News for hackers. Stuff that matters.
Re:Tell HN: Interviewed with Triplebyte? Your profile is abo... by darekkay on Saturday May 23, 2020 @09:14AM (#23282658)
>> Government identification may be required and we may ask you for more information in order to verify your identify

Same issue as I'm currently having with Airbnb. Though I have never ever provided any ID before, nor did I ever book anything, they asked me for an ID to prove my identity upon requesting account removal. How exactly does my ID _prove_ anything in my case (apart from the fact that I have an ID copy of a person who has the same name as I entered into the Airbnb profile page). Seems more like one more obstacle to prevent people from deleting their account.

Re:Tell HN: Interviewed with Triplebyte? Your profile is abo... by Jommi on Saturday May 23, 2020 @11:49AM (#23283894)
It's pretty common actually. They will delete all your data, but that requires strong authentication, which government ID is. That's how it works with gdpr in 90% of cases.
Re:Tell HN: Interviewed with Triplebyte? Your profile is abo... by Zekio on Saturday May 23, 2020 @11:52AM (#23283930)
Account removal should be just as easy as it was to sign up
Re:Tell HN: Interviewed with Triplebyte? Your profile is abo... by ebertucc on Saturday May 23, 2020 @12:23PM (#23284206)
I agree that it should be just as easy to suspend your account as it was to sign up, but irretrievable deletion should be harder.

Companies ideally want to stop fraud at both ends, but I would be more upset if, for example, my Airbnb account were fraudulently deleted than if someone fraudulently made one in my name.

Granted, deletion requires access to the account in question, so maybe that's enough of a hurdle already? In that sense it's already harder to delete than create.

Re:Tell HN: Interviewed with Triplebyte? Your profile is abo... by thaumasiotes on Saturday May 23, 2020 @09:26PM (#23288253)
> Granted, deletion requires access to the account in question, so maybe that's enough of a hurdle already? In that sense it's already harder to delete than create.

I tend to agree that that is enough of an additional hurdle, but note that it conflicts with

> I agree that it should be just as easy to suspend your account as it was to sign up, but irretrievable deletion should be harder.

It's definitely not appropriate for any unauthenticated person to be allowed to suspend an account. You need the same hurdle on suspension.

I think it would be reasonable to have a grace period between the deletion request and the actual deletion, during which the account was retrievable.

Re:Tell HN: Interviewed with Triplebyte? Your profile is abo... by darekkay on Saturday May 23, 2020 @01:20PM (#23284689)
I've deleted a lot of accounts in the last few weeks, and Airbnb was the only one requiring an ID prove. I agree, it is indeed part of GDPR for them to ensure I have the right to delete my account. My only issue is that my ID does not prove anything in my case, because Airbnb doesn't know my identity which they could compare my ID with, because I did have to provide my ID after registering and I never booked anything on their site.
Re:Tell HN: Interviewed with Triplebyte? Your profile is abo... by mindslight on Saturday May 23, 2020 @01:28PM (#23284748)
It seems like a good idea to get a fake ID, to sign up for (free) accounts using that nym. Or I suppose if you can order fake IDs with custom nyms as needed, then you could consider that the price to delete your psuedonymous accounts.