Top
Best
New

Posted by aequitas 4 hours ago

SecurityBaseline.eu(internetcleanup.foundation)
163 points | 76 commentspage 2
Neil44 3 hours ago|
To be fair it's pretty much the norm with shared and even vps hosting that your cpanel etc will be publicly accessible. Only people who hand-roll their setups will have things firewalled down etc. And if it's a website promoting a local tree planting initiative or whatever is it really a good use of budget to get everything hardened so much.
onion2k 3 hours ago|
And if it's a website promoting a local tree planting initiative or whatever is it really a good use of budget to get everything hardened so much.

Given the fact lots of sites like that have Wordpress 'databases' of form submissions full of people's personal data, absolutely definitely emphatically yes.

jillesvangurp 3 hours ago||
Interesting data set. Would be interesting to repeat the same for SMEs. In my experience, Germany is pretty hopelessly behind on everything except GDPR enforcement. They are kings of that. Must have a cookie screen, apparently. That's why they score so good on that and not much else.

When the GDPR became active eight or so years ago, we got a few GDPR related requests to our service. Basically strongly worded requests to remove their data and account, which we of course honored. All of these came from Germany. Nobody else really cared. But it was kind of curious quickly that happened. What was interesting is that we had zero such requests before that law came into power. And it's not like we were misbehaving or would have denied such a request. This was more a matter of principle: "I now finally have the right to ask this, so I'm going to."

Germany is a big reason GDPR got so complicated and why, hopefully soon, it will be updated to not be fixated on just cookies so much. It never really was about the cookies but about data handling and sharing.

Any mobile app you install might track you without setting cookies and you can't install an ad blocker in those either. That's why Google loves apps so much. You don't actually need cookies for those. There usually is no cookie screen when you install one usually (unless it's a web app packaged up as an app). But sharing personal data with a third party provider is still problematic under GDPR. If you read the actual law, it barely mention cookies at all. The "must have consent screen for cookies" is just the common (mis)-interpretation for laymen; because it's the most visible impact that this has had on them. When it comes to date removal and other requests, it's less about features you have and more about processes you use for complying with legal requests. That can be a person answering emails and doing things manually. Doesn't scale if you get a lot of requests but it would be fine legally.

ketzu 2 hours ago||
> Germany is a big reason GDPR got so complicated and why, hopefully soon, it will be updated to not be fixated on just cookies so much.

In what way is GDPR focused on cookies?

In my experience, developers in online discussions make it seem all about cookies, pretending other ways of tracking don't exist, while the law does not. But it has been a while since I looked into it and I might remember that wrong.

> There usually is no cookie screen when you install one usually (unless it's a web app packaged up as an app).

A lot of games provide opt-in screens, as they heavily rely on ad networks.

> If you read the actual law, it barely mention cookies at all

Now I am confused, didn't you just say it was focused on cookies?

_nub3 1 hour ago|||
Actually Spain leaded on this and had strictest regulations before Germany regulated broader "Neuland" Cookies.
egorfine 3 hours ago|||
> What was interesting is that we had zero such requests before that law came into power

Because these requests would be 100% ignored. And the law gave people the power they wanted.

I'm mentally and legally far from Germany and I'm not a big supporter of GDPR, but this law is indeed a step in the right direction.

exceptione 1 hour ago||

  > Germany is pretty hopelessly behind on everything except GDPR enforcement.
Are you sure? I see major outlets in Germany blatantly violating the GDPR by forcing visitors to pay with their privacy or pay with their money. That is not allowed. It is perfectly fine to have a paywall, but you can never have people pay with their privacy.
CalRobert 2 hours ago||
Cool stuff but odd that Ireland has results for all but 3 counties and one of the ones missing data is Co Dublin...
jamesdelaneyie 2 hours ago||
Could be that you have four councils: Dublin City Council, Dun Laoghaire/Rathdown, South Dublin, and Fingal
Stitch4223 2 hours ago||
I've added it to the backlog. We're also missing several other regions, but Ireland is the most obvious.
lccerina 3 hours ago||
Honestly surprised that Italian municipalities are doing relatively well compared to other countries. Maybe it helped a push from the government to have a shared design for municipal websites (https://github.com/orgs/italia/repositories?q=comuni)
kome 2 hours ago|
Italians stay winning as usual... :-)

