| 00:01.51 | *** join/#wowuidev TentacledOne (~tentacle@87-205-240-1.adsl.inetia.pl) |
| 00:11.17 | foxlit | if your gpu is potato-based, it might be incapable of running a 3D rendering at the same resolution as the desktop? |
| 00:13.03 | nevcairiel | it auto-detected the extreme profile, but it cant auto-detect the resolution? |
| 00:20.30 | *** join/#wowuidev purl (ibot@rikers.org) |
| 00:20.30 | *** topic/#wowuidev is 7.3.x ToC: 70300 || http://pastebin.com || Battletags: http://goo.gl/2bm7n || This channel is logged, via purl |
| 00:22.13 | foxlit | this keyboard has ƪ(Ëâ£Ë)Ê but not the shrug :/ |
| 01:03.23 | *** join/#wowuidev modernist (~mke@2a00:23c5:3481:ed00:589a:b865:470c:4521) |
| 03:01.20 | *** join/#wowuidev schnoggo (~lonkoenig@c-73-37-220-196.hsd1.mn.comcast.net) |
| 03:05.33 | *** join/#wowuidev nimhfree (~scott@65-183-140-233-dhcp.burlingtontelecom.net) |
| 03:34.23 | *** join/#wowuidev ShadniX_ (dagger@p4FF9F29D.dip0.t-ipconnect.de) |
| 04:40.13 | leothar | foxlit: yeah, I couldn't figure out how to make it work with spells. on the plus side M6 works |
| 04:52.56 | *** join/#wowuidev bluspacecow (~bluspacec@121.99.98.200) |
| 04:52.56 | *** mode/#wowuidev [+v bluspacecow] by ChanServ |
| 04:53.30 | *** join/#wowuidev Andols2 (~yaaic@m83-185-240-118.cust.tele2.se) |
| 06:24.32 | *** join/#wowuidev modernist (~mke@host217-42-195-236.range217-42.btcentralplus.com) |
| 06:51.55 | *** join/#wowuidev A-KO|pc (~sa@2605:a601:b024:f800:f938:8ae:4b6e:b611) |
| 06:52.13 | *** join/#wowuidev VIad (~Vlad@cm-84.213.146.58.getinternet.no) |
| 07:47.01 | *** join/#wowuidev TentacledOne (~tentacle@2a00:f41:1c3a:5630:0:52:44bb:1d01) |
| 08:38.17 | *** join/#wowuidev bluspacecow (~bluspacec@121.99.98.200) |
| 08:38.17 | *** mode/#wowuidev [+v bluspacecow] by ChanServ |
| 08:45.20 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 09:15.43 | *** join/#wowuidev Gnarfoz (~smallbrai@WoWUIDev/WowAce/Gnarfoz) |
| 09:16.10 | *** join/#wowuidev ThiefMaster (thief@indico/developer/thiefmaster) |
| 09:17.57 | *** join/#wowuidev eir (eir@freenode/utility-bot/eir) |
| 09:19.33 | *** join/#wowuidev stolenlegacy (~stolenleg@unaffiliated/stolenlegacy) |
| 09:25.35 | *** join/#wowuidev Shooter (~osmc@cis158.neoplus.adsl.tpnet.pl) |
| 09:27.25 | *** join/#wowuidev Kalroth (~Kalroth@kraut.knas.io) |
| 09:30.25 | *** join/#wowuidev Valhorth (~space@athena.framed.be) |
| 09:34.57 | *** join/#wowuidev eir (eir@freenode/utility-bot/eir) |
| 09:39.52 | bluspacecow | heh |
| 09:39.55 | bluspacecow | http://eu.blizzard.com/en-gb/company/legal/eula.html |
| 09:40.06 | bluspacecow | still not updated for GPDR I see .... or is it ? |
| 09:40.11 | bluspacecow | *shifty eyes* |
| 09:40.39 | AcidWeb | You expect what we will read it to check that? ð |
| 09:40.45 | bluspacecow | naw |
| 09:40.58 | bluspacecow | just do a find on "General Data Protection" or GPDR :P |
| 09:54.36 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 10:20.21 | *** join/#wowuidev nevcairiel (nev@WoWUIDev/WoWAce/Ace3/nevcairiel) |
| 10:31.37 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 11:09.59 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 11:18.23 | *** join/#wowuidev Tercioo (~Tercioo@185.153.176.5) |
| 11:19.19 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 11:24.02 | *** join/#wowuidev Tercio2 (~Tercioo@185.153.176.2) |
| 11:42.22 | leothar | GDPR is a plague |
| 11:42.35 | leothar | never had so many emails about anything else in my life |
| 11:43.06 | Kalroth | good thing* |
| 11:43.20 | Fisker | ^^ |
| 11:43.34 | Fisker | I got one from a swedish insurance company |
| 11:43.46 | leothar | arguable, it replaced some local swedish laws that were in some cases much better |
| 11:46.10 | Fisker | That's not how it works though |
| 11:46.46 | Kalroth | swedish laws are still in effect |
| 11:47.09 | Kalroth | it doesn't replace existing laws, it expands on them (in most cases) |
| 11:47.27 | Fisker | Likely they changed the laws, but that just means they changed them, not GDPR did |
| 11:53.41 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 11:57.25 | *** join/#wowuidev bluspacecow (~bluspacec@121.99.98.200) |
| 11:57.25 | *** mode/#wowuidev [+v bluspacecow] by ChanServ |
| 11:57.58 | *** join/#wowuidev jinxybob (~jinxybob@host86-175-116-179.range86-175.btcentralplus.com) |
| 12:09.21 | nevcairiel | i just disabled and deleted all web server logs, who needs logging anyway |
| 12:11.20 | *** join/#wowuidev TentacledOne (~tentacle@2a00:f41:1c3a:5630:0:52:44bb:1d01) |
