You'd probably do it in the same way you'd do it with NAT, by using a stateful firewall blocking inbound connections (it's just that you get this for "free" with NAT)
When I worked at the BBC, there was a substantial proportion of all traffic to the homepage which were just some devices checking for an internet connection. I believe as part of the move to HTTPS-only there was serious discussion over whether or not there was a public service responsibility to not break some random devices out there, as moving from a 200 to 301 response on http://www.bbc.co.uk might have broken some things.
Early in my career I was working for a well-known anti-virus firm. They had a crash of their Perforce servers and it turns out the backups were not good and the most recent good one was several months old. They painstakingly restored it from the good backup and forensic recovery of the drives, but there were several files that were still missing to fully restore the archive. They did know the hashes of the files, so what they did was push out a bunch of custom virus signatures to the dogfooding (internal testing) environment which flagged any files with those hashes as viruses, and then asked anyone who had a hit to send the file into central IT to get it resolved. It was fairly clever I thought!
I was recently in New York as a Brit and was really happy to see the OMNY system which just allowed me to use contactless to traverse the turnstiles (for everything but the JFK SkyTrain) with no issues, similar to how metro transport works in the UK for example. I don't think there's a requirement for it to be a US card, but instead any contactless card will work?
When joining my current company I said in the negotiation phase that I'd like to do a 4 day week in exchange for 80% of the offered salary. They agreed.
Culture Shift | UX/UI Product Designer / VP Sales / Head of Success / Business Development Manager | Manchester, UK ONSITE | Full-time
Culture Shift are a tech-for-good SaaS provider of software that allows employees and students to report incidents of bullying and harassment in their workplace or educational environment. We're currently the largest provider in the UK higher education sector, and our vision is for a world of work and study that is safe, happy and supportive for everyone, everywhere.
You're confusing TW with TWh. If running at full capacity that would be an additional 8760 TWh generated every year. Of course it won't be 100% utilised but it takes more of a chunk out of it then you suggest.
IANAL - but no, you definitely don't. What you do need to have in place is safeguards that any data on EU customers not hosted in the EU/EEA is subject to the same safeguards/level of protection outside the EU that it would be inside the EU. There are "standard contractual clauses" (SCCs) provided by the EU which are the easiest thing to adopt as part of (or an appendix to) your terms of service. However there is doubt that it's possible for a US-based firm to comply with the SCCs due to some US national security laws, which you probably do need a lawyer to review based on your specific context (data you're collecting, etc)
Point 1 isn't true. You've been able to send personal data (PII being the specific US legal term) to the US no problem - as long as you had "standard contractual clauses" (SCCs) as part of your contract with them that the company meets GDPR requirements. This is the same agreement to send data to any country outside the EU where there isn't a pre-existing agreement. I believe this ruling is saying that it's not possible for a US company to comply with the SCCs because US law doesn't allow them to do so.
because Log4J is also used by libraries. Which means you can configure the log level and capture logs from libraries and dependencies you use in a global configuration.
Fortunately this is the default in JavaScript world with both Yarn and NPM supporting lockfiles which have hashes and pinned versions. The problem is the sheer volume of dependencies and transient dependencies which makes it hard to reliably audit those, as updating one thing can cause a lot of work.
At present, a walk-up (no advance booking) peak-time first class ticket from Liverpool to London is £255. Standard class is £171. A walk-up off-peak standard class ticket is £66.10, and you can get it cheaper if you book a day in advance. At peak times, or for longer distances (think Scotland to London), planes can be cheaper, but not often. Coaches can generally be cheaper though.
would driving data/telemetry be categorised as personal data under GDPR? I assume cars could have multiple drivers so unless there's a clear way of deriving the person from the data itself it might be classed as anonymous and therefore not in scope
I think we can look to the way we archive any other information, which tends to be libraries and archives. So in the first instance, make sure the Internet Archive has a copy. If you want to be even more sure, find a friendly library of record (British Library, Bodleian, Library of Congress, that kind of thing) and see if they archive digital documents and give them a copy. Perhaps with a financial contribution guaranteeing retention?
is this necessarily a bad deal? Governments can normally raise capital at significantly lower interest rates than the private sector, so if the private sector was making a profit on this, then the public should be able to do too, and then re-invest that into public services