Back

Strictly speaking, I agree, ATProto can scale down in this use case! For example, if you wanted to make a small specialized forum for collaborative storytelling, you could use ATProto for it, and that's true, you could do it

But is it the right choice?

In some ways we are talking about two different things here: extension of functionality (which you might want the same scale for) and having a smaller and more isolated community

But regardless

ATproto positions itself *specifically* as designed for not wanting to miss messages, and I talked previously about how ATProto's design requires a god's-eye view.

It's a bit strange of a choice when you say "let's run a smaller community"

Given that message passing systems handle small scale systems *beautifully*, and *still* allow for interactions with larger scale systems, it's a bit confusing to me *why* you'd choose ATProto for such use cases. What is the specific benefit you'd gain? Especially because it's actually lossier here

At any rate, there's a bit of conflation here. "It scales down" by saying "you can have an isolated community/use case that's oblivious to the rest of the system" is categorically distinct from "it scales down" in terms of "a small node can meaningfully participate with the larger system"

At any rate, the problem with "scaling down" is much clearer when it comes to the problem of "scaling wide".

Or let me put it a different way: ATProto *explodes in complexity* when you try to scale it towards meaningful decentralization

Yes that's right we're getting to the spicy part of this conversation. We did the warm-up, now it's time to talk about the real thing, whether or not decentralization in the way I believe people *think* that term means is reasonably possible with ATProto as it's currently designed

But before we do that, I need to stretch and run to the bathroom

So for those of you following along, if you found this, Secret Goblin #3, let me know: ""

Oops wait actually we gotta talk about that one for a sec there's a reason I left it in scare quotes

Why on earth is the textual descriptor for Unicode U+1F47A "JAPANESE GOBLIN", does anyone know?

It's a Tengu, right?

Despite being the only actually named "goblin" emoji, I feel awkward about this one because is it correct to call it a "JAPANESE GOBLIN" instead of just "TENGU"?!?!

I don't know!

If you have knowledge or OPINIONS about "", its name choice in unicode, or, for that matter, a white person just dropping it in the middle of a group chat WITHOUT putting it in quotes (I did tho), feel free to derail the comment thread

Otherwise it's time for a

=== STRETCH BREAK ===

I'm back. It's time to talk about it: does Bluesky/ATProto suffer a "quadratic explosion" as we move from centralization towards *meaningful* decentralization?

I claimed it did, but I was challenged on this. What did I mean? Am I right or wrong?

It's time to find out!

In the previous blogpost I said the following:

> If this sounds infeasible to do in our metaphorical domestic environment, that's because it is. A world of full self-hosting is not possible with Bluesky.

(cotd)

Decentralized ATProto is quadratic quote, cotd:

> In fact, it is worse than the storage requirements, because the message delivery requirements become quadratic at the scale of full decentralization: to send a message to one user is to send a message to all. Rather than writing one letter, a copy of that letter must be made and delivered to every person on earth.

This was probably the thing I got the hardest pushback on from a team member of Bluesky, that it is not quadratic as we scale towards decentralization.

Truth be told, I don't have a degree in CS. Most of what I know I learned from studying independently and community resources. Was I wrong?

Just as a quick aside, regarding that comment about "agency", maximizing the agency of everyone (and more importantly, minimizing subjection!) sits at the heart of my ethical framework https://fossandcrafts.org/episodes/11-an-ethics-of-agency.html

So I don't disagree on that part, but that's an aside!

Now, I said I won't read replies until I am done summarizing things, and that's true, so maybe someone has gone out of their way and proven that I am wrong, that the claims in my article are factually incorrect and so on and so forth. I wouldn't know yet.

But... I don't think I'm wrong.

As said I'm very self-conscious about these things because I *don't* have formal CS training. But I do a lot of research and so I've tried to become knowledgeable about these things and this *seemed* like the correct analysis to me

Because of that, I turned to people who actually knew more than me

For one thing I derailed the entire Spritely morning standup by walking everyone through the scenario. I gave the story example, which I'll detail later.

But @dthompson didn't find the story helpful, too much narrative detail. "I need to work through this example independently." So he did.

@dthompson came back and laid it out in more formal terms and said I was right.

But I was still nervous, so I called up one of my old MIT AI Lab type friends and rambled about it to them on a call. What did they think?

"I think it's pretty clear immediately that it's quadratic. This is basic engineering considerations, the first thing you do when you start designing a system," they said.

Well that's a relief, why isn't it clear to everyone else, I asked?

So they suggested I lay it out to you as I did to them.

