You’re conflating PII with personal data.

Is a medical condition not PII? Together with the fact that it's linked to a specific person, their tasks, responsibilities, mannerisms. Even an IP address is PII, not sure how a full chat log isn't, even if it's not text-book PII.

PII is not a thing under the GDPR. Like, at all. Personal data is. Personal data and PII are not the same thing.

Isn't any personal data a PII? You just need a couple of personal o enable t identify individual. And if this is in an org then amount of individuals is quite small, so sometimes it needs just one personal detail.

Read Article 4. "PII" is not a thing in the GDPR.

If you have dyslexia and I know it, that brings it down to 20% of people. Combined with some other data, this is a pretty good factor to narrow it down to "who you are", right?

Claude often addresses me by name in chats.

this guy GDPRs

> A non-zero amount of it is probably going directly to the AI companies through tokens...

Much the same way that VC money has been funnelled to Google and Meta through advertising budgets.

The fact one of the spyware cos was named after the fish that swims up your dick hole is too funny

Showing an advert is fine. A poster on a billboard is not deploying mass surveillance.

It's both, there is no mass advertising without mass surveillance.

No, it really isn’t.

Putting a static, printed poster on a wall is in no way analogous to surveillance.

Okay but my point wasn't about an advertisement or a poster on a wall, it was about advertisements on every blank surface, so I'm not sure your reply is relevent to what I said. If your point is just everything in moderation, I can agree with you, but we're well past the advertisers being moderate with what they're pushing.

> Wait what, so there is no content disarm between companies making ads, and the publishers? They can literally push whatever they want? Wild.

RTB (real-time bidding) does not incentivise publishers to care about what ads are actually being shown to individual users, so long as CPM is maximised.

> For example, if you want to track your maintenance calories (TDEE, total daily expenditure), Garmin isn't going to be much useful.

Why not?

It's not accurate for this.

You can't use a sensor and stack calorie burn from bunch of activities and add them all up to workout maintenance calories.

The sensorless method we use is more reliable, https://macrocodex.app/knowledge/rethink/adaptive-tdee/

You can see the reviews and guaranteed results within 2-3 weeks, all for free.

All of that data is on the device and can be copied as .FIT files. Some of the fields aren't publicly documented, though.

If there was a sane payment system for spotify it would be literally impossible for that to be the case.

As far as I know, the Braze/Snowflake integration is just to pull contact data and event feeds into Braze and to sync out performance data.

If they’ve gained access to Braze presumably they’ll have access to the contact db stored in there along with whatever other information is pushed in to support segmentation and personalisation but it’s definitely limited in scope vs just gaining access to their snowflake db.

This assumes they implemented things sanely with the db user for Braze having limited access rights…

I am genuinely impressed at the lack of tech literacy in the live feed about this from the beeb.

Yeah, I noticed they were recommending that users log in and reset their password - at a time when ASOS still hadn't said anything about the extent of the problem.

For all they knew, the attackers could have been able to subvert the reset process to collect plaintext passwords, so the Beeb's advice risked turning a disaster for ASOS into a catastrophe for their users.

I'm not sure who is recommending that, but if it is in the general channel it could be the proverbial bad guys making that recommendation in order to grab more account credentials.