X(Twitter)非公式拡張OldTweetDeckの開発者dimden氏が開発している新しいSNS「Whispy」についての周辺ツイートまとめ

Mircoxi 🦊 @mircoxi

Opening with a disclaimer that I am at least passively interested in @whispy and none of this is intended to try and tear it down, but they are questions that should be answered and are important (both from myself, and questions I've seen others ask that didn't really get an answer and I've seen other startup sites make a lot of the same mistakes (hell, I've been paid to fix some of these mistakes after the fact), so I'm approaching this both as a potential user and someone who understands the dev/legal side of this to a degree I appreciate some of these will need a little think but I strongly and sincerely encourage the devs to think about and come up with satisfactory answers before getting carried away! I'm not gonna be the only one who wants answers to these. I'm basing "this isn't answered" solely on the site and official Twitter - @d1mden is the dev but it's a personal account so it's difficult to go through and see what's been answered there (but I'll pull through knowledge of the tweets I have seen) I'll start with easier stuff to answer and gradually go through to the harder stuff 1) It's been mentioned in a few tweets that porn/hentai will be allowed. Fine as a policy, but have you checked your server host allows it? 95% of them seem to have a blanket ban on adult content now (including most of the budget hosts). 2) What exactly are you defining as "good search"? You have Whispy and Twitter marked as having good search, but I thought most people agreed Twitter's was mid at best. 3) What security features will the site have for users? Have you taken into account DM abuse, stalking, etc? 4) On that note, do you plan on allowing users from Europe? How do you plan on complying with the GDPR (which applies regardless of where the host/owners are as soon as you allow EU-based users)? If Threads has decided it's too hard, how is Whispy planning to? 5) Related to the GDPR - According to the privacy policy, a LOT of information is collected when someone signs up for the mailing list. What's the legitimate interest for collecting all this? Data Protection regimes around the world require the minimum necessary information to be collected for a given purpose, a lot of what's stated is categorically not required for a mailing list. 6) Alongside the GDPR, how do you plan on dealing with other regional requirements? Online Safety Act in the UK? KOSA in the US? Any others that crop up? What about ISO27001 or ISO9001 compliance? 7) We need to talk about funding. You've made many replies saying there's no VC behind this, that there's no monetisation plan, that you'll figure it out later and Patreon is fine for now - in short, it's a big "idk lol". You also mention you're too broke to set up a company to back it - from what I can see, setting up a Ukrainian company isn't very expensive. If you can't afford that, how can you afford to run the servers? How will you cope with the initial interst, and growth? Have your plans factored in that most people don't want to pay for social media? 8) I don't have any issue with the WHOIS privacy, but you've stated it's so you don't get doxxed - are you aware that if you do indeed create an app, you're required to have your name, address, and contact phone number listed on the app page? 9) If you're not setting up a company, you personally are liable for everything on the site. It's awful to think about, but at some point, you will have an issue with illegal content in some form. Are you prepared for that? 10) Have you considered getting someone dedicated to communications, to avoid the dismissive "just check the website lol..." kind of replies to questions? And of course, the big one: Most of the replies to questions seem to be very people-pleaser-ish. Are you sure you can actually follow through on everything you're promising? What makes you think you can, given all the above, where others couldn't? Again all of this is coming from a place of interest, but these are all the same mistakes I've seen other startups make (some with actual money and names behind them) by ignoring it and then suddenly tucking tail once they realise that actually, they do need to deal with this stuff

dimden @d1mden

@mircoxi @whispy 1) it allows it 2) it can actually search; it has hashtags 3) you'll be able to switch who can dm you, block and report users 4) we do, i think threads just collect so much ad data it's impossible for them while we wont

dimden @d1mden

@mircoxi @whispy 5) all cases are described in policy, we need it to know in which language to send email and to make it possible to localize emails to specific country 6) not sure yet 7) servers are pretty cheap while setting up company is not

dimden @d1mden

@mircoxi @whispy 8) im fine with name exposed but dont want address to be, i do plan to make a company with virtual office for this 9) we'll try to get a company created 10) whispy is is basically still a personal project at this point in time, i mean obv in future we'll need this but rn its ok

Mircoxi 🦊 @mircoxi

I appreciate you taking the time answering, but I do need to be clear that some of this stuff is law and directly impacts how you handle user data, which is almost certainly going to include intimate data as well - it's stuff that needs fully detailed policies in place very early in development so it can be designed around, "idk we'll deal with it later" and "yea we do" is NOT an acceptable answer to how you intend to deal with data protection stuff and the law in various countries I'm also gonna dispute your response to 5 - there's no need to collect the user's IP or country for it. Just using navigator.language to get their preferred language is enough for that.

Mircoxi 🦊 @mircoxi

Like I said in the OP I sincerely encourage you to get the dev team together and hash this stuff out properly, because these are basically non-answers that are ultimately just "trust me bro", and that, unfortunately, seems to be the trend in what the responses to questions are - you've already had a few people show up (mostly from Japan, it seems?) who've pointed out that that isn't really good enough, and they're not wrong, this is important stuff - you'll have normal users as well as people like me who Know Things picking over the policy and everything you've said about stuff, so it really is something that needs dealing with since it's pretty discouraging from a potential user standpoint to find out that none of this seems to really have been thought of, alongside the general dismissiveness of what seem to be sincere questions from others

dimden @d1mden

@mircoxi @whispy ip is collected to prevent abuse and is already used for that purpose