{"post_view":{"post":{"id":6752527,"name":"Nightmare on Lemmy Street (A Fediverse GDPR Horror Story) - Michael Altfield's Tech Blog","url":"https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/","body":"Is the fediverse GDPR-compliant? A horror story of uploading sensitive PII to lemmy and the numerous bugs that blocked its removal.","creator_id":9040,"community_id":764,"removed":false,"locked":false,"published":"2024-03-06T00:13:44Z","deleted":false,"nsfw":false,"ap_id":"https://kbin.social/m/fediverse/t/878193","local":false,"language_id":0,"featured_community":false,"featured_local":false},"creator":{"id":9040,"name":"Kierunkowy74","display_name":"Kierunkowy74","avatar":"https://media.kbin.social/media/6a/c8/6ac87ba2082f91bd0e273b6aa4c1076d0dd07730b76bbc648a249cc0b6f673b6.png","banned":false,"published":"2023-05-08T12:00:35Z","actor_id":"https://kbin.social/u/Kierunkowy74","bio":"Today's social media transform us into merely numbers. \nNo problem for me.\n\nAlts: [@Kierunkowy74](https://kbin.earth/u/Kierunkowy74) (kbin.earth) [@Kierunkowy74](https://piefed.social/u/Kierunkowy74) (PieFed) \nPolish account: [@Kierunkowy74](https://karab.in/u/Kierunkowy74) \nMastodon: [@74](https://101010.pl/@74) or [@Kierunkowy74](https://kbin.social/search?q=Kierunkowy74@vivaldi.net) (alt)","local":false,"deleted":false,"bot_account":false,"instance_id":3},"community":{"id":764,"name":"fediverse","title":"Fediverse","description":"This magazine is dedicated to discussions on the federated social networking ecosystem, which includes decentralized and open-source social media platforms. Whether you are a user, developer, or simply interested in the concept of decentralized social media, this is the place for you. Here you can share your knowledge, ask questions, and engage in discussions on topics such as the benefits and challenges of decentralized social media, new and existing federated platforms, and more. From the latest developments and trends to ethical considerations and the future of federated social media, this category covers a wide range of topics related to the Fediverse.","removed":false,"published":"2023-04-17T14:30:47Z","updated":"2024-05-19T01:45:35Z","deleted":false,"nsfw":false,"actor_id":"https://kbin.social/m/fediverse","local":false,"icon":"https://media.kbin.social/media/7b/56/7b56e489f96f7c0deba67d7ef39731267c3c3c1f8c5d87ad37480fa9b74892d6.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":3},"creator_banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":6752527,"comments":0,"score":4,"upvotes":4,"downvotes":0,"published":"2024-03-06T00:13:44Z","newest_comment_time":"2024-03-06T00:13:44Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"creator_blocked":false,"unread_comments":0},"community_view":{"community":{"id":764,"name":"fediverse","title":"Fediverse","description":"This magazine is dedicated to discussions on the federated social networking ecosystem, which includes decentralized and open-source social media platforms. Whether you are a user, developer, or simply interested in the concept of decentralized social media, this is the place for you. Here you can share your knowledge, ask questions, and engage in discussions on topics such as the benefits and challenges of decentralized social media, new and existing federated platforms, and more. From the latest developments and trends to ethical considerations and the future of federated social media, this category covers a wide range of topics related to the Fediverse.","removed":false,"published":"2023-04-17T14:30:47Z","updated":"2024-05-19T01:45:35Z","deleted":false,"nsfw":false,"actor_id":"https://kbin.social/m/fediverse","local":false,"icon":"https://media.kbin.social/media/7b/56/7b56e489f96f7c0deba67d7ef39731267c3c3c1f8c5d87ad37480fa9b74892d6.