| 12:20.39 | Kalroth | logs are for lumberjacks |
| 12:20.43 | *** join/#wowuidev TentacledOne (~tentacle@2a00:f41:1c3a:5630:0:52:44bb:1d01) |
| 12:49.32 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 13:03.10 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 13:23.20 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 13:32.45 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 13:37.08 | *** join/#wowuidev schnoggo (~lonkoenig@c-73-37-220-196.hsd1.mn.comcast.net) |
| 13:54.47 | *** join/#wowuidev chaud__ (~chaud@71.11.51.139) |
| 14:08.02 | *** join/#wowuidev karl_w_w (~karl_w_w@110-175-132-56.tpgi.com.au) |
| 14:12.35 | Andols2 | GDPR is replacing PUL (Person uppgifts lagen, personal information law) |
| 14:13.03 | Andols2 | At least that is what I have been told by ppl that should know :P |
| 14:13.31 | Maldivia | GDPR is good -- sure, everyone is updating their ToS right now to try to comply (and still fail at it), but overall, good :D |
| 14:13.54 | Andols2 | I agree |
| 14:14.56 | *** join/#wowuidev bluspacecow (~bluspacec@121.99.98.200) |
| 14:14.56 | *** mode/#wowuidev [+v bluspacecow] by ChanServ |
| 14:15.09 | Thunder_Child | I wonder if there are any companies that don't need to update/change a single thing because they had already covered all the bases. |
| 14:15.26 | nevcairiel | software really needs to catch up though, so things like web servers get built-in mechanisms to anonimize ip addresses for logs etc so this is less of a pain |
| 14:15.49 | Maldivia | Thunder_Child: sure, many companies |
| 14:17.00 | nevcairiel | I seriously doubt that many companies were 100% compliant unless national laws forced them to be before this already |
| 14:17.22 | Maldivia | all depends what kind of company, and what kind of information they were collecting |
| 14:20.15 | nevcairiel | more interesting will be all those oblivious or naive american companies that are just going to ignore it |
| 14:20.37 | nevcairiel | i wonder on what legal grounds the EU wants to fine a foreign company tho |
| 14:20.51 | Thunder_Child | If they don't have infrastructure in the EU, I don't think they need to. |
| 14:21.01 | nevcairiel | Technically, they do. |
| 14:21.19 | nevcairiel | If they interact with citizens of the EU in any way, they need to respect their data privacy rights |
| 14:21.32 | nevcairiel | which is why some US websites just block out EU people now |
| 14:22.34 | Thunder_Child | Not that I disagree with the protection of peoples information, but that does seem slightly arrogant. |
| 14:24.27 | nevcairiel | There is some limitations, its not like that just because you run a website in the US you are liable or something, but if you have say an online shop with international shipping, you are. |
| 14:26.34 | nevcairiel | Basically, if you target EU people in any shape or form, even if you're entirely based in the US, you need to know about this |
| 14:27.27 | Thunder_Child | I feel like the "target" bit is somewhat nebulous. |
| 14:31.48 | nevcairiel | Probably some clear definitions somewhere |
| 14:31.53 | nevcairiel | well, law-clear, so probably not very |
| 14:34.02 | bluspacecow | oh that's right |
| 14:34.29 | bluspacecow | GDPR was meant to be enforcable around may 25th. Think we'll see some EULA updates from Blizzard ? |
| 14:35.50 | nevcairiel | those define what you can do, not what they do with your data =p |
| 14:38.16 | nevcairiel | the privacy policy they have up on their website already seems to cover most of the things tho |
| 14:38.43 | nevcairiel | was updated in april, apparently |
| 14:38.46 | nevcairiel | so may be new |
| 14:39.08 | nevcairiel | http://eu.blizzard.com/en-gb/company/about/privacy.html i wonder if it differs to the US version |
| 14:39.49 | nevcairiel | i cant actually open the US privacy policy, it always redirects me here :D |
| 14:39.58 | bluspacecow | http://us.blizzard.com/en-us/company/about/privacy.html |
| 14:40.53 | nevcairiel | heh all the explicit options about getting a report of what data they collected and explicitly deleting all my data are missing in the US version |
| 14:41.13 | bluspacecow | main diff being us falls under the Entertainment Software Rating Boardâs Privacy Certified Program |
| 14:42.48 | bluspacecow | And now for something completely different |
| 14:42.49 | bluspacecow | http://www.kansas.com/news/local/crime/article211760059.html |
| 14:43.51 | nevcairiel | not that i would condone swatting in any way, but the police really likes to shoot people, dont they? |
| 14:44.07 | bluspacecow | shooty shooty bang bang! |
