Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Our Attempt at Writing an Honest Privacy Policy

neflabs.com

Post reply on HN
Print view View original

11–20 of 27 posts

Re: Our Attempt at Writing an Honest Privacy Policy

#11

Post by CosmicSteve »

dsr_ wrote: post #9
rococode wrote: post #7

Always interesting to see GDPR spurring actual changes. On an unrelated note though, is it just me or is the font on that page HUGE? It doesn't seem to resize either, I zoomed out to 30% and it's still giant.

Firefox: all text is huge. Chrome: text is reasonably sized. Contact form: "4096-bit encrypted".

Hey dsr,

I'll take a look via Firefox on desktop a bit later as everything seems fine through the mobile browser.

Not sure what you're referring to regarding the contact form though?

Re: Our Attempt at Writing an Honest Privacy Policy

#12

Post by beberlei »

typomatic wrote: post #6
Boulth wrote: post #2

I've read the new policy. Are they really disabling all server logs? Maybe that's just me but that seems a bit extreme.

GDPR is a bit extreme. This isn't an observation on the goodness of it, simply that it requires extreme measures (relative to the status quo) for compliance.

that is not true being that extreme.

as per GDPR 6(1) grounds for processing can be (b) performance of contract, (c) compliance with legal obligations (d) vital interests of data subject - which can all cover logging ip addresses and user agents for network security reasons (for a short amount of time) to protect the user, which log files are often used for. (IANAL)

Re: Our Attempt at Writing an Honest Privacy Policy

#13

Post by MightySCollins »

CosmicSteve wrote: post #8
rococode wrote: post #7

Always interesting to see GDPR spurring actual changes. On an unrelated note though, is it just me or is the font on that page HUGE? It doesn't seem to resize either, I zoomed out to 30% and it's still giant.

Hi rococode, what are you viewing the site on? I'm curious if you're experiencing this is on something that's a bit out of the ordinary in terms of setup and whatnot. Regardless, I'm curious if we can do something. You see, the font is indeed larger than other sites out there as NefLabs.com is designed in accordance with DOJ Section §508 best practices for the visually impaired. You can find additional information on…

Linux Chrome 65.0.3315.3. Resolution 2560x1440. Looks like it just gets bigger the larger the view width `font-size: 1.7vw;` Probably want to constrain that. See https://i.imgur.com/erOZkOT.png

Re: Our Attempt at Writing an Honest Privacy Policy

#14

Post by bitofhope »

CosmicSteve wrote: post #8
rococode wrote: post #7

Always interesting to see GDPR spurring actual changes. On an unrelated note though, is it just me or is the font on that page HUGE? It doesn't seem to resize either, I zoomed out to 30% and it's still giant.

Hi rococode, what are you viewing the site on? I'm curious if you're experiencing this is on something that's a bit out of the ordinary in terms of setup and whatnot. Regardless, I'm curious if we can do something. You see, the font is indeed larger than other sites out there as NefLabs.com is designed in accordance with DOJ Section §508 best practices for the visually impaired. You can find additional information on…

Firefox 59 on Linux. Font is reasonable but zooming the page does nothing except scrolling up and down.

Re: Our Attempt at Writing an Honest Privacy Policy

#15

Post by CosmicSteve »

MightySCollins wrote: post #13
CosmicSteve wrote: post #8

Earlier quoted context omitted.

Hi rococode, what are you viewing the site on? I'm curious if you're experiencing this is on something that's a bit out of the ordinary in terms of setup and whatnot. Regardless, I'm curious if we can do something. You see, the font is indeed larger than other sites out there as NefLabs.com is designed in accordance with DOJ Section §508 best practices for the visually impaired. You can find additional information on…

Linux Chrome 65.0.3315.3. Resolution 2560x1440. Looks like it just gets bigger the larger the view width `font-size: 1.7vw;` Probably want to constrain that. See https://i.imgur.com/erOZkOT.png

Hey there, much appreciate the info/specs, and screenshot.

The site was designed using vw-sized fonts to maintain the same user experience no matter their resolution. But for really large monitors/resolutions, it can be jarring when users expect to see tiny fonts and need to scale them up. That said, we will add some CSS for larger monitors to address this, but it's a hack, as vw-width is true to the original design.

Re: Our Attempt at Writing an Honest Privacy Policy

#16

Post by craftyguy »

TylerE wrote: post #5
Cenk wrote: post #3

Earlier quoted context omitted.

Yes, why not just disable IP logging?

Because a browser User-Agent string is almost unique.

Not just user-agents, but the browser 'fingerprint'.. which includes how the thing is configured (along with user-agent).

Re: Our Attempt at Writing an Honest Privacy Policy

#17

Post by CosmicSteve »

Boulth wrote: post #2

I've read the new policy. Are they really disabling all server logs? Maybe that's just me but that seems a bit extreme.

Hi Boulth,

We chose to disable all server logs because we feel that it's the right thing to do.

We felt that our website should reflect the same mantra that we carry along with our products: we don't want your data.

We do not wish to track you. We wholeheartedly believe that our users have a right to a strong degree of digital privacy.

GDPR increases that, but we wanted to go a step beyond for this digital security component of our site.

Re: Our Attempt at Writing an Honest Privacy Policy

#18

Post by sarah180 »

rococode wrote: post #7

Always interesting to see GDPR spurring actual changes. On an unrelated note though, is it just me or is the font on that page HUGE? It doesn't seem to resize either, I zoomed out to 30% and it's still giant.

I will second that the text is unreadably large on my large monitor: the characters are rendered in 41.9-point type. If I full-screen the window, it jumps up to 49-point type.

Re: Our Attempt at Writing an Honest Privacy Policy

#19

Post by tracker1 »

CosmicSteve wrote: post #8
rococode wrote: post #7

Always interesting to see GDPR spurring actual changes. On an unrelated note though, is it just me or is the font on that page HUGE? It doesn't seem to resize either, I zoomed out to 30% and it's still giant.

Hi rococode, what are you viewing the site on? I'm curious if you're experiencing this is on something that's a bit out of the ordinary in terms of setup and whatnot. Regardless, I'm curious if we can do something. You see, the font is indeed larger than other sites out there as NefLabs.com is designed in accordance with DOJ Section §508 best practices for the visually impaired. You can find additional information on…

I'm using Chrome on a Retina Macbook Pro connected to a 20" 1080p display, it's definitely very large here.

Note, My vision isn't great, and on a phone, I've got accessibility set for text as the largest option... it's definitely too large on a big display.

Perhaps a baseline of 12-16pt would be more appropriate? Small devices should still show large enough.

Re: Our Attempt at Writing an Honest Privacy Policy

#20

Post by thisacctforreal »

CosmicSteve wrote: post #11
dsr_ wrote: post #9

Earlier quoted context omitted.

Firefox: all text is huge. Chrome: text is reasonably sized. Contact form: "4096-bit encrypted".

Hey dsr, I'll take a look via Firefox on desktop a bit later as everything seems fine through the mobile browser. Not sure what you're referring to regarding the contact form though?

4096-bit is likely an RSA key, correct?

Encrypting directly with RSA according to PKCS#1 is limited to a maximum of 501 bytes (key modulus - 11 bytes).

Generally RSA is not used to encrypt data directly, instead you encrypt an AES key with RSA then encrypt the data with that key.

https://stackoverflow.com/a/5586652

https://security.stackexchange.com/a/33445

Edit: the messages are from a character limited contact form so it's fine

Post reply on HN