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":3},"subscribed":"NotSubscribed","blocked":false,"counts":{"community_id":764,"subscribers":17,"posts":495,"comments":1561,"published":"2023-04-17T14:30:47Z","users_active_day":1,"users_active_week":14,"users_active_month":52,"users_active_half_year":316}},"moderators":[],"cross_posts":[{"post":{"id":6672142,"name":"Nightmare on Lemmy Street (A Fediverse GDPR Horror Story) - Michael Altfield's Tech Blog","url":"https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/","creator_id":1639579,"community_id":13,"removed":false,"locked":false,"published":"2024-03-04T21:22:33.214664Z","deleted":false,"nsfw":false,"ap_id":"https://midwest.social/post/9446936","local":false,"language_id":37,"featured_community":false,"featured_local":false},"creator":{"id":1639579,"name":"Lanky_Pomegranate530","display_name":"Lanky_Pomegranate530","avatar":"https://midwest.social/pictrs/image/406083d1-3040-4351-8329-c9533b7b6d3c.png","banned":false,"published":"2023-08-23T14:36:47.099050Z","actor_id":"https://midwest.social/u/Lanky_Pomegranate530","bio":"Atheist , Leftist, Gamer ,Programmer ,Reddit Mod, Discord Admin, Master of the Web.\n\n[Linktree](https://linktr.ee/lanky_pomegranate530)\n\nNote: Any DM's regarding ban appeals will be ignored. Please ask the other mods of what ever community you were banned from instead.","local":false,"banner":"https://midwest.social/pictrs/image/09259886-4f84-4116-b2cd-5433ef706989.jpeg","deleted":false,"bot_account":false,"instance_id":11},"community":{"id":13,"name":"fediverse","title":"Fediverse","description":"A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).\n\nIf you wanted to get help with moderating your own community then head over to [!moderators@lemmy.world](https://lemmy.world/c/moderators)!\n\nIf you want help with making a lemmy bot, then head over to [!lemmybotsupport@lemmy.world](https://lemmy.world/c/lemmybotsupport)!\n\n## Rules\n- Posts must be on topic.\n- Be respectful of others.\n- Cite the sources used for graphs and other statistics.\n- Follow the general [Lemmy.world rules](https://lemmy.world/legal).\n\n**Learn more** at these websites: [Join The Fediverse Wiki](https://joinfediverse.wiki/), [Fediverse.info](https://fediverse.info/), [Wikipedia Page](https://en.wikipedia.org/wiki/Fediverse), [The Federation Info (Stats)](https://the-federation.info), [FediDB (Stats)](https://fedidb.org/), [Sub Rehab (Reddit Migration)](https://sub.rehab/), [Search Lemmy](https://www.search-lemmy.com/)","removed":false,"published":"2023-06-01T08:28:03.550608Z","updated":"2023-08-27T14:57:52.354465Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/fediverse","local":false,"icon":"https://lemmy.world/pictrs/image/eb9cfeb5-4eb5-4b1b-a75c-8d9e04c3f856.png","banner":"https://lemmy.world/pictrs/image/9094f077-e4da-4125-9bcb-b2b42b264748.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":24},"creator_banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":6672142,"comments":60,"score":96,"upvotes":106,"downvotes":10,"published":"2024-03-04T21:22:33.214664Z","newest_comment_time":"2024-03-08T16:40:49.414208Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"creator_blocked":false,"unread_comments":60},{"post":{"id":6662914,"name":"PSA: you can't delete photos uploaded to Lemmy. So don't (accidentally) upload a nude. That would be bad 😱","url":"https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/","body":"This article will describe how lemmy instance admins can [purge images from pict-rs](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/).\n\n| [![Nightmare on Lemmy St - A GDPR Horror Story](https://tech.michaelaltfield.net/wp-content/uploads/sites/5/lemmy-fediverse-gdpr_featuredImage2.jpg)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n|:--:| \n| [Nightmare on Lemmy Street (A Fediverse GDPR Horror Story)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n\nThis is (also) a horror story about accidentally [uploading very sensitive data](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) to Lemmy, and the (surprisingly) difficult task of deleting it.","creator_id":302753,"community_id":9051,"removed":false,"locked":false,"published":"2024-03-04T18:56:24.187052Z","deleted":false,"nsfw":false,"ap_id":"https://monero.town/post/2346940","local":false,"language_id":0,"featured_community":false,"featured_local":false},"creator":{"id":302753,"name":"maltfield","avatar":"https://monero.town/pictrs/image/2bd03053-9ce0-409b-a90e-e40dda377d55.webp","banned":false,"published":"2023-06-12T23:03:55.527209Z","actor_id":"https://monero.town/u/maltfield","bio":"I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n\nhttps://michaelaltfield.net","local":false,"deleted":false,"bot_account":false,"instance_id":45},"community":{"id":9051,"name":"privatelife","title":"privatelife - privacy, security, freedom advocacy","description":"This community is meant to advocate privacy, security and freedom in an concise manner, free of prejudice bias, free of politics, free of cultist thoughts.