by Blender Dumbass
Aka: J.Y. Amihud. A Jewish by blood, multifaceted artist with experience in film-making, visual effects, programming, game development, music and more. A philosopher at heart. An activist for freedom and privacy. Anti-Paternalist. A user of Libre Software. Speaking at least 3 human languages. The writer and director of the 2023 film "Moria's Race" and the lead developer of it's game sequel "Dani's Race".
How AI broke Petitions?
The way I was doing my petitions was rather simple. I would find an API call to some webserver ( usually related to the
Fediverse ) and would give my website this API call and a data-point to look for. For example: In the
Dani's Race v2025-03-17 Petition, the petition is referencing the amount of followers for
@rowdyjoe@mastodon.social.
I give it this link:
https://mastodon.social/api/v1/accounts/lookup?acct=@rowdyjoe
If you try to actually go there you will see that this is just a simple JSON thingie with data. And so I tell my server to look for
followers_count. Which is ( at the time of writing ) sits at 31. Because
@rowdyjoe@mastodon.social has 31 followers.
The webserver is trying to load this link every once in a while ( every 10 minutes or so ) to update the counter and with it to update the progress bar of the petition.
The problem is, it fails to load this API call.
Yes, you and I can just click on the link and it will work just fine, but my webserver fails to even load it. And I tried anything. I tried making it pretend to be a browser. It didn't work. I tried using
curl. It didn't work. Nothing I try seems to work. And I think I know why.
Those pesky AI scraping bots, OMFG!
The petition idea cannot work unless I can systematically tell my server to check some API call. And due to AI companies wanting to scrape everything for the sake of IDK what, those API calls are getting harder and harder to access, because the web-devs of platforms are taking security against AI scraping bots more and more seriously.
Forget about me setting up a petition for a person that seems to not even care about his mastodon account, due to low number of followers. Forget that I try to shove an unknown account into people's faces for a gimmick related to a game that nobody wants to play. All of those things are kind of okay, in some silly way ( even though the current petition would be running for a year soon ) if the damn thing worked in the first place.
A new Fediverse gimmick?
Here is something that I might try to do though. One thing I didn't try is to refactor the petition system, such that it will use
ActivityPub specifically ( which will make some things un-petition-able, but would probably work fine, while the server has the rest of ActivityPub working as well ).
But thinking about ActivityPub gimmicks specifically I thought that maybe I can try to develop a separate gimmick for single unlocks of single files. Or something.
Here is how in theory it could work:
If you ever seen an
Owncast Livestream you know that you can "authenticate" yourself with an existent Fediverse account. You give it your Mastodon handle. It sends a private message to you ( to your mastodon ) with a code. And you copy-paste this code into Owncast, to authenticate.
It is not very secure, yes. But it is a cool concept, for not so important things.
How about using it for something like petitions?
Let's say I make a button somewhere for you to "authenticate". Which will work the same exact way. The website will treat it as a sort of soft-login. Maybe people with actual accounts could authenticate once and for all. While other people might periodically re-authenticate.
In any case. As soon as my server knows who you are on the fedi, it can play games with you on the fedi.
For example, I could setup a list of posts on the fedi, boosting which, gives people points of some-kind. We can make a silly gamification token or something for this sort of thing.
Say I want you to follow
@rowdyjoe@mastodon.social. If you are following
@rowdyjoe@mastodon.social you can claim say 10 FA ( Fedivese Actions ). And those 10 FA you can spend on petitions or unlockables or anything else on the server.
Now obviously this is not a secure thing to do. These fedivese actions probably should not be transferable ( so it is not a currency ). And I should put a huge warning saying that there is absolutely zero security involved with this.
But... This could be a fun little thing to code.
Happy Hacking!!!
3
Find this post on Mastodon