4 ms·

> That's a sure way to go to jail. Not in (any of) the United States.

by 15155 11y ago

matt4077 11y ago
It could still be good practice to minimize all data when it doesn't serve a purpose, and I can't think of a reason not to delete the last byte of an IP address (except possibly in an internal setting where all clients are from the same subnet). Personally, I don't see much of a problem when my IP is stored somewhere since you'd need a reference, but others have apparently thought more about it and want it to be anonymized. (I've now come up with scenario: If you have access to multiple such sets of data, you could connect accounts from different systems. I. e. when the youporn logs leak, someone could tie the data to your HN account etc.)
- kuschku 11y ago
  > (I've now come up with scenario: If you have access to multiple such sets of data, you could connect accounts from different systems. I. e. when the youporn logs leak, someone could tie the data to your HN account etc.) Combine that with leaks of a social network where you have real names and IP addresses, and you could actually identify the name, job, address, etc of everyone who watched a specific clip of porn. That’s very bad. Metadata. Not even once.
rmc 11y ago
And that's why Safe Harbour was found illegal, and why it's probably illegal for EU companies to use those US services.
scurvy 11y ago
Reminds me of that scene in Snatch where Dennis Farina says "yeah, don't go to London." Don't make any plans to have a physical EU footprint and you can care less what the EU thinks of your internal policies. EU customers can take it or leave it. Their choice. It's not a warm stance to take, but you've probably got a dozen other balls in the air that you're juggling. EU data compliance probably isn't one your worried about as a small startup.
- kuschku 11y ago
  On the other hand, if you comply with EU data policies, your customers might choose your app over another app that doesn’t (especially european users, and businesses)
  - scurvy 11y ago
    Of course. Such are the decisions and tradeoffs that any young startup needs to make. That's why I said that they could take it or leave it.
- scurvy 11y ago
  Too late to edit, but the actual quote was, "Yeah, don't go to England."

> That's a sure way to go to jail. Not in (any of) the United States.

by 15155 11y ago

> That's a sure way to go to jail. Not in (any of) the United States.

It could still be good practice to minimize all data when it doesn't serve a purpose, and I can't think of a reason not to delete the last byte of an IP address (except possibly in an internal setting where all clients are from the same subnet). Personally, I don't see much of a problem when my IP is stored somewhere since you'd need a reference, but others have apparently thought more about it and want it to be anonymized. (I've now come up with scenario: If you have access to multiple such sets of data, you could connect accounts from different systems. I. e. when the youporn logs leak, someone could tie the data to your HN account etc.)

kuschku 11y ago
> (I've now come up with scenario: If you have access to multiple such sets of data, you could connect accounts from different systems. I. e. when the youporn logs leak, someone could tie the data to your HN account etc.) Combine that with leaks of a social network where you have real names and IP addresses, and you could actually identify the name, job, address, etc of everyone who watched a specific clip of porn. That’s very bad. Metadata. Not even once.

rmc 11y ago

And that's why Safe Harbour was found illegal, and why it's probably illegal for EU companies to use those US services.

scurvy 11y ago

Reminds me of that scene in Snatch where Dennis Farina says "yeah, don't go to London." Don't make any plans to have a physical EU footprint and you can care less what the EU thinks of your internal policies. EU customers can take it or leave it. Their choice. It's not a warm stance to take, but you've probably got a dozen other balls in the air that you're juggling. EU data compliance probably isn't one your worried about as a small startup.

kuschku 11y ago
On the other hand, if you comply with EU data policies, your customers might choose your app over another app that doesn’t (especially european users, and businesses)
- scurvy 11y ago
  Of course. Such are the decisions and tradeoffs that any young startup needs to make. That's why I said that they could take it or leave it.
scurvy 11y ago
Too late to edit, but the actual quote was, "Yeah, don't go to England."