Live data from Hacker News

No Cookie for You

github.blog

461–470 of 634 posts

Re: No Cookie for You

#462

Teams has so many bugs and crashes, I'm flabbergasted how Microsoft can deliver something like that. Especially given that they have shown that they are capable of delivering a good experience based on the Electron platform with VSCode. My only explanation would be that it was cobbled together by interns, never meant for public release, then some project manager discovered it and said "Ship it!".

Teams for me is an almost unusable, frustrating, pile of js. It also seems very polarising -- most other colleagues don't have the crashes and issues I do, but some people have similar experiences. I'm genuinely convinced it just hates a small proportion of all SSOs. I literally can't make any calls on the Mac app at the moment, and haven't been able to since August.

Re: No Cookie for You

#463
post #439

Earlier quoted context omitted.

Why do you think changing the implementation to the server side will comply with the letter of the law? Or perhaps I should ask which law. GDPR doesn't differentiate between the client side or server side, you're simply not allowed to keep information on users unless they've consented to for it to be kept or it is required for a legitimate functionality to which they have consented.

So I am not allowed to keep server logs without consent?

That depends entirely on the nature of the information that is contained in your server logs.

Re: No Cookie for You

#464
post #322

Earlier quoted context omitted.

Microsoft would like for you to adopt an image of GitHub as an upright corporate endeavor - but remember they blocks/censor developers from world states that the US doesn't like.

Microsoft/GitHub as businesses incorporated in the United States are bound by the law of the United States. I am not sure of what you are insinuating here.

Oh, great, they have an excuse.

Just like they have an excuse for allowing the NSA direct access to all of your data, right?

Re: No Cookie for You

#465
post #3

A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case.

> A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case.

A lot of people also have the misconception that the EU cookie law applies to them, even if they are not in the EU and have no EU physical presence.

Re: No Cookie for You

#466

Earlier quoted context omitted.

GDPR doesn't care if you're accomplishing the tracking with a cookie or using a different mechanism. You're not allowed to do it either way, unless the user has consented.

Since I’m being downvoted: The EU directive that specifically obligates websites to collect informed and active consent for the use of cookies is not GDPR, it’s the ePrivacy Directive. I don’t believe that one should automatically conclude that just because a cookie requires active consent, any kind of ‘logging’ (local and temporary storage of IPs in order to track website usage) requires active consent. Those are tw…

Not sure why you're being downvoted, yeah cookies are handled by legislation other than GDPR (ePrivacy as you mentioned).

However regardless of whether you're using cookies, I still think you need to collect explicit consent as GDPR requires a lawful basis of processing, and I don't see how analytics would fall under any of the other lawful basis's other than consent (_maybe_ legitimate interests?)

If you are using cookies, then my understanding is you need to collect consent where necessary under _both_ ePrivacy and GDPR.

Re: No Cookie for You

#467
I have zero interest in adding analytics to any site or application I might create in the future and, of course, I also don't want to bother future users with what would be pointless pop-ups. I thought that doing what github did would be enough, but now I'm not so sure because of one thing and some comments I saw here that might be related to that.

I would still like to improve any application I might create depending on how it's being used (to know what features to improve, which ones could potentially be removed or changed, etcetera). Keeping logs of this kind of usage would still go against the GDPR? I thought that it wouldn't as long as it was aggregated data without using any of the users' personal information. But some comments here have led me to believe that it would go against the GDPR regardless because it would still mean separating unique users.

Hoping someone more familiar with the law sees this comment. I mean, I can think of multiple ways to aggregate that data, even with unique users, without using personally identifying information, but I'm not sure anymore if that's enough.

Re: No Cookie for You

#468
post #465
post #3

A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case.

> A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case. A lot of people also have the misconception that the EU cookie law applies to them, even if they are not in the EU and have no EU physical presence.

Wait, is that true? You need to have a physical presence in the EU?

If so, why did everyone scramble to meet the requirements. Was it a scam?

Re: No Cookie for You

#469
post #465
post #3

A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case.

> A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case. A lot of people also have the misconception that the EU cookie law applies to them, even if they are not in the EU and have no EU physical presence.

[deleted]

Re: No Cookie for You

#470
post #446

Earlier quoted context omitted.

Does anyone happen to know of a service like this that is free (not self hosted) for non-commercial, low-traffic sites? Or which costs less than ~$10 per year. I have a basic Github Pages site, and I currently don't know whether anyone is looking at it, beyond the very few who take the time to email me. I don't need (or want) to know anything about my visitors, but it would be nice to know that I'm not simply tossing…

> Does anyone happen to know of a service like this that is free (not self hosted) for non-commercial, low-traffic sites? Panelbear is privacy-friendly, and has a free plan with 5,000 page views per month. Commercial use is allowed. https://panelbear.com Full-disclosure: I’m running this service. Feel free to ask me anything :)

Panelbear is great, I'm using it. I have a small website with Thank you for providing this service.
Post reply on HN