Reminder: Steem absolutely and completely violates GDPR and European privacy laws

in #steem6 years ago (edited)

I was linked to a post where witnesses were bickering about a significant proportion of witnessing happening by servers sourced (and resold) from one service provider in Germany.

Pretty shocking that no one addressed the elephant in the room. Seven weeks ago, I started an investigation into the legality of Steem. Now, with GDPR active, all I'll say definitively is that Steem is pretty much completely illegal and hosting this blockchain (with illegal data contained in it) in Europe makes you a criminal.

So, get out of Europe, start hosting in countries that don't care about human rights.

To developers and Steemit Inc, you need to build systems to comply with global laws.

That was for the witnesses. For the users of the platform - If you think Facebook is bad for "leaking" data, think about Steem. It leaks all data about you and everything you post, to everyone, at all times. There's zero recourse or appeal either. Feel free to post, but be careful what you post. If you care about privacy, leave Steem and look for a solution that respects your right to privacy.

I fully understand this is not a pressing concern. The authorities have far more important issues at hand than some tiny corner of the internet.

PS: Steemit.com complies with GDPR, as per the latest privacy policy. However, this post is about the Steem blockchain.

Sort:  

This.

For the users of the platform - If you think Facebook is bad for "leaking" data, think about Steem. It leaks all data about you and everything you post, to everyone, at all times. There's zero recourse or appeal either.

I wish people would be aware more of that. On an immutable public blockchain, any company can spin up a node and start mining all data available for every account. Let Steem grow a little in userbase and watch how Nielsen and its ilk descend on us and mine the BC.

Exactly. I wouldn't be surprised if they are doing it already. (Not Nielsen, but maybe some Cambridge Analytica wannabe startup.) No one would ever know.

But it goes deeper than just some data mining company. All governments, all corporations, all advertisers, all underworld, all stalkers, serial killers, sexual predators - everyone has all access to all your data. And there's not a damn thing you can do about it.

Even Orwell didn't see this coming.

And we tend to promote it as... the opposite. Tracking free.

Wake up, people. The tracking on a blockchain is FREE, it’s not tracking free.

Most people even not aware that most interfaces also use Google Analytics. One of the worst “The product is YOU” behemoths.

you can be discriminating in what you post.

I thought transparency was one of the benefits of STEEM.

In general, we should not post anything to any social media, if we are concerned about privacy of that data. The whole purpose of social media is to show that to everyone, at least to your friends or peers. Isn't that by definition of social media ?

to everyone, at least to your friends or peers

That's what makes all the difference, the ability to choose who sees your data.

Isn't that always an illusion at best?

So what are your thoughts on print, then? Once it's out there in printed form it's out there. Corrections can printed, errata, further elaboration, etc. but you can't delete the paper out there in people's hands.

Good question, I would like to know too.

While the blockchain data is public information, none of that information was collected surreptitiously, all of it was stated publicly by the individuals concerned (or culpable individuals, and the blockchain data is proof of their crime), who intended it to be stored on a decentralized, permanent blockchain that is publicly auditable.

The EU is in the wrong. Should Steemit become a safe space for every fantastic hallucination of fascist tyrannies? No. It should not.

While I understand your concern, and caution to witnesses (and presumably folks that host an RPC node) this is not a problem Steemit needs to solve, nor is it a problem Steemit can solve.

The EU is imploding. The UK voted to leave the EU long ago, and are being essentially enslaved by an illegitimate government in that union, which is infiltrating thousands of agents provocateur to harass them and sexually abuse their children, and renditioning civilians who dare to report it. While the news today is about the egregious crimes of the UK against it's people, Austria, Sweden, Germany, France and the rest of the West in Europe are facing the same repression and tyranny.

This is a problem the people of Europe need to solve.

Steemit may be part of that solution, frankly, as long as it democratizes access to public information. I have noted for some time that not only are government agencies surveilling us through ostensibly private companies like Fakebook, Goolag, and Twatter, but that they are keeping that information from the people it pertains to. Worse, sites, posts, and information are being deleted from the net.

Sites like the Wayback Machine, and Archive.is are not only in danger, they are going to fail. The EU is trying to establish complete control over what information is available to their subjects. This cannot be permitted, or there will be no free people, only chattel.

