HNHacker News
TopNewBestAskShowJobs

molf

1,834 karma · joined March 22, 2012

https://voormedia.com

https://zxcv.art

submissionscomments
molf··on Publishers Haven't Realized How Big a Deal GDPR Is
This is true, but you also must engage in a GDPR contract with Google Analytics. I believe they have recently added this as a feature somewhere.
molf··on Publishers Haven't Realized How Big a Deal GDPR Is
GDPR defines "personal data" as "any information relating to an identified or identifiable natural person". [1]

The GDPR definition of personal data is VERY broad, and it includes things like:

* name, email, date of birth, etc (probably no surprise here)

* any user behaviour (what you look at, what you click on)

* uploaded content (what you write, your uploaded avatar etc)

* ip addresses, device ids

* beliefs, ethnicity, sexuality, health data (additional restrictions apply here)

* biometric data, genetic data (additional restrictions apply here)

[1] https://gdpr-info.eu/art-4-gdpr/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
You can charge reasonable administrative fees or refuse to act if the request is "manifestly unfounded or excessive, in particular because of their repetitive character". [1]

[1] https://gdpr-info.eu/art-12-gdpr/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
For most smaller businesses there is no real reason to do all that much as long as you can answer such questions on an ad-hoc basis. Although of course we still have to see how widespread it will become in practice.

Basically you need to make sure you 100% know what data you collect (including any third parties) and make sure you have a good reason to collect it.

Honestly most of GDPR should be considered "common sense". It's just that many corporations actively act against the interest of individuals they collect data on, and it's precisely these practices that GDPR tries to correct.

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
That's all neatly laid out in article 13. [1]

I'm not a lawyer but having extensively studied all of GDPR recently I'm afraid the letter seems legit. If there's any error it will be a minor one.

[1] https://gdpr-info.eu/art-13-gdpr/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
Any data you collect that you do not unambiguously need to provide the service would be an appeal for "legitimate interest" as a legal basis for collecting it. There are a number of things GDPR writes about it and of course you cannot be sure how this will play out in practice, but the main points are:

* it must be reasonable from the user's perspective

* there must be alternative; you cannot achieve the goal (your "legitimate interest") without it

* it must be balanced with the rights of the user, and not infringe on their freedom or fundamental rights

* if your "legitimate interest" is direct marketing, the user can always object, and you are required to actively inform the user of this right

See also [1]

[1] https://gdpr-info.eu/recitals/no-47/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
Good question. This would be an appeal to "legitimate interest" as a legal basis for collecting personal data. GDPR explicitly states that if the legitimate interest is direct marketing, then the user may always object to such processing, and this right must be clearly indicated.

[1] https://gdpr-info.eu/art-21-gdpr/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
GDPR does not concern itself only with person-identitifying information, it concerns itself with "personal data" which is defined as "any information relating to an identified or identifiable natural person". [1]

The GDPR definition of personal data is VERY broad, and it explicitly includes things like:

* name, email, date of birth, etc (probably no surprise here)

* any user behaviour (what you look at, what you click on)

* uploaded content (what you write, your uploaded avatar etc)

* ip addresses, device ids

* beliefs, ethnicity, sexuality, health data (additional restrictions apply here)

* biometric data, genetic data (additional restrictions apply here)

[1] https://gdpr-info.eu/art-4-gdpr/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
We cannot say for sure yet, but in general we can expect that these things will never be checked until there is a data breach of some kind; or if evidence is found in another way.

If the details of the breach indicate you were using data for another purpose than what was allowed you will have a problem.

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
Which things that are mentioned do you believe are not covered?
molf··on Publishers Haven't Realized How Big a Deal GDPR Is
> The idea that GDPR requests have to be honored by some local ecommerce company in Idaho is just nonsense and not supported by any international legal precedent.

This is true. GDPR would only apply there if they were "offering goods or services, irrespective of whether a payment of the data subject is required, to data subjects in the European Union". [1]

This is understood to mean they must be marketing to the EU, for example by offering their site in European languages (apart from English), using European currencies, or using a European domain.

[1] https://gdpr-info.eu/art-3-gdpr/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
Not true; GDPR explicitly grants a large number of rights to the data subject. [1]

These rights include:

* the right to be informed about what data is processed

* the right to access all data gathered about them

* the right to rectification of incorrect data

* the right to receive an export of the data in a common format

* the right to object, to have all data removed, and to restrict processing until further notice

GDPR also requires a data controller to respond within a month, and not charge any fee for this unless the requests are excessive (because they are repetitive). [2]

[1] https://gdpr-info.eu/chapter-3/

[2] https://gdpr-info.eu/art-12-gdpr/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
Quoting GDPR:

"Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement [...]" [1]

"Consent is presumed not to be freely given [...] if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance." [2]

[1] https://gdpr-info.eu/recitals/no-32/ [2] https://gdpr-info.eu/recitals/no-43/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
Be careful with hiding everything behind "consent", because consent cannot be a precondition for providing a service. Put differently: if a user does not consent, you cannot refuse them the service if the data you wanted to collect is not strictly necessary to provide the service.

