Skip to content
0
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

fedi wiki

  1. Home
  2. Technical Discussion
  3. [@ramsey@phpc.social](https://activitypub.space/user/ramsey%40phpc.social) sounds like a problem for the next FEP ๐Ÿ˜

[@ramsey@phpc.social](https://activitypub.space/user/ramsey%40phpc.social) sounds like a problem for the next FEP ๐Ÿ˜

Scheduled Pinned Locked Moved Technical Discussion
64 Posts 10 Posters 18 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • benpate@mastodon.socialB benpate@mastodon.social

    Gavin has been doing some interesting work on this, and is considering using "Endorsements" as a vetting process for products before they're allowed on his federated marketplace.

    In the case of product reviewers, I might legitimately endorse several hundred products. The same goes for institutional endorsements, such as my college professor endorsing me as one of his students, or my collect endorsing me as a graduate.

    @scottjenson @GavinChait @ozoned

    benpate@mastodon.socialB This user is from outside of this forum
    benpate@mastodon.socialB This user is from outside of this forum
    benpate@mastodon.social
    wrote last edited by
    #41

    I'm not saying this to bring more clarity, but to say that -- as I dig into this deeper, it's harder and harder to make some clear rules.

    I'm optimistic that various "endorsement types" might help us, with corresponding expectations and norms around each one.

    I still have to digest Gavin's most recent emails, then I'll try to put something forward.

    Above all, I'm happy to be the secretary on this, but this FEP will be everyone's design.

    @scottjenson @GavinChait @ozoned

    scottjenson@social.coopS 1 Reply Last reply
    0
    • benpate@mastodon.socialB benpate@mastodon.social

      I'm not saying this to bring more clarity, but to say that -- as I dig into this deeper, it's harder and harder to make some clear rules.

      I'm optimistic that various "endorsement types" might help us, with corresponding expectations and norms around each one.

      I still have to digest Gavin's most recent emails, then I'll try to put something forward.

      Above all, I'm happy to be the secretary on this, but this FEP will be everyone's design.

      @scottjenson @GavinChait @ozoned

      scottjenson@social.coopS This user is from outside of this forum
      scottjenson@social.coopS This user is from outside of this forum
      scottjenson@social.coop
      wrote last edited by
      #42

      @benpate @GavinChait It's always a "particle/wave" type of discussion where you discuss theory for a while (which has it's concerns) then implementation for awhile (very different concerns) and you ping pong back and forth, trying to not get burnt out in the process.

      But I often find a very simple implementation detail can short circuit all sorts of theory based navel gazing. That is likely going to be the biggest hurdle, to ground the discussion so we don't wander off into "the land of the perfect design"

      gavinchait@wandering.shopG osma@mas.toO 2 Replies Last reply
      0
      • scottjenson@social.coopS scottjenson@social.coop

        @benpate @GavinChait It's always a "particle/wave" type of discussion where you discuss theory for a while (which has it's concerns) then implementation for awhile (very different concerns) and you ping pong back and forth, trying to not get burnt out in the process.

        But I often find a very simple implementation detail can short circuit all sorts of theory based navel gazing. That is likely going to be the biggest hurdle, to ground the discussion so we don't wander off into "the land of the perfect design"

        gavinchait@wandering.shopG This user is from outside of this forum
        gavinchait@wandering.shopG This user is from outside of this forum
        gavinchait@wandering.shop
        wrote last edited by
        #43

        @scottjenson @benpate my very real design requirement is that no product on my federated market can be sold without attestation from a third party reviewer. That review gates release. So, a creator invites a reviewer to review. The approval is an attestation object which permits publication of the product. But the audit trail is a chain of attestations. An instance admin endorses each of the seller & reviewer. The instance actor endorses the admin, & nodeinfo identifies the instance actor.

        gavinchait@wandering.shopG 1 Reply Last reply
        0
        • gavinchait@wandering.shopG gavinchait@wandering.shop

