#wordpress data protection

[ecomhardy]

How to backup your wordpress website in 2 minutes - Woocommerce back up tutorial - Updraft plusBacking up your WordPress website with the UpdraftPlus plugin is a straightforward process. Here's a step-by-step guide: 1. Install UpdraftPlus Plugin: Go to your WordPress dashboard, navigate to "Plugins" and "Add New," search for "UpdraftPlus," and click "Install Now" and then "Activate." 2. Access UpdraftPlus Settings: After activating the plugin, find it in your WordPress dashboard sidebar. Click on "Settings" and then "UpdraftPlus Backups." 3. Configure Backup Settings: - Click on the "Settings" tab to configure your backup settings. - Choose your preferred backup schedule: manually, daily, weekly, monthly, or custom interval. - Select the files and databases you want to include in the backup. - Choose your remote storage destination: Dropbox, Google Drive, Amazon S3, etc. Authenticate and grant access to UpdraftPlus. 4. Initiate Backup: - Save your changes. - Go to the "Current Status" tab. - Click the "Backup Now" button to start the backup process. 5. Verify Backup Completion: After the backup process finishes, UpdraftPlus will display a success message. Check the "Existing Backups" tab to see your backups. 6. Restore Backup (Optional): To restore from a backup, go to the "Existing Backups" tab, locate the backup, and click "Restore." Follow the on-screen instructions. 7. Regularly Monitor and Test Backups: Monitor backups regularly and test them by restoring to a staging environment. Following these steps, you can effectively backup your WordPress website using the UpdraftPlus plugin, ensuring your site is protected against data loss.

[techdirectarchive]

Video to Backup and Restore your WordPress Files and Database

Backup and Restore your WordPress Files and Database

[puramudotcom]

Top 8 plugin Backup cho website WordPress uy tín nhất hiện nay

1. UpdraftPlus

2. BackWPup

3. Duplicator

4. All-in-One WP Migration and Backup

5. Jetpack VaultPress Backup (VaultPress)

6. BlogVault

7. Solid Backups (BackupBuddy)

8. WP Time Capsule

Thông tin chi tiết về các tính năng của các plugin trên trong bài viết dưới đây 👇👇👇

[guyrcook]

Is Using Timeshift a Good Idea for Linux Mint Users?

Short Answer: Yes, Timeshift is an excellent tool for Linux Mint users, especially if you’re looking for a reliable way to protect your system from unexpected issues. Here’s Why Timeshift Is a Great Fit for Linux Mint: Recover from Instability: Made a big system update and now everything’s breaking? Timeshift helps you revert to a working state in just a few clicks. Safety Net for Experiments:…

[jcmarchi]

10 Best Free Legal Compliance Plugins for WordPress – Speckyboy

New Post has been published on https://thedigitalinsider.com/10-best-free-legal-compliance-plugins-for-wordpress-speckyboy/

10 Best Free Legal Compliance Plugins for WordPress – Speckyboy

When running a business online, it’s important to make sure you follow the laws of your area, country, and internationally. The laws can differ depending on where you are and what kind of website you have. Thankfully, WordPress plugins can assist you in meeting these legal requirements.

Remember, these suggestions are not a replacement for real legal advice. If you have specific questions, it’s best to ask a professional who knows the law.

To help set you on the right legal track, we have a collection of WordPress plugins that can help with many of the different legal aspects of running a website. We’ve organized them by category to make it easier for you to find what you need. These plugins can be a big help in making sure your website is on the right side of the law.

EU Cookie Law WordPress Plugins

Cookie Notice by dFactory

Cookie Notice by dFactory provides an easy way to let your site’s visitors know about your use of cookies. You can customize a notice that will appear either on the top or bottom of the page. Users can accept, decline, or read more about your policies via clickable buttons.

CookieYes Cookie Banner & Compliance Plugin

Cookie Law Info will create a customizable banner to inform visitors of your cookie policies. The banner can be automatically removed after a few seconds, or you can require the user to accept your terms manually.

Privacy Policy & Terms of Service WordPress Plugins

Auto Terms of Service & Privacy Policy

Automattic, the company behind WordPress.com, have created both a Terms of Service and Privacy Policy under the Creative Commons Sharealike license.

Auto Terms of Service and Privacy Policy brings these documents to your site. Simply add your organization’s info in the plugin settings and display the documents via a WordPress Shortcode. This plugin is meant for sites based in the United States.

