im so surprised companies are doing this, but also not at the same time. shocker.
GDPR for lazy people: Block all European users with Cloudflare Workers
661–670 of 1001 posts
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#662Earlier quoted context omitted.
It's reassuring to hear that the GDPR is not meant to target little startups and projects but I would like it a lot better if it said that in the actual law, rather than just trusting all current and future regulators to treat me kindly. If it's only meant to be used against big companies or extreme offenders, why doesn't it say so? It seems like the spirit of the law and the language of the law are not aligned and i…
"but I would like it a lot better if it said that in the actual law" Have you read the bloody law! http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX... This is legislation designed to protect not only me (as an individual) but you as well (as a probable foreigner) from me!
Yes, indeed I have. But if there's something I've missed, I'd surely appreciate a quote or specific reference.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#663Earlier quoted context omitted.
The problem isn’t so much as there’s a cost to implementing GDPR, but that the tech community has been “move fast and break things” and refused to handle things properly before. If all you do about my PII is “set delete = 1” (which one could argue isn’t even the best practice in every scenario), then I probably don’t want you to handle my PII at all. To your example, you could easily not switch to a CASCADE, but inst…
>properly handling sensitive information But the thing is that GDPR affects all PII not just sensitive one so your random small useless app/blog/game/forum that has some personally identifiable but harmless and unimportant data stored is now under the same restrictions like your email or FB data.
> your random small useless app/blog/game/forum that has some personally identifiable but harmless and unimportant data
Unimportant like your email address and your one password you're reusing everywhere? Yes, they should know better but that's neither here nor there.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#664Earlier quoted context omitted.
+1 to this. GDPR is just the personal data equivalent of the "don't be a dick" principle.
It's that, plus a whole lot of unreasonable demands. Just take the requirement to have an EU representative[0]...even a 1-person US startup that processes data now needs to hire someone in the EU and designate a qualified DPO, which they'll likely need to hire as well. That's way more than not being a dick, it's a huge jobs program that will cost companies millions. One estimate I saw indicated that they expected the…
How would EU enforce laws on your business there, if you don't have any representation in the EU?
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#665Earlier quoted context omitted.
I encourage you to read my comment again, and point out where I mentioned merely setting a delete flag. Any reader worth their salt will point out that it’s not what I suggested at all.
"you could easily not switch to a CASCADE, but instead set delete=1 and mark every sensitive field with a special value"
What if "a special value" == NULL?
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#666Earlier quoted context omitted.
If I want to service a small group of people with, say, a nuclear power plant, and those people are willing and eager to just go with it without any bs or roles, then it should be possible. When you make it prohibitive to handle hazardous materials, then you've done something wrong.
If you and the small group of people are the only living creatures on the planet, then absolutely! That is to say, this isn't really comparable, for obvious reasons.
PII is a hazardous material, and it should be regulated like other hazardous materials, for obvious reasons.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#667[deleted]
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#668Earlier quoted context omitted.
This may be an edgy and rebellious sentiment that makes me a radical anti-privacy activist, but unless you're storing levels of information on me that are similar to facebook/google/etc., I do not give a damn whether you're soft-deleting or hard-deleting my IP address and my user account. If your web app is just a web app, and not one component of a vast surveillance octopus which puts tentacles on almost every websi…
> I do not give a damn whether you're soft-deleting or hard-deleting my IP address and my user account You don't give a damn; neither do those computer illiterate people who use the same email address and password for everything, and one leak of some shitty inconsequential website may obliterate their entire online presence.
I'm not sure how the GDPR fixes anything, since those people aren't going to be capable of finding the hidden "delete account" button five pages into a big tech company's byzantine privacy settings.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#669Earlier quoted context omitted.
So which parts of the GDPR do you actually disagree with in case of this XMPP service? Mostly you need to tell people what you collect, allow removing accounts and history, and tell them if you're sending the data to third-parties. If you're running a private service you most likely already fulfill those requirements. Where's the annoyance?
In the specific case of XMPP, wouldn't I need to have an agreement with every other admin who federates their XMPP server and work out what exactly our roles are as defined by GDPR? XMPP still has active development community around it so this will no doubt get much easier with time, but that's just XMPP.
Look at it this way: The service you're using needs a privacy policy, that is not new. The way that policy is organized or shared is no different now, just what rights the user and what obligations the service provider has.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#670Earlier quoted context omitted.
Clearly you have a different definition of entrepreneurs/technical people than I do. Those seems like impositions on people who implement bad practice or work in fields that have morally questionable practices regarding people's data and identification. Many people I know don't engage or work in such industries because of the moral implications of doing so and what people are doing with data. Its not about "just ask…
Again, I was in my early 20s and fresh out of college. I had no idea what I was doing. It’s not that I was trying to cut ethical corners or do things poorly, I just didn’t know what the right way to do things was. Computer science education is often very theoretical and high level and not at all practical . I’ll be the first person to say that I was not the most experienced and or talented programmer in the world, bu…
I think that to the hardcore GDPR fans that you're arguing with, this is like asking if we should let someone who is interested in structural engineering go build a skyscraper and figure it out as they go. Or someone who is interested in medicine start doing brain surgery on people.
They don't really agree that all PII is not the same. To them, storing their IP address without permission is a horrific violation of their human rights.
It strikes me personally as illogical and paranoid to the point of hysteria. However, that's just me, and at the end of the day, I think there's a cultural divide here as to what constitutes privacy, who owns what data, and what power we should trust the government with.