this post was submitted on 19 Jun 2023
336 points (100.0% liked)
Technology
37731 readers
54 users here now
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Subcommunities on Beehaw:
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I don't see anything inherently wrong with servers that try to generate some kind of income (servers don't pay for themselves after all) but it's absolutely the right of every server to choose whether or not to federate with them.
I'd take issue with free labour (e.g. unpaid mods) on a profit-making server.
I worry that through federation Meta will be able to track users of non-meta instances. Then you won’t even know you’re being traced
How would they do that? Is there a vulnerability in federation?
It'd be a "vulnerability" of anything public. There's nothing stopping me from building a bot that pulls posts/threads from any instance and storing all the comments, their owners, the posts and their owners, yadda yadda.
I suspect the up/downvotes are "private" but on any instance, the owners will have access to that. I can't imagine all the data is encrypted at rest by default. But, don't take my word on that as I haven't read any of the specs. But, I'm pretty sure we're just looking at the protocol, not the implementation with regards to how a federated instance works.
So, same precautions as anywhere else really. Your data that's public WILL be tracked by someone and Meta is a damn likely culprit who absolutely would do that. I'm a total privacy nerd myself, but you'd be amazed at the things I want to track at work related to what/how/why people use the tools I work on. Granted, it's 100% exclusively used to improve user experience, weed out bugs, and see what is used most frequently to focus on that stuff. But if it can be tracked, somebody is tracking it.
I like it when various programs at least ask before invasively scraping my data. If asked, I'll often say yes because I want to help the developers, but when it's silent and in the background I have no control and I don't like that
1000% agree. This is how it should be done. And not hidden away somewhere deep. There are legit reasons for in depth tracking, but when used for advertising or something other than improving the user's experience, count me out.