Facebook Secretly Saved Videos Users Deleted • Hacker News Board

Re: Facebook Secretly Saved Videos Users Deleted

#401

Post by kough » Tue, Apr 03, 2018, 8:35 PM UTC

schrep wrote: post #383

kough wrote: post #377

Earlier quoted context omitted.

I downloaded my information and then deleted my account before realizing that the archive I downloaded did not include any of the photos or posts that I had been tagged in, because I made those posts only visible to me on my timeline.

If these are posts by other people that you were tagged in then those posts should still be up, just without the tags of you, on the original posters timeline.

Sure, this just doesn't do me any good because I don't have them archived or any ability to access them :)

Re: Facebook Secretly Saved Videos Users Deleted

#402

Post by nasredin » Wed, Apr 04, 2018, 10:39 AM UTC

ahmedalsudani wrote: post #320

nasredin wrote: post #274

Earlier quoted context omitted.

You are getting off one boat and getting on the other one. Destination is the same. Any centralized communication network is by definition insecure (one point of failure). Maybe try Tox. https://tox.chat/ Telegram copperating with Iran https://news.ycombinator.com/item?id=16039859

Signal and Telegram are very different. Signal has always been an open source project that allows you to audit the source and run your own server if you so desire [1]. It’s a project that has always put security first but made some compromises for usability — very different from Telegram which has put expansion and monetization first — and it was started by Moxie Marlinspike whose views and contributions are well-kno…

>>With Signal, it is not a single point of failure. The Android, iOS, desktop apps all do end-to-end encryption.

I meant DoS attack not encryption.

AFAIK all of these secure "apps" are NOT decentralized.

So if you can just block a certain IP, you'd have successfuly performed a DoS attack.

Re: Facebook Secretly Saved Videos Users Deleted

#403

Post by dalore » Wed, Apr 04, 2018, 12:03 PM UTC

untog wrote: post #395

dalore wrote: post #385

Earlier quoted context omitted.

Not at all. All my reasons were technical in that events are part of a stream, and delete is just one more event. When you reconstruct the stream, the end product is the item is deleted. But you could recreate the item from the stream so technically not deleted. Companies that take daily backups. Say a user asked to delete something, do they now go through and comb through their backups (which might even be offsite o…

Choosing to adopt a technology that makes deletions impossible absolutely shows a lack of respect for user decisions. Not building in the ability to deep delete from backups is the same. There is no technical restriction on deleting data, just company decisions that make it difficult.

Isn't every business that has backups in the same boat? Event sourcing is just like having continuous backup.

So you're saying that every company that has a backup system, and who don't regularly go through the backups and remove individual files from the backups because users requested it is a lack of respect? So companies that have offsite backups should, according to you, have policies in place where user data is also removed from offsite backups?

Re: Facebook Secretly Saved Videos Users Deleted

#404

Post by dalore » Wed, Apr 04, 2018, 12:04 PM UTC

fjsolwmv wrote: post #378

dalore wrote: post #304

Earlier quoted context omitted.

A lot of the big agile companies are using event sourcing. So there isn't even a model to delete. It's all events with the models being created from a snapshot of events. The event stream is usually durable and lives forever. https://martinfowler.com/eaaDev/EventSourcing.html So with this type of system nothing is ever "deleted". It's just an event that something is deleted. This is a common and very scalable system.…

You are supposed to delete old backups.

Why? Disk space is cheap.

Re: Facebook Secretly Saved Videos Users Deleted

#405

Post by eitland » Wed, Apr 04, 2018, 2:56 PM UTC

akotulski wrote: post #367

eitland wrote: post #248

Earlier quoted context omitted.

> and Russian subpoenas for their master private keys. While I cannit defend (or attack, I'm no cryptographer) their crypto they seem to have a solution to this: They say they don't store keys in the same datacenter or even jurisdiction as the customer data they protect. According to them this means getting unencrypted data through a legal process would mean getting a warrant in two or more countries at once.

> They say > According to them I find it very hard trusting their word. And we know the company has the ability to read messages. How is telegram better from FB messenger?

Sorry for my late reply:

> And we know the company has the ability to read messages.

I don’t think we actually know that.

In fact I think they have a system to keep data and keys apart and in different jurisdictions to prevent USA, Russia or anyone from being able to get access to it.

I am no cryptographer or legal expert though.

> How is telegram better from FB messenger?

This is a bit simpler: while Facebook messenger might be E2E encrypted I have good reason to believe that Facebook will datamine my metadata and sell it to however wants to pay.