this post was submitted on 04 Mar 2024
16 points (83.3% liked)

Lemmy

12546 readers
20 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to [email protected].

founded 4 years ago
MODERATORS
 

This article will describe how lemmy instance admins can purge images from pict-rs.

Nightmare on Lemmy St - A GDPR Horror Story
Nightmare on Lemmy Street (A Fediverse GDPR Horror Story)

This is (also) a horror story about accidentally uploading very sensitive data to Lemmy, and the (surprisingly) difficult task of deleting it.

top 8 comments
sorted by: hot top controversial new old
[โ€“] [email protected] 7 points 8 months ago (1 children)

That's pretty unfortunate for the blog author, can imagine making that kind of mistake early in the morning will really wake you up.

The blog doesn't mention specifically whether the author had uploaded using a Lemmy app or the webui AFAICT - if he used an app, there are some that actually store the auth/delete token returned by image uploads, and provide a section within the app where you can manage/delete (purge) images you've previously uploaded to Lemmy

[โ€“] [email protected] 9 points 8 months ago* (last edited 8 months ago) (1 children)

Hi, unfortunate author here ๐Ÿ˜…

The issue happened in Jerboa. I opened a few tickets in the Jerboa app's GitHub to address this:

Can you please tell us which Lemmy client apps you use that store the delete token and have a UI to delete uploaded images?

[โ€“] [email protected] 4 points 8 months ago (1 children)

Boost does, under settings, general, uploaded images. Here is mine:
boost uploaded images list

I can delete them there (or forfeit the ability to do so)

[โ€“] [email protected] 2 points 8 months ago (1 children)

Very nice. Unfortunately it doesn't look like Boost is available on F-Droid.

[โ€“] [email protected] 3 points 8 months ago

Yeah. It uses google ad-mob, or if you purchase it needs the google play store app to verify that and deactivate ad-mob.
A way to purchase it without going through gplay would fix this, and probably means it could be published on fdroid in a premium-only version at least. I've been meaning to ask @[email protected] about the feasibility of that for a while now. It's bothered me for years now, but I simply couldn't find an alternative so far (neither back on reddit in the days).

[โ€“] [email protected] 3 points 8 months ago

Yea i saw the issue on git seems like the devs were rude and assigned you to prove a point. Are you workin on it ? Do yoy even know how or were the devs being dicks on purpose ?

[โ€“] [email protected] 2 points 8 months ago (1 children)

In the future, please use cross post instead and not click bait titles into different communities.

On a more related note, do you have knowledge if the image was federated outwards? Iโ€™m fairly sure Iโ€™ve subscribed to that community, so there may be an off chance I have received a copy of the image as part of federation. Is there any way to scour other instances to find images that is federated out and needs to be removed?

[โ€“] [email protected] 4 points 8 months ago

Fortunately, in my case, my image was "orphaned" and never actually attached to a post or comment, so it wouldn't have federated.

If the image has already federated then that's a whole next level problem :(