4 ms·

They could have genuine intentions but still mess it up. Developers messing up secure and complete deletion of user data may be particularly likely since such

They could have genuine intentions but still mess it up. Developers messing up secure and complete deletion of user data may be particularly likely since such deletions are not generally common practice (across the industry, not just at Google.)

jeffbee 4y ago
That's not true at Google though. Google has a systematic user data removal architecture called Wipeout and Wipeout integration is a required checklist item for product launches. Wipeout compliance is systematically monitored by a central privacy group. I've worked at a bunch of companies and only Google has an organized, universal scheme for user data privacy. Everywhere else in my experience is just winging it and has basically no idea what's going on.
hn_throwaway_99 4y ago
If there were one company who I trusted to delete shit correctly, it's Google. There are already loads of other laws that they need to comply with that require unrecoverable data deletion. Look, I agree Google has tons of flaws, but these types of conspiracy theory "bet they're not going to really delete it" missives don't even make sense if you consider Google's incentives. It would be a gigantic, massive blow to Google if they said they were deleting data and they didn't. There is literally 0 reason for Google to do this. When Snowden's revelations came out, Google was furious and they rearchitected basically all of their systems to encrypt everything at rest and in transit.
- robonerd 4y ago
  "They might mess up" is not a 'conspiracy theory' in any conceivable sense of that used and abused term. I don't think the competency of any organization of people is ever assured and beyond reproach, but you're welcome to disagree.
  - hn_throwaway_99 4y ago
    You're correct, with that comment I was more referring to the original "Wanna bet it's just "marked" as deleted, and actually stored forever, to be served in response to any subpoena?" than your post. And while I agree that all organizations can make mistakes, I think it's more important to look at the structure and incentives of any company to see how reasonable those risks are: 1. Google knows they collect a ton of data on people, and they have giant, giant financial incentives to keep that data secure. 2. Google is profitable enough that they can have huge teams focused on data security and integrity (a smaller company may have the same financial incentives to keep data secure, but not the resources to back it up) 3. Google is large and established enough that they can ensure real rigor in their processes (again, as opposed to some rando company that did just enough to pass their SOC 2 audit). Again, mistakes can be made but we all pretty much take risks every day (banking, getting in a car, getting on a plane, getting in an elevator, etc. etc.), and I think the risk of Google fucking this up is lower than failure of a lot of those other systems.
- Teever 4y ago
  Would you bet your life on it? Because that's what we're talking about here in some instances. You're asking people to bet their life on the fact that a theocratic government won't be able to compel Google to give up location data for the purposes of punishing people for what the state says is murder. So would you bet your life on it?
  - ChadNauseam 4y ago
    > Because that's what we're talking about here in some instances You have to opt-in to location history, and it seems to me Google is trying to act in good faith by automatically deleting information that might be sensitive. Who are we asking to bet their lives? People who don't feel like turning off their phone before going to the clinic and have opted-in to location history?
    - Teever 4y ago
      Isn't location history tied to other, very basic features to compel people to use it? And I just accepted a software update on my Pixel phone a couple of days ago and found that it had reset my default apps for browsing and music playing -- what are the odds that Google will surreptitiously do the same to my location tracking consent?
  - hn_throwaway_99 4y ago
    I basically "bet my life on it" every time I take an Uber with some random driver where neither I, nor Uber, has much data about their driving ability beyond recent accident/ticket history. I think the real risk to my life is about 1000 times worse in a car than some diaphanous threat of a future evil government, and I trust Google about 1000 times more than I trust some Uber (or Lyft or taxi) driver.
- mrkramer 4y ago
  >If there were one company who I trusted to delete shit correctly, it's Google. There are already loads of other laws that they need to comply with that require unrecoverable data deletion. They might be deleting the data but are they deleting the metadata? There are always some bread crumbs left.

jeffbee 4y ago

That's not true at Google though. Google has a systematic user data removal architecture called Wipeout and Wipeout integration is a required checklist item for product launches. Wipeout compliance is systematically monitored by a central privacy group. I've worked at a bunch of companies and only Google has an organized, universal scheme for user data privacy. Everywhere else in my experience is just winging it and has basically no idea what's going on.

hn_throwaway_99 4y ago

If there were one company who I trusted to delete shit correctly, it's Google. There are already loads of other laws that they need to comply with that require unrecoverable data deletion. Look, I agree Google has tons of flaws, but these types of conspiracy theory "bet they're not going to really delete it" missives don't even make sense if you consider Google's incentives. It would be a gigantic, massive blow to Google if they said they were deleting data and they didn't. There is literally 0 reason for Google to do this. When Snowden's revelations came out, Google was furious and they rearchitected basically all of their systems to encrypt everything at rest and in transit.

robonerd 4y ago
"They might mess up" is not a 'conspiracy theory' in any conceivable sense of that used and abused term. I don't think the competency of any organization of people is ever assured and beyond reproach, but you're welcome to disagree.
- hn_throwaway_99 4y ago
  You're correct, with that comment I was more referring to the original "Wanna bet it's just "marked" as deleted, and actually stored forever, to be served in response to any subpoena?" than your post. And while I agree that all organizations can make mistakes, I think it's more important to look at the structure and incentives of any company to see how reasonable those risks are: 1. Google knows they collect a ton of data on people, and they have giant, giant financial incentives to keep that data secure. 2. Google is profitable enough that they can have huge teams focused on data security and integrity (a smaller company may have the same financial incentives to keep data secure, but not the resources to back it up) 3. Google is large and established enough that they can ensure real rigor in their processes (again, as opposed to some rando company that did just enough to pass their SOC 2 audit). Again, mistakes can be made but we all pretty much take risks every day (banking, getting in a car, getting on a plane, getting in an elevator, etc. etc.), and I think the risk of Google fucking this up is lower than failure of a lot of those other systems.
Teever 4y ago
Would you bet your life on it? Because that's what we're talking about here in some instances. You're asking people to bet their life on the fact that a theocratic government won't be able to compel Google to give up location data for the purposes of punishing people for what the state says is murder. So would you bet your life on it?
- ChadNauseam 4y ago
  > Because that's what we're talking about here in some instances You have to opt-in to location history, and it seems to me Google is trying to act in good faith by automatically deleting information that might be sensitive. Who are we asking to bet their lives? People who don't feel like turning off their phone before going to the clinic and have opted-in to location history?
  - Teever 4y ago
    Isn't location history tied to other, very basic features to compel people to use it? And I just accepted a software update on my Pixel phone a couple of days ago and found that it had reset my default apps for browsing and music playing -- what are the odds that Google will surreptitiously do the same to my location tracking consent?
- hn_throwaway_99 4y ago
  I basically "bet my life on it" every time I take an Uber with some random driver where neither I, nor Uber, has much data about their driving ability beyond recent accident/ticket history. I think the real risk to my life is about 1000 times worse in a car than some diaphanous threat of a future evil government, and I trust Google about 1000 times more than I trust some Uber (or Lyft or taxi) driver.
mrkramer 4y ago
>If there were one company who I trusted to delete shit correctly, it's Google. There are already loads of other laws that they need to comply with that require unrecoverable data deletion. They might be deleting the data but are they deleting the metadata? There are always some bread crumbs left.