BC TECH
Saved by @zmbnski

Recently, the @CNIL issued a decision regarding the GDPR compliance of an unknown French adtech company named "Vectaury". It may seem like small fry, but the decision has potential wide-ranging impacts for Google, the IAB framework, and today's adtech. It's thread time! 👇

 It's all in French, but if you're up for it you can read:
• Their blog post (lacks the most interesting details): https://t.co/PHkDcOT1hy
• Their high-level legal decision: https://t.co/hwpiEvjodt
• The full notification: https://t.co/QQB7rfynha

I've read it so you needn't!
Vectaury was collecting geolocation data in order to create profiles (eg. people who often go to this or that type of shop) so as to power ad targeting. They operate through embedded SDKs and ad bidding, making them invisible to users.
The @CNIL notes that profiling based off of geolocation presents particular risks since it reveals people's movements and habits. As risky, the processing requires consent — this will be the heart of their assessment.
Interesting point: they justify the decision in part because of how many people COULD be targeted in this way (rather than how many have — though they note that too). Because it's on a phone, and many have phones, it is considered large-scale processing no matter what.
Other factor: the technicity and opacity of ad bidding systems is used to justify greater transparency requirements. People cannot expect to consent to what they don't understand (or even know exist), therefore the adtech ecosystem is de facto under *stronger* requirements.
The decision also notes that the @CNIL is openly using this to inform not just the company in question but whole ecosystem, including adtech of course but also app makers who embed ads and marketers who use them. You're all on notice!
Note that there is no fine: if Vectaury remediates by 1) no longer processing geographic data without consent, 2) retroactively wiping the data they have (since consent was invalid), and 3) prove they've done that then they're good to go. Out of business, too, I would guess.
Fun fact: the @CNIL takes privacy seriously, and two years from now the Vectaury decision they have just made will be anonymised so that just the pure legal content remains.
Let's jump into the heart of it. The decision looked at two distinct but related aspects:

1) Consent obtained directly in apps that embed Vectaury as an SDK, using Vectaury's CMP (Consent Management Platform). You can see it in action in this video: https://t.co/LGOjNOD18d
2) Consent collected elsewhere and signalled to Vectaury through use of the @IABEurope Consent Framework.

Both are found to be failing — the second one in very interesting ways. Keep reading!
The CMP fails exactly as you would expect:

1) The consent is not informed;
2) The consent is not specific;
3) The consent is not affirmative.

Given the high-risk nature of the processing and its opacity, this isn't even a very strict interpretation.
Here is the bombshell though: Consent through the @IABEurope framework is inherently invalid. Not because of a technical detail. Not because of an implementation aspect that could be fixed. No.
You cannot pass consent to another controller through a contractual relationship. BOOM
Precisely: a controller has the obligation to demonstrate, for the entirety of the data they are processing under consent, the validity of the consent obtained. Otherwise you're just failing Article 7.

This is huge.
This means that if someone gains consent for you, and you have a contract saying it's their responsibility to do so, you *still* have the obligation to verify that the consent is valid.
This rules the @IABEurope out as an option, but more than that: @Google forced publishers to collect consent on its behalf for advertising profiling. They have said that they will audit that publishers do it right — but will auditing be enough?
The decision very specifically states the need to verify consent for the "entirety" of the data. By definition an auditing approach only does spot checking.

Also, Google has said they won't use a clear definition of valid consent. This shows they will have to.
So, yeah — that happened. It will be interesting to see how this lines up with @johnnyryan and @RaviNa1k's complaint about programmatic in terms of enforcement decision.
The one part that slightly disappoints me is that the decision does not call into question the role of Android and iOS in providing the ad ID and geolocation in the first place, as joint controllers, without proper consent.

That might be a fight for another day 😊🤗

More from Tech

Jason Kint
Jason Kint
@jason_kint
I could create an entire twitter feed of things Facebook has tried to cover up since 2015. Where do you want to start, Mark and Sheryl? https://t.co/1trgupQEH9


Ok, here. Just one of the 236 mentions of Facebook in the under read but incredibly important interim report from Parliament. ht @CommonsCMS https://t.co/gfhHCrOLeU


Let’s do another, this one to Senate Intel. Question: “Were you or CEO Mark Zuckerberg aware of the hiring of Joseph Chancellor?"
Answer "Facebook has over 30,000 employees. Senior management does not participate in day-today hiring decisions."


