News for hackers. Stuff that matters.

L0stRegulator

Re:As TikTok grows, so does suspicion on Sunday July 10, 2022 @10:01PM (#32051358)
Under the US CLOUD Act, three letter agencies can compel Facebook to produce user data wherever in the world it is.

When any other country has a law like that, they are obviously the bad guys.

TikTok doesn't operate in China. All TikTok data is stored either in the USA or Singapore. There's a Dublin data center underway.

Douyin is the original TikTok. It operates exclusively in China and all it's data is in China.

Let's not forget a lot of the smear campaigns against TikTok were secretly funded by Facebook/Meta https://www.engadget.com/meta-targeted-victory-tiktok-smear-...
The Biometrics was collected for face overlays.

Want to look like a lion? They scan your face, use their algorithm to stretch the lion face on you, and because you're moving, it's a compute intense thing so done more in the cloud than on-device.

But as it's off device biometrics, it falls into the Illinois BIPA category (only focused biometrics law in the USA) so they collect consent up front.

Let's not forget OFAC lists, anti money laundering laws and FATCA requirements. These are driven primarily from the USA but the penalties are felt globally. Your employer likely has to get all your details to ensure you can get legally paid, otherwise they may be severely penalized.
Re:US set for recession next year, economists predict on Wednesday June 15, 2022 @01:10AM (#31749338)
Non-paywall version of article:

https://archive.ph/AyvrU

ByteDance, Alphabet, Netflix, Amazon, Meta, Microsoft, Apple

BANAMMA or NABAMMA

Re:3 years of GDPR: The biggest fines so far on Monday May 24, 2021 @10:26PM (#27272014)
That's being encouraged by California law: either honor DNT or come up with something else: https://www.dwt.com/blogs/privacy--security-law-blog/2020/07...
Re:3 years of GDPR: The biggest fines so far on Monday May 24, 2021 @10:20PM (#27271984)
Yes, if the organizations are targeting consumers in the EEA (EU + a few extra countries). It's part of the reason why these companies are required to have an Article 27 EU Rep resident in the EU: to interact with regulators.
Re:Discussion: GCP, AWS and Azure on Tuesday December 15, 2020 @10:27AM (#25431125)
The three have a lot in common, with key differentiators e.g. the backbone connectivity of GCP is far different than that of AWS.

What worked for me is that I went deep into one of them, then uses this resource to 'map' what I learned on GCP to AWS: https://cloud.google.com/docs/compare/aws (use the table mid way down the article), and this gave me a great framework on which to build my AWS knowledge.

A similar table exists for Azure (https://cloud.google.com/docs/compare/azure)

To ‘protect it from rain and road debris’ of course /s
Or let it ‘drop off’ on an area of private property with a video camera on it. See who comes looking for it.
So the obvious question then is should we be allowed place trackers in police cars, so we can track them on Waze (for example), and it would be a crime for them to remove it.

Equivalencies of Powers/Rights is a good thought experiment that would keep the powers of the enforcers from multiplying without limits.

There are a lot of derogations in GDPR. These could easily cover the current case in point (and the sharing of data with the UK NHS etc)

"The GDPR provides several exemptions and derogations for the use of health data, e.g. in the context of research or public health purposes under certain conditions. Typical procedures in this context include the application of ethical standards for scientific research as mentioned in Recital 33 and the implementation of organisational and technical safeguards as mentioned in Article 89 including anonymisation, pseudonymisation and encryption [2]. Pseudonymisation is generally recommended as long as the research purposes can be fulfilled in this manner. With the condition of such safeguards, the GDPR creates exemptions for researchers to process sensitive health data even beyond the purposes for which they were collected. "

from https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5438318/

They are different but well related 'laws'.

The 'Cookie Law' is the 2011 ePrivacy Directive. it will be replaced by the ePrivacy Regulation (eventually). https://www.cookielaw.org/the-cookie-law/

The modern privacy law is GDPR, which came in in 2018. Pre-dating that were the somewhat country-specific interpretations of the 1995 Data Protection Directive.

Agreed. Seems like an ad-hominem.

There is often a huge lag between funding, submission for publication and final publication. His interpretation of the rules would be widely agreed upon as reasonable.

In most EU countries: Yes. They are elected members of the Parliament who are assigned a portfolio by the prime minister. To be clear: someone elected them, in the example of Ireland a jurisdiction like Kerry would elect a number of parliament members and the prime minister could select any elected members from their party to form the cabinet.
Re:UK Government to Ask Queen to Suspend Parliament on Wednesday August 28, 2019 @08:50PM (#20825634)
The issue is that if it was written down it would be well defined. There would be legal cases for clarification rather than loosely defined precedents. It's too fluffy and malleable, which can work well in good times, and very badly under oppressive regimes.
Re:UK Government to Ask Queen to Suspend Parliament on Wednesday August 28, 2019 @06:43AM (#20818479)
This is where a written constitution is super important. The UK (or England & Wales to be specific) doesn't have one, and relies on 'constitutional conventions' (which needless to say shift in interpretation by whoever is in government).

The lack of a written constitution has allowed certain things like the UK equivalent of the 5th Amendment (invoking the right of silence when questioned in a criminal proceeding does not invoke an appearance of guilt that can be told to the jury) disappear under Tony Blair.