I’ve been considering self-hosting for over a year now, but I’m still concerned if the feds will come knocking at my door for something someone else does.
For example, if someone on my server follows an individual or community and they posts something illegal (i.e. unauthorized sexually exploitive images) that content could be stored on my server. Wouldn’t’ I be legally liable for such?
I mean #fucklaws and everything, but I don’t want to end up in a cage and certainly not for something someone else did.
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
Yes, which is why there aren’t a lot of NSFW communities right now.
You can be pretty safe if you ban NSFW and have a good hand in moderation, and most of the time if the feds did come knocking it would probably be just to ask for the user who did post it and to give all information on them.
Users love to complain that there is no NSFW in most places on lemmy but then refuse to accept any of the responsibility of hosting it.
Dude. 4chan exists and continues to exist. This fact alone should allay your fears.
which particular fears are that? Do people post child porn there? I’ve heard that website is like where the trolls go to plan their trolling, but I realy don’t know much.
I made the mistake of going to their /b/ board one time. In short, yes, people do. Horrifying gore, too. Just basically don’t. Like, ever.
The problem with the comparison here, however, is that that place moves incredibly fast and deletes everything automatically and permanently. Even if the feds came knocking for 4Chan, there’d probably be nothing to show. Lemmy, on the other hand, apparently caches everything locally until you manually purge it (so I’ve heard).
I actually wanted to post something related some days ago. Why happen if I store pirated content inside my VPS? I think the answer is pretty obvious, in their TOS should say that if I do that they will BAN me without warning, but can they detect the files? Or worse, what if I download directly into the VPS with torrent or Jdownloader?
I think this is a different enough topic that it deserves its own post.
Related, What about a personal instance only I use? I can choose what communities I want but I can’t control what is posted on those communities. Someone could post something illegal to a beehaw community (and have) and the mods remove it, but does the deletion of images and posts federate? In know matrix keeps copies of every deleted file in a room on all homeservers, what about lemmy?
If you do not download said asset you should be fine. As long as it is not CP
Lemmy sometimes caches remote content in pict-rs. It’s a bit broken so you usually don’t see it, but it does do it occasional
IIRC Lemmy preloads all thumbnails for posts in communities you subscribe to into pictrs to be cached for like a month or something. So, yeah…
It barely works on my old version of lemmy, probably fixed now then. It would be nice if there was a was to turn that off and only use pictrs only for locally uploaded images. Since I’m the only person here caching isn’t too important.
I wonder if I could shut pictrs down and only use an external image hosting for images?
I believe the Pictrs is a hard dependency and Lemmy just won’t work without it, and there is no way to disable the caching. You can move all of the actual images to object storage as of v0.4.0 of Pictrs if that helps.
Other fediverse servers like Mastodon actually (can be configured to) proxy all remote media (for both privacy and caching reasons), so I imagine Lemmy will move that way and probably depend even more on Pictrs.
I’ll have to double check this but I’m almost certain pictrs isn’t a hard dependency. Saw either the author or one of the contributors mention a few days ago that pictrs could be discarded by editing the config.hjson to remove the pictrs block. Was playing around with deploying a test instance a few days ago and found it to be true, at least prior to finalizing the server setup. I didn’t spin up the pictrs container at all, so I know that it will at least start and let me configure the server.
The one thing I’m not sure of however is if any caching data is written to the container layer in lieu of being sent to pictrs, as I didn’t get that far (yet). I haven’t seen any mention that the backend even does local storage, so I’m assuming that no caching is taking place when pictrs is dot being used.
Edit: Clarifications
It seems to work, but it keeps throwing pictrs related errors, so it’s not really built for it
Might be liable, then. You can never explain technology to a bureaucrat.
I’m sure you’re liable if you don’t moderate. I’m no lawyer, but it’s certainly possible to host things without ending up in prison. google, reddit, etc and lots of other people and companies do it. and they had that happen.
If you are US based, I think there is something like registering for DMCA take-down requests, so that they will contact you first for removal but IANAL.
But it is pretty much FUD that the Feds will come to your door on the first minor issue. If you react quickly to any complaints they will probably not bother.
Is that a butt joke?
https://en.wikipedia.org/wiki/IANAL
Assuming USA - platform immunity (CDA 230) protects you from most liability for content originating elsewhere. There are specific requirements to maintain your immunity if you receive a DMCA takedown notice, or have actual knowledge that child pornography has been uploaded to your service.
The EFF has a good write up.
https://www.eff.org/deeplinks/2022/12/user-generated-content-and-fediverse-legal-primer