\n\nArguing that you don't care about the right to privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say. - Edward Snowden\n\nReddit: https://old.reddit.com/r/privatelife\n\nMatrix: https://matrix.to/#/#privatelife:matrix.org\n\nTelegram: https://t.me/r_privatelife\n\nREAD THE RULES\n\n1) Opinions are welcome, facts more so. Attack arguments, not people. Hating, baiting, trolling, flaming will be dealt with strictly.\n\n2) Discuss closed source software with caution. Advocating for it strongly (cult brigading) can be treated as violation of this rule.\n\n3) Editing titles of article links is strictly prohibited, unless and until the summarisation remains accurate to the context of the article or paper. Such link post will be removed without questioning.\n\n4) Targeting of any country, person or nation is strictly prohibited without valid reasoning. Evidence if not presented against the specific company/corporation/individual will be treated as personal attack and/or hate speech. This will result in a warning, then ban system.\n\n5) NO PERMA BANS! Ban system will work as follows:\n\n1 day --> 3 day --> 1 week --> 2 weeks --> 3 weeks --> 1 month --> 3 months --> 6 months\n\nSeverity of the ban system will be dealt with based on degree of violation and circumstances.\n\n6) NO FACT-LESS EVIDENCES, NO FALSE RHETORIC\nEvidence has to be credible. The onus of this lies on the claimant. The same applies on the user who questions proven evidence. Violation of this rule will be dealt with strictly.\n\n7) Copycat posts serve to litter the community, increasing quantity and decreasing quality of posts. As such, posts will be removed. Repeated attempts will receive warning.\n\n----------\n\nRelated communities:\n\n- - [Lemmy.ml Privacy](https://lemmy.ml/c/privacy)\n- - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)","removed":false,"published":"2020-06-07T12:53:31.781099Z","updated":"2023-07-21T19:07:35.959128Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/privatelife","local":false,"hidden":false,"posting_restricted_to_mods":false,"instance_id":16},"creator_banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":6662914,"comments":1,"score":-2,"upvotes":2,"downvotes":4,"published":"2024-03-04T18:56:24.187052Z","newest_comment_time":"2024-05-01T19:32:54.084354Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"creator_blocked":false,"unread_comments":1},{"post":{"id":6662634,"name":"PSA: you can't delete photos uploaded to Lemmy. So don't (accidentally) upload a nude. That would be bad 😱","url":"https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/","body":"This article will describe how lemmy instance admins can [purge images from pict-rs](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/).\n\n| [![Nightmare on Lemmy St - A GDPR Horror Story](https://tech.michaelaltfield.net/wp-content/uploads/sites/5/lemmy-fediverse-gdpr_featuredImage2.jpg)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n|:--:| \n| [Nightmare on Lemmy Street (A Fediverse GDPR Horror Story)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n\nThis is (also) a horror story about accidentally [uploading very sensitive data](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) to Lemmy, and the (surprisingly) difficult task of deleting it.","creator_id":302753,"community_id":252,"removed":false,"locked":false,"published":"2024-03-04T18:39:40.517449Z","deleted":false,"nsfw":false,"ap_id":"https://monero.town/post/2346813","local":false,"language_id":0,"featured_community":false,"featured_local":false},"creator":{"id":302753,"name":"maltfield","avatar":"https://monero.town/pictrs/image/2bd03053-9ce0-409b-a90e-e40dda377d55.webp","banned":false,"published":"2023-06-12T23:03:55.527209Z","actor_id":"https://monero.town/u/maltfield","bio":"I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n\nhttps://michaelaltfield.net","local":false,"deleted":false,"bot_account":false,"instance_id":45},"community":{"id":252,"name":"privacy","title":"Privacy","description":"# A place to discuss privacy and freedom in the digital world.