4 ms·

I used to run such a service but I stopped after police came to my door to get logs because it was used to share very illegal pictures. They were friendly and

I used to run such a service but I stopped after police came to my door to get logs because it was used to share very illegal pictures. They were friendly and I was never in cause myself, but I don't want to enable this kind of thing, or to have to deal with moderating content, even passively. I'm happy other people provide such services, but just be aware they will inevitably be used for activities you probably don't want to facilitate.

SLWW 4y ago
It's the nature of things. This is a given (or at least I thought it was the usual) for many years now. Your only hope is that your service is too obtuse for the creeps/deviants to really grapple onto. Although considering how they are getting younger and younger (the perpetrators) even that is little condolence. I've found myself in similar situations as yours, however now I just use other people's crap. I'm not willing to answer the phone like I was then; so yeah. It's a problem
mro_name 4y ago
I assume you intended this service mostly for your personal use and wonder if making it a) unreliable (e.g. having opening hours a.k.a. intentional downtimes) b) applying client side encryption a la https://privatebin.info https://privatebin.info c) expire & purge the (encrypted) content quickly would have mitigated your problem.
- fooker 4y ago
  It's fairly easy to be held liable if any of these measures affect law enforcement negativively.
- II2II 4y ago
  If it is mostly intended for personal use, you may as well use some form of access control. We are long past the day when people would abuse such a service to share distasteful material and in an era when people would abuse such a service to share (rightfully) illegal material. While I was uncomfortable with the former, I certainly do not want to facilitate the latter.
  - dweekly 4y ago
    Put the service behind a personal Tailscale tail net. Can still access from all of your devices and nobody else can push or pull. Could crib notes from olden days and have a public/ subdirectory where files you drop in there are available read only to the public internet via separate endpoint. Can also have a blind drop box that does the other direction (but does not allow the public to read). That way you are read / write from all your devices, can publish to anyone, and can let anyone share things to you, you just don't facilitate anyone sharing to anyone.
- dspillett 4y ago
  > a) unreliable People distributing unmentionable content or using services for otherwise nefarious purposes are used to dealing with intermittent issues like that. It'll get rid of some but not all of them. > b) applying client side encryption a la https://privatebin.info https://privatebin.info > c) expire & purge the (encrypted) content quickly If your site turns out to be being used by a group that is raided, this will not stop your services being confiscated and very thoroughly investigated. You might be legally in the clear, but it may cost you time and hassle (and potentially money if you need to take on the services of a lawyer to help prove you did not intentionally aid/abet). Also an end-to-end encrypted solution like that might be rather attractive to users both illegal and otherwise, so be ready for a huge bandwidth bill if/when a sizable group latches onto it!
  - mro_name 4y ago
    > get rid of some but not all usually there's always one solution to get rid of all but that's prbly not what you think of. So getting rid of some is what it's about, isn't it? And some more by another means.
ilyt 4y ago
I wonder how far is the "trigger" on that. Like, if the service provided just encrypted blobs + a piece of JS to decode them (with say URL containing the password), would you be in the clear or the police/law would just go "see I click the url that leads to your site and get the Bad Stuff, it's on you"
- brudgers 4y ago
  If it matters, hire a lawyer for a legal opinion beforehand. Because there is a substantial probability you will be paying for legal advice later after the police have dropped by. I mean the police aren't going to say oopsies based on your argument no matter how logical it sounds. They are there to serve the warrant.
  - linsomniac 4y ago
    ... and probably take all your computer gear.
    - toomuchtodo 4y ago
      And you won’t get it back.
      - iforgotpassword 4y ago
        Until two years later where Windows Update will take eight hours after you turn it on again the first time and finally send you into a boot loop.
- seszett 4y ago
  Maybe this kind of thing works in the US but this is France and the law doesn't really stop at these technicalities, serving child porn as "encrypted blobs" certainly doesn't exonerate you of anything. In fact, as a host (as opposed to an actual producer of illegal content) taking such steps to evade law would probably be rather counterproductive, compared to simply cooperating with law enforcement, since it would be difficult to claim acting in good faith.
ttul 4y ago
Idea: Invite the police in from day one.