          @scottjenson @benpate my very real design requirement is that no product on my federated market can be sold without attestation from a third party reviewer. That review gates release. So, a creator invites a reviewer to review. The approval is an attestation object which permits publication of the product. But the audit trail is a chain of attestations. An instance admin endorses each of the seller & reviewer. The instance actor endorses the admin, & nodeinfo identifies the instance actor.

          gavinchait@wandering.shopG This user is from outside of this forum
          gavinchait@wandering.shopG This user is from outside of this forum
          gavinchait@wandering.shop
          wrote last edited by
          #44

          @scottjenson @benpate this auditable chain can be used anywhere needed, with attestation roles assigned to attestors which scopes what they're permitted to do. In a network without central authority, chained attestation is the only record of trust we can offer to create supply source transparency. Attestations can be limited: period, hashed fingerprint... Sure a famous person could endorse a product, but who endorsed them to endorse the product? What weight does that endorsement carry?

          benpate@mastodon.socialB 1 Reply Last reply
          0
          • scottjenson@social.coopS scottjenson@social.coop

            @benpate @GavinChait It's always a "particle/wave" type of discussion where you discuss theory for a while (which has it's concerns) then implementation for awhile (very different concerns) and you ping pong back and forth, trying to not get burnt out in the process.

            But I often find a very simple implementation detail can short circuit all sorts of theory based navel gazing. That is likely going to be the biggest hurdle, to ground the discussion so we don't wander off into "the land of the perfect design"

            osma@mas.toO This user is from outside of this forum
            osma@mas.toO This user is from outside of this forum
            osma@mas.to
            wrote last edited by
            #45

            I ran into this by coincidence and you donโ€™t know me, so ignore at your will. However, my experience in both social networks and currencies suggest that if you try to limit max count, youโ€™re making it more gameable. What might work is โ€œweightโ€: the more people endorse me, the more my endorsement has value. The more I spread that to others, the less one endorsement means. Itโ€™s still very gameable and a market will form, but it balances better than a hard limit. Federated accounting will be a bit of a challenge.
            @scottjenson @benpate @GavinChait

            gavinchait@wandering.shopG benpate@mastodon.socialB 2 Replies Last reply
            0
            • osma@mas.toO osma@mas.to

              I ran into this by coincidence and you donโ€™t know me, so ignore at your will. However, my experience in both social networks and currencies suggest that if you try to limit max count, youโ€™re making it more gameable. What might work is โ€œweightโ€: the more people endorse me, the more my endorsement has value. The more I spread that to others, the less one endorsement means. Itโ€™s still very gameable and a market will form, but it balances better than a hard limit. Federated accounting will be a bit of a challenge.
              @scottjenson @benpate @GavinChait

              gavinchait@wandering.shopG This user is from outside of this forum
              gavinchait@wandering.shopG This user is from outside of this forum
              gavinchait@wandering.shop
              wrote last edited by
              #46

              @osma @scottjenson @benpate it still depends what this is for. A straight "number go up" endorsement is always gameable, no matter how you try to mitigate. But endorsements of specific things for specific purposes by actors which are themselves endorsed with the authority to offer that endorsement is an attestation chain that conveys some auditable sense of trust.

              osma@mas.toO 1 Reply Last reply
              0
              • gavinchait@wandering.shopG gavinchait@wandering.shop

                @scottjenson @benpate this auditable chain can be used anywhere needed, with attestation roles assigned to attestors which scopes what they're permitted to do. In a network without central authority, chained attestation is the only record of trust we can offer to create supply source transparency. Attestations can be limited: period, hashed fingerprint... Sure a famous person could endorse a product, but who endorsed them to endorse the product? What weight does that endorsement carry?

                benpate@mastodon.socialB This user is from outside of this forum
                benpate@mastodon.socialB This user is from outside of this forum
                benpate@mastodon.social
                wrote last edited by
                #47

                @GavinChait

                I love this discussion because it gets right to the heart of the human nature, Fediverse, and what makes this the right technology for us to build on.

