• 0 Posts
  • 58 Comments
Joined 2 年前
cake
Cake day: 2024年3月2日

help-circle
  • DPO here. Under GDPR (the european data privacy regulation), there are a number of “legal basis” definitions for why a company would process your data. The strongest bases are the performance of a contract or a regulatory requirement, and at the other end of the spectrum, a company can process your data if you consent for them to do so.

    There is a “middle” category of legal basis which is “legitimate interest,” which is for companies to process your data because it is their line of business to do so, or it is part of a reasonable business process to do so. Marketing is an example. So if you post on Reddit about a positive experience you have had with a manufacturer of PC component, that manufacturer might scrape your blog post, and add you to their CRM. They might know your email address from your LinkedIn, and they could associate that with your buying activity for example, to put you in a specific category of customer.

    These GDPR popups give you the perception that you can opt out of “legitimate interest” processing, when the reality is that there is no such right afforded to you under GDPR. Therefore the site is either relying on your consent but dressing it up as legitimate interest, or they are just wrong and using the wrong terminology.




  • There’s a carefully designed process that involves sealing the phones in faraday bags so they can’t communicate with the outside worlds, and then replacing/reprogramming certain components so the phone works outside of the Find My ecosystem.

    These phones are reprogrammed and re-chipped en masse and then sent all over the world. See all those “mobile phone repair” shops all over your high street/strip mall? they’re all getting their stock from the same place.

    Apple operating the hardware pairing scheme is just a cat and mouse game with this industry.



  • If only there was some way the government could have predicted this would happen and maybe not rushed a poorly thought out law in the first place!

    maybe then they would not have:

    • forced big tech companies to withdraw service to the uk
    • forced uk-based small forums and message boards to close
    • given free vpn providers tons more data to sell
    • reduced the overall cyber resilience of the country by forcing people to choose between giving photos of their passports to some weird online service or signing up for a free vpn which sells their data, may inject their own unregulated adverts etc
    • reduced uk based advertising effectiveness and thus investment and marketing spend
    • pissed everyone off while doing it, scoring yet another win for the far right

    absolute roasters the lot of them








  • Tor operator here.

    If you don’t have a second IP for your relay, don’t host at home. You will have CAPTCHAs everywhere, many sites will block you and your ISP will eventually contact you to stop degrading their IP space reputation.

    Most website owners don’t discriminate between Tor exits and relays. They subscribe to block-lists that include all known Tor IP addresses. Major online services will make your browsing experience really shitty and once you’re a “known Tor IP” it will take months to remove that reputation.

    You can run a Bridge instead, but you will eventually have the same problem.