« first day (4173 days earlier)      last day (761 days later) » 

1:05 AM
@MarkR can't see if someone else mentioned it, but sealed classes allows the sealing to take place where the class is defined, not outside of the class. So it's easier to manage, and reason about. Probably.
 
 
3 hours later…
3:40 AM
@DaveRandom ping
 
 
13 hours later…
4:37 PM
Ping statistics for DaveRandom.
Packets: Sent = 1, Received = 0, Lost = 1 (100% loss)
twitter.com/dmsimard/status/1505262381609406467 from the twitters, a Canonical interview process. Gawd strewth.
 
4:54 PM
Reaching out to @DaveRandom to make sure he's doing okay. :)
 
I was just being silly because no-one had talked in 13 hours :-)
It's a pretty nice weekend in the UK, super warm for march
 
5:09 PM
17C here, 12C at new home.
 
How long until the move? :)
 
Approximately ten days
Last weekend in this apartment. Next weekend I'm visiting people in Chicago.
 
Exciting. Did you come up with a cunning strategy to move the cats?
 
vet appointment last week, they prescribed gabapentin to help calm them. I've been using feliway in my apartment the past couple of weeks as well.
I'm considering having the new apartment buy a feliway plugin for my new apartment and have it plugged in and ready when I get there.
 
5:28 PM
@MarkR wow! in contrast, my housemate was hired to work on l10n for the very first version of Ubuntu before he graduated, simply because he'd been active in the Debian community for years
I wonder where's he at these days
 
how to make url clickable in phpstorm's terminal ?
 
5:39 PM
hey,
this might be unrealated topic but what is the right legal way to store users data ?
like for example, lets say i want to store user names, password , IP address ( to prevent from hacking in the future ) , credits ... etc
do I need to make purchase a database in each country ?
 
No, but if you're selling services to a particular country you need to comply with their privacy laws, and often their financial laws.
Storing credit cards has some very stringent requirements, typically called PCI-DSS
 
@MarkR what if it's in-app purchases or app credit ( not EUD or USD )
it's for a social game
 
Less of an issue, but if it's at any point convertable to RL money you'd have to follow anti-money-laundering rules
 
ok so lets say it's not and 80% of my users are from USA, 2% Canada, 3% from Ausralia, 1% from UK, 1% France and 1% Spain
is it illegal if I stored their info mentioned above a long with their in app credit and in-app purchases in the USA database ?
how to store the data the right way in this case ?
if I rented 5-6 server space for just 5-6 users, that won't be beneficial for me and hard to maintain!
 
5:54 PM
for the people in France and Spain, you should look into GDPR laws
@LoopingDev there's also the security aspect. What is legal only covers a portion of it, but was is secure, also matters. Read up on Top 10 OWASP.
 
seriously!, i picked those as an example, EU has many more countries!
they should chip in with a more reliable solution, for my and other services honestly
 
or...don't sell to those countries
if your application is not able to abide by the laws in that country... then... it's within your right to not sell to those countries...
 
@Tiffany yeah but it doesn;t sound like law to me , just a panic
 
abiding by GDPR? ... it is definitely not a panic ...
some US websites are region-locked from EU
 
i mean they could restrict it somehow for big companies maybe or help by providing a server services that is funded by the government that distribute and protect the data of their citizen however and wherever they like and just charge us relatively the same cost as we would normally.

that would make sense to me.
 
6:18 PM
If you transfer data from the EU to the USA you should look at the standard adequacy agreements, although in all honesty they're more about the big fish
 
organisations store information about customers in multiple countries all the time; I'm not aware of anything in laws like GDPR that stop that
 
It's called privacy shield, or it was, it got torpedo'd due to how the NSA gets to steal everyone's data
GDPR requires that you don't transfer data to a place with data protection that doesn't meet the requirements of the EU, that's why there's privacy shield and data adequacy agreements
 
@LoopingDev If you're not worried/afraid about storing credit card info on your own database... you don't know enough about what you're doing, tbh.
 
@MarkR does that cover collecting data in those jurisdictions, though; i.e. if I am in the UK and type my personal information into a US website, who is "transferring data"?
 
@IMSoP If you're knowingly providing services to those jurisdictions yeah.
 
6:28 PM
who is "you"?
in my example, "I" am a customer, not a service provider
 
@StatikStasis I'm not planning on doing that
do they have a list of company providers that they trust ?
for example how is google cloud ? aws? or even Namecheap ?
 
That's good. =)
 
@IMSoP The service provider is the one who has the legal liability.
 
