• 1 Post
  • 8 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle




  • JanoRis@kbin.socialtoFediverse@lemmy.worldGDPR
    link
    fedilink
    arrow-up
    8
    ·
    1 year ago

    Have been asking this myself lately.
    People always seem to get defensive about this topic, but if an instance gets challenged on a GDPR investigation it could have a huge fine associated to it.
    It is good to have this sorted out, so instance owners don’t enter a life changing financial risk.

    Currently we probably are too small and fly under the radar, but this could become a big problem as the fediverse scales.

    Issues I wonder about:

    1. How safe is the Fediverse? Is there a way for a federated instance to misuse the user data? Or can such activity be detected and cause a defedaration.
    2. How easily can all user data be deleted if a request comes in to remove all personal data? Wouldn’t that request have to be extended to all instances your instance is currently federated with?
    3. Instances probably wouldn’t be able to handle a bad actor (for example Meta, or spez) that decides to start a mass request attack.
    4. Corporations have lawyers that deal with this stuff, I don’t feel like most instance owners have the same kind of protection here.



  • I don’t plan on going back since I just can’t condone how Reddit management handled the whole issue, but there is one thing I wonder why it is not a possible solution for 3rd party apps:

    Wouldn’t it be possible to ask the userbase to just get the API key themselves?
    If every user of a 3rd party app has their own API key, they won’t have to pay anything won’t they, since it will be hard to reach the free tier limit.
    And even if a user does reach the limit he can get a couple thousands API calls for just a small number of cents.

    Reddit will be still getting the same number of API calls, but it won’t be the responsibility of the 3rdparty dev but on each user if the limit is reached