I understand that someone might be a valuable firsthand source to get interesting details and core pieces of a real story right. But how can someone secure the movie rights or book rights from them? Stuff happening to you doesn't exactly mean you've created something and should have copyright, or does it?
With version 142, Google Chrome just rolled out a new permission prompt for Local Network Access.
While technically a good feature, this caused me the better half of the day hunting a production bug in our SaaS product, which after all did not exist.
Turns out that Chrome will display the permission dialog also for requests which your company's IT-mandated Endpoint Protection solution is grabbing for inspection. In our case, it was Zscaler causing issues.
If you deny the request (which from an end user perspective is the only reasonable choice), your web application will act weird.
Lucky me, our devices had just upgraded to Chrome 142 at the very same day we rolled out a production release. That's how all hell broke loose.
Wero seems promising. But I am confused as it appears they have acess to my bank account's balance and transaction history. The privacy policy (Archive.org) states on page 4
Purpose: Displaying your account information (performance of a contract – art. 6.1.b of GDPR)
Categories of data processed: Balance and transaction history of your payment account
Retention period: Duration of the contract (the Wero General Terms & Conditions)
The term "payment account" is not properly defined in the document, but I would infer from the first line on page 4 that it is the connected bank account.
This would be significantly more invasive than PayPal. Would be a dealbreaker for me, as I don't even see a plausible reason for doing this.
Their FAQ states the contrary:
Wero does not have access to your transactions or any other account activity beyond the information we need to complete a Wero payment.
Again, "information we need" is quite vague...
See my comment below, Wero's Data Processing Offices confirmed via email that they do access your bank's transaction history, depending on which implementation mode your bank chose.
Quite invasive, IMHO
