Feature Request: Opt-Out from Cyber Circle Creator #6

Open
opened 2024-11-16 20:17:58 +00:00 by revengeday · 0 comments
Owner

Since Cyber Circle Creator is a fork of AMNatty/Mastodon-Circles, I have reviewed the issues there, which I will briefly mention here:

This tool scraped my data without my express permission. Like all Fedi data scraping tools, it needs to be made opt-in only.

From: karlorg (Aug 30, 2024)
URL: https://github.com/AMNatty/Mastodon-Circles/issues/14

Some instances have locked-down front-ends. If Fedi Circles can make authenticated requests with a read-only access token, it can use the full API even on locked-down instances.

This could also allow Fedi Circles to query more meaningful data than received interaction (see #7):

  • The queries user's outgoing faves, even if they are not publicly exposed.
  • Notifications/interactions, to see who mentions the queried user.

From: Seirdy (Jan 27, 2024)
URL: https://github.com/AMNatty/Mastodon-Circles/issues/8

add an option to opt out of fedi circles

From: fluoriteByte (Jan 1, 2024)
URL: https://github.com/AMNatty/Mastodon-Circles/issues/6

It is clear from these comments that users want the ability to opt out of the tool. I have already considered this, and I will create a feature request here to explore such a solution. I will use this issue to keep you updated on the progress.

Sidenote:

Karlorg raises a significant point about the structure and functionality of Fediverse instances. The inherently open nature of APIs allows applications like Mastodon to take full advantage of their decentralized nature. This openness can inadvertently lead to issues concerning data accessibility, as the APIs potentially expose user data broadly unless specific measures are taken. However, it's important to note that the availability of this data is indeed intentional, as outlined by the ActivityPub protocol. This protocol is designed to facilitate a decentralized and interconnected social network ecosystem.

For those who have concerns about data exposure, one approach might be to consider switching to a centralized social network that does not use open APIs. Alternatively, running a local-only instance could provide an additional layer of privacy. These options might better align with users' privacy expectations, while still allowing engagement within social networks, albeit with different levels of openness and control.

It is also important to highlight that Cyber Circle Creator operates without storing any data on external servers. Everything generated by the tool happens entirely within the user's browser, ensuring complete user control over their information. There is no intention—financial or otherwise—to analyze this data.

Current measures

The first step I have taken is to add a user-agent to the create-circle.js file. This allows Fediverse administrators to completely block the Cyber Circle Creator using the user-agent. This measure serves as an initial response to address user concerns about data control. For detailed information on how administrators can implement this blocking mechanism, I have created a guide in the wiki titled "Opt-Out: Guide for Fediverse Administrators," which you can find here.

In addition to this, I am planning further enhancements. One potential approach is to implement an opt-out feature that would give users more control and allow them to actively choose against "data collection" by the Cyber Circle Creator.

I am looking for collaborators who are interested in partnering with me to develop this feature.

However, implementing such functionalities is technically challenging, as create-circle.js is very large and has numerous dependencies that can slow down the integration of new features.

Since Cyber Circle Creator is a fork of [AMNatty/Mastodon-Circles](https://github.com/AMNatty/Mastodon-Circles), I have reviewed the issues there, which I will briefly mention here: > This tool scraped my data without my express permission. Like all Fedi data scraping tools, it needs to be made opt-in only. From: karlorg (Aug 30, 2024) URL: [https://github.com/AMNatty/Mastodon-Circles/issues/14](https://github.com/AMNatty/Mastodon-Circles/issues/14) > Some instances have locked-down front-ends. If Fedi Circles can make authenticated requests with a read-only access token, it can use the full API even on locked-down instances. > > This could also allow Fedi Circles to query more meaningful data than received interaction (see #7): > > - The queries user's outgoing faves, even if they are not publicly exposed. > - Notifications/interactions, to see who mentions the queried user. From: Seirdy (Jan 27, 2024) URL: [https://github.com/AMNatty/Mastodon-Circles/issues/8](https://github.com/AMNatty/Mastodon-Circles/issues/8) > add an option to opt out of fedi circles From: fluoriteByte (Jan 1, 2024) URL: [https://github.com/AMNatty/Mastodon-Circles/issues/6](https://github.com/AMNatty/Mastodon-Circles/issues/6) It is clear from these comments that users want the ability to opt out of the tool. I have already considered this, and I will create a feature request here to explore such a solution. I will use this issue to keep you updated on the progress. ### Sidenote: [Karlorg](https://github.com/AMNatty/Mastodon-Circles/issues/14) raises a significant point about the structure and functionality of Fediverse instances. The inherently open nature of APIs allows applications like Mastodon to take full advantage of their decentralized nature. This openness can inadvertently lead to issues concerning data accessibility, as the APIs potentially expose user data broadly unless specific measures are taken. However, it's important to note that the availability of this data is indeed intentional, as outlined by the ActivityPub protocol. This protocol is designed to facilitate a decentralized and interconnected social network ecosystem. For those who have concerns about data exposure, one approach might be to consider switching to a centralized social network that does not use open APIs. Alternatively, running a local-only instance could provide an additional layer of privacy. These options might better align with users' privacy expectations, while still allowing engagement within social networks, albeit with different levels of openness and control. It is also important to highlight that Cyber Circle Creator operates **without storing any data on external servers**. Everything generated by the tool happens entirely within the user's browser, ensuring complete user control over their information. There is no intention—financial or otherwise—to analyze this data. ## Current measures The first step I have taken is to add a user-agent to the `create-circle.js` file. This allows Fediverse administrators to completely block the Cyber Circle Creator using the user-agent. This measure serves as an initial response to address user concerns about data control. For detailed information on how administrators can implement this blocking mechanism, I have created a guide in the wiki titled "Opt-Out: Guide for Fediverse Administrators," which you can find [here](https://git.cyberwa.re/revengeday/cyber-circle-creator/wiki/Opt-Out%3A+Guide+for+Fediverse+Administrators). In addition to this, I am planning further enhancements. One potential approach is to implement an opt-out feature that would give users more control and allow them to actively choose against "data collection" by the Cyber Circle Creator. I am looking for collaborators who are interested in partnering with me to develop this feature. However, implementing such functionalities is technically challenging, as `create-circle.js` is very large and has numerous dependencies that can slow down the integration of new features.
revengeday pinned this 2024-11-16 20:18:01 +00:00
revengeday self-assigned this 2024-11-16 20:19:35 +00:00
revengeday added reference undefined 2024-11-16 20:19:49 +00:00
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: revengeday/cyber-circle-creator#6
No description provided.