tcd

I get the reasoning, but I don't see this applied to some platforms. Reddit and Discord allow you to both delete and edit older comments, and there's no limits on how far back you can go (so you can, if you wanted, edit or delete your entire history).

Under the GDPR a subject is allowed full erasure rights. If I say I want you to delete my content from x date to y date, or a particular post, or everything entirely then that shouldn't be an issue. A request may be bothersome, but that's what happens when you don't offer that functionality natively.

I noticed a few days back you didn't like it when a user made a new account, except with the internet these days and how everything is archived for all time, throwaway's are the only option. Building a comment history is extremely dangerous, especially when you might forget what details you may have posted or how meta-data can leak through (such as what subs you post in, any details you posted that could identify you etc).

You can't have it both ways: no to multiple accounts and also no to control over your data. I might have 50 accounts, dislike it? Give me proper control over my comments. (to be honest, it may just be worth making a new account for every comment for maximum privacy, it's extreme, but it's a viable option).

If I want to delete them, that's my choice to freely make. Your thoughts or concerns are not relevant to me, thankfully, the GDPR agrees.

> As the businesses still using it either mature, evolve, or fail, the need for PHP will begin to dry up.

People have been calling for PHP's death, or saying PHP is a dying language, for as long as the internet has been around.

It's always the same arguments, that $newHipLanguage will replace it.

Then you actually do some research and understand just how much of the internet is still powered by PHP and will continue to do so for the forseeable future.

So, I'm still waiting for PHP's death. Or for this same predictable comment in 2030.

> nobody came to any harm or suffered any detrimental effects as a result of this breach

Who gets to decide what "harm" is or whether anyone suffered "detrimental effects"? Surveillance is so common and normalized they don't consider the act of collecting so much information itself as a "detrimental harm".

What if that harm only presented itself years down the line? Maybe a creepy stalker who can synthesize mulitple data sets to reconstruct a person's movements or possibly use it against them some way (scammers and fraudsters are increasingly using all these leaked datasets to create a more accurate profile of an individual for more sophisticated attacks/targeting. Your name/address/mobile number must not and can not be considered PII since it's already been leaked probably ten's of times by now).

That's an incredibly shortsighted comment to try and justify developing a system with not even the most basic of security considerations.

I honestly just wish those same people were jailed for 50 years as a result, we'd see a LOT more consideration in the future if they were held personally liable.

You can once the inevitable database leak of driver information details leaks from the DVLA/insurance companies.

It might take a few years, but you can use this dataset in the future to understand who owned the vehicle at this time and reconstruct their movements.

Using collected information it's possible a computer can remember every journey you've ever taken; this car with this reg plate was here at this time at this place, and they did not have a valid tax/insurance at this time, or it could be useful during investigations

What does opt-out mean anyway? I've had examples where Google Fit has reenabled itself without my due consent in the settings of my phone (and I have screenshots to prove it).

We've seen opt-out abused before so it is down to whether you feel you can use a platform known for not respecting your choices.

Often times, it's a simple boolean value, do you want to trust that bool will stay the same, always?

HAHA! What an absolutely trash service, in that page it says:

> Facebook says that it does not listen to, view or keep the contents of any video or audio calls on your Portal.

No mentions about on their servers though, which we know they do!

How do I report articles on HN for misleading trash? This needs to be deleted from the internet.

How dare they give 5* to a fucking FB property.

Just drop a line on twitter saying you've discovered a vulnerability in $popularSoftware and mention $company. Say you'll be disclosing in 90 days if $company doesn't issue a reply publicly.

Make sure to deal with an actual human and that everything is done according to best practice. You may even get publicity this way and even if it's unethical it can be sold or used to your advantage.

If they care, trust me when I say they will make an effort. Most places (like Google) have effective systems in place for dealing with such queries.

Not trying to be cynical, but to me this seems to be a way to get the mass public "okay" with contact tracing. Then somehow they "mysteriously" manage to get more accurate information from other sources (location, wifi beacons, data sharing etc).

But they'll just say "the information is only from this source, we pinky promise!".

> they could make having this app a legal requirement to go in any shop if they wanted

If they can legally mandate an "app" they can mandate me having a device to run said "app".

It'd be absolutely absurd to mandate you having a spy with you at all times to exist in society.

"Sorry, don't have a phone, kthx", "Sorry, my phone doesn't use gapps, it's using a custom ROM", and what about these Linux phones?

Yeah, that's not going to work.

None. If you're concerned, do not carry a spy around with you.

I know, it's a scary thought compared to 30 years ago, but it's possible.

No disrespect but it's pretty useless. My "location" is where my browser "thinks" I am, no ability to correct it, and I was able to report myself as 'sick' which leads to your dataset being polluted.

Data which isn't verifiable is useless, wrong and potentially dangerous. IMO it's important that those who claim they are sick are actually sick.

If they're not, the data point isn't useful especially on a larger scale.

Right. But it's not like they're going to "just" announce that.

"Hey everyone - so yeah, we're using all your data you're willingly providing all these apps on your phone, like location, contacts, camera...So thanks for helping...Okay, bye!".

But you're right. Every day there is so much information from the spies we carry around with us as they communicate that it'd be unfathomable they're just "ignoring" all of this information.

The chances are in some privacy policy it says they can share that data with their "partners" which silently gets back to the government.

Just use what you already have, what we already know you have, and if it saves lives then at least it was put to good use.

This is why it'd be nice for the APK/installable file to have a hash that can be verified against an open source version. In theory someone should spot anything that doesn't look right.

But that can't/won't undo the effects of something being called "private" being exposed not to be afterall...

I would love to see the raw data on how many transactions have been abandoned because of ReCaptcha; if I had to solve a test to purchase my shopping, I'd go elsewhere (and there are places that are not as hostile out there).

I cannot understand the stupidity of putting your entire business in the hands of an advertisement company who gives no shits about you as a business or a person, apart from your data.

I can say for certain ReCaptcha has made me reconsider a purchase and is a major factor in my purchasing decision. If I can't use all my privacy tools (including noscript, and I only whitelist a few times to get the right scripts), then I don't care about what you're selling.

Hopefully in the near future ReCaptcha breaks altogether due to enhanced privacy protection.