Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tunngle is shutting down tomorrow due the new GDPR

tunngle.net

Post reply on HN
Print view View original

11–18 of 18 posts

Re: Tunngle is shutting down tomorrow due the new GDPR

#11

Post by apahwa »

existencebox wrote: post #9
ohazi wrote: post #5

Earlier quoted context omitted.

Bullshit. For most startups, the recipe will look something like: Write a set of scripts to pull user-related lines out of your database(s), write another script to sanitize the output, write another script to delete the lines from script #1 and act as the big red delete button. This is giving large corporations more power? Seriously?

Context: I'm currently responsible for GDPR compliance within a small corner of a Very Large Company. I'm going to avoid making a statement about GDPR as a whole or about the OP, but I will say that I don't think large companies having an advantage at this phase is "bullshit." One specific aspect of GDPR seems a good example of this. Third party data processors. If you use various third party products that provide tr…

except BigCo also has tons of systems, autobackups, legacy code, and S3 buckets that's no one understands or has enough knowledge about. you know it's secure but you don't know what the downstream impact would be of making changes to those systems. so now you have to divert a ton of resources to figure things out - and no SWE in the company will willingly move to _that_ project.

while small companies don't have the big legal teams, they can just hire a consulting firm to go over it with them. they also have the benefit of being nimble, having smaller dependency trees, and typically using 3rd party tools which will generally implement this tooling anyways since their customers will likely need it. BigCo likely did a bunch of roll-your-own projects that have become black boxes over time.

Re: Tunngle is shutting down tomorrow due the new GDPR

#13

Post by ericb »

I think there might be some pretty draconian side effects to properly implementing GDPR, but I'd like to hear from someone who knows to what extent these things might be true:

* The legal tracked information includes IP addresses, which means all logs must be able to selectively expunge IP address info.

* You can no longer have soft-deletes as a safety mechanism to maintain referential integrity if your data is (as is common) related to a user/account as you are responsible for being able to expunge that data.

* There are no exemptions for first time visitors, which means you can't just put up a no-EU unwelcome mat and serve up any third party tracking.

* The penalties are pretty draconian for a small business.

* It looks like retargeting businesses might be in trouble? Maybe?

Re: Tunngle is shutting down tomorrow due the new GDPR

#14

Post by Angostura »

rdlecler1 wrote: post #3

Most startups simply don’t have the resources to figure out what to do to be compliant. I’m guessing that Facebook had a dozen lawyers working on this and even more engineers. This is only going to put up a barrier to startup creation and give large corporations more power.

If I can manage it for kid’s swimming club, I think most small startups can manage it unless user data is a big part of its value proposition

Re: Tunngle is shutting down tomorrow due the new GDPR

#15

Post by dbbk »

ericb wrote: post #13

I think there might be some pretty draconian side effects to properly implementing GDPR, but I'd like to hear from someone who knows to what extent these things might be true: * The legal tracked information includes IP addresses, which means all logs must be able to selectively expunge IP address info. * You can no longer have soft-deletes as a safety mechanism to maintain referential integrity if your data is (as i…

The penalties given are a max figure. A small business isn't going to be fined 20 million euros for slipping up. In fact, in the UK the ICO have stated that their preference is to avoid having to impose penalties as much as possible.

Re: Tunngle is shutting down tomorrow due the new GDPR

#16

Post by georgebarnett »

Angostura wrote: post #14
rdlecler1 wrote: post #3

Most startups simply don’t have the resources to figure out what to do to be compliant. I’m guessing that Facebook had a dozen lawyers working on this and even more engineers. This is only going to put up a barrier to startup creation and give large corporations more power.

If I can manage it for kid’s swimming club, I think most small startups can manage it unless user data is a big part of its value proposition

>> unless user data is a big part of its value proposition

I think this is the real issue. Some large percentage of the current crop of startups don't actually have a business model other than "get as much data as possible and sell it to the lowest bidder".

GDPR is adding a substantial implementation tax to that model and what we're seeing is the reset for companies who can't survive.

Re: Tunngle is shutting down tomorrow due the new GDPR

#17

Post by rdlecler1 »

apahwa wrote: post #11
existencebox wrote: post #9

Earlier quoted context omitted.

Context: I'm currently responsible for GDPR compliance within a small corner of a Very Large Company. I'm going to avoid making a statement about GDPR as a whole or about the OP, but I will say that I don't think large companies having an advantage at this phase is "bullshit." One specific aspect of GDPR seems a good example of this. Third party data processors. If you use various third party products that provide tr…

except BigCo also has tons of systems, autobackups, legacy code, and S3 buckets that's no one understands or has enough knowledge about. you know it's secure but you don't know what the downstream impact would be of making changes to those systems. so now you have to divert a ton of resources to figure things out - and no SWE in the company will willingly move to _that_ project. while small companies don't have the b…

Just hire a consulting team? Yes, that’s the first thing you should do as you start a company in your basement with $0.

Re: Tunngle is shutting down tomorrow due the new GDPR

#18

Post by rdlecler1 »

georgebarnett wrote: post #16
Angostura wrote: post #14

Earlier quoted context omitted.

If I can manage it for kid’s swimming club, I think most small startups can manage it unless user data is a big part of its value proposition

>> unless user data is a big part of its value proposition I think this is the real issue. Some large percentage of the current crop of startups don't actually have a business model other than "get as much data as possible and sell it to the lowest bidder". GDPR is adding a substantial implementation tax to that model and what we're seeing is the reset for companies who can't survive.

No, any startup that uses data to make an adaptive service and better user experience is also at risk. Want to record what people bought so that you can show them similar items next time or recommend New articles they might like? Here comes the dumb web.
Post reply on HN