this post was submitted on 15 Jan 2024
669 points (98.1% liked)

Fediverse

27828 readers
281 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).

If you wanted to get help with moderating your own community then head over to [email protected]!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 48 points 8 months ago (3 children)

It's actually not wrong if you look at it in another way.

  • Big tech will abuse your data, but it will do within legal constraints, and there is actuall (though weak) accountability of these companies due to the legal system.
  • On federated services like Lemmy, instances are hosted by anonymous individuals. Most social media laws don't apply to them, and their legal accountability is basically zero.
  • Lemmy, for example, does not comply with GDPR. There is no legal notice, no privacy contact person, no banner asking whether you are ok with the fact that your data is sent to unknown servers in random nations, no nothing. Private messages aren't even encrypted, so any admin can read them without issues.
  • There is no way to actually delete your data, as the GDPR requires. Deleted posts are only marked as deleted and you can see their plain text content by just pressing the "reply" button in any of the apps. There isn't any kind of guarantee, that your post will be deleted on other instances. If federation has problems, the post will remain on other instances and is now permanently undeletable by the user.
  • There are no moderation standards. Some instances will delete nazi content, some basically require nazi content. And some instance admin might even edit your posts to say something completely different. It's all possible and in the hands of random people on the internet.
  • Hobbyist-run services are much worse when it comes to availability and reliability. If something happens while the admin is on holiday, nothing will get fixed. If the admin runs out of money, doesn't care anymore or even dies, the instance with all it's content and users is just gone.

So there are very real risks attached to a hobbyist-run service with no legal accountability and no transparency at all.

We all know the downsides of Big Tech though, so it's everyone's personal choice to figure out which disadvantages hurt them personally more.

[–] [email protected] 16 points 8 months ago (2 children)

That's a bit misleading to say like that. Go to the website, scroll to the footer and click on "Legal". Your instance, feddit.de, has a legal notice, with a privacy contact person, mentioning you can request data erasure, and detailing where your data goes. Mine, lemmy.world, has a number of in depth legal documents attached there.

However, yes, other instances they are federated with might not take it as seriously though, and if all your data is going there too, then that's a hole in your data privacy.

[–] [email protected] 7 points 8 months ago (1 children)

But if I request it there, after its federated everywhere, what happens?

[–] [email protected] 3 points 8 months ago (2 children)

I imagine that this calls for a feature that can erase your data on every other federated server. If the activitypub protocol can send data from one server to another, it should be able to delete it or find a way to disable viewing said data.

[–] [email protected] 8 points 8 months ago (1 children)

Giving servers the ability to delete each others shit would be interesting to watch when an online war breaks out

[–] [email protected] 1 points 8 months ago

That already exists. The person who created a post or comment can delete it. But it only works sometimes, since federation is constantly not working correctly.

[–] [email protected] 1 points 8 months ago

Eh, that's a mixed bag. Absolutely, one could setup shared delete requests, to federate a delete request, but it would be a bit of a lie as anyone could simply.... update their instance to simply ignore delete requests.

For now, simply not having a delete feature is a more honest to the realities of the fediverse. There'll never be a "true" delete, even if they do eventually support one that's "good enough".

[–] [email protected] 1 points 8 months ago

There are two issues with that:

  • The GDPR notice on feddit.de is not GDPR compliant, and the link isn't even visible on mobile.
  • If you request deletion, they can't guarantee that the data is deleted on federated servers. They can send deletion messages, but federation is constantly not working correctly, other instances can decide themselves whether they do delete stuff, and if an instance is unreachable for a while, the deletion message will be dropped.

Lemmy, or even ActivityPub are designed to be non-GDPR compliant. (Probably not on purpose, but the way it works makes it basically impossible to be GDPR compliant.)

[–] [email protected] 11 points 8 months ago

Very much this. Plus, how easy will instance admin Joe Schmoe fold under external pressure to give access to certain groups, government bodies etc? And how well have Joe Schmoe implemented good security practices on the server and related things? Etc.

[–] [email protected] 1 points 8 months ago (1 children)

@squaresinger @LinkOpensChest_wav yes and don't let people fall for quasi legal privacy policies that lemmy.world & ilk provide #Lemmyworld #accountability #fediverserated

[–] [email protected] 1 points 7 months ago

That happens if you don't have an actual legal team... I am sure they are doing their best, but if you don't have a lawyer, you can't do legal texts.