Another win for the decentralized Fediverse when a government domain takeback can’t shut it down!

Mali has decided to take back .ml from people who took advantage of the free domain like fmhy.ml & maybe lemmy.ml - https://lemmy.world/post/1915581

And while it sucks for those servers & those users may have to migrate, the #Fediverse and it’s plethora of platforms continues on. 💪 💜

@fediverse #lemmy #mastodon #calckey #mali #decentralization

You want another beer?

I was on fmhy now I’m on blahaj.zone, but I have to re-find and subscribe to all my communities

YⓄ乙
link
fedilink
-202Y

Big whoop mf! At least they got the data so that guys like you have something to subscribe

Explain yourself.

YⓄ乙
link
fedilink
-62Y

Fuck that’s cool. Makes me feel like an Alpha.

@[email protected]
link
fedilink
English
82Y

FYI I made a little tool for migrating / backing up your Lemmy subscriptions, blocks, profile settings, etc.

Nothing to be done for fmhy now that it’s gone, but for the future, it might help to have a backup.

https://github.com/CMahaff/lasim

@[email protected]
link
fedilink
English
32Y

Thanks, I’ll probably forget to do it once I get things built up again

What’s going on with/in Mali anyway? When I search, all the results are just about the US military email fuckup.

@WhoRoger yeah, apparently the company managing the domain, their 10 year contract is up and Mali decided not to renew and brought it in house. https://domainincite.com/28897-freenom-is-losing-another-cctld-after-collecting-military-emails

Ok so I guess the old registrar were a bunch of twats, so the gov kicked them out and in the process potentially benefits from the US mil email thing.

All while doing the typical government thing of messing things up for everybody because they don’t know how anything works.

Am I right?

I don’t think the email thing is connected to this. That just happened at roughly the same time.

Yea it just prevents one from searching what’s going on, because web results are filled with this.

Why did so many instances use .ml domains?

@[email protected]
link
fedilink
3
edit-2
2Y

I think a lot of them were tankies who thought it was cool to have ML in their domain name. They have lemmy.ml and lemmygrad.ml iirc. Honestly I don’t know whether to be happy those communities took a hit or sad that I might lose one way of identifying and avoiding auth-left instances.

@azalty it was free.

freamon
link
fedilink
English
422Y

'Cos they were free.

Xepher
link
fedilink
English
22Y

Ahh, makes more sense.

Are there any other domains that could be in a similar situation now?

Coelacanth
link
fedilink
English
52Y

Niue is trying to wrangle control of .nu form Sweden, so I’m a little worried. It’s been ongoing for years though.

freamon
link
fedilink
English
42Y

At the time you get .ml free, .TK, .GA, .CF, .GQ were also available for free (they ended up all being used by spam advertisers, so those domains get marked ‘suspicious’ a lot)

Lol one would expect people technical enough to setup a Lemmy instance would be aware of the fall of freenom and the fate of those free domains

Alright, fair enough

b3nsn0w
link
fedilink
English
422Y

lmfao, frickin seriously? you’re gonna build up an instance where the domain is part of all of your users’ identities and you’re not even gonna spend the $10/yr to keep that solid? with how much time goes into running a lemmy instance and not getting overrun by bots, that’s an absolutely ridiculous assignment of resources

@[email protected]
link
fedilink
English
112Y

Even worse, the free .ml domain is not actually yours when you get it for free, but actually owned by the company that previously managed the .ml domain. I suspect Mali government has reclaimed all those free domain registrations now that the contract with the company has been expired. The .ml domains that still up was probably paid domain and Mali government are probably still honoring the contract.

Mitchacho74
link
fedilink
English
412Y

You have to remember that until recently, there was sub 100 daily users, this wasn’t a big platform, and it wasn’t just lemmy.ml, but a bunch of <10 user instances.

It wasn’t worth paying for a small side project until it wasn’t and at that point it was too late, plus who would have predicted that the gov of Mali would forcefully take back all of their domains?

b3nsn0w
link
fedilink
English
102Y

i mean, good point on the project size, but buying a domain is honestly such a basic thing that it still feels like a weird result on that equation to me. for fmhy.ml, specifically, i understand their choice, since pirate sites do tend to be quite nomadic with their domains, and the fediverse being so domain-specific is a new thing.

still, domains are hella cheap. the $10/yr figure i quoted is for a “serious” one on one of the major tlds, you can get away with much less if you’re willing to go for a somewhat more niche but still reputable one. especially one that’s longer than two characters.

