Hi. I’m commenting here because I’m not sure this deserves its own post.
Lately on reddit, lemmy and kbin have been mentioned more as reddit alternatives. While that may be a good thing (free advertising is good, at least), I’ve seen more than a few people say (unevoqually, imho) that A) lemmy/kbin is bad for privacy and B) they collect data. I’ve read kbin’s privacy policy as well as the devs’ responses on github, but is there any other links I can point them to?
It’s incredibly frustrating, tbh. It feels like they’re out to discredit lemmy and kbin. I’ve answered a few myself, but there’s much more out there. They don’t even give a reason. They usually just say “lemmy is terrible for privacy” or “lemmy collects your data.” No links, no whatever.
Edit: my last reddit account is going to seem like a lenny marketer if this doesn’t stop lol.
That’s true. I should stop getting triggered by those. But still, more ammo would be nice. At the very least other people would see the evidence and won’t listen to them.
Sometimes people need more evidence to see the truth. Most of the time people do not have the emotional or educational scaffolding to even understand the evidence. If those people were capable of empathy they would not need to rely on an authority figure to tell them what to think.
If you post something on the internet, there should be no expectation that it won’t be preserved for an arbitrary length of time. Same as how you can’t legally claim that you expect privacy while in public
This. Everyone needs to be mindful about what they post. You are communicating with real human beings afterall, with their own life history and memory.
So be kind and give up the fantasy you can reverse your actions.
Well, while everything tarketed to Europeans (having EU domains is enough) should follow GDPR including the right to be forgotten, the whole issue is a bit more complex than most people seem to think.
For one, things not marketed to EU citizen don’t count. And the owner of a website, this case the hoster of an instance, is responsible for this. Not the software they use (Lemmy). I don’t think Lemmy tracks you specifically, as the code is open source and people likely would’ve noticed that by now. But servers could theoretically. That’s why you need to choose a server you trust, or host your own.
An instance aimed at USA people hosted in the USA doesn’t need to be GDPR compliant while a German one hosten in Germany would. An instance aimed at the world hosted in the USA also would, but likely breaks GDPR simply by being hosted in the USA. That’s part of why big social media need EU servers.
A federated system is not in one place, and another issue is that while deletion requests could be send (and Lemmy supports this accourding to their website), it can’t be as easily enforced to be followed by third parties. Of which, there are a lot in a decentral place.
Think of this:
If I post something on Reddit, it get’s reposted to 4chan, then I remove my original post, then it’s still on 4chan. I could ask them to remove it, but that would likely be declined. Since 4chan has little to do with the EU and it’s citizen, and doesn’t actively market itself, they have little to do with the GDPR. At best you could make a copyright based claim, but that’ll change it into a whole other topic.
Federated systems similarily take eachothers content. It’s important to note that generally Federated networks don’t push their content to other instances. Instead, other instances grab them from each other. How often has federation not gone smoothly causing deleted Mastodon posts to still show up on otger instances because they grabbed the post but not the deletion request (I’ve seen it happen multiple times already).
The right to be forgotten forces them to make it anonymous and untracable upon request, but not to delete every word you ever typed. Anonymising your account and deleting traceble info only would be enough. That means, if the server you requested to deletes their part + send a request to third parties they deliberatly send info to themselves, they did their job as far as law is concerned.
Any third party that grabbed the info by themselves, would require you to send a new request to them. Considering federation works by grabbing other instances, not by pushing your instance to others, any federated post that still has your old info could still be up if changes or deletion requests haven’t been processed.
So is Lemmy bad for privacy by default? Not anymore than the rest of the web, as long as you understand that the whole point of decentral systems mean it’s not one place. Best to always keep in mind that everything on the internet is forever and public, even if you delete it or use filters on who can see it, as you can never ensure no one copies it and post it elsewhere.
A lot of the arguments on that subreddit seem agenda driven from my perspective. While there are real concerns (user data sent and stored outside of Europe, right to be forgotten as mentioned by another user) the people there seem really fixated on the developers specifically and their beliefs, as well as deletion of user data.
If any one of the users there put their money where their mouth is and explained in a logical, sensible, neutral way to the devs why Lemmy should send federated deletion requests for example (claims made in that thread that Lemmy doesn’t, I haven’t verified if this is the case myself), the devs would probably take it on board the same way they removed the mandatory hard coded slur filter.
At the end of the day though, Kbin and Raddle seem like a solution to the general consensus in that thread, yet they get very little mention. The majority of the participants chose to bash rather than to fix, forcing their views on others inconsiderate of people’s threat models, and while they have every right to do so, a community with that kind of closed minded perspective is not something I’m into. I’d rather they stay on Reddit 👍
As for me personally… Lemmy could be better, but as a federated network with no need to be supported by ads, no API restrictions, as well as public mod logs for transparency & accountability, I really like it and interested in seeing where it goes. There are inevitably going to be issues, and a lot of the discussions I’ve seen here on Lemmy show an interest in improving things, vs reddit discussions where it’s the opposite.
Reading the thread makes me want to vomit, I can’t take all these agenda their talking about. As long as you’re on the internet. You’re not safe, until you’ve made some appropriate measures to cover your internet footprint.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacyguides@lemmy.one
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We’ve tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the “official” Privacy Guides community on Lemmy, which can be verified here. Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
We prefer posting about open-source software whenever possible.
No soliciting engagement: Don’t ask for upvotes, follows, etc.
Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
Be civil, no violence, hate speech. Assume people here are posting in good faith.
Don’t repost topics which have already been covered here.
News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
No help vampires: This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
No misinformation: Extraordinary claims must be matched with evidence.
Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
Slanted but accurate.
Neither Lemmy nor Reddit are private, they’re both publicly indexable (google et al).
