4 ms·

Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. How do you scan all the logs tha

Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. How do you scan all the logs that might somehow have an association with the requesting user that are in cold storage and alter data on write only archived optical media? You have to make an entire copy of it with those data removed. It's not about just treating customers better. It's government dictating the technical architecture.

scottlocklin 7y ago
>Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. Bummer dude. As an engineer type, I say, bring it on. Hard for me to have much sympathy ZuckerBrin can't afford another island or whatever because they made unethical decisions in the past. And if companies blow up because of it: good, that's the idea. There needs to be consequences.
- tick_tock_tick 7y ago
  Facebook will be just fine and probably come out ahead. Same with google. They have the money and resource to comply. These kind of regulation that don't take reality into account when written are a god send to large corps.
dmitriid 7y ago
> Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. Boohoo and cry me a river. Good riddance. Other companies who take care of customer data from the start will take over. > It's government dictating the technical architecture. No, the government doesn’t dictate technical architecture. The government dictates: be careful with personal data.
mahmoudimus 7y ago
Just a shameless plug here -- we've been building a super developer friendly product to allow your application to comply w/ these laws with minimal (and sometimes NO code changes). You can email me directly mahmoud - @ - verygoodsecurity.com (https://verygoodsecurity.com/ https://verygoodsecurity.com/) and I can show you how it works. Our idea is that complying w/ data security & privacy laws should be a devops shift + costs to keep up w/ them shouldn't stop us, as developers, from keeping us just as productive in our application development lifecycle. We're still trying to figure out the right pricing structure for smaller companies, so if you have any insight there, I'm very interested to hear it.
JohnFen 7y ago
> Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. Yep. And there's nothing wrong with that. That they may suffer a large expense to correct years of misbehavior doesn't make me sympathetic to them.
zbentley 7y ago
> Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. This harkens back to the GDPR hysteria. And that was a storm in a teacup: most companies that took compliance seriously were able to get to a good place with a medium amount of engineering work, and didn't suffer financially overmuch. A few companies did go out of business or suffer significantly--and most of those were sketchy, data-abusive entities. In other words, it worked.

scottlocklin 7y ago

>Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. Bummer dude. As an engineer type, I say, bring it on. Hard for me to have much sympathy ZuckerBrin can't afford another island or whatever because they made unethical decisions in the past. And if companies blow up because of it: good, that's the idea. There needs to be consequences.

tick_tock_tick 7y ago
Facebook will be just fine and probably come out ahead. Same with google. They have the money and resource to comply. These kind of regulation that don't take reality into account when written are a god send to large corps.

dmitriid 7y ago

> Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. Boohoo and cry me a river. Good riddance. Other companies who take care of customer data from the start will take over. > It's government dictating the technical architecture. No, the government doesn’t dictate technical architecture. The government dictates: be careful with personal data.

mahmoudimus 7y ago

Just a shameless plug here -- we've been building a super developer friendly product to allow your application to comply w/ these laws with minimal (and sometimes NO code changes). You can email me directly mahmoud - @ - verygoodsecurity.com (https://verygoodsecurity.com/ https://verygoodsecurity.com/) and I can show you how it works. Our idea is that complying w/ data security & privacy laws should be a devops shift + costs to keep up w/ them shouldn't stop us, as developers, from keeping us just as productive in our application development lifecycle. We're still trying to figure out the right pricing structure for smaller companies, so if you have any insight there, I'm very interested to hear it.

JohnFen 7y ago

> Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. Yep. And there's nothing wrong with that. That they may suffer a large expense to correct years of misbehavior doesn't make me sympathetic to them.

zbentley 7y ago

> Many companies have to RADICALLY change their architectures just to support these laws. And often the costs will be enormous. This harkens back to the GDPR hysteria. And that was a storm in a teacup: most companies that took compliance seriously were able to get to a good place with a medium amount of engineering work, and didn't suffer financially overmuch. A few companies did go out of business or suffer significantly--and most of those were sketchy, data-abusive entities. In other words, it worked.