| 14:44.46 | nevcairiel | its like all the problems can be solved by making holes into them |
| 14:51.41 | *** join/#wowuidev Lejving (~Lejving@81-233-148-192-no524.tbcn.telia.com) |
| 15:08.29 | *** join/#wowuidev Ermad (~Ermad@pool-96-246-137-114.nycmny.fios.verizon.net) |
| 15:10.49 | Iriel | Thunder_Child: I would agree that "target" is nebulous, the interpretation seems to be "If you are in any way likely to have interactions from an EU citizen whether you asked for them or not", thus the defens being a good-faith effort to prevent said citizens from accessing the service at all. |
| 15:11.30 | Iriel | I'll note that 'interactions' do require the exchange of some level of PII (though I think email alone counts) |
| 15:12.39 | Iriel | I would expect if you ran a website that just had read only content or stateless interactions you'd not really have to be concerned. (IANAL, especially not in international privacy and data protection) |
| 15:18.37 | *** join/#wowuidev g0urra (~g0urra@unaffiliated/gourra) |
| 15:21.43 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 15:22.11 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 15:24.38 | *** join/#wowuidev Tercioo (~Tercioo@185.153.176.2) |
| 15:32.18 | Thunder_Child | Iriel: I'm not a fan of that. It's loosely similar to going outside of the EU then expecting to interact using the same rules. |
| 15:32.44 | nimhfree | The issue with companies outside of the ð¶ is for them to apply the rules of GDPR if they differ from the rules they currently use, is they need to identify the person as an ð¶ citizen, which requires discolure on the part of the person. |
| 15:32.53 | Thunder_Child | I wonder if you can have a banner like people do now for cookies that says something along the lines of "This side does not follow the GDPR rules." |
| 15:33.36 | Thunder_Child | s/people/sites/ |
| 15:43.53 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 15:52.13 | *** join/#wowuidev Andols (~yaaic@78-70-44-4-no170.tbcn.telia.com) |
| 15:53.22 | foxlit | Thunder_Child: no |
| 15:57.58 | foxlit | by which I mean it'd be about as useful as wearing a "I dump chemical waste wherever I please" t-shirt |
| 15:58.40 | *** join/#wowuidev harl (harl@unaffiliated/harl) |
| 16:00.13 | nevcairiel | (in the same vein, its also not acceptable to have a mandatory button that says "I agree that this website violates those regulations", because that case is intentionally made illegal :p) |
| 16:00.46 | nevcairiel | ie. you cannot make your users opt-out of their privacy |
| 16:04.26 | Thunder_Child | Isn't that how the cookie rule works? |
| 16:04.42 | Thunder_Child | Which is also privacy related. |
| 16:09.49 | *** join/#wowuidev Andols2 (~yaaic@m83-185-240-118.cust.tele2.se) |
| 16:14.03 | nevcairiel | The cookie rule requires you to accept it or leave, that is no longer allowed with GDPR |
| 16:14.44 | foxlit | requires is a bit strong |
| 16:16.12 | nevcairiel | It's not like it allows for a I don't want cookies option, other then closing your browser |
| 16:16.55 | foxlit | that's just shitty implementations |
| 16:18.03 | foxlit | (and some cookie-era implementations allow you to opt out of indibidual cookie types) |
| 16:18.36 | nevcairiel | But totally within their rights, and the point being that this is not allowed with GDPR, you cannot ask people to give up privacy or leave |
| 16:21.22 | Thunder_Child | It will be interesting to see how enforceable it will be outside of the EU. |
| 16:23.20 | *** join/#wowuidev modernist (~mke@194.75.75.170) |
| 16:23.26 | nevcairiel | If you want to do business with eu people, there are always avenues to get to you |
| 16:24.29 | Thunder_Child | Other than the local courts I'm guessing it would be blocking site access from EU. |
| 16:26.11 | Thunder_Child | I also wonder how VPN's will play into this as well, since geoip is one of the avenues of identification . |
| 16:27.57 | foxlit | nevcairiel: But totally within their rights, and the point being that this is not allowed with GDPR, you cannot ask people to give up privacy or leave << it feels a bit like having to rewrite the "no murder" law to include "and no, you cannot get people to allow you to murder them by visiting your place of bussiness" |
| 16:30.05 | nevcairiel | Well self regulation didn't work, so now it's being forced |
| 16:32.18 | nevcairiel | And if you consider "allowing someone to murder you" as assisted suicide, that's actually quite a controversial topic :p |
| 16:33.35 | foxlit | the exact choice of crime isn't really the point of the metaphor |