@[email protected]
link
fedilink
English
21
edit-2
2Y

Bruh it’s 10 dollars PER YEAR.

I’ve owned a .com domain for over a decade, ever since BEFORE I actually had a job and was living on allowances, and it still doesn’t register as an expense to me.

The content I host on that domain has been used by 3 different people tops, which is me and a couple of my friends. It’s still worth it.

If I were to build a public-facing service I’d certainly fork over the bare minimum to guarantee that it fucking stays up even if I don’t expect thousands of users. It’s just a matter of doing things properly. Free domains have always been sketchy as fuck, every scam ever was hosted on a .tk domain at some point.

But as it has been stated multiple times already, the only reason they actually went with “.ml” is because they thought it would be funny for the marxist-leninist association. That’s literally it. It’s not about money. Anyone with access to a dev machine has 10 dollars a year to spend or they wouldn’t be shitposting on the internet.

@[email protected]
link
fedilink
English
12Y

I get a little over 10 dollars a day. Also, while my country has an excellent, free system for internal financial transactions, any international transaction will be (a) complicated and (b) expensive.

I’m not saying I wouldn’t pay USD1USD0 for a website, but I sure wouldn’t do it for a hobby one.

@[email protected]
link
fedilink
English
4
edit-2
2Y

You underestimate how different some people’s situations and priorities can be. For us, it’s forking 10-20 USD (not a big sum of money) once a year by credit card (which isn’t hard to obtain).

There are parts of the world with dire financial situations or simply outdated systrms that don’t offer easy access to electric or international payments. There will be devs wanting to experiment with web services, but for them it isn’t simply “forking over the bare minimum”.

I won’t reveal my location just for the sake of an internet discussion, but I lived in a country (It’s not exactly a “3rd world shithole”, but not a developed one either) where until around five to ten years ago or so getting a bank account with ‘credit card’ meant you ‘made it’.

Why? If you weren’t lucky and wanted to pay for something international, you needed a friend with the aforementioned credit card to do the transaction on our behalf. Buying on Amazon? Better make it worth before bothering our friend there. What if I wanted games on steam? The friend with credit card, or use an intermediary that charges an extra before they ‘gift’ the purchased game. And so on.

Now it has gotten much better, as fintech apps filled the gap offering virtual visa or mastercard payments, and the banks themselves started offering credit cards with lower quotas, but you have to remember that it wasn’t available until a couple of years ago, or even still out of reach for some.

So what if you’re a developer with no affordable access to international tx and want to experiment regardless? You find the ones that don’t require payment.

freamon
link
fedilink
English
1312Y

That’s a very positive spin on quite a shitty situation (especially if lemmy.ml goes kaputt)

@freamon can you imagine if Lemmy (in total) was just *poof* grabbed by a government?

The fediverse lives to ride another day.

@[email protected]
link
fedilink
English
422Y

I mean, the .ml domain belongs to Mali and they have every right to take it back.

“Every right”? No. They have the power to do so but that doesn’t make it right. They sold those domains fair and square. Contracts were signed.

Domains aren’t sold, they are leased for a period of time. In this case the lease was for ten years and is lapsing now.

freamon
link
fedilink
English
412Y

True. It might have been better though if the Lemmy devs hadn’t been such cheapskates and forked over the 10 bucks it takes to get a domain name that isn’t sketchy.

@[email protected]
link
fedilink
English
132Y

lemmy.ml was a sort of prototype made by the devs of the lemmy software. It wasn’t really meant for widespread public adoption. So it makes sense that they went with a free domain.

001100 010010
link
fedilink
English
82Y

Lol they could’ve just spend $10 from the donations they receive to secure an actual .com domain

Zagorath
link
fedilink
English
162Y

Pretty sure they went with .ml not for price reasons, but because they liked to pretend it stood for their political ideology.

freamon
link
fedilink
English
82Y

Maybe. I read the idea about it standing for Marxist/Leninist, but there’s thousands of TLDs now - if you can get .diamonds and .world, there’s probably something that would evoke the same lefty idea (although maybe lemmy pre-dates the new domains, I don’t know)

Flax
link
fedilink
English
72Y

New domains have been around for a while. The fancy ones are a bit more pricey.

