Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
view the rest of the comments
Well, this is a more philosophical question, but it is a result of misaligned incentives and not because someone is having some evil master-plan. Most of today's Facebook like sites didn't start out as evil empires, they became so basically by necessity once they chose a certain trajectory. The only way to prevent that is to have strong defense mechanisms in place from the very beginning and that then can easily appear as the other extreme.
But only accepting one possible alternative is an extreme. You can build in safeguards... but if they're too rigorous you will drive away potential users. Much like with freedom and security, you need to middle ground between accessibility and defensibility.
No one talks about only one possible alternative, but it is often not immediately obvious to laypersons why a defense mechanism is vital to have and can not be made a middle ground. Like for example there is no way to weaken end to end encryption a little bit to scan for CSAM, without breaking it entirely.
If there's only ever one avenue of attack, sure. Your example posits that encryption is the only security layer that exists, which is laughable. Most security breaches happen at the personnel level, not the technical one.
A site does not "become facebook" just because it's not 100% decentralized from every other possible service. Countless other factors go into it. Not the least of which is the nature of the people running it. If you run a service, and make it nigh impossible for a general public (your main market) to use because you fear it will become compromised, you are basically saying that you will compromise it otherwise, and probably shouldn't be running that service.
No, this isn't about individual persons turning bad or something silly like that. You can't have a little decentralization either, for economic reasons. Once you get large instances in a supposedly decentralized network these by necessity need to professionalize sooner or later. Which means they need to find investors and a way to gain income from it. And then the enshittification commences... it is naive to believe that you as the founder are immune to that and if you try to resist it, the investors and other staff will find a way to push you out.