WPLegalPages Privacy Policy & T&Cs Generator

WPLegalPages will generate a variety of must-have compliance documents for your website. The free version of the plugin includes a privacy policy, terms & and conditions, DCMA policy, and more.

Setup is simple – enter your business name and select which documents you want to generate. A cookie consent bar is also included. The pro version ups the ante with guided wizards, age verification, and popups.

EU VAT WordPress Plugins

WooCommerce EU VAT Compliance

Those running WooCommerce can take the pain out of VAT with WooCommerce EU VAT Compliance. It will record a customer’s location, show VAT calculations in the backend, and automatically add VAT to product pricing. You can even block out EU customers if you’d rather not collect VAT at all.

EDD Quaderno

EDD Quaderno helps to make Easy Digital Downloads shops compliant with VAT and the intricacies of other locales. It will also create improved versions of the standard EDD receipts. To use the plugin, you’ll need a Quaderno account.

Age Verification WordPress Plugins

Age Gate

Age Gate is a highly configurable plugin for restricting age-based content. Select the minimum age along with the content you want to protect, and underage users will be locked out.

Choose from a variety of user input methods (dropdown, text field, or yes/no buttons) and customize the look of the UI to match your website. The plugin is also SEO-friendly and won’t try to restrict common search bots.

Easy Age Verify

Make age verification simple with Easy Age Verify. The plugin offers turnkey settings based on different types of website content. It’s also built with accessibility and SEO in mind. The pro version is fully customizable, with the ability to match your site’s look.

Digital Signature WordPress Plugins

Gravity Forms Signature Add-On

This unofficial add-on for Gravity Forms will allow users to digitally sign documents on your website. There’s also a version for Ninja Forms.

CF7Sign – Signature Field For Contact Form 7

Adding a signature field to your Contact Form 7 forms is just a click away. Once you’ve installed and activated CF7Sign, a “Sign” field will be added to your forms’ options. There’s not much room for customization here, but it’s a dead-simple solution.

Keeping it Legal

Granted, it can be a bit of a hassle to keep track of compliance issues. But that doesn’t make it any less vital to do so. WordPress plugins are there to make the task a bit easier – even automating the process in some cases.

So, there’s no excuse for slacking! Take some time to learn your responsibilities as a website owner and use the handy plugins above to help you manage. Obviously, using these plugins alone won’t make you compliant – but they will help set you on the right path.

Legal Compliance WordPress Plugin FAQs

What Are Legal Compliance WordPress Plugins?

They are plugins designed to help your WordPress site adhere to legal regulations. They cover aspects like privacy policies, cookie consent, and terms of service requirements.

Who Needs Legal Compliance Plugins for Their WordPress Site?

Anyone who wants to ensure their site complies with legal standards, such as GDPR, CCPA, or other regional laws. This is particularly important for sites that handle user data or operate internationally.

Why Is It Important to Use Legal Compliance Plugins on WordPress?

They help protect you from legal issues by ensuring your website meets the necessary legal standards for data protection and privacy.

Can These Plugins Guarantee My Site Is Fully Legally Compliant?

While they significantly help in compliance, you should consult with a legal professional to make sure your site meets all specific legal requirements.

Are Legal Compliance Plugins Easy to Use and Set Up?

Most of these plugins are user-friendly, offering guided setup processes and pre-designed templates for legal documents.

Do I Need a Legal Compliance Plugin If My Site Doesn’t Sell Anything?

Yes, if your site collects any form of user data, including through contact forms or analytics tools, compliance with privacy laws is very important.

More Essential Free WordPress Plugins

Related Topics

Top

[coookie-banner]

[bluezoo]

The Role of Security in WordPress Development

Discover the essential role of security in WordPress development with our comprehensive infographic. As WordPress powers over 40% of all websites, it is a prime target for cyber threats. Our infographic highlights critical security measures every WordPress site should implement to protect against unauthorized access, data breaches, and other cyber threats. Learn about strong password policies, regular updates, secure hosting solutions, essential security plugins, SSL certificates, backup strategies, and more. Whether you're working with a top WordPress development company in India or managing your site independently, these best practices are crucial for maintaining a secure and trustworthy website. Enhance your site's security and safeguard your users' data today.

[techcofinds]

[screentones-webcomicresources]

There are many web hosting companies to choose from if you're taking the plunge into making your own website with a comic content management system (CMS) like ComicControl or Grawlix, a Wordpress comic theme like Toocheke or ComicPress, or a HTML template to cut/paste code like Rarebit. While these solutions are generally free, finding a home for them is... generally not. It can be hard to choose what's best for your webcomic AND your budget!