| 16:34.48 | nevcairiel | Well but there are a bunch of crimes that when allowed are just no crimes anymore. Allowed theft is just gift giving! |
| 16:37.17 | nevcairiel | Anyhow shit didn't work before, so now they are being forced to comply |
| 16:37.36 | foxlit | which is really the second attempt at that |
| 17:07.22 | *** join/#wowuidev Funkeh` (~Funkeh`@WoWUIDev/WoWAce/Ace3/BigWigs/funkeh) |
| 17:34.21 | *** join/#wowuidev modernist (~mke@host217-42-195-236.range217-42.btcentralplus.com) |
| 17:50.01 | VIad | daily heroic :D https://media.discordapp.net/attachments/204269659459944448/449251309871169549/unknown.png |
| 17:51.30 | nimhfree | basically anyone using a non-ð¶ site is going to need to specify whether they are an ð¶ citizen for those sites that do not comply with GDPR. At that point, if the citizen is ð¶ and the site does not comply the citizen will have to be informed of the situation and either accept the limitation (if that is even allowed), or leave the site. if accepting the limitation is not permitted, the site may not be able to serve the |
| 17:51.31 | nimhfree | citizen until the site is in compliance with GDPR. but a site is not going to be able to shut down based on IP address because that is not a good way of identifying an ð¶ citizen. |
| 17:52.12 | Funkeh` | hahaha |
| 17:52.17 | Funkeh` | all of a sudden IPs dont matter |
| 17:52.35 | Funkeh` | they seem to matter just fine when it comes to blocking them |
| 17:53.41 | Maldivia | site are free to ignore the GDPR though, they can just get warned and fined for it :D |
| 17:56.43 | foxlit | nimhfree: that's a euro-bill you're injecting into sentences. |
| 17:57.50 | *** join/#wowuidev Andols (~yaaic@78-70-44-4-no170.tbcn.telia.com) |
| 17:59.30 | Simca | there's also a bit of a grey area about what constitutes 'your data'. i doubt your wow account is considered 'your data' since the EULA states that blizzard owns all of that data and that it was never the user's data. |
| 17:59.47 | Simca | but things about your battle.net account probably are your data, like address and stuff |
| 18:00.23 | foxlit | Access logs for your wow account, though. |
| 18:00.54 | Simca | yeah that's probably true |
| 18:01.01 | foxlit | session origin, duration, etc. |
| 18:01.14 | Maldivia | foxlit: they are free to collect that info |
| 18:02.55 | foxlit | The question is what else can they do with that info besides collect it. |
| 18:03.12 | Maldivia | if it's anonymized, any damn thing they want |
| 18:03.57 | foxlit | and if it's not? |
| 18:04.13 | Thunder_Child | Whatever you let them do with it. |
| 18:04.31 | Maldivia | it's not PII data, so still anything they want... |
| 18:05.12 | foxlit | it's clearly personal data by the virtue of being connectable to the owner of the account it concerns. |
| 18:05.27 | Maldivia | PII != personal data |
| 18:05.45 | foxlit | and gdpr applies to the processing of personal data. |
| 18:05.46 | Maldivia | the question is, can you uniquely identify the actual person using that data or not |
| 18:07.23 | *** join/#wowuidev Andols (~Andols@78-70-44-4-no170.tbcn.telia.com) |
| 18:07.51 | foxlit | It's rather obvious that they keep login logs, and that those logs are tied to accounts, and that accounts have your name on them. |
| 18:08.22 | foxlit | It's straightforward to go from there to "Maldivia plays wow every day for 4-6 hours, and for 16 hours straight on Sundays" |
| 18:08.31 | Maldivia | well, you log in using your email ... email = PII |
| 18:09.27 | Maldivia | but if they separate the two, so teh login details cannot be linked back to the account, then it's no longer personal data |
| 18:09.57 | Maldivia | it's only personal data when it can be linked to an identified/identifiable person |
| 18:09.57 | foxlit | login logs which do not tell you which account they belong to are useless. |
| 18:11.20 | Maldivia | yep |
| 18:11.58 | Andols | As i understand things, as long as you are a customer and they have the need for data they can collect and use date as long as you agree to it, but when you are not a customer anymore they have to remove everything that can link you and the data together |
| 18:13.48 | foxlit | Sure, but you have a bunch of other rights in addition to being able to restrict unnecessary data collection |
| 18:14.42 | foxlit | You could, for example, ask a company to give you a copy of all the personal data they hold that relates to you. |
| 18:16.04 | Maldivia | yeah, and ask them to delete it all etc |
