A (very) large but low paying company that struggled to hire around here also came down to that

Managers hired a consulting firm to get a report about why they couldn't hire : The report confirmed they couldn't get application because they overpaid engineers and their job ads were too generous.

Sometimes, you just have to use any broken maths to give the only thing that managers want to hear.

>they don't secretly gain access to your system

They are only "enabling Web Analytics by default" "by providing a powerful, in-depth monitoring solution that helps you debug and optimize applications" when users do not come from the EU

Cloudflare is doing a great job most of the time, but I feel like this feature was speed run through approvals and could use more discussions

Cloudflare used to effectively allow you to block users coming from Tor or proxies, forcing them to chose between not visiting your site or disabling their privacy features. (when Akamai was able to still allow legitimate users)

They do a much better job these days, at least

> Rather than count unique IP addresses (requiring storing state about each visitor), we simply count page views that originate from a distinct referral or navigation event, avoiding the need to store information that might be considered personal data.

They don't store IP addresses (but other referral ids that identify users in a different way) ; and they exclude EU visitors by default.

You do your opinion

Just saw that in the dashboard: "Enable globally", "Exclude EU". Kinda funny (in a bad way)

> they exclude EU visitors

GDPR is applicable on EU citizens, disregarding where they browse from. So either they have to track whether you're an EU citizen/EU visitor or they track EU visitors when browsing from outside of EU. This makes it not GDPR compliant.

The main issue is that your privacy policy is most likely not mentioning this third-party tracking because you were not even aware of it. Who is going to be responsible? Who is going to be fined for not mentioning this tracking in _your_ privacy policy? You. (Your company)

> Makes me wonder if their stuff is GDPR-compliant without consent.

GDPR service providers and partners do not have to consent. Consent is for the users.

Services providers have to tell you when they collect your data, and they will most likely fail to do that if they don't even know their partner injects code.

*So you're liable if you host on cloudflare.*

Now, they somehow avoid this :

>when enabling Web Analytics, you can choose to drop requests from European and UK visitors if you so desire (listed here specifically), meaning we will not collect any RUM metrics from traffic that passes through our European and UK data centers. The version of Web Analytics that will be enabled by default excludes data from EU visitors (this can be changed in the dashboard if you want).

By default, it is only enabled for visitors from out of the EU, like so many services that respect your privacy and your concerns are their first priority

You would be surprised by the number of professionals who would be at peak tech performance if they could pull it off

IT security is a lot more about the processes, risk, and data management that technical performance these days.

The book to study for CISSP CBK is hardly any technical (The Code Book is more technical than that)

The ISO 27000 series defines an Information security management system that doesn't even need to involve "computer", as it discusses more about data in the organization.

Research these days is also based a lot on how to address security risks on top of safety risks, not just how to hack any system (and I do believe that the obsession of the aviation industry about these studies is why everything was ready so that suspects were met with police)

Delta's setup and procedures were able to catch up on that. Good move from their side !

Police was involved

No offense, but I doubt that most other public spaces or transport would have reacted like that.

It's not just because planes fly, but the industry around them has planned for everything.

This Hacker News post could be "Delta is ready"

life hacks are also hacker news, I guess x)

their HQ is supposed to be in Melbourne, Australia

They mention it only briefly in their publication. Their about page is clearer about that.

Ah, thanks for the hint! Probably better than, but still Five Eyes. The legal details I‘m not aware of in this case.

Which means that not even a European subsidiary will prevent data exfiltration by FVEY. Australia can just issue a TCN to the parent company to add a backdoor to the software used by the European subsidiary.

even if they're a flop, you'll be told they're too big to fail. And now, you have to bail them out and buy their HBM instead of paying for your RAM

I hope that China makes up for the capacity that RAM producers are not willing to produce, so that the latter are sent back to the past (with no bailout nor protectionism)

You hope you and I will depend more on China? That won't fix any unbalanced market, it will move you another step towards a vertical structure..

It's better than depending on the US at least.