I was thinking about this recently… By going to a federated system, one that essentially copies all of your content from one instance to another, when you delete a comment, does that comment get deleted on every instance? Is that even possible?
I was thinking about this recently… By going to a federated system, one that essentially copies all of your content from one instance to another, when you delete a comment, does that comment get deleted on every instance? Is that even possible?
I think you have a pretty weird understanding of “privacy” if you think that you have it when posting a comment in a publicly-accessible forum.
If you post it in a place I can find it, I can scrape it, store it, use it for my own putposes, in perpetuity. You might be able to convince a government to tell me to stop, but there is no guarantee I haven’t stored it somewhere you and they don’t know about.
That’s simply the nature of information. You don’t get to control my memory. Once you’ve put an idea in my head, you don’t get to take it back. That idea you put in my head is now my idea. It’s my thought.
You can’t unring the bell. You can keep a thought private, or you can post it. But once you’ve posted it, you can’t make it truly private again.
Then again this is the idea the European ‘right to be forgotten’ wants us to believe.
No, the right to be forgotten is about data that can be used to identify you stored by a service provider. It’s not a right to have every record on the internet purged.
I guess you could force Instances one by one to forget you, but a single provider only has to make sure they deleted the data they stored.
No, that right is to have info tracable to you personally removed, not to have every word you ever stated removed. As long as they anonymise it, they’re good legally and can keep all other data online.
They also only have to send a data delete request to those they shared it with. Any data that got scraped or taken in other ways from them by a third party is technically not protected under that law, and would require a deletion request from you to them. And let now that be the technique used to federate.
Not to forget that the law only counts for services hosted in or aimed at European Union citizen. For example, an American Lemmy instance aimed specifically at American citizen isn’t bound by it, even if you join as a European Union Citizen. If they market to the whole world or such, then they are bound by it. But then, with a US-based server it’s already nearly impossible to be GDPR compliant as US-law is by default against GDPR. Hence big SNS’s having EU subsidaries and servers (and still have huge disagreements, lawsuits and fines about how data gets shared between those and non-EU servers). Point being, with defederated systems, there are bound to be servers with your data that are outside the scope of the GDPR. The whole thing is more complex than “I live in the EU so all sites need to comply when it regards me”.
Wishful thinking. They’ve deluded themselves into thinking data can be externally controlled. The fact that the Pirate Bay is still in operation should have given them a hint.
I beg to differ. It’s indeed possible to scrape and store any comment indefinitely, but there are certainly ways to limit the size and prevalence of that happening. With rate limiting, bot detection and legal enforcement you can reduce the likelihood that someone will scrape and store all your comments. By accepting that everything will be scraped, you are unnecessarily conceding privacy.