skysight-inc/HackerNews huggingface dataset:
Tolkien wrote LOTR in the late 1930's, right after the Great Depression. I would guess that the UK weathered it better than places like the US dustbowl states, but it really made an impression on people. My grandparents would have a pantry full of canned food, yet claim they didn't have anything in the house to eat. And my mother who went through wartime rationing in the UK (she picked up coal that fell off the trains to heat their house), has similar behavior. So I'm not surprised if some of the older fantasy authors include lavish descriptions of food in their novels, as that would be an ideal for them.
In 2004 I clicked a banner ad for eBay and bought something. I think that was it.
> OTOH, anyone who says they clearly understand the implications of GDPR for their site has either spent a lot of money on lawyers or is lying. Let alone someone who has implemented it.

http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELE...

It's long but the language is far easier than American legalese. The implications depend on your site/service behaviors. An RSS reader is pretty trivial, interactive social media... less so.

> Privacy by design requires deletion of data after legitimate interests and/or consent have expired, probably (!!!) in 3rd party systems. How, precisely, do you implement that?

Privacy by design is a design philosophy, it might be a pain to refactor into an existing system but the design constraints aren't onerous.

If your "3rd party system" is something like AWS, just delete the data. If you're sending it off to some other service, they do need to be GDPR complaint (the law covers this situation).

re: legitimate interests, we partitioned our data. Access logs, for example: one stream gets anonymized for simple analytics, another gets dumped into in-depth weekly analytics jobs, and the final log stream outputs encrypted auto-expiring S3 files with strong access control for infosec purposes. When a user withdraws consent, we just stop logging new information. Truly anonymized data is OK, our in-depth analytics data is purged within 14 days, and InfoSec is a justifiable legitimate interest.

> Can you shadow-delete accounts for some period of time to allow users to change their minds?

Yes. GDPR does not require instant response. You should be transparent about what will be kept and how long, a clearly communicated 24h shadow-delete is completely reasonable.

> Do people have GDPR privacy rights over eg comments on YC that may mention them by nym?

This is a good question, I'm also curious about quotes. The recent Google case suggests both fall under GDPR.

> Given the GDPR covers EU residents (not just citizens), as an American can I buy a plane ticket to Dublin and start requesting full data dumps? What rules are those provided to me under, and how do you make software that can do that?

Assume everyone is covered by GDPR.
This post is literally ridiculous, I don't think a single thing in it is true.

The constraining factor for flights in and out of NYC, or nearly any place, is runway capacity, not available airspace. For all practical purposes airspace is essentially unlimited. You could bulldoze Brooklyn, strategically place a couple hundred runways on it, and land thousands of planes per hour if you wanted to, maybe a couple less if it got foggy.

For reference I have a pilots license and have flown across and through NYC's class B airspace many times. This post makes no sense.
I think they've moved on from shaking down companies and customers that use Linux to shaking down companies that use Android.

SEP 20, 2011 Casio agrees to pay Microsoft an undisclosed sum for a deal that includes Microsoft's vow not to sue Casio's customers for using its Linux devices

Microsoft General Counsel Brad Smith and licensing chief Horacio Gutierrez sat down with Fortune recently to map out their strategy for getting FOSS users to pay royalties. Revealing the precise figure for the first time, they state that FOSS infringes on no fewer than 235 Microsoft patents.

It's a breathtaking number. (By comparison, for instance, Verizon's (Charts, Fortune 500) patent suit against Vonage (Charts), which now threatens to bankrupt the latter, was based on just seven patents, of which only three were found to be infringing.) "This is not a case of some accidental, unknowing infringement," Gutierrez asserts. "There is an overwhelming number of patents being infringed."
It's entirely power imbalance, and that can be addressed by policy. Fundamentally, Capital needs Labor as much as Labor needs Capital. There's no economic reason a capitalist contributing nothing should not expect to starve, but a laborer who contributes nothing should expect to, it's just the current market climate and political policy that these are the case such that the imbalance of power perpetuates itself.

It seems you could have the opposite case from today, with Labor concentrated into large unions which lobby for and win things like overly (but not disastrously) high Basic Income or slightly too relaxed intellectual property law, strong-arming a capital class made of small mom-and-pop firms and individual retiree-investors, avoiding providing the returns that would be seen in a more efficient and balanced market.
Ignore him. This is one of the classic responses to any challenge of the status quo. If you don’t like the way things are then you should upend your entire life, go live in a cave, subsist on bugs and stop challenging my world view.

Tl;dr He was trying to sound helpful while telling you to go fuck yourself.
"nub" - I think you might mean "point" or "crux"?

