[deleted]
GDPR for lazy people: Block all European users with Cloudflare Workers
651–660 of 1001 posts
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#652Earlier quoted context omitted.
> This may be an edgy and rebellious sentiment that makes me a radical anti-privacy activist, but unless you're storing levels of information on me that are similar to facebook/google/etc., I do not give a damn whether you're soft-deleting or hard-deleting my IP address and my user account. If your web app is just a web app, and not one component of a vast surveillance octopus which puts tentacles on almost every web…
If you don't store PII, you don't have to do any work. Done. If you need to have PII for your webapp to function, you barely have to do any work besides giving the that care people their rights The problem is not the work that the GDPR requires, the problem is the work I'll have to put into understanding the GDPR. I think it's mainly a difference in viewpoint: this is my data for me. Not yours. This is the part that…
Many of these people would happily give their government the power to wipe your memory if the technology to do so existed. It's insane.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#653I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…
HN has been overrun by MBAs a long time ago
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#654I keep seeing these posts on how to block European users to avoid the GDPR. As a citizen of Europe, seeing these posts consistently making it to the front page is disappointing. It would seem that Silicon Valley perceives the GDPR as more of a hindrance than an opportunity to offer users better privacy. Nothing has been learned.
I really enjoyed this quote from [1] > I would be very wary of a company who claims this legislation is onerous. It is potentially life threatening to companies who do very shady things without your consent. That much is true. That is the entire point. I somewhat suspect those companies hiding behind the 'oh lets just block Europe' excuse just don't want to admit the extent of what they are doing with the data. US ci…
Well, either that or the cost of complying isn’t worth the lost business. It doesn’t need to be shady, that would be a pure business decision.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#655Earlier quoted context omitted.
I'm a Brit. I am the MD of a small IT company. I have two partners and 20 employees. We started in 2000. We turn over about £1.5Mpa. We sell our services to people and organisations. Our backups are now smaller these days (thanks to GDPR). I understand that because you are outside the EU you might feel like a target but that is not the point of GDPR. There is no way on earth that the EU as a whole has looked on your…
It's reassuring to hear that the GDPR is not meant to target little startups and projects but I would like it a lot better if it said that in the actual law, rather than just trusting all current and future regulators to treat me kindly. If it's only meant to be used against big companies or extreme offenders, why doesn't it say so? It seems like the spirit of the law and the language of the law are not aligned and i…
"but I would like it a lot better if it said that in the actual law"
Have you read the bloody law! http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX...
This is legislation designed to protect not only me (as an individual) but you as well (as a probable foreigner) from me!
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#656Earlier quoted context omitted.
I'm a Brit. I am the MD of a small IT company. I have two partners and 20 employees. We started in 2000. We turn over about £1.5Mpa. We sell our services to people and organisations. Our backups are now smaller these days (thanks to GDPR). I understand that because you are outside the EU you might feel like a target but that is not the point of GDPR. There is no way on earth that the EU as a whole has looked on your…
> There is no way on earth that the EU as a whole has looked on your company/project or whatever and decided to screw you. The rules are enforced via third-party litigation. So its not the "EU", but some lawyer looking for a nice payday that you have to worry about.
While the GDPR allows for third party litigation, the violations are expected to be handled though relevant data protection authorities, and direct litigation is a last recourse if all else fails. If you haven't tried and failed to resolve your GDPR complaint through the relevant authorities, you'll be laughed out of the court, if you try to bring a GDPR case to it.
Edit: any replies instead of just downvotes? Yes, it isn't spelled out entirely in the GDPR but it isn't operating in an empty place. The civil law systems of most of EU have certain assumptions in place, like that you will first try to find recourse through proper avenues, and only then try direct litigation. If anything, you might actually try to sue the data protection authority for mishandling your case.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#657I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…
You are right. Not to mention this gives a huge advantage to big players like Facebook and Google. They can screw small guys by pointing out violations.
EU member countries should consider getting out of this bureaucracy.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#658Earlier quoted context omitted.
> Someone says "delete me and my purchases", so you do, and oops - total book sales are now wrong. Erase the name and address fields from the user in the database. You don’t have to delete any line, and that person doesn’t have any personal info in your database anymore. Problem solved.
Two days later the customer files a chargeback with their credit card company and the credit card company wants you to provide documentation for the transaction.
It is utterly remarkable that the same people who earnestly believe humanity will establish a colony on Mars also think it’s impossible to properly handle PII.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#659Earlier quoted context omitted.
The transition period will be difficult for some people, but I think that GDPR will probably be good for the world in the long-term. New companies will start building their systems correctly from the beginning, and, ideally, the law won't be too heavily enforced on small companies during the transition period. The next generation of programming tutorials will show people how to build things in privacy-conscious ways.…
Maybe. It is more likely the United States will create the opposite regime. Since all major Internet software firms are American or Chinese it is also possible that the EU May sideline itself.
I think it's more likely that other countries will adopt similar data protection rules (and they should).
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#660Earlier quoted context omitted.
The problem isn’t so much as there’s a cost to implementing GDPR, but that the tech community has been “move fast and break things” and refused to handle things properly before. If all you do about my PII is “set delete = 1” (which one could argue isn’t even the best practice in every scenario), then I probably don’t want you to handle my PII at all. To your example, you could easily not switch to a CASCADE, but inst…
This may be an edgy and rebellious sentiment that makes me a radical anti-privacy activist, but unless you're storing levels of information on me that are similar to facebook/google/etc., I do not give a damn whether you're soft-deleting or hard-deleting my IP address and my user account. If your web app is just a web app, and not one component of a vast surveillance octopus which puts tentacles on almost every websi…
> I do not give a damn whether you're soft-deleting or hard-deleting my IP address and my user account
You don't give a damn; neither do those computer illiterate people who use the same email address and password for everything, and one leak of some shitty inconsequential website may obliterate their entire online presence.