@TiffyBelle@feddit.uk avatar

TiffyBelle

@[email protected]

This profile is from a federated server and may be incomplete. View on remote instance

The fediverse is a privacy nightmare ( blog.bloonface.com )

ActivityPub, the protocol that powers the fediverse (including Mastodon – same caveats as the first two times, will be used interchangeably, deal with it) is not private. It is not even semi-private. It is a completely public medium and absolutely nothing posted on it, including direct messages, can be seen as even remotely...

TiffyBelle ,
@TiffyBelle@feddit.uk avatar

I’m not sure this blog post is the “ah-ha!” revelation you think it is.

If you’re posting something, you’re choosing to put that out there on the public internet which should henceforth be considered “public.” This isn’t a privacy violation unless you choose to make it one by violating your own privacy by oversharing sensitive information.

This has been the case online since time immemorial. Once something’s out there, consider it non-retractable. This isn’t specific to the Fediverse/ActivityPub. Even in centralized forums/reddit the things you post were cached by web archive/scraped by unscrupulous sites/used to train AI, etc. even if you tried to delete them from the source server. “Deletion” has never truly been a thing on the internet, which is precisely why people should really consider what they post. Heck, there were specific sites dedicated to showing which comments were “deleted” from reddit in full.

I don’t consider any of these things “privacy violations.” A privacy violation would be if the email address you signed up to your instance with was being broadcast to other servers in the open. What you choose to put out there is up to you and the inherent danger with interacting with any form of social media.

TiffyBelle ,
@TiffyBelle@feddit.uk avatar

There are literally warnings when you try to DM someone on Fediverse apps that say it should not be treated as a secure medium:

https://feddit.uk/pictrs/image/10c7c4f1-22c8-48ac-9eb0-600d2cbbd74a.png

https://feddit.uk/pictrs/image/17e0957b-84e3-43de-b67e-1b14e64cb990.png

Even on traditional centralized platforms I’ve never treated DMs as “private.” Anything not end-to-end encrypted cannot be considered private and never has been able to be. Once again, these aren’t exclusive issues to the Fediverse.

With that said, I do see it as important to draw attention to these types of things. Users should absolutely know not to share sensitive information via DM, or make the mistake of considering them a secure medium on any platform, centralized or not.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • All magazines