I guess maybe the slowness contributes to why #AWS never added the same kind of "extract a ZIP'ed #userData payload" that's available in #cloud-init. If #EC2Launch is this gawdawful slow with a text-stream payload, how slow would it be if it had to convert a ZIP-stream into uncompressed data".

The speed-difference between #EC2Launch and #cloud-init is pretty stark. When I fire up a #Linux instance that has a #userData payload, doing:

sleep $(( 60 * 2 )) ; ssh <USER>@<INSTANCE_ID>Is usually sufficient to get me a login. If I launch a Windows-based EC2, I usually have to do:
sleep $(( 60 * 10 )) ; aws ssm start-session --target <INSTNCE_ID>Unless I want the dreaded "not available error". Worse, while two-minute pause for the cloud-init/Linux EC2 usually logs me in with the cloud-init content well underway, the #SSM login, after a ten-minute pause, usually has me arriving well before EC2Launch has even finished unpacking its data to start executing powershell scripts. It's like "dafuq is taking you so long??"

ICYMI: OpenAI's privacy policy now lets advertisers send purchase data: OpenAI updated its US privacy policy on April 30 to formalize advertiser data sharing, purchase data receipt, and user targeting through marketing partners. https://ppc.land/openais-privacy-policy-now-lets-advertisers-send-purchase-data/ #OpenAI #PrivacyPolicy #DataPrivacy #Advertising #UserData
OpenAI's privacy policy now lets advertisers send purchase data

OpenAI updated its US privacy policy on April 30 to formalize advertiser data sharing, purchase data receipt, and user targeting through marketing partners.

PPC Land
OkCupid gave nearly 3 million user photos to a facial recognition startup: FTC charges OkCupid with sharing nearly 3M user photos with a facial recognition firm, violating privacy promises. Match Group settlement filed March 30, 2026. https://ppc.land/okcupid-gave-nearly-3-million-user-photos-to-a-facial-recognition-startup/ #OkCupid #PrivacyViolation #FacialRecognition #UserData #FTCCharges
OkCupid gave nearly 3 million user photos to a facial recognition startup

FTC charges OkCupid with sharing nearly 3M user photos with a facial recognition firm, violating privacy promises. Match Group settlement filed March 30, 2026.

PPC Land
๐Ÿšจ Oh no, a tragedy! An engineer accidentally flicked the #CDN switch and now everyone's lunch orders have been publicly cached for 52 whole minutes. ๐Ÿ• But don't worry, only 0.05% of the internet knows you like extra anchovies. Move along, folks, nothing to see here except some spicy user data! ๐Ÿ”๐Ÿ’พ
https://blog.railway.com/p/incident-report-march-30-2026-accidental-cdn-caching #tragedy #disaster #userdata #technews #privacyconcerns #HackerNews #ngated
Incident Report: March 30th, 2026 โ€” Authenticated user data cached

Railway experienced an incident where CDN features were accidentally enabled for some domains without users enabling them.

Railway Blog
Please, please, please stop using passkeys for encrypting user data

Passkeys are the future of authentication, but using them for data encryption is a disaster waiting to happen. Overloading these credentials creates a dangerous blast radius that can lead to the irreversible loss of a user's most sacred memories and documents.

Timbits

#Lawmakers Ask Tech Companies What #UserData They Provided to #DHS.

The requests followed Times reporting that the Department of Homeland #Security had sent #Meta and other companies #subpoenas for information on accounts that track or comment on #ICE.
#privacy #immigration #deportation

https://www.nytimes.com/2026/02/25/technology/lawmakers-tech-companies-dhs.html

Lawmakers Ask Tech Companies What User Data They Provided to D.H.S.

The requests followed Times reporting that the Department of Homeland Security had sent Meta and other companies subpoenas for information on accounts that track or comment on ICE.

The New York Times
Google expands tools to let users remove sensitive data about themselves from Search | TechCrunch

Users will be able to more easily request the removal of results that include private information or non-consensual explicit imagery.

TechCrunch