lmkg

76 ms·

721.
by lmkg 8y ago
"...the mere accessibility of the controller’s, processor’s or an intermediary’s website in the Union [...] is insufficient to ascertain such intention"
722.
by lmkg 8y ago
The relevant part of GDPR is Recital 23. https://gdpr-info.eu/recitals/no-23/ Short version: GDPR does not apply if you happen to collect data on a few EU residents by accident (assuming you're not otherwise
723.
by lmkg 8y ago
GDPR introduces a new concept called "Personal Data" which includes things like IP addresses and opaque database keys. Something is personal data if it is tied to an individual, regardless of whether sufficient information to iden
724.
by lmkg 8y ago
Depends on what those dials actually represent (the screenshot is blurry for me). If the legal basis for the sub-processors is Legitimate Interest, then consent isn't required and the dials represent a Right to Erasure request. That wo
725.
by lmkg 8y ago
Airbnb is a business. It's "aim" is to grow and make money. Bitcoin was a political experiment before it was a technological one. You don't pivot political beliefs the way you pivot a business. The technological experime
726.
by lmkg 8y ago
It does mean you can request it. It doesn't necessarily mean they have to delete said data. The Right to Erasure is not absolute, if the data controller can state an 'overriding legitimate interest' for the preservation of
727.
by lmkg 8y ago
> The Yahoo! one [1] is definitely in violation of GDPR, right? I don't see any obvious reason why it would be. Yahoo! is being transparent about their data sub-processors, and letting you control how and with whom your data is shar
728.
by lmkg 8y ago
The First Amendment only blocks the government from restricting speech, not anyone else. A private company can limit speech. The government cannot cause or compel that private company to limit speech. Also it's not clear to me that Twi
729.
by lmkg 8y ago
Updating privacy policies is necessary but not sufficient. GDPR has explicit requirements for what a privacy policy must contain, as part of the Right to Transparency. I'll also say that most of the privacy policy emails I've gott
730.
by lmkg 8y ago
The following is a video of someone installing Doom II on DOS, upgrading the operating system in-place 11 times, and running Doom on Windows 7 (around 24 years of upgrades). https://www.youtube.com/watch?v=vPnehDhGa14
731.
by lmkg 8y ago
The Right to Erasure is not absolute. A Right to Erasure request can be denied if you can describe an "Overriding Legitimate Interest." This has to be stronger than a regular legitimate interest that enables processing in the firs
732.
by lmkg 8y ago
The message contents may contain PII as well. For example, you could send your phone number or mailing address to someone else.
733.
by lmkg 8y ago
I take this to be a aspirational statement, not a descriptive one. Google is not saying the web is currently safe by default, but rather that it is their goal to make browsing a safe experience by default.
734.
by lmkg 8y ago
This extension is only mildly useful. The UTM parameters are generally pretty coarse-grained. They don't add information that comes close to individually identifying users. Especially compared to the rest of what Google Analytics track
735.
by lmkg 8y ago
This is why property isn't a great metaphor for certain situations[1]. An important aspect that people (incorrectly) attribute to property is exclusivity : When I own something, it's mine, and that means it's not anyone else
736.
by lmkg 8y ago
Someone tried defeating the secret-image security... it turns out all it takes is a static image saying "Error with Secret Image Server, call us if the problem lasts more than 24 hours."
737.
by lmkg 8y ago
It has been eight months since the data breach was announced (nine since it was discovered). This is the first time we are getting a full reckoning of what data was accessed. (We knew it was ~150 million SSN's, but we didn't wha
738.
by lmkg 8y ago
> It's almost a caricature It IS a caricature. https://en.wikipedia.org/wiki/Poe's_law
739.
by lmkg 8y ago
The comment is replying to a blanket statement that Buffet doesn't invest in tech. He may be conservative about it, but he clearly does invest in tech.
740.
by lmkg 9y ago
As part of some research into online anonymity, I took a detour into the legal history of naming. In the common law (Anglosphere) tradition, the history of "legal names" is much shorter than one would expect. It's a longstand
741.
by lmkg 9y ago
Well, with Godel's Incompleteness Theorems, such behavior appears to be an unavoidable property of any mathematical or computational system that can do anything of note. We may or may not be able to build systems where such properties
742.
by lmkg 9y ago
Not really. The GDPR covers "personal data," which is much broader than the category of "personally identifiable information" that other legislation covers. A user identifier, even if opaque and not related to any person
743.
by lmkg 9y ago
Article 79, "Right to an effective judicial remedy against a controller or processor," seems to say that individuals can sue controllers or processors. This may be limited to cases where the regulatory agency does not find in the
744.
by lmkg 9y ago
I get the impression the GDPR expects you to not keep data around forever, as a general best practice. When you collect data, you have to tell your users at collection what your retention policy is (this is part of Right to Transparency). S
745.
by lmkg 9y ago
On the other hand, now users get the same level of access to their own data that governments have had for years. Silver linings, and such.
746.
by lmkg 9y ago
I assume OP is talking about geo information inferred from IP Address.
747.
by lmkg 9y ago
It's called The Duck Technique, after an apocryphal story of an animator for Battle Chess. http://pud.com/post/59851751577/the-duck-technique https://en.wikipedia.org/wiki/Battle_Chess#De
748.
by lmkg 9y ago
A general point of the GDPR is that when you collect data, consent is given for a business purpose . The user has the ability to opt-in to different business use-cases if they so choose. Data collected cannot be used for a business case th
749.
by lmkg 9y ago
Relevant GDPR text available at: https://gdpr-info.eu/recitals/no-162/ In short, aggregated data or statistical summaries is not constrained in the same way. I think you still need consent into to perform the aggr
750.
by lmkg 9y ago
GDPR includes the "Right to Erasure"/"Right to be Forgotten." After May 25, they are actually required to delete your data, not just a "soft delete."

More ›