Tywele [she|her]
link
fedilink
English
232Y

They stated themselves that it was for price reasons.

@[email protected]
link
fedilink
English
162Y

Did we know before it’s sketchy?

RxBrad
link
fedilink
English
92Y

My work uses zScaler for its Internet web filters. zScaler has everything *.ml blocked.

So yeah, it’s fairly well-known to be sketchy.

@[email protected]
link
fedilink
English
32Y

.ml is just Mali’s country domain. Maybe your workplace should get a better filter?

Quokka
link
fedilink
3
edit-2
2Y

Or maybe realising anything ending in .ml was most likely spam and if it caught the 5 legitimate Mali domains oh well, zero loss for anyone.

Kinda like how I wouldn’t download a file from a .ru site.

@[email protected]
link
fedilink
English
192Y

The parent domain was apparently well known to be a common host of phishing domains and scam sites. Free domains tend to attract those types, so that’s a good reason from the start not to use that if you want your site to be reliably accessible and findable on search engines.

Yes. Hosting a service in a country other than where a TLD is designated for is bad practice and common knowledge for any web developer

Guess nobody told youtu.be or the million of services on .to or .it…

.be and .to are free to use by anyone as set by the respective countries registrars, anyone that registers a .it domain outside of Europe is just asking for trouble

Do Belgium and Italy have different policies?

@[email protected]
link
fedilink
English
-32Y

deleted by creator

Dee
link
fedilink
English
82Y

I did, I just messed up and didn’t tell anybody. I’m sorry folks, this is on me.

@freamon Agreed, it’s a silver lining post, for sure.

But generally I find people say “you see, this is why the Fediverse/Lemmy/Mastodon etc will never take off” for every blip of bad news or whatever. But in reality, while the news sucks for .ml servers, it highlights the resiliency of the Fediverse - which is a win.

And better to happen in the early days of Lemmy than when/if it got much bigger.

P03 Locke
link
fedilink
English
92Y

Newsflash: It’s getting bigger as we speak. Prepare for all of the scalability problems now, not later when it’s even harder to fix.

@[email protected]
link
fedilink
English
72Y

You say that as though there’s some kind of crystal ball we can all look into and see all of the obstacles that will need to be cleared and prepare accordingly. That’s not how scaling web services works, especially distributed ones that are built on a relatively new protocol.

Flax
link
fedilink
22Y

I don’t see how this would be an issue with decentralised media either tbh. Probably a bit more of a headache, but that’s it

Rentlar
link
fedilink
32
edit-2
2Y

Is an internet pirate community an internet pirate community without the odd patch of rough seas?

yarr

lohrun
link
fedilink
132Y

Oof best of luck to you guys on .ml instances, might be worth looking at buying a domain as a backup to migrate to. Don’t wanna be caught off guard like this especially if they are trying to recoup all their urls. I went with a .boo domain to be unique for my instance but there are loads of TLDs out there

i remember for a period of time it was really easy and completely free to get an .io url. i assume it’s something similar here.

RxBrad
link
fedilink
282Y

Just looking at my list of subscribed communities… There are a lot on lemmy.ml.

They’re toast if Mali yoinks the domain name.

This seems really, really bad for Lemmy…

@RxBrad same, but there’s generally sim communities on other instances too. It will suck if lemmy.ml gets yanked. But given they haven’t yet, they best be prepping to move ASAP.

@[email protected]
link
fedilink
26
edit-2
2Y

Lemmy as a whole not being hurt even if some domains are gone is the entire point of being decentralized. But yeah, it’s really bad that communities made there will also be gone as it is now.

We need user and community migration like Mastodon has, and quick.

Counterpoint: the generic communities being hosted on Lemmy.ml (an instance with a very strong political identity) simply because it was oldest was a real risk for the growth of Lemmy as a whole and this is a fantastic opportunity to rebuild those core communities on more generic Instances like Lemmy.world.

How does Mastodon do it differently?

You can migrate to another instance with all your followers very easily in Mastodon.

