Post

If you’re into books, may I suggest Bookhive, a Good Reads-like reading tracker that is easy to use, open source, runs on AT Proto and is developed by very nice people? I’ve been enjoying using it. bookhive.buzz

I have long loathed GoodReads so haven’t bothered using it in years, but @bookhive.buzz has got me using a reading list app again. Here’s my Bookhive profile: bookhive.buzz/profile/fain...

What do I mean when I say @bookhive.buzz runs on AT Proto? You can use your existing Bluesky account to log into it (no need to create another account), and then you can access a Good Reads-like social platform where you can easily find your existing Bluesky mutuals.

A lot of people and orgs are building cool stuff like this on AT Proto, in fact.

Please note @bookhive.buzz will also work with any AT Proto account, not just Bluesky PDS accounts.

This looks good but—do you have any idea who runs it? There doesn't seem to be any information online and I'm concerned.

I met the owner/builder of @bookhive.buzz in person at the AT Proto conference a few months ago, and @nickthesick.com is a super nice guy. (He told me built Bookhive largely for his wife).

That’s cool! I’m admittedly a little concerned about how much access it wants to my account AND it doesn’t seem to work with app passwords but ahhhh, I’ll just go bug them about that. 😁

+ and the dev can customize the permissions they have with OAuth for the less set possible to use the app

For BookHive it may say as if it's going to have full access to Bluesky, but it won't (just a incorrect set of text the dev choose) See this expanded list, it will only allow you to follow and unfollow people from Bluesky, the other permission are all related to managing your books and lists/shelves

It's a largely AI-built app; so I suspect that's where the bad text comes from. Does make me worry about the stability and security of a vibe-coded app connecting to my AT-Proto though.

Oh, that’s awesome, thank you so much for the additional detail and explaining it!

Oh! That’s good to know! Thank you for the information! I had always assumed (and we know what happens when you do that 😁) that the app password was a more limited form of access.

App passwords can be erased anytime you want, but it's hard to track if a bad actor is using the app password access without you knowing While with OAuth, as I see you have your account hosted with Bluesky, you can see all active sessions here bsky.social, and revoke access too