@samueljohnson@kravietz From what I understand, no GDPR exemption applies to "I want to use SSH to access my own server" or "I want to run a Quake server that does not log".
In fact, the latter distributes usernames and in-game chat to other players, and that alone is data processing and sharing.
@samueljohnson@kravietz I'd honestly like to know what a game project like Xonotic can do to NOT make it illegal for server admins to host a game server.
But sadly this seems overly complicated. We did some things, like server admins can set up a consent dialog at connection - but it's still hard to know what to actually put there, and for now it's up to each admin.
It's also unclear what responsibility the FOSS project carries vs the server admins.
So can you tell me the _concrete_ step every Xonotic server admin has to take? Art. 27 GDPR e.g. is already a quite strong requirement, as it effectively requires every server admin to appear with their real name and address - and server admins outside the EU even need to name a person in the EU?
- SSH port is open to anyone. - Anyone who connects to it - and be it by entering http://ipaddress:22 in the browser address bar - will cause log lines to be written. - The logging includes the source IP address, which is generally considered PII.
As such, it quite obviously falls into the scope of the GDPR.
As for the logging of the IPs itself, that clearly falls under "legitimate interest" as per Article 6(1) GDPR - so that is fine per se.
Art. 13 GDPR is the real problem with SSH - the right to be informed. The protocol doesn't even provide a _way_ for the connecting individual to be informed about these things.
Clearly the authors of the GDPR did not _intend_ to place 20 million EUR penalties on private individuals who happen to run a vserver with SSH access. And I also presume it won't actually be _applied_ like that. But ultimately it depends on whether someone will file a GDPR compliant, and how the DPA will treat that report. I suppose unless a wild #Gravenreuth appears, people should be safe.
@kravietz My problem with GDPR is the opposite - namely how it harms big corporations least.
For example, me running a SSH server on my personal vserver became technically illegal as the SSH protocol does not support the necessary disclosures, and happily logs every login attempt to the system log (where it tends to age out after 7 days as no one ever looks there anyway unless something is wrong).
I am aware that this kind of log would be permitted under the GDPR if it were properly disclosed. I would also be required to disclose my home address to the entire world just because I run SSH.
IMHO the very least GDPR should have done would be an exclusion so entities that do not use data in a way that requires explicit permission do not need to comply with the disclosure, legal entity etc. requirements. Maybe further conditioned by not making any profit.
@lain IRC does not have an admin randomly banning people from the entire protocol because they once got accused of something they didn't do and then refuses to accept any proof of the opposite.
In IRC, this same power abuse is done by channel ops, and seldomly also by server ops. Thus, less centralized and one can actually go elsewhere.
- "do you want mass censorship" - leading towards no censorship - "do you support filtering of radical and extremist content" - leading towards yes censorship - "do you support filtering of child abuse content" - leading towards yes censorship - "should providers be fully responsible for the content they host" - leading towards no censorship - "should providers be exempt from any responsibility for the content they host" - leading towards yes censorship
@coolboymew@ChristiJunior@caekislove@Moon@Giganova8 I don't have that kind of optimism. With the right leading question, pretty sure you get 90% to agree that they want mass censorship. Of course, you can also make 90% oppose mass censorship by asking the questions the right way.
@Hoss That makes these AI things actually useful for trans folk - unlike their friends, who will say they pass out of politeness, and their coworkers, who will say so out of fear of HR complaints, Midjourney is plain honest. Allows them to really judge how well their work turned out. Actually can be a great tool for them to make the adjustments until they do pass.
Inb4 normal hetero woman uploading pic to Midjourney to ask "do I look fat in this" ;)
@SpurgAnon To be fair, given not much time I would have done it wrong too. I would intuitively have drawn the water line at the same height as the standing one, when actually it should be higher here.
@p@errante What is the current state? If I reply and was blocked, then the reply was typed for nothing. I then usually copy-paste the reply into a public post out of sunk cost fallacy ;) but seriously, blocks should show up BEFORE typing up a reply.
Is that still the current state, or do blocks now get hidden fully - you can send your reply, but nobody - not even other users - can see it?
Personally I am rather in #TeamMute. I do not intend to restrict how other people talk to each other. Blocks are for exceptional circumstances only.
Software engineer. Mathematics major. All programming languages are bad.In free time, game developer; main titles: #AAAAXY, #Xonotic, #Nexuiz.Super Mario Maker troll fan (i.e. I enjoy watching streamers suffer).Primary: @divVerent@misskey.de