                And, I love the can of worms that we've opened here. I'm still reading through your email about Endorsements and Attestations probably being different beasts -- that may be a good choice. But each is going to learn from the other, so I'm eager to dig deeper into this ๐Ÿ™‚

                gavinchait@wandering.shopG 1 Reply Last reply
                0
                • benpate@mastodon.socialB benpate@mastodon.social

                  @GavinChait

                  I love this discussion because it gets right to the heart of the human nature, Fediverse, and what makes this the right technology for us to build on.

                  And, I love the can of worms that we've opened here. I'm still reading through your email about Endorsements and Attestations probably being different beasts -- that may be a good choice. But each is going to learn from the other, so I'm eager to dig deeper into this ๐Ÿ™‚

                  gavinchait@wandering.shopG This user is from outside of this forum
                  gavinchait@wandering.shopG This user is from outside of this forum
                  gavinchait@wandering.shop
                  wrote last edited by
                  #48

                  @benpate I think it's a genuine gap in AP right now, & the timing for this discussion is excellent, for me anyway.

                  benpate@mastodon.socialB 1 Reply Last reply
                  0
                  • osma@mas.toO osma@mas.to

                    I ran into this by coincidence and you donโ€™t know me, so ignore at your will. However, my experience in both social networks and currencies suggest that if you try to limit max count, youโ€™re making it more gameable. What might work is โ€œweightโ€: the more people endorse me, the more my endorsement has value. The more I spread that to others, the less one endorsement means. Itโ€™s still very gameable and a market will form, but it balances better than a hard limit. Federated accounting will be a bit of a challenge.
                    @scottjenson @benpate @GavinChait

                    benpate@mastodon.socialB This user is from outside of this forum
                    benpate@mastodon.socialB This user is from outside of this forum
                    benpate@mastodon.social
                    wrote last edited by
                    #49

                    Yes, this makes a lot of sense. Thanks for joining the conversation ๐Ÿ™‚

                    Ultimately, decisions about "who to trust" will be up to each individual app/server/user. So, we don't REALLY need that in a simple protocol design about how to publish Endorsements.

                    But, we want to work our some solid recommendations so that our first dozen implementation aren't immediately abused by the people we're trying to reign in.

                    @osma @scottjenson @GavinChait

                    benpate@mastodon.socialB 1 Reply Last reply
                    0
                    • gavinchait@wandering.shopG gavinchait@wandering.shop

                      @osma @scottjenson @benpate it still depends what this is for. A straight "number go up" endorsement is always gameable, no matter how you try to mitigate. But endorsements of specific things for specific purposes by actors which are themselves endorsed with the authority to offer that endorsement is an attestation chain that conveys some auditable sense of trust.

                      osma@mas.toO This user is from outside of this forum
                      osma@mas.toO This user is from outside of this forum
                      osma@mas.to
                      wrote last edited by
                      #50

                      That chain idea is intriguing, but will be very domain/context specific. Especially given federation, what does it mean if some links of the chain come from a different context?

                      And is an attestation ultimately the same as decentralised labels are on ATproto? While those were (I think?) created for kind of moderation, Iโ€™ve seen them being used for entirely different purposes, like signaling account age.
                      @GavinChait @scottjenson @benpate

                      benpate@mastodon.socialB 1 Reply Last reply
                      0
                      • benpate@mastodon.socialB benpate@mastodon.social

                        Tagging those who contributed to the `Endorse` activity design. Here's an update

                        https://github.com/EmissarySocial/fep-endorsements

                        There's more work to do, but it's enough that your input is super valuable. Another round and I'll post to codeberg.

