@triplenadir @Edo_Secco @Gunther

How do I take down the account containing my likeness and tweets, created from the BirdsiteLive bridge?

I did NOT consent to having my tweets and photo posted elsewhere, and wasn’t even aware, until getting questions from people about which one is my “real” mastodon.

This isn’t okay to do without consent, and it is not ethical at all, despite claiming to be.

@BirdsiteLIVE

Please see the above toot. This is not okay. I want this “copy” of me taken down.

@BirdsiteLIVE it is also probably resulting in people tagging that account instead of mine and wondering why I’m not seeing the toots.

This is so messed up for so many reasons and was clearly not thought out with creator consent in mind. Very odd to me that you went out of your way to label this “ethical” when it is not.

@justkelly_ok it's called an "ethical bridge" in opposition to how unethically people did create bridges and mirrored accounts before that. You can find more informations about the current state of the project here: https://write.as/nicolas-constant/closing-the-official-bsl-instance

And as stated in the post, I don't host any instance currently, if you want to contact another instance admin, please follow this procedure: https://github.com/NicolasConstant/BirdsiteLive/wiki/How-to-contact-Instance-Owner

Closing the official BSL instance

While it was always planed (and disclosed as such since the beginning) I decided to close the official instance of BirdsiteLIVE a bit ear...

Nicolas Constant - DevBlog
@BirdsiteLIVE Great so you’re just going to leave this tool out there knowing people don’t want it used to copy their likenesses and accounts, knowing that mods of other instances may not take it down, and may even abuse it? This is the account btw, it’s on your instance and still showing for some
@BirdsiteLIVE I’m not interested in the history of how stuff was done before. “Slightly more ethical” != ethical.
This is really not okay. I have a stalker! Did you even consider risks to marginalized or targeted people?
@BirdsiteLIVE at the very least, if you want it to be ethical, people should be able to opt out of their accounts being copied like this. Even bots like thread unrollers on twitter allow people to opt out.
@BirdsiteLIVE actually, other similar tools are MORE ethical because they require the owner of the account to set up the mirror themselves and oauth to both.
@justkelly_ok that's not the tools I'm referring to: people created public accounts mirroring other accounts, posting in public mode feeding on Nitter RSS feeds.
That's the issue BSL addressed and helped to reduce, and stopped in some cases.
@BirdsiteLIVE and I’m supposed to care because why? This is still very harmful and I just found out there are even more clones of my account that appear to others but don’t come up in search from this instance

@BirdsiteLIVE So it’s not really feasible for people to monitor every instance where this might happen and contact the instance creator to get it taken down. I’ve had to rely on other people sending me screenshots of my “clones” that come up in search for them but not me.

Again: I have a stalker, and this is a really serious safety issue for me and others.

You don’t owe me anything and don’t have to care what I think but you can be considerate of people’s safety ffs.

@BirdsiteLIVE instead of, quite frankly, just being a dismissive jerk. Please at least CONSIDER taking it down because of the very real harm it can do. I’m already having a bit of a panic attack at the idea that I might not be able to track all these down and get them removed and my stalker could do something scary with this.
@BirdsiteLIVE just in case you don’t believe me or think that I’m being overly dramatic to make a point, these are the things he has been charged with. It really is serious.
@justkelly_ok it's really terrible you have a stalker. I'm so sorry about that, but @BirdsiteLIVE are absolutely right here - you need to put your account into protected mode.

yes, finding the contact details for every BSL instance and asking them is a lot of work... but with the same logic you would have to ask everybody that has a twitter developer API key to do it to, and there's literally hundreds of thousands of those.
and let's not even get into the realms of the numerous twitter HTML parsers that *don't* use an API key at all (BSL is not one of these, it does things properly).

@paul @BirdsiteLIVE I’m not interested in condescending unsolicited advice from strangers on how to handle my own safety regarding a situation I’ve dealt with for four years. And my particular circumstances should not matter or be up for debate. It is harmful.

https://mastodon.social/@justkelly_ok/109384233928474658

@paul @BirdsiteLIVE other similar apps that replicate people’s content elsewhere like this provide a centralized way to opt out. For example thread unroll bots.

The impersonation and confusion over which account I actually control is the issue. Main issue.

@paul @BirdsiteLIVE in response to these valid concerns, I’ve been met with
- dismissiveness
- mansplaining
- unsolicited advice that presumes to know more about how to protect my safety than I do
- refusal to consider multiple ways this can be used for harm in addition to violating people’s consent/privacy/ethics wishes
- disregard for privacy law

@justkelly_ok

We're giving you our time here, please be respectful of it.

