News for hackers. Stuff that matters.
Re:Facebook to change user terms, limiting effect of EU priv... by mpfundstein on Thursday April 19, 2018 @06:20AM (#16874666)
I never really felt the need to store ips actually
Re:Facebook to change user terms, limiting effect of EU priv... by tobltobs on Thursday April 19, 2018 @06:31AM (#16874712)
You might not, but your webserver did. Or did you change the logging configuration of your webserver to not store or obfuscate IPs in the past?
Re:Facebook to change user terms, limiting effect of EU priv... by pbhjpbhj on Thursday April 19, 2018 @07:43AM (#16875010)
This law suggests a shift to assuming no consent for gathering of PII, only gathering data when you have informed consent and a justifiable business need.

In the case of web servers I can't see a problem with not recording IP if you're also gathering PII; or asking for permission in the PII submission; or say dropping the last digits from a dotted-quad as a default.

Re:Facebook to change user terms, limiting effect of EU priv... by detaro on Thursday April 19, 2018 @01:08PM (#16877682)
Consent is only one possible justification for processing, you do not need it for everything. It's more a shift to "processing PII is forbidden unless for one of the following reasons", consent being one of them, and requiring assigning purposes to collected data. You can't just have webserver logs piling up somewhere without reason, but you probably can have a policy like "We keep IP addresses for 48 hours for security purposes", if you have an appropriate security process needing that data.
Re:Facebook to change user terms, limiting effect of EU priv... by NDizzle on Thursday April 19, 2018 @11:26AM (#16876686)
You don't want to log access requests to your web servers based on IP? I disagree with you at pretty much the lowest, most fundamental level.
Re:Facebook to change user terms, limiting effect of EU priv... by s73v3r_ on Thursday April 19, 2018 @01:04PM (#16877636)
If you do, then ask the user.
Re:Facebook to change user terms, limiting effect of EU priv... by morgante on Thursday April 19, 2018 @01:05PM (#16877659)
Explain how you ask the user whether you can get their IP address when any such request requires receiving their IP address.

This is draconian legislation which unnecessarily causes many more problems than it solves.