Solving the Moderator's Trilemma with Federation
The classic trilemma goes: âFast, cheap or good, pick any two.â The Moderatorâs Trilemma goes, âLarge, diverse userbase; centralized platforms; donât anger usersâââpick any two.â The Moderatorâs Trilemma is introduced in âModerating the Fediverse: Content Moderation on Distributed Social Media,â a superb paper from Alan Rozenshtein of U of Minnesota Law, forthcoming in the journal Free Speech Law, available as a prepub on SSRN:
https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4213674#maincontent
If youâd like an essay-formatted version of this post to read or share, hereâs a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:
https://pluralistic.net/2023/03/04/pick-all-three/#agonism
Rozenshtein proposes a solution (of sorts) to the Moderatorâs Trilemma: federation. De-siloing social media, breaking it out of centralized walled gardens and recomposing it as a bunch of small servers run by a diversity of operators with a diversity of content moderation approaches. The Fediverse, in other words.
In Albert Hirschmanâs classic treatise Exit, Voice, and Loyalty, stakeholders in an institution who are dissatisfied with its direction have two choices: voice (arguing for changes) or exit (going elsewhere). Rozenshtein argues that Fediverse users (especially users of Mastodon, the most popular part of the Fediverse) have more voice and more âfreedom of exitâ:
https://en.wikipedia.org/wiki/Exit,_Voice,_and_Loyalty
Large platformsâââthink Twitter, Facebook, etcâââare very unresponsive to users. Most famously, Facebook polled its users on whether they wanted to be spied on. Faced with overwhelming opposition to commercial surveillance, Facebook ignored the poll result and cranked the surveillance dial up to a million:
https://www.nbcnews.com/tech/tech-news/facebook-ignores-minimal-user-vote-adopts-new-privacy-policy-flna1c7559683
A decade later, Musk performed the same stunt, asking users whether they wanted him to fuck all the way off from the company, then ignored the vox populi, which, in this instance, was not vox Dei:
https://apnews.com/article/elon-musk-twitter-inc-technology-business-8dac8ae023444ef9c37ca1d8fe1c14df
Facebook, Twitter and other walled gardens are designed to be sticky-traps, relying on high switching costs to keep users locked within their garden walls which are really prison walls. Internal memos from the companies reveal that this strategy is deliberate, designed to keep users from defecting even as the service degrades:
https://www.eff.org/deeplinks/2021/08/facebooks-secret-war-switching-costs
By contrast, the Fediverse is designed for ease of exit. With one click, users can export the list of the accounts they follow, block and mute, as well as the accounts that follow them. With one more click, users can import that data into any other Fediverse server and be back up and running with almost no cost or hassle:
https://pluralistic.net/2022/12/23/semipermeable-membranes/
Last month, âNathan,â the volunteer operator of mastodon.lol, announced that he was pulling the plug on the server because he was sick of his usersâ arguments about the new Harry Potter game. Many commentators pointed to this as a mark against federated social media, âYou canât rely on random, thin-skinned volunteer sysops for your online social life!â
https://mastodon.lol/@nathan/109836633022272265
But the mastodon.lol saga demonstrates the strength of federated social media, not its weakness. After all, 450 million Twitter users are also at the mercy of a thin-skinned sysopâââbut when he enshittifies his platform, they canât just export their data and re-establish their social lives elsewhere in two clicks:
Mastodon.lol shows us how, if you donât like your hostâs content moderation policies, you can exercise voiceâââeven to the extent of making him so upset that he shuts off his serverâââand where voice fails, exit steps in to fill the gap, providing a soft landing for users who find the moderation policies untenable:
https://doctorow.medium.com/twiddler-1b5c9690cce6
Traditionally, centralization has been posed as beneficial to content moderation. As Rozenshtein writes, a company that can âencloseâ its users and lock them in has an incentive to invest in better user experience, while companies whose users can easily migrate to rivals are less invested in those users.
And centralized platforms are more nimble. The operators of centralized systems can add hundreds of knobs and sliders to their back end and twiddle them at will. They act unilaterally, without having to convince other members of a federation to back their changes.
