GCARegistry
← Archive

GCA · Archive

#security-updates

10 archived messages. Newest first.

NOT IN USE · REFER TO OCTAVIUM UPDATES · This channel is kept for the record and no longer updated. Go to #octavium-updates →
SvenTitanite
If not, be sure to report it for spam!
LIMITED CHECK BIO
@everyone

:GLOBE: Statement on IP Address Collection and GDPR Compliance


With his high command, Aleczaender has tried to explain the mechanics of IP addresses, and to justify the website's apparent collection and display of users' IP addresses. Unfortunately, these explanations reveal a lack of understanding of basic networking and the European data protection legislation that applies.

Aleczaender describes IP addresses as used to "connect to the internet." This is a gross oversimplification, although not entirely wrong.

IP addresses are used to communicate between networks. They are necessary for devices and servers to know who they are talking to and to transfer information. They are more than an Internet identifier.

Also, domain names are mapped to IP addresses using the Domain Name System (DNS). For example, when someone types in www.google.com, DNS converts the domain name to a corresponding IP address so that the browser can speak to the correct server.

The key difference is that the technical ability to get an IP address does not in itself give a legitimate basis for collecting, retaining, analysing or displaying it.

Under the General Data Protection Regulation (GDPR), IP addresses may be personal data if they relate to an identified or identifiable individual. The Court of Justice of the European Union acknowledged this principle in *Breyer v Bundesrepublik Deutschland (C-582/14)*

GDPR doesn’t prohibit all IP address collection. However, the processing must have an appropriate legal basis pursuant to Article 6. The operators of the websites are also required to adhere to rules on transparency, purpose limitation, data minimisation, storage limitation and data security.

Now, regarding the screenshot. Perhaps most concerning is the previously available, now-defunct Inquisition screen.

Based on the allegations surrounding this feature, IP addresses were apparently collected and displayed to users in a manner that could reasonably be interpreted as an attempt to intimidate them.

This raises legitimate questions about why the information was collected, how it was processed, whether users were adequately informed, and what legal basis justified the processing.

If IP addresses were collected or used to profile individuals without an appropriate legal basis, this could constitute a GDPR violation. The same applies if other applicable data protection requirements were disregarded.
SvenTitanite
Ave!
SvenTitanite
basically; Their Inq Portal Collects your Screen Data, hardware, GPU, CPU data and Browser settings
SvenTitanite
To de-authorised bots/applications:

Open settings, go to "Authorised Apps"
Find the octavium bot, and click the red "Deauthorise" button.
SvenTitanite
De-authorize the octavium bot, and don't use their website; it logs ips and other personal information. Also make sure, the octavium bot does not have permission to add you to servers!
kosmic
@SvenTitanite
kosmic (edited)
hey you guys forgot