@LoopingDev I think the more important provisions are about how you handle data - e.g. are your production systems properly locked down so that somebody you hire to answer the phone can't download 1000 people's home addresses?
 
i could narrow it down to something like
NickName ,
Ip-Address ( I need it to secure their account, if they try to login from a different IP address or a different device, they would need to provide more info) and maybe AD in the future ( not necessary at this point )

in app purchases ( if they own something I need to store some data about what they have access to )

so the only Senstive data I'm collecting is the IP-Address
yeah i will definitly do my best to encrypt any data I collect anyway, i don't know what else i can do.
I don't wanna receive a 23million bill
 
7:07 PM
If you ever get to the point where you might get a 23 million $ bill, you probably should have hired some lawyers several hundred million previously :)
 
7:33 PM
@MarkR lmao
u know this is very headracking to me, I'm thinking of doing something crazy but it might work
i'm thinking of encrypting the data I need to store on each user's own PC
( salted havely encrypted a page 50kb size )
and as a user login, I automatically upload the data on that file to the server, decrypt it on the server and then do whatever I wanted to do
 
Not legal advice, but you might be overthinking it just a tad.
 
i kinda agree with you but i don't know what to do, I asked you guys for advice.
can I get the user content to keep the data on my database (ex: in USA ) and explain how I'm protecting his/her data and if they like it they can use it if they don't it's on their own?
 
This is what privacy policies are for
 
@MarkR but there isnt a clear practicale code template or example that we could follow
 
The foundation of handling user data is transparency. Tell your users what you collect, how you use it, where it's stored etc. If you'd use it in a way they maybe wouldn't expect, be sure to point that out to them.
 
7:41 PM
@MarkR I'll definitly do that even without those policies ,but would that be enough ?
 
privacy policies are essential, and usually a legal requirement
 
but can i also tell them where I will be storing the data (country wise and with whos server like google's)?
or that might be actully security risk for the attackers?
 
My suggestion is if you're really worried, consult a lawyer.
They'll help you draft the relevant documents etc... and if you're really worried about being sued, form a limited liability company / corporation.
 
do u guys hire lawyers for that ? ^^
 
For larger business interests, of course. It all depends on what you're doing and at what scale.
 
7:50 PM
@MarkR its a social game like i said, it could blow up ( I don't expect it to but know one can predict what is going to be the new trend ), so I wanna be prepared for the worst
 
Doing so is probably not practical unless you have plenty of $ behind you.
 
@MarkR i don't!, i just want to do the right thing, I have no use for any data.
 
@Trowski Cool. btw, it appears that Monterey doesn't allow directories off the root directory by default.....and the upgrade deletes any 'unknown' directories off of root. Guess who had all their stuff in a /projects directory?
 
im surprised that there isn't a plugin or something that does that for us
should I encrypt any sensitive info? ( like names/address/ip addresses .. etc )
 
You should encrypt them when they're not in use.
And a good rule is don't collect data you don't need.
 
7:56 PM
i can do that
would that be enough ?
for everything policy
 
I can't possibly say, it's just a rule of thumb, not a legal brief :)
 
i heard that california has its own rule as well, this head racking! , cant they just make 1 standard for everyone ?
 
@Danack Hmm… interesting choice Apple. Good thing I keep everything in my home folder or on a NAS.
 
The USA has always been behind in data privacy, consumer rights are some of the weakest in the western world. You can expect to have 50 states all with different requirements before too long.
 
@Trowski do you recommend any particular NAS? Been meaning to buy one for a while.
 
8:01 PM
@Danack Synology DS220+ is really nice if 2 drives is ample or a DS920+ if you want even more storage.
 
ta.
 
The Synology OS plays very nicely with MacOS.
 
I use the 220J as my backup-backup, it's underpowered for anything but basic storage, but cheap and cheerful
 
My computer auto-mounts the shared drive on startup and the NAS is able to act as a time machine backup drive.
 
u know what, i think encrypting their names and data on their own local device might be the safest way, I would only access the encrypted file/s data , decrypt them and read it's data on use request, but it's on him if he modify or loses the file.

unless its ok to be as transparent as possible on how I keep and store the data and which data and in which country, then the user can decide if it's against his country roles/polices or not ... if dont mind or signed it, then it's on him, right ?
 
8:04 PM
@LoopingDev Yeah, that's not how it works. It's not the user who decides if you're in violation of the local regulations or not, it's the regulator.
 
Synology does have more powerful machines if you want to run things on the NAS, but if you just want a drive those are unnecessary.
 
@MarkR can i get the regulator's concert ? like submitting a request or something online ?
 
Nope
Just do some research, use common sense, don't try to screw your users, and chances are a regulator will never even know you exist.
 
im not, i have no business or profit in doing that.
I feel they made up some rules of something they are not sure how it operates, with no official party/entity to consult
 
that's how most the law works.
See: Case law
 
8:09 PM
that sucks
 

« first day (4173 days earlier)      last day (761 days later) »