We took a look at a few of the top hosting services used by webcomics creators using webcomic CMSes, and we put out a poll to ask your feedback about your hosts!

This post may be updated as time goes on as new services enter the hosting arena, or other important updates come to light.

Questions:

💻 I can get a free account with Wix/Squarespace/Carrd, could I just use those for my comic? - Web hosts like this may have gallery functions that could be adapted to display a series of pages, but they are very basic and not intended for webcomics.

📚 Wait, I host on Webtoon, Tapas, Comic Fury, or some other comic website, why are they not here? - Those are comic platforms! We'll get into those in a future post!

🕵️‍♀️Why does it say "shared hosting"? Who am I sharing with? - "Shared hosting" refers to sharing the server space with other customers. They will not have access to your files or anything, so it is perfectly fine to use for most comic CMSes. You may experience slowing if there is too much activity on a server, so if you're planning to host large files or more than 10 comics, you may want to upgrade to a more robust plan in the future.

Web Host List

Neocities

Basic plan pricing: Free or $5/month. Free plan has more restrictions (1 GB space, no custom domain, and slower bandwidth, among other things)

Notes: Neocities does not have database support for paid or free accounts, and most comic CMS solutions require this (ComicCtrl, Grawlix, Wordpress). You will need to work with HTML/CSS files directly to make a website and post each page.

Hostinger

Basic plan pricing: $11.99/month or $7.99/month with four year commitment (monthly, 1, 2, and 4 year plans available).

Notes: Free domain for the 1st year. Free SSL Certifications. Weekly backups.

KnownHost

Basic plan pricing: $8.95/month or $7.99/month with four year commitment (monthly, 1, 2, and 4 year plans available).

Notes: Free DDOS protection. Free SSL Certifications.

InMotion Hosting

Basic plan pricing: $12.99/month or $9.99/month with three year commitment (monthly, 1, and 3 year plans available).

Notes:  Free SSL Certifications, free domain names for 1 and 3 year plans. 24/7 live customer service and 90-day money-back guarantee. Inmotion also advertises eco-friendly policies: We are the first-ever Green Data Center in Los Angeles. We cut cooling costs by nearly 70 percent and reduce our carbon output by more than 2,000 tons per year.

Reviews:

👍“I can't remember it ever going down.”

👍“InMotion has a pretty extensive library full of various guides on setting up and managing websites, servers, domains, etc. Customer service is also fairly quick on responding to inquiries.” 👎“I wish it was a bit faster with loading pages.”

Ionos Hosting

Basic plan pricing: $8/month or $6/month with three year commitment (monthly, 1, 2 and 3 year plans available).

Notes: Free domain for the first year, free SSL Certification, Daily backup and recovery is included. Site Scan and Repair is free for the first 30 days and then is $6/month.

Reviews:

👍“Very fast and simple” 👎“Customer service is mediocre and I can't upload large files”

Bluehost

Basic plan pricing: $15.99/month or $4.95/month with three year commitment (monthly, 1, 3 year plans available).

Notes: Free domain and SSL certificates (for first year only). 24/7 Customer Service. Built to handle higher traffic websites. Although they specialize in Wordpress websites and provide updates automatically, that's almost a bad thing for webcomic plugins because they will often break your site. Their cloud hosting services are currently in early access with not much additional information available.

Reviews:

👎"The fees keep going up. Like I could drop $100 to cover a whole year, but now I'm paying nearly $100 for just three months. It's really upsetting."

👎"I have previously used Bluehost’s Wordpress hosting service and have had negative experiences with the service, so please consider with a grain of salt. I can confirm at least that their 24/7 customer service was great, although needed FAR too often."

Dreamhost

Basic plan pricing: $7.99/month or $5.99/month with three year commitment (monthly, 1, 3 year plans available).

Notes: Free SSL Certificates, 24/7 support with all plans, 97-day moneyback guarantee. Not recommended for ComicCtrl CMS

Reviews:

👍“They've automatically patched 2 security holes I created/allowed by mistake.” 👍“Prices are very reasonable” 👎 “back end kind of annoying to use” 👎 “wordpress has some issues” 👎 “it's not as customizable as some might want“

GoDaddy

Basic plan pricing: $11.99/month or $9.99/month with three year commitment (monthly, 1, 2, and 3 year plans available).

