feanpoli

joined 3 years ago
[–] feanpoli@lemmy.ml 2 points 1 week ago

Thank you for your valuable insights! I agree that complaints, legal claims and boycotts are valid approaches to push for accountability.

Online accounts are not part of the primary purpose of acquiring the device. When purchasing a vinyl cutter or printer, users do not initially agree to a software license which is enforced later on with changing terms over time. Additionally, SVG files created with Cricut are expected to contain private information about third parties, such as addresses and messages, since the tool is designed for creating personalized items like cards and invitations. This raises serious data privacy concerns, as those individuals have not consented to their data being processed by Cricut, violating GDPR principles related to consent and purpose limitation.

[–] feanpoli@lemmy.ml 3 points 1 week ago (2 children)

Under GDPR, consent must be freely given GDPR Article 7 Conditions for consent. Cricut’s requirement to use cloud-connected software to operate a purchased machine restricts users' freedom of choice, which is problematic because:

  • Consent Cannot Be Conditional: Users are forced to accept cloud processing to use the machine for its primary purpose.

  • No Real Offline Alternative: Without an opt-out option, Cricut risks violating GDPR's standard for valid consent.

This also challenges GDPR Article 6 Lawfulness of Processing, which requires an appropriate legal basis for data processing.

Other references: Cricut Terms of Use (June 7, 2024), Cricut Privacy Policy (March 31, 2022)

[–] feanpoli@lemmy.ml 2 points 1 week ago (1 children)

| Don’t know what that is.

Apologies, I should have provided more context! Cricut is a company that sells vinyl cutter machines with printing features often used to create stylish cards, envelopes, and crafts. For example, you could receive a physical card or letter created with Cricut that contains your personal information (like addresses or messages) even if you don’t use their services. This raises concerns because files with such private data are automatically uploaded to Cricut’s cloud without user control, which. I think. infringe GDPR.

7
To Privacy Advocates! (help.cricut.com)
submitted 1 week ago* (last edited 1 week ago) by feanpoli@lemmy.ml to c/privacy@lemmy.ml
 

Cricut’s Design Space enforces automatic cloud syncing of user files, even those stored "locally." This raises serious GDPR concerns, especially when files contain personal data like client details, addresses, or sensitive info, undermining user control and privacy.

What steps can we take to push Cricut toward GDPR compliance and respectful data handling? Would regulatory complaints or organized campaigns for local-only storage options make a difference?

Looking forward to your thoughts and strategies!

[–] feanpoli@lemmy.ml 2 points 2 weeks ago

In a capitalist system, finding ethical funding models for free software is challenging but essential. Monetizing user data may seem like a viable solution, but it undermines the very principles of freedom and trust that free software stands for. Instead, we should explore community-driven models, such as donations, grants, or ethical partnerships, to ensure financial sustainability without compromising user rights. Supporting these alternatives is crucial to building a future where free software can thrive ethically.

[–] feanpoli@lemmy.ml 2 points 2 weeks ago

Ubuntu’s search feature, which sent user queries to Amazon without consent, qualifies as spyware due to its lack of transparency and user control. This was not an accidental oversight but an intentional decision to monetize user data, prioritizing profit over privacy.

Consider the Facebook-Cambridge Analytica scandal, where user data collected under the guise of social engagement was exploited for political manipulation. Similarly, the Lavender study reveals how surveillance data has been weaponized to target individuals in Gaza, with profiling systems feeding military operations and resulting in wrongful deaths.

These cases highlight how data collection practices, even if introduced for financial or operational convenience, can spiral into harmful misuse. While Ubuntu may not directly lead to such outcomes, normalizing these practices lowers the threshold for future abuse. Vigilance and ethical standards are essential to safeguard against such risks.

[–] feanpoli@lemmy.ml 2 points 2 weeks ago (3 children)

tiny flaw

Canonical deliberately spied on its users without their consent by forwarding search queries to Amazon via a malicious feature. Users searching their computer locally would not expect their queries to be broadcast externally. Following public backlash, Canonical allowed users to disable this behavior. However, Canonical continues to collect certain types of user data for commercial purposes. These practices present significant issues for those who support free software principles.

Ubuntu Spyware: What to do?

[–] feanpoli@lemmy.ml 6 points 2 weeks ago

Ubuntu initially positioned itself as a staunch advocate for free software, reflecting its roots in the principles of open-source freedom and collaboration. This ethos is captured in early mission statements and community declarations that emphasized the "freedom to use, share, study, and improve" software.

Today, Ubuntu still mentions its commitment to free software, as noted on the Ubuntu Community Mission page, which emphasizes building tools accessible to all and maintaining an ethos of openness and collaboration. However, its approach has evolved to include a pragmatic balance between free software and proprietary solutions.

[–] feanpoli@lemmy.ml 3 points 1 year ago

It depends on what matter to you. I use a GNU/Linux distribution and I call it that such because I think the project deserves to be better known. I say FLOSS rather than FOSS because I value freedom.

[–] feanpoli@lemmy.ml 9 points 1 year ago

Actually it might be the opposite, without the GNU initiative, Linus may not have found any interest in developing the Linux kernel. Without the GPL license, the efforts of the GNU community would not have been spent on Linux.

[–] feanpoli@lemmy.ml 6 points 1 year ago (1 children)

You can be root on GNU/Linux, you cannot on Windows or any other nasty proprietary OS.