| 27 Oct 2025 |
 vcunat | i.e. it wouldn't be testing anything beyond a single attempt. Not even on stdenv rebuilds, basically never. | 17:52:45 |
 tgerbet | In reply to @emilazy:matrix.org
I'd guess that publicly announcing your IP to serve data to anyone who asks via a tracker means that your IP is no longer personal information Not really you still need explicit consent to process/expose the information.
We have had a case a few years ago in France that ended up at the CJEU. The processing of the IP addresses have been accepted for this specific case but only because it was the only way for rightholders to detect/report infringements.
It might be OK for the Hydra use case but it is likely not something we want to test in court đŸ˜…
https://torrentfreak.com/disclosure-of-pirates-identities-compatible-with-eu-privacy-laws-230929/ | 17:57:24 |
 emily | do you need consent to publish google.com's IP? | 17:57:39 |
| emily | it's offered in a public database (DNS) to the general public in order for people to access services from it | 17:57:51 |
| emily | someone participating in a public torrent swarm is asking a public database (torrent tracker) to offer their IP to the general public in order for people to access services (downloading chunks / peer exchange / …) from it | 17:58:21 |
| emily | (of course, whether people realize that clicking download is essentially volunteering to act as a public internet server is another matter, which I can imagine the GDPR caring about…) | 17:58:51 |
| tgerbet | Google is not a natural person and even if you can consider that consent was given to the torrent tracker, it does not extend to the other parties that might process the information (collection is considered a processing)
And yes I agree the whole thing is weird for P2P context | 18:21:36 |
| emily | then I guess we should hydraPlatforms = [ ]; it? though that won't stop people using it in packages. | 18:31:52 |
| emily | AFAICT it would require turning down the log level all the way to not showing any warnings or info messages at all to get rid of the IP logging. | 18:32:12 |
 toonn | IP addresses can be personal data, but if they cannot be traced back to a specific natural person then it's not personal data. | 18:55:01 |
