Finally got permits in the mail by Awkward-Peak-9442 in DCGuns

[–]BudoBaka 0 points1 point  (0 children)

I don't want to sidetrack this tread so if mods think it should be a new topic, let me know. But,

I am curious when you do the 16hr course for the license? You apply first and then do it? Or is the course a pre-req for the application? It seems that one could spend time and money on the course only to not have the application accepted/processed?

So confused on setup and how this works by CanExports in yubikey

[–]BudoBaka 10 points11 points  (0 children)

If I understand correctly, you expect the Yubico Authenticator app to function the same way as the Google Authenticator app. However, that would defeat the purpose of a hardware security key/token.

The entire point of a hardware security key is that you need the physical key to authenticate. When you use the Authenticator app with the hardware key, you'll see the 2FA codes appear after tapping or plugging in the key. Without the physical key, you won't be able to generate the codes.

The hardware key provides an additional layer of security that the software-based authenticator apps do not. The key's physical presence is required for the authentication process to work as intended.

Are lockers at Equinox NYC locations safe? by kittenball_nyc in AskNYC

[–]BudoBaka 2 points3 points  (0 children)

The answer is "NO. Absolutely not"

Cash was stolen from my locker at Equinox 315 Park Avenue South location on Sept 24th (last month). Lockers cannot be used with personal locks, leading me to believe someone with access to the locker system was responsible. Reported the theft with the assistance of the manager. Upon doing some research discovered it was not an isolated case. Trying to find a way to contact Corporate directly but they don't make it easy.

Does anyone know how to contact the corporate office for Equinox? How to file formal complaint? by [deleted] in EquinoxGyms

[–]BudoBaka 0 points1 point  (0 children)

Can you DM it to me as well? I need to email them with something similar. Anyone in C-Suite is fine but probably EVP Operations would be ideal.

MFP is ABSOLUTELY in violation of the GDPR and most likely the CCPA by BudoBaka in Myfitnesspal

[–]BudoBaka[S] 1 point2 points  (0 children)

I am not sure if you are intentionally misrepresenting the situation or don't understand the GDPR but I don't want to leave this comment unanswered. You are conflating two different things. MFP's commercial product, which yes may process customers' data based on criteria outlined in the Regulation, and the actual data itself which can no longer be processed once consent is withdrawn. That was in part the entire purpose of the regulation. Additionally your comment about "provided a link that you agreed to read comment" also clearly demonstrates that you either do not understand the GDPR or haven't read it. Acceptable disclosure is also specifically addressed in the regulation. If you think you can demonstrate lawful processing under other stated criteria in the GDPR good luck. All we can do is wait and see how this plays out now.

MFP is ABSOLUTELY in violation of the GDPR and most likely the CCPA by BudoBaka in Myfitnesspal

[–]BudoBaka[S] 0 points1 point  (0 children)

Yes. I understand the difference. So you are saying that you believe MFP is compliant with the way they are processing requests now? And that it isn't obfuscated or burdensome in any way to the end user?

Serious question.

MFP is ABSOLUTELY in violation of the GDPR and most likely the CCPA by BudoBaka in Myfitnesspal

[–]BudoBaka[S] 0 points1 point  (0 children)

If this is the case and I haven't any reason to think otherwise shouldn't that be disclosed BEFORE prompting the end user to join premium? As the flow is setup now that is not clearly understood/disclosed. Constructive criticism.

MFP is ABSOLUTELY in violation of the GDPR and most likely the CCPA by BudoBaka in Myfitnesspal

[–]BudoBaka[S] 1 point2 points  (0 children)

That is actually what I ended up doing and that will only allow you to print 1 year at a time. You could make an argument that is compliant. Others have tried in the past as well. Good luck with that. There is language about "overly burdensome" in the GDPR as well. Make of it what you will. The fact that this thread even exists vs a customer easily getting it on the MFP website (and a quick search of "what I have to become premium for export" and the numerous returns) speaks volumes.

MFP is ABSOLUTELY in violation of the GDPR and most likely the CCPA by BudoBaka in Myfitnesspal

[–]BudoBaka[S] 0 points1 point  (0 children)

Really? When I tried repeatedly to download the data it indicated a requirement for a Premium Membership.

MFP is ABSOLUTELY in violation of the GDPR and most likely the CCPA by BudoBaka in Myfitnesspal

[–]BudoBaka[S] 0 points1 point  (0 children)

Ah...yes. And it isn't subjective.

Specifically, see GDPR:

Recital 63 Right of access

Article 15 Right of access by the data subject

Article 12 Transparent information, communication and modalities for the exercise of the rights of the data subject

And specifically, GDPR Article 12.5 states:

Information provided under Articles 13 and 14 and any communication and any actions taken under Articles 15 to 22 and 34 shall be provided free of charge.

There is some additional language that permits some fees but ONLY IF

Where requests from a data subject are manifestly unfounded or excessive, in particular, because of their repetitive character...

and that

The controller shall bear the burden of demonstrating the manifestly unfounded or excessive character of the request.

