6 ms·
Why? It’s anonymous and doesn’t collect any user data other than IP and stuff from the user agent
by b34r 4y ago
Why? It’s anonymous and doesn’t collect any user data other than IP and stuff from the user agent
- jahewson 4y agoIt’s not anonymous in a low-entropy situation. A user can be indirectly identified. This would violate GDPR.
- CaveTech 4y agoNo it wouldn't.
- jahewson 4y agoYes it would because a unique time stamp allows me to indirectly identify a user.
- SparkyMcUnicorn 4y agoHow?
- kapep 4y agoIt is not a unique timestamp though. Each day, all visitors start at 00:00:00. All users that visit the site a second time get the timestamp 00:00:01 and so on.
- CaveTech 4y agoWhere are people getting these insane reads of GDPR. Any bit of entropy is not going to violate GDPR. First, an active client-server connection is required for any kind supposed "identity" contained here, which would of course include far more unique bits of identity/entropy, such as IP. Secondly, even if the full DB of page view counts were leaked you could not actually use it to identify a user. You have somehow perverted GDPR to believe it to mean `no client may ever hold a unique state`. Good luck to anyone making a claim that this is NOT possible in anything but the most rudimentary application.
- pyrolistical 4y agoI don’t see how it can be used as described to identify an individual person. Multiple requests end up with the same time stamp which means individuals are not traceable but as an aggregate countable
- jahewson 4y agoOnly multiple requests within a given second get the same time stamp. So if you have less than 86k hits per day, then all your time stamps could be unique. Edit: I misread the article here, where it said each visit incremented the counter by one second. So my calculation is not correct!
- bradstewart 4y agoBut how do I then tie that unique timestamp to an actual person? Which is what GDPR is concerned about. (edit: spelling)
- dahfizz 4y agoHow do you go from timestamp to identifying someone? ~Every HTTP response has a Date field with a second-resolution timestamp that might be unique. Are you equally concerned about that?
- TylerE 4y agoBirthday paradox means that will be far lower.
- Thorrez 4y agoNo, they are truncating the timestamp to the day. So all visitors to the site on a specific day get the same initial timestamp.
- jahewson 4y agoAh so they are, thanks! That’s much better. Though for a very, very low-traffic site this would still let me track unique visitors.