Path: ...!news.misty.com!weretis.net!feeder9.news.weretis.net!news.quux.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Pancho <Pancho.Jones@protonmail.com>
Newsgroups: comp.os.linux.misc
Subject: Re: More systemdCrap
Date: Tue, 11 Mar 2025 16:25:40 +0000
Organization: A noiseless patient Spider
Lines: 19
Message-ID: <vqpo64$21rgp$1@dont-email.me>
References: <vqn41l$1efis$1@dont-email.me> <vqna2v$1fks2$1@dont-email.me>
 <vqnbm7$1g56j$1@dont-email.me> <gjo3alxe38.ln2@Telcontar.valinor>
 <vqnja1$1hrbi$1@dont-email.me> <rq44alxv4u.ln2@Telcontar.valinor>
 <20250310152856.00004b5a@gmail.com> <vqoqfk$1s78c$3@dont-email.me>
 <op.228vudbda3w0dxdave@hodgins.homeip.net> <vqpinq$210sd$5@dont-email.me>
 <vqpm42$2221u$1@dont-email.me> <20250311085926.000056b7@gmail.com>
 <vqpndr$2221u$2@dont-email.me> <20250311091934.0000580d@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 11 Mar 2025 17:25:41 +0100 (CET)
Injection-Info: dont-email.me; posting-host="11bffce6b6aecc3d80deb806213bdf21";
	logging-data="2158105"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1983ZYFKb1BnrrFyP0GN3c/Eb8er74OdDM="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:nZTwpLl4BBo8+ZaNhfPd8vglvAY=
In-Reply-To: <20250311091934.0000580d@gmail.com>
Content-Language: en-GB
Bytes: 2386

On 3/11/25 16:19, John Ames wrote:
> On Tue, 11 Mar 2025 16:12:43 +0000
> Pancho <Pancho.Jones@protonmail.com> wrote:
> 
>> Yes cryptography doesn't stop you deleting records, it does allow
>> people to see when records have been deleted. When there is data
>> missing, data they would expect to see.
> 
> True - which further undermines the argument that purge-by-source
> cannot be added without completely compromising audit accountability.
> 

I don't think anyone is saying it couldn't be done. However, deleting 
stuff clearly does compromise accountability. Developing a system that 
enables it, while also allowing good practice, is probably more complex.

I won't say any more, because security, reliability is way outside my 
knowledge. I'm just a dodgy programmer that you want to defend a system 
from, I'm not an arch villain/hacker.