this post was submitted on 03 Jul 2025
35 points (100.0% liked)

hexbear

10442 readers
6 users here now

Hexbear Proposals chapo.chat matrix room.

This will be a place for site proposals and discussion before implementation on the site.
Every proposal will also be mirrored into a pinned post on the hexbear community.

Any other ideas for helping to integrate the two spaces are welcome to be commented here or messaged to me directly.

Within Hexbear Proposals you can see the history of all site proposals and react to them, indicating a vote for or against a proposal.

Sending messages will be restricted to verified and active hexbear accounts older than 1 month with their matrix id in their hexbear user profile.

All top level messages within the channel must be a Proposals (idea for changing the site), Feedback (regarding non-technical aspects of the site, for technical please use https://hexbear.net/c/feedback), or Appeals (regarding admin/moderator actions).

Discussion regarding these will be within nested threads under the post.

To gain matrix verification, all you need to do is navigate to my hexbear userprofile and click the send a secure private message including your hexbear username.

founded 4 years ago
MODERATORS
 

I tend to purge my account around once a year for opsec but I want to keep this username for when Chuck kicks the bucket. How would I go about that? Also if anyone has any username recommendations that would be appreciated.

top 28 comments
sorted by: hot top controversial new old
[–] dead@hexbear.net 27 points 1 day ago (5 children)

I tend to purge my account around once a year for opsec

Who came up with the idea that deleting posts is "opsec"? It certainly is not. Anything you post onto the internet is considered permanent public record. You can't "delete" things from the internet. Your comments are recorded to hexbear, any database backups that hexbear keeps, and since hexbear is federated, every other instance could have records of your posts.

People who delete their accounts make the website worse. Sometimes people search through old posts to learn things, check to see if questions have answered before, or for previous news articles. People deleting these posts make the website less useful.

If you feel the need to delete your posts, your opsec has already failed. Opsec only works if you never say things that could damage your security. The adage is "Loose lips, sink ships". You can't put words back into your mouth.

[–] TankieTanuki@hexbear.net 16 points 1 day ago

OpSec is when I can no longer read old effortposts by my favorite posters. kitty-cri

[–] QuietCupcake@hexbear.net 13 points 1 day ago

I'm glad you said this. I've mentioned it before but I am definitely one of these people who will often search hexbear for past information. I have (diagnosed) memory issues and will often be able to hold onto vague memories of something happening but not the important details so I like to check back on things like old threads.

And just in general, I will wonder about things like what were people's thoughts on a given issue here say 3 or 4 years ago? And then it turns out, who knows, these two threads with a couple hundred comments discussed it, but they're just bare bones among all the "deleted by creator" placeholders. Or I'll think "Hasn't some recent struggle session already been had before, how did it turn out then?" But again, it will turn out only a fraction of the comments are visible and the OP is deleted making it impossible to find out. Or there's a movie I want to watch or a game I want to play, what do my comrades here think of it? Damn, can't tell, only every 4th comment about it is still there and those makes no sense without the context.

Or even just that i want to learn more on some leftism-related topic. Since I've already learned so much here over time, hexbear is still the source I think of when there's a topic I want to understand better, one that if searched for, all the search engines will make impossible to find accurate information on, with any western means of finding out will be loaded with bullshit and propaganda. And thats where its really sad, because what could have been a great resource has been cleared from the site. For example, I wanted to know more about what leftists thoughts were on the Cultural Revolution, something i didn't know much about beyond the usual propaganda we hear. I found a couple long detailed threads about it, even a struggle that was undoubtedly fascinating. I say detailed, presumably they were detailed anyway, it seemed like they probably were, from what I could tell from the maybe 1 in 5 comments that were still there. Everything else was "deleted by creator." Of 200 hundred and something comment thread it was all unreadable really. Ironically there were comments thanking other users for the detailed list of resources they provided, resources I would have consulted if I could. But those resources were of course in a comment made by someone who had since wiped their account. Must have been a fascinating duscussion if i had been there to see it. Some of the deleted comments were made by users I remember and know had really deep and insightful things to say, now all wiped out. It's always so disappointing.

I understand people's desire to be careful and have good opsec and don't hold it against them. But it really does degrade the site and make it so that instead of being the excellent source of leftist information that it could be, it becomes closer to a discord server where the only purpose is the immediate conversations happening in the moment. I can't help but find that sad. Especially when I don't think it really does much to improve a person's opsec anyway. (If any fed or lea in general at any point wants this information on you, they can have it without issue regardless of whether you wiped your account. It might help you keep safer from the regular-people level of fash who might try to dox you or something, but for one, that's probably not all that likely to happen for the vast majority of posters and even if it does, they can only use the stuff that is really personally about you which you shouldn't be posting in the first place, but if you do, you can selectively delete just those personal comments rather than your entire account history.)

It's mostly because of these ressons that for a while I did use archive.ph to save some threads I thought were interesting, or threads I thought had bits of valuable information but were likely to get lost. But the captcha shenanigans the archiver sites require now make it less worth the effort so I haven't done that for a while. But anyone can go look at those and any other posts that people archived over the years, clearing your account isn't going to make any difference with that. Especially now with federation, people can archive from different instances so your hexbear post may still be archived, but only on a lemmy.ml url and you wouldn't know it if you only checked the archive for hexbear urls. That doesn't make hexbear any more usable as a repository of information (as I would like it to be) but it does mean that deleting your history here may not have the opsec benefit you thought it would. In other words, wiping your account still hurts this site, but doesn't really do what you hoped when you do it.

