W Don't Have Time
@wdonthavetime.selfhosted.social
"Trust community, not wealth"
Holding power accountable on the open social web.
https://woosh.link/wdonthavetime.selfhosted.social
Holding power accountable on the open social web.
https://woosh.link/wdonthavetime.selfhosted.social
That's a funny joke Denys 🤣
October 12, 2026 at 9:38 PM
That's a funny joke Denys 🤣
Finding and reporting on the data that @wsocial.eu lists publicly was also very simple. Here are the scripts we use to inspect the #WSocial PDS → pds.wsocial.network
tangled.org/wdonthavetim...
#WSocialFacts #Wned
tangled.org/wdonthavetim...
#WSocialFacts #Wned
wdonthavetime.selfhosted.social/wsocial-reporting
Scripts for observing public data on the W Social PDS, pds.wsocial.network. They only read what the server already makes public, and none of them need a login.
tangled.org
October 12, 2026 at 8:45 PM
We are flattered by the compliment @ingmar.wsocial.eu but one can build a little website in an afternoon. Unlike @wsocial.eu , we practice real transparency. Our code is free, open source, inspectable, and available on @tangled.org →
tangled.org/wdonthavetim...
#WSocialFacts #Wned
tangled.org/wdonthavetim...
#WSocialFacts #Wned
October 12, 2026 at 8:44 PM
It's funny then to insinuate that we "found a way to hack W Social (and probably Bsky)" without any facts. We published a site where anyone can verify our claims. We shared a link to source code and tagged @wsocial.eu . Your team could easily inform yourselves about our method, but haven't yet.
October 12, 2026 at 8:42 PM
It's funny then to insinuate that we "found a way to hack W Social (and probably Bsky)" without any facts. We published a site where anyone can verify our claims. We shared a link to source code and tagged @wsocial.eu . Your team could easily inform yourselves about our method, but haven't yet.
We can assume from your avoidance of the question that you, like us, don't believe the average user would understand that their data will be published to the open web where W cannot retain full control.
October 12, 2026 at 8:23 PM
We can assume from your avoidance of the question that you, like us, don't believe the average user would understand that their data will be published to the open web where W cannot retain full control.
Here's the script used to read your public PDS. You can use regular expression to find the emails and birthdays yourself.
tangled.org/wdonthavetim...
Surprised that in the days since W was approached by journalists that nobody on your team has found them. Has nobody tried? You clearly know how!
tangled.org/wdonthavetim...
Surprised that in the days since W was approached by journalists that nobody on your team has found them. Has nobody tried? You clearly know how!
reports/wsocial-moderation/README.md at main · wdonthavetime.selfhosted.social/wsocial-reporting
Scripts for observing public data on the W Social PDS, pds.wsocial.network. They only read what the server already makes public, and none of them need a login.
tangled.org
October 12, 2026 at 8:23 PM
Here's the script used to read your public PDS. You can use regular expression to find the emails and birthdays yourself.
tangled.org/wdonthavetim...
Surprised that in the days since W was approached by journalists that nobody on your team has found them. Has nobody tried? You clearly know how!
tangled.org/wdonthavetim...
Surprised that in the days since W was approached by journalists that nobody on your team has found them. Has nobody tried? You clearly know how!
We didn't "hack" anything. You seem like a smart and fair person, and calling this a "hack" or trying to spread blame to bsky is a bit silly. We searched public data on the WSocial PDS and DOBs, full legal names, nationalities, and email addresses are there to be seen.
October 12, 2026 at 8:23 PM
We didn't "hack" anything. You seem like a smart and fair person, and calling this a "hack" or trying to spread blame to bsky is a bit silly. We searched public data on the WSocial PDS and DOBs, full legal names, nationalities, and email addresses are there to be seen.
We’re not that smart, sorry 😊
October 12, 2026 at 5:55 PM
We’re not that smart, sorry 😊
Reposted by W Don't Have Time
A waitlist survey tells you what users wanted. It is not a legal basis, it is not consent, and it binds nobody who verified in September. Any verified user can put all of the above to IMY in Sweden or their own data protection authority. That's Art. 77.
October 11, 2026 at 8:46 PM
A waitlist survey tells you what users wanted. It is not a legal basis, it is not consent, and it binds nobody who verified in September. Any verified user can put all of the above to IMY in Sweden or their own data protection authority. That's Art. 77.
This means hundreds of users have their full legal names (inc middle names) and nationalities and emails and DOBs visible in their verification records and profile data. This includes many users without any display names (blank) or using pseudonyms.
October 11, 2026 at 11:08 AM
This means hundreds of users have their full legal names (inc middle names) and nationalities and emails and DOBs visible in their verification records and profile data. This includes many users without any display names (blank) or using pseudonyms.
There has been some confusion that we are happy to clarify. There is an 'ApproxBirthDate' field, and yes, this is obfuscated. And *also*, there are many real DOBs and emails also visible in the data. We can't say intentionally or accidentally.
October 11, 2026 at 11:08 AM
There has been some confusion that we are happy to clarify. There is an 'ApproxBirthDate' field, and yes, this is obfuscated. And *also*, there are many real DOBs and emails also visible in the data. We can't say intentionally or accidentally.
Reposted by W Don't Have Time
We've been doing social media analytics for well over a decade, no other social media platform provided public age data per account like this
Facebook has user_birthday but users must authorize the app to read their own data, not of any account!
Have we not learned anything from Cambridge Analytica
Facebook has user_birthday but users must authorize the app to read their own data, not of any account!
Have we not learned anything from Cambridge Analytica
October 10, 2026 at 12:05 PM
We've been doing social media analytics for well over a decade, no other social media platform provided public age data per account like this
Facebook has user_birthday but users must authorize the app to read their own data, not of any account!
Have we not learned anything from Cambridge Analytica
Facebook has user_birthday but users must authorize the app to read their own data, not of any account!
Have we not learned anything from Cambridge Analytica