News for hackers. Stuff that matters.
Re:Tell HN: I was permanently banned from eBay in one hour by 0x_rs on Sunday May 08, 2022 @01:52PM (#31306323)
Welcome to the automated account suspension age of the internet, where companies shoot first and don't care later, as the amount of false positives is not worth putting any meagerly (if there's any already) real, physical support to resolve. This can apply to smaller companies too, for other but equally pricey reasons. The amount of fraudulent activity attempts online may warrant those aggressive measures from their business perspective (that are also not limited to passive data collection, but taking active steps such as scanning targets' ports [0]). Unfortunately, if you live in certain areas or are forced to use mobile networks, with IPs constantly refreshing multiple times a day, major services can be almost unusable, and the user may not even realize the reason why. Some—for reasons I'm not knowledgeable about—do it better than others, but it may simply be about the resources put into it and the amount of risk a miss could amount to.

0. https://blog.nem.ec/2020/05/24/ebay-port-scanning/

Re:Tell HN: I was permanently banned from eBay in one hour by grishka on Sunday May 08, 2022 @02:18PM (#31306591)
> Unfortunately, if you live in certain areas or are forced to use mobile networks, with IPs constantly refreshing multiple times a day, major services can be almost unusable

Here's a handy list of valid uses for IP addresses:

1. Packet routing.

Re:Tell HN: I was permanently banned from eBay in one hour by yjftsjthsd-h on Sunday May 08, 2022 @03:04PM (#31307100)
I'm okay with very short lived IP bans to fight DDoS attacks. But yeah, that's about it.
Re:Tell HN: I was permanently banned from eBay in one hour by ineedasername on Sunday May 08, 2022 @03:58PM (#31307593)
How am I to remember all that? I need a mnemonic.
Re:Tell HN: I was permanently banned from eBay in one hour by blep_ on Sunday May 08, 2022 @06:03PM (#31308518)
Just remember the handy acronym "PACKET ROUTING"!
Re:Tell HN: I was permanently banned from eBay in one hour by antonjs on Monday May 09, 2022 @12:09AM (#31310520)
It's right there at the start: I. P.
Re:Tell HN: I was permanently banned from eBay in one hour by holoduke on Sunday May 08, 2022 @03:26PM (#31307318)
The should make a movie in which a person gets expelled from society because of a bug. In his long quest for his reinstatement, he needs to endure the great corrupted algorithms trying to erase him for good.
Re:Tell HN: I was permanently banned from eBay in one hour by ChuckMcM on Sunday May 08, 2022 @03:28PM (#31307335)
I give you "Brazil" (https://www.imdb.com/title/tt0088846/)

edit: typo corrected, thanks.

Re:Tell HN: I was permanently banned from eBay in one hour by MrPatan on Sunday May 08, 2022 @04:21PM (#31307798)
Love it. The "studio ending" makes it even more Orwellian, to the point I wonder if they did that on purpose. (Can that much competence be true?)
Re:Tell HN: I was permanently banned from eBay in one hour by a-dub on Sunday May 08, 2022 @04:11PM (#31307710)
one of my all-time favorites! ...aaand this is my receipt, for your receipt.
Re:Tell HN: I was permanently banned from eBay in one hour by tomc1985 on Sunday May 08, 2022 @05:53PM (#31308459)
Wonderful movie, but good god is it long and hard to watch at times
Re:Tell HN: I was permanently banned from eBay in one hour by ss2003 on Sunday May 08, 2022 @07:38PM (#31309044)
So is life
Re:Tell HN: I was permanently banned from eBay in one hour by 0des on Monday May 09, 2022 @12:51AM (#31310750)
Settle down Nietzsche its going to be okay.
Re:Tell HN: I was permanently banned from eBay in one hour by aasasd on Sunday May 08, 2022 @07:11PM (#31308886)
Exactly, the first thing that comes to mind.

Alas, watching Gilliam's other films gets more and more difficult, even though he tries to make the same movie again and again, for almost forty years now. But ‘Brazil’ was a home run on the first attempt.

