TomasEkeli

Irritate all the twitter users every time they want to give twitter free content? That would kill twitter.

I'm all for it!

I've seen projects outlive multiple issue-tracking systems.

Nothing inherently wrong with having the number in the branch or commit-message, but please make sure the rest of the name/message stands on its own.

Skis and big gardens.

They don't own the bits. They own the data those bits represent. The person/company who does own the bits has to comply with the rights of the owner of the data.

How you decide to store it makes little difference as long as it's digital.

Fun aside: if you store it on paper you're not beholden to GDPR. Crazy.

If you didn't want visitors to your site you shouldn't have put it on the web. If you want visitors to your site without any strings attached you should serve the content without grabbing and storing anything about the clients.

This is called the "technician's responsibility" where I come from. To only track/store/process what is absolutlely necessary, in order to not be liable for the consequences when someone you cannot feasibly stop wants to do something untoward with the date (i.e. unconcented analysis, government extraction of data, breaches)

When I worked with GDPR compliance we tried and tried but still ended up with the opnion that IP adresses are considered personal information.

Article 4 point 1 in the GDPR indicates this (unless you can somehow prove that the IP is not related to the person, which I think we all know it effectively is in most cases)

I keep telling people - the thing that changes with GDPR is that personal data you handle is now still owned by the person and only in your custody as long as they explicitly allow it.

All of our infrastucture has to change to honour that. If you cannot honour that change, maybe you shouldn't have been handling personal data.

I don't have any knowledge about monal.im (don't know what it is - some kind of im client?), but this person is making some claims:

- he needs a data-protection officer: no, only larger orgs handling lots of personal data need this. If he's making an im-client and not servers that store data he certainly doesn't, but I don't know what his setup is.

- crash analytics: This can be handled by telling the users clearly that you'll be gathering the data (and defaulting to not gathering if they don't actively approve). As long as you have a proper PURPOSE for gathering and storing the data and don't use it for anything else you're golden. You do have to document this, in case of a review (hyper-unlikely).

- Push: he's getting a message and storing the device/ip combination. This seems to be central to the service he's providing. Therefore he can and should put that in the description/terms of his service (as he cannot deliver the service without this). As long as it is clearly explained to the end-user this is fine, and he can keep doing it. If he stores it and does anything with this data other than the central purpose that he informed the end-user of he's in violation. I'd suggest putting it in clear text in front of the end-user and deleting the data as soon as it's no longer needed. Don't do any non-approved analysis on it. If you want to analyse - ask for permission.

XMPP federation may be a problem, I agree with that. The problemer here (as I see it) is that each service getting the personal data must only process it for the purposes explicitly agreed to by the end-user and honour any subsequent notifications of rectification and deletion. This is a hard nut to crack indeed.

It's not their money, it's if you store or process personal data about individuals in the European Economic Area (slightly larger than the EU).

If you're running a Chinese site aimed at Chinese you're good.

If you're running an Indonesian site aimed at Germans you need to honour the GDPR.

The autists I know of have no special skills or magical insights. They're really struggling to get through normal days, requiring constant supervision from full-time carers 24 hours. And it has to be the same carers that come at the same time every day. Their lives are really shitty, interspersed with small joys.

I worry about Tom Waits daily.

It didn't find Mahler.

Wow, Eric Elliott (@_ericelliott) just asked for this on twitter - and now it happened. He must be a witch.

It's for fantasizing about a career-change.

Why tst instead of test, prd instead of production?

That said - memory is dirt cheap