Hacker News Reader

Comment by visarga | Hacker News Reader

Git is also incompatible with GDPR, you can't simply delete a file from all history.

Git is not really intended for personal data

Yeah, I don't really understand why you would like to stuff personal data into a git repository (unless we're strictly speaking about author data). It's really not the tool for it.

Now for those who decided that a blockchain is the perfect solution for storing personal data however...

Name and Email is personal data...

You can, you just have to be willing to rewrite history. See git-filter-branch (and don't forget to read the fat WARNING).

Git allows you to rewrite history, that is not the problem.

But you might have a hard time chasing down every copy, it's a distributed system by design.

Once you rewrite history, you've basically broken the git concept. It's an emergency feature if you've accidentally committed a security token or similar, or before you've pushed upstream, but if you're rewriting history with any sort of regularity, you're using git very, very wrong.

Don't store your users PII in a git repository then.

The use case is to do dataset versioning for ML. The dataset itself is updated frequently. It would be nice to use a tool that can store efficiently when small changes are made yet allow versioning for reproducibility.

If you do ML on sensitive data from actual users, reproducibility is a crime, not a feature. You need to ensure that your ML forgets deleted data completely and irreversibly.

Oh man, all my WORM tapes are not GDPR compatible...thats terrible!!!

Reply on news.ycombinator.com