frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Be wary of Bluesky

https://kevinak.se/blog/be-wary-of-bluesky
86•kevinak•2h ago

Comments

davidw•2h ago
Good points, but what's the alternative at this point?

Because of network effects, more users is generally more interesting. Blue Sky has "enough" at this point for me to be happy there. Programmers like antirez, my bike racing people like inrng, my city's mayor and one of our city councilors, and also a bunch of urbanists.

Edit: you lose some connections moving around, but I've also had friends I've known since the days of IRC. I think I'm mostly resigned to picking whatever works best in the moment and being willing to move (like abandoning Twitter) when it's not working.

PaulHoule•2h ago
https://indieweb.org/POSSE

which is not opposed to you being on Bluesky or Instagram or LinkedIn or wherever.

seandoe•2h ago
That's just not practical for most people (the publishing part). And in relation to microblogging, are you going to publish every 140-character, out-of-context thought on your personal website?
8organicbits•2h ago
There's other syndication models, although POSSE gets talked about most.

If you don't want to get your own domain and run a server (not practical for most people) you can still protect yourself from being stuck in a single silo by broadcasting to many social media sites.

https://indieweb.org/PESETAS

seandoe•2h ago
And the atproto is pesetas right? You publish to bluesky or whatever and the content is replicated to your pds. I recognize the minor difference, but if you have the energy and wherewithal to orchestrate pesetas across silos, surely you can setup a pds elsewhere.
8organicbits•1h ago
I think of PESETAS as more defensive than what a single protocol can handle. Imagine posting to Bluesky and using automation to syndicate the post to Twitter, Facebook, Mastodon, Threads, and more. If Bluesky goes evil, or you otherwise decide to ditch it, you've mitigated the network effect as you have followers on other platforms already. People can still find you and your content isn't lost.

Imagine if Bluesky decides to ban you, and continues to ban accounts you create elsewhere. Atproto ensures non-Bluesky PDS can see you, but you've lost 99% of the userbase.

kevinak•2h ago
Nostr - it has none of the problems mentioned in the article.
davidw•2h ago
But does it have a critical mass of people?

The Wikipedia page says "Nostr is primarily popular with cryptocurrency users, primarily Bitcoin users."

That's not my crowd.

irusensei•1h ago
I hear you but if you think about it who else has an incentive and skills to create something like Nostr? Who are the people interested in free speech, signatures and decentralization and with the skills to pull it up?

And since you mentioned primarily Bitcoin users those are the crypto folks that seem to be very against the idea of tokenizing everything.

From what I understand by posting something on Nostr you are posting signed events to a list of dumb relays. These events can be of many types and include hints of discoverability. There is no blockchain and no token and the thing they call zap is just a link to a lightning address that is up to the client to show.

Your account is your key pair so you are not at the whims of a power tripping administrator.

It seems like the perfect nesting ground for non corporate user content and pocket islands of communities. Nothing prevents someone from implementing a relay or community that bans any talk about Bitcoin or crypto. I for one would love to see closed content focused relays in Nostr.

manuelabeledo•1h ago
Isn't Mastodon an alternative?
davidw•1h ago
Not in terms of having a critical mass of users for many topics or being very accessible for a lot of people.
loeg•1h ago
If you're concerned about critical mass, Bluesky is also a dead end.
davidw•1h ago
I mean, I explained in my original comment exactly why it is not a dead end for me. It has 'enough' of the things I'm interested in to make it worthwhile.
moomoo11•1h ago
Go outside
dangond•2h ago
I might be misunderstanding something about atproto, but isn't it always possible to export data from bluesky because all it takes is reading your data, which is done by any app interacting with your pds anyway? If they block that, they're blocking atproto functionality entirely, no?
8organicbits•1h ago
> If they block that, they're blocking atproto functionality entirely, no?

Keep in mind, twitter got rid of their API. Google got rid of XMPP federation. Bluesky breaking or defederating atproto wouldn't impact most users, so they'd probably get less outcry than those examples.

https://support.google.com/code/answer/55703?hl=en

runako•2h ago
When reading any essay about the perils & merits of Bluesky's architecture, save yourself some time by searching for "Blacksky" in the post. If they don't address Blacksky, more than likely the author's understanding of the space has major gaps.