Re:Tell HN: I was permanently banned from eBay in one hour by javajosh on Sunday May 08, 2022 @10:31PM (#31309849)
Yes, Time Bandits was just an attempt to remake Brazil. So was Imaginarium. /s
Re:Tell HN: I was permanently banned from eBay in one hour by aasasd on Sunday May 08, 2022 @11:08PM (#31310105)
‘Time Bandits’ was before, so it's the other way around.

Besides, you might be unfamiliar with the fact that Gilliam referred to ‘Bandits’, ‘Brazil’ and ‘Munchausen’ as a trilogy about the same thing. Which trilogy evidently ended up having at least nine films in it, excepting ‘F&L’ and me having not watched ‘Quixote’ yet (the latter's theme obviously follows the rest, though).

Re:Tell HN: I was permanently banned from eBay in one hour by aasasd on Monday May 09, 2022 @03:22AM (#31311509)
As for a full-on remake: that's ‘Zero Theorem’. I can only guess that Gilliam lost hope in the subtler approach, and wanted to have at least something new that would get out of ‘Brazil’'s shadow. Which didn't work at all.

Perhaps Tom Stoppard is the missing ingredient.

Re:Tell HN: I was permanently banned from eBay in one hour by 0des on Monday May 09, 2022 @12:52AM (#31310752)
Thought we were better than doing /s here.
Re:Tell HN: I was permanently banned from eBay in one hour by javajosh on Monday May 09, 2022 @05:30AM (#31312145)
In this case, it's a shorter version of "here are counter-examples to your assertion".
Re:Tell HN: I was permanently banned from eBay in one hour by als0 on Sunday May 08, 2022 @03:49PM (#31307533)
"Brazil"
Re:Tell HN: I was permanently banned from eBay in one hour by ineedasername on Sunday May 08, 2022 @04:03PM (#31307632)
Kafka explored this in great depth, albeit in analog form.

I don't think I fully appreciate the assignments to read Kafka in college until these algorithmic bans, ousting from app stores, automated support, etc came along. Before that I figured the human element could, in most cases even if it required extreme difficulty, sort things out eventually. Then came these heuristic algorithms that have practically become the platonic ideal if Kafka-esque systems.

Edit: While Amazon is very far from perfect and has dropped several notches in customer service, I will say that they are still very good compared to others. I can still get ahold of a real person that has some leeway for professional judgement when addressing a problem.

Re:Tell HN: I was permanently banned from eBay in one hour by heavyset_go on Sunday May 08, 2022 @07:25PM (#31308963)
I've yet to be able to reach a human at Amazon about counterfeit items sold on the platform, and my 15+ year old Amazon account was banned from leaving reviews after I left a bad review on an Amazon Basics purchase of a surge protector that didn't do what it was supposed to and fried some of my electronics.
Re:Tell HN: I was permanently banned from eBay in one hour by ineedasername on Sunday May 08, 2022 @08:36PM (#31309333)
Yes, I would have guessed that complaining something is sold on the platform wouldn't get you very far, that's way outside the range of a typical customer support rep. They have a place to report IP infringement, and I suppose counterfeits would come under that umbrella, but it's for the rights holders only to use. Not customers who might have purchased one or noticed one listed.

For standard run of the mill customer support they're still pretty great. I was shopping for new wireless earbuds last fall and tried out a few different ones. 2 of the 3 were defective and I didn't like the third-- they hurt my ears to wear them.

For the two defective ones, I'm not sure why but the normal return button wasn't available and I had to go through chat support. I explained they were defective and I wanted to return them. They told me they'd issue the refund, no need to actually mail them back, so I didn't have to go through that hassle. And these were high end ear buds, a total of $400 worth of tech.

Re:Tell HN: I was permanently banned from eBay in one hour by sitkack on Sunday May 08, 2022 @08:47PM (#31309379)
I have on of the not-sought-after Horowitz and Hill CE (counterfeit editions) [1]. Amazon was like, "lol, that was a marketplace purchase, no refund!" even though I just clicked "buy it now, prime shipping!" from the main product page.

Amazon sucks. It should be broken up.

[1] https://artofelectronics.net/the-book/counterfeit-editions/

Re:Tell HN: I was permanently banned from eBay in one hour by thetinguy on Sunday May 08, 2022 @11:05PM (#31310088)
Do you expect customer service representatives to evaluate your legal claim?
Re:Tell HN: I was permanently banned from eBay in one hour by heavyset_go on Monday May 09, 2022 @04:38AM (#31311861)
What a weird assumption.

I expect them to at least collect the information that I received, or suspect I have, a counterfeit item, when I go for a return. They don't even bother to do that.

Re:Tell HN: I was permanently banned from eBay in one hour by Dylan16807 on Sunday May 08, 2022 @11:11PM (#31310132)
I expect them to listen to my non-legal-code claim of "this is the wrong product".
Re:Tell HN: I was permanently banned from eBay in one hour by netik on Sunday May 08, 2022 @04:17PM (#31307763)
I agree with you fully - it was hard to understand Kafka (as a student) until presented with half a life of examples from society.
Re:Tell HN: I was permanently banned from eBay in one hour by lordnacho on Monday May 09, 2022 @02:45AM (#31311303)
This is basically what I think of everything I read about in English literature class in high school.

You're asked to comment on so many things that you haven't heard of. 19th century English class anxiety, extreme poverty in London, slavery and race relations in America, midcentury dystopias (global) and unreasonable justice systems in central Europe (?). All things an ordinary Scandinavian teenager at the end of the 21st century is not going to have a whole lot of perspective on until they've lived a little bit longer.

But then when you have lived that little bit longer it makes sense, and Kafka is probably the one that will come closest, having travelled quite nicely into the modern world and having a corporate version that most people will run into. Next is the dystopias that we see on the news but don't recognise when living in.

Re:Tell HN: I was permanently banned from eBay in one hour by commandlinefan on Sunday May 08, 2022 @08:59PM (#31309437)
And there’s no shortage of real people defending this behavior because “they’re a private company and they can do whatever they want.”
Re:Tell HN: I was permanently banned from eBay in one hour by imroot on Sunday May 08, 2022 @09:15PM (#31309509)
So, if I run a website, or a service, and there are people who abuse my service, and I can't take actions to protect myself and my other paying customers...I should be forced to allow those malicious actors an account and do what?
Re:Tell HN: I was permanently banned from eBay in one hour by yourapostasy on Monday May 09, 2022 @12:38AM (#31310686)
This hypothetical glosses over an essential missing element. The site owner is in control of gating who enters into a transactional relationship with their site or service.

Offering a false dichotomy between "be forced to allow those malicious actors an[d, sic] account" and "take actions to protect myself and my other paying customers" that have adverse impacts (many times with severe monetary damages) is externalizing the cost of poor gating control in the first place in the pursuit of pumping up subscriber numbers chasing the next funding round or quarterly call to brag upon. This is similar to financial services institutions flailing around "identity theft" to cover for gating control of their transactions implemented in pursuit of transaction liquidity over security.

Both take the externalized costs out of customer hides as both uncompensated time and monies spent to make good on unwinding transactions, and in making the aggregate customers pay for the direct costs of fixing the problematic transactions on the way, way back end. Both are a result of implementing poor security practices.

Both also will not scale to the coming era of hyper-converged global financial services. First mover advantage accrues to the one who fixes this challenge at the front end where they gate the transactions, cutting out the majority of the costs of fixing this on the back end after the transaction has been compiled and deployed into production so to speak, not coincidentally speeding up settlement, increasing liquidity, and grab the significant network effects that come with establishing such an infrastructure.

Re:Tell HN: I was permanently banned from eBay in one hour by thfuran on Monday May 09, 2022 @09:22AM (#31313682)
Not to mention that there's a significant difference between just some website and a trillion+ dollar company with significant monopoly power in multiple markets. Being banned from Google or Amazon is simply not equivalent to being banned from commenting on some travel blog.
Re:Tell HN: I was permanently banned from eBay in one hour by Dylan16807 on Sunday May 08, 2022 @11:13PM (#31310148)
You can ethically take blocking actions just fine if you allow for due process. The mere existence of bans is not what's being criticized. (Though I'd say bans generally shouldn't be lifetime either.)
[dead]
Re:Tell HN: I was permanently banned from eBay in one hour by jimmydorry on Monday May 09, 2022 @01:46AM (#31311026)
I'm sure there will come a reckoning at some point that results in the bar being lifted... much like we can no longer run restaurants out of our houses with no oversight from a governing health and hygiene entity.
Re:Tell HN: I was permanently banned from eBay in one hour by Mxs2000 on Monday May 09, 2022 @08:23AM (#31313226)
Talk about missing their whole point.
Re:Tell HN: I was permanently banned from eBay in one hour by aasasd on Sunday May 08, 2022 @07:36PM (#31309028)
While we're on the subject of Kafka: I've recently listened through an audiobook of ‘The Process’, and it turned out to be a new edition. Because apparently the original order of the chapters is not known, and Max Brod took some editorial liberties—so in this new recompilation, at least some semblance of a logical ordering is attempted.

