לעקוב

Keybase is cool for proving your identity and sending encrypted messeges, but I would NOT store anything else on their servers. In their terms, they basically say you don't own any content that you upload, they can do whatever they want with it, and screw you if you want to complain.

It's not really anything special compared to Google for e.g, but you can't assume a service is completely friendly just because they encrypt things.

There are also more stuff about terminating your account with or without cause - blocking access to your uploaded content. Terms can be changed whenever (notification only when they deem changes "material"); and some more stuff that I can't remember on top of my head.

Show thread

@Esho this is fairly standard

it mostly means that they're able to display your content that you send them without paying you and that you're at fault for any illegal content uploaded by you to their service

@ben
If that's the standard, I disagree with it. I truly don't know, but I doubt it is. Another example. Take a look what Dropbox tells its users in their terms about the users' content ("stuff"). I find that acceptable. What I don't like is Keybase telling their users: We'll do whatever we want, period. If it's just a wording thing, they ought to change their terms.

@Esho that's not legal language, though

if Dropbox wrote that in legal-speak, it would probably come out the same as keybase's did

@ben
I'm glad they don't use legal language (as much) in their terms. Most people don't read legal stuff anyway, and at they very least they could make it more accessible.

@Esho what they're calling terms of service sounds more like something that would appear in a privacy policy (keybase.io/docs/privacypolicy)

@ben
Yeah the privacy policy is more sane.

Now, I know it's just legal language, but can we discuss "...you waive your moral rights..." part?
Moral rights? Really?

@Esho seems Don’t people release software on keybase? Has there been an instance of keybase just straight up taking someone’s property and selling?

@ewok
I don't know if that happened but I doubt it. Well I should qualify my previous toot. In their terms they say they can do whatever they want with your content, yes - but what they do or don't is subject to their privacy policy. There, they state that Keybase does not sell your information to third parties for marketing purposes.

@ewok
I still dislike their overusage of legal-language terms and wording. You can't expect people do read that and not be scared.

@Esho yeah I’m personally on the fence about linking to mastodon for other reasons, too. It could be a metadata contact harvest and the person behind this did okcupid before. If it took off it would be well poised for a fb takeover like whatsapp or Instagram imo

@ewok
It's a legit concern. Even if Keybase has good intentions, people can exploit the (undeletable) public information that Keybase displays.

You reminded me of the Okcupid affair, where Danish researchers thought it's chill to create a bot account in Okcupid to scrape "public" users' information.

Think of the kind of scraping possible in Keybase. Proven identity can also mean high quality linked datasets.

Sign in to participate in the conversation
Toootim

מסטודון היא רשת חברתית חופשית, מבוססת תוכנה חופשית ("קוד פתוח"). כאלטרנטיבה בלתי ריכוזית לפלטפרומות המסחריות, מסטודון מאפשרת להמנע מהסיכונים הנלווים להפקדת התקשורת שלך בידי חברה יחידה. שמת את מבטחך בשרת אחד — לא משנה במי בחרת, תמיד אפשר לדבר עם כל שאר המשתמשים. לכל מי שרוצה יש את האפשרות להקים שרת מסטודון עצמאי, ולהשתתף ברשת החברתית באופן חלק.