Main Entry: bottom line

Part of Speech: noun

Definition: indispensable content

Synonyms: basis, conclusion, core, crux, determination, essence, fiber, final decision, fundamentals, income, key point, last word, loss, main idea, main point, main thing, meat and potatoes, name of the game, net, nitty-gritty, nuts and bolts, point
Welcome to the Internet of Dicks.
I love the NirSoft utilities they're great! The kind of OS bundled tools Microsoft should have been making instead of <cough> Media Player and the like.
>Tesla, however, says this is part of a planned period of downtime that was similar to another shutdown in February, and it isn’t intended to have an affect on the company’s current production targets for the car.

This seems like a story that is being pushed just because sites know it will drive clicks but the actually news is well not really news.
I thought you were going to quote "Show me the man, and I'll show you the crime."
brands of what? milk? eggs? cheesy crackers?
Get Google Search Results in Python
It's worse than that. It's the friend saying "open any unlocked doors you want", then after you do it, he remembers he left some secret things in his unlocked bedroom and wants you arrested because he didn't know the lock was broken.
Firefox has containers and a special one just for Facebook. Apple will only do so if the have a way to get money out of it.
I've worked with the CDPHE a few times, and given my experience don't really trust their assessment.
> Obscurity, on the other hand, implies that the property owner did not intend for people to access certain property. That is what matters.

It implies the exact opposite. The owner may have intended it to be private, but making it publicly available, without security checks on a publicly accessible server, implies the property owner intended for people to access that property.
I've never heard about this special mode.
Editing a url is not "tricking the web server", the web server is designed to respond to urls with the information they point to. Tricking the server would be doing something like sending malformed packets designed to cause the server to leak memory and display the contents of "hidden data" in an exposed field, ie causing it to behave in a way for which it was not intended.
Friction. Friction delays taking an action. This is true for both things we want to do and things we need to do. So you want to reduce the friction involved in your actual goals (learning a subject, deploying a system, updating code), and increase the friction involved for things you want to avoid.

I want to avoid snacks and sodas. I've gotten good at restaurants (order a coke once a month, a dessert about as often). But the office snack bar. So I stopped carrying cash. When I do collect change, I occasionally treat myself to a candy bar or something from that snack bar but since I'm not spending as much cash, this is once every 2-3 months.

At the same time I keep my desk stocked with pistachios (in shells) or similar things that take too long to eat to just eat all at once, but are tasty enough that when I get peckish they still satisfy.

I want to learn more advanced math subjects. So I always keep a notebook on me and either the book I'm working through, or a printout of the chapter (if it's a PDF or something). So when I have downtime I don't have to seek it out, it's already here.
I agree with you but I don't think the law does. The CFAA says that if access isn't authorized, it's no good. Now we can say that if the system was programmed to give it up (200) instead of telling you you aren't authorized (403/401) then you are authorized, but I think the law is more about whether a human intended to authorize you. Accidentally programming the authorization is (however stupid it may be) not what it's about.
The Precarious, Glamorous Lives of Independent Curators
Thanks! We're still experimenting with the format but we'll throw in some commentary here and there. If folks like it, we can certainly do more. :)
Yes, drought is for a region based on its averages. One problem is droughts and wet spells can happen on periods with length of a decade.
The car is still a dumb object that you own that hurt me, and as a result someone is still paying my hospital bills. You might blame your mechanic, if he did a poor job of brake maintenance. When he attempts to defend himself, how is this "intent" mishmash going to fly? "Your honor, please ignore that there are several RFCs defining how one installs calipers, none of which I followed! It was clearly my intent for the brakes to work!"

Also, I'm not sure your analogy works at all. In the first paragraph, you seem to analogize the car to the accused "hacker", while in the second you're talking about the supposedly "hacked" host. To be clear, the point of the car example is that a machine's intelligence has no bearing on how its actions affect the duties of its operators.
> At what point does the owner or their agents find themselves posessing the onus to clearly communicate their will?

The law is that the onus falls on the owner or their agents at the point where a reasonable person would not be able to infer the scope of the implied license from the circumstances.

I posit that a reasonable person (not an HN reader) would infer from a document being only accessible by editing a URL that it was not intended to be publicly accessible.
Create a YouTube-Style Recommendation Engine with Node and Vue
Yes. If it can't remember, there won't be progress on anything.
He didn't walk in and take something, he sent a request (via HTTP) and they responded with the content he requested.