                        Feel free to share with anyone with informed opinions, and no worries if you're busy/sick/uninterested/whatever - absolutely no obligation to join in ๐Ÿค“

                        @scottjenson @DePemig @thisismissem @johannab
                        @oli @laurenshof @wjmaggos @smallcircles @GavinChait @evan
                        @iftas @tchambers

                        julian@activitypub.spaceJ This user is from outside of this forum
                        julian@activitypub.spaceJ This user is from outside of this forum
                        julian@activitypub.space
                        wrote last edited by
                        #51

                        @benpate@mastodon.social I'm envisioning a sort of "DNS-like" endorsements flow where I as a server want to know whether this "Ben Pate" fellow is trustworthy, so:

                        1. My software asks the only person it trusts, activitypub.social, who responds with "no clue, but I trust fosstodon.org, so ask there"
                        2. So it asks fosstodon.org, who says "no clue, but I trust mastodon.social and someothersite.social, so ask them"
                        3. So it asks mastodon.social and it says "yes I know Ben Pate, he's a pretty cool fellow"

                        <img class="not-responsive emoji" src="https://activitypub.space/assets/plugins/nodebb-plugin-emoji/emoji/android/2714.png?v=c7cc56fe415" title="โœ”" />

                        <img class="not-responsive emoji" src="https://activitypub.space/assets/plugins/nodebb-plugin-emoji/emoji/android/1f937.png?v=c7cc56fe415" title="๐Ÿคท" />

                        1 Reply Last reply
                        0
                        • benpate@mastodon.socialB benpate@mastodon.social

                          Yes, this makes a lot of sense. Thanks for joining the conversation ๐Ÿ™‚

                          Ultimately, decisions about "who to trust" will be up to each individual app/server/user. So, we don't REALLY need that in a simple protocol design about how to publish Endorsements.

                          But, we want to work our some solid recommendations so that our first dozen implementation aren't immediately abused by the people we're trying to reign in.

                          @osma @scottjenson @GavinChait

                          benpate@mastodon.socialB This user is from outside of this forum
                          benpate@mastodon.socialB This user is from outside of this forum
                          benpate@mastodon.social
                          wrote last edited by
                          #52

                          So, we're looking for some kinds of signals that would identify a botnet (or a bunch of sock puppet accounts) so that we could not simply trust a self-referential ring of bad actors.

                          So:
                          A Endorses-> B
                          B Endorses -> C
                          C Endorses -> A

                          Imagine this X 10,000 fake accounts ๐Ÿ˜ฑ

                          So, with your "weights" idea, the value of each endorsement might be computed as a fraction of the total number of endorsements I've issued?

                          @osma @scottjenson @GavinChait

                          osma@mas.toO 1 Reply Last reply
                          0
                          • gavinchait@wandering.shopG gavinchait@wandering.shop

                            @benpate I think it's a genuine gap in AP right now, & the timing for this discussion is excellent, for me anyway.

                            benpate@mastodon.socialB This user is from outside of this forum
                            benpate@mastodon.socialB This user is from outside of this forum
                            benpate@mastodon.social
                            wrote last edited by
                            #53

                            โ˜๐ŸปI endorse this statement.

                            @GavinChait

                            scottjenson@social.coopS 1 Reply Last reply
                            0
                            • benpate@mastodon.socialB benpate@mastodon.social

                              I'll let Gavin detail his use case, but I think the "root" is relative to each observer.

                              From my POV as a user, or the application running on my server, I think the "root" in this case would be the application account on each server. From there, we could branch out to see who WE trust, which is probably similar-but-not-quite-the-same as who someone else might trust.

                              Does that make sense?

                              @osma @GavinChait @scottjenson

                              gavinchait@wandering.shopG This user is from outside of this forum
                              gavinchait@wandering.shopG This user is from outside of this forum
                              gavinchait@wandering.shop
                              wrote last edited by
                              #54

                              @benpate @osma @scottjenson yeah, it's not about time order. It's about traceability & evidence.