(Blacksky is the/one of the furthest along in building competing versions of each part of the AT proto stack.)

kevinak•2h ago
I know very well what it is, it doesn’t change anything in the grand scheme of things. I wish it did!
runako•1h ago
Re-reading my reply, it is worded more harshly than I intended. My apologies.

I do think it's a critical omission to not address the main player(s?) who are working on key parts of this, and where they may yet run into problems.

api•1h ago
Does it require people change defaults? If so then 99% will never use it.

A system or protocol is whatever the easiest user journey is. Anything outside of that will never be seen by many users unless there is some value to be gained by going there. And that value has to be something gained now, not a hypothetical like insurance against future closing of the network. People don’t like to buy insurance.

mcint•2h ago
It's good FUD. You re-iterate their talking points. (Also, no CTA, no takeaway, just "worry!")

As others have said, the data has to be publishable to be useful. We do have data export laws. The format is known to be ready to use interoperably, not some private schema--atop the PBC commitment, which will at least have moderate legal costs if not a guarantee. It has unequivocally set a new high bar.

They seem pretty locked in to doing what they committed to. The day may come when they turn. It may come first by friction, but the turn has to be pretty complete, because the data is pretty open. What's needed to view it, use it at all, is pretty close to what's needed to host it.

"The site whose value prop is sharing your posts and data with other apps may stop sharing your posts and data with other apps." Yeah, it's possible. It's also possible they just close.

AgentME•2h ago
Bluesky is architected so you can export your data and follows and followers to your own or someone else's infrastructure at any time. There are some groups that have taken that offer and moved off of Bluesky's infrastructure (see Blacksky). The fact that most people aren't doing that is a sign that people are happy with how Bluesky-the-company is running things. What's the issue?
kevinak•2h ago
Most people were happy with Twitter as well
AgentME•2h ago
And Bluesky is better because you're not locked in and can export your posts, follows, and followers off of their infrastructure if they start being evil or you randomly feel like it. Companies like Twitter effectively wield network effects to stop people from leaving. All of one's activity on Twitter increases the sunk cost to keep them on Twitter in a way that's not true for Bluesky.
mh-•52m ago
I don't have a horse in this race, but:

> [..] machine-readable archive of information associated with your account in HTML and JSON files. [..] including your profile information, your posts, your Direct Messages, your Moments, your media ([..]), a list of your followers, a list of accounts that you are following, your address book, Lists that you’ve created, are a member of or follow, [..], and more.

(Note that I actually elided some additional things that are included in the export, for readability's sake.)

https://help.x.com/en/managing-your-account/accessing-your-x...

AgentME•45m ago
You can't actually use your followers and following list from X on other sites. With Bluesky, you can move your profile onto other infrastructure, continue to see posts from people you follow, and make new posts that your followers still see like nothing happened. It's like how if you own your own domain name, you can set your MX records to whatever email service you want and change it when you want without affecting anyone you're having email conversations with.
mh-•25m ago
Ah, I see. Your use of the term "export" made me misunderstand. Though now that I've thought about it for a few minutes, I'm not sure what verb makes sense [to me] there. I guess "migrate?"

edit: also, thanks for clarifying!

zem•49m ago
whether you agree or not, asking "what's the issue" misses the point very badly, since the article is almost entirely about what the issue is (i.e. that most people will not change defaults and the default is to centralise on the bluesky servers)
AgentME•41m ago
The fact that the system is built around this escape hatch makes it miles better than almost all other social networks. An escape hatch doesn't need to be used by most people to be valuable.
AlienRobot•35m ago
It's weird to focus on that when there isn't a single thing in software that doesn't suffer from "everyone will just use the default anyway"
zem•33m ago
yeah I'm not saying the blog is right or wrong; I'm just saying that describing bsky's features and asking "what's the issue?" means you aren't engaging with what it's actually saying.
jmull•4m ago
I’m not the previous poster, but I don’t see any cogent points in the article to engage with in any depth.
Retr0id•2h ago
There doesn't seem to be a timestamp associated with this article, but it is based on outdated information.
kevinak•2h ago
How so?

