Conversation

Notices

1. Embed this notice
   kaia (kaia@brotka.st)'s status on Monday, 01-Sep-2025 18:49:44 JST kaia
   In Germany, when you have a photo for passport or ID card taken, your image gets uploaded to AWS. the photo gets submitted to German authorities with QR code they use to download from said US cloud services. this is not optional; without complying you cannot get a new passport or ID card.
   • Embed this notice
     England Lives (thatbrickster@shitposter.world)'s status on Monday, 01-Sep-2025 18:53:44 JST England Lives

     in reply to
     @kaia GDPR be like, 'this is fine'.
     kaia likes this.
   • Embed this notice
     Phantasm (phnt@fluffytail.org)'s status on Monday, 01-Sep-2025 18:56:01 JST Phantasm

     in reply to
     @kaia All the unified EU digital ID effort made, yet they still haven't figured out how to do it properly after a decade of trying.
     kaia and ✙ dcc :pedomustdie: :phear_slackware: like this.
   • Embed this notice
     cell classic (cell@shitposter.world)'s status on Monday, 01-Sep-2025 19:01:48 JST cell classic

     in reply to
     @kaia say you want about china, at least they know how to wrangle us cloud providers to comply to their demands
     kaia likes this.
   • Embed this notice
     kaia (kaia@brotka.st)'s status on Monday, 01-Sep-2025 19:02:07 JST kaia

     in reply to

     • cell classic
     @cell China would also not use US clouds for their infra - they'd use AliCloud or similar. but we use CuckCloud because we are cucked.
   • Embed this notice
     Blurry Moon (sun@shitposter.world)'s status on Monday, 01-Sep-2025 19:03:37 JST Blurry Moon

     in reply to

     • cell classic
     @kaia @cell maybe if the EU regulatory environment wasn't shit
     kaia likes this.
   • Embed this notice
     lainy (lain@lain.com)'s status on Monday, 01-Sep-2025 19:06:25 JST lainy

     in reply to

     • cell classic
     @cell @kaia AWS is gdpr compliant and can store data on european servers only. data transfer between EU and US is an absolute nightmare for any company that tries to be compliant.
     kaia and Blurry Moon like this.
   • Embed this notice
     Phantasm (phnt@fluffytail.org)'s status on Monday, 01-Sep-2025 19:08:56 JST Phantasm

     in reply to

     • Phantasm
     @kaia Also why does a drugstore chain have a cloud division...
     
     >Domain Name: dmtech.cloud
     >Name Server: auth2.dm-drogeriemarkt.de
     image.png
     kaia and ✙ dcc :pedomustdie: :phear_slackware: like this.
   • Embed this notice
     Natanox 🇺🇦🇵🇸 (natanox@chaos.social)'s status on Monday, 01-Sep-2025 19:15:21 JST Natanox 🇺🇦🇵🇸

     in reply to

     • cell classic

     @kaia @cell Politicians: "We do not have the necessary technology in Europe."

     Canonical, Hetzner, OVH etc: "Are we a joke to you?"

     kaia likes this.
   • Embed this notice
     ✙ dcc :pedomustdie: :phear_slackware: (dcc@annihilation.social)'s status on Monday, 01-Sep-2025 19:23:37 JST ✙ dcc :pedomustdie: :phear_slackware:

     in reply to

     • Phantasm
     @phnt @kaia >tfw living in cali is better than all of Europe
     newsom-digit-id-1536x864.jpg
   • Embed this notice
     Moritz Bartl (gamambel@social.tchncs.de)'s status on Monday, 01-Sep-2025 19:31:15 JST Moritz Bartl

     in reply to

     • lainy
     • cell classic

     @lain @kaia @cell

     They're claiming to be GDPR compliant while in fact not even the European Commission believes that. The attempts to tape over this legally are a cheap way of hiding the fact, and it only "works" because everybody in power wants this to magically be compliant when actually it simply isn't.

     https://eliatra.com/blog/the-sovereignty-illusion-why-awss-european-cloud-cannot-escape-us/

     Since US companies are bound by US law, even *if* it were to "also" be "GDPR compliant" does not mean that they don't have full access, and are harvesting the data for their (US) national purposes. I personally remember a large university project that was involved in improving bulk image scanning across AWS, in the early 2000s. See also Snowden leaks etc. They're not relying on data security, but on looking away and pretending.

     kaia and lainy like this.
   • Embed this notice
     Lars (luatic@mastodon.social)'s status on Tuesday, 02-Sep-2025 00:03:16 JST Lars

     in reply to

     @kaia Source? Sure, that's one way it can be done, and that's apparently how it is done when you go to dm. Doesn't mean that it has to be done this way.

   • Embed this notice
     kaia (kaia@brotka.st)'s status on Tuesday, 02-Sep-2025 00:03:16 JST kaia

     in reply to

     • Lars
     @luatic in German https://mint-secure.de/e-passfotos-im-realitaetscheck-datenschutz-it-sicherheit/
   • Embed this notice
     Lars (luatic@mastodon.social)'s status on Tuesday, 02-Sep-2025 01:09:10 JST Lars

     in reply to

     @kaia

     Okay, this puts your claim into perspective. It's not as extreme ("without complying you cannot get a new passport or ID card") - there is an alternative.

     Specifically: "Die Übermittlung des Lichtbilds an die Personalausweisbehörde von einem zertifizierten Lichtbildaufnahmegerät eines Dienstleisters, das unmittelbar an das Behördennetz einer Personalausweisbehörde angeschlossen ist."

     This is the option I used to take my photo last time I had to get my ID in Bonn.

     kaia likes this.
     Gianmarco Gargiulo repeated this.
   • Embed this notice
     Lars (luatic@mastodon.social)'s status on Tuesday, 02-Sep-2025 01:09:45 JST Lars

     in reply to

     @kaia Furthermore, a very important detail: The image is stored *encrypted* on AWS. It can - using current technical capabilities - only be accessed using the key, which along with the URL is stored in the QR code.

     So all in all, given that there usually is an acceptable alternative (on-site photo booths) that avoids cloud uploads altogether, and that images are stored encrypted on AWS servers, I see no big reason for panic here.

     kaia likes this.
   • Embed this notice
     kaia (kaia@brotka.st)'s status on Tuesday, 02-Sep-2025 01:11:51 JST kaia

     in reply to

     • Lars
     @luatic there's no on-site alternative for me, since my Gemeinde does not offer taking the picture on site. I called them and asked.
   • Embed this notice
     Lars (luatic@mastodon.social)'s status on Tuesday, 02-Sep-2025 01:29:19 JST Lars

     in reply to

     @kaia I see, that's unfortunate. Might there be a photographer in your area that also offers this service?

     Otherwise I'd probably just bite the bullet and have my (encrypted) photo stored on AWS.

     kaia likes this.