this post was submitted on 07 Jul 2023
16 points (100.0% liked)

Technology

34413 readers
727 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 4 points 1 year ago* (last edited 1 year ago) (8 children)

FBI needs to go after the actual “domestic terrorists” The one wrapping fascism with a cross and holding a bible

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago)

Why would they go after their own families?

load more comments (6 replies)
[–] [email protected] 2 points 1 year ago (1 children)

[...] This is exactly what the admins over at Kolektiva.social have done and now one of them has been raided and charged by the FBI for activities unrelated to Mastodon

Clickbait.

[–] [email protected] 0 points 1 year ago (1 children)
[–] [email protected] 1 points 1 year ago

Yes, but the title makes it sound like it was because he was running an anarchist Mastodon instance. That's not why, he just happened to be doing a backup when he was raided, the backup was unencrypted, and they seized it. Has nothing to do with him running an anarchist instance from what I can tell.

[–] [email protected] 2 points 1 year ago (1 children)

mfs doing stuff like this really need to stop living in america bruh 💀

[–] [email protected] 1 points 1 year ago (2 children)

Wait til you hear about extradition

[–] [email protected] 2 points 1 year ago (3 children)

Ok ... so I think false preconceptions are polluting this topic. Apart from the passwords, nothing serious has happened here for your data. As for the DMs ... yea there aren't DMs with any real privacy on the fediverse, they don't exist ... you should presume DMs are public.

Because the fediverse is not in any way private. See for a good treatment of this: https://blog.bloonface.com/2023/07/04/the-fediverse-is-a-privacy-nightmare/

The basic story is that the fediverse is all about duplicating what we post all over the place ... essentially to anyone who decides to run a server on the fediverse. The FBI could (and probably do?) have a server scooping up all sorts of stuff onto their server and you wouldn't know about and probably couldn't do much about it. Google is scraping mastodon (and probably lemmy?) ... try a google search for mastoodn content.

This is all public internet stuff, you're basically running a public blog that happens to be well connected to lots of other public blogs.

As nice as the fediverse is as a nice anti-capitalist-big-corp monopolisation of our social online lives ... it is very much born out of the web2.0 era and doesn't have any of the privacy concerns many of us would now hope for from technologies.

I've argued this elsewhere ... I like the fediverse and am here out of principle ... but in many ways it highlights some of the failings of our world at this time ... because it's about 10 years too late and the future is coming in hot and fast ... in retrospect I wouldn't be surprised if it will make a lot of sense to look back on the fediverse and think that it was effectively redundant at just about the time it gained popularity. An AI dominated internet with massive privacy concerns is here very soon, and the fediverse isn't ready IMO, it's still trying to catch up to web2.0 big social circa 2010.

[–] [email protected] 1 points 1 year ago (1 children)

What about 2013 seemed more favorable to the fediverse than now? Twitter, reddit and Facebook were pretty useful at that time - I don't think I'd have left.

[–] [email protected] 1 points 1 year ago

Principles. That the whole internet and all of the freedom and diversity it can harbour was being monopolised by big giant corporations that had no interest in embracing an open web. Instead, they were convincing the world, especially those growing up in that/this era that the internet had to be constrained to the few walled gardens of big platforms.

These principles were as obvious and relevant then as they are now. Unfortunately convenience is a helluva drug. And, in the "Google" era of the internet (~2005-2020 ?), there was a certain naive optimism about big-tech and the internet, which no doubt lulled us in by its being "free".

In reality, we all really thought that good and useful world-changing stuff was just going to be made for us for free. That the internet was going to inexorably make the world a better place. It was dumb and naive IMO and marks very well the failings of the Millennial generation (to which I belong FWIW). Unfortunately, it's a lesson we had to learn the hardway. There were probably only a handful of people in the world that understood what the new industry was actually doing and was actually about and that had the philosophical will and ability to think it through and communicate to the masses what the choices we were actually making.

[–] [email protected] 0 points 1 year ago (1 children)

As far as I know (which isn't too far, because I'm not a Beltway bandit anymore), the Fediverse isn't on the FBI's radar in any meaningful way. It /might/ be on the radar of the information contractors they hire for bulk data gathering and analysis (Palantir, ZeroFox, Dataminr, probably others these days) but none of me have heard anything specific.

[–] [email protected] 14 points 1 year ago

"...but none of me..."

How many of you are there?

[–] [email protected] 0 points 1 year ago (1 children)

thanks for the link, explains it very well. how bout my activity, like IP address, up/down votes, clicks on links, favorites and whatnot, is that federated around or how does that work, i.e. who has access to it?

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

Up and down votes are federated with your username, along with posts and comments (obviously).

Clicking on links, favourites, email address (if you put one in when signing up), password and IP address are all only on your local instance.

Basically, unless another server needs to know about it for federation to work, it's going to be local to the instance you're using.

[–] [email protected] 0 points 1 year ago (2 children)

How is the data handled on Lemmy compared to Mastodon?