If I sent them a dead tree letter requesting a document and they replied with a copy of that document, would you consider this the equivalent of going into their house and taking their TV?
Thank you! We'd love to hear your feedback as we go.
Oracle's Tried to Ally with Trump Against Amazon Web Services
This is the problem with Facebook. Facebook is not the platform; the people are the platform. All the problems Facebook solves for her are problems that the Internet solves, not specifically Facebook, but Facebook just makes it so easy: everyone is already there.

The author says, "Until another platform comes along, I’ll stick with it." But there are certainly already other platforms. I think what she means is, "Until another platform becomes popular among my social circle."
I disagree, because the analysis is faulty.

Computers always do what you _tell_ them to do, not what you want them to do.

The onus for keeping computerized material private is on the owner, and the owner screwed up royally by wrongly allowing sensitive material to be placed unprotected on a _public_ web site. Whether or not it was indexed is irrelevant - it was on a publicly accessible site, permissions set to publicly accessible, and the entire site was meant to be publicly accessible. One can close the analysis until the cows come home, it will not change this fact.

Accessing that material is as illegal as finding a diamond ring (or personal files) while dumpster diving. Dumpster diving may be seen as tasteless or low-class, but as far as I know, it’s not illegal.

Do we prosecute reporters for ferreting out publicly available, yet embarrassing, information?
I had just used another submission[1] I found on HN to get it! Unfortunately the picture is still really low quality, and it's a good one that isn't anywhere else so I've been trying to find it for awhile.

1. https://apinsta.herokuapp.com/u/appwithus
A cent is a minor currency unit; think procent, aka hundred in latin, or used in common international form one-hundreth.
Seems to be the tactic of 90% of the news sites these days.
I think a lot of people dont realise you can share to Facebook with a standard link and don't need their javascript.
HF is the first entry in Derek Lowe's Things I won't work with[0] blog series. There's a video[1] on YouTube of a spill of some eight tons, which killed five and injured thousands; there are some situations for which the best possible outcome is a quick death. The idea of intentionally dumping HF into the atmosphere is nauseating.

[0] http://blogs.sciencemag.org/pipeline/archives/2004/03/03/thi...
[1] https://www.youtube.com/watch?v=6EpE3JHHoaI
Part of what they’re so highly compensated for is also to turn a blind eye to the poor people who suffer under these conditions, to ignore the abuse that undergirds their work.
It could be worse. "OK Google" is annoying the first time you say it.
You can say "Hey Google".
> Scaling back all US companies will give a leg up to competitors in more lenient jurisdictions

Laws can be written to only apply to American users. That would leave American companies free to compete on level terms in other countries.
How has your experience been with the Arlo device?

Also, that Stretch Goal has been met so the integrations with Alexa, Google Home, IFTTT, etc. are supposed to happen via software update in the future.
After figuring out that they screwed up, government agents should have politely visit the teen, interview him, go through his computer together and delete compromised files.

Then quietly fix the vulnerability.

Instead they produced PR disaster by disrupting lives of a law-abiding family.

These are signs of arrogance and incompetence of decision makers at that government department.
The problem is the metaphor itself. The metaphor avoids the problem by providing a more trivial or palatable debate, it takes the attention away from the teen in trouble to the definition of the problem and at that point you've stopped caring about the person, you're caring about the problem.

This guy facing prison doesn't give a shit about it feeling like a man stealing a pie from your window. It's nothing close to that because you can steal pies from windows and be held accountable in a much more reasonable way, and trying to reframe the situation only helps to an extent.
I did a cursory search on craigslist and last months hiring post and most of what I could find had very specific prerequisite experience, some had low 3-5 maximum years experience, and the selection of jobs was pretty low barring the West/East Coast, Austin would be in the running but I moved from there. You mentioned New York as too similar, but there are a lot of interesting companies there.
It may, but unfortunately you have limited choices. You can also browse in an incognito window, which will at least disable tracking from session to session. However, even then your IP address is being associated with certain behaviors.

The reality is that you have a choice: use the Internet and have some tracking happen, or don't use it at all. Even the GDPR doesn't stop tracking - it just requires better disclosure of it and mandates certain handling procedures for the data that is collected on the backend.

If you just have a dislike for certain websites tracking you, you can use the Windows (or other) firewall to block specific domains as I stated above.
So a password or private encryption key isn't security?
Really, the guys with batons and guns are not the problem, it is capital that entices them to do it?

How seductive capital is, that even lawful violents follow they every will! We must surely give those lawful violents more and more power to resist the allure of capital!
There is a concept of Mutually Assured Destruction, where both the buyer and seller put 1.5x the value into a special 2-of-2 multisig address (I'm using Bitcoin as an example).