Notes: Free 24/7 Customer service with all plans, Free SSL Certificates for 1 year, free domain and site migration.

Reviews:

👍Reasonable intro prices for their Economy hosting, which has 25GB of storage 👍Migrated email hosting service from cPanel to Microsoft Office, which has greater support but may not be useful for most webcomic creators. 👎 Many site issues and then being upsold during customer service attempts. 👎 Server quality found lacking in reviews 👎 Marketing scandals in the past with a reputation for making ads in poor taste. Have been attempting to clean up that image in recent years. 👎 “GoDaddy is the McDonald's of web hosting. Maybe the Wal-Mart of hosting would be better. If your website was an object you would need a shelf to put it on. You go to Wal-Mart and buy a shelf. It's not great. It's not fancy. It can only hold that one thing. And if we're being honest - if the shelf broke and your website died it wouldn't be the end of the world.The issue comes when you don't realize GoDaddy is the Wal-Mart of hosting. You go and try to do things you could do with a quality shelf. Like, move it. Or add more things to it.” MyWorkAccountThisIs on Reddit*

Things to consider for any host:

💸 Introductory/promotional pricing - Many hosting companies offer free or inexpensive deals to get you in the door, and then raise the cost for these features after the first year or when you renew. The prices in this post are the base prices that you can expect to pay after the promotional prices end, but may get outdated, so you are encouraged to do your own research as well.

💻 Wordpress hosting - Many of the companies below will have a separate offering for Wordpress-optimized hosting that will keep you updated with the latest Wordpress releases. This is usually not necessary for webcomic creators, and can be the source of many site-breaking headaches when comic plugins have not caught up to the latest Wordpress releases.

Any basic hosting plan on this list will be fine with Wordpress, but expect to stop or revert Wordpress versions if you go with this as your CMS.

🤝 You don't have to go it alone - While free hosts may be more limited, paid hosting on a web server will generally allow you to create different subdomains, or attach additional purchased domains to any folders you make. If you have other comic-making friends you know and trust, you can share your server space and split the cost!

Want to share your experience?

Feel free to contribute your hosting pros, cons, and quirks on our survey! We will be updating our list periodically with your feedback!

[smellslikebot]

"how do I keep my art from being scraped for AI from now on?"

if you post images online, there's no 100% guaranteed way to prevent this, and you can probably assume that there's no need to remove/edit existing content. you might contest this as a matter of data privacy and workers' rights, but you might also be looking for smaller, more immediate actions to take.

...so I made this list! I can't vouch for the effectiveness of all of these, but I wanted to compile as many options as possible so you can decide what's best for you.

Discouraging data scraping and "opting out"

robots.txt - This is a file placed in a website's home directory to "ask" web crawlers not to access certain parts of a site. If you have your own website, you can edit this yourself, or you can check which crawlers a site disallows by adding /robots.txt at the end of the URL. This article has instructions for blocking some bots that scrape data for AI.

HTML metadata - DeviantArt (i know) has proposed the "noai" and "noimageai" meta tags for opting images out of machine learning datasets, while Mojeek proposed "noml". To use all three, you'd put the following in your webpages' headers:

<meta name="robots" content="noai, noimageai, noml">

Have I Been Trained? - A tool by Spawning to search for images in the LAION-5B and LAION-400M datasets and opt your images and web domain out of future model training. Spawning claims that Stability AI and Hugging Face have agreed to respect these opt-outs. Try searching for usernames!

Kudurru - A tool by Spawning (currently a Wordpress plugin) in closed beta that purportedly blocks/redirects AI scrapers from your website. I don't know much about how this one works.

ai.txt - Similar to robots.txt. A new type of permissions file for AI training proposed by Spawning.

ArtShield Watermarker - Web-based tool to add Stable Diffusion's "invisible watermark" to images, which may cause an image to be recognized as AI-generated and excluded from data scraping and/or model training. Source available on GitHub. Doesn't seem to have updated/posted on social media since last year.

Image processing... things

these are popular now, but there seems to be some confusion regarding the goal of these tools; these aren't meant to "kill" AI art, and they won't affect existing models. they won't magically guarantee full protection, so you probably shouldn't loudly announce that you're using them to try to bait AI users into responding

Glaze - UChicago's tool to add "adversarial noise" to art to disrupt style mimicry. Devs recommend glazing pictures last. Runs on Windows and Mac (Nvidia GPU required)

WebGlaze - Free browser-based Glaze service for those who can't run Glaze locally. Request an invite by following their instructions.