Let's start with the following:

- ATProto has positioned itself as "no compromises on centralized use cases". Well, in that case, let's say it can't do *worse* than eg ActivityPub. This includes with replies. You can't do *worse* than ActivityPub on replies and mentioning someone, etc.

- We will interpret the most centralized system as one where there's only one provider for storage and distribution of all messages: the least amount of user participation
- The flip side of the spectrum of maximum decentralization is the *most* amount of participation: every user self-hosts.

- Just as blogging is decentralized but Google (and Google Reader) are not, it is not enough to have just PDS'es in Bluesky be self-hosted. When we say self-hosted, we really mean self-hosted: users are participating in the distribution of their content.

- We will consider this a gradient. We can analyze the system from the greatest extreme of centralization which can "scale towards" the greatest degree of decentralization.

- Finally, we will analyze both in terms of the load of a single participant on the network but also in terms of the amount of network traffic as a whole.

Okay. That is the structure we will use for our analysis. Let's compare "message passing" vs ATProto-style "global public shared heap".

So okay. Let's get the CS notation out of the way:

"Message passing" at full decentralization:
- O(1) from a single node's perspective
- O(n) from a whole-network zoom-out perspective (inherent: add a user, it's one more user)

Okay, that's reasonable and what you'd expect

"Public global no-missed-messages (or not worse than AP) shared-heap" ATProto style at full decentralization:
- O(n) from a single user's perspective (!)
- O(n^2) from a whole-network perspective (!!!!!!)

Oof I'd better back this up because that ain't good!

In other words, as our systems get more decentralized, message passing handles things fine. Individual nodes can participate in the network no matter how big it gets. The zoom-out for the network as a whole doesn't get more complicated as we add more users OR move more users towards self hosting.

Things are NOT good, if I'm correct above, as we make things more decentralized in the atproto-public-shared-heap model. The more self-hosting and indeed the more "full nodes" join, the more it gets expensive for each of the nodes and the network EXPLODES!

Truly self-hosted atproto is NOT POSSIBLE!

And there is no solution to this without adding directed message passing. Another way to say this is: to fix a system like ATProto to allow for self-hosting, you have to ultimately fundamentally change it to be a lot more like a system like ActivityPub!

Now I left more of the precise analytical explanation in my blogpost. But social media isn't great for that, so go check out my blogpost if you want to go through all that (eg if you're more like @dthompson and less like me, I'm a narrative person) https://dustycloud.org/blog/re-re-bluesky-decentralization/

Here's our story:
- We have 26 users: [Alice, Bob, Carol, ... Zack].
- Each user sends one message per day, which is intended to have one recipient. (This may sound unrealistic, but it's fine for modeling.)
- Each user sends a message in a ring: Alice => Bob, Bob => Carol, ... Zack => Alice

Now just before you say "wait but ATProto isn't for DMs", yes, but one way this could happen is that eg Bob follows Alice, Carol follows Bob, etc.

What I'm saying is, messages can have an "intended audience". That's what we're using here.

Before we get into this, remember, the main difference between "message passing" and the "shared heap" is the former has directed and delivered messages, the latter does not. See prev blogpost for explainer.

So, what happens in a day for both systems? Because that's what we really want to find out.

Under message passing, Alice sends her message to Bob. Only Bob need *receive* the message. So on and so forth.

- For an individual self-hosted node, messages passed per day: 1.
- Per the decentralized network, total messages passed zooming out: 26.

That's about what we'd expect.

Under the public-gods-eye-view-shared-heap model, each user must know of all messages to know what may be relevant. Each user must *receive* all messages.
- Individual self-hosted server, 26 messages must be received per day.
- Zoom out on whole decentralized network: 26*26: 676!

Sounds survivable with 26 users though, right?
Let's try just adding 5 more users.

Message passing:
- Per node per day: no change.
- Per the network: 5 more messages.

Public gods-eye-view-shared-heap-model:
- Per node per day: 5 more per day
- Per network: ((31 * 31) - (26 * 26)): 285!

Now, could we handle a million self hosted users? Is it possible? No problem in message passing. EXPLOSIVE with atproto.

What if we had a million users and added just 5 more? How many more messages must the network bear?

5 new messages in message passing.
*10,000,025* new messages sent in atproto!

"Christine that's ridiculous, we're not expecting a million self-hosted users"

Well I think it would be nice!

But regardless, ActivityPub has 27,000 servers on it, all meaningfully participating in the network.

ATProto, in its current design, would be crushed to DEATH

"But Christine", you may say, "I heard gossip might fix this!"