I should add a time stamp to the blog.

why_only_15•2h ago
Pangram labs thinks this post is fully AI generated, for what it's worth. https://www.pangram.com/history/47460dd9-f9cc-45a8-81dd-dc59...
kevinak•2h ago
It is not, but I have used Claude to edit it.
tptacek•2h ago
Claude is an excellent proofreader, but don't let a single word it generates hit your final copy. Use it to catch things and point things out, and for nothing more.
kevinak•2h ago
I’ll keep that in mind, thanks!
650REDHAIR•1h ago
Why?
denuoweb•1h ago
The guy you are responding to has "All comments Copyright © 2010, 2011, 2012, 2013, 2015, 2018, 2023, 2031 Thomas H. Ptacek, All Rights Reserved." in his HN profile....
cyberge99•54m ago
Sounds like a hedge against Agentic bots.
tptacek•1h ago
It's good at spotting stuff, like:

* Overusing verbs

* Poor structure

* Bad transitions between grafs

* Passive voice

And even bigger-picture stuff, like "you might want to zoom in here" or "this section isn't paying off". I've only in the past few months started using it for proofreading, and it's pretty solid.

But if you take any of its words, you're infecting your writing with Claude's tone, and it will show.

It's super useful as a reader of your writing. It's a terrible collaborator, unless you're writing for an audience of middle managers.

cyberge99•54m ago
I’ve always had a sophisticated vocabulary, now people think my content is AI generated. Frown.
nilkn•2h ago
Pangram itself looks like it was just generated by Google AI Studio.
sbinnee•1h ago
Pangram seems like a useful service for the world we are going to face. To me the semicolon-newline pair reminds of AI almost immediately. I am surprised that this service didn’t point that out. It could be just to me this pattern is bothering though.

> His answer:

runako•55m ago
This app flags "'s infrastructure" as a hallmark of AI-generated prose. Other markers of AI generation include "'s not just", "making it", "'t just" (33x more likely in AI!), and "ecosystem".

I don't think it's trustworthy.

A_D_E_P_T•19m ago
"Where X actually lives" is a new hallmark of AI writing. I've noticed it a lot lately.
shablulman•2h ago
It’s easy to get caught up in the excitement of a fresh social graph, especially when the migration feels so organic. However, the author makes a poignant point about the inherent tension in building a protocol while simultaneously acting as its primary, VC-backed gatekeeper.

The real test for the AT Protocol will be whether it can truly decouple from Bluesky PBC before the pressures of monetization or an exit strategy kick in. Right now, we’re benefiting from the "honeymoon phase" of a platform that needs growth more than revenue, but history suggests that the bridge to true decentralization needs to be fully built before that dynamic inevitably shifts.

browningstreet•2h ago
Bluesky isn't my bank records, isn't my photo archive, isn't my github, isn't my Documents folder.

I don't care if Bluesky goes away, gets bought, whatever.

Social media is disposable like a retail outlet. I'm sad if the coffee shop around the corner goes out of business, but there are 99K coffee shops in the US. I can go to another one.

As it is, I don't use Meta or X.. because they're led by despicable beings. Bluesky gets a pass for now, and has enough interesting people that I show up and have a chat. Like a coffee shop or a bar.

davidw•40m ago
This is where I'm at, but it would be nice if it had some more longevity to it, as there are costs to switching to the next thing and the thing after that.
qwertox•1h ago
> If an acquirer disables exports, it doesn't matter that the tools existed yesterday.

Don't they have to give you your data upon request? And the cheapest way is to offer an export function? Wasn't this thanks to the EU (GDPR Article 20)?

Spivak•1h ago
Also, at best this says not to host your data on someone else's computer and keep control of it, which is a thing Bluesky explicitly supports and encourages.

Will normal people do it, no. But you can.

asadotzler•14m ago
They can give it to you in the least useful way imaginable and will. What we want and expect is an export that can be easily imported to some other provider and that's where the "good guys" can differentiate.

I can export decades of web browsing history, bookmarks, logins, etc. and import into any other browser with almost no trouble at all. Try to export your mainstream social network (facebook, twitter, insta, tiktok, etc.) content and connections and import it into another social network and let me know how that goes.