SLWW 4y ago

It's the nature of things. This is a given (or at least I thought it was the usual) for many years now. Your only hope is that your service is too obtuse for the creeps/deviants to really grapple onto. Although considering how they are getting younger and younger (the perpetrators) even that is little condolence. I've found myself in similar situations as yours, however now I just use other people's crap. I'm not willing to answer the phone like I was then; so yeah. It's a problem

mro_name 4y ago

I assume you intended this service mostly for your personal use and wonder if making it a) unreliable (e.g. having opening hours a.k.a. intentional downtimes) b) applying client side encryption a la https://privatebin.info https://privatebin.info c) expire & purge the (encrypted) content quickly would have mitigated your problem.

fooker 4y ago
It's fairly easy to be held liable if any of these measures affect law enforcement negativively.
II2II 4y ago
If it is mostly intended for personal use, you may as well use some form of access control. We are long past the day when people would abuse such a service to share distasteful material and in an era when people would abuse such a service to share (rightfully) illegal material. While I was uncomfortable with the former, I certainly do not want to facilitate the latter.
- dweekly 4y ago
  Put the service behind a personal Tailscale tail net. Can still access from all of your devices and nobody else can push or pull. Could crib notes from olden days and have a public/ subdirectory where files you drop in there are available read only to the public internet via separate endpoint. Can also have a blind drop box that does the other direction (but does not allow the public to read). That way you are read / write from all your devices, can publish to anyone, and can let anyone share things to you, you just don't facilitate anyone sharing to anyone.
dspillett 4y ago
> a) unreliable People distributing unmentionable content or using services for otherwise nefarious purposes are used to dealing with intermittent issues like that. It'll get rid of some but not all of them. > b) applying client side encryption a la https://privatebin.info https://privatebin.info > c) expire & purge the (encrypted) content quickly If your site turns out to be being used by a group that is raided, this will not stop your services being confiscated and very thoroughly investigated. You might be legally in the clear, but it may cost you time and hassle (and potentially money if you need to take on the services of a lawyer to help prove you did not intentionally aid/abet). Also an end-to-end encrypted solution like that might be rather attractive to users both illegal and otherwise, so be ready for a huge bandwidth bill if/when a sizable group latches onto it!
- mro_name 4y ago
  > get rid of some but not all usually there's always one solution to get rid of all but that's prbly not what you think of. So getting rid of some is what it's about, isn't it? And some more by another means.

ilyt 4y ago

I wonder how far is the "trigger" on that. Like, if the service provided just encrypted blobs + a piece of JS to decode them (with say URL containing the password), would you be in the clear or the police/law would just go "see I click the url that leads to your site and get the Bad Stuff, it's on you"

brudgers 4y ago
If it matters, hire a lawyer for a legal opinion beforehand. Because there is a substantial probability you will be paying for legal advice later after the police have dropped by. I mean the police aren't going to say oopsies based on your argument no matter how logical it sounds. They are there to serve the warrant.
- linsomniac 4y ago
  ... and probably take all your computer gear.
  - toomuchtodo 4y ago
    And you won’t get it back.
    - iforgotpassword 4y ago
      Until two years later where Windows Update will take eight hours after you turn it on again the first time and finally send you into a boot loop.
seszett 4y ago
Maybe this kind of thing works in the US but this is France and the law doesn't really stop at these technicalities, serving child porn as "encrypted blobs" certainly doesn't exonerate you of anything. In fact, as a host (as opposed to an actual producer of illegal content) taking such steps to evade law would probably be rather counterproductive, compared to simply cooperating with law enforcement, since it would be difficult to claim acting in good faith.

ttul 4y ago

Idea: Invite the police in from day one.