4 ms·

This argument is flawed. How can you be sure if the policy is enforced at back-end? The better way is to create a solution where users have control over data a

This argument is flawed. How can you be sure if the policy is enforced at back-end? The better way is to create a solution where users have control over data and the apps interact with data. This should have been the model from the beginning but now I guess it will never happen. Even if someone successfully implements this it will be just as hard IPv6 to adopt if not more.

bborud 5y ago
Audits. (And yes, I've worked for companies that deal with lots of data that has strict retention limits by law, and oh boy were there audits and oh boy are you in trouble if/when you screw up) As for your proposed solution: I don't think I understand what you mean. Could you expand on it?
- quaintdev 5y ago
  True audits are really good way to keep companies in check but what about a company like TikTok or companies in other countries where you are not sure if the audits are not compromised. Regarding the solution I was talking about check out Solid by Tim Berners Lee
  - bborud 5y ago
    Naturally you can only perform meaningful audits if you can have them performed by a party you trust and you have the ability to impose sanctions due to non-compliance. That's not going to be true for all companies, but it will be true for many companies. Especially if they have any form of economic activity within some jurisdiction. Then it is up to the users to choose services that are under some acceptable regulatory control. The fact that it can't be made perfect with one move doesn't matter. If things can incrementally be made better for the users whose data is used to generate immense revenue, that's a step in the right direction. Decentralized models are interesting, but surprisingly hard to do, let alone do well. Not only from a technical point of view, but from a business point of view. There is also the challenge that just about every incumbent today has a vested interest in making sure these ideas do not get traction as it would rob them of what makes companies valuable.

bborud 5y ago

Audits. (And yes, I've worked for companies that deal with lots of data that has strict retention limits by law, and oh boy were there audits and oh boy are you in trouble if/when you screw up) As for your proposed solution: I don't think I understand what you mean. Could you expand on it?

quaintdev 5y ago
True audits are really good way to keep companies in check but what about a company like TikTok or companies in other countries where you are not sure if the audits are not compromised. Regarding the solution I was talking about check out Solid by Tim Berners Lee
- bborud 5y ago
  Naturally you can only perform meaningful audits if you can have them performed by a party you trust and you have the ability to impose sanctions due to non-compliance. That's not going to be true for all companies, but it will be true for many companies. Especially if they have any form of economic activity within some jurisdiction. Then it is up to the users to choose services that are under some acceptable regulatory control. The fact that it can't be made perfect with one move doesn't matter. If things can incrementally be made better for the users whose data is used to generate immense revenue, that's a step in the right direction. Decentralized models are interesting, but surprisingly hard to do, let alone do well. Not only from a technical point of view, but from a business point of view. There is also the challenge that just about every incumbent today has a vested interest in making sure these ideas do not get traction as it would rob them of what makes companies valuable.