I can see Lemmy comms being able to do the same and it’s already been opened as an issue on the GitHub

Flax
link
fedilink
12
edit-2
2Y

Eh, it’ll probably just bounce back tbh. With something this big, lemmy.ml can probably convince other fedi admins to migrate everyone’s subscriptions over

This is one of the problems with using country TLDs. They look cute, but when you buy it, you may not realize who controls it. Lemm.ee is similarly in a precarious position.

I really wish we could all agree to stop using country TLDs for this

@[email protected]
link
fedilink
51
edit-2
7M

deleted by creator

You have to be careful with any TLD. People outside the US have found themselves subject to US law because they had a US controlled domain name.

Some ccTLDs are fine, some are not, but you have to think carefully when you buy it.

Saving a search/click for people that don’t know which country .ee is: Estonia

Who owns or controls .world domains?

I think .ee and .ca are fine. lemmy.ca is for Canadians specifically

@[email protected]
link
fedilink
11
edit-2
2Y

For .ca specifically: as long as you are a Canadian individual, or have a sufficient connection to Canada, or a Corp with a trademark registered in Canada then you are qualified to own that domain - but as to who is really checking I have no idea… CIRA complainants maybe?

Here’s some info about .world domains https://support.google.com/domains/answer/6300841?hl=en#zippy=%2Cterms-restrictions

In the internet biz since 1993 here (retired): choose your registrar as carefully as your domain name.

Lowest price is the dumbest reason. It’s never the way to choose anything. ID what your needs are, what satisfies that, then shop for the best price…

Anyway at the moment for my purposes the EU with it’s gdpr and other rules is the best choice for many reasons. I’m using joker.com.

Top level domains (.ml etc) have their own rules, you gotta read them carefully. I don’t know anything about .ml and whether they allowed that usage or not.

Maybe this will have the knock on effect of some migration tools being developed.

@SeeJayEmm I hope so, that’s a big miss on Lemmy right now.

Need to be able to migrate accounts & communities ASAP.

@[email protected]
link
fedilink
English
102Y

So, I really don’t want to say “crypto solves this”, but name identities and ownership over domains is actually one of the valid use cases for NFTs.

Technically Creative
link
fedilink
English
52Y

Cryptography solved this a long time ago. No need for NFTs or anything “crypto”.

@[email protected]
link
fedilink
English
-22Y

How can you solve Zooko’s Trilemma without “anything crypto”?

@[email protected]
link
fedilink
English
42Y

“.onion addresses and bitcoin addresses are secure and decentralized but not human-meaningful;”

All “crypto as in blockchains” requires trust and buy-in to that blockchain, and someone to put it on the blockchain. It being internally secure/trustworthy does not intrinsically mean it’s globally secure/trustworthy.

Cryptography is not limited to blockchains.

@[email protected]
link
fedilink
English
-12Y

Sure, for the general case. In practice, we can look at Ethereum’s blockchain which has all the “buy-in” and “trust” enough to the point that it’s used to hold billions worth of value and is secured by the its validator network.

@[email protected]
link
fedilink
English
22Y

Ethereum has outlasted competing attempts to graft data onto a blockchain. It’s a long, long way from being accepted for general use by anyone who isn’t an enthusiast. The evaluation of a currency/company/blockchain is a measure of investor interest, little more.

You’re also misunderstanding. The problem isn’t whichever blockchain, the problem is that it’s still just a database. Someone has to be trusted to validate an entry. Whether that’s a trusted party, which defeats the point, or a consensus mechanism, which quickly becomes arbitrary/random, that the validation mechanism to interface with the ‘real world’ is the same weak point any other centralized database has. That the nodes are decentralized and cryptographically secure isn’t relevant.

@[email protected]
link
fedilink
English
12Y

It’s a long, long way from being accepted for general use by anyone who isn’t an enthusiast.

You have thousands of people running nodes and millions of people already having done at least one transaction, what’s your threshold then?

@[email protected]
link
fedilink
English
02Y

I attend a worldwide unicycling convention every other year with thousands of attendees and millions of people have seen unicyclists. I wouldn’t call it mainstream.

Ethereum is still in the “garage band” phase. It (and BitCoin) had some commodity speculators jump in to make a quick buck and generate headlines. But other than that there’s a few thousand enthusiasts and the people they’ve managed to get interested, and little clear idea of where/how to build from there. For basically every blockchain use case the non-decentralized versions are at least an order of magnitude faster and simpler for the end user to understand. Unfortunately “It’s more secure” has never been a huge selling point in tech.

