I tried to delete my account but the option is not available or may be hidden behind the forced verification requirement.
i.e. John Does said, "Hello world" -> [Removed] said, "Hello world"
If I reveal I'm a criminal is it any different? What If it's 10 years later and I've served my sentence? Does it matter if the crime is morally wrong or even illegal where you live?
What it it's personal but not criminal, say I've come out as gay or a republican or a democrat or a communist.
I think we would be foolish to rely on greater privacy than is provided by terms and conditions and logically we will only acquire more favorable terms by requiring them in law. You gave a good example When you discussed being unable to delete data pertaining to your account.
I think on a one to one message your recipient has a right to a record of what you actually said I don't think allowing one side to edit it after the fact facilitates honest conversations nor does it much protect the person who reveals sensitive information to do so. You can already attest to what they revealed or keep a screenshot.
I think on a many to many forum like this thread that people ought to be able to control what new users see but people who already received the initial version have a right to the information imparted to them.
Basically I view a message as belonging to everyone who received it and the service ought to retain it as long as one person whom it belongs to wants to keep it.
I can see good reason to selectively remove content that is illegal say child or revenge porn but I feel like further restrictions ought to fall on the ethical reasoning of the receiver not technology to answer the complex moral implications.
If I send you an email, same thing, if it survives for such a long time. Does Google/any ISP also own it?
If I send you a SMS, same thing, I bet it won't survive. Does the phone company also own it?
If I write you on a social network, do you and I own the message or does the social network own it? There are ToS that we might not have read.
To the down-voter: could you please elaborate with what you got the problem so we could potentially discuss it?
While the receiver of a letter on paper certainly owns the letter she doesn't own its contents. The copyright of the letter remains with the author.
So you can frame the letter and hang it on your wall you violate the authors copyright if you publish it without authorization.
What you can do is sell the physical object. That belongs to you.
You can also burn it or destroy it - which is an interesting edge case.
This really comes down to different kinds of ownership. The whole point of copyright is that creative/cultural/intellectual property rights are a thing, analogous to tangible property but with a different set of legal and commercial rights and obligations.
Electronic media depend on context. ISP and telcos are usually considered common carriers so they don't own the copyright of emails or SMSs.
Social media networks either claim all copyright in full (bad news for you...) or have a specific license clause in the T&Cs which gives them reproduction rights.
Sometimes these are for specific limited purposes, and sometimes they're a blanket sign-away of all exploitation rights. (Bad news for you again.)
Also, how does it work if a whistleblower gives a journalist letters that they received from someone else? Is the journalist not allowed to publish them in an article?
e.g. purchase history, legal agreements, etc.
Discord probably doesn’t do that though
https://meta.stackexchange.com/questions/44717/is-gravatar-a...
Somebody else ran a similar attack on a different dataset using a GPU and recovered around 45%.
https://arstechnica.com/information-technology/2013/12/crypt...
The authors' moral right alone should allow any content authored by them to be un-published. Ever heard of a paper being pulled?
You example of bullying is top notch but what about doxing concerns? Plenty of people delete their "content" without being bullies.
If you disabled the account yourself, then you should be able to recover it and then press the delete button yourself. If it was disabled for a TOS violation or for legal reasons then they might have a gdpr exemption to deleting the data[0] (NAL).
As for messages, those aren’t deleted - while this might be legal (anonymization is seen as compliant with the right to be forgotten) they really should make it an option, otherwise people end up using scripts which do it for them[1].
0: https://ico.org.uk/for-organisations/guide-to-data-protectio...
I use https://github.com/victornpb/deleteDiscordMessages, yeah. :)
In some minority of cases, though, they would. Abusive ex sending you messages over discord? Yeah, those might be evidence especially when both parties are saying different things. This is the most common example I can think of, but I'm sure there are others. Heck, even if someone wanted to reminisce about days gone by... they should have the right to do so in conversations they were involved in.
They are actually deleted, unlike many other platforms. If not, the problem described here would not arise in the first place: https://blog.discord.com/how-discord-stores-billions-of-mess...
But I thought Discord, somewhat controversially, did actually let one person delete messages from all parties. Maybe they eventually caved because it enabled abuses/harassers to deprive their victims of evidence.
