That's what I'm really trying to convey to many people (I work in privacy products) but people keep talking to me about "trust" which is non-sense, I keep arguing that if the data is on the server of someone, you must always assume that they'll use it somehow, it's a bit ridiculous imo to think otherwise, imagine you are a company and you sit with literal gold in a sqlite DB and you are like hmmm no let's not do this query, that makes no sense from a business standpoint.

▲

grayhatter 19 hours ago | parent [-]

> imagine you are a company and you sit with literal gold in a sqlite DB and you are like hmmm no let's not do this query, that makes no sense from a business standpoint.

I expect all humans to treat other humans with dignity and respect. I acknowledge that many people will likely fail to meet that expectation, quite often I'm sure. But I'm never going to accept or become an apologist for this asshattery.

It's wrong to violate the privacy and dignity of other people. The correct response when you see people hurting others is not to make up an excuse about "business need", instead some anger, disappointment, and loud condemnation is required.

Stop making excuses for those hurting others so they can make money.

	▲	pixel_popping 19 hours ago \| parent [-]
		Yes, I agree that it's wrong, my point is really about the data itself being in their servers. Let's be real, a service nowadays DO have the choice to enable client-side encryption or methodology to be unable to consult data themselves, so any company that chose against that during development phase might have eventual motives of processing the data, my point is really about the blind trust from users which is just wrong from a security standpoint, every trust step added that you can't verify is just "faith" at this point, not security. Term of services are irrelevant as they are breached all the time, major companies are getting fined all the time for it, we must rely on cryptography, not human trust and people needs to stop being surprised the moment they learn that the data they accepted to leave in cleartext is used, that would be a first step toward forcing the change and using proper security standards. Want a useful action? Let's change the law to force cryptography regarding user data, attestation, SGX or whatever method (there is plenty), that would be a great start, the fact that in 2026 it's still legal to process user chats in plaintext is mindblowing.