4 ms·

Personal data cannot be secured. The only way is to not store it. That will (imaginationaly) cost companies in lost revenue for being unable to mine and sell it

Personal data cannot be secured. The only way is to not store it. That will (imaginationaly) cost companies in lost revenue for being unable to mine and sell it. Only government can make laws against a company taking your personal information and selling it. Even passwords shouldn't be stored by a company. The years of lost time argument is disingenuous. Over that number of people, 209 years of lost time from 700 million years of lives is nothing.

compootr 2y ago
Whether or not it's disingenuous, it's our time that didn't need to be wasted in the first place by them not storing phone records
- pcblues 2y ago
  I agree with that. I just don't like big numbers being used to cause emotional responses without proper context. Probably on a spectrum, but it's my beef :)
dopylitty 2y ago
I’d take it a step further. If a technology is impossible to secure it shouldn’t be used. Maybe it’s time to rethink all the parts of our lives we’ve handed over to software.
- AgentOrange1234 2y ago
  What current technologies do you believe are possible to secure? I am sympathetic to the overall sentiment here, but between any web browser + server stack you are looking at hundreds of millions of lines of code written in unsafe languages. Add on the human factor and there is just no hope of really securing this.
  - kragen 2y ago
    sel4, tweetnacl on an avr, pdf/a, html3, gzip, lwip, etc., running on purpose-built hardware. too bad it's not self-hosting yet
tomComb 2y ago
There are lots of companies that take security seriously and don’t lose their customers data. Which is good, because there are companies that need to hold customer data. Companies that don’t take security seriously and lose peoples data should be punished accordingly. Companies that sell customers data should be identified. But if we treat them all the same, then we let the bad companies off the hook, and punish the responsible companies unfairly.
- kragen 2y ago
  there are companies that have already had their customers' data exfiltrated and will have it exfiltrated in the future, companies that will only have it exfiltrated in the future, and companies that are about to be dissolved. there is no fourth category. computer security is not currently achievable; the best we can hope for is to contain the damage from the inevitable breaches and reduce their frequency new security holes get introduced faster than old ones get patched, and that will remain true for the foreseeable future

compootr 2y ago

Whether or not it's disingenuous, it's our time that didn't need to be wasted in the first place by them not storing phone records

pcblues 2y ago
I agree with that. I just don't like big numbers being used to cause emotional responses without proper context. Probably on a spectrum, but it's my beef :)

dopylitty 2y ago

I’d take it a step further. If a technology is impossible to secure it shouldn’t be used. Maybe it’s time to rethink all the parts of our lives we’ve handed over to software.

AgentOrange1234 2y ago
What current technologies do you believe are possible to secure? I am sympathetic to the overall sentiment here, but between any web browser + server stack you are looking at hundreds of millions of lines of code written in unsafe languages. Add on the human factor and there is just no hope of really securing this.
- kragen 2y ago
  sel4, tweetnacl on an avr, pdf/a, html3, gzip, lwip, etc., running on purpose-built hardware. too bad it's not self-hosting yet

tomComb 2y ago

There are lots of companies that take security seriously and don’t lose their customers data. Which is good, because there are companies that need to hold customer data. Companies that don’t take security seriously and lose peoples data should be punished accordingly. Companies that sell customers data should be identified. But if we treat them all the same, then we let the bad companies off the hook, and punish the responsible companies unfairly.

kragen 2y ago
there are companies that have already had their customers' data exfiltrated and will have it exfiltrated in the future, companies that will only have it exfiltrated in the future, and companies that are about to be dissolved. there is no fourth category. computer security is not currently achievable; the best we can hope for is to contain the damage from the inevitable breaches and reduce their frequency new security holes get introduced faster than old ones get patched, and that will remain true for the foreseeable future