81–90 of 205 posts
Earlier quoted context omitted.
They are definitely not. I’m honestly surprised at how many folks here on HN (a presumably tech savvy crowd) think that Instagram (or any tech co) is “writing zeros” when a user hits a delete button.
Because they should. Incidentally, you are not doing Square any favors with these comments.
Earlier quoted context omitted.
Instagram doesnt use the word 'delete'. It uses 'unsent' for messages. So removed from other person's chat. Still associated with your account I have my account data from last year. Time to dig into it and sue instagram. Oh wait. I'm not in the EU. I'm in India, where they can even sell my info. So they definitely didn't delete it
Pulling linguistic tricks typically does not amuse regulators.
Earlier quoted context omitted.
Because they should. Incidentally, you are not doing Square any favors with these comments.
I guess? I'm trying to inform folks about data deletion works. And I'm surprised more people here are unaware of how data is stored at large (and small) tech co's.
For your sake I hope that Square plays it as much as they can by the book, and that if they don't that this will cause them to wake up to the fact that all it takes is one employee blabbing online to get them into seriously hot water.
People here are on average quite aware of how data is stored, but they are not always empowered to make the call on how it should be stored. As long as that happens behind the curtain it is a problem, but not a huge problem for any particular company.
You have just raised Square's profile in many ways at once, not in the least by alerting the hacker community to the fact that Square has a lot more data than they should and that their security measures are not exactly top notch. The consequences could be substantial especially when that deleted data turns up in a dataleak. When you represent your employer online be careful about what you say and write.
Earlier quoted context omitted.
You are several years out of touch with the regulatory environment. The GDPR is pretty clear about this sort of thing and if you do not actually delete data upon request but pretend you do that might not be construed to be an accident but willful. Your comments in this thread provide further evidence that this is in fact the case.
It's also clear about how to request your data be deleted! Clicking delete in the instagram app does not constitute a request to be forgotten. The GDPR does not allow for your data to selectively be forgotten either. You can request that they forget all of you, but not individual pieces of data.
https://en.wikipedia.org/wiki/Right_to_be_forgotten
vs
This sort of practice is not limited to just Instagram. Plenty of places that do soft deletes when they should be doing hard deletes. Data life-cycles are about the poorest understood subject in startup land. Ingestion is usually top notch, friction free and heavily automated. Deletion - assuming it even exists - is semi automatic or even manual, full of friction and usually incomplete or broken. You see a similar pa…
I have seen people giving advice to retain trial, inactive and deleted accounts for a little while so they can analyze and train their ml models in startup groups.
Some real (understandable) ignorance about how the tech industry works in this article. There should be no expectation that Instagram ever deletes anything permanently from their servers. The bug was showing users photos that were internally marked as deleted. Not that the photos were not in fact removed from Instagrams servers.
> There should be no expectation that Instagram ever deletes anything permanently from their servers. No, there should be this expectation. If I have a photo of myself that I'm not comfortable being saved somewhere, there should be an expectation that when I delete this from a service, that service will actually delete it. The expectation should be that the service will do what it said, not that it hid everything ver…
Earlier quoted context omitted.
Google takes deletes seriously. Extreme efforts go into deleting stuff within 30 days of the user requesting deletion. Imagine how hard that is when a datacenter is switched off for 14 days for maintenance, and then a fire breaks out and takes it offline for a further 20 days... When something is powered off, it's very hard to do those deletions... Yet misses of the deadline are exceedingly rare, even in cases like t…
.
Earlier quoted context omitted.
I guess? I'm trying to inform folks about data deletion works. And I'm surprised more people here are unaware of how data is stored at large (and small) tech co's.
You must be aware that Square is operating a service in a regulated field (fintech) and that openly advertising their possibly illegal business practices is not to their advantage. Let's assume that everything you've said is true that could come in handy one day when a regulator is looking to determine the difference between whether this is an oversight or willful. You are making their job a lot easier and Square's s…
This sort of practice is not limited to just Instagram. Plenty of places that do soft deletes when they should be doing hard deletes. Data life-cycles are about the poorest understood subject in startup land. Ingestion is usually top notch, friction free and heavily automated. Deletion - assuming it even exists - is semi automatic or even manual, full of friction and usually incomplete or broken. You see a similar pa…
Or invoke COPPA and say your 11 year old cousin used your account, can’t remember what they did, but wants it all removed now.