Live data from Hacker News

Instagram kept deleted photos and messages on its servers for more than a year

theverge.com

31–40 of 205 posts

Re: Instagram kept deleted photos and messages on its servers for more than a year

#31
post #18
post #8

I want to know if the photos are securely deleted. It's not enough that the mere reference to a file is gone. I want everything overwritten with zeroes, and the photo made properly irrecoverable.

They are definitely not. I’m honestly surprised at how many folks here on HN (a presumably tech savvy crowd) think that Instagram (or any tech co) is “writing zeros” when a user hits a delete button.

Because they should. Incidentally, you are not doing Square any favors with these comments.

Re: Instagram kept deleted photos and messages on its servers for more than a year

#32

> "The researcher reported an issue where someone’s deleted Instagram images and messages would be included in a copy of their information (...) We’ve fixed the issue" This makes it sound like they consider "you could see it" the issue, not "we were still keeping it". In other words, the fix was to hide it, not to delete it. If I were the Irish DPA (and actually wanted to do my job and had the resources to, instead o…

Why small fines initially? I’d like to see privacy fines being used to make lots of money like traffic fines are used today. It’s a way to tax tech companies in your jurisdiction with the added benefit of improving privacy.

Re: Instagram kept deleted photos and messages on its servers for more than a year

#33
> When you delete something from Instagram you expect it to be gone for good

Ohh do I have some bad news for you.

Seemingly everyone in this industry can’t or won’t design databases and applications to actually allow for data to be deleted.

Re: Instagram kept deleted photos and messages on its servers for more than a year

#34
post #24

Few months ago I requested my data from Discord. Interestingly enough, it didn't include my messages from server that was deleted some time before that.

Internal sources at Discord confirmed to me (a few months ago, so may be outdated) that deleted messages are fully gone from the servers within hours of deletion.

Deleted files hang out longer but are gone within a month.

Re: Instagram kept deleted photos and messages on its servers for more than a year

#35
And if they delete it faster another vocal faction will start to whine that they enable racists, sexists etc to abuse.

Tomorrow at slate "How instagram permanent delete perpetuates white supremacy"

There is no policy that could satisfy all.

Re: Instagram kept deleted photos and messages on its servers for more than a year

#36

This sort of practice is not limited to just Instagram. Plenty of places that do soft deletes when they should be doing hard deletes. Data life-cycles are about the poorest understood subject in startup land. Ingestion is usually top notch, friction free and heavily automated. Deletion - assuming it even exists - is semi automatic or even manual, full of friction and usually incomplete or broken. You see a similar pa…

I have seen people giving advice to retain trial, inactive and deleted accounts for a little while so they can analyze and train their ml models in startup groups.

Re: Instagram kept deleted photos and messages on its servers for more than a year

#37
post #17

Earlier quoted context omitted.

A fine for what? Not fixing a minor bug in a timely fashion? That’s not a road we want to travel down.

This is not a 'minor bug'. This is a major oversight and possibly a regulatory issue. The user owns the data. The user has rights.

Instagram doesnt use the word 'delete'. It uses 'unsent' for messages.

So removed from other person's chat. Still associated with your account

I have my account data from last year. Time to dig into it and sue instagram.

Oh wait. I'm not in the EU. I'm in India, where they can even sell my info. So they definitely didn't delete it

Re: Instagram kept deleted photos and messages on its servers for more than a year

#38
post #9

We know that HN is visited by a fair share of Facebook employees. Can some of you weigh in (anonymously?) on this topic? Do you guys do hard deletes of user data instead of just soft deletes? If so, are logs or backups kept? For how long? In other words: if I'm a user of $POPULAR_SERVICE and I delete my account at time t0, is there a t1 > t0 after which every trace of my data is gone from the platform? My (cynical) g…

Deletion is a risk. It's much safer to just say it's deleted...

Re: Instagram kept deleted photos and messages on its servers for more than a year

#39
post #8

I want to know if the photos are securely deleted. It's not enough that the mere reference to a file is gone. I want everything overwritten with zeroes, and the photo made properly irrecoverable.

Always encrypt the data at rest, and delete by deleting the key is likely how this would be done. This way you can also delete e.g. tape backups without actually loading the tape and re-writing the whole thing with certain portions deleted, which is not really practical.

Re: Instagram kept deleted photos and messages on its servers for more than a year

#40

> When you delete something from Instagram you expect it to be gone for good Ohh do I have some bad news for you. Seemingly everyone in this industry can’t or won’t design databases and applications to actually allow for data to be deleted.

And let's not get started on backups.
Post reply on HN