But for real, Italian public administration digitalization isn’t as bad as people think when compared to other big countries. SPID (an electronic identity system, now deprecated) was years ahead of many other European countries (and easily, the US), and PEC (a certified email standard for official communications established in 2005, that can be used with standard email clients) is still more advanced than the often more complicated and closed systems used in many other places. The Italian standard also deeply influenced the EU standard: https://dl.acm.org/doi/fullHtml/10.1145/3560107.3560256

Aerroon 2 hours ago||
>3.081 European government sites place tracking cookies without consent.

GDPR was adopted more than a decade ago and our governments still can't do it right, yet they expect everyone else to get it right. Amazing regulation.

cs02rm0 2 hours ago||
I hate consent banners more than tracking cookies.
pred_ 1 hour ago|
You may find tools like https://addons.mozilla.org/en-US/firefox/addon/consent-o-mat... useful then.
oliviergg 3 hours ago||
seems a good idea, but currently down.
aequitas 3 hours ago|
slashdotted, dispite preparations :), working on it
nubinetwork 2 hours ago||
Can we start using a comma as a thousands separator instead of a period?
reddalo 2 hours ago||
Period is the thousands separator and comma is the decimal separator in almost all European countries.
Stitch4223 2 hours ago||
We checked this before going live and came to the same conclusion. We also discovered that the official languages of the EU are all 24 languages, but we chose to write the post in English and not AI-translate it.
usrnm 2 hours ago|||
In most (all?) European countries comma is the decimal separator
usui 2 hours ago|||
I skimmed https://wikipedia.org/wiki/Decimal_separator but still don't understand. Why does this difference exist? Also, why did the conflict eventually settle into something between full stops and commas? What stopped other symbols from continued usage like bars or underscores?

It seems weird that a system would eventually settle on just full stops and commas, yet not settle on where to put them. If your system is going to converge strongly on two symbols, finish the job!

duckmysick 40 minutes ago|||
> Why does this difference exist?

Same reason why there are different date formats, weeks start on Sundays/Mondays (or Saturdays), long/short scale numbers, drives on left/right, different wall sockets and plugs, different train gauges, and of course metric/imperial.

It's a mix of tradition, conventions, inertia.

chmod775 1 hour ago|||
Because in English you say "three dot two", whereas in German it is "Drei-Komma-Zwei".

It just reflects the spoken language. And having the unused symbol then be the thousand separator is natural.

usui 11 minutes ago||
Interesting, I did not know this, but a little bit doubtful. Wouldn't it be the other way around? Explicit spoken language coming from being written that way.
chmod775 2 minutes ago||
Maybe at some point originally, but now you can't change it. Spoken language resists attempts to shape it by committee, and written language has to begrudgingly follow its lead.
veltas 2 hours ago|||
Not in e.g. UK.
reddalo 2 hours ago||
The UK is sadly not in the European Union and it wasn't included in this study.
gschizas 53 minutes ago|||
Oh, sweet summer child...

https://www.unicode.org/cldr/charts/48/by_type/index.html

lofaszvanitt 2 hours ago||
Oh no way. First, replace fahrenheit to celsius, then miles to kms and we are all set to a nice, unified future.
tactlesscamel 2 hours ago|||
I much prefer a 60mi commute to a 96km commute. It is less depressing.
lofaszvanitt 2 hours ago||
So you live in a constant mirage, a delusional reality? :)
nubinetwork 2 hours ago|||
No complaints there, I don't get why the UK uses miles and Celsius...
jocelyner 3 hours ago|
[flagged]