Mist - Another adversarial noise tool, by Psyker Group. Runs on Windows and Linux (Nvidia GPU required) or on web with a Google Colab Notebook.

Nightshade - UChicago's tool to distort AI's recognition of features and "poison" datasets, with the goal of making it inconvenient to use images scraped without consent. The guide recommends that you do not disclose whether your art is nightshaded. Nightshade chooses a tag that's relevant to your image. You should use this word in the image's caption/alt text when you post the image online. This means the alt text will accurately describe what's in the image-- there is no reason to ever write false/mismatched alt text!!! Runs on Windows and Mac (Nvidia GPU required)

Sanative AI - Web-based "anti-AI watermark"-- maybe comparable to Glaze and Mist. I can't find much about this one except that they won a "Responsible AI Challenge" hosted by Mozilla last year.

Just Add A Regular Watermark - It doesn't take a lot of processing power to add a watermark, so why not? Try adding complexities like warping, changes in color/opacity, and blurring to make it more annoying for an AI (or human) to remove. You could even try testing your watermark against an AI watermark remover. (the privacy policy claims that they don't keep or otherwise use your images, but use your own judgment)

given that energy consumption was the focus of some AI art criticism, I'm not sure if the benefits of these GPU-intensive tools outweigh the cost, and I'd like to know more about that. in any case, I thought that people writing alt text/image descriptions more often would've been a neat side effect of Nightshade being used, so I hope to see more of that in the future, at least!

[stjohnstarling]

Full text of article as follows:

Tumblr and Wordpress are preparing to sell user data to Midjourney and OpenAI, according to a source with internal knowledge about the deals and internal documentation referring to the deals. 

The exact types of data from each platform going to each company are not spelled out in documentation we’ve reviewed, but internal communications reviewed by 404 Media make clear that deals between Automattic, the platforms’ parent company, and OpenAI and Midjourney are imminent.

The internal documentation details a messy and controversial process within Tumblr itself. One internal post made by Cyle Gage, a product manager at Tumblr, states that a query made to prepare data for OpenAI and Midjourney compiled a huge number of user posts that it wasn’t supposed to. It is not clear from Gage’s post whether this data has already been sent to OpenAI and Midjourney, or whether Gage was detailing a process for scrubbing the data before it was to be sent. 

Gage wrote: 

“the way the data was queried for the initial data dump to Midjourney/OpenAI means we compiled a list of all tumblr’s public post content between 2014 and 2023, but also unfortunately it included, and should not have included:

private posts on public blogs

posts on deleted or suspended blogs

unanswered asks (normally these are not public until they’re answered)

private answers (these only show up to the receiver and are not public)

posts that are marked ‘explicit’ / NSFW / ‘mature’ by our more modern standards (this may not be a big deal, I don’t know)

content from premium partner blogs (special brand blogs like Apple’s former music blog, for example, who spent money with us on an ad campaign) that may have creative that doesn’t belong to us, and we don’t have the rights to share with this-parties; this one is kinda unknown to me, what deals are in place historically and what they should prevent us from doing.”

Gage’s post makes clear that engineers are working on compiling a list of post IDs that should not have been included, and that password-protected posts, DMs, and media flagged as CSAM and other community guidelines violations were not included.

Automattic plans to launch a new setting on Wednesday that will allow users to opt-out of data sharing with third parties, including AI companies, according to the source, who spoke on the condition of anonymity, and internal documents. A new FAQ section we reviewed is titled “What happens when you opt out?” states that “If you opt out from the start, we will block crawlers from accessing your content by adding your site on a disallowed list. If you change your mind later, we also plan to update any partners about people who newly opt-out and ask that their content be removed from past sources and future training.” 

404 Media has asked Automattic how it accidentally compiled data that it shouldn’t share, and whether any of that content was shared with OpenAI. 404 Media asked Automattic about an imminent deal with Midjourney last week but did not hear back then, either. Instead of answering direct questions about these deals and the compiling of user data, Automattic sent a statement, which it posted publicly after this story was published, titled "Protecting User Choice." In it, Automattic promises that it's blocked AI crawlers from scraping its sites. The statement says, "We are also working directly with select AI companies as long as their plans align with what our community cares about: attribution, opt-outs, and control. Our partnerships will respect all opt-out settings. We also plan to take that a step further and regularly update any partners about people who newly opt out and ask that their content be removed from past sources and future training."

