was horrified by this. With one exception:

The one block I am proud of is Martin Shkreli (my first block on there) - yes the date of the block is also public info 🙃

Diane Court

@_elena @cwebber

That was a good first choice !!
Also way more detail too easily findable 🤨

Hearted Hoof

@_elena As per the op the public nature is an inherent of the design and it is even up to an app to respect or not (so someone could write a block-ignoring app, like the one you pointed out).

Since blocking for any reason or none is part of the culture there (imho a great thing), one could perhaps camouflage any particular block with volume, say by using block lists.

Of course people can still look for specific blockers for abuse, but there's a good chance many others are also blocking them..

mj

@_elena @cwebber this plus a lack of private posting/private accounts - I'm avoiding.

Rose

@_elena A similar issue is that Bridgy Fed publicly shares your likes if they involve Bluesky users.

Elena Rossini ⁂

@rosewsgf wow! I didn’t know this! Thanks for the heads-up 🙏

amd

@rosewsgf @_elena This is just how Bluesky works. Likes are public there.

One should assume that every time you interface with Bluesky or one of their users it is wildly public.

Rose

@amd @_elena Are we talking about the same thing though? You can view the likes of a post on Mastodon, Instagram, Bluesky and so on, but the problem is that Bridgy Fed lists all the likes of a connected user on its activity feed page, making it extremely trivial to track their preferences, interests, political views, and so on.

amd

@rosewsgf @_elena A user can see who has liked their post on mastodon, sure.

You cannot view who liked someone else’s post on mastodon nor can you see everything someone on mastodon has liked.

Both of those are public info on Bluesky (and thus any connected bridges). That’s not necessarily bad, but it’s a difference people should be aware of.

Rose

@amd @_elena I certainly can see the people who liked any Mastodon post by clicking on "favorites". That part is standard and expected across all social media.

The parts about publicly tying all likes or blocks to a user are a different story requiring a different level of awareness. It reminds me of Lemmy where most people can't see the users behind the likes and dislikes, but some instances of mbin allow to see those, enabling harassment and comments like "why did you dislike my post?"

amd

@rosewsgf @_elena I was definitely mistaken here. I was looking at other mastodon servers that seem to be configured differently and did not show the favorites. I stand corrected.

My personal GoToSocial instance shows that there are likes, but does not share who liked it, as I understand it. It certainly doesn’t on the web view or to my alt account.

https://gts.amd.im/@amd/statuses/01JDJ9J5WD79RNHKJPB9ATY7BV

Karen Melchior

@_elena I share your fear, but also stand by my blocks

Elena Rossini ⁂

@karmel80 I hear you. I’m super proud of my first block: Martin Shkreli.

But even the block date is public I just realized 😅

Karen Melchior

@_elena I block those I would have or had already blocked on Twitter. Preemptive blocking :)

Androcat

@_elena @cwebber Holy fuck!

In theory, the same is true for activitypub (it was not designed for avoiding abuse, because fucking neckbeards), but I am not aware that there is a way to easily collate usernames (because of all the different instances), so it's not so big a problem.

Christine Lemmer-Webber

@androcat @_elena It is definitely not the case that you can query openly *anyone* who is blocking *anyone* in AP. It's true that Mastodon does deliver the Block activity (even though it's not compliant with the "SHOULD NOT" in AP's language about it) but even then, you can't query who's blocking who in the network as an open database

Androcat

@cwebber @_elena
Iirc, Mastodon is compliant with "should not", it's Pleroma that was developed specifically to skirt the block as a toggle.

But a server has to communicate which blocks to apply when federating, so something posing as an instance would probably enable something like this for AP in general.

However, it'd be a somewhat manual process, because Mastodon is not centralized.

Stefan Bohacek

@_elena When I learned about this, I rushed to Bluesky to make a rare post and "warn people".

But first, I wanted to search if anybody's talking about this. And people seem to already know! And are fine with it?

I think folks are already hooked, and it's like telling everyone that Twitter/X is a nazi bar two years ago.

Elena Rossini ⁂

@stefan yeah I posted about this on Bluesky this morning and got… 2 likes and 0 boosts - maybe people don’t care 🤷🏻‍♀️

Stefan Bohacek

@_elena Yeah, and don't even bother telling them that well actually Bluesky isn't really all that decentralized.

It's pretty interesting though, seeing what people are willing to put up with to stay with their community. And I don't mean that in a bad way. This shows that a social media platform has to capture a dedicated base first, and the rest will follow.

Stefan Bohacek

@_elena I really think we fumbled it with the lack of privacy and safety features, like reply controls, causing much of the newcomers to be driven away. Yeah, we don't have quote-boosts, but on Bluesky you can't even edit your messages.

Some things people complained about didn't really matter all that much. If we got some of the really important stuff right, we'd see people stick around, and eventually bring over their friends.

Stefan Bohacek

@_elena Oh well. We'll have another chance, we just have to be better ready for it.

