3 ms·
AFAIK they were using Signal with auto-delete turned on. If true, this is a great way to avoid auditability.
by exo762 4y ago
AFAIK they were using Signal with auto-delete turned on. If true, this is a great way to avoid auditability.
- ninjin 4y agoWell, they are learning from the “best”: politicians [1]. [1]: https://www.theguardian.com/politics/2019/dec/17/tories-switch-to-messaging-app-signal-to-curb-whatsapp-leaks https://www.theguardian.com/politics/2019/dec/17/tories-swit...
- gruez 4y agoThis is actually standard within financial institutions and big corps. It's not implemented as "signal with auto-delete turned on", but rather as retention policies on emails or whatever.
- hermitdev 4y agoExcept the retention on emails, for instance, is usually 7 years. Not exactly the same as auto delete after read... It's an apples to oranges comparison.
- compiler-guy 4y agoAnd the relevant transactions and approvals get recorded in other media for even longer periods in auditable forms. A slack exchange saying, "Hey, would you approve this expense?" "Sure" isn't a problem. It's the lack of formal follow ups in an auditable medium that is.
- thedougd 4y agoWorked for a major US bank. 2 years max on email. You don't want discoverability back 7 years.
- WJW 4y agoThat's not really how auditing works though. If there is a legal requirement to keep records of communications between senior managers (and there is for financial institutions), then "we purposely used an app that deletes such communications to hide our actions from the auditors" is in itself a crime.
- lupire 4y agoThat's just modern double entry bookkeeping - 1 write, then 2 erase. If any transaction isn't erased, it leaves an audit trail for investigation.