News for hackers. Stuff that matters.
Re:CCPA Will Hit Dev Teams Harder Than GDPR by barefoot on Thursday January 31, 2019 @06:08PM (#19049953)
Many small companies take this approach. Usually it’s lower-risk PII.

Some small companies will refuse to use generated data if it takes even a minute more to generate it vs import it from production. In the consulting world I’ve seen multiple examples of companies complaining bitterly about other security minded consultants efforts to improve security and privacy through even small amounts of additional development time.

Re:CCPA Will Hit Dev Teams Harder Than GDPR by baroffoos on Thursday January 31, 2019 @06:16PM (#19050014)
I have seen it done in a small company to check if a query will run too slow in production. Take a copy of the biggest database. Run query, see what happens, delete copy.
Re:CCPA Will Hit Dev Teams Harder Than GDPR by fooey on Thursday January 31, 2019 @06:26PM (#19050085)
It's probably more often that the query is just run against production in the first place.

Making a copy is probably more effort than most developers out in the wild are going to make.

Re:CCPA Will Hit Dev Teams Harder Than GDPR by sroussey on Thursday January 31, 2019 @08:59PM (#19050973)
Not true. If you were to throw up a slow locking query in production, you could take down the site. Restoring a backup should be fast.