beberlei

To my understanding no. But you must enable ip anonmyization in GA settings and provide the opt out link in privacy policy. Google should have a page on the link

This is an important point.

Example: Parts of our software run on customer servers and as such they are processing data in their control and not ours, hence can for example used to filter out personal data before they are then sent to our servers, without causing any GDPR related triggering of sending personal information to a third party (our company).

Yes! The fud keeps increasing every time another gdpr related post pops up here.

that is not true being that extreme.

as per GDPR 6(1) grounds for processing can be (b) performance of contract, (c) compliance with legal obligations (d) vital interests of data subject - which can all cover logging ip addresses and user agents for network security reasons (for a short amount of time) to protect the user, which log files are often used for. (IANAL)

well, that is economics 101. consumers price goods by value, not by costs. if your costs are higher than consumers are willing to pay, then you will at some point go bankrupt.

Or all the environment variables containing tons of password+tokens, or in javascript libraries all the headers, including cookies that could be used to overtake a session. Error/Exception tracking software is quite dangerous if it written with a "lets store everything, because it could help find the problem" mindest.

IANAL: No, there is a process of stuff before you will get fined. A human error does not suddenly lead to heavy fines, if you can prove that you put everything you can to prevent this from happening, i.e. follow all the processes GDPR defines like data processing agreements with third party processors, technical and organizational measures to protect against privacy violations, documentation of personal data stored with type of processing, type of consent, and such. what example would a data privacy agency set to fine a company that is fully compliant? I imagine you could even get court to side with you on not having to pay a fine.

data leaks of course are always a breach and must be reported. that doesnt mean you get a fine though.

Depends on the storage engine afair, but both innodb an myisam have either index or global metadata based solution for this. I think in myisam its an estimste if you use count(*) so you need to use count(id) to get an exact value. This is all well documented

in german law a tax is general purpose, government can use the money to pay for any of their "services". whereas a fee has a specific purpose and cannot be used for anything else.

maybe with survival distributions? https://en.wikipedia.org/wiki/Survival_function

googling gives some results of scientific papers that would say this is the way its done.

I would consider NewRelic, AppDynamics and other more expensive APMs high touch.

Yes this exists, for example Travis-CI Pro has a free trial that includes 100 builds and is not time based.

I am thinking the same, there is enough up and down that arbitrage / day trading bitcoins could make you a lot of money.

I find it interesting that always around the full thousands there are sudden immediate pushbacks, for example when it dipped below 8000 several days ago it was pushed back to 9000. same happened at 10000 back to 12000.

Logfiles are necessary to operate a service securely and guarantee quality of service. This is one form of implicit consent that users are giving you without you having to ask them for it.

But Storing IP addresses for each access indefinitely (> some days) is the problem.

If you rotate the files into a version where IP addresses are without the last part after a few days, then this is considered pseudonymous data and GDPR has no problem with you keeping this for a long time anymore.

from what i catched talking to our lawyer, there are other levels of consent than explicit by the user explicit consent that might be revoked, in this case.

1. concerns of security and quality of service (gathering logs with full ip addresses is allowed for a reasonable time, a few days for example).

2. you don't need to delete the logs if you use them for this specific purpose only.

3. for analytical purpose it is enough to use pseudonomic identifiers, in case of ip address zero out the last part and you are fine.

4. using Piwik or your own cookies? Suddenly its not a third party cookie anymore and you are more free to do things.

The problems for operators begin when they are handing this over to a third party.

Its different, because you need to get a banking license to be a bank and use fractional reserve and controlled by central bank, and then the reserve is in the governments money. Bitfinex has no "banking license" and is not overseen by another actor.

Fractional Reserve Banks currency also usually exhibits natural demand on the account of being the currency required to pay taxes and accepted by stores/businesses in that country.

Yes, fractional reserve banking is bad. But at least the central banks have somewhat a clue how to control it and a legal framework to do so. Whereas for bitcoin exchanges, they just make it up along the way.

yes, it is much more complicated in Europe, but you can rent software that handles most of it (and you should).

If you cater to companies, it is easier. You ask for the VAT number and only if the company is from your own country, you add the VAT, otherwise its 0%.

If you cater to individuals, you need to use two different mechanisms to identify where the user is from (IP Address + Geo location and another one) and store this information, then you need to charge the VAT from that country and you need to signup for the EU Mini One Stop Shop (MoSS) with your local tax office, report your european VAT earnings quarterly.

Selling to a customer (business or individual) from outside the EU you can charge 0% VAT, so that is easy as well.

I recommend that you use either Recurly or Quaderno in combination with Stripe, because they generate the invoices for you and handle the VAT calculation perfectly.

I don't know about other countries than Germany (were we are located), but we also have to submit monthly VAT report to our tax office, all in all we pay our tax attorney 400-500 Euros per month, plus another 1000 for the yearly report. Maybe other EU countries allow startups to report quarterly or yearly? Idk.

This test is probably not being used for "what kind of cancer" but as a cheap and easy way for yearly/bi-yearly tests of the general population as part of prevention.

Even if its much lower, because there is the potential for a new entrant that has better "features" so that demand for the previous coins drops, there will always be risk in holding specific coins.

Think disagreement between miners, changes to algorithms, forks of blockchains. Gold does not have the same risk.

One nitpick: I think the SEC ruled ICOs to be comparable to certificates from what I understood. This is quite different to stocks. I could be wrong.

Technical Understanding of cryptocurrencies has nothing to do with financial understanding.

It feels to me a fallacy to think because you understand the tech, you are magically a good investor in it.

Buffet is historically one of the most successful investors in assets, and that usually didn't require him to "technically" understand every detail of the inner working of the offered product.

in terms of metal we have gold, silver, platinum. In cryptocurrencies we have 1000. If cryptocurrencies persist over this current hype, then its still open which of the +1000 ones will be the "gold" and which ones will go to 0.

it could have a massive effect on tech valuations in general. so from a real economy perspective you may be right, but the stock market and VC market might start to see this as an event to re-evaluate everything.

Per European Privacy Law, you only own the data for the specific use-cases that you asked it for in your terms of use / privacy policy. I agreed to that when signing up. If you change that in the future, you have to ask for my consent again. If I deny, then you cannot use my data for your new use-case.

Tideways (xhprof fork) maintainer here.

We are working on separating the extension that powers our SaaS APM for PHP and the original xhprof callgraph profiler again into two extensions in the near future :-) Then the extension will still be branded, but it has no code related to sending data to our service and just the backwards compatible profiling API.

How can you buy those futures as a regular joe? CBOE seems to be aimed at certified traders

i find cross country comparisons that lead to multipliers very hard and often arbitrary, because of differences in taxes, social security, health insurance and of course the exchange rate.

Initially when I saw this open salary approach and especially the calculator I was intrigued. But you cannot make salaries into a formula and get 100% good results.

The approach Basecamp (37signals) has with picking a location, then paying people based on 95% percentile (top 5%) market rate regardless of where they live is just much easier to explain to employees than some arbitrary multiplier thing that just leads to endless discussions.

https://m.signalvnoise.com/how-we-pay-people-at-basecamp-f1d...

Anywhere in the us maybe, nowhere else in the world except maybe switzerland. The blog post specifically mentions being remote and not all in the US

The same is happening in the EU where marketplace sellers are using tons of shady tactics essentially pocketing the VAT for themselves and having a 10-25% (depending on EU country) extra profit compared to businesses that follow the law.

The problem on DO is not outside tradfic but insode. when you enable networking everyone in the same DC network can access open ports on your machines. That elastixsearxh or redis you use needs ssl and pw protection otherwise you have a big problem