| 18:16.20 | foxlit | (and also just to be informed exactly what they collect and what they use it for) |
| 18:17.27 | zenzelezz | writing GDPR code is just as much fun as it sounded like it would be :-| |
| 18:18.21 | Maldivia | foxlit: and they provide that info already: http://eu.blizzard.com/en-gb/company/about/privacy.html |
| 18:20.09 | Andols | I'm curious does that include information that is printed out a long time ago and hidden in a achive in a corner of a office that no one remembers is there? |
| 18:20.31 | Simca | no, which is why companies are having to burn those file cabinets to stay compliant |
| 18:20.37 | Simca | yes* |
| 18:20.55 | Andols | to be fair that is a bit silly |
| 18:21.00 | Simca | youtube is removing all content reports prior to may 2018 |
| 18:21.00 | Maldivia | no |
| 18:21.14 | Simca | because they can't get the data easily from old systems in the right forms |
| 18:22.31 | foxlit | Maldivia: I can't tell if the data erasure/portability links are broken or just meant to link you to the general support site. |
| 18:23.48 | Maldivia | foxlit: hmm, probably broken, as it's a 302 Not Found |
| 18:23.55 | Maldivia | oh wait, 302 Fount |
| 18:24.03 | Maldivia | (and I can't spell) |
| 18:27.56 | nimhfree | foxlit: yes, whenever I type E U without the space it comes out at EU |
| 18:28.17 | foxlit | hey, that EU came out fine :P |
| 18:28.18 | nimhfree | as a euro bill ð¶ instead of the |
| 18:28.34 | nimhfree | yes, without a following space it comes out as EU |
| 18:28.36 | foxlit | (also, I would've expected ðªðº) |
| 18:28.51 | nimhfree | this is just something my system is doing. |
| 18:29.00 | Thunder_Child | Emoticons seem to kill Quassel. |
| 18:29.01 | foxlit | your system has silly text-replacement rules. |
| 18:29.22 | nimhfree | yes, and I did not even set this up, so am not bothered with hunting it down to stop it |
| 18:30.06 | Maldivia | ðªðº ? |
| 18:30.12 | Maldivia | ok, it worked :D |
| 18:30.13 | nimhfree | euro flag |
| 18:30.27 | Stanzilla | what do I have to put on my website if all I collect privacy wise is nginx server logs? |
| 18:30.40 | nimhfree | ok, now I wasted 45 seconds replacing ðªðº |
| 18:31.12 | Maldivia | nimhfree: I just write : eu : in my client, and it replace it :D |
| 18:31.27 | nimhfree | Stanzilla: if your logs do not associate a specific user to each log entry you may be fine |
| 18:31.39 | Maldivia | IP address is PII, so :D |
| 18:31.43 | Stanzilla | you sure? it still lists ip addresses |
| 18:32.00 | Maldivia | Stanzilla: how long do you keep the logs? |
| 18:32.13 | Stanzilla | whatever the default nginx setting for that is |
| 18:32.30 | Maldivia | or simply change the logging string to not include IP |
| 18:33.06 | foxlit | or UA. |
| 18:33.15 | Stanzilla | hrm |
| 18:33.29 | Stanzilla | UA as well? |
| 18:33.29 | Stanzilla | uh |
| 18:33.29 | foxlit | and account identifiers in URLs. |
| 18:33.42 | Stanzilla | it's just a simple static html site with text |
| 18:33.43 | nimhfree | if you are recording in your logs the IP address, then you need to be GDPR compliant because they consider IP addresses as PII |
| 18:34.32 | nimhfree | however, users may have a hard time telling you what IP Addresses they used in visiting your site, so your deletion of that data may be less than easy |
| 18:34.35 | foxlit | <PROTECTED> |
| 18:34.37 | Alram | doesn't gdpr just apply to companies and stuff |
| 18:34.49 | Alram | i dont think individuals that host personal sites have to deal with it? |
| 18:35.24 | nimhfree | the key is being fined by the euro folks. if you are a simple web site provider with no income from it, you may not have issues as the fines are based on your yearly income for that business |
| 18:35.42 | Maldivia | yep |
| 18:35.43 | Thunder_Child | They have an option of a flat fee. |
| 18:35.45 | Stanzilla | foxlit: that doesnt say UA though |
| 18:36.01 | Funkeh` | already sent a few emails in regards to getting my account/data deleted, we'll see what happens |
| 18:36.02 | foxlit | "If, by looking solely at the information you are processing you can distinguish an individual from other individuals, that individual will be identified (or identifiable)." |
| 18:36.14 | Maldivia | Stanzilla: you're not allowed to store and personal data unless you have consent or you are required to by law |
| 18:36.24 | Thunder_Child | fee is 2%/4% or $10M/$20M whichever is higher. |
| 18:36.24 | Funkeh` | i was hoping it would force sites to add a big "delete my account" button but oh well |
| 18:36.37 | Maldivia | Thunder_Child: UP TO that |
| 18:36.44 | Alram | for businesses* |
| 18:37.07 | Thunder_Child | Maldivia: But my point is that there is a flat fee, which means not making any money is not a free pass. |
| 18:37.15 | Alram | again if you just host some site thats not a part of a business or anything you don't need to worry about gdpr |
| 18:37.24 | Stanzilla | https://github.com/masonicboom/ipscrub should be enough? |
| 18:37.44 | Maldivia | Stanzilla: This Regulation does not apply to the processing of personal data: (...) by a natural person in the course of a purely personal or household activity; |
| 18:37.59 | Stanzilla | meh it is basically an info site about my mom's business |
| 18:38.00 | Alram | if you make money off the site then yeah |
| 18:38.18 | Stanzilla | it does not generate money, it just has pictures and an address |
| 18:38.23 | Maldivia | Stanzilla: then remove IPs from the log files |
| 18:38.32 | Alram | or anonimize them |
| 18:38.36 | Alram | removing the last 2 digits should be fine |
| 18:38.38 | Stanzilla | yeah like https://github.com/masonicboom/ipscrub |
| 18:38.42 | Stanzilla | should be enough? |
| 18:39.18 | Stanzilla | or https://stackoverflow.com/a/27749834/9755149 |
| 18:39.21 | nimhfree | just remove the IP addresses from the logs if you are worried about it |
| 18:42.03 | Funkeh` | store the logs on a ramdisk and have them last 24hrs |
| 18:43.27 | nimhfree | what really is interesting is whether a referrer site needs to be scrubbed. in some cases this can more easily identify a user than the IP address |
| 18:44.03 | Stanzilla | not sure about UA though, what foxlit said is kinda true but eh |
| 18:44.04 | Maldivia | nimhfree: if you can uniquely identify a user using it, then yes, it's a PII |
| 18:44.09 | Stanzilla | more than 1 person can have the same UA |
| 18:44.22 | foxlit | more than 1 person can have the same IP |
| 18:44.42 | Maldivia | foxlit: yes, but IP is explicitly listed as a PII |
| 18:44.55 | foxlit | where? |
| 18:47.41 | Maldivia | foxlit: recital 30 |
| 18:48.00 | Maldivia | "Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers such as radio frequency identification tags" |
| 18:49.34 | foxlit | I honestly don't know how to read "may" there. |
| 18:51.09 | Thunder_Child | Or "natural"....whats an "unnatural" person? |
| 18:51.16 | Alram | Fisker |
| 18:51.21 | foxlit | an unnatural person is a legal person, i.e. a company |
| 18:51.21 | Thunder_Child | Fair enough. |
| 18:51.29 | Thunder_Child | Ah. |
| 18:51.38 | Maldivia | Thunder_Child: https://en.wikipedia.org/wiki/Natural_person |
| 18:53.06 | Maldivia | foxlit: read it as "can" |
| 18:53.39 | Maldivia | or might be -- as is it's possible |
| 18:54.21 | Stanzilla | random website https://adzerk.com/blog/2018/01/gdpr-and-ad-tech/ says "Not storing the whole user agent string, and instead keeping just salient data like device type and OS" |
| 18:54.26 | Maldivia | foxlit: for the full recital, with the 2nd sentence as well that makes it a bit clearer: https://gdpr-info.eu/recitals/no-30/ |
| 18:54.44 | foxlit | I mean, this is still severely lacking in context. |
| 18:55.14 | foxlit | I guess I need to find which of those 173 pieces reference online identifiers. |
| 18:55.40 | Maldivia | foxlit: need to take it into context of Article 4, paragraph 1 |
| 18:59.00 | foxlit | no PII acronym in sight :P |
| 18:59.57 | Maldivia | I don't think the acronym PII is used anywhere in the text |
| 19:00.14 | foxlit | but okay, I'm just nitpicking on the wording. I guess the message is that because the eu considers IP addresses to be capable of identifying a person, you get to treat those as personal data. |
| 19:00.33 | Maldivia | yep |
| 19:00.46 | Maldivia | (PII is US legal "term") |
| 19:00.49 | foxlit | That identification link sounds a bit arguable -- I mean, they'd probably go after facebook for combining IP with other identifiers, but not you for just logging only IPs. |
| 19:01.43 | Maldivia | foxlit: the thing is, they DON'T go after anyone, someone has to report you, and it's a local authority that then audits you, and they'll probably warn you first, so you fix it, and if you don't, then you can get fined |
| 19:02.21 | foxlit | they -> the local equivalent of ICO. |
| 19:02.24 | Maldivia | and if they go after anyone themselves, it will be the "buf fix" |
| 19:02.31 | Maldivia | big fish* |
| 19:02.52 | Maldivia | yeah, the local/national equivalent |
