ciferecaNinjo

joined 2 years ago
 

Wow, so that’s bizarre. I wonder why the French DPA would think it’s okay to force customers to reveal their gender. Luckily the CJEU overruled them and made it right in the end. But of course it’s still disturbing when a DPA is working against privacy rights.

 

I just heard from someone who tried to deposit €50 in cash into his Belgian bank account. The bank refused to accept the deposit unless he could prove the source of the money.

Indeed.. on a desposit as small as €50. The guy didn’t say where it came from but such small amount could have come in a card as a birthday gift.

Grannies: before putting money in grandkids birthday cards, visit your local notaire and give a sworn testimoney as to where the money came from, get it notorized, and include that with the cash.

The war on cash (thus privacy) has really made some headway in Belgium.

 

wtf.. we cannot simply do an NS lookup in Belgium?

$ dig @"$(tor-resolve resolver1.opendns.com)" -t ns -q europeangreens-eu.mail.protection.outlook.com +tcp +nocomments +nostats +nosearch +noclass +dnssec +noauth +noquestion +nocmd

europeangreens-eu.mail.protection.outlook.com. 0 TXT "Effective April 11, 2025: Due to a court order in Belgium requiring the implementation of blocking measures to prevent access within Belgium to certain domains, the OpenDNS service is not currently available to users in Belgium"

Update

Seems relevant:

Belgian Constitution Article 25:
The press is free; censorship can never be introduced; no security can be demanded from authors, publishers or printers. When the author is known and resident in Belgium, neither the publisher, the printer nor the distributor can be prosecuted.

 

Many member states a daft when it comes to GDPR enforcement. But there are an exceptional few member states that have a Data Protection Authority that actually does their job. E.g., in principle, I might want to file all Article 77 complaints in Norway. Of course, without living there and having no transaction there, it’s outside of the jurisdiction. OTOH, what happens when a company like Microsoft or Google abuses your data and violates the GDPR? I think MS has headquarters in multiple countries: France, Finland, Spain, Norway, Germany, etc. If I have zero confidence in the DPA for the country I am in, can it be effective to direct the GDPR to a another country if MS has a headquarters there? Is there a heirchy of headquarters whereby an ultimate top level headquarters where a corporation is most relevant?

 

Many member states a daft when it comes to GDPR enforcement. But there are an exceptional few member states that have a Data Protection Authority that actually does their job. E.g., in principle, I might want to file all Article 77 complaints in Norway. Of course, without living there and having no transaction there, it’s outside of the jurisdiction.

OTOH, what happens when a company like Microsoft or Google abuses your data and violates the GDPR? I think MS has headquarters in multiple countries: France, Finland, Spain, Norway, Germany, etc. If I have zero confidence in the DPA for the country I am in, can it be effective to direct the GDPR to a another country if MS has a headquarters there?

Is there a heirchy of headquarters whereby an ultimate top level headquarters where a corporation is most relevant?

 

I asked for a sheet of national stamps. They gave me prior stamps which do not have “prior” printed on them. Price was high, but I just figured the postage rates are jumping leaps and bounds. It turns out a circled 1 “①” is apparently a priority indicator.

Just a heads-up.. watch out for that. The normal stamps come in a sheet of 10 and I think it’s the head of a prime minister on those things.

 

“The state of government open data across the globe in 2015”

^ ok, bit old. But still, I’m surprised. Maybe Mexico does well on the basis of not having much data to share.

 

Intro:

“From 1 May, stricter rules on rents apply in the Brussels region. Electrical appliances including dishwashers and laptops will also have to display a repairability score. These and other changes are introduced on Mayday.…”

More info on the repairability index here. IMO this is extremely slow progress. It’s barely a drop in the ocean of what we need for rights to repair.

[–] ciferecaNinjo@fedia.io 1 points 2 months ago (1 children)

I appreciate the insight. My other speculation was that it was an anti-spam tactic.

In Belgium residents can post a sign/sticker saying /no pub/ and by law it must be complied with, but there is no enforcement and not much compliance. Unlike Switzerland, who charges people to opt-out of ads but then diligently fines violators.

