• 0 Posts
  • 12 Comments
Joined 1 year ago
cake
Cake day: June 1st, 2023

help-circle





  • Why should someone who has doxed someone get away with it by deleting their account?

    Doxxing is not illegal in many places - the US included. Cyberstalking and harassment may be illegal, depending on location. That’s beside the point, but this is an extremely specific example.

    Ultimately users should, in my opinion, be in control of their data. Tildes, for example, preserves deleted comments for (I think) 30 days and then permanently removes them. It seems like that approach is a compromise that would work for your situation while still respecting privacy long term.


  • Deleted comments remain on the server but hidden to non-admins, the username remains visible

    This is a negative behavior by Lemmy, in my opinion. Deleted comments should be purged after some time. Tildes does the same thing - I think with 30 days?

    Deleted account usernames remain visible too

    These should be replaced with some random string of characters or something like DeleteUser<numberhere> or something.

    Anything remains visible on federated servers!

    This is just a concession of federation.

    When you delete your account, media does not get deleted on any server

    This is an issue, too, in my opinion.


  • I don’t think there is a legal requirement that you store that data, just that you make the data you store available, or in some situations, you add logging for valid law enforcement requests.

    Apple for example does not have access to end-to-end iCloud data that is encrypted to my knowledge. They wouldn’t be able to provide the contents of my notes application to law enforcement necessarily - and that is currently legal.




  • To challenge some of your replies, if those are welcome.

    People do actually complain about email, quite often. Spam filters and deliverability are real challenges sometimes. Email also has a lot of gotchas that you can run into - like what happens when you lose control of a domain name? What happens if your email provider shuts down? Who actually owns the email - you or the provider? A lot of email protocol has inherent security and privacy issues too. I don’t know if I’d use email as the leading example. Phone networks or text messages might be a little more straightforward.

    I also don’t think it’s entirely true that federation is strictly necessary. Wikimedia seems to run a lot of centralized services with large scale and large community with no federation. Tildes is a valid alternative to both Lemmy instances and Reddit with no federation. If Tildes for example went in a bad direction or became corrupted - it is open source. You could just start a new Tildes using the same source code. It isn’t federated, but does it have to be?