Forgetting the Forgotten with Lethe: Conceal Content Deletion from Persistent Observers

Abstract : Most social platforms offer mechanisms allowing users to delete their posts, and a significant fraction of users exercise this right to be forgotten. However, ironically, users' attempt to reduce attention to sensitive posts via deletion, in practice, attracts unwanted attention from stalkers specifically to those (deleted) posts. Thus, deletions may leave users more vulnerable to attacks on their privacy in general. Users hoping to make their posts forgotten face a "damned if I do, damned if I don't" dilemma. Many are shifting towards ephemeral social platform like Snapchat, which will deprive us of important user-data archival. In the form of intermittent withdrawals, we present, Lethe, a novel solution to this problem of (really) forgetting the forgotten. If the next-generation social platforms are willing to give up the uninterrupted availability of non-deleted posts by a very small fraction, Lethe provides privacy to the deleted posts over long durations. In presence of Lethe, an adversarial observer becomes unsure if some posts are permanently deleted or just temporarily withdrawn by Lethe; at the same time, the adversarial observer is overwhelmed by a large number of falsely flagged un-deleted posts. To demonstrate the feasibility and performance of Lethe, we analyze large-scale real data about users' deletion over Twitter and thoroughly investigate how to choose time duration distributions for alternating between temporary withdrawals and resurrections of non-deleted posts. We find a favorable trade-off between privacy, availability and adversarial overhead in different settings for users exercising their right to delete. We show that, even against an ultimate adversary with an uninterrupted access to the entire platform, Lethe offers deletion privacy for up to 3 months from the time of deletion, while maintaining content availability as high as 95% and keeping the adversarial precision to 20%.
Type de document :
Communication dans un congrès
PETS 2019 - 19th Privacy Enhancing Technologies Symposium, Jul 2019, Stockholm, Sweden. pp.1-21
Liste complète des métadonnées

https://hal.archives-ouvertes.fr/hal-01959119
Contributeur : Patrick Loiseau <>
Soumis le : mardi 18 décembre 2018 - 14:52:01
Dernière modification le : jeudi 17 janvier 2019 - 11:22:20

Fichier

Minaei-etal_Lethe-ContentDelet...
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : hal-01959119, version 1

Collections

Citation

Mohsen Minaei, Mainack Mondal, Patrick Loiseau, Krishna Gummadi, Aniket Kate. Forgetting the Forgotten with Lethe: Conceal Content Deletion from Persistent Observers. PETS 2019 - 19th Privacy Enhancing Technologies Symposium, Jul 2019, Stockholm, Sweden. pp.1-21. 〈hal-01959119〉

Partager

Métriques

Consultations de la notice

37

Téléchargements de fichiers

58