Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

medium.com

Post reply on HN
Print view View original

11–20 of 54 posts

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#11

Post by fwdpropaganda »

itake wrote: post #8
olliej wrote: post #5

If you have a side project that siphons personal information from people for no reason, then maybe the gdpr isn’t the problem...

I don't have time to build user exporting, user deletion, user notifications, amongst other required features on top of the already big backlog of fearures to do. I use third party tools to help worth logging and error tracking. Its just not worth my time to support gdpr on a website that makes no money.

Don't worry, people will build those tools open-source the same way that they've built other tools for other purposes. I'm sure if a Django library for doing all those things doesn't already exist, it will very soon. It will become a popular project too, because at some point it will become the default.

I meant, respecting the law has been a thing for many years, you know? GDPR isn't really different.

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#12

Post by matthewmacleod »

itake wrote: post #8
olliej wrote: post #5

If you have a side project that siphons personal information from people for no reason, then maybe the gdpr isn’t the problem...

I don't have time to build user exporting, user deletion, user notifications, amongst other required features on top of the already big backlog of fearures to do. I use third party tools to help worth logging and error tracking. Its just not worth my time to support gdpr on a website that makes no money.

“I don’t have time to label and expire all the food I prepare on top of serving meals to customers”

“I don’t have time to do all those structural calculations on top of all the properties I have to build”

“I don’t have time for all this silly human safety testing on top of all the drugs I have to develop”

Your statement is equivalent to the above. If you are unwilling to meet a relatively straightforward level or privacy and security for your users’ data, then personally I’m really glad that you’re going to prevent users from accessing it.

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#13

Post by matthewmacleod »

inetsee wrote: post #9
olliej wrote: post #5

If you have a side project that siphons personal information from people for no reason, then maybe the gdpr isn’t the problem...

My reading of the GDPR says that the MINIMUM fine is 20,000,000 Euros, which I think would be a pretty big problem for an individual working on a side project. I also think the 403 error page explaining that the GDPR is the reason the visitor can't access the page is a nice touch.

Your reading of the GDPR is wrong. There is no minimum fine. There is a maximum fine of €20m or 4% of global turnover, whichever is greater.

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#14

Post by matthewmacleod »

splintercell wrote: post #4

HN crowd loves GDPR, so get ready for this never making to the front page.

The front page has had daily articles from mis-informed US tech startups collectively shitting themselves about GDPR for weeks.

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#15

Post by fwdpropaganda »

splintercell wrote: post #4

HN crowd loves GDPR, so get ready for this never making to the front page.

Do they? It's kind of a mixed bag. I see about 60% say "well, if your side project doesn't respect your users privacy, maybe you shouldn't have a side project.", and the remaining 40% saying "I'm too scared of the consequences from doing illegal stuff"

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#16

Post by dragonwriter »

inetsee wrote: post #9
olliej wrote: post #5

If you have a side project that siphons personal information from people for no reason, then maybe the gdpr isn’t the problem...

My reading of the GDPR says that the MINIMUM fine is 20,000,000 Euros, which I think would be a pretty big problem for an individual working on a side project. I also think the 403 error page explaining that the GDPR is the reason the visitor can't access the page is a nice touch.

> My reading of the GDPR says that the MINIMUM fine is 20,000,000 Euros.

€20M is the minimum value for the upper limit of an Article 83(5) or Article 83(6) administrative fine; it's not a minimum fine, and a lesser value (€10M) applies as the corresponding base upper limit for some other violations.

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#17

Post by cft »

matthewmacleod wrote: post #14
splintercell wrote: post #4

HN crowd loves GDPR, so get ready for this never making to the front page.

The front page has had daily articles from mis-informed US tech startups collectively shitting themselves about GDPR for weeks.

How many former US startups such as Google or eBay do you use in the UK? And how many former UK startups does an average US user use? There gotta be a reason for this disparity. And the reason is regulatory capture in the EU.

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#18

Post by huebnerob »

itake wrote: post #8
olliej wrote: post #5

If you have a side project that siphons personal information from people for no reason, then maybe the gdpr isn’t the problem...

I don't have time to build user exporting, user deletion, user notifications, amongst other required features on top of the already big backlog of fearures to do. I use third party tools to help worth logging and error tracking. Its just not worth my time to support gdpr on a website that makes no money.

Yes, but my understanding is that you don't need to automate these features, so you would just do it all manually until your scale starts to make building tools worth it.

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#19

Post by orand »

matthewmacleod wrote: post #12
itake wrote: post #8

Earlier quoted context omitted.

I don't have time to build user exporting, user deletion, user notifications, amongst other required features on top of the already big backlog of fearures to do. I use third party tools to help worth logging and error tracking. Its just not worth my time to support gdpr on a website that makes no money.

“I don’t have time to label and expire all the food I prepare on top of serving meals to customers” “I don’t have time to do all those structural calculations on top of all the properties I have to build” “I don’t have time for all this silly human safety testing on top of all the drugs I have to develop” Your statement is equivalent to the above. If you are unwilling to meet a relatively straightforward level or pri…

Nice ridiculous examples. Now for some ridiculous examples on the other end of the spectrum:

"If you refuse to document every ingredient and possible allergic reaction when inviting friends over for dinner, then I'm really glad if you don't have any friends."

"If you don't create structural and safety calculations for your kids' tree fort, then I'm really glad when your kids fall out."

The point is, people need to be able to start small and then scale up if/when that makes sense. If everything has to start "big" (relatively speaking), then we will simply have fewer things, to the detriment of all.

Re: GDPR for side-projects? Blocking all EU traffic with Nginx in 3 simple steps

#20

Post by matthewmacleod »

cft wrote: post #17
matthewmacleod wrote: post #14

Earlier quoted context omitted.

The front page has had daily articles from mis-informed US tech startups collectively shitting themselves about GDPR for weeks.

How many former US startups such as Google or eBay do you use in the UK? And how many former UK startups does an average US user use? There gotta be a reason for this disparity. And the reason is regulatory capture in the EU.

No it’s not. The reason is a much more friendly funding environment in the US.
Post reply on HN