3 ms·

I'm amazed at the amount of fire that Reddit has been playing with here. The update on this article is pretty amazing, with Reddit really not understanding the

I'm amazed at the amount of fire that Reddit has been playing with here. The update on this article is pretty amazing, with Reddit really not understanding their legal requirements before shooting that response back. I've been having some fun using Lemmy in the mean time, and I quite like it. Once some communities get established, I think it'll easily take over from Reddit. It wasn't quite ready for prime time yet, but this boost in popularity is quickly showing the places it needs some help, and I think it'll get it. That isn't to say I've abandoned Reddit, though. I still read it as much as I had... I'm just really interested in alternatives existing as well.

fumar 3y ago
Is there a way to increase density on Lemmy? I want it closer to old.Reddit.
- sudosysgen 3y ago
  I don't think any such alternative frontend is maintained, but making changes to the front-end is not terribly complicated from when I last took a stab at it.
- impissedoff1 3y ago
  Kbin.social? Jerboa for Android looks just like redreader did for reddit
x0x0 3y ago
> with Reddit really not understanding their legal requirements before shooting that response back I think you and the author misunderstand gdpr and ccpa. Severing the link between username and post is not at all obviously noncompliant with GDPR and CCPA. So simply making the username equal to "[deleted]" is likely compliant. 1 - anonymity is a valid method here -- once you cannot link a post with a person, it's colorably no longer "personal data", which is defined as data related to an *identifiable* person. 2 - in GDPR art 17, there are multiple reasons Reddit could avoid deleting. Note that the right of deletion only covers personal data, and has multiple exceptions, including (art 6) legitimate interests of others, which could cover the other people in threads reading and responding to messages. Even if you believe that none of the above suffice, enforcement lies in going through a country-specific DPA in Europe. Either the one Reddit has established as their primary DPA, or a user's country-specific DPA. From then, the (heavily overloaded) DPA would have to prioritize this for enforcement action (which I strongly suspect they wouldn't) and agree with the complainant's position (which I also am not sure they would.) Even if all that happened, Reddit could appeal. But I strongly suspect that the DPA would not take action and find anonymization good enough, particularly since Reddit is intended to be public. The DPAs are generally expending their resources on the most egregious violators and/or their naughty list of Google / Facebook. As for CPRA, it also has multiple exceptions for deletion [1], including anonymization (by rending a post no longer personal information); as well as (d)(4) right of free speech, etc. A similar enforcement overload analysis will likely apply to the CA Privacy Protection Agency as DPAs. [1] https://www.caprivacy.org/cpra-text/#section5 https://www.caprivacy.org/cpra-text/#section5
- mimimi31 3y ago
  >simply making the username equal to "[deleted]" is likely compliant. What if any of the comments themselves contain a name, username or other personal data that could be used to connect it to a person? "Anonymization" by deleting comment's authors like that just seems unnecessarily risky considering the potential fines.
  - x0x0 3y ago
    > considering the potential fines No fine has been close to the maximum; no fine has been put in place for any set of facts anything close to a public forum post not being fully anonymized. If you don't believe me, you're free to read the set of DPA decisions to date as well as the edpb and wg guidance. There have been many complaints about similar actions (esp Discord) and, to date, no DPA actions. In fact, the CNIL did fine Discord for other things, and didn't touch this.

fumar 3y ago

Is there a way to increase density on Lemmy? I want it closer to old.Reddit.

sudosysgen 3y ago
I don't think any such alternative frontend is maintained, but making changes to the front-end is not terribly complicated from when I last took a stab at it.
impissedoff1 3y ago
Kbin.social? Jerboa for Android looks just like redreader did for reddit

x0x0 3y ago

> with Reddit really not understanding their legal requirements before shooting that response back I think you and the author misunderstand gdpr and ccpa. Severing the link between username and post is not at all obviously noncompliant with GDPR and CCPA. So simply making the username equal to "[deleted]" is likely compliant. 1 - anonymity is a valid method here -- once you cannot link a post with a person, it's colorably no longer "personal data", which is defined as data related to an *identifiable* person. 2 - in GDPR art 17, there are multiple reasons Reddit could avoid deleting. Note that the right of deletion only covers personal data, and has multiple exceptions, including (art 6) legitimate interests of others, which could cover the other people in threads reading and responding to messages. Even if you believe that none of the above suffice, enforcement lies in going through a country-specific DPA in Europe. Either the one Reddit has established as their primary DPA, or a user's country-specific DPA. From then, the (heavily overloaded) DPA would have to prioritize this for enforcement action (which I strongly suspect they wouldn't) and agree with the complainant's position (which I also am not sure they would.) Even if all that happened, Reddit could appeal. But I strongly suspect that the DPA would not take action and find anonymization good enough, particularly since Reddit is intended to be public. The DPAs are generally expending their resources on the most egregious violators and/or their naughty list of Google / Facebook. As for CPRA, it also has multiple exceptions for deletion [1], including anonymization (by rending a post no longer personal information); as well as (d)(4) right of free speech, etc. A similar enforcement overload analysis will likely apply to the CA Privacy Protection Agency as DPAs. [1] https://www.caprivacy.org/cpra-text/#section5 https://www.caprivacy.org/cpra-text/#section5

mimimi31 3y ago
>simply making the username equal to "[deleted]" is likely compliant. What if any of the comments themselves contain a name, username or other personal data that could be used to connect it to a person? "Anonymization" by deleting comment's authors like that just seems unnecessarily risky considering the potential fines.
- x0x0 3y ago
  > considering the potential fines No fine has been close to the maximum; no fine has been put in place for any set of facts anything close to a public forum post not being fully anonymized. If you don't believe me, you're free to read the set of DPA decisions to date as well as the edpb and wg guidance. There have been many complaints about similar actions (esp Discord) and, to date, no DPA actions. In fact, the CNIL did fine Discord for other things, and didn't touch this.