4 ms·
> "Treat user data like names and emails as if they were credit card numbers" Most sites' approach to credit card numbers is to not touch them with a barge pol
by hanoz 9y ago
> "Treat user data like names and emails as if they were credit card numbers"
Most sites' approach to credit card numbers is to not touch them with a barge pole, have a third party receive them instead and never let the business have any sight of them, so it's a bit of a stretch to expect the same treatment for a customer's name and email address.
- zer00eyz 9y agoLet me re-state what your saying: Most sites are incapable of receiving, storing and handling credit card numbers. This is because the staff building the service either lacks the technical knowhow or the organizational wherewithal to deal with the problem in a successful way. Why should it be any different for emails, names, usernames or passwords (because end users re-use those). If everyone starts acting like this data is important (it is) and valuable (it is and that might decrease with the passage of this law) - we might just get to a better place. In the absence of regulation companies will get away with whatever they can - ethics be dammed.
- noobiemcfoob 9y agoSo...use oauth?
- wvenable 9y agoHurrah so now sites won't use their own logins and I'll be forced to let Google or Facebook know every site I want to connect to. That's an improvement?
- jon_richards 9y agoThis actually brings up a point that was made in a cambridge analytica post. If personal information is deleted after it has already trained a dimension-reducing model, is it really deleted? If Google and Facebook see everything because of oauth, we can ask them what data they have and tell them to delete it, but they won't be deleting whatever models they've been training about us.
- zaarn 9y agoOpenID Connect exists, it allows OAuth from and to unrelated services. Neither Google nor Facebook own Oauth, they just have very incompliant implementations that force everyone to treat them as special.