5 ms·

Found this disclaimer sad and reminiscent of the endless and useless cookie prompts in the EU Note: This text used to be interactive, but is no longer, thanks

Found this disclaimer sad and reminiscent of the endless and useless cookie prompts in the EU Note: This text used to be interactive, but is no longer, thanks to the General Data Protection Regulation (GDPR), which makes it virtually impossible for small, non-commercal sites to "process user data" (like your input) without contacting a lawyer first.

saagarjha 7y ago
Where is this?
- kick 7y ago
  https://t3x.org/klong/prime.html https://t3x.org/klong/prime.html For what it's worth, this URL is the first result on search engines.
  - saagarjha 7y ago
    I think the author is overreacting, to be honest. What’s wrong with having client-side interactivity? There’s no possible way that would fall afoul of GDPR.
    - kick 7y ago
      klong doesn't have a toy interpreter. It was likely processed server-side.
      - tluyben2 7y ago
        Still, if that would execute and throw away, like most of them do, there is still nothing gdpr relevant.
        deleted 7y ago
        [deleted]
pjc50 7y ago
Failure of interpretation, really: I can't see how any of that could be considered personal data. Mind you, the attempt to be technology-independent rather than clearly mandate solutions has been a huge problem of the tracking law.
- nils-m-holm 7y ago
  > Failure of interpretation, really: I can't see how any of that could be considered personal data. Theoretically, you could enter some personal in a free-text field and it would be stored in the log files. I am not saying that people actually would do this, but they could. Now they cannot.
  - tluyben2 7y ago
    That would not get you into trouble with the gdpr, nor would most common sense things. A bit too paranoid imho.
    - rhn_mk1 7y ago
      Can you back it up? Last time I asked an expert, any kind of personally identifiable data that someone would receive would create a liability.
      - tluyben2 7y ago
        Well, can you? You asked 'an expert'; since the introduction of the gdpr, there was an explosion of 'experts' (even real lawyers) who know absolutely nothing and just read the EU docs line for line to spread FUD (and get clients). And the problem is, that, while the gdpr is EU wide, there are governing bodies per country which all behave different. So your expert in Italy might be completely off the mark about the Netherlands (so, disclaimer, my experts are from the Netherlands and talk about NL). But, in general, if you want to be 100% safe; just have a static site that collects nothing and logs nothing. No need to nag about it; it makes the internet a better place anyway imho. In my experience, if you are not frivolously collecting user data and make sure that the personal data you do collect is something you can explain in the line of your business (even if that data is very secret data, but that usually has extra laws/rules on top). And, finally, that you make sure that data is properly stored (encrypted on properly updated servers), you have no issues. In this case, IF the owner would get an email from the governing body of the country (I think Germany in his case), he would very easily be able to explain the reason for the input and the body can see that he is not asking nor frivolously collecting user identifiable data. If people choose to enter it, for some reason, en masse, in his site, then they would ask him to throw it away when it comes (so in his case, don't log it, but why was it being logged anyway?) in and that's it. No fines, no nothing.
andykx 7y ago
This is excessively sensitive and represents an opinion-driven interpretation of the law. It seems like a lame attempt to make an "edgy" political statement.
- nils-m-holm 7y ago
  Your ad hominem aside, it is an attempt to be safe instead of sorry.
  - tluyben2 7y ago
    Well, it is an attack on the gdpr with the huge text on the top (you could just remove that and still be safe instead of sorry?) while your site, in it's previous state, does not need lawyers etc as it doesn't fail the gdpr. Especially as you can simply (if you want to be extra careful) not log IPs or any user input into the logs. Then there is nothing to 'sue' if that would be your worry.
    - nils-m-holm 7y ago
      Yes, it is an attack on the GDPR and I consider it to be justified. You do not, and that is also a perfectly valid point of view. What is uncalled for, IMO, is the name calling in the posting further up the thread.
      - tluyben2 7y ago
        Name calling is uncalled for, I agree. But you seem to reside in Germany; not sure what you are worried about anyway (you would get (but will never get because your previous site already complied fine, as do most sites that are not personal data farms) multiple warnings and you can simply respond to those as a person (no lawyer needed or warranted), but yes, ofcourse, you are entitled to your opinion. Anyone is as far as i'm concerned.
        nils-m-holm 7y ago
        In Germany in particular there exists a nasty habit of sending C&D letters to people for all kinds of minor rule violations. You can either sign these letters and pay an (often substantial) fee or get a lawyer. Or you can try to comply in advance, often to a ridiculous degree, which I do. So I may have such a strong opinion on the GDPR because I live in Germany.
skrebbel 7y ago
You could make a statement like that about any law. Eg many EU countries also have laws against hate speech, but I saw nobody take down their hobby hacks because of those.
- yorwba 7y ago
  I guess the difference is that GDPR is new and had a bunch of of reporting about it recently. Few people stop to consult a lawyer before starting a side-project, probably because they wouldn't start a project that would violate any laws they're aware of. Of course there can always be laws you aren't aware of, but those only become scary once you realize you may have violated them.
- nils-m-holm 7y ago
  > You could make a statement like that about any law. If you can, you should. There are too many totally bogus laws!
jusssi 7y ago
Mission accomplished, I say. No reason why this site should collect my personal information and eventually leak it to hackers.

