Screen name.

Message boards : Questions and problems : Screen name.
Message board moderation

To post messages, you must log in.

1 · 2 · Next

AuthorMessage
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 91313 - Posted: 1 May 2019, 8:52:29 UTC

I subscribed to a fairly new BOINC project called BOINC@TACC run by the University of Texas. I did so using my normal BOINC account name, and on their pages, my name appears as expected. I posted a "ready and waiting" type mail on their message board, but saw that rather than my name showing as the poster, a hash "nhSt38uMYu" appeared. I queried this and was told that it had been done in order to comply with GDPR rules. I could change it, but that required me to mail my requirement to an address. The next day, it was done, and my post has my name against it.

I suspect other projects might start to do this, when they notice it. I think a BOINC wide opt in or out, whatever, might be worth considering.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 91313 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5077
United Kingdom
Message 91314 - Posted: 1 May 2019, 9:11:49 UTC - in response to Message 91313.  

Since Texas isn't a member of the European Union, I suspect their lawyers have failed to fully comprehend the GDPR.
ID: 91314 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 91315 - Posted: 1 May 2019, 9:13:44 UTC
Last modified: 1 May 2019, 9:14:50 UTC

Quite possibly true, but there are European projects. There are European crunchers at non European projects also, potential issues arise.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 91315 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5077
United Kingdom
Message 91316 - Posted: 1 May 2019, 9:28:15 UTC - in response to Message 91315.  

A lot of work was done around this time last year to make the core BOINC code GDPR-compliant. The main problems were to do with getting informed user consent for the storage and display of their personal information; informed consent for the transfer of that personal information to third parties (external stats sites); and implementing the 'right to be forgotten' (ability to delete accounts).

I don't remember giving you a random name being part of the process, let alone taking away your ability to change it unilaterally. Just be grateful that you are not a number.
ID: 91316 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 91317 - Posted: 1 May 2019, 9:31:59 UTC
Last modified: 1 May 2019, 9:35:53 UTC

"I am not a number - I am a free man" said number 6.

<edit>
Assuming you are old enough to remember "The Prisoner" with Patrick McGoohan.
</edit>
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 91317 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5077
United Kingdom
Message 91318 - Posted: 1 May 2019, 10:06:41 UTC - in response to Message 91317.  

That was the reference, yes. I was never a real fan, but I was around when it was broadcast and saw some of the episodes.
ID: 91318 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 91319 - Posted: 1 May 2019, 11:36:11 UTC
Last modified: 1 May 2019, 11:38:55 UTC

I quite liked The Prisoner. Number 2's never seem to last long.

I'll pass on your thoughts. It is up to them what they do, if anything. Is there a url I can point them at where this sort of thing is explained? (They are American...)
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 91319 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5077
United Kingdom
Message 91321 - Posted: 1 May 2019, 12:44:56 UTC - in response to Message 91319.  

I'm slightly surprised that TACC are out of the loop on this, because they were one of the co-sponsors with David Anderson of his new Science United proposal.

Legal advice on GDPR was a bit of a last-minute scramble, and multiple sources were used. The lead people for BOINC were Kevin Reed of WCG (outside the EU, but advised by IBM); Oliver Behnke of Einstein (inside EU, at least the German part); and Laurence Field of CERN (straddling the EU border!). But I'm not sure if their accumulated wisdom has been gathered together into an easy reference document. I should be speaking with at least two of those people tomorrow evening, and I'll ask.

It might also be worth mentioning to TACC that there is a relatively new provision of a 'server stable' release version of the BOINC server code, currently accessible by cloning the 'Server_release/1.0/1.0.4' tag in the BOINC github repository. The server release was last updated on 6 March 2019, so it should include all the GDPR-related changes from last year.
ID: 91321 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 91322 - Posted: 1 May 2019, 13:17:13 UTC

I've posted in the thread we were using over there, and included a link back to the thread here should they wish to have a look.

Thanks Richard.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 91322 · Report as offensive
robsmith
Volunteer tester
Help desk expert

Send message
Joined: 25 May 09
Posts: 1283
United Kingdom
Message 91331 - Posted: 1 May 2019, 19:12:50 UTC

Further to Richard's comments - one of the lesser known provisions of GDPR is that users have the right to readily and freely change their displayed name to one of their choosing, and that forcing their choice of name is probably contrary to that requirement. There are certain constraints on this freedom, the most obvious being where the user's chosen name is used to identify that user within the system - as far as I'm aware all BOINC based systems use the unique user identifier internally, with the user display name being just that - a display name not an identifier.
ID: 91331 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 91338 - Posted: 2 May 2019, 7:00:47 UTC
Last modified: 2 May 2019, 7:01:40 UTC

I just looked at my commuinty preferences here, and could not see a screen name modification tool. I have no wish to change it, but if that is the case, perhaps the method for changing it should be available here. Someone is bound to want it.

