Recent submissions

Comment · 4 days ago
In short gdpr compliant means you can configure it but it must not be compliant by default and also there is no guarantee.

They are constantly changing their software and settings. More than once they believed that something is legal but can be risky for the atlassian customer.

For example training AI on metadata which they believe are anonymized but are maybe not enough changed.

Training data or metadata permisson can not be configured on all subscriptions. But as a data processor they must follow the contract otherwise they become data controller.

Also there are risks associated with privacy data framework, cloud act etc. to be non compliant just by data transfers to other countries.

Comment · 11 days ago
10 times the amount of digits is the possible number space.

smaller than 384 means 384 numbers (including 0) divided by the amount of possible numbers (see above) imho

Comment · 11 days ago
The probability of getting a 0 is the same for every digit. However, in my opinion, the probability of getting a number that starts with two zeros is 1/10 * 1/10, and the probability of getting a number that starts with the same two digits is 10 * 1/10 * 1/10.

But the probability to receive one number or the other are the same.

Comment · 1 month ago
You have a link? :-) (Still a student)
Comment · 1 month ago
In a hospital, they may need to remove the ring quickly for example, if your finger was injured and begins to swell.
Comment · 1 month ago
Certification takes time and probably overlaped with the phone development. Fairephone is small compared to e.g. samsung and they describe themself more "stable" and long-term support than bleeding edge.
Comment · 1 month ago
Because a lot of things is public online and can't be copied and sold e.g. due to copyright, patents and trademark. Also if you access a website you are bound to a ToS contract and this is a breach of that contract.
Comment · 2 months ago
Yes. In this case probably not fineeprinting is not allowed because not strictly necessary (cookie law) and therefore needs consent from user.
Comment · 2 months ago
Yes. In this case probably not allowed because not strictly necessary (cookie law) and therefore needs consent from user.
Comment · 2 months ago
The problem with this analogy is responsibility. Same set of problems if you have a self driving car imho. Not?
Comment · 2 months ago
Comment · 2 months ago
If you access "private" data it's also unlawful acording to 143. Pentesting is a hot topic but there are comapnys acusing you of hacking if you send them a security report (hacking). If they mention a bug bounty program then you are allowed to test their security as described in this program but not more.
Comment · 2 months ago
In switzerland it depends 143bis StGB:

Any person who, with the intention of securing an unlawful gain for themselves or another obtains for themselves or another data that are stored or transmitted electronically or in some similar manner and which are not intended for them and have been specially secured to prevent their access shall be liable to a custodial sentence not exceeding five years or to a monetary penalty.

Comment · 3 months ago
Env variables are considered best practice (factor 3): https://developer.ibm.com/articles/creating-a-12-factor-appl...

If I would avoid env then i need to put it in some kind of conf file and configure the app to read this file (e.g. mount into container). If I use a fault then i need some kind of credentials to receive the credentials.

So again what do I gain if I avoid env variables in containers?

Comment · 3 months ago
Why should that help to have no env variables?

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton