News for hackers. Stuff that matters.
Re:GDPR for lazy people: Block all European users with Cloud... by _o_ on Saturday May 26, 2018 @02:29AM (#17160544)
May I ask what is not clear to you? I can try to help. As I can see it, it very simple, it is same thing as with borrowing someones car:

- personal data (car) are any data that have potential identifying a person

- person owns its data (car). You cant buy them (well this part is different than the car), you cant steal them, you cant sell them, but you can borrow them from. But for that you need to ask (consent), where it is not allowed to trick the owner to give them to you, whithout beeing fully aware what was borrowed and why. And if you are borrowing the data for someone else, you need to ask about that too. And tell when you will return it.

- it is immature and unfair to play grumpy if someone doesn't want to allow to use its data. Or try to force/blackmail them from him. So its not allowed to do that (noyb.eu)

- once you borrow the data (like property, envision a car), behave acordingly, owner can demand them back, demand to see them, demand to know what you are doing with them and if stolen it is completely normal to tell them about that. And if they were stolen due to your fault (leaving keys in a car), they might demand to be compensated. Same goes if you misuse them (let me put some fertiliziers on back seat, forget to return them, giving it to all your friends without asking,...)

- if the data owner asks you to do something that requires his data ("hey, can you please take my car and bring me icecream from the store") you don't need to ask for data, it is expected you can have them.

Did I forget something? I consider it simple, as long as you try to stay genuinly respecting to other persons ownership. Just think about borrowing your car or borrowing car from your best friend and you wont go far wrong.

Re:GDPR for lazy people: Block all European users with Cloud... by mirko22 on Saturday May 26, 2018 @04:04AM (#17160787)
things as opposed to knowledge are fundamentally different things.

if yoi tell me your birthday how can i forget it?

if you borrow me a car i have something i can return...

Re:GDPR for lazy people: Block all European users with Cloud... by wlll on Saturday May 26, 2018 @07:39AM (#17161508)
> if yoi tell me your birthday how can i forget it?

That's not really relevant. GDPR doesn't ask people to forget things out of their minds.

So let's rephrase to a more relevant example:

> if yoi provide me your birthday on a web form and I put it in a database how can i forget it?

This now becomes relevant, and easy do answer. You delete it.

Re:GDPR for lazy people: Block all European users with Cloud... by coldtea on Saturday May 26, 2018 @05:27AM (#17161095)
>if yoi tell me your birthday how can i forget it?

Ask any husband.

Joking aside, if the memory is on a computer system, as opposed to a person, you can, you know, just delete it.

Re:GDPR for lazy people: Block all European users with Cloud... by erichocean on Saturday May 26, 2018 @06:41AM (#17161328)
Out of curiosity, could I legitimately ask Google, GitHub, etc. under the GDPR to delete my name in the AUTHORS file of the git commit it was added in when I contributed to Chrome's v8 engine 10 years ago? Would they have to comply if I did?

Obviously, removing the commit would break git's ability to sign any hashes for that repository after that point…

And thinking it through a bit more, what about the companies that use v8? Could I ask my regulator to get Joyent to remove it from their systems? I'm sure they have copies…

Re:GDPR for lazy people: Block all European users with Cloud... by brohee on Saturday May 26, 2018 @07:51AM (#17161549)
You could ask, but them not complying fall neatly in the legitimate need case...
Re:GDPR for lazy people: Block all European users with Cloud... by fiter on Saturday May 26, 2018 @12:00PM (#17162718)
Ah, this is so interesting! It seems like you're allowed or not allowed to keep data based on the data structure that you use to store it!
Re:GDPR for lazy people: Block all European users with Cloud... by Dylan16807 on Saturday May 26, 2018 @09:35PM (#17165056)
Data structure has nothing to do with it. If you stored social media users as fake AUTHORS lines in a git repo, that still wouldn't make you allowed to keep it. In the inverse situation, storing git authorship in the comments table of your photo site's database, you would be allowed to keep it for legal uses.
Re:GDPR for lazy people: Block all European users with Cloud... by fiter on Tuesday May 29, 2018 @12:26PM (#17180606)
I interpreted the original posters point that the git repository could not be modified without destroying it. I thought that's how the next poster was responding to it. If you cannot modify an old entry without destroying the integrity of your system, are you required to modify? Either the answer is yes and you effectively cannot use certain data structures (with their integrity) or the answer is no and certain data structures allow you to keep data.
Re:GDPR for lazy people: Block all European users with Cloud... by Dylan16807 on Tuesday May 29, 2018 @01:04PM (#17180995)
You would want to avoid using a git-like data structure for data you have to delete. But the example was data that's part of making the copyright license function, and you can keep it for legal purposes.
Re:GDPR for lazy people: Block all European users with Cloud... by erichocean on Thursday May 31, 2018 @02:51PM (#17198977)
> But the example was data that's part of making the copyright license function

You entirely missed the point of my hypothetical, which was about immutable data structures like git employs.

As it turns out, our business also uses a git-like hash-chained commit log for our normal database. Deleting old entries would thus violate the integrity of our database. Is that now illegal under the GDPR?

Re:GDPR for lazy people: Block all European users with Cloud... by coldtea on Saturday May 26, 2018 @12:10PM (#17162774)
When, it's about being able to judge things on their specific merits -- as opposed to having some blanket one size fits all rule.

Law has nuance and cases (and corner cases), it's not some strict predicate.

Re:GDPR for lazy people: Block all European users with Cloud... by fiter on Tuesday May 29, 2018 @12:29PM (#17180638)
I agree and understand, but it does give us a likely unintended consequence: no sequential hashed data structures when you are required to be able to modify it. Probably a good thing for hearing less about blockchains!
Re:GDPR for lazy people: Block all European users with Cloud... by geocar on Sunday May 27, 2018 @09:49AM (#17166870)
No. They're required to know who the authors are for legal reasons.