It's important, though, to not listen to the introduction for too long, because it gives away the ending.

Re:Tell HN: I was permanently banned from eBay in one hour by behringer on Sunday May 08, 2022 @08:26PM (#31309288)
Not when it comes to an account ban. You become a pariah to support lines.
Re:Tell HN: I was permanently banned from eBay in one hour by nopenoperope on Sunday May 08, 2022 @03:32PM (#31307375)
Brazil is pretty much that movie if you haven't seen it already.

https://en.wikipedia.org/wiki/Brazil_(1985_film)

Re:Tell HN: I was permanently banned from eBay in one hour by colpabar on Sunday May 08, 2022 @05:13PM (#31308192)
Not exactly what you describe, but I saw this in theaters and thought it did a great job of showing the horrors that these humanless systems can create.

https://www.youtube.com/watch?v=fnbDNv3uAl0

Re:Tell HN: I was permanently banned from eBay in one hour by wand3r on Sunday May 08, 2022 @04:58PM (#31308088)
This is basically a digital version of Kafka's The Trial, and is just as aburdist because it kind of really happens
Re:Tell HN: I was permanently banned from eBay in one hour by drewzero1 on Sunday May 08, 2022 @11:59PM (#31310455)
There is an element of this idea in The Net (1995)[0]. A computer programmer finds her life has been turned upside down by a hacker after she accidentally uncovers a conspiracy.

[0] https://www.imdb.com/title/tt0113957/

Re:Tell HN: I was permanently banned from eBay in one hour by sharkweek on Sunday May 08, 2022 @03:34PM (#31307393)
This is why I named my son Droptable Stuxnet.exe Null
Re:Tell HN: I was permanently banned from eBay in one hour by zmix on Sunday May 08, 2022 @03:50PM (#31307537)
And from here we go on to https://xkcd.com/327/
Re:Tell HN: I was permanently banned from eBay in one hour by phillc73 on Monday May 09, 2022 @03:38AM (#31311577)
Not quite what you describe, but in this short film Utopia, similar themes are explored - exclusion from society due to non-compliance with the "digital lifestyle."

https://www.youtube.com/watch?v=vJYaXy5mmA8

Re:Tell HN: I was permanently banned from eBay in one hour by mhh__ on Sunday May 08, 2022 @11:36PM (#31310318)
Re:Tell HN: I was permanently banned from eBay in one hour by noobermin on Sunday May 08, 2022 @05:59PM (#31308494)
Stuff like this is an example of the failure of the market, because it's market wide and it's not like a service that actually puts labor into handling cases will find an advantage in the market and thus there is no incentive for it. This is a place where regulation actually makes sense.
Re:Tell HN: I was permanently banned from eBay in one hour by jhugo on Sunday May 08, 2022 @10:27PM (#31309821)
My company avoids Google Cloud and uses their competitors for exactly this reason - it's a business risk to depend on Google for anything.

On the consumer side it would be hard to market the advantage though because everyone thinks it won't won't happen to them (and as long as they are average enough, it probably won't), and the cost of being banned from eBay is not that big if you're just a casual user.

Re:Tell HN: I was permanently banned from eBay in one hour by sam1r on Sunday May 08, 2022 @11:04PM (#31310086)
Thanks for posting this article. My mind is completely blown. I just have one question for those reading this.

>> so it’s possible that eBay has been scanning customers’ computers for almost seven years without too many people noticing.

