simpss

14 ms·

91.
by simpss 7y ago
GDPR does not require "cookie consents forms" and neither do the EU e-privacy rules. There are clear exemptions for authentication and other technical cookies. Basically, the form is only required if you're doing something na
92.
by simpss 7y ago
A while later, they did pump the breaks completely by reversing the ToS changes. This means they would have to change the ToS before trying to implement it again, which means the current result isn't moving the goalposts at all and is
93.
by simpss 7y ago
no concrete answer regarding that yet. I don't think the new ToS was published on gitlab.com already, so this might not be necessary. I asked the question to get a clear answer, probably won't hear anything back regarding this. ed
94.
by simpss 7y ago
from gitlab: https://gitlab.com/gitlab-org/gitlab/issues/34833#note_23515... ------------------ We've heard your concerns and questions. There were many more concerns than we expected. We’re going to pro
95.
by simpss 7y ago
as long as the ToS doesn't reflect a change of heart, this does nothing. In enterprise environments, we can't base anything on blog posts, it's the ToS that matters. ps: SOC2 does not inspire confidence as the whole of EAA ne
96.
by simpss 7y ago
this is a clear violation of GDPR, unless they can really guarantee the data is 100% anonymous, gitlab was able to provide the service without telemetry & is now blocking access to the (self-hosted) service unless one consents to the ne
97.
by simpss 7y ago
ps: Ukraine gave away their nukes for a promise of security with the budapest memorandum ca 1995. I suspect this has a high effect on any future promises by the nuclear backed countries.
98.
by simpss 7y ago
I have a public/private key-pair from my local government. Comes with my passport and is guaranteed by the gov to represent a single person only. Although, I wouldn't want to give the public key to google/amazon/facebook
99.
by simpss 7y ago
GDPR definitions are slightly different. A person is identified, if the ID references only one user in the whole dataset[1]. This also makes any information linked to the ID PII. the ID would be pseudo-anonymous if one would need some extra
100.
by simpss 7y ago
i've been following these since lenny, https://workaround.org/ispmail pretty much a set & forget solution. He also writes a new one with all-you-need-to-know extras every time a stable release of debian comes out.
101.
by simpss 7y ago
GDPR "opt-in" consent definition also says it must be possible to "opt-out" and still receive the service. If the data is required for providing the service, no consent is needed, but you must be able to clearly show tha
102.
by simpss 7y ago
no, GDPR does not have any effect on personal websites. Article 2 of GDPR defines the scope of the law. > This Regulation does not apply to the processing of personal data: by a natural person in the course of a purely personal or house
103.
by simpss 7y ago
seemed like a good trial idea until I got onto the pricing page... to get SSO, we'd have to start out with the 11$/user/month plan, in my current company(~1000 users) that would mean roughly 132 000$ a year making it a pretty
104.
by simpss 8y ago
true, I initially missed the final response & only noticed it now when I linked the discussions. It is a bit disappointing and follows the common "wait until it cools down & give a non-response" pattern. But it's actu
105.
by simpss 8y ago
here's what he's referencing: https://github.com/ampproject/amphtml/issues/13457 https://github.com/ampproject/amphtml/issues/13597 and the resulting(check the timest
106.
by simpss 8y ago
> I'm pretty much baffled by what you mean here. I think it's just a misunderstanding. You're talking about a situation where your grandmother owns the place and he/she is talking about a situation where your grandmot
107.
by simpss 9y ago
the same can be said for the paper ballots that are never used. Voter turnout is never 100%. As an example faking even 10% of the abstained votes would have swayed the brexit results. I don't see how this makes online voting insecure,
108.
by simpss 9y ago
Could you give me an example of what makes it too complex and maybe an example of a system that is simpler?
109.
by simpss 9y ago
That one, yes :) Their whole analysis is based on this claim: "claiming they could be able to breach the system, change votes and vote totals, and erase any evidence of their actions if they could install malware on the election serv
110.
by simpss 9y ago
This has been solved, and it's really simple actually. I wrote about it in another comment, but I'll quickly go over the technology here as well. When a citizen votes, the vote is encrypted with the government public key. The vote
111.
by simpss 9y ago
Estonian reporting in. Our internet voting system has solved this problem. The votes secrecy is guaranteed by allowing citizens to vote multiple times and only the last vote is counted. No-one is obligated to vote on the internet and a pape