[–] [email protected] 1 points 1 year ago (3 children)

Probably the same. This bears repeating: All your information online is and always has been available for others to collect and see, from FBI to advertisers. If you want any amount of protection, it must be with E2E encryption for which you own the keys.

We taught online safety in the 90s. Did we all just collectively forget this in the last two decades?

load more comments (3 replies)
[–] [email protected] 1 points 1 year ago

DMs aren't stored securely (Lemmy even warns you of that)

[–] [email protected] 0 points 1 year ago (2 children)

You aren't allowed to have anarchist worldviews in the US?

[–] [email protected] 1 points 1 year ago (1 children)

In mid-May 2023, the home of one of Kolektiva.social's admins was raided, and all their electronics were seized by the FBI. The raid was part of an investigation into a local protest. Kolektiva was neither a subject nor target of this investigation. Today, that admin was charged in relation to their alleged participation in this protest.

[–] [email protected] 1 points 1 year ago

The raid was part of an investigation into a local protest.

Protests are illegal? Since when?

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

You aren't allowed to have leftist views of any kind in the USA. Ask Fred Hampton.

[–] [email protected] 0 points 1 year ago (1 children)

What did they get raided for?

[–] [email protected] 0 points 1 year ago (1 children)

Something involving a local protest here's the post announcing what happened https://kolektiva.social/@admin/110637031574056150

[–] [email protected] 0 points 1 year ago* (last edited 1 year ago) (1 children)

Unfortunately, at the time of the raid, our admin was troubleshooting an issue and working with a backup copy of the Kolektiva.social database. This backup, dated from the first week of May 2023, was in an unencrypted state when the raid occurred and it was seized, along with everything else.

Oh the FBI just happened to visit when they unencrypted the database? How convenient!

[–] [email protected] 1 points 1 year ago

The FBI surveils targets prior to executing raids. It's possible they deduced that there was some useful information available on the target's laptop and acted in such a way to capture it easily.

[–] [email protected] 0 points 1 year ago (6 children)

Well thats worrying for everyone federated with them.

[–] [email protected] 1 points 1 year ago (1 children)
[–] [email protected] 1 points 1 year ago (1 children)

If you DM'd nudes to a Kolektiva user, the FBI now has it

[–] [email protected] 2 points 1 year ago

That's why you get a big warning message informing you that DM's are not encrypted and thus not secure.

[–] [email protected] 1 points 1 year ago

Is it? As far as I know, identifying data such as IP addresses are not transmitted between instances.

[–] [email protected] 1 points 1 year ago

oh no! they have all the posts that people publicly posted onto the Internet!

load more comments (3 replies)
[–] [email protected] 0 points 1 year ago* (last edited 1 year ago) (4 children)

FBI claiming it's for non-Mastodon related reasons, but that could be a cover. https://kolektiva.social is still up

Regardless, I don't think they even have to ask to get this sort of data from any of the big platforms.

[–] [email protected] 1 points 1 year ago (1 children)

There was never any lag in service. I'm on that instance. I believe the person was raided due to their activism and had a backup of some data but not the actual server. They made an announcement and told people to change their passwords. Many lost a degree of trust but are being as transparent as possible with members. https://kolektiva.social/@admin/110637031574056150

[–] [email protected] 1 points 1 year ago

Yeah, what the fuck are you supposed to do? Ask the FBI to please come back later?

It's a good reminder for folks with concerns to not say anything on a platform that isn't end-to-end encrypted that you don't want folks finding out about, to not use an email you don't want associated with yourself, and to use some sort.of VPN or Tor if you need to hide your IP address.

And if course use unique passwords but I would really hope people do that already.

[–] [email protected] 1 points 1 year ago (1 children)

Yeah the 'happened to have a bunch of unencrypted data laying around' bit seems odd. Would make sense if they got picked up for something else and that was the bargain. Fucked if I know though

[–] [email protected] 1 points 1 year ago

Not really? If you're trying to debug something, or if you're gearing up for an upgrade (like the Mastodon upgrade this week that's giving a lot of admins grief) it's plausible to have one of your backups locally to mess around with. As an example of this principle, I run Part-DB-server to manage my workshop inventory. For various reasons I migrated from a hosted MySQL database to a local SQLite database, and I'm in the process of moving back to the MySQL database. To facilitate this I have a copy of the SQLite database that, as needed, I run SELECTs on to backfill details on entries. I have a local copy of that database on my laptop, in other words.

It's also plausible that the kolektiva.social admin was mocking up a clone of the service on their laptop to test something.

Without more data (gentlebeings, start your FOIA requests) I'm not sure that it's a good idea to speculate. We might learn something that we can use later.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

You're almost right: they do have to ask. They get a warrant, and they ask, and they are never told no.

[–] [email protected] 1 points 1 year ago

I don't think it was a cover. They could have just sent a subpoena for the data if it was hosted in the US.

[–] [email protected] 0 points 1 year ago

Ah yes, the land of the free where thought police will bust servers where people practice wrongthink.

load more comments
view more: next ›