[-] [email protected] 4 points 1 year ago

The link I provided says that pseudonymous data can be used to hide personalized data.

If you are a DPO, you can see the appeal and benefits of pseudonymization. It makes data identifiable if needed, but inaccessible to unauthorized users and allows data processors and data controllers to lower the risk of a potential data breach and safeguard personal data.

GDPR requires you to take all appropriate technical and organizational measures to protect personal data, and pseudonymization can be an appropriate method of choice if you want to keep the data utility.

The owner of lemmy.one can use [email protected] to map it to an IP and/or email address. This becomes now personally identifiable data. But other instance owners can't map it to any personalized data, so it is basically "anonymized data" for them.

You just have to provide a way to either

  • To delete personally identifiable data
  • Unlink the personally identifiable data from the pseudonymized data on your local instance.

Disclaimer, IANAL, YMMV, yaddy, yadda,...

[-] [email protected] 11 points 1 year ago* (last edited 1 year ago)

Everybody is talking about the GPDR, but the GPDR when hosting in the EU, should be the least if your concerns. As I said elsewhere:

  • Lemmy is not doing tracking/personalized-ads.
  • Lemmy is only collecting IPs and email addresses as personally identifiable information. It's not sharing them. So it makes GDPR compliance easy.

The real issue is Directive on Copyright in the Digital Single Market which is a nightmare if you want to host lemmy legally. Realistically, the government don't care about a few copyright infrigement by some guy/gal hosting a lemmy instance in their garage.

But, if you want to follow the law to the letter, the EU doesn't have any fair use. So theorically, you need to allow users to only post creative commons images, with attribution. Or do some copyright checks on the content posted on your instance. Here is an EU video on how to comply with the directive, it's a nightmare.

[-] [email protected] 7 points 1 year ago

As I said in another comment, the GDPR protects people. And the GDPR only applies to personnaly identifiable data (IPs, email addresses, street address, legal name, date of birh...) Lemmy only collect emails and IPs, and do not share them between instances. So it's very easy to comply to the GDPR as long as you don't do anything shady.

The EU has a marketing issue. They tried to pass legislation to prevent companies to collect data. But instead, company displayed a popup, kept collecting data, and blamed it on the EU. Everytime I see a popup, I blame ruthless data collection.

Actually, Lemmy is most likely violatiing the California Consumer Privacy Act, which, as opposed to the GPDR, gives the right to update/delete any data generated by the user, not only personally identifiable information.

[-] [email protected] 38 points 1 year ago

The GDPR doesn't apply only to services hosted in the EU, but any services handling the data of an EU citizen.

This is why some news outlets in the US just decided to block EU users all together, out of laziness.

IANAL, but the GDPR doesn't cover pseudonymous data. Actually the GDPR encourages data processors (= services) to use pseudomization.

Personally identifiable information are IPs, email addresses, street address, name, date of birth, ... Lemmy only collect IPs and email addresses. And these are not shared between instances.

Whether the service is hosted in the EU or not, as long as it serves EU users, lemmy should provide a way to delete emails and ip information in a self serving way. (maybe by deleting the account) In the mean time, instances admins have to fulfil requests to delete emails/ips of EU citizens from the database.

[-] [email protected] 2 points 1 year ago

It's just javascript. You can use ublock zap feature to remove the modal, this is why nitter is still working.

To much work for them to do authorization at the API level, they most likely fired all of their backend engineers already.

7
submitted 1 year ago by [email protected] to c/[email protected]
[-] [email protected] 4 points 1 year ago* (last edited 1 year ago)

4chan is just a bunch of people pretending to be racist/homophobic/... for the lulz. Only a minority are hardcore trump supporters, neonazis, ...

[-] [email protected] 1 points 1 year ago

If humans have a bot-like behavior, it's okay to mark them as bot. If a human is only posting to promote products/astroturf, who cares if it's misclassified, it doesn't add anything to the discourse. IMHO, that's good riddance.

And in my solution, at the end the instance owner takes action, it's not like there is no human recourse.

[-] [email protected] 5 points 1 year ago

Because there is no karma system on lemmy (thank goodness, I'm against karma), you can easily create a 1000s of bots which will upvote your post and bring it to front page.

The solution is not some custom anti-abuse system which can be game. (Stuff like "you can't vote because of the age of your account", ...) IMHO, the solution is bot detection. Since everything is public an an instance, somebody at some point will start scraping instance to detect bot behavior and inform instance owner. It will come with maturity.

[-] [email protected] 7 points 1 year ago

ABSOLUTELY NO!!!

Other websites with karma are full of bots who repost, a few year later, the content that was popular in the past, in order to mine reputation.

Karma also creates an echo chamber with self censorship where people won't post anything unpopular out of fear of loosing karma.

I like diversity of opinion. I don't want facebook, I don't want to read my opinion with a different phrasing.

[-] [email protected] 5 points 1 year ago

Reddit is profiting a lot from the network effect. By now this reddit is a known brand, has a lot of content is already there, has a lot of people (especially non-technical users) are already on reddit, and they're there to stay.

All the other reddit alternatives, including lemmy and/or the fediverse suffers from:

  • Bugs (I love lemmy, but gosh, have you seen how buggy and sometimes unresponsive it is?)
  • The complexity of "servers" (don't get me wrong, federation is the way to go IMHO, but it is confusing to non-technical users)
  • Lack of content
  • Lack of users

Everybody is talking about the Digg exodus, but nobody is saying that it didn't happen in a day, it took ~1 to 2 years.

[-] [email protected] 1 points 1 year ago

This is our moment…

view more: next ›

danieljackson

joined 1 year ago
MODERATOR OF