Google AI Studio fakes data deletion. VRP auto-banned me in 60s for reporting it

Yeah, right.

> You can certainly ask me to stop showing it to people.

There is much better solution: add author's websites to dnsmasq, so they stop resolving:

http://www.expatsoftware.com/ http://www.expatsoftware.com/articles https://stravaeger.com/ http://www.twiddla.com/ https://www.s3stat.com/

I only wish there was a centralized registry of websites that are controlled by parties that have galavant attitude if not deliberate misunderstanding of what does the right to privacy mean.

“I don’t get it, why do people expect a promise to permanently delete your things to akshually do just that”

Such a goofball stance on the subject tbh.

Deletion means deletion. There is no such thing as 'we didn't delete it just in case you did it by accident.' That is just a convenient excuse for illegally hoarding user data, and the law strictly forbids it. What is their lawful basis under the GDPR to keep it after I demand deletion? Exactly: none at all.

First, no you have not. Second, this would be distinct from actually breaking a law.

Think about the design here for a moment. When you click delete the file goes into the "recoverable, but to be deleted" state. Then after 25 days it goes into the "to be permanently deleted" state and various backend jobs start removing it from storage under a maximum time frame of 30 days. So Google communicates that you have 25 days to recover the file (you do). After 25 days the file is in an indeterminate state because it may be deleted from various backend storage systems. After 55 days it is guaranteed to be completely gone.

This is... how most such systems work. The laws governing data deletion give time windows. They don't specify that files must be deleted instantly. "Fraud" is also a specific legal term. Just saying "well the warning says it will be deleted permanently but it takes some time to do that" is not meaningful.

I also have no idea what "mathematically proven" means in this case.

> Google is the one that will suffer the consequences, not me, because I am going to sue them. I am the first person in the world to conclusively prove this architecture fraud against them.

I remember the first time I submitted something to a VRP. I was so proud of my accomplishment. I was a real security researcher! This made me overemphasize the importance of my finding in my mind. I can understand how pushback against your report feels like a personal slight but I assure that it isn't. The reason that you are getting banned from these systems is not because you've found some great crime or something so dangerous. The reason you are getting banned from these systems is because you are a spammer now.

I can assure you of two things.

First, you are not the first person in the world to notice this deletion pattern. It is not unique to these particular files. Second, you will not successfully sue Google. This design is commonplace across the industry.

You are only causing yourself pain here.