 
  1. Grab a Super+ loyalty card leaflet + card.
  2. Lift the card just enough to reveal the barcode and scan the barcode; OR alternatively lift it a little more to reveal the digits and photograph them when no one is looking of course… and leave it on the top of the stack. Otherwise bring the leaflet home.
  3. From home, run these commands on your Debian machine:
$ sudo aptitude install barcode; # or use apt if you prefer
$ barcode -b "$delhaize_barcode" -e upc -E -p A8 | epstopdf --filter > /tmp/delhaize_super+.pdf; # where "$delhaize_barcode" is the unique 12-digit code you grabbed.
$ sudo adb start-server; # if this fails, skip the next 2 commands. Otherwise connect your phone to the Debian machine over USB before the next step
$ adb shell mkdir storage/sdcard1/my_disloyalty_cards
$ adb push /tmp/delhaize_super+.pdf storage/sdcard1/my_disloyalty_cards/
  1. If you took the leaflet and card home, then your final step is to return to Delhaize and sneak it onto the top of the pile. Eventually someone else will take the card home and activate it by registering it in their name.

No worries if the last 3 “adb” developer commands fail. They will likely fail for most people. The commands can be substituted with however you would transfer the PDF from your PC to your phone.

The barcode should be immediately scannable but it may not have effect until the next poor sucker installs Delhaize’s shitty proprietary closed-source app and registers the card in their name. Thereafter you should get the instant discounts on what you buy but obviously any points accumulation will go to your surrogate. Sure, you could probably exploit the points too but don’t be evil. Your surrogate is your friend. Fair enough that they get the points credit.

Mods

The barcode will not have the exact same cosmetic style as the card (the leading and checksum digits are visually offset). If you care about this, you could:

  • Add the -n option to the barcode command to omit the digits, then use ImageMagick or GIMP to insert the digits below the barcode; or
  • Use LaTeX to generate the barcode. I’m not sure how to generate a “UPC A” barcode in LaTeX but you likely have complete control over the format

You could pass the -t option to the barcode command to print many copies on a page of sticky labels to give to give to family/friends/colleagues. Those stickers could be put over top of barcodes on other cards which no one activates.

Unworkable shortcut

Theoretically you could simply scan the barcode and use the same barcode app to generate a UPC-A barcode. My app detects the barcode as UPC_A and correctly decodes it, but when the app tries to re-encode the digits into UPC-A it produces a 2D barcode (like a QR). I doubt that works because the cashier’s scanner is likely only for 1D linear codes.

Perhaps other apps can do this correctly.

Notes

The Delhaize barcodes do not seem to start with a “2”, which seems questionable because a 2 normally indicates internal use. So does Delhaize run the risk that their loyalty cards clash with UPCs of actual products? Maybe they actually legitimately bought a range of product codes for memberships but seems like a waste of money.

UPDATE - Why I’ve decided not to do this

It has come to my attention that loyalty customers who run the app have access to their own shopping history. At the same time, couples often share an account and see each others purchases. So consider this scenario:

Bob and Alice are a non-drinking couple, but Bob had a drinking problem historically. Suppose he is on the wagon. If suragate Mallory buys alcohol, Alice will think that Bob is sneaking alchohol which would lead to confusion and misery. Mallory could avoid buying things like alcohol and tobacco, but there is also the problem that Alice or Bob could be using the receipts for accounting and bookkeeping.

Since there are unpredictable problems with this, I think this anti-surveillance advertising move should not be used.

[–] ciferecaNinjo@fedia.io 2 points 2 months ago

Considering your apparent adversity to surveillance advertising US tech giants, it’s a bit of a surprise that you would consider using ItsMe, a service that forces you to trust Cloudflare and be subject to Cloudflare’s bullying, oversight and access restrictions. There is no way to use ItsMe without letting Cloudflare see your sensitive data.

That said, I do not know the answer to your question because I would never even try to use ItsMe in the very least because of it’s hostility toward tor users.

[–] ciferecaNinjo@fedia.io 1 points 2 months ago (2 children)

Thanks for the tip! But I’m a bit confused about what that place is. The pic on the landing page is certainly what I am after but I think that's just a recipe site, not a shop. I see no address and openstreetmaps does not have a shop by that name in Amsterdam.

[–] ciferecaNinjo@fedia.io 1 points 2 months ago

Glad to hear you can help drive that from the EU side. Until then, I will continue sending paper correspondence. It would help if more people would insist on paper correspondence to create a bit of motivation.

[–] ciferecaNinjo@fedia.io 1 points 2 months ago

I don't know of any such law or even which organization would be able to make such a law.

Regulation (EU) 2021/1230 covers ATMs to some extent. I think there was a law even broader than EU law but I’ve lost track of it -- or just have a bad memory.

