3 ms·

> What's the most an attacker could likely get? Remember that thing when a guy from Europe asked from Facebook to give him everything they knew about him (whic

• andrepd 11y ago
  >which European citizens are allowed to request by law Can they? TIL. It would be a fun thing to know, exactly how much they know about you.
  • lucb1e 11y ago
    I only know about the Netherlands, but European might be similar: - When an organization collects data about you, they are forced to tell you about it (unless they're police or something I guess) and tell you what they are going to do with it. In Dutch this is called the "Informatieplicht persoonsgegevens". - Upon reasonable request, an organization must give you all information they can reasonably give you. "Reasonably" means, given a normal amount of effort. If they need to contact the garbage collectors and dig up an old cassette they threw away years ago, that is unreasonable to ask. They may also charge a fee, but the limit is quite low I think. - You can ask an organization to correct or remove your personally identifiable information if you have a good reason or if they have no reason not to. For example if you ask to remove your IP address from logs and they want to keep it for security purposes for 4 weeks, their argument sounds pretty reasonable (unless you have some better reason). - They cannot keep personally identifiable information for longer than necessary. For example, log files from the web server may be kept for security purposes, but if you have ten year old log files, that is too long to be reasonable for that purpose and is thus illegal. One thing I've always wondered about is how applicable this is to foreign organizations with websites accessible from the Netherlands. I've heard some people say that for companies with customers in the Netherlands, Dutch law applies and those customers have the above rights. Nobody seems to comply with that, though. Another thing I've heard is that if they have an office here, that office can be held to our laws. I should look that up some time.
  • r3bl 11y ago
    I remember the case in which one guy (I think he was Irish) did send that request to Facebook and got a over one thousand page long response. Then, there was a shit ton of persons from Europe (like, dozens of thousands) who tried to do the same through a combined court order in Vienna. Then, the court in Vienna decided that this issue was "not admissible on procedural grounds". Then, those thousands of people got generic responses like: "You can download every data we store on you by going into your settings...". Then there was an appeal to that decision and then the whole thing died out. I found the website that organized this: http://europe-v-facebook.org/EN/en.html http://europe-v-facebook.org/EN/en.html
  • deleted 11y ago
    [deleted]