Steemit is the solution to that problem. The right to be forgotten doesn't exist. It's a false claim, an abnegation of reality, that is no mercy to those whose drunk posts embarrass them. Once data is released into the wild, there it remains. The attempt to foist such repression on the people of nations subject to those tyrannies will have to be thrown off by those people, or they will have no need of Steemit in the cells they are allowed by their masters.

Not every revolution is only noticed in retrospect. Sometimes you have to spit in your palms and hoist the black flag. If Steemit doesn't remain uncensorable, it will be useless.

Steemit.com is going to comply with GDPR. Indeed, Steemit has remove a lot of content on the site in the past, responding to DMCA notices etc. Maybe you should use a different app on the Steem blockchain since your political rant makes it clear you don't agree with the regulation. While you are at it, you may want to edit all references to "Steemit" in your post to "Steem".

PS: Source

Good point about Steem/Steemit. Thanks! I often forget to note the difference as the only interaction I have with Steem is Steemit.

If Steemit has a mechanism in place to remove content already, problem solved.

As to the rest of your rant about public information being public, where's the problem?

Is there a problem in your view with the public having access to public information?

If Steemit morphs into some lapdog of tyranny, don't worry, I'll be gone.

The problem is not solved as the infringing data is still held in the Steem blockchain. Privacy is a human right, there's no distinction between "private" data and "public" data, and like all human rights privacy is timeless. I.e. by foregoing your privacy today doesn't mean you don't have the right to privacy in the future.

I understand that you see the above distinction, but the law is the law. If you don't like the law, I would recommend you protest in appropriate forum.

Ah, the distinction was not clear, and both you and @carlgnash assume I should know that if Steemit removes content, they don't do so by hardforking and removing the infringing data from the blockchain.

I would have assumed this was necessary to satisfy DMCA.

But, a mechanism does exist to remove data from the blockchain.

It's called a hardfork.

That's the whole point of my initial rant. (As well as previous rants over the last two years) There needs to be a defined, transparent system implemented that responds to DMCA, GDPR etc. Something like witnesses review and approve amendments, and it leads to thousands of microforks. But the system has to be robust enough so everyone's on the right chain at all times etc.

(I'm not a developer - I'm sure they will come up with a better solution.)

you are again missing the distinction between "Steem" and "Steemit". Steemit has a mechanism in place to remove content, as in steemit.com. One website. One website not displaying content that is on the blockchain, is different than a way to remove that content from the Steem blockchain.

Even if every web front end for Steem in the world didn't display illegal content, that content would still exist in the servers of the witnesses. It has to - the witness server has to have the whole blockchain. There is no current mechanism to remove data from a block once it has been produced.

"If Steemit has a mechanism in place to remove content already, problem solved."

Is what I said.

"Steemit has a mechanism in place to remove content, as in steemit.com."

Is what you said to correct me.

'sup?

You are still missing it. Steemit.com having a method in place to remove content does not mean the content is removed from the steem blockchain. The entire point of liberosist's post is that the witnesses who run servers, which hold the blockchain, are still in possession of illegal material even if steemit.com has removed it (meaning, is not displaying it) from one website. The content has not been removed from steem. steemit does not equal steem

I have grasped my failure to understand that @liberosist's statement that Steemit complied with DMCA takedowns by removing content did not mean they removed it from the blockchain, which I assumed was what he meant by 'removed'.

Data can be removed from the blockchain, as I pointed out in my last reply to @liberosist, with a hardfork.

Thanks for clarifying for me =)

I wish I understood this better. I'm in Canada, but it still makes me pretty nervous. Only an issue if you host the blockchain? Posting isn't an issue?

Issue with upvoting btw.. trying but no luck.

No, posting is not an issue. You just give up privacy.

Gotcha. Yeah - I really try to be vigilant about anything I post. It's hard to know whatever you put up is there forever. There are things I would delete--not terrible things really at all, just some wince-worthy things I don't wish had near-eternity for posterity.

Most of what I post is just my music, which I'm happy to post. Then again, it's a sacrifice to know I can never take it down again. It's hard to plan for all of the potential effects of that years down the road.

As of now, everything you post is up there forever, publicly accessible to everyone, and you can do nothing about it. Steem does not offer you your right to be forgotten (formally, right to erasure - Art 17 GDPR), among others. So, yes, be vigilant.