Or to @CommonsCMS: Question: "When did Mark Zuckerberg know about Cambridge Analytica?"
Answer: "He did not become aware of allegations CA may not have deleted data about FB users obtained through Dr. Kogan's app until March of 2018, when
these issues were raised in the media."


If you prefer visuals, watch this short clip after @IanCLucas rightly expresses concern about a Facebook exec failing to disclose info.
TECH
Zen Black
Zen Black
@z3nblack
1/ Thread: "A Silicon Valley Ponzi Scheme"

Thanks to @chamath for laying this out in Social Capital's 2018 annual letter.

I've always appreciated his outspokenness.

2/ The hardest thing for most startups today is the path to market: first finding product-market fit & a way to reach customers, then building a ruthless machine to acquire, monetize & retain them.

3/ Because of this, when the VC industry invests capital into fast growing startups today, the plurality (if not majority) of invested capital will go into user acquisition and ad spending, for better or worse— usually worse.

4/ Todays massive venture-backed advertising, sales, and user acquisition playbook has morphed into one that champions growth at any cost.

This is creating a big bill that will soon come due...

5/ Ad impressions and click-throughs are bid up to outrageous prices by startups flush with venture money, and prospective users demand more and more subsidized products to gain their initial attention.
TECH , STARTUPS , {TEST FOLDER}
Advertisement
Patrick McKenzie
Patrick McKenzie
@patio11
A thread on HN about bad code in legacy projects both makes me think how little we've learned as a discipline over the years and, honestly, how little credit we give ourselves for some pretty major

Fun going down this list and thinking: "Hmm, plausible at a well-run modern software shop", "Hmm, possible, but requires implausible tradeoffs", "Literally disallowed by languages", and "If you were to attempt doing that our test suite wouldn't let you merge."

I think we as an industry celebrate (not quite the right word) failure too much and don't celebrate success nearly enough. There is no DailyWTF for competent execution, word of which generally stays pretty local to the source while incompetence passes into legend.

Alrighty let me try to thread the needle on being the change I want to see in the world while not giving away anything that will get me in trouble:

Ruby has wonderful developer ergonomics. Typed languages are easier for machines to guarantee the correctness of. We built a type checker for Ruby (and I believe it is slated for OSS release sometime).

c.f.
TECH
Pete Savin
Pete Savin
@pete_savin
Wellcome to our virtual walk from Ambleside to Howtown on Lake Ullswater. I’ve based the route on #HadriansHighWay by @fellranger1 which he uses a variant to the main route. Books can be bought direct or through @VindolandaTrust


A view of #Ambleside from Wansfell our starting point in the heart of the #LakeDistrict @CumbriaMagazine


We can start at the roman fort at the edge of #Windermere. The Romans stated to push into the lakes in the early 90’s AD, this fort dates to the rebuild in Hadrian’s Reign possibly after warfare which brought about #HadriansWall #Ambleside


The #Ambleside posting wasn’t always a peaceful one as the gravestone in the @ArmittMuseum shows one man was killed “in the fort”


Time to leave and head out of town passing this scale model of the famous Bridge House in #Ambleside #virtualwalk
TECH
Tanay Jaipuria
Tanay Jaipuria
@tanayj
YouTube’s ad business is officially bigger than Netflix.

YouTube ads at ~$35B run-rate vs Netflix at ~$31B run-rate
TECH

You May Also Like

STEALTH JEFF
STEALTH JEFF
@drawandstrike
So it's now October 10, 2018 and....Rod Rosenstein is STILL not fired.

He's STILL in charge of the Mueller investigation.

He's STILL refusing to hand over the McCabe memos.

He's STILL holding up the declassification of the #SpyGate documents & their release to the public.

I love a good cover story.......

The guy had a face-to-face with El Grande Trumpo himself on Air Force One just 2 days ago. Inside just about the most secure SCIF in the world.

And Trump came out of AF1 and gave ol' Rod a big thumbs up!

And so we're right back to 'that dirty rat Rosenstein!' 2 days later.

At this point it's clear some members of Congress are either in on this and helping the cover story or they haven't got a clue and are out in the cold.

Note the conflicting stories about 'Rosenstein cancelled meeting with Congress on Oct 11!"

