What I did?
ipfs add -w sensitive.pdf
- pin the file on pinata.cloud
- actually look at the file and regret, unpin it on pinata.cloud
- How can I remove a directory and all its contents?
What is the deal with sensitive.pdf?
I volunteer in an association. We had an issue that our rules in service Y are not up-to-date and in our discussion channel there was the
sensitive.pdf uploaded (not it’s real name by the way) and as I needed a publicly accessible place to host it and as the file is not supposed to be change and I thought it was supposed to be public, I uploaded it to IPFS.
When I looked into it closer, I found it to contain full name, street address, phone number and email address of two of our activists, so it would have been sensitive and violating privacy laws even before GDPR.
How do I wish to go forwards
I understand that if the content has been pinned by someone/something(g) else(s), it will be on IPFS permanently, but I still wish to know as surely as possible that my IPFS nodes are not hosting
sensitive.pdf (without having to
rm -rf ~/.ipfs which is the nuclear opinion and would take down a lot of non-offending content also) so in case there were legal consequences, I could say that I have done what I can towards taking the offending content down. I don’t think legal consequences are very likely though as the
sensitive.pdf looks formal and makes me think it may be available from a public registry for a fee.
I also find the knowledge of what to do in this case important for the future as I doubt I am the only IPFS user ever to make this mistake, even if I may be the first to come out on what I did wrong in so much detail.
I have heard of content blacklists, but I don’t know if GDPR one exists yet and I would like to avoid that as it would be a source where to find personal data, but in case I change my mind, it would be nice to know of where it is.
How do I know the content is still online?
I originally uploaded and (hopefully) unpinned it three days ago and have been infrequently checking it through Tor Browser (definitely doesn’t have IPFS Companion installed) and ipfs.io gateway hoping to see something else than the file to hint that it has been GC:ed and is out of the network.