JKCalhoun•1h ago
"That's the same argument people made about Twitter. 'If it goes bad, we'll just leave.' We know how that played out."

Yeah, I left.

(And in fact I am wary of all social media.)

wmf•1h ago
There are specific steps Bluesky could take to decentralize the network. These are going to sound extreme but I agree with the article that it will never decentralize on its own. (Nothing will ever decentralize on its own so this isn't a criticism of Bluesky specifically.)

1. Strongly encourage backups.

2. Force users to migrate off the "official" PDS until it has less than, say, 40% market share.

3. Make the mobile apps use third-party relay/appview by default (could be randomized).

theturtletalks•1h ago
>> You can self-host a PDS. Almost nobody does.

Who would've thought true decentralization means everyone hosting their own server? Yes, each user would have to pay and maintain it, but that's the cost of decentralization. ATProto at least makes it easy to jump ship if shit hits the fan and not have to start from scratch. Try doing that with Twitter/Instagram/Etc.

publius_frog•1h ago
(Throwaway account.)

Several people have mentioned that "you can just own your own data, so that's enough, right?"

Interoperating with Bluesky requires you to either 1) opt into the did:plc standard, which is a centrally controlled certificate transparency log, or 2) have all your users create did:web accounts by manually setting DNS records.

So it is not possible to build on Bluesky at all without opting into this centrally controlled layer. This original post covers this, but maybe not in enough detail to stop commenters from missing the point.

Bluesky the company controls 95%+ of PDSes in the system, which control users' private keys, and they're extending PDSes to include more functionality that prevents users from easily exiting the network, e.g. private data is being implemented in a way where Bluesky LLC can see all your activity. The protocol changes often and with limited community input.

This is being done because "there are no other ways to do it" and "our users are okay with it". The community does pretty consistently attack people who dissent (e.g. look at what happened when Mastodon leaders objected). There's a lot of cheerleading for people who do opt into the system, and there's really no incentive for informed criticisms.

It's not really decentralized or neutral infrastructure; it's a great network for a number of specific subcultures who have a nice space away from X, and I hope the team embraces that.

vvpan•1h ago
> At every layer, the answer is "anyone can run their own." At every layer, almost nobody does.

But people do and it is reportedly fairly easy so the majority of people are on Bluesky's layers while all is well. But also I don't understand why any of this is a reason to be "wary", it's a great place to be with some unique technical properties - it is way more "open" than any other platform of similar scale.

icehawk•1h ago
> That's the same argument people made about Twitter. "If it goes bad, we'll just leave." We know how that played out.

Yeah, it played out with my whole social circle leaving, as evidenced by the fact that all my friends link me to the bluesky post whenever there's something happening now.

jongjong•1h ago
If anything gets too popular too quickly, I just assume it's a PsyOp. That kind of growth requires extensive media coordination and big money. If you're not paying for a product, then you are the product. As sure as gravity.
beders•1h ago
This never-ending whining about oooh but my data ... for a service that you can use for free is nauseating.

This is a for-profit company running this service. It ain't free to operate.

If you don't like that, go elsewhere.

If there is one thing that has been a resounding success on the internet it is this: free services that you pay for with your clicks. Just look at the plethora of free services you get.

In no other economy would that be even remotely possible.

8cvor6j844qw_d6•36m ago
Bluesky's behavior here isn't surprising.

They already ban signups using email aliases, and apparently block alias emails to their unban support address too.

Keep Android Open

https://f-droid.org/2026/02/20/twif.html
1091•LorenDB•8h ago•423 comments

Turn Dependabot Off

https://words.filippo.io/dependabot/
274•todsacerdoti•4h ago•76 comments

CERN rebuilt the original browser from 1989

https://worldwideweb.cern.ch
83•tylerdane•3h ago•28 comments

I found a Vulnerability. They found a Lawyer

https://dixken.de/blog/i-found-a-vulnerability-they-found-a-lawyer
349•toomuchtodo•7h ago•168 comments

Facebook is cooked

https://pilk.website/3/facebook-is-absolutely-cooked
737•npilk•7h ago•437 comments

