Warning: Lemmy doesn't care about your privacy, everything is tracked and stored forever, even if you delete it
raddle.me

Federated services have always had privacy issues but I expected Lemmy would have the fewest, but it’s visibly worse for privacy than even Reddit.

  • Deleted comments remain on the server but hidden to non-admins, the username remains visible
  • Deleted account usernames remain visible too
  • Anything remains visible on federated servers!
  • When you delete your account, media does not get deleted on any server
  • lowleveldata@programming.devEnglish
    51·
    2 years ago

    It is reasonable that people should be able to delete their posts / comments. However I don’t see how is this related to “privacy”. How can something you post on a public forum be private?

    • Lols [they/them]@lemm.eeEnglish
      18·
      2 years ago

      its the principle behind the ‘right to be forgotten’

      if you posted something to a public forum and changed your mind, deciding it shouldnt be public after all, you should have that option

      • Lionir [he/him]@beehaw.orgEnglish
        8·
        2 years ago

        While this makes sense for corporations - it doesn’t really make sense on the internet. People will archive, take screenshots, etc. Anything that is public on the internet will likely stay on someone’s computer for years no matter how much we try to delete things.

        It is kind of naive to think that the right to be forgotten will be respected by anyone other than the service provider.

    • rstein@discuss.tchncs.deEnglish
      15·
      2 years ago

      You can’t delete a mail you sent me, nor put your hand written letter to me in the bin. I can keep both and I can keep your name and addresses in my little black book. So there isn’t even that level of privacy in the real old fashioned communication.

      And communication over the Internet was always the subject of storage. Your mail may be on the backup tape of a mail server. Your usenet posting is on archive.

      So the assumption that the fediverse can forget….

      • GiantBasil@beehaw.orgEnglish
        14·
        2 years ago

        There’s long dead people’s very private letters and diaries in museum’s and public archives. Really available on the internet now. So that’s not even a failing of the internet, if you write something people find interesting, they’ll find a way to preserve it.

        I’m not sure how they think the fesiverse will be the one to solve that.

    • CrateDane@feddit.dkEnglish
      11·
      2 years ago

      That is generally true, with exceptions like leaking someone else’s private information.

      But it implicates the adjacent “right to be forgotten” rather than narrowly defined “privacy”. This could be a real legal issue in the EU.

      • hoshikarakitaridia@lemmy.fmhy.mlEnglish
        10·
        2 years ago

        It is. GDPR in the EU dictates that every user which requests their information has to get it in 30 days, and every user who removes their information has to be able to get it removed (I think the time span for that is even shorter, so more pressure for the server admins)

        • Umbrias@beehaw.orgEnglish
          5·
          2 years ago

          It almost definitely isn’t and that’s clear looking into GDPR at all.

          The right to be forgotten is not all powerful, and the lemmy instance your data originates on has an obligation to delete your data, that is true. However other servers may or may not have any of that obligation for a variety of reasons.

          Now if you go to those other servers and make the request to have your information deleted, they may have an obligation to depending on whether that data is seen as currently usable.

          The right to be forgotten is far weaker than you think it is, especially on public forums, under GDPR.

        • Retronautickz@beehaw.orgEnglish
          4·
          2 years ago

          The problem here is that your data is not only recopilated by your server and accessible to your server admins, the servers of the communities/magazines or people you interact with also recopilate any activity you have in relation to any community/magazine or user hosted in their server.

          So, while the admin of your server has the obligation of deleting your data if you ask for it, the other servers admins don’t necessarily have that obligation.

          Also, I’m reading the GDPR and the “right to be forgotten” that many are quoting seems to refer to personal information only.

    • fidodo@beehaw.orgEnglish
      9·
      2 years ago

      I’m also not sure how it’s enforceable in a distributed system without some kind of Blockchain, and using that at scale would be prohibitively wasteful and expensive, and ultimately futile since a 3rd party could easily record a backup.

      • __forward__@lemm.eeEnglish
        8·
        2 years ago

        Blockchains have the property of being append-only, so a blockchain is precisely what makes it impossible to delete transactions. That being said, in a distributed system, once the message leaves trusted servers, it is obviously also impossible to delete it.

        • Zetaphor@zemmy.ccEnglish
          8·
          2 years ago

          Nothing about how lemmy or the fediverse platforms work has anything to do with blockchains. Don’t conflate “decentralization” to include blockchain. Torrents are also decentralized and have nothing to do with blockchains.

          • __forward__@lemm.eeEnglish
            4·
            2 years ago

            Lovely, the parent comment mentioned blockchain but was since edited… Trust me I would not have brought it up otherwise.

    • Rinox@feddit.itEnglish
      8·
      2 years ago

      Probably in the sense that if it’s not me that posted it, then I don’t have any way of truly remove it (which I think is against the EU’s laws).

      What I can think of right off the top of my head is revenge porn and doxxing. Furthermore there’s also the right to be forgotten.