[–] Skye@hexbear.net 10 points 1 day ago (2 children)

Posting things about yourself that are untrue (but not obviously so) can also help

[–] Hestia@hexbear.net 10 points 1 day ago (1 children)

I once shot a gorilla after a child fell into it’s enclosure

[–] Ram_The_Manparts@hexbear.net 2 points 1 day ago

That child? Me.

[–] dead@hexbear.net 5 points 1 day ago

There's a million things you can do for opsec because opsec varies based on your perceived enemy. If you work for the Krusty Krab, opsec would mean not letting Plankton learn the Secret Krabby Patty Formula. Spongebob knows that his perceived enemy is the Chum Bucket or other rival fast food franchises.

If you don't identify a perceived enemy, you could be wasting your time or even not protecting yourself at all. If the perceived enemy is just a vague fear that a government is coming after you, as a rule of thumb, don't post anything on the internet that you wouldn't want to read in a court room.

[–] Crucible@hexbear.net 9 points 1 day ago

Opsec on hexbear is just a meme at this point. It was used as a way to run away from criticism so many times that how to actually do it has been obfuscated

[–] Comrade_Mushroom@hexbear.net 5 points 1 day ago* (last edited 1 day ago) (1 children)

Deleting your posts doesn't completely remove them from the internet, but it does make it harder to dig through them. Reaching into an archive is more involved than just clicking a username and scrolling.

You're not gonna be hiding yourself from the feds or some particularly determined nerd, and the best defense is to not say shit in the first place, but it certainly doesn't count as "bad opsec" to sweep your posts under the rug.

[–] dead@hexbear.net 11 points 1 day ago (1 children)

The goal of opsec should be that you don't have to delete your posts.

[–] Chana@hexbear.net 8 points 1 day ago (2 children)

I'm sure the API supports it. If there isn't a tool already, someone should make one. For infosec purposes, think of these two things to balanve expectations:

  1. Deleting history to prevent leaking any level of personal info is good, as is rotating accounts, because it limits exposure and makes it harder for someone else to "connect the dots".

  2. You should assume that anything you post to a website is permanently archived somewhere. If a public website like this one, a person could simply archive hexbear once a day with little effort. Federated instances basically do this in real time. Basically every stateful website uses a database and users have no control over what happens to the data in it - we just hope that admins are careful.

[–] Edie@hexbear.net 5 points 1 day ago (1 children)

It shouldn't be too difficult, I've made other shitty python scripts to do stuff with the API, I can whip up one in an hour? or something.

[–] Chana@hexbear.net 3 points 1 day ago (1 children)

Nice! I don't know if I personally need it yet so don't do any work just for me, ha! But parent might want it!

[–] Edie@hexbear.net 3 points 1 day ago (1 children)

I kinda wanna make it, just because I am unsure how technical the userbase is going to be so I need to add logging with messages describing whats happening, and I already have ideas for some stupid ones ("I'm being rate-limited, literally 1984", "honk shu mimimi")

[–] Chana@hexbear.net 2 points 1 day ago
[–] thelastaxolotl@hexbear.net 4 points 1 day ago (1 children)

It surely supports it, because before we had federation the delete button used to just delete posts and comments but not the account

[–] Chana@hexbear.net 3 points 1 day ago (1 children)

I'm sure! Deleting or editing any post must go through the API. Just need whatever authentication/authorization mechanism is needed, which for Lemmy (I believe) is a JWT.

[–] Edie@hexbear.net 3 points 1 day ago

Yup.

It's also the part I have never touched and am therefore unsure about.

[–] lapis@hexbear.net 7 points 1 day ago* (last edited 1 day ago)

it's worth noting that deleting posts here may not necessarily delete them on federated instances due to some fuckery with how federation works (this is especially true for posts federated to instances that have since been defederated on either end); all posts and comments made to federated social media should be assumed permanent.

[–] RedWizard@hexbear.net 8 points 1 day ago (1 children)

You could use the API to pull all your posts and delete them. My understanding is that posts that are deleted eventually become purged from the DB. Comments you can always undelete, so you would want to have your script edit the comment before deleting it. You'll have to respect the rate limits while doing that, which, I think, are part of the site json object.

[–] Edie@hexbear.net 10 points 1 day ago* (last edited 1 day ago) (1 children)

Comments you can always undelete

That isn't true anymore, they get deleted after 30 days.

It's still a fine idea to edit them, but I just wanted to correct it.

[–] RedWizard@hexbear.net 6 points 1 day ago

Oh, I didn't know that! That's good to know.

[–] purpleworm@hexbear.net 6 points 1 day ago (2 children)

I think there's an option in profile settings for deleting everything in the account but the account stays, and incidentally deleting the account doesn't delete the information.

[–] abc@hexbear.net 6 points 1 day ago (1 children)

Nope. You're thinking of the

'Delete all posts, comments and uploaded images' checkbox when you click on Delete Account inside of account settings.

Without that being ticked the account will be deleted but not the posts/comments.

[–] purpleworm@hexbear.net 2 points 1 day ago

In my defense, I used it one time a long time ago and it deleted everything but maintained my account, I guess due to a glitch.

[–] TheSpectreOfGay@hexbear.net 5 points 1 day ago

cant find that

[–] Hestia@hexbear.net 2 points 1 day ago

You can try reaching out to the mods, I believe they are able to do that