(found the bit about receipts being required)

Article 4
Currency conversion charges related to card-based transactions

  1. With regard to the information requirements on currency conversion charges and the applicable exchange rate, as set out in Article 45(1), Article 52, point (3), and Article 59(2) of Directive (EU) 2015/2366, payment service providers and parties providing currency conversion services at an automated teller machine (ATM) or at the point of sale, as referred to in Article 59(2) of that Directive, shall express the total currency conversion charges as a percentage mark-up over the latest available euro foreign exchange reference rates issued by the European Central Bank (ECB). That mark-up shall be disclosed to the payer prior to the initiation of the payment transaction.
  2. Payment service providers shall also make the mark-up referred to in paragraph 1 public in a comprehensible and easily accessible manner on a broadly available and easily accessible electronic platform.
  3. In addition to the information referred to in paragraph 1, a party providing a currency conversion service at an ATM or at the point of sale shall provide the payer with the following information prior to the initiation of the payment transaction: (a) the amount to be paid to the payee in the currency used by the payee; (b) the amount to be paid by the payer in the currency of the payer’s account.
  4. A party providing currency conversion services at an ATM or at the point of sale shall clearly display the information referred to in paragraph 1 at the ATM or at the point of sale. Prior to the initiation of the payment transaction, that party shall also inform the payer of the possibility of paying in the currency used by the payee and having the currency conversion subsequently performed by the payer’s payment service provider. The information referred to in paragraphs 1 and 3 shall also be made available to the payer on a durable medium following the initiation of the payment transaction.

….

What I find shitty about this wording is it’s unclear if the receipt is only required in the case of currency conversion by the ATM. Apparently yes.. apparently if DCC is not offered the the ATM is off the hook for giving a receipt. Several ATMs did not have DCC, but the machie that did not even have a receipt printer offered a DCC option, which seems to be illegal.

Fee structure is indeed extremely intransparent in most cases. Generally, I have too look up ATM fees in my online banking access and I never know them beforehand. Iiuc, your bank and the ATM-operating bank roll the dice to find out the fees they each want to charge as part of the process of handing out your cash anyway.

The fee structure is indeed very well concealed. Before approaching an ATM the fees are undisclosed and many ATMs demand your PIN as the very 1st step. It’s a shit show for sure. But at least they must inform you of fees before you commit to the transaction, per 2021/1230.

In any case, no store wants to receive notes above €100 because politicians and media have successfully created mental associations between those notes and money laundry/corruption/organized crime.

Yeah I heard Germany has no cash acceptance obligation whatsoever, which by extension supports your narrative that they can be fussy about banknotes, as in France.

This contrasts with Belgium where brick and mortar merchants must accept banknotes. They can reject money that is disportionately sized if they want. E.g. they can reject a €200 note on a transaction of €20 but not on a transaction of €175. Or they can reject a shit ton of coins on a 3+ figure transaction.

[–] ciferecaNinjo@fedia.io 1 points 2 months ago

I would say mostly true. And that much is driven by Regulation (EU) 2021/1230. If an ATM offers DCC¹, it must show the exchange rate and fees, and it must give a comparison to a non-DCC option, which must be offered (iow, there must be an opt out).

A common practice is to charge a flat transaction fee when DCC is not used, and to charge no fee when DCC is used, because the exchange rate is so terrible they are profitting hand over fist if you use DCC. But the ATMs often do not expressly state that the fee is waived in the DCC case -- they simply make no mention of the fee you would /otherwise/ pay had you not taken DCC. This is because (IMO) the ATM operator does not want users to relise that the exchange rate builds the fee into their fat margin.

I avoid DCC. But then my bank statement only shows how much was taken from my account in the account’s currency, not the ATM’s currency. The ATM receipt (which apparently does not exist in Germany) gives the local currency you pulled out. These two figures leaves you having trust them as far as the fees go. Some ATMs bundle the fee with the withdrawal amount and the drafting bank has no way of knowing what portion was for the fee. And of course neither do you, unless the machine properly informed you. But what if it didn’t? There is not enough information for the end customer to work out what the overhead was in some cases because the exchange rate applied by the account’s custodian is undisclosed.

¹ DCC: dynamic currency conversion

[–] ciferecaNinjo@fedia.io 1 points 3 months ago

Do you think it's politicians' job to provide technology education?

Of course. Public education comes from the public sector. We should be electing politicians with administrations who are smarter than the general public. Any tech education that comes of Twitter abandonment is welcome.

[–] ciferecaNinjo@fedia.io 1 points 3 months ago

Can’t reach that link, but sounds good for folks that talk more than 800 min/yr.