It is a bit dubious actually, a person can change their name after making a remark, and thus appear to be someone else.

Bit of a mess these rules...
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 91338 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15477
Netherlands
Message 91339 - Posted: 2 May 2019, 7:10:15 UTC - in response to Message 91338.  

Account > Other account info will allow you to change your screen name.
ID: 91339 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 91341 - Posted: 2 May 2019, 7:59:48 UTC - in response to Message 91339.  

Yes, it is there, I stand corrected, thanks.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 91341 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5077
United Kingdom
Message 91351 - Posted: 2 May 2019, 18:55:32 UTC

I asked on the contributors' call, but we haven't got anything else to suggest. The GDPR is new, complex, law, and will only be fully defined when the first few test cases have been determined by a Court. Until then, amateur interpretations which turn out to be wrong might establish the wrong sort of liability...

TACC identifies itself on its website as an offshoot of the University of Texas: universities in general have well established legal offices in their administrative structures. Might be best to ask for help there.
ID: 91351 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 91367 - Posted: 3 May 2019, 20:14:46 UTC - in response to Message 91351.  

I've passed on comments from here and the url of the thread. It certainly appears to be a miss reading of the laws, or, given the complexity of them, an "overly caustious" approach. At the end of the day, the "issues" are pretty trivial.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 91367 · Report as offensive
Bill Michael

Send message
Joined: 7 May 19
Posts: 3
United States
Message 91409 - Posted: 7 May 2019, 2:19:46 UTC - in response to Message 91367.  

I've been "bit" by this compliance thing at a couple of sites that suddenly stopped exporting my data. I'm all for making SOMETHING BOINC-wide, which it seems has been done, instead of the current every-site-does-their-own-thing approach. It would be VERY nice if someone - perhaps from the DOJ - would issue a simple opinion that a web site hosted entirely OUTSIDE the GDPR region has no responsibility to care what the heck they do there. The TACC thing is especially annoying as both they and I are in TEXAS, which as has been mentioned, isn't part of the EU... If GDPR applied everywhere, every single web site in the world would either have to comply or (my preference) refuse to accept any accounts from anyone identifying as being in the EU. I'm ignoring it on my own site - if anyone ever loses a legal case on it, my fix will be to delete all accounts from anyone in the EU. If every web site would do that, these countries that try to "regulate the internet" would have some pushback.
ID: 91409 · Report as offensive
Profile Gary Charpentier
Avatar

Send message
Joined: 23 Feb 08
Posts: 2462
United States
Message 91414 - Posted: 7 May 2019, 6:23:05 UTC - in response to Message 91409.  

Bill, it is easy for a small site non-EU to say F it for the GDPR, but any company of any size that thinks it might want customers in the EU, simply can't as a practice not do business with the EU. The issue may be worse if your website provider does business in the EU and perhaps unbeknownst to you your site is actually on a computer in a co-location site inside the EU. I would suggest for small personal micro sites to simply not collect any PII so that the GDPR does not apply. OBW California is considering a GDPR like bill which has been unanimously reported out of committee so it may soon apply to you, like it or not.

I understand wanting a BOINC wide switch to show info to stats sites, but unfortunately GDPR was written to apply on a site by site basis and does not know about multi-site DC.
ID: 91414 · Report as offensive
robsmith
Volunteer tester
Help desk expert

Send message
Joined: 25 May 09
Posts: 1283
United Kingdom
Message 91415 - Posted: 7 May 2019, 6:39:35 UTC

...particularly where those sites and users are spread over a large number of servers in a large number of countries.
Also, as each project is administratively independent of BOINC it is the responsibility of each individual project administrator to ensure their appropriate level of compliance, not that of BOINC, which in itself does nothing apart from co-ordinating the processing on the users' computers, and as far as the projects are concerned they do not have a "direct connection" with "BOINC Central".
The only part of "BOINC Central" that has any need to consider the implications of GDPR are these forum.
ID: 91415 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15477
Netherlands
Message 91417 - Posted: 7 May 2019, 7:06:11 UTC - in response to Message 91415.  

As far as I know, these forums don't have a GDPR compliance policy, since they run from a Berkeley server.
ID: 91417 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 91419 - Posted: 7 May 2019, 8:45:22 UTC

I read somwhere yesterday, that California is considering similar laws.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 91419 · Report as offensive
1 · 2 · Next

Message boards : Questions and problems : Screen name.

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.