Post

If you’re into books, may I suggest Bookhive, a Good Reads-like reading tracker that is easy to use, open source, runs on AT Proto and is developed by very nice people? I’ve been enjoying using it. bookhive.buzz

I have long loathed GoodReads so haven’t bothered using it in years, but @bookhive.buzz has got me using a reading list app again. Here’s my Bookhive profile: bookhive.buzz/profile/fain...

What do I mean when I say @bookhive.buzz runs on AT Proto? You can use your existing Bluesky account to log into it (no need to create another account), and then you can access a Good Reads-like social platform where you can easily find your existing Bluesky mutuals.

A lot of people and orgs are building cool stuff like this on AT Proto, in fact.

Please note @bookhive.buzz will also work with any AT Proto account, not just Bluesky PDS accounts.

This looks good but—do you have any idea who runs it? There doesn't seem to be any information online and I'm concerned.

I met the owner/builder of @bookhive.buzz in person at the AT Proto conference a few months ago, and @nickthesick.com is a super nice guy. (He told me built Bookhive largely for his wife).

That’s cool! I’m admittedly a little concerned about how much access it wants to my account AND it doesn’t seem to work with app passwords but ahhhh, I’ll just go bug them about that. 😁

App passwords are actually less secure than OAuth like that Because app passwords grant EVERY permission, and generate an access token that doesn't expire, while OAuth will expire the access if you have no activity after a few days or weeks (depends on the app) +

+ and the dev can customize the permissions they have with OAuth for the less set possible to use the app

For BookHive it may say as if it's going to have full access to Bluesky, but it won't (just a incorrect set of text the dev choose) See this expanded list, it will only allow you to follow and unfollow people from Bluesky, the other permission are all related to managing your books and lists/shelves

It's a largely AI-built app; so I suspect that's where the bad text comes from. Does make me worry about the stability and security of a vibe-coded app connecting to my AT-Proto though.

No, the bad text is because of bad documentation for the permissions sets and missing better diverse sets for Bluesky permissions (this is a problem Bluesky's team has to solve, it's an open issue for them), devs are still learning because this is COMPLETELY NEW and didn't have documentation +

+ for devs to learn how to use it well for some months, the documentation came last month if I'm not remembering wrong. It's common for human devs to get this wrong because they just don't know yet how to handle it the best way possible, no need to have an AI make the mistake, humans do that.