Centralized platforms claim that their most powerful benefit to users is extensive content moderation. As Tarleton Gillespie writes, âModeration is central to what platforms do, not peripheral⌠[it] is, in many ways, the commodity that platforms offerâ:
https://yalebooks.yale.edu/book/9780300261431/custodians-of-the-internet/
Centralized systems claim that their enclosure keeps users safeâââfrom bad code and bad people. Though Rozenshtein doesnât say so, itâs important to note that this claim is wildly oversold. Platforms routinely fail at preventing abuse:
https://www.nbcnews.com/nbc-out/out-news/sexual-assault-harassment-bullying-trans-students-say-targeted-school-rcna7803
And they also fail at blocking malicious code:
https://www.scmagazine.com/news/threats/apple-bugs-ios-macos_new_class
But even where platforms do act to âkeep users safe,â they fail, thanks to the Moderatorâs Trilemma. Setting speech standards for millions or even billions of users is an impossible task. Some users will always feel like speech is being underblockedâââwhile others will feel itâs overblocked (and both will be right!):
https://www.eff.org/deeplinks/2021/07/right-or-left-you-should-be-worried-about-big-tech-censorship
And platforms play very fast and loose with their definition of âmalicious codeââââas when Apple blocked OG App, an Instagram ad-blocker that gave you a simple feed consisting of just the posts from the people you followed:
https://pluralistic.net/2023/02/05/battery-vampire/#drained
To resolve the Moderatorâs Trilemma, we need to embrace subsidiarity: âdecisions should be made at the lowest organizational level capable of making such decisions.â
https://pluralistic.net/2023/02/07/full-stack-luddites/#subsidiarity
For Rozenshtein, âcontent-moderation subsidiarity devolves decisions to the individual instances that make up the overall network.â The fact that users can leave a server and set up somewhere else means that when a user gets pissed off enough about a moderation policy, they donât have to choose between leaving social media or tolerating the policyâââthey can simply choose another server thatâs part of the same federation.
Rozenshtein asks whether Reddit is an example of this, because moderators of individual subreddits are given broad latitude to set their own policies and anyone can fork a subreddit into a competing community with different moderation norms. But Redditâs devolution is a matter of policy, not architectureâââsubreddits exist at the sufferance of Redditâs owners (and Reddit is poised to go public, meaning those owners will include activist investors and large institutions that might not care about your little community). You might be happy about Reddit banning /r_TheDonald, but if they can ban that subreddit, they can ban any subreddit. Policy works well, but fails badly.
By moving subsidiarity into technical architecture, rather than human policy, the fediverse can move from antagonism (the âzero-sum destructivenessâ that dominates current online debate) to agonism, where your opponent isnât an enemyâââthey are a âpolitical adversaryâ:
https://www.yalelawjournal.org/article/the-administrative-agon
Here, Rozenshtein cites Aymeric Mansoux and Roel Roscam Abbingâs âSeven Theses On The Fediverse And The Becoming Of Flossâ:
https://test.roelof.info/seven-theses.html
For this to happen, different ideologies must be allowed to materialize via different channels and platforms. An important prerequisite is that the goal of political consensus must be abandoned and replaced with conflictual consensusâŚ
So your chosen Mastodon server âmay have rules that are far more restrictive than those of the major social media platforms.â But the whole Fediverse âis substantially more speech protective than are any of the major social media platforms, since no user or content can be permanently banned from the network and anyone is free to start an instance that communicates both with the major Mastodon instances and the peripheral, shunned instances.â
A good case-study here is Gab, a Fediverse server by and for far-right cranks, conspiratorialists and white nationalists. Most Fediverse servers have defederated (that is, blocked) Gab, but Gab is still there, and Gab has actually defederated from many of the remaining servers, leaving its users to speak freelyâââbut only to people who want to hear what they have to say.
This is true meaning of âfreedom of speech isnât freedom of reach.â Willing listeners arenât blocked from willing speakersâââbut you donât have the right to be heard by people who donât want to talk to you:
https://pluralistic.net/2022/12/10/e2e/#the-censors-pen
Fediverse servers are (thus far) nonprofits or hobbyist sites, and donât have the same incentives to drive âengagementâ to maximize the opportunties to show advertisements. Fediverse applications are frequently designed to be antiviralâââthat is, to prevent spectacular spreads of information across the system.
Itâs possibleâââlikely, evenâââthat future Fediverse servers will be operated by commercial operators seeking to maximize attention in order to maximize revenueâââbut the users of these servers will still have the freedom of exit that they enjoy on todayâs Jeffersonian volunteer-run serversâââand so commercial servers will have to either curb their worst impulses or lose their users to better systems.
Iâll note here that this is a progressive story of the benefits of competitionââânot the capitalistâs fetishization of competition for its own sake, but rather, competition as a means of disciplining capital. It can be readily complemented by discipline through regulationâââfor example, extending todayâs burgeoning crop of data-protection laws to require servers to furnish users with exports of their follow/follower data so they can go elsewhere.
Thereâs another dimension to decentralized content moderation that exit and voice donât addressâââmoderating âharmfulâ content. Some kinds of harm can be mitigated through exitâââif a server tolerates hate speech or harassment, you can go elsewhere, preferably somewhere that blocks your previous server.
