Post Axl6bVY4Ks6NGxc3Vo by kaia@brotka.st
(DIR) More posts by kaia@brotka.st
(DIR) Post #Axl5Urcrkp69lN7n6m by kaia@brotka.st
2025-09-01T09:49:39.486882Z
7 likes, 2 repeats
In Germany, when you have a photo for passport or ID card taken, your image gets uploaded to AWS. the photo gets submitted to German authorities with QR code they use to download from said US cloud services. this is not optional; without complying you cannot get a new passport or ID card.
(DIR) Post #Axl5pv4e85jCXR9u5Y by thatbrickster@shitposter.world
2025-09-01T09:53:34.344518Z
3 likes, 2 repeats
@kaia GDPR be like, 'this is fine'.
(DIR) Post #Axl62K8okuzVl41ar2 by phnt@fluffytail.org
2025-09-01T09:55:48.008256Z
3 likes, 1 repeats
@kaia All the unified EU digital ID effort made, yet they still haven't figured out how to do it properly after a decade of trying.
(DIR) Post #Axl6CJBj9c7LhL99pQ by kaia@brotka.st
2025-09-01T09:57:28.033699Z
0 likes, 0 repeats
@marder not all places offer that. the office I have to go to don't
(DIR) Post #Axl6W33CrWa5RMZdTs by cell@shitposter.world
2025-09-01T10:01:10.433333Z
1 likes, 1 repeats
@kaia say you want about china, at least they know how to wrangle us cloud providers to comply to their demands
(DIR) Post #Axl6bVY4Ks6NGxc3Vo by kaia@brotka.st
2025-09-01T10:02:02.773019Z
4 likes, 0 repeats
@cell China would also not use US clouds for their infra - they'd use AliCloud or similar. but we use CuckCloud because we are cucked.
(DIR) Post #Axl6gSgAQnzfoylMG0 by phnt@fluffytail.org
2025-09-01T10:03:02.351049Z
2 likes, 1 repeats
@kaia Also why does a drugstore chain have a cloud division...>Domain Name: dmtech.cloud>Name Server: auth2.dm-drogeriemarkt.deimage.png
(DIR) Post #Axl6jDtXr5IepzKxLk by sun@shitposter.world
2025-09-01T10:03:33.832685Z
1 likes, 1 repeats
@kaia @cell maybe if the EU regulatory environment wasn't shit
(DIR) Post #Axl6ktCZlKivEq26oS by dcc@annihilation.social
2025-09-01T10:01:09.787994Z
0 likes, 1 repeats
@phnt @kaia >tfw living in cali is better than all of Europenewsom-digit-id-1536x864.jpg
(DIR) Post #Axl6rSWVLpUsWVUGsi by lain@lain.com
2025-09-01T10:05:02.052718Z
5 likes, 1 repeats
@cell @kaia AWS is gdpr compliant and can store data on european servers only. data transfer between EU and US is an absolute nightmare for any company that tries to be compliant.
(DIR) Post #Axl6sARk2tpakTb5ZA by mangeurdenuage@shitposter.world
2025-09-01T10:05:11.247752Z
0 likes, 1 repeats
@phnt @kaia Tech illiteracy do be like that.
(DIR) Post #Axl7UtMRVFDz3KaG9I by Natanox@chaos.social
2025-09-01T10:11:25Z
2 likes, 0 repeats
@kaia @cell Politicians: "We do not have the necessary technology in Europe."Canonical, Hetzner, OVH etc: "Are we a joke to you?"
(DIR) Post #Axl8aBDqcdHLqoeIyG by gamambel@social.tchncs.de
2025-09-01T10:18:37Z
2 likes, 0 repeats
@lain @kaia @cell They're claiming to be GDPR compliant while in fact not even the European Commission believes that. The attempts to tape over this legally are a cheap way of hiding the fact, and it only "works" because everybody in power wants this to magically be compliant when actually it simply isn't.https://eliatra.com/blog/the-sovereignty-illusion-why-awss-european-cloud-cannot-escape-us/Since US companies are bound by US law, even *if* it were to "also" be "GDPR compliant" does not mean that they don't have full access, and are harvesting the data for their (US) national purposes. I personally remember a large university project that was involved in improving bulk image scanning across AWS, in the early 2000s. See also Snowden leaks etc. They're not relying on data security, but on looking away and pretending.
(DIR) Post #AxlXTp6uQ0YiO9T9Tk by luatic@mastodon.social
2025-09-01T14:59:19Z
0 likes, 0 repeats
@kaia Source? Sure, that's one way it can be done, and that's apparently how it is done when you go to dm. Doesn't mean that it has to be done this way.
(DIR) Post #AxlXTqduimYP8nv1Yu by kaia@brotka.st
2025-09-01T15:03:11.393274Z
0 likes, 0 repeats
@luatic in German https://mint-secure.de/e-passfotos-im-realitaetscheck-datenschutz-it-sicherheit/
(DIR) Post #AxldMXS0HJ5TJdFHgu by luatic@mastodon.social
2025-09-01T16:00:52Z
1 likes, 0 repeats
@kaiaOkay, this puts your claim into perspective. It's not as extreme ("without complying you cannot get a new passport or ID card") - there is an alternative.Specifically: "Die Übermittlung des Lichtbilds an die Personalausweisbehörde von einem zertifizierten Lichtbildaufnahmegerät eines Dienstleisters, das unmittelbar an das Behördennetz einer Personalausweisbehörde angeschlossen ist."This is the option I used to take my photo last time I had to get my ID in Bonn.
(DIR) Post #AxldMcFmQBHSDAZ5pg by luatic@mastodon.social
2025-09-01T16:04:35Z
1 likes, 0 repeats
@kaia Furthermore, a very important detail: The image is stored *encrypted* on AWS. It can - using current technical capabilities - only be accessed using the key, which along with the URL is stored in the QR code.So all in all, given that there usually is an acceptable alternative (on-site photo booths) that avoids cloud uploads altogether, and that images are stored encrypted on AWS servers, I see no big reason for panic here.
(DIR) Post #AxldUoOt8wPYCWjXYe by kaia@brotka.st
2025-09-01T16:10:35.661070Z
0 likes, 0 repeats
@luatic there's no on-site alternative for me, since my Gemeinde does not offer taking the picture on site. I called them and asked.
(DIR) Post #Axlf2pfN2jlPvXEGES by luatic@mastodon.social
2025-09-01T16:14:45Z
1 likes, 0 repeats
@kaia I see, that's unfortunate. Might there be a photographer in your area that also offers this service?Otherwise I'd probably just bite the bullet and have my (encrypted) photo stored on AWS.