The alternative is to only collect data that is strictly necessary to provide the service. In that case GDPR allows you to collect the data even without explicitly given consent – according to GDPR in that case the user can reasonably expect the data to be necessary to provide the service. (This does not apply to sensitive personal data and biometric/genetic data – then you always need consent.)

Quoting GDPR:

"Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement." [1]

"Consent is presumed not to be freely given [...] if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance." [2]

[1] https://gdpr-info.eu/recitals/no-32/ [2] https://gdpr-info.eu/recitals/no-43/

molf··on Publishers Haven't Realized How Big a Deal GDPR Is
There's a very clear distinction: GDPR requires that consent is not a precondition for offering a service.

Most cookie policies in practice are all or nothing: you either accept and continue, or you decline and cannot use the service/website. That is not allowed under GDPR.

molf··on Kubernetes 1.10 released
We have switched last year and achieved 45% cost savings. This is mostly because we can now easily run all CPU heavy activity to preemptible nodes if they are available. It is also much simpler to gracefully scale down the number of nodes/containers outside peak hours.

We also no longer have to manage servers.

All of this was possible without Kubernetes, but it is so much easier with it. Although admittedly much of the ease of use is due to not having to manage Kubernetes itself – we use Google Kubernetes Engine. I would not want to install or manage a Kuberenetes cluster/master myself.

I can recommend managed Kubernetes to anyone that runs many different apps/services.

molf··on How to Write CSS That Works in Every Browser, Even the Old Ones
Could not agree with this more. This is why I hate videos without a transcript or textual summary.
molf··on Review: Tesla Model 3 lives up to hype
This is a fairly common feature in many car models.
molf··on DNS over HTTPS
To be fair, "faster" in the context of software development can also frequently refer to the time it takes to implement.
molf··on Improving my productivity using Pomodoro: takeaways after 2 years of practice
Having used Pomodoro extensively in the past, the short breaks are short enough to allow you to stay "in the mode/zone".

The trick to that seems to be that the break is something mundane like walking around, getting a drink; not focusing your attention on something else.

molf··on Folding Promises in JavaScript
With async/await this can become:

    const reduceP = async (fn, identity, listP) => {
      const values = await Promise.all(listP)
      return values.reduce(fn, identity)
    }
The whole thing feels like a synthetic and overcomplicated example, though. In practice I'm sure I'd just write:

    let total = 0
    while (listP.length > 0) {
      total += await listP.pop()
    }
molf··on The tech sec­tor might be evil
It goes both ways. It is hard to be friends with someone that makes fundamentally different moral choices.
molf··on French chef asks to be stripped of three Michelin stars
Being stripped of a star sends a very strong signal that the restaurant/chef is in decline. It will certainly be harmful for their reputation and business.
molf··on 300 miles of secret UK cycle paths have been discovered [audio]
I was very confused while looking at the images, this one in particular: http://www.dailymail.co.uk/~/article-4487592/index.html#i-4f...

"They [the cycleways] were rediscovered by a historian using Google Street View"

It is hard for me to image this to be anything else but a cycle lane. As a Dutch person, it is hilarious to me that it takes a historian to identify them. For comparison, this is what a cycle lane looks like in the Netherlands (and they are absolutely everywhere): https://upload.wikimedia.org/wikipedia/commons/8/86/Vrijligg...

"At the time, the Ministry of Transport was working on plans to create a Dutch-inspired cycleways all over the country"

molf··on America’s Cars Are Getting Faster and More Efficient
Also Italy, north Spain, Croatia. And Germany/Austria/Switzerland in winter season.

It might not be as widespread to travel long distances by car as it is in the US, but it is definitely not "very, very rare". I would even say it's common for many Dutch, Danish, German, Belgian, Polish (from what I can observe).

molf··on HN: List of April Fools' Day Announcements (2017)
Tiny Lens image compression lens: http://gettinylens.com
molf··on A Simple Explanation: VLC.js
Support for the same wide variety of formats that VLC now supports.

The author works for the Internet Archive and it obviously has a huge amount of files in a variety of formats that are not playable natively by browsers, and probably never will be.

molf··on Donald Trump is the president-elect of the U.S.
> Give me luck with finding a girlfriend

How is this related to politics? Genuinely curious since you bring this up as the first way for a political party or movement to win you 'back'.

molf··on Browsers, not apps, are the future of mobile
Besides having to wait for the installation, one important recurring inconvenience for me (on iOS) is the lack of autofill. Especially autofilled user names and passwords.
molf··on Gor – A simple http traffic replication tool written in Go
There's httap: https://github.com/rolftimmermans/httap
← PreviousPage 5 of 9Next →