Although administrators can take away your right to even see the existence of a channel, which means that you no longer can delete your messages in that channel, since you have to see the messages to be able to delete them. For the record: if you have the permissions, you can delete anyone's messages in a channel.
Similar issues can arise in direct messages, for example if you closed the DM, and say, you left all mutual servers, and you unfriended your friend (without blocking), and the person changed his or her name so you are no longer able to add him or her back. When you add someone, that person will appear in "Pending" friends after having added, so you can click on "Message" to open the DM. Without that, you cannot open the DM, which again means that you cannot see the messages, thus you cannot delete them. I put "without blocking" in parentheses, because if you block someone, they will appear in "Blocked" friends, and it keeps track of changes in their name or even ID (that they are able to change with Discord Nitro), and you can open a DM easily from there. To open up the DM, you right click on the name, then click on "Message" which you can only do if 1) the person is in the same server you are, 2) the person is your friend, 3) the person is in "Pending" friends, or 4) if the person is in "Blocked" friends.
Alternatively, if you lose access to your account through losing your password, getting your account disabled, or removed by you or Discord. In this case, too, you lose the ability to delete your messages.
To bulk delete your messages, you can use https://github.com/victornpb/deleteDiscordMessages. If you have sent 100k messages, then it could take hours for your messages to get deleted due to rate-limiting. This script does nothing more than what you can already do manually; delete the messages you can see.
---
TL;DR: You can delete (and edit) your own messages on Discord as long as you can see them (have access to them), and you can delete other people's messages from channels if you have the right permissions.
Deletion is another matter though.
Don’t worry though, if you request to have it deleted I’m sure they’ll remove the link to the S3 url from their database. :/
The former is a fairly defensible position. PCI standards for this sort of data collection should be a government matter as they are the ones requiring this information to begin with. The latter isn't based on reality and not worth arguing about.
Source? I’m able to book hotels online without sending a picture of my ID.
It is not logical to both present something as FACT and then also admit it is speculation.
If I flip a coin 1000 times it will probably land on heads at least once.
Thousands of huge corporations have continuously been caught up in data dumps, hacks, insider schemes, etc. Especially with data that has no liability. This case is statistically unlikely to be any different.
Now if I had made this up in a world where experian, Adobe, capital one, etc didn’t happen, then I could see where you’re coming from. But I’m not, this is the world we live in and it’s rightfully why people get upset when companies suck in yet more PII.
Anyone from DO reading this: I hope you shred those photos.
It was always the same script: first they purposefully confuse it with account deactivation and they confirm your removal, but formulated in a way in which it could also mean deactivated, then, after you answer to the ticket that what you meant is actual deletion, not deactivation, they tell you that they forwarded your request to someone who will delete your account and that they will write you once it's done. No change in approach changed their script in any way.
> Ich habe deine Anfrage an jemanden aus meinem Team weitergeleitet, der dich dabei besser unterstützen kann. Der entsprechende Mitarbeiter wird sich in Kürze bei dir melden. Falls du in der Zwischenzeit weitere Fragen oder Bedenken hast, kannst du gerne auf diese E-Mail antworten
... then I waited six weeks and back to square one, since I could always still login to get the deactivated message. The offer to answer on the same ticket again is apparently untrue. ..at least they never answered again on the same ticket.
What helped was not contacting support but instead pasting a comically formal erasure request (Article 17 of the GDPR) from the internet to dpo@airbn..
As far as I am able to validate, this did it.
1. As far as I was able to see, this:
> If you want to permanently close and delete your account, you can do this yourself through Manage your data.
is not true. There was only a button to deactivate the account. I think that they show different pages depending on the user country and just didn't add account deletion for German accounts.
2. Once an account is deactivated, you need to contact them through /help/contact-us/ to reactivate it, but since you are not logged in, it immediately forwards you to /help/contact-us/logged-out, which tells you to either login or just browse their fluffy web help labyrinth. Google told me to use terms@airbnb.com, which was how I ended up reaching support. Support was a dead-end though. They claim to do it, but they apparently do not actually delete the account.
3. Even if it would've been possible, they claim to want to "verify your identity for security purposes" prior to acting on your deletion request (which I could not do anyway, as the function was absent).
Hence, the GDPR method seems superior, given that it's actually available and they don't force you through an "identity verification", which is probably just there as additional friction to deter users from account deletion.