\n\nPrivacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy. \n\nIn this community everyone is welcome to post links and discuss topics related to privacy.\n\n### Some Rules\n\n \n - Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post\n - Don't promote proprietary software\n - Try to keep things on topic\n - If you have a question, please try searching for previous discussions, maybe it has already been answered\n - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n - Be nice :)\n\n### Related communities\n\n- [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n- [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n- [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n- [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n\n### Chat rooms\n\n- [Matrix/Element]Dead\n\n- [Discord](https://discord.gg/8xfrVjvngh)\n\nmuch thanks to @gary_host_laptop for the logo design :)","removed":false,"published":"2019-11-15T23:50:53.712299Z","updated":"2023-07-21T19:06:26.177465Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/privacy","local":false,"icon":"https://lemmy.ml/pictrs/image/h1ChnLuBHr.png","banner":"https://lemmy.ml/pictrs/image/DBjcqOW9ds.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":16},"creator_banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":6662634,"comments":7,"score":49,"upvotes":51,"downvotes":2,"published":"2024-03-04T18:39:40.517449Z","newest_comment_time":"2024-03-05T16:44:56.276677Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"creator_blocked":false,"unread_comments":7},{"post":{"id":6666984,"name":"PSA: You can't delete photos uploaded to Lemmy. So don't (accidentally) upload a nude","url":"https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/","creator_id":545853,"community_id":15,"removed":false,"locked":false,"published":"2024-03-04T18:20:08.263783Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.world/post/12727137","local":false,"language_id":37,"featured_community":false,"featured_local":false},"creator":{"id":545853,"name":"ooli","banned":false,"published":"2023-07-19T23:48:59.837421Z","actor_id":"https://lemmy.world/u/ooli","local":false,"deleted":false,"bot_account":false,"instance_id":24},"community":{"id":15,"name":"technology","title":"Technology","description":"This is a [most excellent](https://media.giphy.com/media/v1.Y2lkPTc5MGI3NjExN3N0NmhuODNib3d3Nzg0OHU2bTFqMXAzNW42Y2JsOTVmenNsNG8ycSZlcD12MV9pbnRlcm5hbF9naWZfYnlfaWQmY3Q9Zw/l46CDHTqbmnGZyxKo/giphy.gif) place for technology news and articles.\n \n---\n \n## Our Rules\n \n---\n \n1. Follow the [lemmy.world rules.](https://mastodon.world/about) \n2. Only tech related content.\n3. Be [excellent to each another!](https://www.youtube.com/watch?v=rph_1DODXDU)\n4. Mod approved content bots can post up to 10 articles per day.\n5. Threads asking for personal tech support may be deleted.\n6. Politics threads may be removed.\n7. No memes allowed as posts, OK to post as comments.\n8. Only approved bots from the list below, to ask if your bot can be added please contact us.\n9. Check for duplicates before posting, duplicates may be removed\n \n---\n \n## Approved Bots\n \n---\n \n- [@L4s@lemmy.world](https://lemmy.world/u/L4s) \n- [@autotldr@lemmings.world](https://lemmings.world/u/autotldr) \n- [@PipedLinkBot@feddit.rocks](https://feddit.rocks/u/PipedLinkBot) \n- [@wikibot@lemmy.world](https://lemmy.world/u/wikibot) ","removed":false,"published":"2023-06-11T02:16:17.173483Z","updated":"2023-12-22T12:58:41.476133Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/technology","local":false,"icon":"https://fry.gs/pictrs/image/c6832070-8625-4688-b9e5-5d519541e092.png","banner":"https://fry.gs/pictrs/image/1a1e9226-87cb-4499-94a7-d43b1e520e50.