No. It cannot.

In fact, I was being more generous than a gossip network, and assumed you only *received* a message once.

With gossip you might *receive* more than once.

But you need to receive a message to know it.

In other words, the public god's-eye-view allows for a pantheon, but not a civilization. You can only have so many gods who see all.

An important characteristic of a decentralized system is scoping what you *don't* need to know.

This wasn't in the design goals of ATProto, and it has effects.

I may be coming across as some academic computer science nerd. It's actually the opposite. I'm a humanities nerd who cares about the agency of users so much I've twisted myself into a shape where I can do a computer science thing.

But architecture matters. It affects the worlds we can have.

This is what I say when I say that Bluesky's goals of "credible exit" may be reasonable, but it's not decentralized. There is no getting around the fact that the system, as designed, is designed for a few large players. Small players can play on the *periphery*, but they can't play the big game.

Now, you might think, maybe ATProto could fix this!

And it can.

And the solution, ultimately, will end up looking... a lot like ActivityPub.

The point is that nearly everyone knows at this point that "sure, Bluesky is centralized today, in practice!" But a lot of the responses I see are "but decentralization is just around the corner thanks to ATProto!"

So that's why I'm writing this out.

Well, that's it. We've reached as far as we're going tonight.

There's still a bit left, a bit of reframing about what I am and am not concerned about with decentralized identity, and then a bigger topic about Bluesky's design goals vs community expectations. Then we'll talk talk about values.

Those last two, expectations and values, are really important to me. And I think they'll maybe be the most thoughtful part of all of this.

Of course, they're probably not what most people care about from me, about this. Probably what I've said is all many care to hear from me and that's fine.

For those who care about such things, tune in tomorrow, where hopefully we'll wrap this up. For those who were just hoping to hear the decentralization analysis, hope you found it useful.

Regardless, I wish you a very happy

=== REST OF TODAY BREAK ===

Well hello.

So yesterday I stepped onto a crumbled piece of sidewalk, twisted and sprained my ankle, and fucked up my wrist. That, and I think I've said the most important things and this is day *three* of summarizing things from my blogpost, so I will be brief.

Sadly, I'm stopping where things take a positive turn in my article: talking about values, which I thought was a nice part of both @bnewbold and my articles.

I think the values/design goals Bryan did lay out are nice, and I talk more about ActivityPub and @spritely's values.

It was nice to be prompted about @spritely's values and it lead to a good conversation internally, and we did capture those in my blogpost, but I think that should be covered again from a more official organizational side, separate from this.

I also clarified a bit: the parts I'm concerned about with the did:plc stuff aren't as much the governance, and I think Bluesky is taking some good steps there by planning a certificate transparency log. That's good. Glad to see it.

I do think Bluesky is heading in a tough direction though in terms of community expectations vs the ATProto philosophy that replication and indexing of a firehose are the primary way things work.

It's a tough situation but Bluesky is speedrunning Twitter so fast it practically is Twitter.

People want Bluesky's devs to prevent their content from being replicated and indexed by people they don't like, well, I think it really is that: a *conflict*.

People were encouraged to join a Twitter replacement, they are expecting Twitter-like solutions. Can't blame 'em.

Given that "anyone can replicate and index!" is literally the *entire* design philosophy of ATProto, it's not going to be something easy to solve. I don't have an answer, but hey, I'm working on fairly fundamentally different designs, so it's not my problem to solve.

That said...

Like the present-day fediverse, Bluesky was majorly popularized by a bunch of queer people early on. As a trans person I watched a bunch of my friend join and felt so safe they posted things they never would have in today's environment when the community was small.

The decision about whether or not to boot horrible, well known transphobic people (protip: answer is yes) from the platform seems clear enough to me. I'm not sure the "speech vs reach" approach is working.

And it seems to me people are finding they don't have tools in their hands to do anything.

For all its faults, and there are *many* and I have *railed* against the instance-oriented approach to moderation on the fediverse and have been writing about and working towards alternatives for a while, instance moderation empowers better here.

I think this will be a real test for Bluesky.

But more broadly I think *neither* the present-day fediverse nor Bluesky meet the needs of the future.

The "global town square" is a social media concept invented by centralized social media in the early web 2.0 era.

Social media by millenials, for millenials. What's the future?

So to some degree, I don't have a lot of interest in trying to figure out what the solution to this is, because I think these are the wrong designs. I don't like the context-collapse firehose much at all, I'm interested in "contextual communication", "secure collaboration", and "healthy communities"

@josef Yep oops, fixed