Showing posts with label gdpr. Show all posts
Showing posts with label gdpr. Show all posts

Friday, June 21, 2019

GDPR compliance in a nutshell

Recently MongoDB added field encryption in version 4.2. This means if there's a request to delete all user data (stated in GDPR) administrator can delete the encryption key(s) which is used for access to the personal data. So no key - no data ... right ... but the data is still there and probably ready to be brute-force decrypted. Nice try, MongoDB

Monday, May 28, 2018

GDPR my ass, fix your products first

Some examples:

1. Last ~10 versions me and some folks have a problem with Google Chrome staying logged in. Every time we close the browser and open it we must login again so at least we are in sync with bookmarks or site passwords
2. Sometimes you cannot disable Autoplay on YouTube ...
3. Most of the sites shoots you in the face with cookies policy, "You should disable AdBlock to continue" rant, awkward interfaces and more shit while they forget they need to optimize to lower that annoyingly high CPU load
4. Facebook - a whole other story, sometimes I think they must just close their doors (around 5000 LoC when entering Home page, rly?)

Don't talk about some rights while you already track everyone through different channels, just fix your products