News for hackers. Stuff that matters.
Re:GDPR penalty for passing on of IP address to Google by us... by Mikeb85 on Sunday January 30, 2022 @07:13AM (#30136447)
So does this mean assets hosted by CDNs are illegal now? Since it doesn't ask the user's permission to direct the browser to another site to download said assets? And what if they're already cached in the browser. Distinction?

Seems like laws don't understand how tech works...

Re:GDPR penalty for passing on of IP address to Google by us... by huijzer on Sunday January 30, 2022 @07:21AM (#30136515)
> And what if they're already cached in the browser.

It is a common misconception that CDN objects are cached. They are not: https://httptoolkit.tech/blog/public-cdn-risks/

Re:GDPR penalty for passing on of IP address to Google by us... by leobg on Sunday January 30, 2022 @07:41AM (#30136656)
Exactly!

You’ll soon have to fill out a form as if undergoing surgery just to visit a website. (And, of course, were all gonna click “Accept all”, just as we do with cookie warnings and Apple TOS.)

These judges do not know what they do. They only care about getting the case off their desk, clinging to the first semi plausible argument that allows them to do so. If you look for vision, guidance or responsibility for shaping the future I which we want to live, look elsewhere.

Re:GDPR penalty for passing on of IP address to Google by us... by goodpoint on Sunday January 30, 2022 @03:26PM (#30140769)
> You’ll soon have to fill out a form as if undergoing surgery just to visit a website

This is entirely a fault of the site owners.

> These judges do not know what they do

They proved again and again that they know what they are doing.

Re:GDPR penalty for passing on of IP address to Google by us... by jeltz on Sunday January 30, 2022 @03:55PM (#30140985)
Yeah, the GDPR has done a lot of good already. The lawmakers clearly knew what they were doing.
Re:GDPR penalty for passing on of IP address to Google by us... by goodpoint on Sunday January 30, 2022 @07:18PM (#30142798)
Unironically yes.
Re:GDPR penalty for passing on of IP address to Google by us... by janoc on Sunday January 30, 2022 @07:28AM (#30136566)
>Seems like laws don't understand how tech works...

That's pretty much the definition of a law. Laws are written for people, by people. Not for computers.

This is sadly an unintended consequence of a very broad interpretation of GDPR, where an IP address is deemed as personally identifiable information.

If someone wanted to take this to absurd levels, similar argument, as has been made by this court, could be used to make the entire Internet illegal under GDPR - sending a packet exposes personal information of the sender to various third parties (routers of various ISPs) that the sender didn't consent to. And given that the recipient (service provider, website, whatever) could have arranged for having the data transferred on a floppy disk or by a pigeon instead ...

It is not only GDPR that suffers from this - e.g. in Austria it is illegal to drive with a dashcam because their court has ruled that a dashcam amounts to recording someone without their consent - and if you do so, it exposes you to a 20k€ fine!