37 ms·
Logging every image generated, using personally identifying photos, adds a big risk with almost zero upside. The reason not to store the images is right here i
by mingus88 3y ago
Logging every image generated, using personally identifying photos, adds a big risk with almost zero upside.
The reason not to store the images is right here in front of us.
“Oops we may have generated topless photos of women who submitted their photos, but I can unequivocally state that nobody aside from that person saw the image, if it even existed”
- malfist 3y agoAnother point to not storing it: Storing all the images your users generate could require a non-trivial amount of disk space. And considering this is government, they're probably using a server farm and bare metal, and not an infinitely scalable file storage
- flemhans 3y agoBare metal is cheaper so would help them to be able to store this amount of files. 10,000,000 photos are trivial to store on a 4-drive zfs array
- ndriscoll 3y agoIf you stored a 50kB avif (which would be way higher quality then you need for this), you could do 20 million images / TB. Bare metal can fit almost 2 PB of raw storage in 1U now. "Infinitely scalable" is not really a thing anyone needs to worry about.