Sadly it's not humorous for many people.
GDPR for lazy people: Block all European users with Cloudflare Workers
791–800 of 1001 posts
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#792I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…
I'm a Brit. I am the MD of a small IT company. I have two partners and 20 employees. We started in 2000. We turn over about £1.5Mpa. We sell our services to people and organisations. Our backups are now smaller these days (thanks to GDPR). I understand that because you are outside the EU you might feel like a target but that is not the point of GDPR. There is no way on earth that the EU as a whole has looked on your…
Thank you for a sensible and balanced opinion. The Americans seem to be shitting themselves over this, when it is meant to help us all work toward better privacy - not shoot people or put them in prison. That is what years of living in a police state has done to them - turned them into wall building nervous wrecks !
There are no GDPR police looking to shut you down. Calm down.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#793Earlier quoted context omitted.
I don’t know GDPR inside and out, but I have worked at places (not military) where I could be held criminally liable for misuse or negligent disclosure of PII. The answer to “How do you handle...” is that you get your shit together. Separation of duties, build and configuration standards, no customer data on random laptops. When I was in high school, I worked at a sandwich/coffee shop. The precious commodity in that…
And if getting your "act together" is a substantial cost for small companies, no matter? The word choice almost presumes the conclusion, that data privacy rules are obvious, and cheap, and akin to just washing hands after using the toilet. Every regulation has costs and benefits. I also would love to have better worldwide privacy at no or little cost, but the fact that people are blocking the EU shows that some compa…
> And if getting your "act together" is a substantial cost for small companies, no matter?
Yes, no matter. Should small companies also get free pass on food safety laws? Health inspections are a PITA for restaurants too.
This reaction is pretty much textbook psychological reactance[0]. People doing business had some freedoms wrt. user data, but it turned out in practice that they should never have them in the first place. Now that those excess freedoms are being removed, businesses cry foul.
--
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#794I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…
I'm a Brit. I am the MD of a small IT company. I have two partners and 20 employees. We started in 2000. We turn over about £1.5Mpa. We sell our services to people and organisations. Our backups are now smaller these days (thanks to GDPR). I understand that because you are outside the EU you might feel like a target but that is not the point of GDPR. There is no way on earth that the EU as a whole has looked on your…
[deleted]
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#795I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…
So . . . what we have here is a law that assumes that if you are a good enough engineer to create software that makes money, you are a good enough engineer to comply with the law, given two years' notice.
I don't have a problem with that.
If the law has a side-effect of people who suck at understanding and organizing and managing data responsibly not starting companies and making money off of data, I'm also okay with that.
Maybe the days of two guys starting a company in a garage learning how to handle other people's information before they start a company dependent on it is just beginning.
I'm also okay with that.
You don't have a right to be incompetent. You don't have a right to be clueless when it comes to databases and information. You especially don't have a right to take advantage of other people who don't understand exactly what it means when they agree to a ToS page.
The reason there are so many comments to the effect that this is a non-issue is that it's just not hard to comply unless the business you're running is doing something shady. There is nothing technically difficult about complying with GDPR. If it's hard for you and everyone in your company, I don't know what to say. Hire someone who doesn't suck at this.
This is only difficult from a business point of view. Not a technical one.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#796Earlier quoted context omitted.
The problem isn’t so much as there’s a cost to implementing GDPR, but that the tech community has been “move fast and break things” and refused to handle things properly before. If all you do about my PII is “set delete = 1” (which one could argue isn’t even the best practice in every scenario), then I probably don’t want you to handle my PII at all. To your example, you could easily not switch to a CASCADE, but inst…
> If all you do about my PII is “set delete = 1” (which one could argue isn’t even the best practice in every scenario), then I probably don’t want you to handle my PII at all. Are you aware that setting “delete=1” is essentially what file systems do when deleting a file? What file system do you suggest companies to use when they want to comply with GDPR?
It is simple. You have to apply reasonable measures to delete the data.
That is vague, for sure, but hopefully you have the engineering skills and domain knowledge to make a good call.
Dealing with credit card data? Think a lot about it.
Dealing with movie preferences? Deleting from the database should be adequate.
Dealing with attendants from a local conference? Delete the files when you don’t need them.
(And remember: nobody will ever show up with a fine one day. It will always start with a warning and a chance to improve before any fine is applied – unless there is serious neglect.)
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#797I keep seeing these posts on how to block European users to avoid the GDPR. As a citizen of Europe, seeing these posts consistently making it to the front page is disappointing. It would seem that Silicon Valley perceives the GDPR as more of a hindrance than an opportunity to offer users better privacy. Nothing has been learned.
I feel the EU regulators could stand to learn something. If EU citizens are small portion of your users, and your tasked with parsing this document http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX... just blocking them doesn't seem like that bad of an idea, especially with the fines involved. I think the things that bother me is: 1) A College student working on a side project with no revenue are treated t…
A college student working on a side project probably shouldn’t hoard personal information if it doesn’t care to protect it.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#798Is it supposed to be enough to be compliant with the GDPR?
If you have harvested data from Europe, you are not allowed to sell/transmit it without informing the concerned party.
I feel that to become GDPR compliant this way, you also have to delete all data that may have come from european residents.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#799Earlier quoted context omitted.
I believe it's because, in general, Americans distrust government and trust corporations
We distrust both but only one has a monopoly on violence that can be pointed in our direction at any time.
I guess we’re just kind of ignoring things like credit bureaus, who sell finacial data about you whether you like it or not, and god help you if you miss a payment. But hey, even if you dont screw up, maybe something gets reported wrong, or maybe you just don’t spend like the algorithm wants you to, and your credit, and thus your life, is ruined.
I guess we’re also ignoring private health insurance companies and how they can just kind of, you know, deny you for any reason. But it’s cool because your insurance is dependent on a benevolent private company providing you employment.
See where I’m going with this? The Ayn Rand “government is violence” nonsense needs to stop. It’s not corporations vs. government, it’s powerful institutions vs. we, the plebes.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#800I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…
As the solo developer/cofounder of a two man business I have absolutely no time to worry about these things. Only a few days ago I've googled GDPR to get a facile understanding of what it is.
If at some point I create something that is large enough to matter, I can worry about it then and will have the resources to do so. Until then I'll continue working on software as if it does not exist. It's hard enough to build a profitable product that is valuable to people, don't need to think about any laws handicapping my creativity and design decisions.