Elena Rossini ⁂

@stefan I actually think people who are naturally drawn to Bluesky have a thirst for the usual junk-food-like features of mainstream social media platforms (algos, visible metrics, dopamine hits).

Unpopular opinion but I’m glad we didn’t get an influx of 20 million new users changing the culture of this place (sorry if I sound elitist, but it is what it is - I’m done mincing words)

Stefan Bohacek

@_elena Well I don't disagree, I wouldn't want to see certain aspects of the culture here to change, for sure.

But I would welcome some of the diversity, especially if we could be more welcoming to Black and brown folks, and creators. Makes me all that much more grateful to those who are still here, roughing it out with us.

I'm still having a much better time here than I could elsewhere if I had to compromise on my values!

Elena Rossini ⁂

@stefan i completely agree! I have a post that’s a work in progress about this very issue - how to be a better ally to POC on the Fediverse / how to make them feel safe, protected, seen and valued

Elena Rossini ⁂

@stefan i will get in touch for advice before publishing, would love your perspective on this

Stefan Bohacek replied to Elena Rossini ⁂

@_elena Thank you for considering my opinion, definitely would love to contribute!

As The World Turns

@stefan @_elena

bluesky trying to be the #Hubzilla of the #fediverse, with #identity portability. Hubzilla is based on the #Zot #protocol. Hubzilla, not recognised for its nomadic identity...take all contacts and posts to another node.

hubzilla.org/page/info/discove…

fediverse.party/en/hubzilla/

hubzilla.network/channel/hubzi…

Hubzilla is not limited to 300 characters per post like bluesky's current limitation.

Nalyd620

@_elena @stefan

I have been reading this comments on this thread and I jump between both platforms. At this point, I really don't care who sees if I block them. Honestly, most of them are horrible. Mastodon to me, is a calm space and yes, Bluesky is a bit overwhelming and I was never on Twitter.

Tom Walker

@_elena Worse, if you're a determined troll, you can pick an account you're a fan of (let's imagine it's some famous far right figure) and then go and bother everyone who has blocked them

Charles

@_elena @cwebber can someone explain why that's a big issue?

Josh Austin

@_elena It’s one of the reasons I ended up leaving Bluesky.

Louis Cyphre

@_elena @cwebber Not sure I care since I usually tell people I’m blocking you because Nazi, racist, etc. They know already.

DELETED

@_elena @cwebber

They are censoring normal people. So they are just another government-Twitter.

brotherJeffrey

@_elena @cwebber Nobody cares enough about what I say to bother with lists.

MidgePhoto

@_elena @cwebber OTOH I suppose a list of people blocked a thousand times might be made, and them asked why, looked at harder, shared etc.

nixCraft 🐧

@_elena @cwebber that will definitely open up for abuse. Thanks for the heads up. 🙏

Tony

@_elena @cwebber I don't know if you've seen this post - docs.bsky.app/blog/block-imple - from June 2023 where the team attempt to explain why Bluesky blocks are public.

It would seem they were and still are researching alternative implementations, but I don't think any changes have been made yet.

Santiago Lamelo

@_elena @cwebber

I would really proud to make my block list public.

Vern McCandlish

@_elena @cwebber
@securingdev

This is why I advocate for using the Mute feature on a lot of the lists.

Note, you can also see the lists you are on in that site, and you cannot get youself removed from a list. Others can also see all the lists you have been put on.

I do hope they change that, but that is the system now. The block there is very good, but I just don't like the idea folks can see who I have blocked.

I have experienced harassment and bullying in the past when a large creator on the bird site realized I had blocked them (I don't ever announce it) and started to rally their followers to harass me about it. That is still possible on bs, but with the added feature that anyone can do block list analysis of you (both who you block and who is blocking you)

@_elena @cwebber
@securingdev

This is why I advocate for using the Mute feature on a lot of the lists.

Note, you can also see the lists you are on in that site, and you cannot get youself removed from a list. Others can also see all the lists you have been put on.

I do hope they change that, but that is the system now. The block there is very good, but I just don't like the idea folks can see who I have blocked.

Moreno Colaiacovo

@_elena @cwebber Thank you for the info, Elena. I rarely block people, but good to know! I am not fully convinced by Bluesky, I still keep one foot in Mastodon. I wonder which platform will succeed in the long run! 🙂

Shanie

@_elena Impressively bad implementation based on their reasoning. This is a solved problem on Mastodon. Guess it's a weakness to the AT Protocol since all those "data banks" need to communicate with the master server. Oops.

docs.bsky.app/blog/block-imple

Stefan Scholl

@_elena @cwebber this doesn't convince the hardcore Bluesky bros.

Elena Rossini ⁂

@Stefan_S_from_H I know! I posted about this on Bluesky in the morning and got… 2 likes and 0 boosts 🙃

Ohsin

@_elena @cwebber I wanted to make multiple lists with many accounts for various reasons but apparently these lists would also be public..that's a no go.

John Carlsen 🇺🇸🇳🇱🇪🇺

@_elena @cwebber

That's a black eye for Bluesky.