                              Going backwards in my use case:
                              Book -> attestations for authorship & editorial approval.
                              Authorship -> attestation that author appointed editor
                              Editor -> attestation that instance admin recognises editorial role
                              Admin -> instance attests admin appointment

                              Each critical attestation can answer the question: what is being attested, who is doing the attesting, & by what authority?

                              scottjenson@social.coopS osma@mas.toO 2 Replies Last reply
                              0
                              • scottjenson@social.coopS scottjenson@social.coop

                                @benpate @GavinChait I think this is a lovely example for us to work through, but it does feel different than Ben's original point. The original point was, what can I know StrangerA? It was fairly lightweight. It was just like, oh, I know the three people that claim they know StrangerA. That is genuinely helpful.

                                However attestation feels like it's entering whole other domain. I'm not against it, but it feels like a V2 of the protocol. Does that make sense? I generally prefer walking before running...

                                julian@activitypub.spaceJ This user is from outside of this forum
                                julian@activitypub.spaceJ This user is from outside of this forum
                                julian@activitypub.space
                                wrote last edited by
                                #55

                                @scottjenson@social.coop <img class="not-responsive emoji" src="https://activitypub.space/assets/plugins/nodebb-plugin-emoji/emoji/android/1f4af.png?v=b232808582d" title="๐Ÿ’ฏ" /> in favour of walking before running

                                1 Reply Last reply
                                0
                                • System moved this topic from [[category:uncategorized]]
                                • scottjenson@social.coopS scottjenson@social.coop

                                  @ramsey @GavinChait @benpate @tchambers
                                  I agree with your concerns. This is what I meant by the complexity issue in a previous thread. It *is* YAF (yet another feature) and if we're not careful, people just a) won't get it or b) not be bothered.

                                  But need is clear. Follows and likes aren't enough. This is a public connection *between* two people. That is its difference. It's power comes from the "rel=me" aspect of both people agreeing. That appears powerful. It is a stronger signal to to build a web of trust, feels decentralized, durable, and seemingly unspoofable (I hope?).

                                  But we really do have to keep it simple. Maybe we call it something else? But I'm hearing the concern that you feel it's not actually that valuable? Do I have that right?

                                  gavinchait@wandering.shopG This user is from outside of this forum
                                  gavinchait@wandering.shopG This user is from outside of this forum
                                  gavinchait@wandering.shop
                                  wrote last edited by
                                  #56

                                  @scottjenson @ramsey @benpate @tchambers I think it's more "how do you intend for this to be used?" than whether important or not. I never use likes, but some people prefer them. The affordance isn't a problem. More that we don't overclaim what it can be used for.

                                  scottjenson@social.coopS 1 Reply Last reply
                                  0
                                  • gavinchait@wandering.shopG gavinchait@wandering.shop

                                    @scottjenson @ramsey @benpate @tchambers I think it's more "how do you intend for this to be used?" than whether important or not. I never use likes, but some people prefer them. The affordance isn't a problem. More that we don't overclaim what it can be used for.

                                    scottjenson@social.coopS This user is from outside of this forum
                                    scottjenson@social.coopS This user is from outside of this forum
                                    scottjenson@social.coop
                                    wrote last edited by
                                    #57

                                    @GavinChait
                                    I started to sketch a couple of designs and quickly ran into some serious questions that might be helpful for us to discuss here. Let's start with a simple one. What do we show the user? Do we show them a number between zero and one?

                                    There's a lot of magic here, and if we're not careful, we'll make it far too complex to the user. I'm leaning towards a simple three icon approach: low (some type of endorsement) medium (good endorsement) and high (exceptionally strong). There can also be NO icon at all.

                                    I don't think someone cares if someone is 67% endorsed versus 78% endorsed.

                                    I also think that endorsements are going to be somewhat rare (at least at first) so the chances of this icons showing up AT ALL is quite low. I'm playing with the idea that your followers endorsements act as a weak signal (low). This provides a 'gateway scoring' system that gets people exposed without initiallying having any endorsements of their own.