First, rumors surfaced of a scheduled meeting on Oct. 11 between Rosenstein & members of Congress, and Rosenstein just cancelled it.
ALL
Kestrel \u2664 lwj kin
Kestrel ♤ lwj kin
@slutxian
MDZS is laden with buddhist references. As a South Asian person, and history buff, it is so interesting to see how Buddhism, which originated from India, migrated, flourished & changed in the context of China. Here's some research (🙏🏼 @starkjeon for CN insight + citations)

1. LWJ’s sword Bichen ‘is likely an abbreviation for the term 躲避红尘 (duǒ bì hóng chén), which can be translated as such: 躲避: shunning or hiding away from 红尘 (worldly affairs; which is a buddhist teaching.) (https://t.co/zF65W3roJe) (abbrev. TWX)

2. Sandu (三 毒), Jiang Cheng’s sword, refers to the three poisons (triviṣa) in Buddhism; desire (kāma-taṇhā), delusion (bhava-taṇhā) and hatred (vibhava-taṇhā).

These 3 poisons represent the roots of craving (tanha) and are the cause of Dukkha (suffering, pain) and thus result in rebirth.

Interesting that MXTX used this name for one of the characters who suffers, arguably, the worst of these three emotions.

3. The Qian kun purse “乾坤袋 (qián kūn dài) – can be called “Heaven and Earth” Pouch. In Buddhism, Maitreya (मैत्रेय) owns this to store items. It was believed that there was a mythical space inside the bag that could absorb the world.” (TWX)
RELIGION
Advertisement
GREG ISENBERG
GREG ISENBERG
@gregisenberg
Life is crazy. Today is a good day to stop and reflect

10 simple questions that CHANGED my life

(startup life, personal life)

Here they are:

Q: Can you really control that?

Smart people know what they can and cannot control

If you're living in the past, you're nostalgic
If you're living in the future, you're anxious
If you're living in the present, you're at peace

Q: Did you start today with a victory?

Starting every day with a victory sets you up to win

I don't care what it is:

- Make your bed
- Make a wonderful coffee
- Hug your wife or children

No such thing as a small win. It's a win!

You'll win more, if you start winning early

Q: What are you optimizing for?

#MFSA
1. Money
2. Freedom
3. Stability
4. Ability

The world rewards those who are focused

Perfectly prioritize

Are you being optimistic?

Guaranteed: more luck when you're optimistic
ALL , GENERAL
Lumina\u2728
Lumina✨
@Anaphora_Lumina
I present to you all, my (possibly) superthread On how and why the Unknown God from Genshin Impact, and The Herrscher of Void/God Kiana/Sirin from Honkai Impact!

First off! We’ll start with the obvious things that constitute a possible connection.

They share the same Japanese Voice actress! Rie Kugimiya.
Usually this is a stretch reason, but considering everything else, it’s not unlikely that it’s the same character.

Secondly, their Appearances.
The both have very long white hair with identical bang style, and a very noticeable small piece of hair on top that curls upwards. That’s a defining part Of all of Kiana’s hairstyles, and for it to be shared with this god says something.


Another notable thing is their eyes. They both have Glowing golden eyes with very similar appearances. They contain a ring, and a 4-point star pupil. Resemblant of a scope if you will. That’s The Herrscher of Void’s defining characteristic


If you’d even like to take a look at their outfits, there’s resemblances including the black fur collar, the designs on the torso and chest, and the use of something similar to coat tails/skirt. The Herrscher can change their outfit and they aren’t stuck with one. Sirin does this
CULTURE
Fidato
Fidato
@tequieremos
A thread on the life and achievements of Muhiyudin Sayyid Abdul Qadir Jillani RadiAllah who served Islam infinitely as the Reviver (Mujadid) of the 11th Century!


Muhiyudin Sayyid Abdul Qadir Jilani (RA) was one of the greatest Islamic Saint, Scholar, and Jurist. The honorific Muhiyudin denotes his status with many Sufis as a "reviver of religion". Jilani refers to his place of birth. He also carried the epithet Baghdadi.

[1]

Sheikh Abdul Qadir Jilani was born on the eve of the 2nd of Ramadan 470 AH. His birth was a great blessing for the Ummah. It was the arrival of the Sultan al-Awliya (King of the Awliya) of that era, which had been foretold for centuries before his birth.

[2]

When Hazrat Abdul Qadir Jillani was asked by someone what brought him to his high spiritual level, he said, The truthfulness which I promised to my mother. He related the following story:
"One day, on the eve of Eid al-Adhā, I went to my mother, who was then a widow and..

[3]

..and requested her, 'Send me to the path of Truth, give me permission to go to Baghdad to acquire knowledge, to be with the wise and those who are close to Allah. She cried, but she brought out 80 pieces of gold, which was all that my father had left as inheritance.

[4]
RELIGION