Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 
nunz
1423 posts

Uber Geek
Inactive user


  #2026268 31-May-2018 14:13
Send private message

Behodar:

 

raytaylor: If the website provider says "we had a hacker or someone sharing music that came in from 100.101.102.103:14291" we can instantly say well thats customer ip address 100.101.102.103 - john doe from york street.

 

As an ISP you can do that, but I was using the perspective of a site owner. If I understand correctly, the only information I can get out of a CG-NAT IP address is the ISP that it's allocated to. Without actually contacting the ISP (which would presumably involve its own privacy policy etc) I can't get any end-user details out of a CG-NAT IP address. Please do correct me if I'm wrong!

 

 

Many businesses and other organisations have fixed IP addresses. Doing  reverse ip lookups, dns lookups and traceroutes returns a lot of information about who is at the other end. end users leave traces too which can be tracked. We got one guy who was attacking a business with DOS type spam attacks via his ip address as we then linked it to a post made in an online chat / BBS which had enough information to tie two data sets together. We contacted his isp - who told us he wasn't with them as they had banned him, then had to retract and recorrect as he was back online with them.

 

On its own an ip address doesn't tell much but if you add enough information from other sources it starts to add up - sometimes. Jo average home user not so much - unless they have kids playing online games and then the wealth of possible material increases.  Clients daughter getting some pretty nasty bullying anonymously online. We could trace an ip address but no idea who it was - until we sent an email to a likely source, with return receipt attached, and when it came back to us was could link the two - and deal with the parents and principle to get things stopped.

 

Generally dealing with a problem from a person you have to talk to the isp who owns the block and trust they will do their job. They wont however confirm if there is a person or what they do - seems to be a breach of privacy.

 

 

 

 

 

 

 

 


nunz
1423 posts

Uber Geek
Inactive user


  #2026275 31-May-2018 14:21
Send private message

gnfb:

 

I just went to a service called Docular after downloading there a plugin for Wordpress that suggested they would provide the means free of charge to create a relevant privacy policy for ones website, to make it GDPR compliant.

 

All is true BUT when you get to the interactive template you are presented with a myriad of options, choices, selections etc. 

 

I estimate it would take a month of Sundays to figure it out and find out what xyz means and what you put where etc.

 

Forget it! I am sure the academics and professionals will salivate at all the work. Meanwhile, Joe Bloggs doesn't stand a chance!

 

So

 

If whoever is running this show over in the EU decides that they are going come down on that little Wordpress site, in little old kiwi land, apparently you get a few chances to fix it before they hit you with big fines. 

 

I'm thinking if that is the case lets wait till they bark before I jump?

 

Just a side thought I wonder if its possible to somehow ban block etc the eu from the site and if one did that would that be a avoiding the need to comply with all this BS , sorry consumer and individual protection.?

 

Ok have at me.

 

 

 

 

Yes you can. There are databases of ip blocks tied to country codes, isps etc. Also there are tools that will track an ip address, check the route it took and then report back likely location based on routing via major international gateways. If someone is connecting to you and you don't know where they are from checking the path back useually leads to international gateways and those are a much smaller dataset to work with.

 

 

 

https://wordpress.org/plugins/ip-geo-block/

 

https://wordpress.org/plugins/iq-block-country/

 

https://www.sourcewp.com/best-wordpress-plugin-to-block-countries/

 

 

 

also Antispam Bee Plugin

 

You can also kill connections using .htaccess and country codes e.g. block .cn to block china.

 

 

 

Lastly - tool here to produce routing tables etc - to block traffic from certain countries.   https://www.ip2location.com/blockvisitorsbycountry.aspx

 

 


 
 
 
 


freitasm
BDFL - Memuneh
68798 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #2026350 31-May-2018 16:15
Send private message

Folks, this has gone completely off topic. Back to GDPR.





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Coinbase | TheMarket | My technology disclosure


premiumtouring
305 posts

Ultimate Geek


  #2039653 18-Jun-2018 13:07
Send private message

Click to see full size

 

http://www.gitlab.com

 

GitLab's Cookie Management interface is very cool!





