• 0 Posts
  • 27 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle





  • This may be illegal in EU if they don’t use opt in. Even then it may be illegal for under 18 year olds to collect MAC addresses and disk serial numbers, as those can potentially be used for identification.

    The data is anonymized, and the IP is NOT stored. So I’m not sure this violates GDPR?

    From the code we can see the machine ID is anonymized, sending only a SHA256 checksum.

    def get_hashed_device_id():
        # Read the machine ID
        with open("/etc/machine-id", "r") as f:
            machine_id = f.read().strip()
    
        # Hash the machine ID using SHA-256 to anonymize it
        hashed_id = hashlib.sha256(machine_id.encode()).digest()
    
        # Convert the first 16 bytes of the hash to a UUID (version 5 UUID format)
        return str(uuid.UUID(bytes=hashed_id[:16], version=5))
    
    

    This makes it somewhat a nothingburger IMO.