News for hackers. Stuff that matters.

A comment on StreetLend.com shuts down, citing GDPR regulations. Parent comment

Re:StreetLend.com shuts down, citing GDPR regulations by closeparen on Sunday April 29, 2018 @09:26PM (#16955060)
>If you're storing usernames, passwords and the like then you have nothing to worry about.

Absolutely false. Anything pertaining to a person in any way is personal data. All default web server installations are GDPR violations, unless nginx grew an "edit the access.log entries pertaining to you" endpoint recently. (Although you can maybe argue "legitimate interest" for web access logging if you invest the time, and implement the right to erasure).

[ Parent | on HN ]
Re:StreetLend.com shuts down, citing GDPR regulations by tscs37 on Monday April 30, 2018 @12:30AM (#16955747)
Webserver logs are totally fine since you need them for information security (ie, finding out who has been spamming your webserver with requests), just use the default NGINX settings, in most distros that means deleting old logs automatically.
[ Parent | on HN ]