Like even if they have nothing else they could just leak IP is there any law against it ? Or any technical aspect stopping them ?

  • ryannathans@aussie.zone
    link
    fedilink
    arrow-up
    76
    ·
    8 months ago

    Ethically it’d be shitty and people don’t want to be part of an instance with shitty admins so people would migrate away. Technically, nothing unless you’re using a VPN. Welcome to the internet, the same is true for every website

    • wizardbeard@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      36
      arrow-down
      1
      ·
      8 months ago

      Also there’s the aspect of just… not caring. As someone who technically could read the email, browse the files, or track the apps installed and used on the phone of nearly any person where I work, any small bit of idle curiousity died before I was done my first day.

      Even if I was nosy, 99% of people are just not that fucking interesting. What would even be the point of abusing my access?

      I’ve seen someone put it like this: male gynecologists don’t get excited looking at lady bits at work.

      • TexasDrunk@lemmy.world
        link
        fedilink
        arrow-up
        8
        ·
        8 months ago

        I was able to do that for years. For me to give a shit what’s in your email you have to be more interesting than the rest of the internet, which pretty much means you’d have to be doing something at least borderline illegal and have it brought to my attention by someone who noticed it over your shoulder.

  • henfredemars@infosec.pub
    link
    fedilink
    English
    arrow-up
    31
    ·
    edit-2
    8 months ago

    An IP address by itself isn’t going to let you dox users unless you have access to the databases that map these to the subscriber accounts. Typically, you would need to be an ISP or law enforcement to do this, but you can also purchase this information from a data broker if you know what you’re doing.

    With that said, there is absolutely nothing stopping the instance operator from getting your IP address. You’re connecting to his or her computer which they own, so they can easily see where you’re connecting from.

    • BombOmOm@lemmy.world
      link
      fedilink
      English
      arrow-up
      23
      arrow-down
      2
      ·
      edit-2
      8 months ago

      A notable way to protect against this is to use a VPN. Then the operator only knows you use a VPN.

      Also need to be careful of what you write in comments (this is a public forum!). People sometimes write a surprising amount of detail about their life and it makes it much easier to narrow you down to a single individual the more you do it.

  • southsamurai@sh.itjust.works
    link
    fedilink
    arrow-up
    23
    arrow-down
    1
    ·
    8 months ago

    Serious answer: nothing except their own lack of access to anything except the ip address and whatever you give them.

    But that’s easy to counter with a VPN and a bit of common sense.

  • sudneo@lemmy.world
    link
    fedilink
    arrow-up
    12
    ·
    8 months ago

    Technical measures are impossible in this particular case. However, I would say that the complete lack of benefits or incentives makes it very unlikely. Doing so could be illegal and collecting data which is otherwise useless is only a liability and a waste of resources. Basically the admin own self-interest I would say is what’s stopping them. That said, if someone is individually afraid due to a bad relationship with an admin, then personal motives could void the above, in which case, they should change instance probably or use a VPN at least.

  • Undertaker@feddit.de
    link
    fedilink
    arrow-up
    16
    arrow-down
    4
    ·
    8 months ago

    Oh my… This whole thread is literally the best of ‘Do you have something to hide?’, ‘Why should they use it?’, ‘What could happen?’, ‘That’s paranoid’ and so on.

    Really disappointing.

  • Omega_Haxors@lemmy.ml
    link
    fedilink
    English
    arrow-up
    10
    ·
    edit-2
    8 months ago

    You’re connecting to their servers. They’re going to get your IP. This is unavoidable.

    They can even * [gasp] * read the messages and things you willingly post onto their servers.

  • poVoq@slrpnk.net
    link
    fedilink
    arrow-up
    7
    ·
    8 months ago

    They have no business incentive for it, contrary to most other websites that are funded by targeted advertisement which basically means doxxing their users to advertisement companies.

  • arran 🇦🇺@aussie.zone
    link
    fedilink
    arrow-up
    6
    ·
    8 months ago

    Don’t let your guard down but at some point trust and risk consideration is required for most systems to work. If you’re after solutions; you could run your own node in the cloud and federate it.

  • ɐɥO@lemmy.ohaa.xyz
    link
    fedilink
    arrow-up
    7
    arrow-down
    2
    ·
    8 months ago

    Nobody cares about ips. This is mine: 193.81.127.151 . Try to find out anything about me exept my approximate location.

  • Rustmilian@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    1
    ·
    8 months ago

    Maliciously Leaking IP is doxxing, doxxing is illegal.
    That said, law enforcement can just request for the IP/Logs and they’ll likely hand them over.