Privacy and data ownership selling points are somewhat inaccurate about diaspora-project-site HOT 18 CLOSED

Thanks for opening this. I agree that this paragraph can be improved. If you can suggest amendments/improvements, that would be a real help.

from diaspora-project-site.

Let's take a stab at it. I'm hoping someone with better english writing skills can improve upon it.

Privacy

In Diaspora* you don't need to trust every single employee of a commercial company with your data. You mainly need to trust the podmin of the server you are registering with, and the podmins of the users you are sharing with, either through aspects or private message. No other podmin in the Diaspora* network can have physical access to your data, it simply is not there. This also means that no Diaspora*-wide data mining is available to any single podmin by design. And if you host your own pod, it's one less person to have to trust!

from diaspora-project-site.

Thanks for your suggestion, @hypolite. That's more accurate, but looks to me as though it might be a bit too complicated and possibly confusing for non-technical people who don't already know how diaspora works. I'll take your suggestions on board, and think about it more.

from diaspora-project-site.

Yeah, that's what I feared. I still think that accuracy is better than accessibility, but I'm already versed in the technical aspects, which makes me a poor judge of accessibility. I just don't want to mislead people, and that they would suddenly realize their data is out there somewhere when they thought it would stay with them.

Thanks for the comment!

from diaspora-project-site.

I agree that it's important not to mislead, but for that page we need it to be simple and clear as well as accurate. I've seen so many confused #newhere posts down the years from people who have signed up but don't understand what a pod is or even know that Diaspora is decentralised (as I didn't when I signed up in 2010), or in many cases even understand that a social network can be decentralised. They simply followed an invite link from a friend or clicked a link to a particular pod in an article about Diaspora.

Another point is length - there's only so much space on that page for the design to work visually, and some translations (e.g. French) tend to be a lot longer than English. We need to keep it short and snappy.

I thought last night that it might be possible to add something about this to https://diasporafoundation.org/about#privacy (the section which the 'Find out more' button links to, where there is more space and more detail. On first look today I can't see how that might be done, but it might be possible.

I'll think about it more, and if you or anyone else have more suggestions, please do make them!

from diaspora-project-site.

I will, thanks!

from diaspora-project-site.

How about this for the first section under https://diasporafoundation.org/about#privacy ?

Own your own data

Many networks make money by analysing your interactions and using this to advertise things to you. diaspora* doesn’t use your data for any purpose other than allowing you to connect and share with others. Only the admins of pods you interact with can access your data, and you can choose which pods you interact with.

(New part in bold.)

from diaspora-project-site.

That's better, however how do you choose which pod you interact with?

from diaspora-project-site.

By choosing who to share with.

from diaspora-project-site.

Have made a PR with that change, #88.

from diaspora-project-site.

On Monday 19 September 2016 06:34 PM, goob wrote:

How about this for the first section under
https://diasporafoundation.org/about#privacy ?

      Own your own data

Many networks make money by analysing your interactions and using
this to advertise things to you. diaspora* doesn’t use your data for
any purpose other than allowing you to connect and share with
others. *Only the admins of pods you interact with can access your
data, and you can choose which pods you interact with.*

(New part in bold.)

I think we can mention end to encryption using XMPP for complete
privacy, even podmins can't get that info.

from diaspora-project-site.

But only the transport is encrypted - data on pods is not encrypted, so a podmin can access the data on their pod. See https://www.loomio.org/d/KQfdUlox/comment/37684

from diaspora-project-site.

On Monday 19 September 2016 10:31 PM, goob wrote:

But only the transport is encrypted - data on pods is not encrypted, so
a podmin can access the data on their pod. See
https://www.loomio.org/d/KQfdUlox/comment/37684

If they use an XMPP client that supports end to end encryption like
conversations or gajim with their diaspora accounts, they can use OMEMO
or PGP to encrypt data stored on the pod too. Yes, this is only
available in chat using a native app, but it is an important point to be
mentioned/highlighted I think.

If people don't want to trust even the podmins, they can use this option.

from diaspora-project-site.

OK, but the project website is not to teach people how to be secure online but to explain very simply how Diaspora works, and its benefits. What you describe may be a useful tip, but it's not part of the core code or the core Diaspora experience, so doesn't belong on the project site; and, in any case, anyone who needs to read the project site to understand how to use Diaspora is unlikely to be capable of using XMPP in this way.

There might be a different means to spread the word about it - perhaps we could start sharing tips like this within Diaspora itself?

from diaspora-project-site.

On 2016, സെപ്റ്റംബർ 19 10:54:04 PM IST, goob [email protected] wrote:

OK, but the project website is not to teach people how to be secure
online but to explain very simply how Diaspora works, and its benefits.
What you describe may be a useful tip, but it's not part of the core
code or the core Diaspora experience, so doesn't belong on the project
site; and, in any case, anyone who needs to read the project site to
understand how to use Diaspora is unlikely to be capable of using XMPP
in this way.

Chat is a recently added feature. But I don't agree it is not a core feature. XMPP real time chat is very much an important part of diaspora experience.

Well, the core idea behind diaspora is privacy and data ownership, so it is important we highlight this option.

There might be a different means to spread the word about it - perhaps
we could start sharing tips like this within Diaspora itself?

That we can do, but I consider it part of the core idea of diaspora itself.

from diaspora-project-site.

Chat is only available on certain pods, so is not discussed on the project website.

from diaspora-project-site.

Now fixed by #88, so I believe this issue can be closed.

from diaspora-project-site.

Thanks @goobertron !

from diaspora-project-site.