| 19:03.39 | nimhfree | the real question is should you keep logging IP addresses? since the GDPR considers them PII (even though there are situations when this is absolutely not the case), you might just remove them from your logging patterns. are you actually using IP addresses for any reason when you audit your logs? |
| 19:04.20 | foxlit | ip-blocking misbehaving crawlers comes to mind. |
| 19:05.04 | nimhfree | the same would go for referrer information. if you really wanted to get crazy it could even go for identifying OS/hardware, as you might be able to identify a user by this. though this would only happen in a really small population (with things like prototypes) |
| 19:06.19 | nimhfree | woot. live version is higher than betaâ¦26654 |
| 19:07.31 | Maldivia | foxlit: you're allowed to do that :D |
| 19:08.03 | Thunder_Child | foxlit: That's an amusing thought. You block me by IP, I submit a request for you to remove my personal information (the IP) so I can go back to accessing your site. |
| 19:08.48 | foxlit | I think I can freely ignore your request. |
| 19:09.22 | Maldivia | you're allowed to log it (for a limited time) for the purpose of detecting and preventing fraud or unauthorized access -- so no Thunder_Child, can't do that :D |
| 19:09.24 | foxlit | erasure rights are not absolute |
| 19:10.27 | Thunder_Child | What's the limit? |
| 19:11.31 | Maldivia | "no longer than necessary" |
| 19:11.35 | Maldivia | https://gdpr-info.eu/art-5-gdpr/ |
| 19:12.44 | *** join/#wowuidev ChanServ (ChanServ@services.) |
| 19:12.45 | *** mode/#wowuidev [+o ChanServ] by niven.freenode.net |
| 19:16.59 | *** join/#wowuidev modernist (~mke@2a00:23c5:3481:ed00:1da8:8f55:ed8f:97f5) |
| 19:19.19 | *** join/#wowuidev pompy (~Mike@c-73-194-183-217.hsd1.nj.comcast.net) |
| 19:20.57 | *** join/#wowuidev stolenlegacy (~stolenleg@unaffiliated/stolenlegacy) |
| 19:21.54 | Stanzilla | I removed IPs, kept UA and delete the logs every day. should be enough? |
| 19:22.51 | foxlit | I think we concluded that you could've waited for your local data protection agency to knock on your door before doing anything. |
| 19:23.39 | Thunder_Child | Is there a requirement for notifiying visitors that there is information being collected, and what kind? |
| 19:24.01 | Thunder_Child | And contact information to remove it? |
| 19:24.11 | nimhfree | Simca: it looks like the current quest data does not deal with the newer allied races yet, even though you can play some in game. so I am ignoring the new allied races for now. |
| 19:30.41 | *** join/#wowuidev ChanServ (ChanServ@services.) |
| 19:30.41 | *** mode/#wowuidev [+o ChanServ] by niven.freenode.net |
| 19:39.52 | Andols | Hmm, i wonder if the restart of freenodes bots had anything to do with GDPR :P |
| 19:40.07 | Andols | and who owns |
| 19:40.09 | Andols | ~logs |
| 19:40.09 | purl | All conversations are logged to http://purl.rikers.org/%23wowuidev/ Lines starting with spaces are not logged. Logs are updated daily. |
| 19:48.44 | Thunder_Child | Does that count? |
| 19:51.41 | foxlit | probably yes. |
| 19:52.51 | Thunder_Child | But we all have the same information. Can someone request that I remove their PII from my logs? |
| 19:53.46 | zenzelezz | request, yes. Demand? Probably not |
| 19:55.19 | Alram | i don't think purl would fall under gdpr |
| 19:55.30 | Alram | probably some other privacy law though |
| 19:56.34 | Thunder_Child | s/request/enforceably request/ |
| 19:56.41 | Thunder_Child | Better zenzelezz? |
| 19:57.20 | zenzelezz | Thunder_Child: yes |
| 19:58.53 | foxlit | this seems hard to apply to individuals. |
| 20:00.04 | Thunder_Child | Which rikers.org seems to be, so I do wonder how it works out. |
| 20:23.01 | *** join/#wowuidev Ssateneth (ident@unaffiliated/ssateneth) |
| 20:34.29 | Andols | http://www.bbc.com/news/technology-44239126 |
| 20:36.41 | foxlit | <PROTECTED> |
| 20:42.40 | Maldivia | https://gdprhallofshame.com :) |
| 20:54.46 | *** join/#wowuidev jinxybob (~jinxybob@host86-175-116-179.range86-175.btcentralplus.com) |
| 21:04.23 | *** join/#wowuidev Funkeh` (~Funkeh`@WoWUIDev/WoWAce/Ace3/BigWigs/funkeh) |
| 21:06.36 | nevcairiel | TC, personal logs are not affected as long as you don't make them accessible |
| 21:07.18 | nevcairiel | So automatic public logging of channels might be illegal tomorrow |
| 21:07.53 | Thunder_Child | But I thought the law applies regardless of access. |
| 21:09.00 | nevcairiel | And related, what many of those companies that do blocking of EU users forget, it's not only about new data, but all old data that they may have about EU citizens as well |
