Live data from Hacker News

Facebook Secretly Saved Videos Users Deleted

nymag.com

371–380 of 405 posts

Re: Facebook Secretly Saved Videos Users Deleted

#372
post #69

Earlier quoted context omitted.

> great way to explain privacy limitations to a non-tech-savvy person is to walk them through using GPG. Have you ever actually successfully done this? More than once? And they continue to use it? It's a usability nightmare. https://moxie.org/blog/gpg-and-me/

OK. Maybe not GPG specifically. But keypairs. Everyone should understand keypairs. They are the basis for all of digital security, and they are really not that difficult.

Symmetric encryption is also popular and ubiquitous. I don't think this can be practically explained to most of the population of non-technical people. Encryption schemes also often use hybrids of symmetric and asymmetric encryption; they are useful for different scenarios.

Re: Facebook Secretly Saved Videos Users Deleted

#373

Earlier quoted context omitted.

"That made me realize that there are probably many people out there who think their files are safe as long as their Windows password isn't compromised even if the disc is not encrypted." Of course they assume it. Partly also because windows tells you, if you loose your password, you can no longer access your account, which is bs and they know it and tell you only for "felt Security". And encryption ... What is that?

Are you sure Windows is not showing you that message because you enabled encryption in your account? They encryption key is itself encrypted with your password, so the warning makes sense. https://en.wikipedia.org/wiki/Encrypting_File_System

Yes, very sure, because I recently had to "crack" several non encrypted Windows 10 PC's. And that message amused/angered me very much when it was 5 min work to prove that message wrong.

Re: Facebook Secretly Saved Videos Users Deleted

#374
post #370

Earlier quoted context omitted.

Edit: apologies, seems I read way too quickly! Thanks for pointing it out.

You seem to be commenting out of context: > generate a new encryption key every day for “data deleted today”, The question is not can we encrypt at storage. We’re now talking about encrypting as a soft-deletion method, which means we need to know everywhere the data is stored at deletion time , whether to delete it or to encrypt it with this new “deletion” key.

Thanks for raising that issue, I was somewhat confused by the mentioning of encryption as a soft-deletion method... it made precious little sense to me, but everybody seemed to go along with it and I thought I was missing something very fundamentally ’right’ about that idea. Turns out it’s not so.

Re: Facebook Secretly Saved Videos Users Deleted

#375
post #268

Earlier quoted context omitted.

Is there not a way to delete all posts and comments at once?

Facebook makes it very, very difficult. But there is a method using a Chrome browser extension, I've used this method recently with success: https://www.mariusschober.com/2018/01/20/delete-facebook-act... It will take some effort, but it's doable.

So your stuff is not deleted when you delete your account (soft or hard)?

Re: Facebook Secretly Saved Videos Users Deleted

#376
This was a bug. There was an old feature that used to allow you to record and post directly from the browser. Those videos were streamed to FB as they were being recorded. If you decided not to post those draft videos should have been deleted but were not. They showed up in download your information (DYI) as expected because that tool is designed to show you the data Facebook has about you. Thanks to New York Magazine for the flag. If you see anything in DYI that doesn't look right, let us know and we'll investigate. This was a bug, and we really do appreciate any help in finding them so we can fix them.

Re: Facebook Secretly Saved Videos Users Deleted

#377
post #376

This was a bug. There was an old feature that used to allow you to record and post directly from the browser. Those videos were streamed to FB as they were being recorded. If you decided not to post those draft videos should have been deleted but were not. They showed up in download your information (DYI) as expected because that tool is designed to show you the data Facebook has about you. Thanks to New York Magazin…

I downloaded my information and then deleted my account before realizing that the archive I downloaded did not include any of the photos or posts that I had been tagged in, because I made those posts only visible to me on my timeline.

Re: Facebook Secretly Saved Videos Users Deleted

#378
post #304
post #216

Earlier quoted context omitted.

Does it make it ok for Facebook to do it just because similar other companies do it? I say no, all of them should delete something I say to delete. And "everyone does it" is makes it a bigger problem, not a smaller one.

A lot of the big agile companies are using event sourcing. So there isn't even a model to delete. It's all events with the models being created from a snapshot of events. The event stream is usually durable and lives forever. https://martinfowler.com/eaaDev/EventSourcing.html So with this type of system nothing is ever "deleted". It's just an event that something is deleted. This is a common and very scalable system.…

You are supposed to delete old backups.

Re: Facebook Secretly Saved Videos Users Deleted

#379
post #216

Earlier quoted context omitted.

Does it make it ok for Facebook to do it just because similar other companies do it? I say no, all of them should delete something I say to delete. And "everyone does it" is makes it a bigger problem, not a smaller one.

Why would they? They implement their system the way they want to. Also, this is a completely logical way to deal with deletions. This is what I would do, (what I have done, when I created a simple CMS system). I don't want an endless quarrel with a customer, who "accidentally" deleted something and wants it back. I just turn the switch and it is back.

Why even have a delete button? Why lie to your customers about their privacy?

Re: Facebook Secretly Saved Videos Users Deleted

#380
post #173

You mean they follow what many people consider best practices? https://softwareengineering.stackexchange.com/questions/1592... https://stackoverflow.com/questions/820466/never-delete-entr... https://serverfault.com/questions/31455/should-i-ever-delete... https://www.infoq.com/news/2009/09/Do-Not-Delete-Data http://udidahan.com/2009/09/01/dont-delete-just-dont/ https://stackoverflow.com/questions/2549839/are-soft-dele…

From your first link:

> There is one class of data that you have to delete - and that's personal data that the user doesn't want you to hold any more. There may be local laws (e.g. in the EU) that makes this a mandatory requirement (thanks Gavin)

Post reply on HN