saagarjha 7y ago

Where is this?

kick 7y ago
https://t3x.org/klong/prime.html https://t3x.org/klong/prime.html For what it's worth, this URL is the first result on search engines.
- saagarjha 7y ago
  I think the author is overreacting, to be honest. What’s wrong with having client-side interactivity? There’s no possible way that would fall afoul of GDPR.
  - kick 7y ago
    klong doesn't have a toy interpreter. It was likely processed server-side.
    - tluyben2 7y ago
      Still, if that would execute and throw away, like most of them do, there is still nothing gdpr relevant.
      - deleted 7y ago
        [deleted]

pjc50 7y ago

Failure of interpretation, really: I can't see how any of that could be considered personal data. Mind you, the attempt to be technology-independent rather than clearly mandate solutions has been a huge problem of the tracking law.

nils-m-holm 7y ago
> Failure of interpretation, really: I can't see how any of that could be considered personal data. Theoretically, you could enter some personal in a free-text field and it would be stored in the log files. I am not saying that people actually would do this, but they could. Now they cannot.
- tluyben2 7y ago
  That would not get you into trouble with the gdpr, nor would most common sense things. A bit too paranoid imho.
  - rhn_mk1 7y ago
    Can you back it up? Last time I asked an expert, any kind of personally identifiable data that someone would receive would create a liability.
    - tluyben2 7y ago
      Well, can you? You asked 'an expert'; since the introduction of the gdpr, there was an explosion of 'experts' (even real lawyers) who know absolutely nothing and just read the EU docs line for line to spread FUD (and get clients). And the problem is, that, while the gdpr is EU wide, there are governing bodies per country which all behave different. So your expert in Italy might be completely off the mark about the Netherlands (so, disclaimer, my experts are from the Netherlands and talk about NL). But, in general, if you want to be 100% safe; just have a static site that collects nothing and logs nothing. No need to nag about it; it makes the internet a better place anyway imho. In my experience, if you are not frivolously collecting user data and make sure that the personal data you do collect is something you can explain in the line of your business (even if that data is very secret data, but that usually has extra laws/rules on top). And, finally, that you make sure that data is properly stored (encrypted on properly updated servers), you have no issues. In this case, IF the owner would get an email from the governing body of the country (I think Germany in his case), he would very easily be able to explain the reason for the input and the body can see that he is not asking nor frivolously collecting user identifiable data. If people choose to enter it, for some reason, en masse, in his site, then they would ask him to throw it away when it comes (so in his case, don't log it, but why was it being logged anyway?) in and that's it. No fines, no nothing.

andykx 7y ago

This is excessively sensitive and represents an opinion-driven interpretation of the law. It seems like a lame attempt to make an "edgy" political statement.

nils-m-holm 7y ago
Your ad hominem aside, it is an attempt to be safe instead of sorry.
- tluyben2 7y ago
  Well, it is an attack on the gdpr with the huge text on the top (you could just remove that and still be safe instead of sorry?) while your site, in it's previous state, does not need lawyers etc as it doesn't fail the gdpr. Especially as you can simply (if you want to be extra careful) not log IPs or any user input into the logs. Then there is nothing to 'sue' if that would be your worry.
  - nils-m-holm 7y ago
    Yes, it is an attack on the GDPR and I consider it to be justified. You do not, and that is also a perfectly valid point of view. What is uncalled for, IMO, is the name calling in the posting further up the thread.
    - tluyben2 7y ago
      Name calling is uncalled for, I agree. But you seem to reside in Germany; not sure what you are worried about anyway (you would get (but will never get because your previous site already complied fine, as do most sites that are not personal data farms) multiple warnings and you can simply respond to those as a person (no lawyer needed or warranted), but yes, ofcourse, you are entitled to your opinion. Anyone is as far as i'm concerned.
      - nils-m-holm 7y ago
        In Germany in particular there exists a nasty habit of sending C&D letters to people for all kinds of minor rule violations. You can either sign these letters and pay an (often substantial) fee or get a lawyer. Or you can try to comply in advance, often to a ridiculous degree, which I do. So I may have such a strong opinion on the GDPR because I live in Germany.

skrebbel 7y ago

You could make a statement like that about any law. Eg many EU countries also have laws against hate speech, but I saw nobody take down their hobby hacks because of those.

yorwba 7y ago
I guess the difference is that GDPR is new and had a bunch of of reporting about it recently. Few people stop to consult a lawyer before starting a side-project, probably because they wouldn't start a project that would violate any laws they're aware of. Of course there can always be laws you aren't aware of, but those only become scary once you realize you may have violated them.
nils-m-holm 7y ago
> You could make a statement like that about any law. If you can, you should. There are too many totally bogus laws!

jusssi 7y ago

Mission accomplished, I say. No reason why this site should collect my personal information and eventually leak it to hackers.