6 ms·
The problem is the core idea is flawed. The same concept (don't store the data) was applied to creditcard account data 10 years ago in many point-of-sale syste
by aeternum 3y ago
The problem is the core idea is flawed.
The same concept (don't store the data) was applied to creditcard account data 10 years ago in many point-of-sale systems. Malware simply evolved to logs the data itself.
Not collecting user data in the first place might be a solve, but don't let simply not storing it create a false sense of security. Your user's data is still very much at risk.
- dj_mc_merlin 3y agoThat's an improvement. It changes the risk profile from "company whose security practices you have no clue about getting hacked" to "one of my personal devices getting infected with malware", which you can at least do something about.
- aeternum 3y agoIt doesn't because many companies believe they are safe simply because they don't "hold" your personal data. If it transits their systems it is still at risk, and those companies are much more likely to have security issues because why invest when they're not "holding" user data.