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":24},"creator_banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":6666984,"comments":268,"score":742,"upvotes":757,"downvotes":15,"published":"2024-03-04T18:20:08.263783Z","newest_comment_time":"2024-03-08T22:35:40.831069Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"creator_blocked":false,"unread_comments":268},{"post":{"id":6661376,"name":"Guide: How to purge an image on Lemmy (GDPR Data Erasure)","url":"https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/","body":"Unfortunately, at the time of writing:\n\n1. Users cannot delete their images on Lemmy\n1. If a user deletes their account, their images don't get deleted\n1. There is no WUI for admins to delete images on Lemmy\n1. It is very difficult for admins to find & delete images on Lemmy (via the CLI)\n1. The Lemmy team didn't bother documenting how admins can delete images on Lemmy\n\nBecause of this, I'm posting here a guide for instance admins to be able to quickly figure out how to delete an image in response to a GDPR Data Erasure request.\n\n# How to purge images in Lemmy\n\n[pict-rs](https://git.asonix.dog/asonix/pict-rs/) is a third-party\nsimple image hosting service that runs along-side Lemmy for instances\nthat allow users to upload media.\n\nAt the time of writing, [there is no WUI for admins to find and delete\nimages](https://github.com/LemmyNet/lemmy-ui/issues/2360). You have to\nmanually query the pict-rs database and execute an API call from the\ncommand-line. Worse: Lemmy has [no\ndocumentation](https://github.com/LemmyNet/lemmy-docs/issues/293)\ntelling instance admins how to delete images 🤦\n\nFor the purposes of this example, let\\'s assume you\\'re trying to delete\nthe following image\n\n```\nhttps://monero.town/pictrs/image/001665df-3b25-415f-8a59-3d836bb68dd1.webp\n```\n\nThere are two [API endpoints in\npict-rs](https://git.asonix.dog/asonix/pict-rs/) that can be used to\ndelete an image\n\n## Method One: /image/delete/{delete_token}/{alias}\n\nThis API call is publicly-accessible, but it first requires you to\nobtain the image\\'s \\``delete_token`\\`\n\nThe \\``delete_token`\\` is first returned by Lemmy when POSTing to the\n\\``/pictrs/image`\\` endpoint\n\n```\n{\n \"msg\":\"ok\",\n \"files\":[\n {\n \"file\":\"001665df-3b25-415f-8a59-3d836bb68dd1.webp\",\n \"delete_token\":\"d88b7f32-a56f-4679-bd93-4f334764d381\"\n }\n ]\n}\n```\n\nTwo pieces of information are returned here:\n\n1. **file** (aka the \\\"alias\\\") is the *server* filename of the\n uploaded image\n2. **delete_token** is the token needed to delete the image\n\nOf course, if you didn\\'t capture this image\\'s \\``delete_token`\\` at\nupload-time, then you must fetch it from the postgres DB.\n\nFirst, open a shell on your running postgres container. If you installed\nLemmy with docker compose, use \\``docker compose ps`\\` to get the\n\\\"SERVICE\\\" name of your postgres host, and then enter it with\n\\``docker exec`\\`\n\n```\ndocker compose ps --format \"table {{.Service}}\\t{{.Image}}\\t{{.Name}}\"\ndocker compose exec /bin/bash\n```\n\nFor example:\n\n```\nuser@host:/home/user/lemmy# docker compose ps --format \"table {{.Service}}\\t{{.Image}}\\t{{.Name}}\"\nSERVICE IMAGE NAME\nlemmy dessalines/lemmy:0.19.3 lemmy-lemmy-1\nlemmy-ui dessalines/lemmy-ui:0.19.3 lemmy-lemmy-ui-1\npictrs docker.io/asonix/pictrs:0.5.4 lemmy-pictrs-1\npostfix docker.io/mwader/postfix-relay lemmy-postfix-1\npostgres docker.io/postgres:15-alpine lemmy-postgres-1\nproxy docker.io/library/nginx lemmy-proxy-1\nuser@host:/home/user/lemmy# \n\nuser@host:/home/user/lemmy# docker compose exec postgres /bin/bash\npostgres:/# \n```\n\nConnect to the database as the \\``lemmy`\\` user\n\n```\npsql -U lemmy\n```\n\nFor example\n\n```\npostgres:/# psql -U lemmy\npsql (15.5)\nType \"help\" for help.\n\nlemmy=# \n```\n\nQuery for the image by the \\\"alias\\\" (the filename)\n\n```\nselect * from image_upload where pictrs_alias = '';\n```\n\nFor example\n\n```\nlemmy=# select * from image_upload where pictrs_alias = '001665df-3b25-415f-8a59-3d836bb68dd1.webp';\n local_user_id | pictrs_alias | pictrs_delete_token | published \n---------------+--------------+---------------------+-----------\n1149 | 001665df-3b25-415f-8a59-3d836bb68dd1.webp | d88b7f32-a56f-4679-bd93-4f334764d381 | 2024-02-07 11:10:17.158741+00\n(1 row)\n\nlemmy=# \n```\n\nNow, take the \\``pictrs_delete_token`\\` from the above output, and use\nit to delete the image.