Another internal document shows that, on February 23, an employee asked in a staff-only thread, “Do we have assurances that if a user opts out of their data being shared with third parties that our existing data partners will be notified of such a change and remove their data?”

Andrew Spittle, Automattic’s head of AI replied: “We will notify existing partners on a regular basis about anyone who's opted out since the last time we provided a list. I want this to be an ongoing process where we regularly advocate for past content to be excluded based on current preferences. We will ask that content be deleted and removed from any future training runs. I believepartners will honor this based on our conversations with them to this point. I don't think they gain much overall by retaining it.” Automattic did not respond to a question from 404 Media about whether it could guarantee that people who opt out will have their data deleted retroactively.

News about a deal between Tumblr and Midjourney has been rumored and speculated about on Tumblr for the last week. Someone claiming to be a former Tumblr employee announced in a Tumblr blog post that the platform was working on a deal with Midjourney, and the rumor made it onto Blind, an app for verified employees of companies to anonymously discuss their jobs. 404 Media has seen the Blind posts, in which what seems like an Automattic employee says, “I'm not sure why some of you are getting worked up or worried about this. It's totally legal, and sharing it publicly is perfectly fine since it's right there in the terms & conditions. So, go ahead and spread the word as much as you can with your friends and tech journalists, it's totally fine.”

Separately, 404 Media viewed a public, now-deleted post by Gage, the product manager, where he said that he was deleting all of his images off of Tumblr, and would be putting them on his personal website. A still-live postsays, “i've deleted my photography from tumblr and will be moving it slowly but surely over to cylegage.com, which i'm building into a photography portfolio that i can control end-to-end.” At one point last week, his personal website had a specific note stating that he did not consent to AI scraping of his images. Gage’s original post has been deleted, and his website is now a blank page that just reads “Cyle.” Gage did not respond to a request for comment from 404 Media. 

Several online platforms have made similar deals with AI companies recently, including Reddit, which entered into an AI content licensing deal with Google and said in its SEC filing last week that it’s “in the early stages of monetizing [its] user base” by training AI on users’ posts. Last year, Shutterstock signed a six year deal with OpenAI to provide training data.

OpenAI and Midjourney did not respond to requests for comment. 

Updated 4:05 p.m. EST with a statement from Automattic.

[canmom]

Hypothetical Decentralised Social Media Protocol Stack

if we were to dream up the Next Social Media from first principles we face three problems. one is scaling hosting, the second is discovery/aggregation, the third is moderation.

hosting

hosting for millions of users is very very expensive. you have to have a network of datacentres around the world and mechanisms to sync the data between them. you probably use something like AWS, and they will charge you an eye-watering amount of money for it. since it's so expensive, there's no way to break even except by either charging users to access your service (which people generally hate to do) or selling ads, the ability to intrude on their attention to the highest bidder (which people also hate, and go out of their way to filter out). unless you have a lot of money to burn, this is a major barrier.

the traditional internet hosts everything on different servers, and you use addresses that point you to that server. the problem with this is that it responds poorly to sudden spikes in attention. if you self-host your blog, you can get DDOSed entirely by accident. you can use a service like cloudflare to protect you but that's $$$. you can host a blog on a service like wordpress, or a static site on a service like Github Pages or Neocities, often for free, but that broadly limits interaction to people leaving comments on your blog and doesn't have the off-the-cuff passing-thought sort of interaction that social media does.

the middle ground is forums, which used to be the primary form of social interaction before social media eclipsed them, typically running on one or a few servers with a database + frontend. these are viable enough, often they can be run with fairly minimal ads or by user subscriptions (the SomethingAwful model), but they can't scale indefinitely, and each one is a separate bubble. mastodon is a semi-return to this model, with the addition of a means to use your account on one bubble to interact with another ('federation').

the issue with everything so far is that it's an all-eggs-in-one-basket approach. you depend on the forum, instance, or service paying its bills to stay up. if it goes down, it's just gone. and database-backend models often interact poorly with the internet archive's scraping, so huge chunks won't be preserved.

scaling hosting could theoretically be solved by a model like torrents or IPFS, in which every user becomes a 'server' for all the posts they download, and you look up files using hashes of the content. if a post gets popular, it also gets better seeded! an issue with that design is archival: there is no guarantee that stuff will stay on the network, so if nobody is downloading a post, it is likely to get flushed out by newer stuff. it's like link rot, but it happens automatically.

