lmkg

20 ms·

181.
by lmkg 5y ago
So far, the line that has been drawn by the courts is "is the IP address visible to a company subject to the CLOUD Act in the United States?" AWS CloudFront would meet that definition: Amazon is covered by the CLOUD Act, and the v
182.
by lmkg 5y ago
Sadly, no. Cookiebot was fined for using Akamai CDN, even though the court accepted the CDN servers were located in the EU and operated by Akamai's EU subsidiary. The EU court ruled that the American CLOUD Act still claims to have juri
183.
by lmkg 5y ago
That already happened. Cookiebot (Danish) was fined for using Akamai CDN. Note that it's not all CDNs, fonts, etc. It's ones that are subject to the CLOUD Act in the United States. Non-American companies, or even US companies wh
184.
by lmkg 5y ago
Are you aware of "Dyscalculia?" It's similar to dyslexia, but with numbers. Less-studied, so less-well-understood. On the surface, it sounds similar to what you describe: no issue with math per se, but numbers in particular t
185.
by lmkg 5y ago
> Hope in few days I'll return to your problem. Context sure adds a lot of meaning to these words. I hope you return, too.
186.
by lmkg 5y ago
I didn't say GDPR is incompatible with cloud. I said it's incompatible with CLOUD, which is the name of the American law that causes problems. Cloud services are totally compatible with GDPR, so long as you stick to one side of th
187.
by lmkg 5y ago
That's a fair point. At the time GDPR was passed, there was an Adequacy Decision in place (Privacy Shield), so the political expectation was that US<->EU data transfers would be OK. One way of looking at things is that the polit
188.
by lmkg 5y ago
Quick fact check. GDPR says IP Addresses are personal data, although this is a clarification of a previous court ruling. Personal data does NOT need consent to process. Consent is only necessary in a minority of cases, and certainly not r
189.
by lmkg 5y ago
The most recent court rulings that that because of the US CLOUD Act, all transfers of personal data to the United States are unlawful. Personal data includes IP addresses. These rulings are under appeal, but at the end of the day it'
190.
by lmkg 5y ago
> That's by design It actually is, too. There are two large, influential groups of stakeholders who purposefully lobby for a painful user experience. The first, of course, is the tax-prep industry (e.g. Intuit/TurboTax and H&am
191.
by lmkg 5y ago
Do you mean mechanically or the setting? Mechanics-wise, a big part of the gameplay is figuring out for yourself what to do. Everything is discoverable, but you have to be willing to take a few jumps without seeing where you'll land. T
192.
by lmkg 5y ago
That country is the UK. The EU has an "Adequacy Decision" for the UK, meaning that GDPR does not restrict data transfers to the UK. And the UK's Adequacy Decision for the United States still exists (Schrems II happened after
193.
by lmkg 5y ago
A Server-Side GTM container compliments a client-side container, it does not fully replace it. Some processing happens on the server, but event data must still be sent to the server-side container first. For now, the "standard"
194.
by lmkg 5y ago
The copyright doesn't affect anything. The information about people derived from the picture is a separate artifact from the picture itself. That information is owned by Facebook, not the copyright holder of the picture, and its distri
195.
by lmkg 5y ago
Fun fact: Whatsapp (Facebook) was recently fined 75 million Euros for this practice under GDPR. To be pedantic, that was one part of a 225-million-Euro fine. But that practice was specifically broken out as one of the line items, with a dol
196.
by lmkg 5y ago
Nothing that has hit the mainstream like Rust. To my knowledge, Rust's lifetimes take influence from a language called Cyclone.
197.
by lmkg 5y ago
I wouldn't be so confident that the code is coming from a library . We take code distribution for granted these days, but some fraction of the web today was built when the only way to get anything done was hand-rolled perl scripts.
198.
by lmkg 5y ago
Several of those goals are still subject to the whims of factors outside of your control. E.g. "lead engineering on a project that has at least one other engineer." What if no project comes about? What if you start such a project
199.
by lmkg 5y ago
Part of GP's point is that none of those are "real" gotos. C doesn't have them. C has a construct called "goto" which resembles goto the way that a vacuum cleaner resembles a black hole. A constrained, neutered
200.
by lmkg 5y ago
There's a critical nuance that you're ignoring, which is whose data is being stored. In the incident in question, it wasn't Microsoft's data. It was the data of a customer of Microsoft. You're treating several dif
201.
by lmkg 5y ago
I've read most of the EU rulings and court cases on this topic. The CLOUD Act is basically the only US law that any of them mention or refer to. And let's be explicit here: The entire purpose of the CLOUD Act is to bypass EU dat
202.
by lmkg 5y ago
What matters is the US CLOUD Act, because that's the thing that lets US Intelligence have access to data stored in EU servers. If legal arrangement is covered by the CLOUD Act, it's a GDPR violation.
203.
by lmkg 5y ago
The linked article. Relevant quote: > In this context, a unique identifier is assigned to each visitor. This identifier (which constitutes personal data) and the associated data are transferred by Google to the United States. This is an
204.
by lmkg 5y ago
There's a HUGE important aspect that you're missing: The IP Address is NOT the only thing that makes this data into personal data. Google Analytics generates a visitor ID by rolling a random number and storing it in a first-part
205.
by lmkg 5y ago
The original ruling was nuanced, and this ruling is clarifying some gray area inside of it. The ruling on Schrems II (the court case that struck down Privacy Shield) did not state that SCCs on their own would be sufficient. It said that S
206.
by lmkg 5y ago
More than that. Nuclear waste that stays radioactive for ten thousand years has an interesting design problem: how do you create a warning that people will understand after that much time has passed? A committee was created to study this pr
207.
by lmkg 5y ago
That's part of the design consideration, and the reason for the emphasis on "no value." I mean, humans gonna human, but you can still try to communicate a difference between "this is dangerous because we booby-trapped ou
208.
by lmkg 5y ago
The opening anecdote is about a video posted by a person who is widely known and recognized for promoting that type of content. In fact, founded a public organization based around it. Anonymity would keep out the cowards, but that may or ma
209.
by lmkg 5y ago
> They clearly mean to ban online tracking. There's your error. GDPR is not about online advertising. Things regulated by GDPR: * CCTV in public spaces. * Medical records. * Employment records that businesses keep about their employ
210.
by lmkg 5y ago
GDPR encourages pseudonymization as a best practice, but also draws a sharp distinction between anonymous and pseudonymous data. Pseudonymous data is still personal data and subject to all other obligations under GDPR. Any data that's

More ›