Like it or not, the issues you shared are liked to the public aspect of your publications.
See here: https://nitter.it/justkelly_ok
It's a nitter instance, all you data (post included!) is publicly shared and available, and I don't think you can opt-out. Nitter is FOSS, anyone can host one. Including your stalker.

I can do the same demonstration with web.archive.org.
Your stalker can even get a twitter api himself and (...)

Kelly Ellis (@justkelly_ok)

pro-abortion. feminist gamer. no terfs allowed. she/her http://ko-fi.com/kellyellis

Nitter

@justkelly_ok fetch the data.

(BTW BSL will have a opt-out functionality before 1.0.0 release)

I'm sorry you're discovering this via me, but don't shoot the messenger, please.

@BirdsiteLIVE“It’s possible to do this through other means and sites so this is fine” is not really the argument you think it is.

There are ALREADY multiple accounts appearing to be me and controlled by me, that have been created with your tool.

@BirdsiteLIVE that doesn’t look like an active account engaging with others that I am running, though. The clones created by your tool DO.

Again: visibility is not the main issue I have, although intended audience and consent really should still matter to you. It’s the fact that it creates active accounts on a different social media platform where people post and interact.

I don’t consent to my likeness or tweets being copied and republished by your bot.

@paul @BirdsiteLIVE Paul, mastodon is crapping out on me so I apologize if you get this multiple times. But one of the clones of me is on the birdsite instance you mention in your bio. Can you please remove it?
@paul @BirdsiteLIVE wait maybe it’s doing this because he blocked me, because I can’t see his posts any more even though it doesn’t SAY I’m blocked. This is very frustrating. If someone sees this, can you please ask Paul to remove the justkelly_ok account from the birdsite instance he manages?
@justkelly_ok @BirdsiteLIVE OK, I'll leave it there. I was just trying to help.

@justkelly_ok look, I'm sorry you have a stalker (seriously), but in this case you need to switch your twitter account on protected mode.

If you're publishing publicly, everyone can access your data via a browser, any nitter instance, and any 3rd party twitter client app using the API like BSL. And any of your data can also be archived using web.archive.org. This isn't really a BSL related issue.

Also, if your account switch on protected mode, mirrors on every instances will remove all (...)

@justkelly_ok followers and stop working, as it should.
@justkelly_ok (the last sentence about mirrors only apply on BSL instance, I can't tell how other service will behave, for example web.archive.org might keep the content available)

@BirdsiteLIVE no, I actually don’t need your unsolicited advice on how to handle my safety. It’s not about visibility of my tweets.

My tweets being publicly visible is a very different issue than the existence of multiple lookalike accounts that contain my tweets and likeness and appear to be run by me but are not, and the ability for a bad actor to exploit your tool to do harm.

It’s an impersonation issue.

@BirdsiteLIVE on top of the potential for impersonation, it’s also the difficulty of being able to find or otherwise become aware of these accounts - which, again, all look like I run them in most contexts, despite the tiny “bot” tag on the profile. I’ve had friends ask which is my real one so clearly it’s not obvious.
@BirdsiteLIVE it’s also a consent issue. When using Twitter I’ve consented to my tweets being on that platform. I understand that they can be publicized and reproduced. I have NOT consented to all of my content, including images of me, being wholesale replicated elsewhere. It shouldn’t really matter the reason, but privacy laws are one really good one.
@BirdsiteLIVE @justkelly_ok opt out is *so* fundamental - what’s happening here is like a crawler to ignoring robots.txt and responding to folks saying “you’re being an asshole” by saying “oh wow you really need to password protect your web pages, anyone can scrape them”
@simrob @BirdsiteLIVE Perfect analogy, thank you.
@justkelly_ok @BirdsiteLIVE I’ll admit it’s not perfect given that there’s no preexisting robots.txt, but given this is a problem literally as old search engines the fact that opt out is necessary is hardly a big surprise. Still, an ethical computer scientist has to have consideration for what her technology allows others to do easily and at scale.

@simrob @BirdsiteLIVE can I ask you a small favor? Could you relay this request to @paul: one of the clones of my account is on the birdsite instance his bio says he manages, and I would like it removed, please. The @ is justkelly_ok.

I’ve asked him myself but I *think* I’m blocked. This app doesn’t SAY I’m blocked, but I can’t see his posts any more.