IPFS solves this by 'pinning': you order an IPFS node (e.g. your server) not to flush a certain file so it will always be available from at least one source. they've sadly mixed this up in cryptocurrency, with 'pinning services' which will take payment in crypto to pin your data. my distaste for a technology designed around red queen races aside, I don't know how pinning costs compare to regular hosting costs.

theoretically you could build a social network on a backbone of content-based addressing. it would come with some drawbacks (posts would be immutable, unless you use some indirection to a traditional address-based hosting) but i think you could make it work (a mix of location-based addressing for low-bandwidth stuff like text, and content-based addressing for inline media). in fact, IPFS has the ability to mix in a bit of address-based lookup into its content-based approach, used for hosting blogs and the like.

as for videos - well, BitTorrent is great for distributing video files. though I don't know how well that scales to something like Youtube. you'd need a lot of hard drive space to handle the amount of Youtube that people typically watch and continue seeding it.

aggregation/discovery

the next problem is aggregation/discovery. social media sites approach this problem in various ways. early social media sites like LiveJournal had a somewhat newsgroup-like approach, you'd join a 'community' and people would post stuff to that community. this got replaced by the subscription model of sites like Twitter and Tumblr, where every user is simultaneously an author and a curator, and you subscribe to someone to see what posts they want to share.

this in turn got replaced by neural network-driven algorithms which attempt to guess what you'll want to see and show you stuff that's popular with whatever it thinks your demographic is. that's gotta go, or at least not be an intrinsic part of the social network anymore.

it would be easy enough to replicate the 'subscribe to see someone's recommended stuff' model, you just need a protocol for pointing people at stuff. (getting analytics such as like/reblog counts would be more difficult!) it would probably look similar to RSS feeds: you upload a list of suitably formatted data, and programs which speak that protocol can download it.

the problem of discovery - ways to find strangers who are interested in the same stuff you are - is more tricky. if we're trying to design this as a fully decentralised, censorship-resistant network, we face the spam problem. any means you use to broadcast 'hi, i exist and i like to talk about this thing, come interact with me' can be subverted by spammers. either you restrict yourself entirely to spreading across a network of curated recommendations, or you have to have moderation.

moderation

moderation is one of the hardest problems of social networks as they currently exist. it's both a problem of spam (the posts that users want to see getting swamped by porn bots or whatever) and legality (they're obliged to remove child porn, beheading videos and the like). the usual solution is a combination of AI shit - does the robot think this looks like a naked person - and outsourcing it to poorly paid workers in (typically) African countries, whose job is to look at reports of the most traumatic shit humans can come up with all day and confirm whether it's bad or not.

for our purposes, the hypothetical decentralised network is a protocol to help computers find stuff, not a platform. we can't control how people use it, and if we're not hosting any of the bad shit, it's not on us. but spam moderation is a problem any time that people can insert content you did not request into your feed.

possibly this is where you could have something like Mastodon instances, with their own moderation rules, but crucially, which don't host the content they aggregate. so instead of having 'an account on an instance', you have a stable address on the network, and you submit it to various directories so people can find you. by keeping each one limited in scale, it makes moderation more feasible. this is basically Reddit's model: you have topic-based hubs which people can subscribe to, and submit stuff to.

the other moderation issue is that there is no mechanism in this design to protect from mass harassment. if someone put you on the K*w*f*rms List of Degenerate Trannies To Suicidebait, there'd be fuck all you can do except refuse to receive contact from strangers. though... that's kind of already true of the internet as it stands. nobody has solved this problem.

to sum up

primarily static sites 'hosted' partly or fully on IPFS and BitTorrent

a protocol for sharing content you want to promote, similar to RSS, that you can aggregate into a 'feed'

directories you can submit posts to which handle their own moderation

no ads, nobody makes money off this

honestly, the biggest problem with all this is mostly just... getting it going in the first place. because let's be real, who but tech nerds is going to use a system that requires you to understand fuckin IPFS? until it's already up and running, this idea's got about as much hope as getting people to sign each others' GPG keys. it would have to have the sharp edges sanded down, so it's as easy to get on the Hypothetical Decentralised Social Network Protocol Stack as it is to register an account on tumblr.

but running over it like this... I don't think it's actually impossible in principle. a lot of the technical hurdles have already been solved. and that's what I want the Next Place to look like.

