[openstreetmap/openstreetmap-website] User account self-deletion allows bad actors to delete and recreate the same account name to "lose" changeset discussion and block history (Issue #4018)
Tom Hughes
notifications at github.com
Mon Oct 23 23:02:26 UTC 2023
> How about saying, will be retained "anonymized"? Can this be told and will that hold true? How about saying, will be hidden from view by the general public instead of hidden from view?
The existing screen, which is quoted above, already explains the anonymisation process.
> I understand, that the developers could initiate a timer that starts running from clicking the button and gets invalidated when new edits occur. Like this, it looks much more straightforward to implement. I have no idea how cumbersome such automatism will be to them. I'd say, if somebody truly wants to get off, they will return.
It's more complicated, but not impossibly. It's terrible UX though - you're basically setting a time bomb that might go off in three years time when you happen not to edit for four weeks.
> PS: A block actually should not prevent deletion. That seems to me running foul of GDPR. Last edit time should work in this case just as well - as the delay only prevents usage of same nick and does nothing against doing so under different nick.
GDPR is not some magic spell. The right to deletion only applies where data is being processed by consent - if it is being processed for other reasons such as "legitimate interests" then it doesn't apply.
Now we certainly might want LWGs thoughts on the matter but there isn't an absolute right to always have things deleted.
--
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/4018#issuecomment-1776159123
You are receiving this because you are subscribed to this thread.
Message ID: <openstreetmap/openstreetmap-website/issues/4018/1776159123 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20231023/61138034/attachment.htm>
More information about the rails-dev
mailing list