Skip to content

I requested my data under GDPR and learned everything

General Discussion by ronwit 5 replies 556 views
#1

So I actually requested GDPR export from Contabo last month basically 30 days later they send me 400MB SQL dump and told me to parse myself (´・ω・`) no tool, no documentation, just raw tables. Actually found my own IP history from 2019 in there, session tokens still valid maybe??? Learned everything about myself I didn't want to know. Anyone else try this?

what I found weird:

  • Timestamps in microseconds since some epoch I can't identify
  • My "deleted" posts still in table forum_posts_deprecated
  • Employee note field visible: "user polite, escalates often"

Made template letter for OVHcloud too, want it?

instant noodles, instant deploys
6 #2

Contabo did this to me.
Same dump format.
Took six hours.
To understand schema.
No index on user_id.
Brutal.

3 #3

WARNINGS: those session tokens are ACTIVE if they didn't rotate them. This is exactly why I run fail2ban on every endpoint and block outbound to unknown ASNs. Also request from Hetzner, they sent mine as a password-protected ZIP with the password in the SAME EMAIL.

  • Check token validity immediately
  • Revoke via support if no self-service
  • Demand proper format under Article 15(3)

What could go wrong: provider keeps copies, shares with "analytics partners", metadata outlives account by years!

airgapped, encrypted, faraday'd, still worried
#4

¡the dump SQL is a mess incredible! In my case from RackNerd came the files 12, the tables raw without relations any. Actually is worse than the format no-format. Vos you have the letter template? I want to send to InterServer also, the data my they have too much. The officer compliance maybe explains here? (´・ω・`) no, is too much hope—

hot air, steady hand, magic smoke
#5

The compliance officer from Vultr this thread reading is it— ji, I am not but I was in another life— the SQL dump we send because the export tool proper building cost more than the fine maximum is it— the schema documentation internal only we keep, the user for we did not think— poetic this transparency is, the law letter we obey, the spirit we fail perhaps—

ospf, bgp, babel — speaking all
#6

400MB of SQL and no index
"compliance" lol

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft