Readit News logoReadit News
tcd commented on Facebook uses 1.5B Reddit posts to create chatbot   bbc.com/news/technology-5... · Posted by u/elorant
dang · 5 years ago
Yes and no. You're right that there's no button you can push to delete an entire account history, but wrong that there's no way to remove HN comments. We take care of deletion requests for people every day. We don't want anyone to get in trouble from anything they posted to HN, there's nearly always something we can do, and we don't send people away empty-handed. I can only think of one or two cases where we weren't able to make a user happy, and neither of those cases had to do with identifying information being left up on the site.

The reason we don't delete entire account histories wholesale is that it would gut the threads that the account had participated in, which is not fair to the users who replied, nor to readers who are trying to follow discussion. There are unfortunately a lot of ways to abuse deletion as well. Our goal is to find a good balance between the competing concerns, which definitely includes users' needs to be protected from their past posts on the site. I don't want anyone to have the impression that we don't care about that; we spend many hours on it.

tcd · 5 years ago
I get the reasoning, but I don't see this applied to some platforms. Reddit and Discord allow you to both delete and edit older comments, and there's no limits on how far back you can go (so you can, if you wanted, edit or delete your entire history).

Under the GDPR a subject is allowed full erasure rights. If I say I want you to delete my content from x date to y date, or a particular post, or everything entirely then that shouldn't be an issue. A request may be bothersome, but that's what happens when you don't offer that functionality natively.

I noticed a few days back you didn't like it when a user made a new account, except with the internet these days and how everything is archived for all time, throwaway's are the only option. Building a comment history is extremely dangerous, especially when you might forget what details you may have posted or how meta-data can leak through (such as what subs you post in, any details you posted that could identify you etc).

You can't have it both ways: no to multiple accounts and also no to control over your data. I might have 50 accounts, dislike it? Give me proper control over my comments. (to be honest, it may just be worth making a new account for every comment for maximum privacy, it's extreme, but it's a viable option).

If I want to delete them, that's my choice to freely make. Your thoughts or concerns are not relevant to me, thankfully, the GDPR agrees.

tcd commented on A look at modern PHP   lwn.net/SubscriberLink/81... · Posted by u/lukastyrychtr
echelon · 5 years ago
PHP isn't being replaced by Rust or Go. It's being replaced by Medium, Wix, and Squarespace.

At this point, the predominant reason it's still undergoing active development is that there is a metric ton of legacy PHP code. As the businesses still using it either mature, evolve, or fail, the need for PHP will begin to dry up.

You're defending the language from an emotional standpoint.

> choosing php for a new project is a no-brianer. The only other 2 stacks to which I can compare it are the Spring stack of Java or .NET core

This is absolutely not the case, and you know it. Almost every language has a wealth of HTTP tools and frameworks, and many of them come built-in.

Choosing PHP will be like choosing Python 2. In fact, that's my 2030 prediction.

tcd · 5 years ago
> As the businesses still using it either mature, evolve, or fail, the need for PHP will begin to dry up.

People have been calling for PHP's death, or saying PHP is a dying language, for as long as the internet has been around.

It's always the same arguments, that $newHipLanguage will replace it.

Then you actually do some research and understand just how much of the internet is still powered by PHP and will continue to do so for the forseeable future.

So, I'm still waiting for PHP's death. Or for this same predictable comment in 2030.

tcd commented on 9M logs of Brits' road journeys spill from number-plate camera dashboard   theregister.co.uk/2020/04... · Posted by u/linebug
tcd · 5 years ago
> nobody came to any harm or suffered any detrimental effects as a result of this breach

Who gets to decide what "harm" is or whether anyone suffered "detrimental effects"? Surveillance is so common and normalized they don't consider the act of collecting so much information itself as a "detrimental harm".

What if that harm only presented itself years down the line? Maybe a creepy stalker who can synthesize mulitple data sets to reconstruct a person's movements or possibly use it against them some way (scammers and fraudsters are increasingly using all these leaked datasets to create a more accurate profile of an individual for more sophisticated attacks/targeting. Your name/address/mobile number must not and can not be considered PII since it's already been leaked probably ten's of times by now).

That's an incredibly shortsighted comment to try and justify developing a system with not even the most basic of security considerations.