\n\nThe following command should be able to be run on any computer connected\nto the internet.\n\n```\ncurl -i \"https:///pictrs/image/delete//\"\n```\n\nFor example:\n\n```\nuser@disp9140:~$ curl -i \"https://monero.town/pictrs/image/delete/d88b7f32-a56f-4679-bd93-4f334764d381/001665df-3b25-415f-8a59-3d836bb68dd1.webp\"\n\nHTTP/2 204 No Content\nserver: nginx\ndate: Fri, 09 Feb 2024 15:37:48 GMT\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\ncache-control: private\nreferrer-policy: same-origin\nx-content-type-options: nosniff\nx-frame-options: DENY\nx-xss-protection: 1; mode=block\nX-Firefox-Spdy: h2\nuser@disp9140:~$ \n```\n\n> ⓘ Note: If you get an \\``incorrect_login`\\` error, then try \\[a\\]\nlogging into the instance in your web browser and then \\[b\\] pasting the\n\\\"`https:///pictrs/image/delete//`\\\"\nURL into your web browser.\n\nThe image should be deleted.\n\n## Method Two: /internal/purge?alias={alias}\n\nAlternatively, you could execute the deletion directly inside the pictrs\ncontainer. This eliminates the need to fetch the \\``delete_token`\\`.\n\nFirst, open a shell on your running \\``pictrs`\\` container. If you\ninstalled Lemmy with docker compose, use \\``docker compose ps`\\` to get\nthe \\\"SERVICE\\\" name of your postgres host, and then enter it with\n\\``docker exec`\\`\n\n```\ndocker compose ps --format \"table {{.Service}}\\t{{.Image}}\\t{{.Name}}\"\ndocker compose exec /bin/sh\n```\n\nFor example:\n\n```\nuser@host:/home/user/lemmy# docker compose ps --format \"table {{.Service}}\\t{{.Image}}\\t{{.Name}}\"\nSERVICE IMAGE NAME\nlemmy dessalines/lemmy:0.19.3 lemmy-lemmy-1\nlemmy-ui dessalines/lemmy-ui:0.19.3 lemmy-lemmy-ui-1\npictrs docker.io/asonix/pictrs:0.5.4 lemmy-pictrs-1\npostfix docker.io/mwader/postfix-relay lemmy-postfix-1\npostgres docker.io/postgres:15-alpine lemmy-postgres-1\nproxy docker.io/library/nginx lemmy-proxy-1\nuser@host:/home/user/lemmy# \n\nuser@host:/home/user/lemmy# docker compose exec pictrs /bin/sh\n~ $ \n```\n\nExecute the following command inside the \\``pictrs`\\` container.\n\n```\nwget --server-response --post-data \"\" --header \"X-Api-Token: ${PICTRS__SERVER__API_KEY}\" \"http://127.0.0.1:8080/internal/purge?alias=\"\n```\n\nFor example:\n\n```\n~ $ wget --server-response --post-data \"\" --header \"X-Api-Token: ${PICTRS__SERVER__API_KEY}\" \"http://127.0.0.1:8080/internal/purge?alias=001665df-3b25-415f-8a59-3d836bb68dd1.webp\"\nConnecting to 127.0.0.1:8080 (127.0.0.1:8080)\nHTTP/1.1 200 OK\ncontent-length: 67\nconnection: close\ncontent-type: application/json\ndate: Wed, 14 Feb 2024 12:56:24 GMT\n\nsaving to 'purge?alias=001665df-3b25-415f-8a59-3d836bb68dd1.webp'\npurge?alias=001665df 100% |*****************************************************************************************************************************************************************************************************************************| 67 0:00:00 ETA\n'purge?alias=001665df-3b25-415f-8a59-3d836bb68dd1.webp' saved\n\n~ $ \n```\n\n> ⓘ Note: There\\'s an error in the pict-rs reference documentation. It\nsays you can POST to \\`/internal/delete\\`, but that just returns\n`404 Not Found`.\n\nThe image should be deleted\n\n# Further Reading\n\nUnfortunately, it seems that the Lemmy develoeprs are not taking these moral and legal (GDPR) risks seriously (they\n[said](https://github.com/LemmyNet/lemmy/issues/4433#issuecomment-1939172930) **it may take years before they address them**), and **they threatened to ban me** for trying to highlight the severity of this risk, get them to tag GDPR-related bugs, and to prioritize them.