XMPP Service Operators - 2021-12-14

Would anybody please share their experiences with government's data protection offices? I am now looking at UK's Information Commissioner's Office who maintains a registry of "data controllers". My small XMPP server has a few accounts not from my household, so I'm not exempt, so should register (and pay a small fee).

andrey.utkin: what, is that a joke? Every small hoster will pay a "fee"? I know for GDPR the line is drawn at "personally identifiable information" if you only store JIDs pretty sure that doesn't count, so you don't need to worry about GDPR

JIDs are very much PII

well, how about entire messages archive for each user?

andrey.utkin: there is https://wiki.xmpp.org/web/GDPR and https://wiki.xmpp.org/web/GDPR/Privacy_Policy_Template

i would not be too worried for just hosting a "homebrew" XMPP server. I just semi-randomly stumbled upon ico.org.uk due to my interest in a question "can UK business run servers in Germany". Like, as I'm going to serve transactions using Stripe API on a server, there's may be some small amount of PII, what are implications etc. I didn't know about ICO registration and a fee until today, but I am not shocked and I would say it's reasonable, unless some horror is going on, and that's why I asked here.

In the UK, there is definitively some horror going on.

Ge0rG, could you please elaborate or give examples?

andrey.utkin: before the brexit, I'd said that the GDPR applies and that you can follow the linked advice. Now, I am not sure.

ah ok. i was worried there's evident systematic corruption or such

Ge0rG, as far as I'm aware there is still no deviation (yet) from GDPR

The deviation that has been proposed by some seems to be a major relaxation of it

Breathe, folks: i have found there's a condition on which I don't have to register or pay a fee: i'm processing personal data solely for "recreational reasons"! > Organisations or individuals who only process personal data for judicial functions, elected representative functions, to maintain a public register or *for domestic or recreational reasons are exempt.* You therefore do not have to pay a fee to the ICO Whoever doesn't need to pay a fee, doesn't need to register either. The whole process and documentation is fee-centric rather than endeavour-nature-centric :) Reminds of https://www.boredpanda.com/funny-government-memes/ BTW if you try to pay the fee online anyway, the process loops :) https://ico.org.uk/for-organisations/data-protection-fee/

Sounds about right :)

"data protection fee" is an amusing phrase....

Not to be confused with the "business protection fee" that mobsters charge?

Actually it's approximately the same thing...

Some light xmpp node for Android?

Ian Blas: termux + prosody/ejabberd? But the network part is hell...

Rumor tells of a legendary user that had it working once with ejabberd, in the forgotten days of the year 2020. He claimed it was quite battery friendly. But after a time he was never seen again.

maybe their battery ran out?

They also only had it working over IPv6, some people just enjoy pain

well that makes sense tho ;)

with the prices of ipv4…

I had Prosody running on my phone in 2009 or so

E90?

Sadly not, it was a Sony Ericsson Xperia X10 mini (had a physical keyboard though, and early Android)

I also had Prosody running on my phone around then, on an OpenMoko. :)

Woooo https://www.openssl.org/news/secadv/20211214.txt

Wait, where did openssl 2.0 go?

It didn't

I'm completely out of the loop then ✏

MattJ - I had one of those phones, it's still in a drawer somewhere. Great keyboard for the size.