I honestly just wish those same people were jailed for 50 years as a result, we'd see a LOT more consideration in the future if they were held personally liable.

tcd commented on 9M logs of Brits' road journeys spill from number-plate camera dashboard   theregister.co.uk/2020/04... · Posted by u/linebug
globular-toast · 5 years ago
Is it a GDPR issue? You can't identify the driver from the number plate.
tcd · 5 years ago
You can once the inevitable database leak of driver information details leaks from the DVLA/insurance companies.

It might take a few years, but you can use this dataset in the future to understand who owned the vehicle at this time and reconstruct their movements.

Using collected information it's possible a computer can remember every journey you've ever taken; this car with this reg plate was here at this time at this place, and they did not have a valid tax/insurance at this time, or it could be useful during investigations

tcd commented on Google Apple Contact Tracing (GACT): a wolf in sheep’s clothes?   blog.xot.nl/2020/04/19/go... · Posted by u/jrepinc
vinniejames · 5 years ago
You completely miss the point. Of course it will roll out giving users the control to opt out.

The problem arises because once it is widespread flipping it to mandatory for all phones is trivial. Check YES to agree to our new Privacy Policy ;)

tcd · 5 years ago
What does opt-out mean anyway? I've had examples where Google Fit has reenabled itself without my due consent in the settings of my phone (and I have screenshots to prove it).

We've seen opt-out abused before so it is down to whether you feel you can use a platform known for not respecting your choices.

Often times, it's a simple boolean value, do you want to trust that bool will stay the same, always?

tcd commented on Privacy Not Included   foundation.mozilla.org/en... · Posted by u/gullyfur
sub7 · 5 years ago
Facebook Portal meets your "strict" privacy standards? GTFO Mozilla, stick to web browsers
tcd · 5 years ago
HAHA! What an absolutely trash service, in that page it says:

> Facebook says that it does not listen to, view or keep the contents of any video or audio calls on your Portal.

No mentions about on their servers though, which we know they do!

How do I report articles on HN for misleading trash? This needs to be deleted from the internet.

How dare they give 5* to a fucking FB property.

tcd commented on Privacy Not Included   foundation.mozilla.org/en... · Posted by u/gullyfur
tcd · 5 years ago
Is Mozilla's new browser on Android not included on that list?

It contains 3 trackers [1]:

Adjust

Google Firebase Analytics

LeanPlum

It also has telemetry selected by default and is NOT opt-in. So yeah, whether it's hardware or software, you're being spied on any time you use an internet connected device.

[1]: https://reports.exodus-privacy.eu.org/en/reports/org.mozilla...

tcd commented on Valve and HackerOne: how not to handle vulnerability reports   blog.jakegealer.me/valve-... · Posted by u/andrenotgiant
tcd · 5 years ago
Just drop a line on twitter saying you've discovered a vulnerability in $popularSoftware and mention $company. Say you'll be disclosing in 90 days if $company doesn't issue a reply publicly.

Make sure to deal with an actual human and that everything is done according to best practice. You may even get publicity this way and even if it's unethical it can be sold or used to your advantage.

If they care, trust me when I say they will make an effort. Most places (like Google) have effective systems in place for dealing with such queries.

tcd commented on Contact Tracing in the Real World   lightbluetouchpaper.org/2... · Posted by u/nmjenkins
tcd · 5 years ago
Not trying to be cynical, but to me this seems to be a way to get the mass public "okay" with contact tracing. Then somehow they "mysteriously" manage to get more accurate information from other sources (location, wifi beacons, data sharing etc).

But they'll just say "the information is only from this source, we pinky promise!".

tcd commented on First look at Apple/Google contact tracing framework   twitter.com/moxie/status/... · Posted by u/dmvaldman
IanCal · 5 years ago
I'm not sure I'd count this as fearmongering. I think I know which way the tradeoffs work in my mind but there's not an unreasonable set of paths that lead to this being more permanent.

Given the broad powers passed recently in the UK they could make having this app a legal requirement to go in any shop if they wanted, and whether apps can be uninstalled reasonably is down to whoever controls the OS.

Would it not make sense to require everyone who is able to to install and use this? Or require Google and apple to force install it?

tcd · 5 years ago
> they could make having this app a legal requirement to go in any shop if they wanted

If they can legally mandate an "app" they can mandate me having a device to run said "app".

It'd be absolutely absurd to mandate you having a spy with you at all times to exist in society.

"Sorry, don't have a phone, kthx", "Sorry, my phone doesn't use gapps, it's using a custom ROM", and what about these Linux phones?

Yeah, that's not going to work.

u/tcd

KarmaCake day214August 29, 2017View Original