On the other hand reddit goes to a lot of trouble to capture everything about you. Lemmy is not quite that greedy.
One is a for profit willing to do whatever it takes to make a buck. The other is FOSS and run by volunteers.
I think it’s pretty clear which is the greater threat.
Hi. I’m commenting here because I’m not sure this deserves its own post.
Lately on reddit, lemmy and kbin have been mentioned more as reddit alternatives. While that may be a good thing (free advertising is good, at least), I’ve seen more than a few people say (unevoqually, imho) that A) lemmy/kbin is bad for privacy and B) they collect data. I’ve read kbin’s privacy policy as well as the devs’ responses on github, but is there any other links I can point them to?
It’s incredibly frustrating, tbh. It feels like they’re out to discredit lemmy and kbin. I’ve answered a few myself, but there’s much more out there. They don’t even give a reason. They usually just say “lemmy is terrible for privacy” or “lemmy collects your data.” No links, no whatever.
Edit: my last reddit account is going to seem like a lenny marketer if this doesn’t stop lol.
Gaslighting. The internets favorite buzzworx that exactly describes this behavior.
You cannot win an argument with liars or the ignorant.
That’s true. I should stop getting triggered by those. But still, more ammo would be nice. At the very least other people would see the evidence and won’t listen to them.
Sometimes people need more evidence to see the truth. Most of the time people do not have the emotional or educational scaffolding to even understand the evidence. If those people were capable of empathy they would not need to rely on an authority figure to tell them what to think.
If you post something on the internet, there should be no expectation that it won’t be preserved for an arbitrary length of time. Same as how you can’t legally claim that you expect privacy while in public
This. Everyone needs to be mindful about what they post. You are communicating with real human beings afterall, with their own life history and memory.
So be kind and give up the fantasy you can reverse your actions.
More fud from the internet.
Well, while everything tarketed to Europeans (having EU domains is enough) should follow GDPR including the right to be forgotten, the whole issue is a bit more complex than most people seem to think.
For one, things not marketed to EU citizen don’t count. And the owner of a website, this case the hoster of an instance, is responsible for this. Not the software they use (Lemmy). I don’t think Lemmy tracks you specifically, as the code is open source and people likely would’ve noticed that by now. But servers could theoretically. That’s why you need to choose a server you trust, or host your own.
An instance aimed at USA people hosted in the USA doesn’t need to be GDPR compliant while a German one hosten in Germany would. An instance aimed at the world hosted in the USA also would, but likely breaks GDPR simply by being hosted in the USA. That’s part of why big social media need EU servers.
A federated system is not in one place, and another issue is that while deletion requests could be send (and Lemmy supports this accourding to their website), it can’t be as easily enforced to be followed by third parties. Of which, there are a lot in a decentral place.
Think of this: If I post something on Reddit, it get’s reposted to 4chan, then I remove my original post, then it’s still on 4chan. I could ask them to remove it, but that would likely be declined. Since 4chan has little to do with the EU and it’s citizen, and doesn’t actively market itself, they have little to do with the GDPR. At best you could make a copyright based claim, but that’ll change it into a whole other topic.
Federated systems similarily take eachothers content. It’s important to note that generally Federated networks don’t push their content to other instances. Instead, other instances grab them from each other. How often has federation not gone smoothly causing deleted Mastodon posts to still show up on otger instances because they grabbed the post but not the deletion request (I’ve seen it happen multiple times already).
The right to be forgotten forces them to make it anonymous and untracable upon request, but not to delete every word you ever typed. Anonymising your account and deleting traceble info only would be enough. That means, if the server you requested to deletes their part + send a request to third parties they deliberatly send info to themselves, they did their job as far as law is concerned.
Any third party that grabbed the info by themselves, would require you to send a new request to them. Considering federation works by grabbing other instances, not by pushing your instance to others, any federated post that still has your old info could still be up if changes or deletion requests haven’t been processed.
So is Lemmy bad for privacy by default? Not anymore than the rest of the web, as long as you understand that the whole point of decentral systems mean it’s not one place. Best to always keep in mind that everything on the internet is forever and public, even if you delete it or use filters on who can see it, as you can never ensure no one copies it and post it elsewhere.
A lot of the arguments on that subreddit seem agenda driven from my perspective. While there are real concerns (user data sent and stored outside of Europe, right to be forgotten as mentioned by another user) the people there seem really fixated on the developers specifically and their beliefs, as well as deletion of user data.
If any one of the users there put their money where their mouth is and explained in a logical, sensible, neutral way to the devs why Lemmy should send federated deletion requests for example (claims made in that thread that Lemmy doesn’t, I haven’t verified if this is the case myself), the devs would probably take it on board the same way they removed the mandatory hard coded slur filter.
At the end of the day though, Kbin and Raddle seem like a solution to the general consensus in that thread, yet they get very little mention. The majority of the participants chose to bash rather than to fix, forcing their views on others inconsiderate of people’s threat models, and while they have every right to do so, a community with that kind of closed minded perspective is not something I’m into. I’d rather they stay on Reddit 👍
As for me personally… Lemmy could be better, but as a federated network with no need to be supported by ads, no API restrictions, as well as public mod logs for transparency & accountability, I really like it and interested in seeing where it goes. There are inevitably going to be issues, and a lot of the discussions I’ve seen here on Lemmy show an interest in improving things, vs reddit discussions where it’s the opposite.
deleted by creator
Reading the thread makes me want to vomit, I can’t take all these agenda their talking about. As long as you’re on the internet. You’re not safe, until you’ve made some appropriate measures to cover your internet footprint.
Im not saying it’s true or not, but what’s the difference? Reddit’s privacy policy wasn’t great either.