The way I do it, if someone says they are actively searching, they roll and take what they roll. If they are not, then I use the passive score to let them know if they see something. However, I have played with DMs that use a rule where if you roll less than you passive then you can use your passive score.
I think that's the point. If you looked at a headline for something you already know about, then you already know if it bogus or not. If you already know how reliable the source is, then your exposure to risk of accepting bad information is reduced. The point is to see if you are susceptible to new information that is bogus, and if you can recognize when a source you haven't seen before is unreliable.
Data signing is something I hadn't thought of. I was envisioning something simpler, like individual authentication servers. It would then be up to each content server to appropriately tag each entry. Each organization (or individual if they want) would have an authentication server that verifies identity. Throw in some OAuth so each organization can control how the user is identified, and I think it could work.
I can see the advantages of signing, though. Instance admins could pull a Spez, nor create posts in your name, and you can verify content ownership. There's nothing that says a public key can't be part of the authentication package. Drop in a LetsEncrypt integration and we have a solution.
That just seems like another reason to adopt it, to me.
That's true. If you have one identity for everything, then it's trivial to collate your data. Maybe we can have a Do Not Track flag! That always works!
But seriously, that does open up an interesting topic on privacy in the fediverse in general. As it stands, it wouldn't be hard for an advertiser to open up a federated Lemmy instance and gather all kinds of data on every Lemmy instance, which could then be used for advertising on... what, Lemmy servers? I did read about some server reputation services people are working on to ban bot farms, so that might help there, but it's not a whole solution. Could something like that be extended to the ecosystem as a whole? But then how much responsibility for a person's privacy falls on the server operators versus themselves? Or in the end, would the benefits simply outweigh the risks, and we'd have to take the good with the bad, and people would just have to follow the usual rule of not putting anything on the Internet that you don't want the world to know? A lot of gray area there.
(Sorry for the train-of-thought posting style. I'm kinda imagining things as I go.)
Federated identity and integration thoughts
So an earlier post got me musing idly on the topic of integration between multiple federated services. Wouldn't it be nice to be able to integrate video hosting, discussions, microblogs, image sharing, and so on in beautiful seamless glory! Post a pic in Lemmy, it's automatically added to your Pixelfed album; upload a song to your NextCloud and people can see it in your funkwhale profile. That kind of thing.
One of the things that I figure will be useful reach that goal, I figure, is a form of federated identity management. Linking accounts can be done, but there would be a lot of advantages to having one account that knows where the different services you subscribe to are located, allowing the integration to happen seamlessly in the background.
And looking around, I see that it already exists as a concept, but I can't seem to find anyone discussing or implementing it in the Fediverse. For something that would solve a lot of problems, including decentralized (and self-controlled) identification, SSO, and account migration, it seems like something that everyone would be jumping on.
Am I missing something?
That's the fun part. You can subscribe to the content on another instance from your "home" instance. Right now I'm subscribed to feeds from possumpat.io, lemmy.ml, and more, and they all show up in my feed on my kbin.social home page. Even this post is on feddit.de, and I'm using my kbin account to reply.
I see so much integration potential here. Want to post a video? It posts to a local PeerTube instance and embeds the video in the Mastadon post. Use Drupal to organize files in a local NextCloud instance for sharing on Lemmy. Use Mobilizion to set up community events in Kbin.
I'm not sure. Let me Google that real quick to see.
Sometimes, security just means not being the low-hanging fruit.
For active, ever-changing and/or temporary information, such as Island Sanctuary or Fashion Report, I find Discord is just about right. You can just follow a feed that displays the current state. Since no one cares what the Fashion Report was three months ago, historical data is not needed. Sure, a website could do this, but it would just be another single-purpose site on the huge list of other single-purpose FFXIV sites (fishing data, anyone?). Either way, a Reddit post is less than ideal.
From my perspective, if I'm looking for something on Reddit, it's usually for something like a post where someone asked some esoteric question I also want to ask. Lore questions, furniture glitching, UI questions, things like that which are not covered by the normal sites because it's too specific.
That said, I was using the Reddit posts for IS and FR before the blackout, and moved to Discord to get that data only when I couldn't get it from Reddit anymore (and found I like it better for that specific data), but for a lot of people, they may not want/know how to get that info from Discord, or prefer to have a central source for everything.
My guess is that we are hearing from people who don't use Discord for whatever reason (and there are multiple legitimate reasons to not do so) to get their weekly data, people who had those esoteric questions and were banging their head against a wall trying to get answers, or sprouts who didn't know where else to turn.
(Honestly, a central source for all this data would be the ideal solution, but what a herculean task that would be. Many have tried, though.)
For those of us who understand how the platform works, it wouldn't be an issue. However, if we want mass adoption of the platform, we need to take into consideration those who don't fully understand the technology and avoid situations that will lead to scams where feasible. Names of authority, like admin, root, super, etc., make a user appear to have authority they don't, which can mislead new users. ("Support our server by sending bitcoin to this address that is really my personal wallet" type scams comes to mind.) You could say that it's the person's fault for falling for it, but it's something that would drive people away from the platform which can be easily avoided in the first place.
If you still have access to your old My Documents directory, you can recover them.
Summoner used to be the pet job. In it's first incarnation, you had three pets to choose from: a magic DPS (Garuda), a melee DPS (Ifrit), and a tank (Titan). They had hit points and a combat AI. You had pet-only heals, the ability to give direct commands (attack this, wait here, just defend me, etc.), and so on. Over time, though, that slowly morphed into what we have now.
All this is to say, I doubt we'll get a pet class. We already had one and they took it away.
This post makes no sense. He says people are complaining about how hard it is to get some flatpacks to function, therefore they hate the fact that Flatpack is a disruptive new distribution model. What?