Well this isn't very reassuring. Hope the witnesses get it together so they don't run into legality issues. I think when it comes to things on the blockchain though, it doesnt make sense to follow traditional ways of doing things. The blockchain is meant to be transparent, steem doesn't force you to use your real name or censor you in anyway, so I'm not quite sure how the issue should be handled.

  1. Privacy controls. Way back in mid-2016, confidentiality was actually top on the roadmap.
  2. Ways to remove illegal data; respond to appeals such as right-to-be-forgotten etc etc.

The above are challenging for a blockchain, but methods need to be invented to keep up with human rights laws.

Pretty shocking that no one addressed the elephant in the room.

That is hilarious. I didn't even think about that. LOL
Every website I use often is sending me these privacy changes. I am pretty sure that Ned doesn't care about the EU.

Ned must care about the EU - Steemit.com is available to all EU users.

PS: He does, Steemit.com complies with GDPR. (See the latest privacy policy)

Funny thing is I woke up today to the privacy changes login on steemit. They must have just made the changes over night.

Who cares :p

Of course, you're right. I wasted a lot of time, and the amusement wasn't worth it. Silly me!

One difference to FB is that Steem isn't storing stuff like the location you're posting from or the browser history. So it might "leak" more data about what you post, but it's also much easier to hide behind a synonym.

I wish people would be more aware of that steem is just the infrastructure for you to publish, but you yourself will be held accountable for anything you publish here.

Of course, from the witnesses point of view, there are serious issues and even violations of law if you run a node. That is a grave problem and should be a top priority of Steemit inc.

Europe sucks, I find myself not surprised that folks that don't have freedom of speech are not allowed to use this.

One should never expect privacy when posting information to a site likely created by an intelligence agency, on an internet definitely created by intelligence agencies. Would like to believe posts are censorproof but I’d bet there are some backdoors to control information. If you convince the livestock they’re free you don’t have to build as many fences

Thanks for sharing and viewing

[...] I started an investigation into the legality of Steem. Now, with GDPR active, all I'll say definitively is that Steem is pretty much completely illegal and hosting this blockchain (with illegal data contained in it) in Europe makes you a criminal.

Eh, how about sharing that research instead of sitting on it, dishing out ominous proclamations?

You're right, I should not be dishing out any proclamations. That was just my style of provocateur-humour. I'll try and break down GDPR step-by-step, but no promises, and certainly no schedule. That said, I have talked about certain aspects in comments over the last month or so, such as Art. 17.

You can check it out here - https://gdpr-info.eu/. I think it'll be obvious to you where Steem is violating GDPR.

For sure, I've had a cursory review of it in the course of my activities and it seems that way. I would just be very interested to read your own perspective in detail, and I'm sure many others would too. Thanks 😊

Such an interesting disharmony between privacy and transparency. Yes, everything we post is public, but is there hidden data that is collected and kept on the blockchain? FB wanted to know what schools we went to, our age, where we live, etc. Does Steem/Steemit collect any personal data that is stored, such as the phone number provided on signup? Or is it simply the information posted that is publicly available? In which case, yes: be careful what you post.

As for the witness issue, I hope blockchain developers can find a way so witnesses aren't forced to store illegal data. You shouldn't have to leave a country to support the blockchain. Thanks for reporting on this issue!

I think the Eu is trying to regulate on the old type of Internet that people are used to. They have no clue on what the possibilities and ramifications of what blockchain will bring. The possibility of being unforgotten is the whole point of an immutable ledger.
Just be careful what you post.

 6 years ago  Reveal Comment

I've never understood this type of behaviour. You took the time to read this authors post, took the time to comment on it and might want to spark a discussion, but you couldnt be decent enough to give even a 1% upvote. this is a problem, one that has been growing for a while. Even if you disagree with someones opinion doesn't mean you shouldn't give them a little credit and appreciate their effort.

true thing.

Besides having a big mouth and having no appreciation for those with differing opinions than yours, you could use a little work on your people skills. Maybe that's why your posts get no views, comments and worth less than a dollar, but what do I know, I'm just here for a sticker.
If you don't have anything constructive to say, you're not interesting in giving the OP an upvote and you spout off when people don't agree with you, then why don't you just fuck off and not bother commenting in the first place?