Chozo
link
fedilink
442Y

@renwillis I’m not so sure this is a “win”, since the Fediverse wasn’t specifically targeted by any entity involved to begin with. If anything, it’s just a straight-up loss to the communities that have to reassemble themselves under a new domain again, many of whom were probably mostly new users to the Fediverse to begin with, and are likely to be turned off by this experience. If anything, this just exposes that the Fediverse is significantly sustained by flimsy, free/cheap platforms that are vulnerable to disappearing without any notice. That doesn’t exactly instill faith.

It’s a really bad look, to be perfectly honest.

@Chozo @fediverse disagree. It’s another argument for decentralization that 1 entity taking down another entity doesn’t take down the whole system.

If the US seized Reddit.com today, the whole site would just be gone. Poof!

The US could seize 1000 servers today and yet the Fediverse would continue on.

i don’t think you understand how domains work.

P03 Locke
link
fedilink
English
42Y

If lemmy.world went down, so would most of Lemmy, so this is already a huge problem.

Chozo
link
fedilink
22Y

@renwillis The Fediverse is more than just the collective network. It’s also the individual communities, some of which no longer exist right now. Those communities are now scrambling to figure out what to do.

Yes, the whole of the Fediverse is just fine. But the overall health of the Fediverse relies heavily on the health of individual communities.

I could also get hot by lightning there times a day but I don’t optimize for it. This is a lol and definitely points back to how shitty personal servers may be. I for one hope a .org starts a monitizartion scheme, deals with the privacy issues this community blatantly ignores, and hires some professionals who actually know what they are doing.

I do kinda agree, this isn’t great for general adoption but it’s a vital learning curve and hopefully smart people in the community will help develop ways to avoid it going forward and tools to fix it when it does happen

@[email protected]
link
fedilink
16
edit-2
2Y

If this is a loss, a loss compared to what? Centralised servers? If Lemmy was a centralised server, this would’ve taken the whole site down. As another commenter mentioned, if the US government decides take Reddit down, the whole service would be lost. But in the Fediverse no single government can stop it.

Another example is when lemmy.world was attacked. All other instances and the custom clients continued to work. If you say this is a bad look, what’s a good look in your opinion? All of Lemmy going down at the same time? If centralised services deploy techniques to keep their services stable (horizontal scaling, regional mirrors etc.), Fediverse apps can use all of those techniques plus then some.

@[email protected]
link
fedilink
2
edit-2
2Y

We NEED better abilities to migrate accounts to other instances like what Mastodon has!

Quick question and this may have been answered or obvious…

Is it not possible to federate with onion sites via tor or i2p sites?

Perhyte
link
fedilink
English
16
edit-2
2Y

You can only federate via tor or i2p if both sides support those protocols, because for federation to work between two nodes both nodes need to be able to initiate connections to the other. That means one-way bridges like tor exit nodes are not sufficient.

I’d guess most Fediverse servers don’t support either of those protocols, so any new server trying to federate solely through them would have an extremely limited view of the Fediverse.

Though I suppose theoretically nothing is really preventing a motivated group of server admins from setting up a parallel “dark Fediverse” containing only onion sites.

@[email protected]
link
fedilink
English
32Y

Good explanation, thanks. I figured it would have been the interface between in the onion and outside of it. That’s too bad. It’s been forever since I used tor but… would someone be able to set up an exit node specifically as a federation point with the outside world? Sort of working as a reverse proxy for a site or sites on the inside?

ඞmir
link
fedilink
English
92Y

The Dark Fediverse sounds like great marketing ngl

Create a post

A community to talk about the Fediverse and all it’s related services using ActivityPub (Mastodon, Lemmy, KBin, etc).

If you wanted to get help with moderating your own community then head over to [email protected]!

Rules

  • Posts must be on topic.
  • Be respectful of others.
  • Cite the sources used for graphs and other statistics.
  • Follow the general Lemmy.world rules.

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy

  • 1 user online
  • 134 users / day
  • 2 users / week
  • 158 users / month
  • 647 users / 6 months
  • 0 subscribers
  • 389 Posts
  • 12.9K Comments
  • Modlog