@MichaelAltfield@mastodon.social cover
@MichaelAltfield@mastodon.social avatar

MichaelAltfield

@MichaelAltfield@mastodon.social

🐧 #Linux Hacker. 🔑 #Security Guru. I write articles about #opsec, #privacy, and #devops. 💙 #OpenSource 💾

This profile is from a federated server and may be incomplete. View on remote instance

hello , to Random stuff
@hello@social.wedistribute.org avatar

, one of the biggest federated Reddit alternatives, is up against a surprising problem: users and admins can't delete images.

Here's why that matters.

https://wedistribute.org/2024/03/lemmy-image-problem/

MichaelAltfield ,
@MichaelAltfield@mastodon.social avatar

@marlinspike @hello

I recently learned that Boost does this. You have to record the delete_token at the time the image was uploaded, as described here:

https://github.com/LemmyNet/lemmy/issues/4441#issue-2126251086

Note you have to use GET, not DELETE for the actual pictrs/image/delete/X API call

MichaelAltfield ,
@MichaelAltfield@mastodon.social avatar

@marlinspike @hello

The delete token doesn't change. So you have to store the delete_token at upload-time and keep them locally for every image that's been uploaded.

MichaelAltfield ,
@MichaelAltfield@mastodon.social avatar

@marlinspike @hello I'm just assuming. If I were you, I'd shoot a message to the Boost app's dev and ask how they do it.

MichaelAltfield , to News from fediverse
@MichaelAltfield@mastodon.social avatar

PSA: you can't delete photos uploaded to . So don't (accidentally) upload a nude to lemmy. That would be bad 😱

https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/

Oh, and if you delete your account? It doesn't delete your uploaded photos. And good luck getting your instance admin to delete it; it requires a manual db query, api call, and — oh, none of this is documented? Welcome to my nightmare 💣🤯

MichaelAltfield OP ,
@MichaelAltfield@mastodon.social avatar

@ThePlant In the case of the article, the image never federated.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • Mordhau
  • WatchParties
  • Rutgers
  • loren
  • Lexington
  • cragsand
  • mead
  • RetroGamingNetwork
  • mauerstrassenwetten
  • MidnightClan
  • xyz
  • PowerRangers
  • AnarchoCapitalism
  • kamenrider
  • supersentai
  • itdept
  • neondivide
  • AgeRegression
  • Teensy
  • WarhammerFantasy
  • space_engine
  • learnviet
  • bjj
  • electropalaeography
  • steinbach
  • khanate
  • jeremy
  • fandic
  • All magazines
    •