Can't one check the archive.org for signup.ebay.com & verify this? Saying ebay has been port-scanning for 7 years and proving so, would be a much stronger point. Surprised the OP did not check.

Re:Tell HN: I was permanently banned from eBay in one hour by rdfi on Sunday May 08, 2022 @02:35PM (#31306762)
I wonder if you can, under GDPR, request that all your data is deleted and then create a new account. Not allowing you to create a new account could be argued as a violation of GDPR as it would mean that they kept personally identifiable data about you.
Re:Tell HN: I was permanently banned from eBay in one hour by tchvil on Sunday May 08, 2022 @03:42PM (#31307466)
Thank you for the hint. Will do that.

I was banned the same way as the OP, few months ago. They(humans)collected my Id, bank details, personal address, original invoice of the items I was selling, some calls, to finally ban my 15+ year user.

Re:Tell HN: I was permanently banned from eBay in one hour by teraflop on Sunday May 08, 2022 @03:00PM (#31307045)
Contrary to popular understanding, the GDPR does not allow you to force a company to delete all data about you.

In effect, it lets you revoke your consent for the company to store and process your data. But it also provides for cases where your data can be processed without your consent. It's not an unlimited carte blanche, but fraud prevention is explicitly given as an example of a legitimate purpose.

Re:Tell HN: I was permanently banned from eBay in one hour by cj on Sunday May 08, 2022 @05:02PM (#31308114)
This is correct.

Businesses are allowed to retain information necessary to operate. Which would include things like names, email addresses, IP addresses, etc of people who are banned (to prevent them from returning).

If GDPR required a company to delete everything, it would be impractical. (E.g. imagine you request a company delete your info, and then you immediately sue them for something that happened while using their product/service… the company wouldn’t be able to defend themselves unless they retained a record/logs of your usage.

You can submit a deletion request, but in most cases much of your data won’t actually be deleted.

Re:Tell HN: I was permanently banned from eBay in one hour by varsketiz on Sunday May 08, 2022 @05:13PM (#31308191)
> Which would include things like names, email addresses, IP addresses, etc of people who are banned (to prevent them from returning).

I'm not sure about that. The company might reason it needs this data to operate, but you should be able to contest that with a data protection authority.

The data that you can not request to delete is for example money transaction data, which the company has to retain for 10 years or so due to other laws.

Re:Tell HN: I was permanently banned from eBay in one hour by cj on Sunday May 08, 2022 @05:33PM (#31308334)
Curious - has anyone here submitted a complaint to a data authority? I wonder what that process is like.
Re:Tell HN: I was permanently banned from eBay in one hour by varsketiz on Monday May 09, 2022 @12:35PM (#31316295)
I have. It was about a company that kept spamming me with SMSes. I had to file an archaic form for a government agency. It took a while, I received a few emails about progress and asking for additional details.

The spam stopped.

Re:Tell HN: I was permanently banned from eBay in one hour by WaxProlix on Sunday May 08, 2022 @02:44PM (#31306861)
This is what I was going to say. As an American, I have no recourse in these situations. Europeans are fortunate to have governing bodies with at least some teeth. Not sure how that applies to UK citizens post-Brexit, though.
Re:Tell HN: I was permanently banned from eBay in one hour by rootusrootus on Sunday May 08, 2022 @06:34PM (#31308688)
> As an American

A bit over 10% (and probably somewhat higher than 10% on HN) of Americans do have something like GDPR. California Consumer Privacy Act. I'm not including Colorado, Virginia, or Utah because I'm not sure how equivalent their laws are.

Re:Tell HN: I was permanently banned from eBay in one hour by conradfr on Sunday May 08, 2022 @04:08PM (#31307670)
They have the UK-GDPR now.

https://www.cookiebot.com/en/uk-gdpr/

Re:Tell HN: I was permanently banned from eBay in one hour by vageli on Sunday May 08, 2022 @09:00PM (#31309444)
> This is what I was going to say. As an American, I have no recourse in these situations. Europeans are fortunate to have governing bodies with at least some teeth. Not sure how that applies to UK citizens post-Brexit, though.

GDPR applies to all individuals in the EU, not just citizens.

