JackWritesCode

8 ms·

31.
by JackWritesCode 5y ago
Yes they do. It's not just about data being stored, it's data processing as a whole. You cannot casually pass EU data subject Personal Data to US-controlled infrastructure. CDN is processing of Personal Data in the clear. Please r
32.
by JackWritesCode 5y ago
Yes, it dropped today: https://noyb.eu/en/austrian-dsb-eu-us-data-transfers-google-... More EU member states will likely follow.
33.
by JackWritesCode 5y ago
Sure, happy to explain further. You have found the testing /event but there is another (make sure your ad-blockers are off). I've put together the details here in an image, so it's easy to follow ( https://imgur.com
34.
by JackWritesCode 5y ago
Non-US companies must use a EU-owned servers (not just EU servers controlled by AWS, DigitalOcean) to process EU data subject traffic. If they don't, they're in violation of Schrems II, which makes them in violation of the GDPR.
35.
by JackWritesCode 5y ago
I'm confused. Open up Plausible, look for /event in your inspect element (devtools in chrome), look at the IP address that it connects to. Run that IP through ipinfo.io and see which country comes up. If it's the US, it'
36.
by JackWritesCode 5y ago
If a US company controls the servers, it’s illegal. If it’s EU-owned, it’s legal. Plausible seems to use Netlify/AWS for analytics. Both US companies.
37.
by JackWritesCode 5y ago
You are correct. Fathom Analytics is the only globally distributed provider that offers EU Isolation (keeping EU data completely away from US cloud providers). https://usefathom.com/features/eu-isolation
38.
by JackWritesCode 5y ago
Love it, Aaron. I've always felt more confident using Laravel knowing that it's backed by a competent entrepreneur. These paid services ensure the longevity of Laravel. We've paid for Spark and Nova, and we have Vapor & F
39.
by JackWritesCode 5y ago
Thanks so much for supporting us. We have spent so much money on getting our compliance right :) A lot of companies claim to be GDPR compliant, and they’re not. We’ll be blogging more about this in the future as we don’t like folks being li
40.
by JackWritesCode 5y ago
Woah this thread is packed. Most of these companies didn’t exist when we started Fathom back in 2018, so it’s great to see how the privacy-first analytics space is thriving. I’m Jack Ellis, the cofounder of https://usefathom.com
41.
by JackWritesCode 5y ago
And if you’re serving those pop-ups from US-controlled servers (even if they’re in the EU), you’re violating the Schrems II ruling.
42.
An Engineer's Guide to Building a Database for Data-Intensive Applications(singlestore.com)
4 points by JackWritesCode 5y ago|0 comments
43.
The serverless revolution is alive and well(blog.ymirapp.com)
2 points by JackWritesCode 5y ago|0 comments
44.
by JackWritesCode 5y ago
Sure :)
45.
Building the Fastest Website Analytics(usefathom.com)
5 points by JackWritesCode 5y ago|3 comments
46.
Designing a Million Dollar Brand(usefathom.com)
1 points by JackWritesCode 6y ago|0 comments
47.
by JackWritesCode 6y ago
Haha I didn't know who he was. But the fact Alex Debrie follows him is certification enough for me. And I was wrong. Looking at his Twitter, it looks like he knows 2000x more than me about servers.
48.
by JackWritesCode 6y ago
Never expected to see someone defending me on Hacker News. I appreciate it. To clear things up: * I found AWS Shield Advanced organically * It was a DDoS attack * I am incredibly happy with the personalized service. It’s like hiring someone
49.
by JackWritesCode 6y ago
That sounds incredible. We’re used in a lot of universities right now and it would be great to see more
50.
by JackWritesCode 6y ago
Dealing with AWS hasn’t been hassle but is expensive. However, the value proposition is well worth it for us.
51.
by JackWritesCode 6y ago
Can’t talk about this publicly, sorry :(
52.
by JackWritesCode 6y ago
The data was full of spam & was targeted at high profile customers. It was also run every hour for one period then ramped up to 500,000 concurrents. It was a DDoS :(
53.
by JackWritesCode 6y ago
Yup with a minimum 1 year commitment.
54.
by JackWritesCode 6y ago
> Layer 7 just means they are making ton of HTTP requests from lot of IPS however this is the nature of a web analytics. Exactly! Which is why it was so hard. There's no path pattern. Everything hits "/". So the only
55.
by JackWritesCode 6y ago
You and me both, fargle. When the attacks started, I thought someone was attacking us just so I would write a technical blog post.
56.
by JackWritesCode 6y ago
I saw Kinesis stream today with DynamoDB and I will have to review it :)
57.
by JackWritesCode 6y ago
They're still going to need to process IP addresses or some kind of PII though, that's the thing :(
58.
by JackWritesCode 6y ago
It was 100% a layer 7 DDoS, the attack was targeted and malicious. I can't say too much but the AWS team confirmed it. But I appreciate how something like you describe could happen. I like the idea of an MD5 hash. Although I'm not
59.
by JackWritesCode 6y ago
Public access point. The server accepts pageviews, so they DDoS'd that.
60.
by JackWritesCode 6y ago
Awesome, I'd love some advice if you're willing. So here's our situation. * We're getting hit with a huge DDoS attack, repeatedly over 3 weeks, with no sign of stopping * With zero access logs, there was no way to find p

More ›