• 0 Posts
  • 22 Comments
Joined 2 年前
cake
Cake day: 2023年6月29日

help-circle


  • Jesus fucking Christ, man. RSS parsers and emailing are literally next up after “Hello, World” in programming. If that would have required “months and months of learning” as you stated elsewhere, then maybe programming just isn’t for you — AI or no AI. It’s OK not being able to do something! However, it’s some next level 1st world entitlement shit to think that you’re somehow entitled to be able to create programs without any effort on your part and with a complete disregard for the cost to the environment and the planet.




  • I don’t subscribe to any streaming services. I have vinyls and tapes. If I want to listen to music on the go, I use my walkman with music I’ve recorded from vinyl or, in very rare cases, YouTube.

    My 9 year-old has a walkman too and it’s the greatest thing ever. She doesn’t have a smartphone, but the walkman enables her to listen to her own mixtape when we’re traveling. She loves it.

    Actually, I’ve seen quite a few people with feature phones around lately, a walkman would be perfect for them for the same reason.

    Also, making mixtapes is still as great as it was back then. A playlist is not the same, not by a long shot. I made one for my little sister recently and it was all kinds of fun to make sure both sides were filled, that the mood and energy was cohesive, that it was tracks I genuinely believed she would enjoy but also tracks that I knew she wouldn’t seek out on her own. (Fuck algorithms for recommending music — they won’t challenge you or surprise you.)

    Edit: Also, releasing on cassette isn’t even that new this time around. For instance, all of Mac Miller’s stuff has been available on cassette for at least a few years. Like, check out HHV’s listing of cassettes: https://www.hhv.de/en/records/catalog/filter/tape-D2M74N4U9 and https://imusic.dk/exposure/8138/kassettebaand has a surprising number of metal albums on cassette.










  • I am interested in discussion but I prefer to discuss things based on facts rather than feelings.

    Email isn’t exempt from the GDPR. If an email provider is doing anything with your email except for delivering it to the intended recipient, then you have a right to know under the GDPR. Plenty of hefty fines have been handed out over failing to sufficiently inform about such things: https://www.enforcementtracker.com/ (look for e.g. art. 12 violations). Even something as simple as SMTP logs contain PII according to the GDPR and should be handled as such.

    You voluntarily sending an email, with whatever content you decide to put there, to a recipient of your choosing, is in absolutely no way the same as clicking a vote button and involuntarily having your vote and username broadcast to whoever cares to listen without your prior knowledge and consent. Yes, emails travel through a bunch of MTAs underway — that’s a prerequisite for email to work. And no, broadcasting Lemmy votes along with usernames is in no way a prerequisite for voting to work.


  • It doesn’t matter if you post your +1 via lemmy or via email.

    It absolutely does. When sending an email, you fill in the recipient and decide where your data goes, but when you press ‘upvote’ on Lemmy, you don’t have a say in who that information is broadcast to — especially not in its current form. And it’s on whoever runs the Lemmy server to comply with the GDPR and make data processors known. It really doesn’t matter how similar you think it is to email, the GDPR treats it differently and that’s the reality you have to accept.

    Your argument could easily be extended to every piece of information floating across the internet. No one is forcing anyone to upload an image to Facebook, but Meta is still responsible for documenting who handles the image and for what purposes, they can’t just say, “you uploaded it, we let 3rd parties have their way with it”.

    And I’ve also worked with the GDPR, both as a developer implementing systems to accommodate requests for data insight and erasure, and implementing controls to make sure data was being handled correctly and e.g. not stored for longer than allowed, and I’ve worked with it from a security perspective in order to protect the personal data of about a couple of million people, and finally I’ve worked with it in management to implement safe and GDPR compliant data handling strategies in a couple of companies.


  • Still not a good example because I’m still in control of what I choose to send and whether or not I choose to send it at all. I can’t choose whether or not Lemmy broadcasts my username in conjunction with my votes to whoever may be listening, but I can choose not to send an email to a mailing list stating who I am and how I vote on Lemmy posts.

    Organizations handling EU citizens’ data are required to abide by the GDPR and I can assure you that Gmail and others do that, they were among the first scrutinized when the GDPR went into effect. Just because I can send any data via email, doesn’t mean that email providers can do whatever they want with the data. If an email provider processes the contents of your email in order to do targeted advertising, then they have to very clearly state that in their privacy policy.

    This isn’t specifically aimed at you, @cwagner@lemmy.cwagner.me, but more of a general observation. Lots of people in this thread appear to be unfamiliar with the GDPR and how it works, and that’s completely fair — especially if you’re not from Europa and/or haven’t worked with it. I just wish they would actually check how it works instead of making assumptions. This is a good start: https://gdpr.eu/data-privacy/




  • if you want data deleted, you can do that, but you’ll have to send that request to every server you (or your instance on your behalf) sent it to.

    According to the GDPR an “organization” has to specify exactly who processes the user’s data (i.e. every instance in a federation — past and present), and everyone that processes that data must make it easy to make data/deletion requests, to that’s hopefully baked into Lemmy from the get-go because otherwise someone is going to find themselves in the middle of a GDPR nightmare sooner rather than later. It’s not enough to say in the privacy policy that “user data spreads to federated instances” or something to that effect.

    And given that usernames are connected to the votes, I’m pretty sure that it does not comply with the GDPR to just say that it “will place this interaction in the user’s outbox and immediately deliver it on the user’s behalf to all”.

    Edit: Added link.