UPDATE: they have dropped Persona!

[liaizon@social.wake.st]

I say this as someone who has been actively using Open Collective for many years. Both as a place to donate to projects that I care about, and as a place to collect donations to various projects I have been a member of.

[julian@fietkau.social]

@liaizon Hold on – Open Collective and Open Source Collective are two different institutions, right? But they are both currently integrating Persona? Am I getting this right?

[liaizon@social.wake.st]

@julian Yes. I am very very disappointed.

[liaizon@social.wake.st]

Open Collective and Open Source Collective are two different entities. The Persona API is currently being added to Open Collective (https://github.com/opencollective/opencollective/issues/8609) and then being used by Open Source Collective to "Know Your Customer". This is a screenshot of the email sent to @scan's account for Margin (https://opencollective.com/margin)

[liaizon@social.wake.st]

Open Source Collective proudly lists the following "values" on their website
"we respect individual privacy"
https://oscollective.org/about

[liaizon@social.wake.st]

They are already testing integrating Persona's API with hosted projects on Open Collective that are using Open Source Collective (the fiscal host). Maybe you haven't heard of Persona yet?

"All of these personal details and images can be shared with Persona’s “global network of partners,” including vendors, law enforcement, and 17 “subprocessors” that sift through personal data on Persona’s behalf."

https://www.inc.com/kevin-haynes/privacy-expert-reveals-the-shocking-truth-of-what-happens-to-your-personal-data-when-getting-verified-on-linkedin/91306400

[liaizon@social.wake.st]

I wonder how @fdroidorg (https://opencollective.com/f-droid) feels about this? I have a feeling they wouldn't be too happy.

[cwebber@social.coop]

@liaizon oh no

[liaizon@social.wake.st]

I have a feeling @mollyim (https://opencollective.com/mollyim) might not want to be supporting this initiative.

[leonieke@squilla.vitaulium.eu]

@liaizon And you know @gotosocial is not going to like it!

[liaizon@social.wake.st]

@cwebber for fucks sake I really don't want to be the one to be unloading this sort of horrible news on the fediverse. I would so much rather shitpost about the protocol wars. But no one was talking about this and its so so depressing and they need to change course...

[liaizon@social.wake.st]

@leonieke they are using Open Source Europe luckily who is a different fiscal host https://opencollective.com/europe so at least they aren't currently affected (directly) tho its still Open Collective adding the API to the underlying project.

[leonieke@squilla.vitaulium.eu]

@liaizon Ahhhh, good to know - thanks! (Slightly relieved)

[lanodan@queer.hacktivis.me]

@liaizon Kind of wonder if it'll be legal on the non-US side of things (like in regards to GDPR) as that could add legal backing to opposing it.

[yacodes@mastodon.social]

@leonieke @liaizon it is also possible to support GoToSocial on LiberaPay https://liberapay.com/GoToSocial/. Which I cannot say about Guix, for example…

[seabass@social.seabass.systems]

Some unrelated privacy concerns about accessing the Open Source Collective funds have already been raised - so it's extra disappointing to me to see another dimension being added to the issue. Thanks for bringing this to our attention, @liaizon

[nullagent@partyon.xyz]

I work with an NPO which currently uses Open Collective and likely would vote to stop using Open Collective if this level of corporate doxxing is required to interact with their platform.

Don't dare open source hackers, we can switch/build services in a heartbeat.

We are not trapped like teenagers hooked on discord, we can simply leave and never look back if forced.

@liaizon @scan

[opsocket@mamot.fr]

@liaizon what's up @Betree ?

[leonieke@squilla.vitaulium.eu]

@yacodes Yeah, I've set up alternative payment there - waiting for approval

[liaizon@social.wake.st]

@seabass thanks for the reply Sebastian. I am a huge fan of F-Droid and a daily user. I have great respect for F-Droid and wish it the utmost success. This situation seems like it might need a quick response by the community and I think Open Collective must really not be thinking very deeply about who they are representing if they are making moves like this. I would hope this issue can be brought up internally and maybe some peer pressure from orgs like yours might really help this situation.