Live data from Hacker News

Publishers Haven't Realized How Big a Deal GDPR Is

baekdal.com

231–240 of 468 posts

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#231
post #166

Thanks EU, we'll have more popups than ever that everyone's going to agree out of habit. It's not fun seeing a popup on every site you visit. This should have been a brower-based implementation globally that every site must adhere to. Even worse for me, I browse exclusively in private/incognito mode and this is going to make that unusable with consent popups on sites on every visit.

> This should have been a brower-based implementation globally that every site must adhere to. This. if EU actually cared enough, they 'd go to the browser vendors to enforce some basic prompts on tracking and forms, and it would be better than gdpr because it would work for everyone from day 1. This law will bring a few more prompts and not much else (because most services can be provided with slight changes like ha…

Or the tech industry could decide that'd be useful to have and implement it. They could put it in a HTTP header with a nice name, maybe "do not track", and don't bother people activating that with tracking or prompts. Oh wait...

How many websites are doing that? How many choose "let's bother our users" over respecting their stated preference?

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#233
post #170

Earlier quoted context omitted.

You don't see the potential problem if the only media that is able to exist is that which is state sponsored? You may be happy with the state sponsored options now, but will that always be the case? Would you feel the same if you living in the Soviet Union or Germany circa 1940?

German public media is not state sponsored. It’s an independent entity which is paid for by public fees (not taxes, the money never goes through the governments coffers). There are some levers that could be used to exert some level of control, for example the height of the fee is set by a commission that is partly under government control and many ex-politicians get elected into high positions, but all in all, public…

What is the difference between a tax and a mandatory fee? If government requires me to pay a fee, it’s a tax.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#234
post #166

Thanks EU, we'll have more popups than ever that everyone's going to agree out of habit. It's not fun seeing a popup on every site you visit. This should have been a brower-based implementation globally that every site must adhere to. Even worse for me, I browse exclusively in private/incognito mode and this is going to make that unusable with consent popups on sites on every visit.

I'm not bothered by it. If websites see their engagement fall due to so many popups, maybe they'll stop asking for so many things that require consent. Come to think of it, maybe that's the point.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#235

Earlier quoted context omitted.

It doesn't matter what you consider IP addresses to be, it matters what European regulatory authorities consider them to be. And yes, many IP addresses can be linked to a specific person. I don't doubt that, by being logged in to Google, Facebook, and a bunch of other services, and by having an ISP that provides a unique IP address per subscriber, that the majority of sites out there that use 3rd party tracking know…

A stupid question, does this mean i now need to figure out a way to mask any IP addresses in any AWS logs? Like ELB/Cloudfront/VPC logs?

This is going to be a much bigger problem for Amazon than it is for you personally, so it'll be interesting to see what AWS logs even look like come May 25th. If you don't have consent and a compelling business reason to store this PII then they definitely don't.

To give you one idea of how things will change in a post-GDPR world, I can tell you a story about how things are going in my industry: Most PII is going to be removed from domain WHOIS information.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#236
post #75

Earlier quoted context omitted.

IIRC it applies to EU citizens wherever they are, not just people who are on EU territory.

So do American constitutional protections apply to Americans living in France? I am having a hard time understanding GDPR jurisdictional power. US citizens in France aren’t protected by the US Fair Credit Act with French banks, even when those French banks have US subisidiaries because a French company in France isn’t subject to US legal jurisdiction. Even FATCA doesn’t subject a French bank to US law — it subjects F…

> This idea that EU citizens are protected worldwide is just ridiculous. EU jurisdiction doesn’t extend beyond the EU.

You are the only person who has this view. EU citizens are subject to the local laws of whatever country they reside in. However if they are interacting with an EU company then GDPR applies to that company, no matter where they reside. But an EU citizen living in America and using an American service has no GDPR protections. Just like they have no EU right-to-work protections if they decide to work in America. GDPR explicitly states that it (generally) only applies to companies which do business with people who are within the EU's borders (citizenship is not a prerequisite of GDPR protection) or EU businesses.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#237
post #7

What if I told you... (Morpheus photo) 1. Social websites don’t have to be giant, centralized communities too big to police themselves. 2. People need more tools to help them achieve things in the real world, rather than spending hours a day chatting about the real world online. 3. There are ways to make money online without ads begging you to click on them, and they involve real-world goods and services that your we…

>There are ways to make money online without ads begging you to click on them, and they involve real-world goods and services that your website can help connect people for? Not every website is in a position to sell something directly. That's how ads work in the first place. I run a collaborative writing forum that is predominantly used by teens. I make so little money off it that I'm running it as a charity because…

I totally agree that your forum should exist. My main question would be, what exactly are you providing as a service ti the teens? Custom software? A server? It seems to be quite cheap to just download something and run it on a server. I’d like to see a self-configuring, end-to-end encrypted decentralized thing that people can literally just run on their own machines and let servers act like dumb hubs. Something like SAFE network. Then the forum software is just a client side thing like SourceTree for git. And that can be open source and free for the teens.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#238

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

Would usernames be included? Seems incredibly taxing to encrypt usernames too but is that what's suggested?

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#240
post #166

Thanks EU, we'll have more popups than ever that everyone's going to agree out of habit. It's not fun seeing a popup on every site you visit. This should have been a brower-based implementation globally that every site must adhere to. Even worse for me, I browse exclusively in private/incognito mode and this is going to make that unusable with consent popups on sites on every visit.

> This should have been a brower-based implementation globally that every site must adhere to. This. if EU actually cared enough, they 'd go to the browser vendors to enforce some basic prompts on tracking and forms, and it would be better than gdpr because it would work for everyone from day 1. This law will bring a few more prompts and not much else (because most services can be provided with slight changes like ha…

IIRC this is exactly what is being done with the upcoming ePrivacy directive. For example I believe it will become mandatory to honour the DNT header.
Post reply on HN