Re:Tell HN: I was permanently banned from eBay in one hour by shadowgovt on Sunday May 08, 2022 @03:47PM (#31307509)
Keeping that data to maintain a ban seems self-evidently in the space of "needed for the health and operation of the service."

At the very least, I'm sure eBay lawyers would be happy to argue the point.

Re:Tell HN: I was permanently banned from eBay in one hour by linker3000 on Sunday May 08, 2022 @03:48PM (#31307523)
Also, under the GDPR, you may have the right for any solely-automated decision making about you to then involve a human:

https://ico.org.uk/for-organisations/guide-to-data-protectio...

Mind you, there's nothing to stop eBay from having someone now look at your data and go 'nope'.

Re:Tell HN: I was permanently banned from eBay in one hour by soco on Monday May 09, 2022 @07:13AM (#31312751)
...or claiming "yup I looked"
Re:Tell HN: I was permanently banned from eBay in one hour by chias on Sunday May 08, 2022 @02:58PM (#31307016)
Generally, no.

GDPR specifically carves out keeping data for "legitimate business needs" including fraud prevention and so on. Whatever data Ebay (thinks it) has about this person that they are using to enforce the ban would be data that they would argue falls under this clause.

Re:Tell HN: I was permanently banned from eBay in one hour by Aeolun on Sunday May 08, 2022 @05:04PM (#31308132)
This is circular. If there was no reason to ban him then keeping the data for fraud prevention purposes obviously doesn’t hold any water.
Re:Tell HN: I was permanently banned from eBay in one hour by lettergram on Sunday May 08, 2022 @09:36PM (#31309617)
They probably check an external list upon account creation. If the ban had to do with KYC (Know-your-customer) and the user is on or unintentionally confused with a banned entity, then it doesn’t matter.
Re:Tell HN: I was permanently banned from eBay in one hour by rcxdude on Sunday May 08, 2022 @02:58PM (#31307023)
keeping information for the purposes of enforcing rules and bans is explicitly allowed in GDPR and you are not forced to delete it. (similarly, you can't ask a company to delete all the stuff you've bought and sold them from their accounts)
Re:Tell HN: I was permanently banned from eBay in one hour by londons_explore on Sunday May 08, 2022 @04:28PM (#31307854)
However many companies are sufficiently scared of the GDPR and potentially keeping data they shouldn't accidentally that they will just delete everything about you. You can totally use that to get the 'new customer discount' again at Uber for example...
Re:Tell HN: I was permanently banned from eBay in one hour by Archelaos on Sunday May 08, 2022 @04:24PM (#31307827)
Under GDPR, a company may retain personal data if it has a legitimate interest in doing so. To what extent this applies here, I do not know.

You might have a chance to successfully challenge the termination by legal means, if you actually did not violate Ebay's terms and conditions.

Re:Tell HN: I was permanently banned from eBay in one hour by ryan-c on Sunday May 08, 2022 @04:46PM (#31307998)
"For fraud prevention purposes" is a legitimate interest, so the probably won't work.
Re:Tell HN: I was permanently banned from eBay in one hour by andylynch on Sunday May 08, 2022 @05:29PM (#31308306)
Keeping PII for fraud detection is not barred by GDPR.

In this context the more relevant aspect of GDPR, which I think receives too little attention and more so enforcement, is article 22 (Automated individual decision-making, including profiling)

Re:Tell HN: I was permanently banned from eBay in one hour by dylan604 on Sunday May 08, 2022 @02:52PM (#31306948)
If I were trying to be sneaky, could you create a series of hashes of the name/email/address/bank type of info to stored on GDPR deletion request that could then be checked against any new account creation? Since the only data stored after deletion would be a hash with no PII remaining, is this a viable workaround?
Re:Tell HN: I was permanently banned from eBay in one hour by liaukovv on Sunday May 08, 2022 @03:00PM (#31307041)
If you can use hash to identify someone then its pii by definition
Re:Tell HN: I was permanently banned from eBay in one hour by anonymousiam on Sunday May 08, 2022 @03:57PM (#31307591)
I do not agree. The identity can be extended with some GUID and then hashed. The GUID and hash can be kept, but the identity discarded. Then the original identity is lost, but if encountered again, it will be known that it was previously seen.
Re:Tell HN: I was permanently banned from eBay in one hour by mindri0t on Sunday May 08, 2022 @05:00PM (#31308101)
>but if encountered again, it will be known that it was previously seen

But when you see it again you have personally identified the individual have you not? Doesn’t that by definition mean it is identifiable if you are able to determine the identity later?

