I know everything you do and say is public and i don’t care .
What i am talking avout is the metadata like logs and ip and also passwds in case of an instance getting hacked do the hackers get these things . Like the user 123’s ip is this and passwds are this .
Like are they protected or encrypted so the hackers can’t use them ? Also what is stoping the instance owners from abusing or selling these behind our back ? or running a modded version of lemmy are they detectable ?
Your instance admins know basically everything. They won’t know the password you use since the software shouldn’t be storing that in plaintext. But your activity is pretty clear to them. They can see how you upvote, what you subscribe to, and probably also the IP you connect from.
So if the instance go down will it be encrypted automatically or something ? Or will the hackers have a field day because big instances like .world are now not allowing tor or vpn (for reasons that i can understand).
So if the instance go down will it be encrypted automatically or something
What is “it”, and what do you mean by “go down”?
By go down i mean hacked
Why is everyone saying passwords are encrypted? I thought they were hashed?
Hashing is one-way encryption. So, while you’re techcnically correct that they’re not encrypted in the traditional sense (encryption is reversible), for many it’s easier to understand the concept of encryption instead of hashing and terms are often used interchangeable.
Logging depends on the instance. Many admins choose to not log any data which could be used to identify any individual, but verifying their claims (without a doubt) as a single user is pretty much impossible and there’s nothing stopping an instance admin of gathering all the data (s)he wants to.
Like are they protected or encrypted so the hackers can’t use them ?
Passwords are encrypted, but in case of a security breach on an instance they are still vulnerable, like with any other password leak. Majority of the systems today use one way encryption with their passwords, but still millions and millions of user accounts are leaked almost daily.
Also what is stoping the instance owners from abusing or selling these behind our back ?
Nothing.
or running a modded version of lemmy are they detectable ?
If done properly, no, you can’t detect them.
But that’s not any different from any of the services around the net. Companies like Meta and Google make their money by selling user data, advertisers track you and all the other things you’re most likely already aware of.
Administrator of my instance said that they don’t gather IP addresses or any other data they don’t need to keep the servers running and I trust them on that, but your mileage may vary. And then there’s different legal systems around the world where an admin might be forced to give out information about individual user, but where I live that’s not a thing.
Use a VPN, use a unique password, don’t register with an email, and don’t post personally identifiable information.
