3 ms·

Mastodon has a migration path for users to move to other instances. So when the server admins allow it (i.e. don't just shutdown, or kick someone off) moving is

by berkes 4y ago

Mastodon has a migration path for users to move to other instances. So when the server admins allow it (i.e. don't just shutdown, or kick someone off) moving is rather easy. Today, several in my mastodon timeline mentioned they finished the move. But without them mentioning, I, an outstander (i'm on another instance) wouldn't notice it. What will happen, though, is that a portion of the users won't migrate. Either because they forget, or they can't be bothered, are "zombie accounts", or because its too challenging: it does involve down- and uploading and/or copypasting zips/datafiles. This means a bit of pruning or culling, and that could be considered good, IDK. What will also happen, on a more technical level, is that other instances and maybe bots and automation will hit timeouts and connection errors when it really shuts down. Most instances and fediverse software can handle this just fine, it's built with this mind; it might at most cause some overhead and load. Some flakey or poorly developed software might crash or break (for a moment).

ElCheapo 4y ago
Well, seems like this is a clear path for improvement: a decent UI tool for migration between instances
- rapnie 4y ago
  Such mechanism already exists. Look for the comment by @nightpool It works best between Mastodon instances, but between different apps the migrations are often also supported. New apps like GoToSocial have the migration still as open issue sitting in their tracker, but will support as well.
bondarchuk 4y ago
Wouldn't it make sense for there to be a cryptographic verification based on a private key held by the user, so that they can prove to other servers/users that they are the same account as one that existed on a server that has shut down already? Is there something like that in Mastodon?
- Kye 4y ago
  I think most people in this situation do the same thing people do on Twitter when it suspends an account for nonsense reasons like telling a Nazi to eat paste: make another, make a post, share it with a few friends off Twitter/Mastodon, have them RT/boost to circulate it within their circles. This seems to work pretty well. Cryptographic certainty is fun to think about, but sometimes you just need people.
- KvanteKat 4y ago
  It doesn't involve cryptography, but mastodon has for at least a couple of years supported link-verification in profiles (it basically checks if a link back to your mastodon profile exists on a page linked on your profile), so a linking to a page that only you credibly control (say, a personal website) is the de-facto system of decentralized user-verification on mastodon. Edit: supported since 2018 https://github.com/mastodon/mastodon/pull/8703 https://github.com/mastodon/mastodon/pull/8703
  - jefftk 4y ago
    It does sort of involve crypto: if the page you control weren't served over HTTPS it wouldn't be too hard (DNS poisoning) for someone else to trick a server into verifying the wrong user.
    - account42 4y ago
      If DNS poisoning is so easy why don't you perform the same attach on Let's Encrypt since that also uses plain HTTP.
      - jefftk 4y ago
        Certificate Authorities are extremely careful about DNS (and BGP hijacking), more so than basically everyone else.
orblivion 4y ago
> Today, several in my mastodon timeline mentioned they finished the move. But without them mentioning, I, an outstander (i'm on another instance) wouldn't notice it. Do you mean that part of the protocol allows for a migration process that includes changing who your follows are pointing at? (assuming all servers involved are up to date and have this feature) I.e. did your account automatically start following your friends' new accounts?
- colatkinson 4y ago
  Yeah, this is how it works. I don't know the technical details/internal terminology, but I've definitely had a few accounts I follow switch servers for various reasons. It was basically just "oh hey so-and-so's handle changed" from my perspective, which is kinda neat.
- nightpool 4y ago
  Yes. The process has three steps: First, you update the receiving profile to "allow" the move by pointing at each other using the as:alsoKnownAs relationship. This allows everybody to confirm that the receiving account is participating in the move, and authorizes it. Then, you update your old account with the "movedTo" property, so that any new users who look up your account will see a notification that you've moved. Finally, you send out a Move activity to all of your followers, pointing at the new account. Automatically, all of your old followers who receive the Move activity will send Follow activities to the new "receiving" profile. This process doesn't update any of the old content from your account, which was regarded at the time as a necessary simplification because of the issues of updating canonical URIs for accounts on one system to accounts on another system (different software might have different expected routes, you might need to store lookup tables, etc etc. It just opens up a huge can of worms). In practice this doesn't really matter that much since Mastodon is used primarily for microblogging and less for, well, actual blogging. If you were designing a more fully-featured social blogging platform like a Medium or Tumblr equivalent you'd probably want to put some more thought into that side of things.
  - ihuman 4y ago
    If it doesn't update the old content on your old account, then is there a way to copy the old content to your new account?
commandlinefan 4y ago
> a migration path for users to move to other instances Thanks for clarifying - without that bit of background, this post reads like, "if I can't have it, no one can". But I guess the post is directed at people who do understand the background behind mastodon in general (which I and OP didn't).

