this post was submitted on 04 Mar 2024
30 points (84.1% liked)

Fediverse

17700 readers
1 users here now

A community dedicated to fediverse news and discussion.

Fediverse is a portmanteau of "federation" and "universe".

Getting started on Fediverse;

founded 5 years ago
MODERATORS
 

This article will describe how lemmy instance admins can purge images from pict-rs.

Nightmare on Lemmy St - A GDPR Horror Story
Nightmare on Lemmy Street (A Fediverse GDPR Horror Story)

This is (also) a horror story about accidentally uploading very sensitive data to Lemmy, and the (surprisingly) difficult task of deleting it.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 15 points 8 months ago* (last edited 8 months ago) (2 children)

I haven't had a deletion request come around yet, but I've had the pict-rs documentation in my back pocket just in case. My instance allows NSFW, so I made sure I knew how to do this before deploying.

I agree with the author, though, it definitely shouldn't be so hard to delete images. Hopefully the Lemmy devs tackle these issues quickly.

[โ€“] [email protected] 9 points 8 months ago (2 children)

Impossible to be done if not every servers plays by the rules.

Sort of non news too, "don't put sensitive data on display, especially on the internet".

[โ€“] [email protected] 9 points 8 months ago

With federation it's kinda like complaining archive.org doesn't have a good way to purge page snapshots in case you post something on your website you regret later. Or search engine caches. Or the local scammers replicating your page with curl for a phishing scam.

[โ€“] [email protected] -1 points 8 months ago (1 children)

The author pretty freely admits he shares some blame, having PII on the same phone he uses Lemmy, using Lemmy while not paying attention/being half asleep. I'm sure he does know better and agrees with your statement. And yet, when mistakes happen and people prove to be fallible, Lemmy proves it is not capable of handling the problem.

I also can't believe the Lemmy developers would be so indignant about being presented with such an oversight. GDPR or no GDPR, federated to other servers or not, the idea of PII being hard/impossible to delete from a social media platform is an embarrassment to the developers.

[โ€“] [email protected] 2 points 8 months ago

I think you don't understand how federation works.

It's like you show something sensitive on TV, and you want to "erase" that from everyone seeing it.

Lemmy isn't centralized like Reddit or Facebook.

[โ€“] [email protected] 5 points 8 months ago* (last edited 8 months ago) (1 children)

Unfortunately, the Lemmy devs literally said it would take years to fix this issue. If you think this should be a priority for them, please advocate for them to prioritize it on GitHub:

[โ€“] [email protected] 3 points 8 months ago (1 children)

Thanks for sharing.

Sad to see such communication from the Lemmy devs

[โ€“] [email protected] 4 points 8 months ago

I agree the whole issue was lemmy devs being an arse to maltfield