But that’s almost like a postpaid scenario.. use-it-or-lose it rather than pay-as-you-go. My consumption would be well below that, and I can’t even be certain I will be in any one given country for whole year. I’d probably be spending over $1/min with that plan.

[–] ciferecaNinjo@fedia.io 1 points 3 months ago (2 children)

But there is a need for politicians to reach their constituents, and if they can be effectively reached by an imperfect method,

Leaders should lead, not follow. Politicians can reach and be reached on a Mastodon server, where all their constituents have access.

Asking ~8 billion (or however many) people to make a personal change first is a non-starter. Demanding many orders of magnitude fewer people (politicians) make the first move to break the dystopian cycle is far more sensible.

then I can accept them using it while also promoting better methods.

Posting on Twitter is an assault on promoting better methods. Mirroring everything on Twitter facilitates the Tyranny of Convenience (great essay by Tim Wu) by making Twitter the superset. It’s important and socially responsible to withhold info from Twitter so that it cannot be the superset.

RMS gives good advice for orgs who think they need a Facebook presence:

https://stallman.org/facebook-presence.html

Politicians don’t need a Twitter presence, but to the extent that they are not convinced, the bare minimum action they can take is implement some of the advice on that RMS page.

Any random 3rd party joe shmoe can make a Twitter bot that mirrors a politician’s msgs to Twitter. In fact, force Twitter to do the work simply by not feeding Twitter. Motivation for Twitter’s self-preservation would appropriately ensure gov resources are not spent on Twitter. Make Twitter be the host of dodgy mirror bots without engagement, where you need Mastodon to actually engage with a politician.

[–] ciferecaNinjo@fedia.io 1 points 3 months ago (4 children)

There are moral problems with crossposting to Twitter.

  • Twitter is financed by advertising. I do not finance public services to then finance the advertising revenue of private corporations. Politician’s IT staff, time, and resources used to feed Twitter are not free. Public money is used for the tooling and the operations on that platform of inequality. So people who are excluded from Twitter are financing content fed to Twitter involuntarily via taxation. And those who are priviledged to be on the Twitter platform are hit with ads as a precondition to reaching content they already paid taxes for -- due to an inappropriate intermingling of public and private sectors.

  • Network effect: making Twitter a superset of content exacerbates the stranglehold Twitter has on the world. The private sector will do its thing, but the public sector has a duty to work in the public interest. A public office adding to Twitter’s network effect disservices the public interest.

  • Twitter is a politically manipulated venue with a bias toward right-wing populism. People who vote for a green party or socialist party politician do not endorse feeding an extreme right-wing US agenda with worldwide consequences. They do not have an equal voice on that platform which is wired for right-wing propaganda.

Recall how Trump took power in 2016: Cambridge Analytica and Facebook. FB and Twitter are pawned by right-wing extremists.

[–] ciferecaNinjo@fedia.io 5 points 3 months ago

Shopping – Right to safe, high-quality products that can be repaired, replaced, or returned if needed.

It’s an illusion.

Right to repair started in the US and has been implemented in various states, but still does not exist in Europe. They have been discussing a r2r bill in Europe for over 10 years now. And if you read what they have so far, it’s weak. You can’t even get a repair manual unless you are a licensed professional.

Cannot repair my washing machine because the Dutch manufacturer will not tell me the secret unlock code.

I had a Belgian product die under warranty. No protection. Manufacturer ignored my request for warranty service. Belgian regulators ignored my complaint that the manufacturer ignored me.

Travelling – Compensation for delays or cancellations.

Flixbus was a no-show. Complained to the regulator. No response.

Strange loopholes in EU law too. If the bus route is under 250km, there are no protections for delays or cancellations. You can be stranded in Amsterdam because the bus to Brussels ditched you, and because that trip is under 250km there are no useful passenger rights.

Banking – Secure payments and fair contracts.

Secure payments yes, but FATCA guarantees all contracts are unfair, which discriminate against people on the basis of their national origin.

If you want to do a cash transaction above ~€1k or so, prepare for hostile treatment. A friend asked to withdraw €5k (IIRC) of her own money and the bank called the police, who then brought her in for questioning.

ATMs are really thinning out amid Bill Gates war on cash, which is really taking hold in Europe. Instead of making banking enticing, they are treating cash with hostility to force banking on people.

Surfing – Protection of personal data and safeguards against scams.

Most gov services block Tor. The data protection authorities take no action on most GDPR complaints. Public libraries refuse wifi access to people without mobile phones (the people who need it most).

view more: ‹ prev next ›