hinata08

A (very) large but low paying company that struggled to hire around here also came down to that

Managers hired a consulting firm to get a report about why they couldn't hire : The report confirmed they couldn't get application because they overpaid engineers and their job ads were too generous.

Sometimes, you just have to use any broken maths to give the only thing that managers want to hear.

>they don't secretly gain access to your system

They are only "enabling Web Analytics by default" "by providing a powerful, in-depth monitoring solution that helps you debug and optimize applications" when users do not come from the EU

Cloudflare is doing a great job most of the time, but I feel like this feature was speed run through approvals and could use more discussions

Cloudflare used to effectively allow you to block users coming from Tor or proxies, forcing them to chose between not visiting your site or disabling their privacy features. (when Akamai was able to still allow legitimate users)

They do a much better job these days, at least

> Rather than count unique IP addresses (requiring storing state about each visitor), we simply count page views that originate from a distinct referral or navigation event, avoiding the need to store information that might be considered personal data.

They don't store IP addresses (but other referral ids that identify users in a different way) ; and they exclude EU visitors by default.

You do your opinion

> Makes me wonder if their stuff is GDPR-compliant without consent.

GDPR service providers and partners do not have to consent. Consent is for the users.

Services providers have to tell you when they collect your data, and they will most likely fail to do that if they don't even know their partner injects code.

*So you're liable if you host on cloudflare.*

Now, they somehow avoid this :

>when enabling Web Analytics, you can choose to drop requests from European and UK visitors if you so desire (listed here specifically), meaning we will not collect any RUM metrics from traffic that passes through our European and UK data centers. The version of Web Analytics that will be enabled by default excludes data from EU visitors (this can be changed in the dashboard if you want).

By default, it is only enabled for visitors from out of the EU, like so many services that respect your privacy and your concerns are their first priority

You would be surprised by the number of professionals who would be at peak tech performance if they could pull it off

IT security is a lot more about the processes, risk, and data management that technical performance these days.

The book to study for CISSP CBK is hardly any technical (The Code Book is more technical than that)

The ISO 27000 series defines an Information security management system that doesn't even need to involve "computer", as it discusses more about data in the organization.

Research these days is also based a lot on how to address security risks on top of safety risks, not just how to hack any system (and I do believe that the obsession of the aviation industry about these studies is why everything was ready so that suspects were met with police)

life hacks are also hacker news, I guess x)

Delta's setup and procedures were able to catch up on that. Good move from their side !

Police was involved

No offense, but I doubt that most other public spaces or transport would have reacted like that.

It's not just because planes fly, but the industry around them has planned for everything.

This Hacker News post could be "Delta is ready"

their HQ is supposed to be in Melbourne, Australia

They mention it only briefly in their publication. Their about page is clearer about that.

even if they're a flop, you'll be told they're too big to fail. And now, you have to bail them out and buy their HBM instead of paying for your RAM

I hope that China makes up for the capacity that RAM producers are not willing to produce, so that the latter are sent back to the past (with no bailout nor protectionism)

> There are privacy preserving alternatives to accounts and ID/face scans

I don't see how forcing people to you scan their IDs and turn their camera one is better for privacy.

The only explanation is THEY WATCH, literately

"we will not be affording them the benefit of listening to their politicized drivel" as the diplomat says as he's making the drivel viral