this post was submitted on 28 Jun 2023
42 points (83.9% liked)

Privacy

31938 readers
703 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
k_o_t@lemmy.ml
tmpod
Yayannick@lemmy.ml
ranok@sopuli.xyz
42
Tell me if I’m wrong, but federated systems don’t seem to be the best for privacy because you can’t ever delete all of the copies of your posts and comments? (lemmy.ml)
submitted 1 year ago by GuyDudeman@lemmy.ml to c/privacy@lemmy.ml
67 comments fedilink hide all child comments
 

I was thinking about this recently… By going to a federated system, one that essentially copies all of your content from one instance to another, when you delete a comment, does that comment get deleted on every instance? Is that even possible?

you are viewing a single comment's thread
view the rest of the comments
[–] fidodo@beehaw.org 8 points 1 year ago

You can't truly delete anything period, anything posted publicly can be copied. What's more important is if it's verifiable. I can trivially edit your post locally and take a screenshot and pretend it's you, but there's nothing verifying you actually said it.

It's possible through encryption to verify that something was actually said, but most of the time we verify things through trust, we trust centralized services to have an accurate record of what happened. We trust social networks to not alter the original content posted to it. We trust archive organizations to store an original copy securely as it was at the time.

But that trust can be broken. u/spez himself has admitted to altering comments (happen in 2016, huge red flag), and we can only trust that archivers did their job properly.

You can prove that a post was truly made and unedited via encryption, but even then you're still trusting that all the clients you are using are not doing anything nefarious in between. Unless you read the source code and compile your own applications you can't know for sure, so still, trust is a big part.

But if you can prove a post was made, how do you unprove it? I don't really see how that's mathematically possible. So when you "delete" something on the internet, you can't really remove it completely.

So what does "deleting" something actually mean? What it really means is "please stop hosting this and monetizing it on your server", and it's not even possibly to be sure they deleted all of it internally, you can only really check that they are no longer showing it to the public. That's easy enough to do when it's a centralized service, but for anything decentralized it means going to every single server and getting them all to delete it. You can send out a signal asking them nicely to delete it, and I don't know if Lemmy has this, but even if they did it's unenforceable to get a server to fully delete something, but you could put some rules in place that it needs to be publicly inaccessible otherwise the instance gets defederated or something, but I don't know how hard it would be to implement something like that. The resources required to verify that all instances have stopped serving it and don't begin to serve it later may be far too high to be practical.