Hacker News Reader

Comment by prepend | Hacker News Reader

This is cool, but no way am I granting access to a years worth of calendar.

I like how they describe their usage and that they auto remove access. But even if I believe them, there are many errors that would expose hundreds of email, contact info, and docs.

I wish they had a scrubber utility I run and can remove unnecessary data. They should not need pii for their stats.

View on HN

This is cool, but no way am I granting access to a years worth of calendar.

I know everything has to be an online web "app" these days, but the privacy concerns could be completely eliminated by simply making this an actual computer program.

It's funny how people are worried about the privacy of their calendar when it's online to begin with, and in most cases Google is managing it.

Because a computer program cannot send your private data elsewhere?

I don't think the fear is necessarily purposeful, malicious intent. I think it's more about accidentally storing something you didn't mean to or accidentally leaking something, with all of the best intents.

The OP seams sincere and honest, but leaks happen on projects with multi-million dollar security teams/budgets.

I made a similar tool. It just uses user input data. It gives you a good snapshot of the cost of a meeting, but doesn't go as deep as OP's tool. https://www.resumebeacon.com/planning-to-plan.php

Very cool Paul :). One thing we have played with on the business version is to send people who make meetings with more than 5 attendees an email to let them know how much that meeting is going to cost the company and to review who they invite. With the hope that makes them go "oh shit", maybe I don't need 16 people on this check-in.

That's a good idea! Good luck :)

I mean if they can't even comply with GDPR (that awful popup) they obviously don't respect their users data to start.

Ouch :), we did work to comply with GDPR and we are. We do not share any of your data with anyone else and never will. I am not sure why they are reporting we are sharing with a 3rd party as we are not, and I have a support ticket open with the popup service to find out why. We will move tomorrow morning to a new one if we can't get that resolved. I am sorry for the trouble there :(.

Harsh, yes, but as a user I have zero trust in a service that can't respect GDPR.

And honestly, there is no reason to trust a service that uses dark patterns regarding tracking and personal data. If I were you I'd sort this out quickly and also re-evaluate why you are using a service that employs these dark patterns.

While the creator replied saying they are compliant. There are a lot of services that quite frankly don't need to give a shit about GDPR. It's simply not relevant to every business.

If you have tracking on your site you need to give a shit about GDPR.

Why? If I am not doing business in the EU and not based there. I really don't care if someone from the EU visits my site and I am not complient. Basically most of the planet falls into that category.

Common decency? Caring about your users?

GDPR isn't setting some completely unrealistic standard, it is just the absolute bare minimum that you could possibly expect. If you don't want to uphold that and actively try to exploit your users for pennies, sure, go ahead. But most of the world would rather you stay offline.

I'm not saying I abuse or collect/sell info, I'm just pointing out that the GDPR is generally irrelevant to most sites. Most sites don't need to follow it to the T. But agreed they should have common decency.

Furthermore, there are a ton of users that don't know what the GDPR is and wouldn't give a shit if they did; they are just sick of clicking out of a spammy cookie popup on every website they go to.

You only need to have the spammy GDPR popups if you do unethical things.

People should be sick of unethical practices, not GDPR.

I dunno, we're six months into this now, and all I see as a result is a lot of fussing, a lot more cookie popups, and a meaningless sidechannel on comments for every side project or US local newspaper article posted here about how they haven't bothered with GDPR compliance and are somehow evil for using google analytics cookies without telling people.

Yep, it's awesome. Hopefully that will continue until sites adapt or die. You get an instant indication that you can't trust a site with anything of value.

Also the changes in the industry are huge. Just because some sites have a hard time grasping the idea that the user isn't the enemy doesn't retract from the massive success that it is despite it being so new.

Just one example is the many places where you suddenly are able to downloading your data as well as delete it.

Reply on news.ycombinator.com