This is something that advertisers/supermarket points schemes etc used to do when they didn’t have consent to share personal data, hash it and align it with what they already had so effectively they shared the subsets of interest anyway. I remember at university when some guys from yahoo sponsored a hack event, they literally gave a guest lecture boasting about doing this with Sainsbury’s to squeeze through a legal loophole back in 2013.

Re:Tell HN: I was permanently banned from eBay in one hour by dylan604 on Sunday May 08, 2022 @06:31PM (#31308666)
That's the fun of thought experiments, the rabbit hole just keeps going.

If your original delete request was followed so that everything they knew about you was deleted, they would not be able to relink everything that GUID linked to. It should be gone now. However, if that hashed value lives in a BANNED_ACCOUNTS table, then all they have to do is create the hash, check the table, disallow new account. You can even do it in good faith by not storing any of the new info rather than storing it and forcing a new delete request.

Re:Tell HN: I was permanently banned from eBay in one hour by bentcorner on Sunday May 08, 2022 @04:41PM (#31307957)
It's not clear to me how from a privacy perspective that's different from the hash of an id.
Re:Tell HN: I was permanently banned from eBay in one hour by anonymousiam on Monday May 09, 2022 @12:09PM (#31315928)
It's different because a hash of the ID can be used by anyone who knows the hashing algorithm. If the ID is combined with a UUID/GUID and the UUID/GUID is kept secret/isolated by the entity doing verification, then nobody else can make use of the hash, even those within the entity organization who do not have access to the UUID/GUID. The UUID/GUID itself is not PII so it can probably be retained without violating the GDPR. The same goes for the hash. And since there is no way to reconstruct the original ID given the UUID/GUID and hash, there should be no GDPR violation.

In a large entity such as Google, you almost need to outsource ID verification to ensure it's not abused by other (advertising/marketing) parts of Google. Of course all of this requires good faith on the part of the implementing entity, which is certainly not guaranteed.

Re:Tell HN: I was permanently banned from eBay in one hour by abvdj2 on Sunday May 08, 2022 @09:58PM (#31309710)
that's wrong, they are allowed to keep some data
Re:Tell HN: I was permanently banned from eBay in one hour by maxpro on Sunday May 08, 2022 @02:52PM (#31306952)
Not really, as GDPR is not only about screwing up big companies. Certain kind of data must be saved by companies (like financial transactions). You can request the deletion, but they are still allowed to save some of the data.
Re:Tell HN: I was permanently banned from eBay in one hour by NonNefarious on Sunday May 08, 2022 @08:23PM (#31309271)
Love that idea.
Re:Tell HN: I was permanently banned from eBay in one hour by izacus on Sunday May 08, 2022 @11:00PM (#31310050)
No, fraud prevention is one of the widely accepted reasons for data storage under GDPR.
Re:Tell HN: I was permanently banned from eBay in one hour by kurupt213 on Sunday May 08, 2022 @02:54PM (#31306971)
Is this a way around Reddit bans?
Re:Tell HN: I was permanently banned from eBay in one hour by d1lanka on Monday May 09, 2022 @05:54AM (#31312268)
Similar thing happened to me with Offerup - which is MILITANT about not using VPN's.

They banned me and no recourse/way to appeal.

I even sent them a physical letter without much luck.

Pitty, I loved the app, but stopped using it due to their unnecessary/strict no-VPN rule.

Re:Tell HN: I was permanently banned from eBay in one hour by catsarebetter on Sunday May 08, 2022 @05:25PM (#31308271)
This is why niche products and small businesses can succeed
Re:Tell HN: I was permanently banned from eBay in one hour by nitwit005 on Sunday May 08, 2022 @06:00PM (#31308495)
The value of an auction site relates to the number of users it has, so it's difficult for a competitor to appear and dislodge it.