News for hackers. Stuff that matters.
Re:Even years later, Twitter doesn’t delete direct messages by strict9 on Friday February 15, 2019 @05:06PM (#19175153)
One of the hardest concepts to explain to non-programmer friends/family is that deleting anything in an app is usually flipping a boolean flag in the database from False to True. And even for the rare cases of actually deleting the record or updating the field value, it likely exists in backups somewhere.

It's never gone.

Re:Even years later, Twitter doesn’t delete direct messages by cdoxsey on Friday February 15, 2019 @06:51PM (#19175900)
Twitter actually tries to delete stuff: https://twitter.com/en/privacy

> We keep Log Data for a maximum of 18 months. If you follow the instructions here (or for Periscope here), your account will be deactivated and then deleted. When deactivated, your Twitter account, including your display name, username, and public profile, will no longer be viewable on Twitter.com, Twitter for iOS, and Twitter for Android. For up to 30 days after deactivation it is still possible to restore your Twitter account if it was accidentally or wrongfully deactivated.

And they require developers to delete them too:

https://developer.twitter.com/en/developer-terms/agreement-a...

> If Twitter Content is deleted, gains protected status, or is otherwise suspended, withheld, modified, or removed from the Twitter Service (including removal of location information), you will make all reasonable efforts to delete or modify such Twitter Content (as applicable) as soon as reasonably possible, and in any case within 24 hours after a request to do so by Twitter or by a Twitter user with regard to their Twitter Content, unless otherwise prohibited by applicable law or regulation, and with the express written permission of Twitter.

When I worked at Gnip this requirement was a constant headache for customers, precisely because deleting data is so hard.

Re:Even years later, Twitter doesn’t delete direct messages by mdhshjdjsh on Saturday February 16, 2019 @12:46AM (#19177279)
And that only reaffirms and proves correct, the comment to which you have replied.

When the user deletes something, it is not destroyed instantly. Instead, it is rendered inaccessible to a broad class or ordinary users. Meanwhile, the systems do still retain the ostensibly deleted data, even if for an hour or 30 minutes, while other, more powerful actors might still have the ability to access and read something the individual thinks is destroyed and gone forever.

Re:Even years later, Twitter doesn’t delete direct messages by Dylan16807 on Saturday February 16, 2019 @01:40AM (#19177418)
It's not like throwing something in the garbage makes it immediately stop existing.

"It goes in the recycle bin, it'll be gone for good in a couple weeks" is perfectly intuitive, even if database flags are confusing.

Re:Even years later, Twitter doesn’t delete direct messages by jellicle on Saturday February 16, 2019 @08:48AM (#19178518)
That does not actually say that Twitter will delete your account in any specific timeframe. Given the mostly-public nature of Twitter, it's sort of a moot point, but still. Ambiguity should be held against the drafter, especially in privacy policies. On Twitter's deactivation page, it doesn't say they'll delete your data either.

"marked as deleted" is not the same as "deleted".

Re:Even years later, Twitter doesn’t delete direct messages by brootstrap on Friday February 15, 2019 @05:10PM (#19175189)
haha. user.is_deleted = True...

A lesson on how to delete user data but still keep it. RE the headline, i'm not sure. "News flash, mega tech corp thats business model is based on accumulating data has been accumulating lots of user data."

Re:Even years later, Twitter doesn’t delete direct messages by propogandist on Friday February 15, 2019 @05:55PM (#19175513)
That may've been true before, but in a post-GDPR world, you better delete it (assuming you're serving European users) -- unless of-course there's a legal reason to hold onto the data.
Re:Even years later, Twitter doesn’t delete direct messages by talaketu on Friday February 15, 2019 @10:51PM (#19176959)
No reason to retain backups beyond the period for which they ensure disaster recovery.