GDPR for lazy people: Block all European users with Cloudflare Workers

Re:GDPR for lazy people: Block all European users with Cloud... by closeparen on Saturday May 26, 2018 @05:03AM (#17160998)

Yes, and? No one claims that it is. It is, however, about iterating quickly on networked software in the absence of heavy bureaucratic process. Process that is now necessary to ensure auditable, provable compliance with the letter of the law, even for activities that are already complaint with its spirit. One can argue this is necessary for society, but it's certainly a crackdown on the hacker spirit.

Fun fact: GDPR has not one word to say about advertising in particular. Ad targeting may still be legal in some cases! Meanwhile all networked software is illegal by default unless its operator can prove that it stays within the defined GDPR exceptions.

[ Parent | on HN ]

Re:GDPR for lazy people: Block all European users with Cloud... by sequoia on Sunday May 27, 2018 @05:03PM (#17169095)

I don't agree that keeping track of data processing operations, where you store data, creating an ability to delete user data and basic security hygiene is onerously burdensome on projects where you know about these requirements ahead of time. Yes it absolutely is a major pain in the butt for existing projects but that's a different argument and not a good reason not to improve consumer protections.

> Meanwhile all networked software is illegal by default unless its operator can prove that it stays within the defined GDPR exceptions.

This doesn't make sense to me. Can you please instruct me how I would go about suing the curl project? Please help me understand how this networked software is "illegal by default." I actually don't understand precisely what you mean by "networked software" so perhaps my misunderstanding lies there.

Overall I find statements like this "all networked software is illegal" to be FUD hogwash. It's just the same as when environmental regulations are going to "destroy the energy industry" and labor regulations are going to "destroy the service industry" etc.. Industry (represented here by tech entrepreneurs) is doing their typical disingenuous wringing of hands they always do when consumer/worker/environmental protections are brought forth.

Let's get rid of the GDPR, the EPA and the Paris climate accords while we're at it.

[ Parent | on HN ]

Re:GDPR for lazy people: Block all European users with Cloud... by closeparen on Sunday May 27, 2018 @05:59PM (#17169322)

>suing the curl project

Any server you curl is processing your personal data by addressing the HTTP response to your IP address. Curl itself arguably fails "privacy by design" test in that there is no Tor, etc. enabled by default, although I admit that's a stretch. The entire HTTP protocol design of obtaining documents by interacting directly with their publishers is similarly careless from a privacy perspective.

>"all networked software is illegal"

It's not always illegal. It's illegal by default, and up to you to demonstrate that it falls within one of the defined exceptions.

>"destroy the energy industry"

I'm quite happy that only serious and well-capitalized entities can surmount the regulatory hurdles to running a smoke-billowing power plant. I'm not happy that we're doing the same things to websites.

[ Parent | on HN ]

Re:GDPR for lazy people: Block all European users with Cloud... by cbfoo on Saturday May 26, 2018 @07:21AM (#17161436)

Not about creating broken networking software or broken software in general.

Have you been in Usenet in a networking group around 2000. Good luck with these fake opinions.

Just because some startup incubator is great at grabbing words from the hacker culture ("ycombinator", "hacker" "news"), does not mean they get to redefine the meaning.

They are just greedy, greedy for money and words they can appropriate.

[ Parent | on HN ]