                                    Thoughts?

                                    @ramsey @benpate @tchambers

                                    ramsey@phpc.socialR 1 Reply Last reply
                                    0
                                    • scottjenson@social.coopS scottjenson@social.coop

                                      @GavinChait
                                      I started to sketch a couple of designs and quickly ran into some serious questions that might be helpful for us to discuss here. Let's start with a simple one. What do we show the user? Do we show them a number between zero and one?

                                      There's a lot of magic here, and if we're not careful, we'll make it far too complex to the user. I'm leaning towards a simple three icon approach: low (some type of endorsement) medium (good endorsement) and high (exceptionally strong). There can also be NO icon at all.

                                      I don't think someone cares if someone is 67% endorsed versus 78% endorsed.

                                      I also think that endorsements are going to be somewhat rare (at least at first) so the chances of this icons showing up AT ALL is quite low. I'm playing with the idea that your followers endorsements act as a weak signal (low). This provides a 'gateway scoring' system that gets people exposed without initiallying having any endorsements of their own.

                                      Thoughts?

                                      @ramsey @benpate @tchambers

                                      ramsey@phpc.socialR This user is from outside of this forum
                                      ramsey@phpc.socialR This user is from outside of this forum
                                      ramsey@phpc.social
                                      wrote last edited by
                                      #58

                                      @scottjenson @GavinChait @benpate @tchambers What is low/med/high a calculation of? IOW, when someone endorses you, is it like favoriting them, thumbs up or thumbs down (i.e., โ€œdownโ€ de-ranks them), or a rating system (e.g., 1-5 stars)?

                                      I could see how thumbs up/down or ratings can lead to low/med/high scores, but just a simple โ€œI endorseโ€ toggle wonโ€™t have much signal, unless itโ€™s treated as a percentage against followers or some kind of static thresholds (e.g., <25 is low, <100 is med, etc.).

                                      ramsey@phpc.socialR 1 Reply Last reply
                                      0
                                      • ramsey@phpc.socialR ramsey@phpc.social

                                        @scottjenson @GavinChait @benpate @tchambers What is low/med/high a calculation of? IOW, when someone endorses you, is it like favoriting them, thumbs up or thumbs down (i.e., โ€œdownโ€ de-ranks them), or a rating system (e.g., 1-5 stars)?

                                        I could see how thumbs up/down or ratings can lead to low/med/high scores, but just a simple โ€œI endorseโ€ toggle wonโ€™t have much signal, unless itโ€™s treated as a percentage against followers or some kind of static thresholds (e.g., <25 is low, <100 is med, etc.).

                                        ramsey@phpc.socialR This user is from outside of this forum
                                        ramsey@phpc.socialR This user is from outside of this forum
                                        ramsey@phpc.social
                                        wrote last edited by
                                        #59

                                        @scottjenson @GavinChait @benpate @tchambers What happens to your endorsements or to those you endorsed when you move servers?

                                        julian@activitypub.spaceJ benpate@mastodon.socialB scottjenson@social.coopS 3 Replies Last reply
                                        0
                                        • ramsey@phpc.socialR ramsey@phpc.social

                                          @scottjenson @GavinChait @benpate @tchambers What happens to your endorsements or to those you endorsed when you move servers?

                                          julian@activitypub.spaceJ This user is from outside of this forum
                                          julian@activitypub.spaceJ This user is from outside of this forum
                                          julian@activitypub.space
                                          wrote last edited by julian@activitypub.space
                                          #60

                                          @ramsey@phpc.social sounds like a problem for the next FEP ๐Ÿ˜

                                          @benpate@mastodon.social @scottjenson@social.coop

                                          1 Reply Last reply
                                          0

                                          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                                          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                                          With your input, this post could be even better ๐Ÿ’—

                                          Register Login
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          • First post
                                            Last post