\n\n- [lemmy #4433: Deleted Account should delete uploaded media\n (pictures) too](https://github.com/LemmyNet/lemmy/issues/4433)\n- [lemmy #4441: Users unable to delete their images (pictrs\n API)](https://github.com/LemmyNet/lemmy/issues/4441)\n- [lemmy #4434: Unapproved users cannot delete their\n accounts/data](https://github.com/LemmyNet/lemmy/issues/4434)\n- [lemmy #3973: Banned users cannot delete their\n accounts/data](https://github.com/LemmyNet/lemmy/issues/3973)\n- [lemmy #4445: Create an interface for local users to view and remove\n images](https://github.com/LemmyNet/lemmy/issues/4445)\n- [lemmy-ui #2359: Allow users to delete images they\n uploaded](https://github.com/LemmyNet/lemmy-ui/issues/2359)\n- [lemmy-ui #2360: Allow admins to view & delete uploaded\n images](https://github.com/LemmyNet/lemmy-ui/issues/2360)\n- [lemmy-ui #2361: private_message_disclaimer to include user\\'s\n matrix handle](https://github.com/LemmyNet/lemmy-ui/issues/2361)\n- [jerboa #1361: UI for deleting uploaded\n files](https://github.com/dessalines/jerboa/issues/1361)\n- [jerboa #1362: Setting to hide \\\"upload media\\\"\n button](https://github.com/dessalines/jerboa/issues/1362)\n- [jerboa #1363: Add \\\"confirm upload\\\" step to\n UX](https://github.com/dessalines/jerboa/issues/1363)\n- [lemmy-docs #293: Document image\n moderation](https://github.com/LemmyNet/lemmy-docs/issues/293)\n\nIf GDPR-compliance is important to you on the fediverse, then please\nprovide feedback to the Lemmy developers in the GitHub links above.\n\n# Attribution\n\nThis post was copied from the following article: [Nightmare on Lemmy Street (A Fediverse GDPR Horror Story)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/)\n\n| [![Nightmare on Lemmy St - A GDPR Horror Story](https://tech.michaelaltfield.net/wp-content/uploads/sites/5/lemmy-fediverse-gdpr_featuredImage2.jpg)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n|:--:| \n| [Nightmare on Lemmy Street (A Fediverse GDPR Horror Story)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n\n * https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/","creator_id":302753,"community_id":38,"removed":false,"locked":false,"published":"2024-03-04T17:49:51.533962Z","updated":"2024-03-04T17:53:37.642356Z","deleted":false,"nsfw":false,"ap_id":"https://monero.town/post/2346145","local":false,"language_id":0,"featured_community":false,"featured_local":false},"creator":{"id":302753,"name":"maltfield","avatar":"https://monero.town/pictrs/image/2bd03053-9ce0-409b-a90e-e40dda377d55.webp","banned":false,"published":"2023-06-12T23:03:55.527209Z","actor_id":"https://monero.town/u/maltfield","bio":"I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n\nhttps://michaelaltfield.net","local":false,"deleted":false,"bot_account":false,"instance_id":45},"community":{"id":38,"name":"lemmy_support","title":"Lemmy Support","description":"Support / questions about Lemmy.\n\n[Matrix Space: #lemmy-space](https://matrix.to/#/#lemmy-space:matrix.org)","removed":false,"published":"2019-04-25T16:53:06.109704Z","updated":"2023-06-14T21:24:21.959740Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/lemmy_support","local":false,"hidden":false,"posting_restricted_to_mods":false,"instance_id":16},"creator_banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":6661376,"comments":0,"score":1,"upvotes":3,"downvotes":2,"published":"2024-03-04T17:49:51.533962Z","newest_comment_time":"2024-03-04T17:49:51.533962Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"creator_blocked":false,"unread_comments":0},{"post":{"id":6660786,"name":"PSA: you can't delete photos uploaded to Lemmy. So don't (accidentally) upload a nude. That would be bad 😱","url":"https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/","body":"This article will describe how lemmy instance admins can [purge images from pict-rs](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/).\n\n| [![Nightmare on Lemmy St - A GDPR Horror Story](https://tech.michaelaltfield.net/wp-content/uploads/sites/5/lemmy-fediverse-gdpr_featuredImage2.jpg)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n|:--:| \n| [Nightmare on Lemmy Street (A Fediverse GDPR Horror Story)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n\nThis is (also) a horror story about accidentally [uploading very sensitive data](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) to Lemmy, and the (surprisingly) difficult task of deleting