@justkelly_ok will try when I’m at a computer for real, for now I’m in an airport with low battery

@justkelly_ok @simrob I don't agree with your analogy: Twitter EULA state your data will be available through Twitter API. And that's what BSL is using.

But I DO agree the search leakage is an issue (as I state in the blog post you didn't read), that's in fact the reason I shut down the instance I had control on, and encouraged other admin to limit the reach of their instances. Since the service didn't operate the way I really wanted it to do.

@BirdsiteLIVE @simrob if you’re encouraging all that and recognize the potential problems, I think you could at least make them much clearer and more prevalent on the GitHub page. But I still wonder why you won’t even consider removing it, even knowing it likely breaks privacy laws.

Yes tweets are accessible through the public API. That doesn’t mean you’re allowed to use them however you want. I own the content I create. I could do a DMCA take down of all these instances.

@justkelly_ok @simrob

Consider removing what? The code? Most BSL instance run on a fork of my code, I don't have control over it. And if I remove it, I can't add the missing functionalities you're already asking for and that was already planned (and I'm convinced that the forks will happily retrieve them).

Lets say I listen to you and remove it: forks will prevail as is, and flaws will remain. Might not be the best move, isn't it?

@BirdsiteLIVE @simrob actually it is. And as I’ve already pointed out: it violates the API TOS.

@justkelly_ok @simrob

The code doesn't violate the TOS, since... it's code, not a hosted service.

About the service itself, that's one of the many reasons I recommend using the code on a personal scale, to fit the personal use case. Ideally only available on a 1 person instance.

That's also why in my blog post (yes, again) I link to those TOS and ask instance owners to check for themselves.

@BirdsiteLIVE @simrob In your blog post, which most people will never see. And on the project page there are quite recent posts where you’re encouraging people to incorporate it into their instances.

Clearly people aren’t reading your warning or aren’t heeding it, because they are all - seemingly unknowingly - violating the TOS.

@BirdsiteLIVE @simrob it’s interesting how you used “you agreed to twitter’s TOS when you use the service” as one of your main points, and when I pointed out this violates the TOS - and therefore breaks user expectation and consent - you move the goalposts to “I just wrote the code, not my fault if people deploy it”
@BirdsiteLIVE @simrob why make all those posts about “it uses the twitter API and you agreed to its terms” to justify this? It implies you agree that building something that knowingly violates those terms would be an issue
@BirdsiteLIVE @simrob does Paul know and fully understand that he’s violating the twitter TOS? I would bet that he does not. Are you going to inform him? I’m betting you will not.
@BirdsiteLIVE @simrob also a simple way to make centralized opt out would be: create a twitter account representing the bot. Let users know they can prevent scraping their content if they block that account. Check for that block before scraping it.

@justkelly_ok @simrob

Interesting idea but not technically feasible: you can't share access of the bot to other instance owner.

@BirdsiteLIVE @simrob I’m not sure what you mean. I have not used the twitter API in a long time and a lot has changed, but can you not check “does x user block y account” where you have an API key for y?
@justkelly_ok @simrob I can check again but my guess is this is a per account setting, using a personal token representing the account.
@BirdsiteLIVE @simrob btw here’s a link to the terms where I got one of the screenshots. There are multiple sets of terms spread across different pages. But this one seems to outline some things that would clearly forbid taking tweet content out of twitter context and putting it elsewhere without supporting all of the things that you can do on an embedded tweet. https://developer.twitter.com/en/developer-terms/display-requirements
Display requirements – Twitter Developers

Tweets are one of our most visible brand elements, so it’s important that they are presented correctly. You should comply with the display requirements below when you display Tweets, timelines, and other Twitter content.

@justkelly_ok @simrob

I don't personally think BSL violate Twitter TOS. I've read it a lot of time, and that's not my understanding.

BUT since some people understand those TOS differently, I recommend instance admin to check it for themselves and to not rely on my own understanding of it. And I made this very clear in my blog post.

@BirdsiteLIVE @simrob if it takes tweet content and puts it on a site surrounded by actions where people can: like, comment, or follow but it isn’t a twitter like/comment/follow - a mastodon one, for example - that’s a pretty explicit violation of the fourth screenshot
@BirdsiteLIVE @simrob there are also no tweet action icons that translate to twitter likes/follows/replies as required by the first bullet. No replies are shown as required by the last bullet.
Basically taking the contents of a tweet and turning it into a post on another social media site with its own system of likes, comments, follows etc that isn’t twitter, isn’t allowed.