Notices by Adonay Felipe Nogueira (adfeno@ecodigital.social), page 64

"As before, due to burnout and other obligations this roadmap has no timelines."
- #MailPile developer
https://community.mailpile.is/t/tagged-1-0-0rc6-mini-roadmap-for-rc7-and-rc8/245

It's always sad to hear that people working on the commons are struggling with #burnout. I know what that's like. I've been running on low-energy, post-burnout mode since about 2014 or so. It sucks. It's exasperating to struggle through what ought to be sime tasks and not knowing when (if ever) I will get my mojo back.

#NoteToSelf: don't post exasperated. It makes you come across like much more of an asshat than you really are.

First up tomorrow morning is
Mark Miller's keynote! Then it's the unconference! So. Excited. But I'd better sleep (if I can reduce my excitement level enough to sleep, that is!)

I'm really enjoying contributing to #openstreetmap 😊
It would be so nice if contributing to everything was so simple !

One awesome thing about #APconf is that we effectively are a part of an art exhibit called DATAMAZE which explores the implications of data collection and privacy.

I find that extremely fitting. #ActivityPubConf

Lawful reasons for processing personal data

- compliance with the law (legal obligation)

- contract (with data subject)

- legitimate interest (vs the data subject's interest)

...

The case of the Fediverse

Roles: users are data subjects,
instance admins are processors, or are they controllers?

The processor would be an admin who just installs Mastodon or Pleroma and has no idea how it works.

The controller would write a fediverse instance that cllects all the data in order to do analytics and ad-tech.

The case of Github

- controller of the public data on your free account

- processor of your invoices

Google is responsible for the processing that it carries out of personal information which appears on web pages published by third parties.

Google is a controller, not a processor, according to the European Court of Justice in Google Spain and Google Inc. vs Mr. Gonzales

(Shows older statistics regarding data insecurity)

" Let's talk about the elephant in the room " (shows a mastodon 🤣 )

Node ID assignment...

Current NodeID derivation takes first 64 bits of IPv6 address... Problem is Mastodon.host and Cloudflare ...

Cloudflare acts as a MITM. Not good for a decentralized system!

Security considerations:

attacker should not be able to gain responsibility for certain hashtags

...

Toooooo fast.

https://git.orlives.de/schmittlauch/paper_hashtag_federation/src/branch/master/paper_hashtag_federation.pdf