So you are up against a non-five eyes state Actor, with non-NSA size budget but a decent army of hackers. What protects you better? One or two people running your instance as a hobby, or Zuck?
@wallace On one hand, it's unlikely someone using Mastodon will be thus targeted. However, I would posit most people have not considered, or even comprehend, the difficulty and cost of securing infrastructure. Particularly when it's based on code you don't control. Yes it's all open source, but relying on that is beyond even advanced devs with day jobs. Though OpenBSD does an admirable job of it!
@voidstar I am a technoweenie, but I know the virtue of hiding in plain site and looking inconspicuous. In some places a Signal confirmation SMS can get you a visit from state security, a confirmation SMS from WhatsApp is totes normal though.
