julian

As I wrote before, My smart watch is open source. Awesome!

Let's make this fun — for children in particular — and show how we can bend the device to our will because FOSS means it's truly ours, fully under our control.

• Related docs: Disclosure of Identity Attributes page on Moderator Tools for PubHubs web site.
• PubHubs-moderation live demo: central.ph.s.trax.im/client
  • TODO: instructions; basically you need Yivi app with dev mode enabled and two sets of demo credentials (one as moderator, one as recipient)
• disclosure UI live prototype: on qx.trax.im

Disclosure Flow

A moderator asks someone to disclose an attribute of their real identity. The recipient provide the requested attribute, using Yivi to attach a cryptographic proof.

In the last update I introduced a demo of attribute disclosure. I have since completed the main TODO there, making the disclosure flow happen on the recipient's account. (In the first demo the moderator's role and the recipient's role both took place in the same login session in the same account.)

This week I have been thinking about how we will need to improve the user experience, or flow, of this disclosure request and response.

Writing the dialogue boxes and associated logic by hand was tedious and buggy. Rapid prototyping would be helpful. I decided it's time for me to learn a better way. Being new to UI design and fervently open-source principled, I searched for a FOSS solution and found Quant-UX.

This month I have been building a PubHubs-specific feature, the ability for a moderator to ask a someone to disclose an attribute of their real identity.

• Related docs: Disclosure of Identity Attributes page on Moderator Tools for PubHubs web site.

When a person signs in to PubHubs hub through the Yivi verified credentials system, initially they are allocated a pseudonymous user identifier, for example @123-321:testhub.matrix.host. From this pseudonym, not even an operator or moderator of the hub can discover the user's real identity.

A moderator may wish to ask a user to confirm their real identity, to some degree. Through Yivi it is possible to ask a user to reveal a cryptographic proof [1] of one or more of their identity attributes. Some common attributes are one's real name, physical address, or email address. An attribute could also be something like “age is at least 18 years”.

First Demo Version

Dear Local Organisation,

As a member of this Organisation, I would like to thank you for your efforts to keep your members updated, and for periodically re-evaluating the best way to do so.

Unfortunately you have lost me by asking me to join Mr Zuckerberg's Facebook club in order to receive your information.

I would like to invite you in your next reevaluation to consider providing your primary communications through a channel that is in the nature of a public utility, not a private members club.

I will explain why and how.

(I am professionally involved in the subject area of public non-proprietary communications channels.)

Contents:

1. A personal, heart-felt tirade on why this is so wrong.
2. Professional advice on the right way to communicate.

Facebook is Not a Public Utility

I am aware lots of people have begun to treat Facebook as if it were a public utility. Doing so is a mistake and causes deep problems. [[1]][ellis1]

As if I didn't have enough else to do with my evening, I spent it making this. Why?

Last week I began making this primitive Draupnir (moderation bot) UI, in my PubHubs work.

A non-Amazon wish list, anyone?

I once thought I was making a neutral choice to shop at Amazon, and that their wish list was a nice convenience.

Just like I one thought Google was my friend, and signed up for their “free” email. I deeply regretted that and have now deeply deGoogled.

Nowadays I recognise a greedy mega-corp when I see one, with everything wrong that goes along with that, and so I shut down my wish list there and almost completely avoid shopping there.

Are you asking yourself,

“What's it to be: Android or iPhone?”

Actually, NO! There is another way.

Time I Learned: there are freedom-respecting phones.

I'll tell you which one you need.

What's the problem?

What's so bad about choosing either Google or Apple?

It's about who controls our use of the device after we “bought” it. Do “they” remain in control of what we do, or are we in control?

Android or iPhone — either Google or Apple delivers our messages — surely? You don't accept that?

Time I Learned: there are freedom-respecting phones.

People who do not want to depend on Google or have them control our devices are using android-compatible but not google-controlled phones, a.k.a. “degoogled phones”. We have been asking (ourselves) for several years if we can have google-free push notifications. Thanks to the developers of the UnifiedPush standard, the answer is now, “yes!”

But why?

UnifiedPush open-standard push messaging complements degoogled android-compatible phone OS's such as LineageOS.

People who do not want to depend on Google or have them control our devices are using android-compatible but not google-controlled phones, a.k.a. “degoogled phones”. We have been asking (ourselves) for several years if we can have google-free push notifications. Thanks to the developers of the UnifiedPush standard, the answer is now, “yes!”

The open standard UnifiedPush.org has now been created. While not a large number yet, a useful handful of apps already support UnifiedPush, including several matrix and fediverse apps. For its servers and the associated client-side “distributor” component, there are multiple successful implementations deployed.