It's like publishing the names and addresses of crime victims.

"Unlike on other centralized platforms, blocks on Bluesky are public and enumerable data, because all servers across the network need to know that they exist in order to respect the user’s request."

docs.bsky.app/blog/block-imple

sortius

@_elena @cwebber the safest choice is to not use Bluesky.

Trading one fascist run network for another is just asking for more of the same

Syd 🇪🇺

@_elena @cwebber Nice tip. Thank you.
My Bluesky account is likely to be a news browsing site rather than interacting. Probably not too much need to block.
To be honest I never really had a problem on Twitter, until I bailed out.

CM Thiede

@_elena @cwebber I hear the fear, frustration. IMO, if you want to rant to or about the world without "bad" people knowing about it, best to do it in one of those old fashioned diaries with a padlock on it. Otherwise, what goes up, can always come back down somewhere you didn't expect. Just be true to yourself. If someone, somewhere, doesn't like it, abide by and uphold the laws that "should" protect you from physical harm.

The rest, well, "sticks and stones, Love." #CaptainJackSparrow #jackSparrow

People have been persecuted for their beliefs from the beginning of time. SM just makes dog piling easier for cowards.

@_elena @cwebber I hear the fear, frustration. IMO, if you want to rant to or about the world without "bad" people knowing about it, best to do it in one of those old fashioned diaries with a padlock on it. Otherwise, what goes up, can always come back down somewhere you didn't expect. Just be true to yourself. If someone, somewhere, doesn't like it, abide by and uphold the laws that "should" protect you from physical harm.

lily 💖

@_elena @cwebber does muting stop them from following you?

Feeding America

@_elena @cwebber Thank you for reaching out to Catholic Charities USA. We are honored to be of service to you. Our mission is to offer compassionate support, resources, and a helping hand to individuals and families facing challenges in their lives. Whether you're seeking assistance with basic needs, guidance, or community services, we are here to walk with you every step of the way.

Wossen Wyatt

@_elena @cwebber I'm not surprised. They seem to make a big deal about the openness of their data. It almost makes you wish they were selling it. At least the audience would be smaller.

But... What I have noticed is that if someone follows you and you block them, they disappear from the list of your followers, BUT your follower count doesn't decrease. I found that odd.

Amandine

@_elena @cwebber I'm not there and I enjoy Mastodon but I don't get why is that bad. It allows to share blocking lists, which I think could be something good.

Christine Lemmer-Webber

@eco_amandine @_elena There's a difference between consenting to sharing a blocking list to it being openly queryable information whether you like it or not

lily 🏳️‍⚧️

@eco_amandine@mastodon.cr @_elena@mastodon.social @cwebber@social.coop bluesky has built in blocklists anyway. this is a problem, because blocklists are famously used for harassment, like in gamergate

Uilliam Mac ᚒᚔᚂᚂᚔᚐᚋ

@_elena @cwebber Not only can you see who is blocking you on that site, you can also click through and see their posts.

Kevin Karhan :verified:

@_elena @cwebber People who use #BlueSky are mostly #Stockholming #Dorsey who left it once it became clear that it'll get shutdown and banned if it was left fully #unmoderated as he wanted it to be.

lupus_blackfur

@_elena @cwebber
@mastodonmigration

Hmm...

Not already same capability for muting...??

If not, bet there soon will be.

Seems a thoroughly idiotic inclusion of an API feature that I'm betting isn't limited to "block".

Delia Christina

@_elena @cwebber

I'm curious why anyone would even *want* to see someone's block list.

Like, that just seems very high school and *let me stir the pot*-ish.

tyx

@DeliaChristina @_elena @cwebber
In a polarized society with "us vs them" being general attitude you can get a lot of troubles by being called out for avoiding contacts with some demographics or beliefs.

Deborah Yoon Zacharias

@_elena @cwebber can you share in simple terms why this is bad? How can this information be used against you?

Orca🌻 | 🏴🏳️‍⚧️

@_elena@mastodon.social @cwebber@social.coop
Muting is actually quite dangerous, in the sense that it allows people to reply shit (like doxxing or death threats) under your post without your knowledge. Blocking is definitely a necessity.

sky

@_elena I had someone on another platform ask whether this might also be true on Mastodon, since it's open source. I've explained that data isn't public just because code is, but if you can give me any other resources I can share about privacy and blocking on Mastodon I'd appreciate it -I'm not very technical!

Ek Ong Kaar K Michaud

@_elena @cwebber Excellent tip. And one reason to continue to use Mastodon while playing around in Blue Sky.

ruisan

@_elena @cwebber I was about to ask why is this important but reading the interactions to this toot I found that people consider blocks much more important than I do. In any case I don't really see why is this a problem when there is an alternative mechanism like mute, that is not public.

Christine Lemmer-Webber

@ruisan @_elena Well, Block does something else: it informs your server the user should not be listed in your replies, which is important when people are harassing you. (Ask me how I know!)

Go Up