Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GDPR for lazy people: Block all European users with Cloudflare Workers

apility.io

Post reply on HN
Print view View original

821–830 of 1001 posts

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#821

Post by Thiez »

spookthesunset wrote: post #557
FridgeSeal wrote: post #493

Earlier quoted context omitted.

> Most early-stage startup use the best practice of “delete=1” Who are you people who can’t/won’t actually delete something from your db’s?

What if the contents of that DB get pre-rendered to disk or memory for caching (eg: prerendering a bunch of HTML)? Do you blow those away? Which ones? What if it turns out to be a substantial number of cache records you need to blow away? Whats gonna be the performance impact of that? I agree with the OP. People who assume this shit is easy haven't really thought about the problem much at all. There is a lot of data…

You have 30 days to comply, so if you regenerate those cached pages regularly (e.g. once every 3 weeks) you're fine.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#823

Post by ponyfleisch »

axlprose wrote: post #739
pilsetnieks wrote: post #706

Earlier quoted context omitted.

> We couldn’t afford a lawyer, and the amount of time for me (the only programmer) to go through and read all the regulations and make all the requisite changes in the product I would estimate might take on the order of a month or two, which if timed poorly would’ve killed our company. I say again: at an early stage startup with one programmer, you cannot have that one programmer spending two months on compliance. "W…

>Would you eat in a place like that? a vast majority of the food places in my home country were like that when I was growing up, and such places likely still make up a sizable portion of the food businesses down there now. I can't help but be a bit offended by this attitude, because it seems to not only be implying that these businesses are likely to be operating in bad faith, but that the world would legitimately be…

> because it seems to not only be implying that these businesses are likely to be operating in bad faith

I think there is a subtle difference between negligence and bad faith.

> but that the world would legitimately be better off without them as well

Well, that's precsiely what laws forbidding businesses like that say. "We'd rather not have them if they can't stick to those rules."

Are you making the argument that the west is generally over-regulating food safety and public health? If so, on what basis? Looks to me like a variant of the old "when i was young we didn't have [seatbelts|gun regulation|hard hats on construction sites] and i turned out just fine!"

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#824

Post by nextlevelwizard »

jeremyt wrote: post #479

I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…

>I was not a great programmer >amount of time for me (the only programmer) well theres your problem. in any other industry you have to have professionals and competent people only in tech can you gobbel together something you can charge for by browsing StackOverflow. it is time that your clowning gets checked and you need to take things seriously. and if deleting data from your database causes "business logic problems" then you are obviously doing shady shit with users data and I am glad this is causing you pain.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#825

Post by Marazan »

ng12 wrote: post #635
Barrin92 wrote: post #623

Earlier quoted context omitted.

I'm not onboard with the idea that Silicon Valley holds a monopoly on technical innovation. Getting people to click on ads on smartphones doesn't capture the entire scope of technology. Europe's economy is roughly as large as that of the United States. Many world-leading companies from the car industry, to chemicals, to biotech reside in Europe. The US holds one dominating advantage in one subset of technology. Consu…

That's exactly my point. The EU is built for entrenched institutions. There is no entrepreneurial spirit -- and that's why there's N-number of self driving car companies in the US and zero(?) in the EU, for example.

Famously French has no word for entrepreneur.

/s

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#826

Post by brobdingnagians »

manigandham wrote: post #586
mintplant wrote: post #577

Earlier quoted context omitted.

Upthread we have the claim that "most early-stage startups use the... best practice of 'delete=1'," pretending to delete user data while actually retaining it. So, the exact opposite of the rule.

Yes, and many things will remain that way with GDPR because of necessity (ie: old invoices and transactions will continue to have your details). Most startups are doing their best to be good stewards of data, and they didn't need big global regulation to force them. But do let me know when GDPR actually does anything to deal with ISPs, credit unions, medical companies, and plenty of other institutions that have breac…

I think it is an important point about "many things will remain that way with GDPR because of necessity (ie: old invoices and transactions will continue to have your details)". Most people doing business have _very_ legitimate reasons for having sensitive data; invoices, charges, security, etc. all require having personally identifying and sensitive information, and GDPR recognizes that-- but what it means is that companies _will_ and _should_ have customer information. Just because it isn't sitting in their database to improve customer experience doesn't mean it won't be sitting in the billing department for accounting & auditing purposes. So GDPR doesn't actually change much about people having your data, just kind of shuffles it around.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#827

Post by JBSay »

jeremyt wrote: post #479

I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…

Funny how the very people who rail about corporations and Too Big To Fail are the same ones asking for regulations which raise the barrier of entry for small startups and protect large ones from competition.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#829

Post by TomK32 »

jeremyt wrote: post #479

I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…

You have delete as a boolean? My standard (well, Mongoid::Paranoia) is a timestamp and after a reasonable time to cover accidental deletions (like facebook does) a worker job can do the actual deletion.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#830

Post by JBSay »

meko wrote: post #502
takeitto wrote: post #327

Earlier quoted context omitted.

> It's a foreign requirement that feels like a violation of sovereignty. Sure, if you cater to users in your own country. If you cater (read: deal with data) to users from the EU, you should follow local consumer protection laws. EU laws have always been more strict than US privacy laws: This caused unfair competition, where US companies were free to export their privacy-damaging business model overseas, while local…

I find it odd that people take issue with regulation, perhaps its been ingrained into the cultural consciousness of the west that regulation is always bad, but historical analysis shows that regulation has always had an overwhelmingly net positive effect for the members of a given society. You can link the stage of a country's development to how effective their government is in protecting it's constituents.

Aww that's cute!
Post reply on HN