<story><title>Google Exposed User Data, Feared Repercussions of Disclosing to Public</title><url>https://www.wsj.com/articles/google-exposed-user-data-feared-repercussions-of-disclosing-to-public-1539017194</url></story><parent_chain><item><author>skbly7</author><text>The company which consider every single bit of data as &amp;quot;gold&amp;quot; decided not to keep their API&amp;#x27;s access log &amp;gt; 2 weeks? wow!</text></item><item><author>Bhilai</author><text>&amp;gt;We made Google+ with privacy in mind and therefore keep this API’s log data for only two weeks. That means we cannot confirm which users were impacted by this bug.&lt;p&gt;Wait, so they only keep two weeks worth of logs and within these logs they did not find anyone abusing this flaw. How can they be certain for any time period from two week prior ?</text></item></parent_chain><comment><author>shpx</author><text>Is it possible that your impression of the company is (was?) off?&lt;p&gt;I&amp;#x27;m not surprised. They (claim to) do something similar with the logs of their DNS service: two weeks of anonymized logs after which they &amp;quot;randomly sample a small subset for permanent storage&amp;quot;.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;developers.google.com&amp;#x2F;speed&amp;#x2F;public-dns&amp;#x2F;privacy&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;developers.google.com&amp;#x2F;speed&amp;#x2F;public-dns&amp;#x2F;privacy&lt;/a&gt;</text></comment>
<story><title>Google Exposed User Data, Feared Repercussions of Disclosing to Public</title><url>https://www.wsj.com/articles/google-exposed-user-data-feared-repercussions-of-disclosing-to-public-1539017194</url></story><parent_chain><item><author>skbly7</author><text>The company which consider every single bit of data as &amp;quot;gold&amp;quot; decided not to keep their API&amp;#x27;s access log &amp;gt; 2 weeks? wow!</text></item><item><author>Bhilai</author><text>&amp;gt;We made Google+ with privacy in mind and therefore keep this API’s log data for only two weeks. That means we cannot confirm which users were impacted by this bug.&lt;p&gt;Wait, so they only keep two weeks worth of logs and within these logs they did not find anyone abusing this flaw. How can they be certain for any time period from two week prior ?</text></item></parent_chain><comment><author>pinewurst</author><text>It&amp;#x27;s not like they don&amp;#x27;t have the storage space for more. Heck, the full logs for all Google+ usage probably fit on a USB stick. :)</text></comment>