As a follow up to this post in this community: The Future is NOT Self-Hosted
I have thought about how to set up local, community-hosted fediverse servers that respect privacy and anonymity while still guaranteeing that users joining the server are human-beings.
The reasoning behind these requests is that:
- You want anonymity to guarantee that people won't face repercussions in real life for the opinions they voice in the internet. (liberty of free speech)
- You want to keep the fediverse human, i.e. make sure that bot accounts are in the minority.
This might sound like an impossible and self-contradictory set of constraints, but it is indeed possible. Here's how:
Make the local library set up a fediverse server. Once a month, there's a "crypto party" where participants throw a piece of paper with their fediverse account name into a box. The box is then closed and shaked to mix all the tokens in it. Then, each one is picked out and the library confirms that this account name is indeed connected to a human. Since humans have to be physically present to throw in a paper, it is guaranteed that no bot army just opens a hundred anonymous accounts. Also, the papers are not associated to a particular person that way.
Have you heard of surveillance cameras and facial recognition? If a hostile actor knows in advance that members of a targeted online community will be physically present at a location at a given time, those people will be linked to the community. It doesn't take a lot from then to link specific persons to accounts.
Besides, libraries are having a hard enough time just existing in America. They don't need the burden of protecting the identities of dozens of people and fighting off lawyers and enforcers.
if the group of people registering their account names is big enough, facial recognition doesn't do much, as it can only link the person to one-of-a-hundred-or-thousand account names.
I don't think you fully comprehend just how many footprints people leave behind on the internet. Users would have to practice perfect opsec -- and I mean completely, absolutely perfect. One mistake, like using an e-mail address or an alias off-site, will link a person to the account. If that person cracks under legal threats, the entire operation is fucked. It's happened before.
Thinking you can solve the issue of privacy with a single idea is simply delusional.