71–80 of 205 posts
I want to know if the photos are securely deleted. It's not enough that the mere reference to a file is gone. I want everything overwritten with zeroes, and the photo made properly irrecoverable.
Is this something you would actually expect from a media sharing/storage site?
> Pokharel discovered the bug in October last year and says it was fixed earlier this month (2020, august) Shouldn't there be fines for this? Took almost an year after being reported.
A fine for what? Not fixing a minor bug in a timely fashion? That’s not a road we want to travel down.
> When you delete something from Instagram you expect it to be gone for good Ohh do I have some bad news for you. Seemingly everyone in this industry can’t or won’t design databases and applications to actually allow for data to be deleted.
Earlier quoted context omitted.
Soft deletes. This is always the case. Not just at Facebook, it is just standard practice across tech co’s.
Do you have a source?
here is one not particularly recent discussion https://news.ycombinator.com/item?id=954393
Now that I think of it I would probably have done soft delete if I got around to automating deleting accounts at my old startup for lots of reasons.
on edit: another more recent article https://news.ycombinator.com/item?id=23005060
Earlier quoted context omitted.
> There should be no expectation that Instagram ever deletes anything permanently from their servers. No, there should be this expectation. If I have a photo of myself that I'm not comfortable being saved somewhere, there should be an expectation that when I delete this from a service, that service will actually delete it. The expectation should be that the service will do what it said, not that it hid everything ver…
Unfortunately this isn't how computer storahe works. This is why the military have acid baths for their disk drives.
Here's an answer I pulled from reddit:
If you are appropriately using TRIM the data will be obliterated when 'garbage collection' occurs -- forensics will not be able to recover deleted data. This is going to be largely dependent on your OS and Hardware, but if you confirm TRIM is working correctly in your setup, shortly after you permanently delete something (not recycle bin or trash) it will be gone for good.
The answer is that simple.
Supporting data: http://forensic.belkasoft.com/en/why-ssd-destroy-court-evide... http://digitalforensicsmagazine.com/blogs/?p=271 http://www.mcgoverngreene.com/advoedges/AE_pdfs/2011_pdfs/AE... http://www.forensicswiki.org/wiki/Solid_State_Drive_(SSD)_Fo...
There's also this as a less reliable added measure:
http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml
The main takeaway is that people vastly exaggerate how recoverable disks are, making any effort at all will stop 99.9% of hackers trying to recover data.
Earlier quoted context omitted.
Yes, especially backups and log files are hard. The databases are relatively easy if they allow for in place overwrites or compaction of tables. Even then you have to be careful. Data is funny that way. It is easy to acquire, easy to lose if you want to keep it and devilishly hard to get rid of for real if that is what you want to do.
The vast majority of companies I've seen consider issuing "SQL DELETE" is sufficient for GDPR compliance. One day, they will be burned when some investigation finds out that those rows are still sitting in uncompacted tables, or on now-unallocated disk blocks, or on now-remapped SSD sectors. The only way to be sure the data is deleted is to copy all the data you want to keep to a new drive and burn the old one. Anyth…
Secure erase is a contractual requirement for many relationships, it is interesting that none of the major db vendors as far as I know have a secure delete option.
There are lots of tricks and attempts to work around it but no official support for such functionality afaik. And that's before we get into VM snapshots, database snapshots, backup copies, copies that were made by developers or data scientists for test purposes (of course, nobody ever does that) and so on. Nasty little problem.
[+] or some employee shooting their mouth off in an online forum.
Earlier quoted context omitted.
Soft deletes. This is always the case. Not just at Facebook, it is just standard practice across tech co’s.
Google takes deletes seriously. Extreme efforts go into deleting stuff within 30 days of the user requesting deletion. Imagine how hard that is when a datacenter is switched off for 14 days for maintenance, and then a fire breaks out and takes it offline for a further 20 days... When something is powered off, it's very hard to do those deletions... Yet misses of the deadline are exceedingly rare, even in cases like t…
Earlier quoted context omitted.
Soft deletes. This is always the case. Not just at Facebook, it is just standard practice across tech co’s.
Google takes deletes seriously. Extreme efforts go into deleting stuff within 30 days of the user requesting deletion. Imagine how hard that is when a datacenter is switched off for 14 days for maintenance, and then a fire breaks out and takes it offline for a further 20 days... When something is powered off, it's very hard to do those deletions... Yet misses of the deadline are exceedingly rare, even in cases like t…
Some real (understandable) ignorance about how the tech industry works in this article. There should be no expectation that Instagram ever deletes anything permanently from their servers. The bug was showing users photos that were internally marked as deleted. Not that the photos were not in fact removed from Instagrams servers.
You are several years out of touch with the regulatory environment. The GDPR is pretty clear about this sort of thing and if you do not actually delete data upon request but pretend you do that might not be construed to be an accident but willful. Your comments in this thread provide further evidence that this is in fact the case.
The GDPR does not allow for your data to selectively be forgotten either. You can request that they forget all of you, but not individual pieces of data.