{"action":"created","issue":{"url":"https://api.github.com/repos/diaspora/diaspora-project-site/issues/86","repository_url":"https://api.github.com/repos/diaspora/diaspora-project-site","labels_url":"https://api.github.com/repos/diaspora/diaspora-project-site/issues/86/labels{/name}","comments_url":"https://api.github.com/repos/diaspora/diaspora-project-site/issues/86/comments","events_url":"https://api.github.com/repos/diaspora/diaspora-project-site/issues/86/events","html_url":"https://github.com/diaspora/diaspora-project-site/issues/86","id":173923119,"number":86,"title":"Privacy and data ownership selling points are somewhat inaccurate","user":{"login":"Hypolite","id":925415,"avatar_url":"https://avatars.githubusercontent.com/u/925415?v=3","gravatar_id":"","url":"https://api.github.com/users/Hypolite","html_url":"https://github.com/Hypolite","followers_url":"https://api.github.com/users/Hypolite/followers","following_url":"https://api.github.com/users/Hypolite/following{/other_user}","gists_url":"https://api.github.com/users/Hypolite/gists{/gist_id}","starred_url":"https://api.github.com/users/Hypolite/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Hypolite/subscriptions","organizations_url":"https://api.github.com/users/Hypolite/orgs","repos_url":"https://api.github.com/users/Hypolite/repos","events_url":"https://api.github.com/users/Hypolite/events{/privacy}","received_events_url":"https://api.github.com/users/Hypolite/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2016-08-30T03:38:41Z","updated_at":"2016-09-19T16:44:37Z","closed_at":null,"body":"Hi all,\r\n\r\nI recently started [a thread on Loomio](https://www.loomio.org/d/RktYIM0W/push-feature-reinquinshing-control-over-data) about the marketing message on the Diaspora* homepage regarding Privacy and data ownership. Specifically, I think that the content (especially private conversations) replication between pods through push updates is going against the Privacy promise that is currently stated as follow:\r\n\r\n> ### Privacy\r\n> In diaspora* you own your data. You do not sign over any rights to a corporation or other interest who could use it. With diaspora*, your friends, your habits, and your content is your business ... not ours! In addition, you choose who sees what you share, using Aspects.\r\n\r\nLet's go bit by bit:\r\n\r\n> you own your data\r\n\r\nThis is true as long as you are hosting your own pod and you only communicate with users signed up on your pod. As soon as you start interacting with users from other pods, your content (public, limited or private) get sent to other databases that you don't own. Sure, other pods are expected to remove the duplicated content when you delete it on your pod, but you can't make them if they don't want, and even if they comply with deletion requests remote podmins have access to this content while it's up on your pod as well.\r\n\r\n> You do not sign over any rights to a corporation or other interest who could use it.\r\n\r\nThis is true, nothing is signed, but your data is out nonetheless. Nothing prevents your podmin to use its pod's data and sell it to the highest bidder. And right now there isn't an easy way to move from a untrustworthy pod to another one. There's a limited amount of personal informations that are shared between pods, which prevent remote podmins to collect too much information, but this possibility exists as well.\r\n\r\n> With diaspora*, your friends, your habits, and your content is your business ... not ours!\r\n\r\nThis is almost true as well. The Diaspora* dev team doesn't have direct access to a specific individual user's data, unless they happen to be podmin of their pod. I'm not sure how much Diaspora* devs are also podmins, but again, the wording leaves no doubt when they could be one.\r\n\r\n> In addition, you choose who sees what you share, using Aspects.\r\n\r\nThis is a regular feature description and poses no problem to me whatsoever.\r\n\r\nI think it's worth considering a rewriting of this section, and maybe emphasizing that everything you post on Internet may become public, Diaspora* or not. Other encryption services are providing real privacy services that Diaspora* simply can't match by design, and I feel like Diaspora*'s communication shouldn't present Privacy as a cornerstone for switching to it, at least not under this shape."},"comment":{"url":"https://api.github.com/repos/diaspora/diaspora-project-site/issues/comments/248048424","html_url":"https://github.com/diaspora/diaspora-project-site/issues/86#issuecomment-248048424","issue_url":"https://api.github.com/repos/diaspora/diaspora-project-site/issues/86","id":248048424,"user":{"login":"pravi","id":708222,"avatar_url":"https://avatars.githubusercontent.com/u/708222?v=3","gravatar_id":"","url":"https://api.github.com/users/pravi","html_url":"https://github.com/pravi","followers_url":"https://api.github.com/users/pravi/followers","following_url":"https://api.github.com/users/pravi/following{/other_user}","gists_url":"https://api.github.com/users/pravi/gists{/gist_id}","starred_url":"https://api.github.com/users/pravi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pravi/subscriptions","organizations_url":"https://api.github.com/users/pravi/orgs","repos_url":"https://api.github.com/users/pravi/repos","events_url":"https://api.github.com/users/pravi/events{/privacy}","received_events_url":"https://api.github.com/users/pravi/received_events","type":"User","site_admin":false},"created_at":"2016-09-19T16:44:37Z","updated_at":"2016-09-19T16:44:37Z","body":"On Monday 19 September 2016 06:34 PM, goob wrote:\n> How about this for the first section under\n> https://diasporafoundation.org/about#privacy ?\n> \n> \n>           Own your own data\n> \n>     Many networks make money by analysing your interactions and using\n>     this to advertise things to you. diaspora* doesn’t use your data for\n>     any purpose other than allowing you to connect and share with\n>     others. *Only the admins of pods you interact with can access your\n>     data, and you can choose which pods you interact with.*\n> \n> (New part in bold.)\n\nI think we can mention end to encryption using XMPP for complete\nprivacy, even podmins can't get that info.\n\n"}}
{"actor":{"display_login":"pravi"}}