Live data from Hacker News

Request your personal information

amazon.com

61–70 of 89 posts

Re: Request your personal information

#61

Earlier quoted context omitted.

DownThemAll is a nearly 20 year old browser addon that can bulk-download links on a webpage.

Man, talk about a flashback. I remember DownThemAll. That was the way to scrape images off porn sites, back when porn sites only had images.

I remember creating a custom crawler in Delphi when images were behind LinkBucks ads.

I must have made someone rich back then.

Re: Request your personal information

#62
It was requesting my personal information from Amazon that made me decide to dump all my Alexa smart devices.

We had bought one for my in-laws and the Echo had picked up entire conversations between them even though the wake word had not been said. They were categorised under "Not intended for Alexa". My father in-law is at the end of his life, and I really hated the fact that deeply private and incredibly poignant conversations would probably be listened to by a human somewhere to better calibrate the device.

Re: Request your personal information

#63
post #41

Earlier quoted context omitted.

Fun fact (from 2012): some credit cards had more than one CCV. You could find out by simply trying all 1000 combinations on some web shops. Back then, I did security consulting and we knew a shop or two where it was possible to enumerate the CCVs without submitting an order and without being blocked. Not sure if this is still valid nowadays, but it blew my mind as well.

Even better fun fact: There’s some issuers that won’t validate your CVV at all, so any of the 999 options work for those cards.

[deleted]

Re: Request your personal information

#64
post #48
post #15

Earlier quoted context omitted.

I would encourage people to do so for the exact reason. Personal data should be managed in a way that such requests can be processed. It is OK if it hurts a bit. It is the idea of the GDPR that companies establish scalable processes that allow things like requests, migration and deletion. The only thing you need to do is to verify that to the best of your knowledge it is complete. What should not happen is that compa…

Do you also check your grocery stores preparedness for fire for the same reason? Or your local banks preparedness for robbery? Hopefully not. In business all decisions are made based on a risk tradeoff. Like people it never has enough money to do everything it wants. Not all companies are started 12 months ago and hence cannot (by definition) do this right "from the beginning". Also some businesses have a requirement…

If all data can't be handed over to the users, why are they relying on fallible humans to do the filtering? They should be itching to automate it, and have had half a decade to accomplish it by now.

Note that "bound by corporate secrets" is not a legit reason to not hand over or data. There are legit reasons for not handing data over, but just the interests of the company are not it. It sounds like you've been working with bad actors who are not only refusing to invest in regulatory compliance, but are wilfully using bad processes to mask their non-compliance. Why are you making excuses for them?

Re: Request your personal information

#65

> We will provide your information to you as soon as we can. Usually, this should not take more than a month. What benefit does Amazon get out of delaying giving out this information?

> What benefit does Amazon get out of delaying giving out this information?

The same as the German police gets: the opportunity of checking if they actually are allowed to store the data they have on you.

There are next to no audits on the big data warehouses... not of cops, not of corporations, not of enterprises that are a mixture between cops and corporations (cough Palantir), which means they will scoop up all data they can get their hands on, and keep it as they like (Europol is currently under fire for that one [1]). And only when people actually inquire on the data that the cops, Amazon or whatever else have on them, then they look if they are actually allowed to keep the data - if not, it gets quietly deleted. But as it's only a tiny fraction of the population that exercises their GDPR rights, the big data warehouses get away with keeping 99.999% of stuff they should not legally be allowed to keep.

As for Amazon: they, for example, still have my orders from 2011 on their system, despite the legal mandate to keep these around being only for ten years [2].

There should be a legal requirement for all corporations and government agencies to send out a "data dump" to every citizen every year. People have absolutely no idea what troves of data exist about them.

[1]: https://netzpolitik.org/2022/europol-eu-polizeibehoerde-laes...

[2]: https://www.gesetze-im-internet.de/hgb/__257.html

Re: Request your personal information

#66
post #64
post #48

Earlier quoted context omitted.

Do you also check your grocery stores preparedness for fire for the same reason? Or your local banks preparedness for robbery? Hopefully not. In business all decisions are made based on a risk tradeoff. Like people it never has enough money to do everything it wants. Not all companies are started 12 months ago and hence cannot (by definition) do this right "from the beginning". Also some businesses have a requirement…

If all data can't be handed over to the users, why are they relying on fallible humans to do the filtering? They should be itching to automate it, and have had half a decade to accomplish it by now. Note that "bound by corporate secrets" is not a legit reason to not hand over or data. There are legit reasons for not handing data over, but just the interests of the company are not it. It sounds like you've been workin…

Recital 63 of the GDPR disagrees with you

"That right should not adversely affect the rights or freedoms of others, including trade secrets or intellectual property and in particular the copyright protecting the software."

Btw. I am not a laywer, but I have worked with this stuff for half a decade..

Re: Request your personal information

#67
post #64
post #48

Earlier quoted context omitted.

Do you also check your grocery stores preparedness for fire for the same reason? Or your local banks preparedness for robbery? Hopefully not. In business all decisions are made based on a risk tradeoff. Like people it never has enough money to do everything it wants. Not all companies are started 12 months ago and hence cannot (by definition) do this right "from the beginning". Also some businesses have a requirement…

If all data can't be handed over to the users, why are they relying on fallible humans to do the filtering? They should be itching to automate it, and have had half a decade to accomplish it by now. Note that "bound by corporate secrets" is not a legit reason to not hand over or data. There are legit reasons for not handing data over, but just the interests of the company are not it. It sounds like you've been workin…

Also, none of my ccustomers refuse it.

This specific customer spends around two days of worktime (including legal) on every request.

They are unfortunately for them bound by a lot of regulation (and governmental oversight) that normal companies are not and the take the GDPR extremely serious.

Re: Request your personal information

#68
post #53

Earlier quoted context omitted.

Please don’t feel guilty asking what information a company like Amazon knows about you. They have the engineering, human and computing resources to make this as scalable as it needs to be. If anything you’ll be creating more jobs for people who need it. I say this as a stock holder and someone who believes this information should be available. [edit: very small amount of stock but relevant I suppose]

I agree about Amazon (and the other FAANGs) but not necessarily about any other business..

I think that was implied by "a company like Amazon".

Re: Request your personal information

#69

Earlier quoted context omitted.

DownThemAll is a nearly 20 year old browser addon that can bulk-download links on a webpage.

Some of us were in Kindergarten about then so we would have missed the original Show HN for that. Glad to have found it eventually though.

I know I'm not supposed to comment when it doesn't add to the conversation, buuuut, your reply made me literally laugh out loud. Thank you for this! I often forget being ~40 means I'm no longer ~20 and that there are people who are actually ~20 out on the internet...
Post reply on HN