[derinthescarletpescatarian]

any particular reason youre not using GDocs? I didnt use to, but since getting my shit stolen ive chosen the lesser evils of CLOUD

I just generally try to use google as little as possible. (Which reminds me, I need to find a new email provider). I generally avoid cloud services just for grumpy old person reasons; they're fiddly and keep changing the rules and I'm not a fan of the sorts of "conveniences" such things tend to offer.

I'm not sure how the cloud makes it harder to have your work stolen. I don't think there's any particular danger to storing stories on the cloud unless you're particularly overzealous about protecting your work from the potential of future AI scraping (google absolutely are capable of using cloud-stored documents for this if they choose to do so, they already scan your emails for keywords to know what to sell you, any 'privacy' they offer applies to outsiders getting your data, not them using or selling it themselves), but just technically speaking it's far easier to get your work stolen if you store your drafts on the internet. I mean, that's where people are stealing it from. If they're stealing your devices to steal your work, the cloud doesn't help because pretty much everyone has their devices set to auto-login for things they use every day (like accessing your drafts). I just can't see a situation in which using the cloud makes your data safer than storing it at home.

I don't use gdocs because I don't like google, have a personal dislike of cloud services (just for Old Man Yells At Cloud stupid reasons), and it just... doesn't offer me anything I'd need. I can't see any advantage to using gdocs, I already have libreoffice. Why would I put myself in a situation where I need internet access to write? It doesn't offer me anything useful that my own computer doesn't already have.

I work between two computers (my desktop and my laptop, depending on if I'm writing in bed or not) and transfer files between them on a flash drive, so I have three reasonably up-to-date copies of my draft at all times. I also queue updates onto my site frequently so if there's a housefire or something almost all my work is uploaded to both Wordpress and Patreon, waiting to be released to the public, and easily retrievable. So losing my work isn't a concern.

[puramudotcom]

Hướng dẫn cách backup dữ liệu website WordPress chi tiết nhất!

Trong thời đại số hiện nay, công nghệ phát triển mang lại nhiều tiện ích cho chúng ta nhưng nó cũng tiềm ẩn nhiều nguy cơ dẫn đến mất dữ liệu. Vì thế mà ngày nay bảo vệ dữ liệu trở thành ưu tiên hàng đầu. Puramu hiểu rằng bạn đã trang bị rất nhiều biện pháp để tăng cường bảo mật cho website nhưng bạn đã nghĩ đến việc backup (sao lưu) dữ liệu website chưa? Đây là một hành động đơn giản nhưng có thể cứu cả trang web của bạn khi không may xảy ra sự cố đấy! Trong bài này, Puramu sẽ hướng dẫn bạn cách backup dữ liệu website chi tiết nhất. Cùng đọc nhé!

[guyrcook]

Are you using a Secure Contact Form

This episode of Practical Digital Strategies urges viewers to secure their contact forms to protect user data. It highlights the risks of using basic email links and encourages switching to a secure form, providing a link in a Google document dated September 25th for resources. The host also invites viewers to use a secure form on their website and to engage with the content by liking, sharing,…

[shortformblog]

More on the Automattic mess from my pals at 404 Media:

We still do not know the answers to all of these questions, because Automattic has repeatedly ignored our detailed questions, will not get on the phone with us, and has instead chosen to frame a new opt-out feature as “protecting user choice.” We are at the point where individual Automattic employees are posting clarifications on their personal Mastodon accounts about what data is and is not included.  The truth is that Automattic has been selling access to this “firehose” of posts for years, for a variety of purposes. This includes selling access to self-hosted blogs and websites that use a popular plugin called Jetpack; Automattic edited its original “protecting user choice” statement this week to say it will exclude Jetpack from its deals with “select AI companies.” These posts have been directly available via a data partner called SocialGist, which markets its services to “social listening” companies, marketing insights firms, and, increasingly, AI companies. Tumblr has its own Firehose, and Tumblr posts are available via SocialGist as well.  Almost every platform has some sort of post “firehose,” API, or way of accessing huge amounts of user posts. Famously, Twitter and Reddit used to give these away for free. Now they do not, and charging access for these posts has become big business for those companies. This is just to say that the existence of Automattic’s firehose is not anomalous in an internet ecosystem that trades on data. But this firehose also means that the average user doesn’t and can’t know what companies are getting direct access to their posts, and what they’re being used for.

This story goes deeper than the current situation.