5 ms·

> Pokharel discovered the bug in October last year and says it was fixed earlier this month (2020, august) Shouldn't there be fines for this? Took almost an y

> Pokharel discovered the bug in October last year and says it was fixed earlier this month (2020, august) Shouldn't there be fines for this? Took almost an year after being reported.

rco8786 6y ago
A fine for what? Not fixing a minor bug in a timely fashion? That’s not a road we want to travel down.
- jacquesm 6y ago
  This is not a 'minor bug'. This is a major oversight and possibly a regulatory issue. The user owns the data. The user has rights.
  - ffpip 6y ago
    Instagram doesnt use the word 'delete'. It uses 'unsent' for messages. So removed from other person's chat. Still associated with your account I have my account data from last year. Time to dig into it and sue instagram. Oh wait. I'm not in the EU. I'm in India, where they can even sell my info. So they definitely didn't delete it
    - jacquesm 6y ago
      Pulling linguistic tricks typically does not amuse regulators.
      - rco8786 6y ago
        I'm curious what regulatory issue you think is in play here?
        pirocks 6y ago
        Gdpr has a right to deletion within 30 days. Companies have been fined for failing to do so.
- eckza 6y ago
  God forbid that software developers be held accountable for their actions, right?
- searchableguy 6y ago
  As per my layman understanding, the organization need to comply with the data erasure request within 30-60 days. You cannot retain data for longer without consent or purpose (GDPR).
  - rco8786 6y ago
    .
    - jacquesm 6y ago
      This is not how it works. A deletion request is all that it takes. The difference here is between what you think the requirements are and what they really are. As an engineering manager for a major payment service provider you should know better and it is disturbing that you do not.
    - frosted-flakes 6y ago
      Is there? I don't know what's true, but I'll just quote this comment by londons_explore from another subthread: > > But clicking delete or unsend on a photo is not that. > In Google, a user clicking delete is treated exactly the same as a written deletion request. > In fact, the law requires that they be the same - "Therefore, an individual can make a request for erasure verbally or in writing. It can also be made to any part of your organisation and does not have to be to a specific person or contact point.". (https://ico.org.uk/ https://ico.org.uk/) https://news.ycombinator.com/item?id=24157667 https://news.ycombinator.com/item?id=24157667
- wasmitnetzen 6y ago
  If a car model has a defect, it has to be recalled and fixed in a timely fashion, otherwise, there will be a fine. Why should software be any different?
  - kube-system 6y ago
    Software isn't any different. Cars with defects don't have to be recalled. Cars with defects that kill or maim people have to be recalled. Software that does the same, also is recalled. https://www.cpsc.gov/Recalls?combine=software https://www.cpsc.gov/Recalls?combine=software
- hansvm 6y ago
  I still don't get why we're all writing bugs in production software in the first place. I know it's a time-honored tradition in this field, but I'm starting to think the practice is a net negative -- at least we should cut back a bit to be able to respond to requests like this in a timely fashion.

> Pokharel discovered the bug in October last year and says it was fixed earlier this month (2020, august) Shouldn't there be fines for this? Took almost an year after being reported.

rco8786 6y ago

A fine for what? Not fixing a minor bug in a timely fashion? That’s not a road we want to travel down.

jacquesm 6y ago
This is not a 'minor bug'. This is a major oversight and possibly a regulatory issue. The user owns the data. The user has rights.
- ffpip 6y ago
  Instagram doesnt use the word 'delete'. It uses 'unsent' for messages. So removed from other person's chat. Still associated with your account I have my account data from last year. Time to dig into it and sue instagram. Oh wait. I'm not in the EU. I'm in India, where they can even sell my info. So they definitely didn't delete it
  - jacquesm 6y ago
    Pulling linguistic tricks typically does not amuse regulators.
    - rco8786 6y ago
      I'm curious what regulatory issue you think is in play here?
      - pirocks 6y ago
        Gdpr has a right to deletion within 30 days. Companies have been fined for failing to do so.
eckza 6y ago
God forbid that software developers be held accountable for their actions, right?
searchableguy 6y ago
As per my layman understanding, the organization need to comply with the data erasure request within 30-60 days. You cannot retain data for longer without consent or purpose (GDPR).
- rco8786 6y ago
  .
  - jacquesm 6y ago
    This is not how it works. A deletion request is all that it takes. The difference here is between what you think the requirements are and what they really are. As an engineering manager for a major payment service provider you should know better and it is disturbing that you do not.
  - frosted-flakes 6y ago
    Is there? I don't know what's true, but I'll just quote this comment by londons_explore from another subthread: > > But clicking delete or unsend on a photo is not that. > In Google, a user clicking delete is treated exactly the same as a written deletion request. > In fact, the law requires that they be the same - "Therefore, an individual can make a request for erasure verbally or in writing. It can also be made to any part of your organisation and does not have to be to a specific person or contact point.". (https://ico.org.uk/ https://ico.org.uk/) https://news.ycombinator.com/item?id=24157667 https://news.ycombinator.com/item?id=24157667
wasmitnetzen 6y ago
If a car model has a defect, it has to be recalled and fixed in a timely fashion, otherwise, there will be a fine. Why should software be any different?
- kube-system 6y ago
  Software isn't any different. Cars with defects don't have to be recalled. Cars with defects that kill or maim people have to be recalled. Software that does the same, also is recalled. https://www.cpsc.gov/Recalls?combine=software https://www.cpsc.gov/Recalls?combine=software
hansvm 6y ago
I still don't get why we're all writing bugs in production software in the first place. I know it's a time-honored tradition in this field, but I'm starting to think the practice is a net negative -- at least we should cut back a bit to be able to respond to requests like this in a timely fashion.