thed's comments

This article touches a point I have been wondering about regarding the Notice condition: "But web developers, as a whole, haven’t got the memo.".

The JavaScript and npm ecosystem are extremely dependency-heavy. Even if you only take a few yourself, the number of sub-dependencies of even a simple application are often in the hundreds.

Why does "everyone" ignore the attribution of their dependencies and sub-dependencies? Laziness? Risk of getting sued too low? What happens if Oracle buys all the left-pads in the world?

Is it possible? The metadata is easy to anonymize. Uniquely identifying features shown in the images (scars, etc)? Not without destroying them.

How much is the data worth for machine learning if you do not have access to the interpretation (and annotations) for the data? That is the hard part.

But. Is it ethical or even legal to do so without patient consent? No (at least not in my country).

No, picsafe does not solve the issues described in the article. What makes you think it does?

I think what to do first is really quite simple: Do not let back-end servers face the internet.