Threat Model? The threat is EU regulation. Mitigate by 'pseudoanonymisation', as called for by Reg. (EU) 2016/679. Technically this makes no sense. Legally, it's perfect to avoid a €20 million lawsuit.https://twitter.com/marcan42/status/999643376168325121 …
Legally it's nonsense, because if I can extract the original IP addresses, it's not anonymisation, it's masturbation. If I can crack the hashes on a laptop in a few minutes, for zero cost other than electricity, any competent judge will rule that it was not effectively anonymisedpic.twitter.com/ARIxlvh9gk
-
-
Also, even if such a stupidly broken scheme would pass legal muster, there is *no freaking reason* to not just fix the problem instead of exposing yourself. There is absolutely no excuse for bad crypto and bad random number generators. Period.
-
Might as well fork it.
- Show replies
New conversation -
-
-
Correct. We can only hope that judges rule that way, but my hopes aren't that high. "We had mechanisms in place!" is also a legal argument, but I am not a lawyer.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.