Tesla Model S P100DL / Model 3: Feel free to private message me if you need advice buying an Electric Vehicle (EV).
If my advice has been helpful, or you just want free stuff with your purchase, use my referral link to buy your Tesla.


MikeAqua
6050 posts

Uber Geek


  #2039698 18-Jun-2018 13:31
Send private message

Nothing.  Our clients and providers are wholly within NZ.

 

I can't see how we would infringe and if we do the EU has no jurisdiction.





Mike


outdoorsnz
129 posts

Master Geek


  #2039891 18-Jun-2018 16:29
Send private message

Question I have on GDPR. I'm a website developer and maintain a website for a client. Advise client they need to add a privacy policy etc. Now if they do nothing, and the EU decided to fine. Who is liable?


nunz
1423 posts

Uber Geek
Inactive user


  #2040031 18-Jun-2018 20:59
Send private message

outdoorsnz:

 

Question I have on GDPR. I'm a website developer and maintain a website for a client. Advise client they need to add a privacy policy etc. Now if they do nothing, and the EU decided to fine. Who is liable?

 

 

Your client unless you contracted to add a gdpr policy and didn't do what you were contracted to do. Once the site is created - its all on them other than what you contract to do.

 

 

 

A good overview of what is required to be compliant is found here : https://www.hallaminternet.com/how-to-make-your-website-gdpr-compliant/

 

 

 

 

 

 


 
 
 
 


djtOtago
678 posts

Ultimate Geek

Subscriber

  #2040104 18-Jun-2018 22:58
Send private message

If a user asks for their details to be deleted, do you also have to delete it from all data backups as well?

 

 


MurrayM
1992 posts

Uber Geek


  #2040168 19-Jun-2018 08:19
Send private message

djtOtago:

 

If a user asks for their details to be deleted, do you also have to delete it from all data backups as well?

 

 

And do you have to provide any proof that you've deleted their data?


Behodar
7162 posts

Uber Geek

Trusted
Lifetime subscriber

  #2040171 19-Jun-2018 08:24
Send private message

MurrayM: And do you have to provide any proof that you've deleted their data?

 

 

I hope not, because you can't contact them if you've deleted their contact details!


freitasm
BDFL - Memuneh
68798 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #2040172 19-Jun-2018 08:26
Send private message

djtOtago:

 

If a user asks for their details to be deleted, do you also have to delete it from all data backups as well?

 

 

No, but you have to have assurances that there is a process in which at some point in the future these backups will disappear.





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Coinbase | TheMarket | My technology disclosure


1 | 2 | 3 | 4 
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic





News »

Nanoleaf enhances lighting line with launch of Triangles and Mini Triangles
Posted 17-Oct-2020 20:18


Synology unveils DS1621+ 
Posted 17-Oct-2020 20:12


Ingram Micro introduces FootfallCam to New Zealand channel
Posted 17-Oct-2020 20:06


Dropbox adopts Virtual First working policy
Posted 17-Oct-2020 19:47


OPPO announces Reno4 Series 5G line-up in NZ
Posted 16-Oct-2020 08:52


Microsoft Highway to a Hundred expands to Asia Pacific
Posted 14-Oct-2020 09:34


Spark turns on 5G in Auckland
Posted 14-Oct-2020 09:29


AMD Launches AMD Ryzen 5000 Series Desktop Processors
Posted 9-Oct-2020 10:13


Teletrac Navman launches integrated multi-camera solution for transport and logistics industry
Posted 8-Oct-2020 10:57


Farmside hits 10,000 RBI customers
Posted 7-Oct-2020 15:32


NordVPN starts deploying colocated servers
Posted 7-Oct-2020 09:00


Google introduces Nest Wifi routers in New Zealand
Posted 7-Oct-2020 05:00


Orcon to bundle Google Nest Wifi router with new accounts
Posted 7-Oct-2020 05:00


Epay and Centrapay partner to create digital gift cards
Posted 2-Oct-2020 17:34


Inseego launches 5G MiFi M2000 mobile hotspot
Posted 2-Oct-2020 14:53









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.