it.","creator_id":302753,"community_id":1510,"removed":false,"locked":false,"published":"2024-03-04T17:18:02.404822Z","deleted":false,"nsfw":false,"ap_id":"https://monero.town/post/2345741","local":false,"language_id":37,"featured_community":false,"featured_local":false},"creator":{"id":302753,"name":"maltfield","avatar":"https://monero.town/pictrs/image/2bd03053-9ce0-409b-a90e-e40dda377d55.webp","banned":false,"published":"2023-06-12T23:03:55.527209Z","actor_id":"https://monero.town/u/maltfield","bio":"I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n\nhttps://michaelaltfield.net","local":false,"deleted":false,"bot_account":false,"instance_id":45},"community":{"id":1510,"name":"lemmy","title":"Lemmy","description":"Everything about Lemmy; bugs, gripes, praises, and advocacy.\n\nFor discussion about the lemmy.ml instance, go to [!meta@lemmy.ml](https://lemmy.ml/c/meta).","removed":false,"published":"2020-03-16T13:55:00.695055Z","updated":"2024-02-28T11:59:30.870949Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/lemmy","local":false,"icon":"https://lemmy.ml/pictrs/image/1f910de9-62b5-43a9-8c93-94821c945577.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":16},"creator_banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":6660786,"comments":8,"score":16,"upvotes":20,"downvotes":4,"published":"2024-03-04T17:18:02.404822Z","newest_comment_time":"2024-03-05T06:15:30.143595Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"creator_blocked":false,"unread_comments":8},{"post":{"id":6660185,"name":"PSA: you can't delete photos uploaded to #lemmy. So don't (accidentally) upload a nude to lemmy. That would be bad 😱","url":"https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/","body":"This article will describe how lemmy instance admins can [purge images from pict-rs](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/).\n\n| [![Nightmare on Lemmy St - A GDPR Horror Story](https://tech.michaelaltfield.net/wp-content/uploads/sites/5/lemmy-fediverse-gdpr_featuredImage2.jpg)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n|:--:| \n| [Nightmare on Lemmy Street (A Fediverse GDPR Horror Story)](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) |\n\nThis is (also) a horror story about accidentally [uploading very sensitive data](https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/) to Lemmy, and the (surprisingly) difficult task of deleting it.","creator_id":302753,"community_id":23,"removed":false,"locked":false,"published":"2024-03-04T17:01:26.500576Z","deleted":false,"nsfw":false,"ap_id":"https://monero.town/post/2345467","local":false,"language_id":0,"featured_community":false,"featured_local":false},"creator":{"id":302753,"name":"maltfield","avatar":"https://monero.town/pictrs/image/2bd03053-9ce0-409b-a90e-e40dda377d55.webp","banned":false,"published":"2023-06-12T23:03:55.527209Z","actor_id":"https://monero.town/u/maltfield","bio":"I make and sell [BusKill laptop kill cords](https://buskill.in). Monero is accepted.\n\nhttps://michaelaltfield.net","local":false,"deleted":false,"bot_account":false,"instance_id":45},"community":{"id":23,"name":"fediverse","title":"Fediverse","description":"A community dedicated to fediverse news and discussion.\n\nFediverse is a portmanteau of \"federation\" and \"universe\".\n\nGetting started on Fediverse;\n- What is the fediverse?\n - [Short ver.](https://torresjrjr.com/archive/2020-07-20-what-is-the-fediverse)\n - [Full ver.](https://torresjrjr.com/archive/2020-07-19-guide-to-the-fediverse)\n- [Fediverse Platforms](https://fediverse.party)\n- [How to run your own community](https://runyourown.social/)","removed":false,"published":"2019-12-05T23:13:11.382222Z","updated":"2023-06-11T13:41:10.248326Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/fediverse","local":false,"icon":"https://lemmy.ml/pictrs/image/st9xYggWap.png","banner":"https://lemmy.ml/pictrs/image/SieXy8i457.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":16},"creator_banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":6660185,"comments":11,"score":30,"upvotes":38,"downvotes":8,"published":"2024-03-04T17:01:26.500576Z","newest_comment_time":"2024-03-07T09:06:30.038797Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"creator_blocked":false,"unread_comments":11}]}