Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
buzer
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
31.
▲
by
buzer
2mo ago
"legitimate interest" is legal basis in GDPR. ePD (which governs access to cookies) does not have such legal basis, only consent and the two exceptions. Other processing (like after value is read) can happen under GDPR if the data
32.
▲
by
buzer
2mo ago
This is actually slightly narrower exception than people (and regulators) think. The exception is: > strictly necessary in order for the provider of an information society service explicitly requested by the subscriber or user to provide
33.
▲
by
buzer
2mo ago
Well, if you presented them with list of 100 partners each with 20 page of privacy policies and they accept it within 10 seconds it should be tricky to argue that user actually read it all. You could, for example, require that user answers
34.
▲
by
buzer
2mo ago
Legitimate interest is not currently enough to read or write cookies. You need either consent or it must be "strictly necessary in order for the provider of an information society service explicitly requested by the subscriber or user
35.
▲
by
buzer
2mo ago
That's uBlock Origin Lite, not uBlock Origin. They are two very different extensions. Lite, for example, does not allow you to add custom filters.
36.
▲
by
buzer
2mo ago
If someone is in EU and is affected by this they could potentially utilize GDPR to make both Microsoft and LG take responsibility for this. It's hard to say directly from the article if there is any GDPR breach. If everything was part
37.
▲
by
buzer
2mo ago
That's good if true. When did it change? I very much do remember that back when the change happened the modal I received didn't actually say anything ( https://news.ycombinator.com/item?id=45064212 ) and thus I was
38.
▲
by
buzer
2mo ago
No for what? The opt-in for model training? About a year ago Anthropic changed "Allow use of your chats and coding sessions to train and improve Anthropic AI models" to default to on: https://www.anthropic.com/news
39.
▲
by
buzer
2mo ago
Sure, but the point is more that once you submit feedback then the usual "opt out of using my data for training" no longer apply and at least that reply (and possibly whole conversation) can be included in training set in one way
40.
▲
by
buzer
2mo ago
They don't use your general chats it if you have opted out (note: opted out, not opted in). However if you submit feedback then whole conversation can be used. https://help.openai.com/en/articles/5722486-how-y
41.
▲
by
buzer
2mo ago
There are multiple ways to use feedback. Personally I would often be fine with actual human reading my feedback, taking in account the points I made and evaluating how it should affect their feature development and future roadmap. Now what
42.
▲
by
buzer
3mo ago
Aren't the cameras on city's land or did city lease the land to Flock? If they are on city's land couldn't city require that Flock removes their stuff from city's property or city will do it on Flock's expense?
43.
▲
by
buzer
3mo ago
It's unfortunately somewhat common these days and personally I actively avoid any place which does this. At least it's only somewhat common rather than the standard so it's still possible. Couple of examples: https:/&#x
44.
▲
by
buzer
3mo ago
Personally I do agree, but enforcement is unfortunately behind DPAs and it's pretty clear that they are trying to avoid ruling on it. In theory someone could directly sue some company which engages on this via Article 79, but this can
45.
▲
by
buzer
3mo ago
Not quite. > This shall not prevent any technical storage or access for the sole purpose of carrying out or facilitating the transmission of a communication over an electronic communications network, or as strictly necessary in order to
46.
▲
by
buzer
3mo ago
It's called "pay-or-okay" (or "consent-or-pay") and there hasn't been many decisions on it yet which has led noyb to sue German DPAs: https://noyb.eu/en/years-inactivity-pay-or-ok-cases-noy
47.
▲
by
buzer
3mo ago
In 2022 I got physical mail about leaving a review for something I bought from Amazon (sold by company X, shipped by Amazon) in exchange for Amazon Gift Card. It contained the name of the product I bought. When I tried to report it to Amazo
48.
▲
by
buzer
3mo ago
2 weeks ago it was $60 billion apparently. https://news.ycombinator.com/item?id=48553224 It might be higher now.
49.
▲
by
buzer
3mo ago
You are somewhat confusing two distinct concepts. IP addresses are considered to be personal data because they can be linked to single individual and controller is allowed to give this personal data to someone who can do the linking (e.g. p
50.
▲
by
buzer
3mo ago
> nor are there any major EU software services and there never will be SAP and Spotify come to my mind first. Some ex-EU services include Skype and Booking.com (latter might still be counted as EU service depending on definition).
51.
▲
by
buzer
3mo ago
Mostly yes. Note the chance to object must be given before decision is made, i.e. not to give option for human review after the fact. Human must also be able to actually have meaningful chance to affect the decision. If the decision is base
52.
▲
by
buzer
3mo ago
That's why I said consent usually cannot be used in employment context. I wouldn't rule it out 100% for everything employment related, but application screening is unlikely to qualify for those rare cases.
53.
▲
by
buzer
3mo ago
> this is most likely highly illegal to use in the EU due to violating anti discrimination laws in multiple ways. It's generally illegal under GDPR Article 22. > The data subject shall have the right not to be subject to a decisi
54.
▲
by
buzer
3mo ago
Finnish case happened after DVD-Jon. To my knowledge there also hasn't been any new cases which went other way (or any way) in Finland & law hasn't changed so it's technically still illegal. Of course it's up to pros
55.
▲
by
buzer
3mo ago
In Finland DVD's CSS was ruled to be strong technical copy protection system (tehokas tekninen toimenpide). In that exact case a person had made a program which bypassed it and published it. He was found to be criminally liable though
56.
▲
by
buzer
3mo ago
Assuming you are in EU you could report them to local DPA. Objection (i.e. unsubscribing. Original automatic subscription may or or may not have been legal) to direct marketing is pretty much absolute due to GDPR Article 21(2), I'm not
57.
▲
by
buzer
3mo ago
Worth noting is that there was 2500 € capital requirement until 1st of July 2019 and it was reduced to 0 €. Public limited liability company (Oyj) still has 80 000€ capital requirement.
58.
▲
by
buzer
3mo ago
Not 3 month period, but looking at e.g. capacity factor over 5 day period can be under 3% and even 10 day period can be under 5%. Capacity factor for whole year is around 30% (22TWh produced with 9433MW in 2025, rounded it up since some cap
59.
▲
by
buzer
3mo ago
> Near the arctic circle Wind fill the same niche. What do you mean? Long periods of calm weather during cold temperatures is not unheard of in Finland and does cause issues at times due to amount of wind energy that has been built in r
60.
▲
by
buzer
3mo ago
I would like to see that thread if possible just out of curiosity. I looked a bit into EUDPR and the earlier 45/2001 regulation (EUDPR came in effect in December 2018 so a bit later than GDPR). EUDPR explicitly imports Article 5(3) of
More ›