| 21:31.09 | Maldivia | and what about the EU ciitizens who are outside EU borders? how are they going to filter those out? |
| 21:32.57 | foxlit | those aren't covered, though. |
| 21:37.40 | foxlit | also "This Regulation does not apply to the processing of personal data by a natural person in the course of a purely personal or household activity and thus with no connection to a professional or commercial activity." |
| 21:51.52 | nevcairiel | Yeah it only applies to you if you are inside the EU |
| 21:52.00 | nevcairiel | if you are in another country, you are subject to their laws |
| 21:52.59 | Maldivia | and what if I use a VPN? |
| 21:53.57 | foxlit | you need to set the evil bit on all your packets. |
| 21:58.42 | foxlit | (presumably there's no obligation for non-EU processors to apply GDPR if they have no reason to believe you're a EU resident) |
| 22:06.23 | tz | because I use en-GB for language (if only en-AU was an option), I'd been subjected to all the bullshit cookie challenge stuff for aaaaaaaages |
| 22:07.06 | Andols | New EULA in the Battle.net client now |
| 22:07.24 | Andols | It forces you to log in again and accept it |
| 22:08.05 | Andols | Well, I don't know if it is a new compared to the one linked above but still |
| 22:08.54 | Stanzilla | So far it did not kick me out |
| 22:08.57 | nevcairiel | i wonder if someone told the beta deploy people that they scheduled a test starting 9 minutes ago |
| 22:10.14 | Stanzilla | they already said it's gonna be 30 min later |
| 22:11.01 | nevcairiel | also the latest build asserts on quit from a mem leak =p |
| 22:11.08 | Simca | heh I see AdventureJournal.db2 got its WorldMapAreaID column replaced with UIMapID |
| 22:11.17 | nevcairiel | the API that goes with it too |
| 22:11.20 | Andols | The error reporter is causing new error reporters |
| 22:11.39 | Simca | yeah i pointed out last week it was the only col left using the old system and dan said he'd look into it |
| 22:14.40 | nevcairiel | hm are the new loading screens a bit blurry or did mmo-c overcompress them? |
| 22:15.24 | nevcairiel | yeah looks much better on wowhead |
| 22:16.21 | Alram | probably different versions of it |
| 22:16.29 | Alram | there's a non-wide and wide one i think |
| 22:17.09 | *** join/#wowuidev Andols (~yaaic@78-70-44-4-no170.tbcn.telia.com) |
| 22:17.29 | nevcairiel | wowhead has it 2048x1024 which i thought is the new final resolution of them |
| 22:17.42 | Alram | i'm guessing that is wide then |
| 22:17.56 | nevcairiel | mmo-c at 1920x1080 which skews aspect ratio and looks blurry in comparison |
| 22:18.08 | Alram | and that must be non-wide |
| 22:18.16 | nevcairiel | the aspect ratio difference is rather minimal tho |
| 22:18.22 | nevcairiel | doesnt seem worthwhile to have both ingame |
| 22:20.02 | Alram | i actually only see 1 |
| 22:20.22 | Alram | i guess chaud resized to 1080p by accident |
| 22:25.15 | nimhfree | so my woot for live being a higher version than beta is shortlived, but no realms available in beta at the moment |
| 22:26.26 | nevcairiel | beta is up again now |
| 22:27.07 | nevcairiel | well, sort of, char list comes up but actual login seems to be stalling |
| 22:27.56 | nevcairiel | oh now it worked |
| 22:27.59 | nevcairiel | just very slow |
| 22:50.17 | *** join/#wowuidev [TOM_RUS] (~kvirc@95-29-199-38.broadband.corbina.ru) |
| 22:54.39 | nimhfree | boralus map seems much better now |
| 23:02.45 | Stanzilla | https://twitter.com/GennaBain/status/999785407087808512 |
| 23:16.28 | Maldivia | RIP |
| 23:32.08 | *** join/#wowuidev foxlit (~Fox@roll.42d6.com) |
| 23:36.42 | *** join/#wowuidev ShadniX (dagger@p5B3D2E5F.dip0.t-ipconnect.de) |
| 23:37.49 | *** join/#wowuidev modernist (~mke@2a00:23c5:3481:ed00:1da8:8f55:ed8f:97f5) |
| 23:41.41 | Funkeh` | C_UIWidgetManager.GetScenarioHeaderCurrenciesAndBackgroundWidgetVisualizationInfo(widgetID) |
| 23:41.44 | Funkeh` | cuz why not |
| 23:42.03 | *** join/#wowuidev ShadniX (dagger@p5B3D2DC9.dip0.t-ipconnect.de) |
| 23:42.26 | nevcairiel | you dont need to write docs if you use speaking function names |
| 23:44.04 | Funkeh` | what's this unitTarget stuff being thrown into all these events |
| 23:45.59 | nevcairiel | because they are unit events |
| 23:46.25 | nevcairiel | someone complained that its argument wasnt listed :) |
| 23:48.08 | Funkeh` | ah |
| 23:48.11 | TheDanW | they've always been there, the docs were missing them |
| 23:48.18 | Funkeh` | makes more sense |
| 23:50.03 | nevcairiel | the alliance warfront sure is still incomplete. all the building models were missing :) |
