Live data from Hacker News

You can't leak users' data if you don't hold it

seancoates.com

111–120 of 170 posts

Re: You can't leak users' data if you don't hold it

#111

> You can't leak users' data if you don't hold it False. You can't leak a user's data if you never have it to begin with. If you process it, you are at risk of leaking it.

False. In order to process a user's data, you must inherently hold it while processing it. Alternatively, stop being pedantic.

False != True.

Re: You can't leak users' data if you don't hold it

#112
post #94

Earlier quoted context omitted.

New and fun isn't the same as addictive. We don't consider people watching TV, listing to the radio, or reading books as addicts yet people decried each of them as they became ever more popular for ruining the youth etc. People like stimulation and seem to indulge when it's new, but most people also get used to it relatively quickly.

I think you're trying to move the goal posts. The apps on the new are absolutely without a shadow of doubt trying to make their users addicted. To even suggest they are not addictive is beyond pale, and makes you look like a not serious attempt at the discussion, or worse. Your second sentence is null after your first.

Pay to win apps aiming for addiction get a tiny number of whales out of millions of people. So yes apps try very hard, but the vast majority of people just don’t get addicted long term just obsessed for a short period.

Compare retention numbers between smoking and clash of clans, a clearly successful pay to win game, and it’s not even close.

We could talk about various other apps, but nobody has actually nailed addiction for the general population just the people highly susceptible to such behaviors.

Re: You can't leak users' data if you don't hold it

#113
Semi-related: The point of GDPR opt-outs is it's something that's offensive to the user, which should give the site owners pause. "Is it really worth it to jump through these hoops and give the users annoying popups so we can set trackers?"

Instead, the industry rallied around popups and tried to shift the blame to the GDPR.

Re: You can't leak users' data if you don't hold it

#114
post #112

Earlier quoted context omitted.

I think you're trying to move the goal posts. The apps on the new are absolutely without a shadow of doubt trying to make their users addicted. To even suggest they are not addictive is beyond pale, and makes you look like a not serious attempt at the discussion, or worse. Your second sentence is null after your first.

Pay to win apps aiming for addiction get a tiny number of whales out of millions of people. So yes apps try very hard, but the vast majority of people just don’t get addicted long term just obsessed for a short period. Compare retention numbers between smoking and clash of clans, a clearly successful pay to win game, and it’s not even close. We could talk about various other apps, but nobody has actually nailed addic…

are you willfully being obtuse to the behaviors of the social apps FB, Tiktok, Twit...er,X and the ilk? Games of course are trying to be addictive to get you to buy more IAP/lootbox/otherHandInPocket concepts.

it's like you think a device is only able to play games which is clearly ludicrous.

Re: You can't leak users' data if you don't hold it

#115

I agree with the core idea, avoid saving info so you can't ever leak it. I personally think our legal framework should be based on consequences to encourage this mentality more. If you are hacked I don't care even a little that you did everything right, I just care that my information got taken. You should be held liable even if you did what the industry thought was right.

I disagree. I dont see any reason users wouldn't equally share the risk if neither party did anything wrong. I suppose if the company makes a claim like "We wont share your data with anyone" then you could make that point

That assumes users fully understood what they were consenting to. Agreements and Privacy Policies are written to exhaust and bamboozle the users so they just hit “accept.”

Re: You can't leak users' data if you don't hold it

#116
post #112

Earlier quoted context omitted.

Pay to win apps aiming for addiction get a tiny number of whales out of millions of people. So yes apps try very hard, but the vast majority of people just don’t get addicted long term just obsessed for a short period. Compare retention numbers between smoking and clash of clans, a clearly successful pay to win game, and it’s not even close. We could talk about various other apps, but nobody has actually nailed addic…

are you willfully being obtuse to the behaviors of the social apps FB, Tiktok, Twit...er,X and the ilk? Games of course are trying to be addictive to get you to buy more IAP/lootbox/otherHandInPocket concepts. it's like you think a device is only able to play games which is clearly ludicrous.

I simply used gaming to make it clear attempting to be addictive wasn’t the same as actually being addictive. Social Apps rise and fall in popularity just like everything else.

Meta has billions of users but that’s split across 4 platforms FB, WhatsApp, Instagram, and Messenger. So clearly popularity isn’t the same as addiction otherwise their FB app would be all they need.

Go back a few years and Netflix seem addictive as people binged shows, but I doubt anyone is seriously suggesting they are addictive today.

Q.E.D. New and fun isn't the same as addictive.

Re: You can't leak users' data if you don't hold it

#117
post #55

I agree with the core idea, avoid saving info so you can't ever leak it. I personally think our legal framework should be based on consequences to encourage this mentality more. If you are hacked I don't care even a little that you did everything right, I just care that my information got taken. You should be held liable even if you did what the industry thought was right.

> avoid saving info so you can't ever leak it I think that this is a good idea. It's similar to the principle of least privilege: keep only what you need to offer the service you are providing. Less risk for the provider, less risk for the consumer. However, at least in the USA, I've noticed an increasing number of companies who have determined that personal data is worth good money. This is why most stores have rewa…

Even before the Great Sell Off, there was a growing notion of "we may need this some day so let's store and/or log it". And it makes sense. If you store it and don't need it, it's relatively cheap, at least in the last couple decades. But if you *don't* store it and need it, you're screwed.

Re: You can't leak users' data if you don't hold it

#118
post #50

Earlier quoted context omitted.

I'm rather baffled at this level of nitpicking. Yes, if the software was being written by completely different people with completely different goals they might then start to acquire user data but what does that have to do with the point (that data this team and this management don't have cannot be leaked)?

I don't track management changes for the apps I use because who has the time? How can we protect ourselves against a malicious company changing their tech behind the scenes?

My personal solution is just to self-host anything important or sensitive (password manager, file storage, photo storage, etc).

Audit the code as desired, pin to specific versions, run on a private network.

Re: You can't leak users' data if you don't hold it

#120
post #116

Earlier quoted context omitted.

are you willfully being obtuse to the behaviors of the social apps FB, Tiktok, Twit...er,X and the ilk? Games of course are trying to be addictive to get you to buy more IAP/lootbox/otherHandInPocket concepts. it's like you think a device is only able to play games which is clearly ludicrous.

I simply used gaming to make it clear attempting to be addictive wasn’t the same as actually being addictive. Social Apps rise and fall in popularity just like everything else. Meta has billions of users but that’s split across 4 platforms FB, WhatsApp, Instagram, and Messenger. So clearly popularity isn’t the same as addiction otherwise their FB app would be all they need. Go back a few years and Netflix seem addict…

The only QED is your circular logic
Post reply on HN