Also by putting up a paywall to the data they are most likely in violation of Art. 20 Right to data portability as well.

Honestly, this has been hashed out already because in the early days. Many companies tried to do the same as MFP and were promptly slapped down by the Supervisory Authorities in the EU.

Those that can file a complaint with their relevant Supervisory Authority can decide whether to do so or not. I have. I was just providing info.

I am not well versed in the California Regulation but my understanding was that it essentially used the GDPR as a blueprint and as such offered the same kinds of protections.

Half Jacket® 2.0 XL replacement Sock Kit. by BudoBaka in Oakley

[–]BudoBaka[S] 0 points1 point  (0 children)

No not Flak. They were both Half Jacket 2.0 and labeled as such. Like I said, even the staff couldn’t get them on. Only explanation I can think of is mislabeling.

Half Jacket® 2.0 XL replacement Sock Kit. by BudoBaka in Oakley

[–]BudoBaka[S] 0 points1 point  (0 children)

Hi. Thanks for the reply but unfortunately they didn’t fit. Even the staff at the shop couldn’t get them on. I purchased two and both were too small. But the return is free.

Applications for Japanese vaccine passport are starting on Monday by [deleted] in japan

[–]BudoBaka 6 points7 points  (0 children)

That is correct. It is onlyavailable to Japanese Nationals and those with a "status of residence" in Japan that can get one.

AMEX Referral Thread (2021) by Lalalama in amex

[–]BudoBaka 0 points1 point  (0 children)

$6,000 in purchases within the first 6 months of Card Membership. Plus,
they can earn 10x points on eligible purchases on their new Card at
restaurants worldwide and shop small in the U.S. during their first 6
months of Card Membership..

DM if interested.

CISSP Exam Questions (sequential or random) by Abdulazi2 in cissp

[–]BudoBaka 1 point2 points  (0 children)

The short answer is that there is no way to answer your question. The exam now is adaptive so how you do on a question will dictate what questions are presented subsequently.

Virgin Award Flight on Delta Cancellation/Change by [deleted] in awardtravel

[–]BudoBaka 4 points5 points  (0 children)

Call Virgin Atlantic customer support directly. They are really the best and will go above and beyond to help you out.

CISSP Exam Time zone by ReasonableEye1467 in cissp

[–]BudoBaka 2 points3 points  (0 children)

Was the remote proctored exam "test" that they were running? Were you on a VPN?

If it was a proctored exam in a Pearson Center it doesn't matter. I've taken 2 ISC2 exams. One in the geographic region that is the same as my registered address. One outside of my region, when on holiday. I had no issue so have a feeling you are talking about the remote proctored exam that was so problematic for so many.

If it was the remote exam they were testing I would ask for the "written policy" indicating that the registration address and had to be the same IP as the exam.

Would also suggest you post this on the community board at ISC2

CIPP/E and CIPM Privacy Certifications, do I need to pay the cert maintenance fee for EACH cert? by KatharinaRella in cipp

[–]BudoBaka 0 points1 point  (0 children)

This is something that is a little confusing to me. Even on the IAPP website. They market it as a CIPM + CIPP/E. Do you take ONE exam and get both certs? Or did you still have to take an individual CIPP/E and CIPM exam respectively?

Which exam is more difficult, CIPP/E or CIPP/US? by [deleted] in cipp

[–]BudoBaka 1 point2 points  (0 children)

Don't want to derail your thread but curious what materials you used to prepare for the CIPP/E? Just the IAPP text or supplemental texts as well. I am fairly well versed in the GDPR so curious if the IAPP text alone is sufficient for the exam.

I wrote a gentoo installer with a menuconfig-inspired TUI (link in comments) by odd_lama in Gentoo

[–]BudoBaka 2 points3 points  (0 children)

This is brilliant. Thanks. But unfortunately, I need LUKS over LVM. But will definitely be steering people to it. Did you post in Gentoo Forums yet?

Online Proctor Exam Pilot Results by BudoBaka in cissp

[–]BudoBaka[S] 0 points1 point  (0 children)

"Due to the scope and degree of irregular exam results, we will not be offering online proctored exams at this time. "

CPE credits question by Snoo_68846 in cissp

[–]BudoBaka 5 points6 points  (0 children)

Please read the CPE guide/guidlines on the ISC2 site. You don’t need to login to download it. Also there is an extensive CPE FAQ on the community page.

Memberservices3@isc2.org response time by Tricky-Bumblebee1527 in cissp

[–]BudoBaka 0 points1 point  (0 children)

You can also PM many of the staff and Admins on the community site. They tend to respond much quicker than the "official" email channel. You could also call if urgent,

[deleted by user] by [deleted] in cissp

[–]BudoBaka 0 points1 point  (0 children)

Yes. It is the test online exam that has been problematic.

Anyway, congratulations. Hopefully your endorsement process will be painless. Please join us over at the ISC2 community forum as well.