by berkes 4y ago

ElCheapo 4y ago

Well, seems like this is a clear path for improvement: a decent UI tool for migration between instances

rapnie 4y ago
Such mechanism already exists. Look for the comment by @nightpool It works best between Mastodon instances, but between different apps the migrations are often also supported. New apps like GoToSocial have the migration still as open issue sitting in their tracker, but will support as well.

bondarchuk 4y ago

Wouldn't it make sense for there to be a cryptographic verification based on a private key held by the user, so that they can prove to other servers/users that they are the same account as one that existed on a server that has shut down already? Is there something like that in Mastodon?

Kye 4y ago
I think most people in this situation do the same thing people do on Twitter when it suspends an account for nonsense reasons like telling a Nazi to eat paste: make another, make a post, share it with a few friends off Twitter/Mastodon, have them RT/boost to circulate it within their circles. This seems to work pretty well. Cryptographic certainty is fun to think about, but sometimes you just need people.
KvanteKat 4y ago
It doesn't involve cryptography, but mastodon has for at least a couple of years supported link-verification in profiles (it basically checks if a link back to your mastodon profile exists on a page linked on your profile), so a linking to a page that only you credibly control (say, a personal website) is the de-facto system of decentralized user-verification on mastodon. Edit: supported since 2018 https://github.com/mastodon/mastodon/pull/8703 https://github.com/mastodon/mastodon/pull/8703
- jefftk 4y ago
  It does sort of involve crypto: if the page you control weren't served over HTTPS it wouldn't be too hard (DNS poisoning) for someone else to trick a server into verifying the wrong user.
  - account42 4y ago
    If DNS poisoning is so easy why don't you perform the same attach on Let's Encrypt since that also uses plain HTTP.
    - jefftk 4y ago
      Certificate Authorities are extremely careful about DNS (and BGP hijacking), more so than basically everyone else.

orblivion 4y ago

> Today, several in my mastodon timeline mentioned they finished the move. But without them mentioning, I, an outstander (i'm on another instance) wouldn't notice it. Do you mean that part of the protocol allows for a migration process that includes changing who your follows are pointing at? (assuming all servers involved are up to date and have this feature) I.e. did your account automatically start following your friends' new accounts?

colatkinson 4y ago
Yeah, this is how it works. I don't know the technical details/internal terminology, but I've definitely had a few accounts I follow switch servers for various reasons. It was basically just "oh hey so-and-so's handle changed" from my perspective, which is kinda neat.
nightpool 4y ago
Yes. The process has three steps: First, you update the receiving profile to "allow" the move by pointing at each other using the as:alsoKnownAs relationship. This allows everybody to confirm that the receiving account is participating in the move, and authorizes it. Then, you update your old account with the "movedTo" property, so that any new users who look up your account will see a notification that you've moved. Finally, you send out a Move activity to all of your followers, pointing at the new account. Automatically, all of your old followers who receive the Move activity will send Follow activities to the new "receiving" profile. This process doesn't update any of the old content from your account, which was regarded at the time as a necessary simplification because of the issues of updating canonical URIs for accounts on one system to accounts on another system (different software might have different expected routes, you might need to store lookup tables, etc etc. It just opens up a huge can of worms). In practice this doesn't really matter that much since Mastodon is used primarily for microblogging and less for, well, actual blogging. If you were designing a more fully-featured social blogging platform like a Medium or Tumblr equivalent you'd probably want to put some more thought into that side of things.
- ihuman 4y ago
  If it doesn't update the old content on your old account, then is there a way to copy the old content to your new account?

commandlinefan 4y ago

> a migration path for users to move to other instances Thanks for clarifying - without that bit of background, this post reads like, "if I can't have it, no one can". But I guess the post is directed at people who do understand the background behind mastodon in general (which I and OP didn't).