Ggml.ai joins Hugging Face to ensure the long-term progress of Local AI

https://github.com/ggml-org/llama.cpp/discussions/19759
669•lairv•12h ago•166 comments

Wikipedia deprecates Archive.today, starts removing archive links

https://arstechnica.com/tech-policy/2026/02/wikipedia-bans-archive-today-after-site-executed-ddos...
300•nobody9999•7h ago•173 comments

Cord: Coordinating Trees of AI Agents

https://www.june.kim/cord
15•gfortaine•56m ago•2 comments

OpenScan

https://openscan.eu/pages/scan-gallery
94•joebig•5h ago•3 comments

Show HN: Mines.fyi – all the mines in the US in a leaflet visualization

https://mines.fyi/
53•irasigman•5h ago•33 comments

What Is OAuth?

https://leaflet.pub/p/did:plc:3vdrgzr2zybocs45yfhcr6ur/3mfd2oxx5v22b
10•cratermoon•50m ago•0 comments

Claude Code's compaction discards data that's still on disk

https://github.com/anthropics/claude-code/issues/26771
9•aciccarelli2•1h ago•4 comments

Every company building your AI assistant is now an ad company

https://juno-labs.com/blogs/every-company-building-your-ai-assistant-is-an-ad-company
98•ajuhasz•7h ago•44 comments

Blue light filters don't work – controlling total luminance is a better bet

https://www.neuroai.science/p/blue-light-filters-dont-work
120•pminimax•8h ago•154 comments

Index, Count, Offset, Size

https://tigerbeetle.com/blog/2026-02-16-index-count-offset-size/
11•ingve•2d ago•0 comments

Across the US, people are dismantling and destroying Flock surveillance cameras

https://www.bloodinthemachine.com/p/across-the-us-people-are-dismantling
139•latexr•3h ago•39 comments

The true story behind the Toronto mystery tunnel

https://macleans.ca/society/elton-mcdonald-and-the-incredible-true-story-behind-the-toronto-myste...
31•mhb•3d ago•8 comments

Don't create .gitkeep files, use .gitignore instead

https://adamj.eu/tech/2023/09/18/git-dont-create-gitkeep/
33•frou_dh•3h ago•19 comments

Trump's global tariffs struck down by US Supreme Court

https://www.bbc.com/news/live/c0l9r67drg7t
1246•blackguardx•10h ago•1013 comments

Uncovering insiders and alpha on Polymarket with AI

https://twitter.com/peterjliu/status/2024901585806225723
80•somerandomness•8h ago•54 comments

The path to ubiquitous AI (17k tokens/sec)

https://taalas.com/the-path-to-ubiquitous-ai/
669•sidnarsipur•15h ago•383 comments

Lexega Turns SQL into Signals

https://lexega.com/blog/how-lexega-turns-sql-into-signals
7•whoami4041•2h ago•7 comments

Lil' Fun Langs

https://taylor.town/scrapscript-000
94•surprisetalk•8h ago•11 comments

Building a model that visualizes strategic golf

https://golfcoursewiki.substack.com/p/i-spent-the-last-month-and-a-half
37•scoofy•4d ago•14 comments

Legion Health (YC) Is Hiring Cracked SWEs for Autonomous Mental Health

https://jobs.ashbyhq.com/legionhealth/ffdd2b52-eb21-489e-b124-3c0804231424
1•ympatel•9h ago

Show HN: A native macOS client for Hacker News, built with SwiftUI

https://github.com/IronsideXXVI/Hacker-News
173•IronsideXXVI•12h ago•136 comments

How to Review an AUR Package

https://bertptrs.nl/2026/01/30/how-to-review-an-aur-package.html
55•exploraz•3d ago•7 comments

Be wary of Bluesky

https://kevinak.se/blog/be-wary-of-bluesky
86•kevinak•2h ago•62 comments

I found a useful Git one liner buried in leaked CIA developer docs

https://spencer.wtf/2026/02/20/cleaning-up-merged-git-branches-a-one-liner-from-the-cias-leaked-d...
613•spencerldixon•12h ago•216 comments

Making frontier cybersecurity capabilities available to defenders

https://www.anthropic.com/news/claude-code-security
95•surprisetalk•8h ago•50 comments