4 ms·
I considered that, but most people who get annoyed about privacy are upset that private companies have any data at all. e.g. location data on Facebook. It's go
by throwaway3699 6y ago
I considered that, but most people who get annoyed about privacy are upset that private companies have any data at all. e.g. location data on Facebook.
It's good opsec to assume all private data at companies may get leaked, including links between your ID and your name.
Consider the scenario where somebody is reviewing books on dangerous subjects (politics, religion, LGBT+, etc...) and is suddenly outed to the whole world due to a data breach.
- nwienert 6y agoFor some set of people it would be a problem, I think for book reviews that’s a tiny set, not to be dismissive of them, but still. For other types of applications you’d want to have a better system, like a writing platform. But still, there’s ways to do it. You can validate the high res copies of whatever you want to validate, then make a hash using a few key numbers, in partial. Stuff like that gets you close to ideal, even the worst case break would expose almost nothing, and you’d prevent duplicate accounts. Only risk is losing the documents during validation before they’re deleted.