Backblaze submitting names and sizes of files in B2 buckets to Facebook

Re:Backblaze submitting names and sizes of files in B2 bucke... by TheDudeMan on Monday March 22, 2021 @12:49AM (#26536969)

> it's super unlikely that FB is using the filenames in any way

You mean other than storing them forever?

[ Parent | on HN ]

Re:Backblaze submitting names and sizes of files in B2 bucke... by mgraczyk on Monday March 22, 2021 @01:06AM (#26537038)

Facebook, like other GDPR compliant companies, deletes most data after 90 days by default. My guess is that this data was not intentionally stored, and any place where it was will be deleted manually within a few days as part of remediation for this issue. Even if that doesn't happen, it would automatically disappear after 90 days.

[ Parent | on HN ]

Re:Backblaze submitting names and sizes of files in B2 bucke... by zertrin on Monday March 22, 2021 @01:56AM (#26537270)

How can we know for sure that's actually what happens?

Are there audits to check compliance?

[ Parent | on HN ]

Re:Backblaze submitting names and sizes of files in B2 bucke... by mgraczyk on Monday March 22, 2021 @02:19AM (#26537385)

Yes, there are: https://www.facebook.com/legal/terms/dataprocessing

[ Parent | on HN ]

Re:Backblaze submitting names and sizes of files in B2 bucke... by matkoniecz on Monday March 22, 2021 @03:06AM (#26537652)

Why I would believe what FB publishes?

FB used 2FA phone numbers for spying, after repeatedly promising that they will be not used in this way.

See also FB promises about WhatsApp during merger.

Is there a truly independent confirmation?

[ Parent | on HN ]

Re:Backblaze submitting names and sizes of files in B2 bucke... by justinclift on Monday March 22, 2021 @02:29AM (#26537441)

> Facebook, like other GDPR compliant companies, ...

Isn't there a lawsuit or similar going through the EU courts atm about Facebook not really being GDPR compliant? eg They claim they are, but the court case is about them not being.

[ Parent | on HN ]