#systemality app

While I would LOVE the idea of a cdd focused app that is for real systems, not endogenics, there isn’t really a feasible way I think somebody could do that without intruding into others privacy.

Theres just so many complications or grey areas that would make doing that near impossible.

I suppose, if I had to go about trying to drive endos from my app, I would:

- explicitly advertise it for people with cdds

- not reblog anything endo friendly on the app

- create features specific to cdds

- i remember simplyplural had a resource section, make sure to have resources that are like.. specifically for cdds and none of that “plural” bs

so i& hav been thinking about this "systemality app" thing for a lil bit more and i& think they full of crap actually like so full of crap i& think their dev is a total chudx who doesnt understand that they might as well be crossing into illegal stuff n thats very bad !!

so u dont wanna be specific huh?? how u gonna associate ppl's tumblr and other accounts w accounts on ur app ??? actually being "non-specific" is very bad n it compromises on user privacy liek there are TOSes on websites b apps for a reason no ???

how u gonna associate users ip with their public account ?? are u going to ip grab ppl ?? ip grabbing is invasion of privacy am& so sorry that anti endos like u hate privacy !!!

ohhh so u just virtue signaling ?? ur chudx butt gonna somehow magically associate IPs of ppl who probbly dont giv a damn about u and ur app and u gonna waste time on them instead of developing stuff !! how noble but ur app gonna be half baked AND only way to get an IP from a tumblr blog if u literally hack the site and embed an ip grabber so am& sorry if u do this ur literally going end up breaking tumblr terms of service !!!

ummm did ur server hosting tell u that cuz it seems u dont understand what it means. most hostings actually ban IPs associated with the email used but they do only last 10. u can use a different email after u clear the original ip out and its like nothing ever happened. and if u plan to ban every associated ip then i& welcome you to extra 10k entries just from me& <33333 say hi !!!

btw did u know that collecting discord ids is actually collecting private user info and if u do this for a blacklist then u do it without their consent ? liek idk i& found this interesting court case n liek idk it seems like if u do this u may get in court trouble actually ?? especially if it leaks ?? also if u plan to track that info with ids on pk json exports then literally ANYONE can edit the associated data on exports and u will not be able to track stuff

…. - ….

i wanted to put in our two cents about this response, since we asked this on main.

[tldr: how they claim to be banning someone from the app before registration can occur (by gaining their email) is illegal, unethical, and violates tumblr’s policies.]

how. how do you find the email that they used. you can’t just get someone’s email that they used without putting it through an email scraper.

also! there are privacy laws.

In the complex terrain of digital communication, understanding the rights of email account holders is crucial for ensuring ethical and legal email search practices. This section delves into the intertwined concepts of user consent and data ownership, unraveling the rights that individuals hold over their electronic communications.

Informed Consent: One fundamental ethical consideration revolves around obtaining informed consent from email account holders before conducting any search. This involves transparently communicating the purpose, scope, and potential consequences of the email search. Respecting the autonomy of users by seeking explicit permission is paramount in upholding their rights and fostering a foundation of trust.

Ownership of Digital Communications: This segment explores the concept of data ownership in the digital realm. While users generate and transmit vast amounts of data through their email accounts, understanding who ultimately owns this data is critical. The discussion will shed light on the rights individuals possess regarding their digital communications, emphasizing the importance of respecting the ownership of personal information.

[Source for these quotes.]

also, ip banning requires the ip, not the email. and even then, you’re still handling sensitive information in this case. ip bans are literally finding the ip of a user and blocking the network from accessing the server. scraping the ip from a user is doxxing. - this also doesn’t even mention the fact that ban evasion with different emails and networks is possible. (source! my school was ip banned from scratch. lmao. i could use my alt accs at home.)

Tumblr doesn’t even allow this kind of stuff!

Tumblr receives requests for user information from law enforcement agencies, government bodies, civil litigants, and private parties. Before revealing any non-public information about a site, an account, or a user, we require a valid subpoena, search warrant, or court order. The only exception is when we have a good faith belief that there is an emergency involving imminent danger of death or serious physical injury.

Tumblr collects and stores non-public user information in accordance with our Terms of Service and Privacy Policy. Many Tumblr accounts are created and used pseudonymously or anonymously, allowing users to express themselves without revealing real-world identities. As a result, any user information Tumblr collects may not correspond to a verified or identifiable individual, since Tumblr does not require identity authentication during account creation. The following is a summary of the information that we may collect and store.

Basic account information, such as:

User ID

Username

Email address

Blog ID

Unique User ID (UUID)

Date/time stamped IP address from which an account and/or blog was created

[Source for this quote.]

This means that email is NONPUBLIC USER INFORMATION. IT IS ILLEGAL TO ACCESS THIS WITHOUT THE USER’S CONSENT.

Tumblr’s API guidelines also go over this!

Being anti-endo does not mean you can fucking bypass privacy laws, terms and guidelines for this app, and access PRIVATE DATA. Employers that check your email MUST GIVE A NOTICE THAT THEY WILL CHECK YOUR INFO.

Email addresses are also known as personal information under California law!

Personal information includes:

Name or nickname

Email address

Purchase history

Browsing history

Location data

Employment data

IP address

Profiles businesses create about you, including pseudonymous profiles (“user1234”)

[Source for this information]

Here is an article for more on consumer law and emails.

I had heard here and there about serveral different ways they plan to "tightly seal" the app from ntgs, but honestly... I just feel like those deterrents are wasting WAY too much energy on preventing the inevitable fate of; people who the dev doesn't want to use the app, using the app.

Notoriously, app gate-keeping (and I don't mean the sensationalized version of gate-keeping, I mean genuinely the definition) is an impossible task with very little to gain. I think the energy that is allegedly going into restricting access to the app, would be better put into actually desgining, managing, updatimg and spreading awareness for the app.

Okay, first of all, anti-endos are allowed to interact with this post. Usually I& do not like yall but I& consider Meliora to be a genuine danger to CDD spaces as a whole and what they are going to do might offset acceptance of multiplicity both medical or not by DECADE.

Why so? It seems as if Meliora does NOT understand what cybersec even IS. They have it so wrong that it feels as if they are merely roleplaying as a software developer (you can see one of my& recent posts about it. they were so eager to prove to me& that they are smart. this is so sad).

But if they are not just roleplaying, the way how they are describing the ways systemality app will ban pro-endogenic users is SUPER CONCERNING. As a cybersec-curious person, I& happen to know quite a bit of vulnerability history and I& got very alarmed when I& realised that the way they describe ways of banning remind me& of a very dangerous vulnerability of the past (or, well, mostly past).

Meliora, if you know what you are doing, you'd know what you are doing is dangerous. Grabbing IPs on referral and associating the referree with an account on a different site without voluntarily using it to register an account? This is LITERALLY WHAT ONLY CAN BE DONE WITH HEARTBLEED.

What is Heartbleed, though? Heartbleed is a pretty old and otherwise irrelevant (but NOT extinct) vulnerability. It still exists on the internet but mainly on very abandoned web services as the fix was pushed as far long as 12 years ago.

What does it do? Heartbleed uses an oversight in OpenSSL's implementations to steal otherwise cryptographically protected information. When I& asked Meliora if their determination to ban endos means that they are down to using SSL vulnerabilities to snoop on users, ther chudx ass didnt say no. They deflected it:

If Meliora actually uses Heartbleed, they'd not only be able to snoop stances of every person who uses the app or web version, but also snoop on their private conversations ON OTHER APPS, and have password and login info for everything as long as the app/web version is open (and if not open, systemality app can just force install a keylogger).

they r coward n blocked me& earlier but i& think everyon should see dis