News for hackers. Stuff that matters.
Re:Meta fined $102M for storing passwords in plain text by JCharante on Saturday September 28, 2024 @06:52AM (#41679395)
it's GDPR from the subheader

> The Irish Data Protection Commission found that the company violated several GDPR rules.

this is why lots of websites block the EU from accessing. You basically need to consult with lawyers to make sure you're not accidentally breaking the law when writing a codebase.

Re:Meta fined $102M for storing passwords in plain text by maeil on Saturday September 28, 2024 @07:40AM (#41679593)
I see this comment pop up here often in these threads about EU fines and regulations. "Apple/company should just call the EUs bluff and stop selling in the EU!".

Apple's a good example because they're such an incredibly global brand, who should be less reliant on EU customers. Yet Europe is responsible for >20% of their revenue. Shareholders would eat you alive for just "nope"ing away from that.

Yes, US GDP/capita is far above the EU average, but the EU still represents 450 million, on average fairly wealthy people. So companies simply play ball. And that excludes the UK, whose data protection laws are similarly strict.

Re:Meta fined $102M for storing passwords in plain text by JCharante on Saturday September 28, 2024 @07:45AM (#41679619)
20% of revenue isn't that much. Would you rather focus on your core product and double your revenue, or focus on getting that 20%? Yes giant companies have the resources and experience less YoY growth so they will work with the EU market, but most companies would do better to ignore the EU.
Re:Meta fined $102M for storing passwords in plain text by philistine on Saturday September 28, 2024 @08:57AM (#41679956)
Explain to me how not selling in the EU could double a company's revenue? How removing yourself from your third largest market would enlarge the others? How millions of people in the US don't buy an iPhone because you can buy iPhones in Germany?
Re:Meta fined $102M for storing passwords in plain text by nolok on Saturday September 28, 2024 @02:03PM (#41681902)
> 20% of revenue isn't that much

It is in reality gigantic, especially at that scale. And in this specific example, Apple net profit is 24% of their revenue.

> Would you rather focus on your core product and double your revenue

Saying you no longer sell to people with blue eyes or wearing short is not in any way increasing your sales to other people.

I'm sorry to you your messages sound like you're not very knowledge about the subject matter.

Re:Meta fined $102M for storing passwords in plain text by Eddy_Viscosity2 on Saturday September 28, 2024 @08:54AM (#41679936)
Noping out of europe would create a vacuum that would be filled by a competitor who would fully comply with the consumer protecting EU rules. Rules that many consumers in other nations would love to have themselves but don't because of regulatory capture and regular corruption. Those consumer friendly products would become popular outside of Europe. Big-US-monopoly-company would lose dominance. They would either have to change to be more consumer friendly or eat the loss of market share.
Re:Meta fined $102M for storing passwords in plain text by gm3dmo on Sunday October 06, 2024 @05:40PM (#41760559)
The company with a board of directors responsible to shareholders noping out of anywhere isn't a choice.
Re:Meta fined $102M for storing passwords in plain text by gm3dmo on Sunday October 06, 2024 @05:39PM (#41760553)
see Apple's 14 billion tax troubles in Ireland. For years these companies have been using the European operations as part of the tax avoidance schemes.

Don't mess with the Flemish has been good advice for 600 of the last thousand years.

Re:Meta fined $102M for storing passwords in plain text by omnimus on Saturday September 28, 2024 @07:00AM (#41679420)
“lots” not really as most companies want accesss to european market.

Also no you dont need to consult lawyers when writing code. You just dont track and save data and do questionable stuff with it. Saving passwords in logs is surely security issue first before its GDPR issue.

Re:Meta fined $102M for storing passwords in plain text by JCharante on Saturday September 28, 2024 @07:11AM (#41679474)
> “lots” not really as most companies want accesss to european market.

Plenty of foreign newspapers block the EU from accessing their sites. The EU is not that a big market.

Re:Meta fined $102M for storing passwords in plain text by mdhb on Saturday September 28, 2024 @07:21AM (#41679521)
Re:Meta fined $102M for storing passwords in plain text by JCharante on Saturday September 28, 2024 @07:42AM (#41679600)
How so? Your source shows that Asia + North America make up like 67% of global GPD.
Re:Meta fined $102M for storing passwords in plain text by mdhb on Saturday September 28, 2024 @01:51PM (#41681806)
The $18349 Billion GDP. What did you think I was referring to? Were you trying to be daft?
Re:Meta fined $102M for storing passwords in plain text by JCharante on Sunday September 29, 2024 @12:33AM (#41684935)
I said the EU is not that big of a market. It’s less than 1/3 of the global GDP. We seem to have different definitions of a big market.
Re:Meta fined $102M for storing passwords in plain text by mdhb on Sunday September 29, 2024 @02:09AM (#41685269)
Clearly but whatever definition you have that doesn’t include $18349 Billion is ridiculous
Re:Meta fined $102M for storing passwords in plain text by JCharante on Saturday September 28, 2024 @07:10AM (#41679465)
yes it's a security issue but you wouldn't "expect" to get fined millions of dollars.

Do I think we should punish companies for storing passwords in plaintext? Yes. Would I expect that a bug and devs untrained in GDPR best practices could lead to fines? No.

Usually in software engineering you don't get your company fined for making terrible mistakes unless you're in a field like finance. This was just passwords which most sites have, not something like PCI DSS stuff

Re:Meta fined $102M for storing passwords in plain text by nolok on Saturday September 28, 2024 @02:00PM (#41681882)
> yes it's a security issue but you wouldn't "expect" to get fined millions of dollars.

Which is exactly why companies don't care, which is why this regulation was made and those fines decided.

> Usually in software engineering you don't get your company fined for making terrible mistakes unless you're in a field like finance.

You're not fined for a mistake, you're fined for a mistake AND that mistake huer the customer more than you AND you don't disclose it swiflty to him.

Re:Meta fined $102M for storing passwords in plain text by gm3dmo on Sunday October 06, 2024 @05:34PM (#41760525)
>yes it's a security issue but you wouldn't "expect" to get fined millions of dollars.

The penalties are based on percentage of turnover.

Re:Meta fined $102M for storing passwords in plain text by mdhb on Saturday September 28, 2024 @07:19AM (#41679515)
I probably encounter this like 5 times a year, your statement is wrong.