But there are other kinds of speech that must not existâââeither because they are illegal or because they enact harms that canât be mitigated by going elsewhere (or both). The most spectacular version of this is Child Sex Abuse Material (CSAM), a modern term-of-art to replace the more familiar âchild porn.â
Rozenshtein says there are âreasons for optimismâ when it comes to the Fediverseâs ability to police this content, though as he unpacked this idea, I found it much weaker than his other material. Rozenshtein proposes that Fediverse hosts could avail themselves of PhotoDNA, Microsoftâs automated scanning tool, to block and purge themselves of CSAM, while noting that this is âhardly foolproof.â
If automated scanning fails, Rozenshtein allows that this could cause âgreater consolidationâ of Mastodon servers to create the economies of scale to pay for more active, human moderation, which he compares to the consolidation of email that arose as a result of the spam-wars. But the spam-wars have been catastrophic for email as a federated system and produced all kinds of opportunities for mischief by the big players:
https://doctorow.medium.com/dead-letters-73924aa19f9d
Rozenshtein: âThere is a tradeoff between a vibrant and diverse communication system and the degree of centralized control that would be necessary to ensure 100% filtering of content. The question, as yet unknown, is how stark that tradeoff is.â
The situation is much simpler when it comes to servers hosted by moderators who are complicit in illegal conduct: âthe Fediverse may live in the cloud, its servers, moderators, and users are physically located in nations whose governments are more than capable of enforcing local law.â That is, people who operate ârogueâ servers dedicated to facilitating assassination, CSAM, or what-have-you will be arrested, and their servers will be seized.
Fair enough! But of course, this butts up against one of the Fediverseâs shortcomings: it isnât particularly useful for promoting illegal speech that should be legal, like the communications of sex workers who were purged from the internet en masse following the passage of SESTA/FOSTA. When sex workers tried to establish a new home in the fediverse on a server called Switter, it was effectively crushed.
This simply reinforces the idea that code is no substitute for law, and while code can interpret bad law as damage and route around it, it can only do so for a short while. The best use of speech-enabling code isnât to avoid the unjust suppression of speechâââitâs to organize resistance to that injustice, including, if necessary, the replacement of the governments that enacted it:
https://onezero.medium.com/rubber-hoses-fd685385dcd4
Rozenshtein briefly addresses the question of âfilter bubbles,â and notes that there is compelling research that filter bubbles donât really exist, or at least, arenât as important to our political lives as once thought:
https://sciendo.com/article/10.2478/nor-2021-0002
Rozenshtein closes by addressing the role policy can play in encouraging the Fediverse. First, he proposes that governments could host their own servers and use them for official communications, as the EU Commission did following Muskâs Twitter takeover:
https://social.network.europa.eu
He endorses interoperability mandates which would required dominant platforms to connect to the fediverse (facilitating their usersâ departure), like the ones in the EUâs DSA and DMA, and proposed in US legislation like the ACCESS Act:
https://www.eff.org/deeplinks/2022/04/eu-digital-markets-acts-interoperability-rule-addresses-important-need-raises
To get a sense of how that would work, check out âInteroperable Facebook,â a video and essay I put together with EFF to act as a kind of âdesign fiction,â in the form of a user manual for a federated, interoperable Facebook:
https://www.eff.org/interoperablefacebook
He points out that this kind of mandatory interop is a preferable alternative to the unconstitutional (and unworkable!) speech bans proposed by Florida and Texas, which limit the ability of platforms to moderate speech. Indeed, this is an either-or propositionâââunder the terms proposed by Florida and Texas, the Fediverse couldnât operate.
This is likewise true of proposals to eliminate Section 230, the law that immunizes platforms from federal liability for most criminal speech acts committed by their users. While this law is incorrectly smeared as a gift to Big Tech, it is most needed by small services that canât possibly afford to monitor everything their users say:
https://www.techdirt.com/2020/06/23/hello-youve-been-referred-here-because-youre-wrong-about-section-230-communications-decency-act/
One more recommendation from Rozenshtein: treat interop mandates as an alternative (or adjunct) to antitrust enforcement. Competition agencies could weigh interoperability with the Fediverse by big platforms to determine whether to enforce against them, and enforcement orders could include mandates to interoperate with the Fediverse. This is a much faster remedy than break-ups, which Rozenshtein is dubious of because they are âlegally riskyâ and âcontroversial.â
To this, Iâd add that even for people who would welcome break-ups (like me!) they are sloooow. The breakup of AT&T took 69 years. By contrast, interop remedies would give relief to users right now:
https://onezero.medium.com/jam-to-day-46b74d5b1da4
On Tue (Mar 7), Iâm doing a remote talk for TU Wien.
On Mar 9, you can catch me in person in Austin at the UT School of Design and Creative Technologies, and remotely at U Manitobaâs Ethics of Emerging Tech Lecture.
On Mar 10, Rebecca Giblin and I kick off the SXSW reading series.
[Image ID: A trilemma Venn diagram, showing three ovoids in a triangular form, which intersect at their tips, but not in the middle. The ovoids are labeled 'Avoid angering users,' 'Diverse userbase,' 'Centralized platforms.' In the center of the ovoids is the Mastodon mascot. The background is composed of dead Twitter birds on their backs with exes for eyes.]

















