Hacker News Reader

I'm still a little confused. It seems the "poke" is encrypted, so they encrypt the picture that's sent. But then the encryption key is deleted.

Does that mean the "encrypted photo" is deleted after 2 days, or is the photo's "identification key" (like a hash or ID) deleted after 2 days?

View on HN

They're (explicitly) deleting the key; provided they're not using ancient or horribly broken encryption, the image itself is effectively indistinguishable from gibberish. I'd assume the images themselves get deleted as well, but without a key they're worthless anyway.

Sounds like the photo itself may or may not be deleted, but the keys definitely are. Though the "two days" part is a bit of a misnomer as the key backups exist for 90 days. Even if they are deleting the db copy of the photo, they probably aren't going the whole hog and clearing it out of backups,etc (as mentioned elsewhere) so this is why the keys are relevant.

Reply on news.ycombinator.com