Then, two transactions are created (but not yet signed); 1 that pays the seller their share and returns the remaining deposit to the buyer, and one that is the other way around (refund).

When the item is shipped / received, and everything is good, both parties sign the transaction to unlock the funds. If either side attempts to scam the other, they are out 1.5x the price of the object. It becomes both party's interest to ensure that conflicts can be resolved so the deposits can be unlocked.

In other words, it is escrow without the 3rd party.

There is more information here:
https://www.reddit.com/r/Bitcoin/comments/215yn2/mad_ransom_...
A cursory glance at the history of the industrial revolution, or even conditions today in several places including Amazon, will tell you what happens when labor's right to organize is crushed.
A cryptographic hash of what?

Cryptographic hashes aren't random by nature.
Could granny flats help ease the state's housing crisis? Some advocates think so
> The fact that content on a website meant for the public to access is only accessible by "programmatic" means that ordinary users would not know, is strong evidence that the owners of the web server did not intend for people to access those documents

Sorry, that is complete BS. Have you scanned the entire internet and sure sure there are no links to these files on other public pages?

Files publicly hosted by a web server (software explicitly designed and installed to make those files public) is in no shape or form private property.

Furthermore, in this specific case, there is an explicit statement saying the files are public and saying nothing about them not being accessible:

"The Access to Information website allows you to submit, pay and receive FOIPOP requests online. The Nova Scotia Government also posts responses to formal FOIPOP requests online on the Disclosure log. This is a free public repository of FOIPOP responses that have been approved for publication and have met a specific set of criteria (PDF file 800 KB)."

https://novascotia.ca/is/programs-and-services/information-a...
Set up what you're going to work on next before you take a break. So much easier to jump right back into being productive.
Briefly, then it gets undone and left undone for a good while.

List making is the best option I've found so far but I still have issues with staying on track. It's the middle of my work day right now and here I am.
What's fun is that GW2 even gives you an API you can use to get information like player location. Used it a few years ago to automatically switch maps in my map event timer:

https://wiki.guildwars2.com/wiki/API:MumbleLink
When they are done cleaning up they should start with all the places depleted uranium is killing people years after the US was done bombing for peace.
I like this analogy a lot. But I think even better would be someone setting up a store in an area advertised like "everything is included with the price of admission" (admission being your ISP fee) and taking from the store without realizing it's not truly all inclusive. The store needs to be a vending machine, not a shelf.
Or DVD, where all the spaceship details are too blurry to make out. :(
> There's nothing anthropomorphic about recognizing that intent may be coded in such a way that a computer obeys that intent.

What a computer does may be evidence of intent, just as a lock (or lack thereof) may be evidence of intent. But just like an unlocked door is not evidence of intent to make something accessible, neither is an unlocked computer.

> Consider, if you will, whether your preferred position is one that will lead to improvements.

The Internet belongs to ordinary people, not folks who have read the HTTP spec. (It's their world, we just live in it.) "Improvements" will be had when the rules comport with what ordinary people want and expect. Ordinary people don't think about computer security; they expect that, like in the real world, people won't go into places that don't look like they're meant for the public just because there's no locks to prevent them from doing so. The law should reflect those expectations.

Laws exist to create social norms. HN users are preoccupied with data security, but ordinary people hate security measures and are bad at it. So it seems completely backward to me to codify in the law the idea that accessing data should be presumed to be permissible just because the owner of the data didn’t secure it.
> the scenario here seemed real and imminent.

It was never imminent. Drexler himself argued that there was a huge bootstrapping problem in creating nanoscale ‘assemblers’ with our macro scale technology.
I meant to imply it should have this mode, not that it does.
Harry Anderson Dies
And the cries by old geezers in charge, yet clueless of what it is they’re “in-charge of”, that he stole it are eye rolling

It’s ageism but at this point I’m pretty convinced old people should be term limited from office

The problems we seem to be facing are almost entirely due to their inability to move on

Youth shouldn’t spend their lives kowtowing to geezers that quit thinking and are simply peddling what’s become etched in their neurons and “the rules”
Here's an example but in Chinese:
http://www.coohua.cn/
Same argument applies to interest rates and many other financial calculations too... The thing I didn't know before that project was that there was a "standard" about how much precision you're required to calculate at. Not that ten thousandths of a cent is necessarily "the right answer", but when the regulators tell you that's the answer it takes a lot of discussion/argument away... (Surely even tenths of a cent would suffice???)
The document, from what I could glean they were PDFs.

Edit: even if they aren't PDFs, you can feed the content to the hash function.
Immunotherapy and beyond – Precision Medicine
The contrast between payout to engineers and unqualified workers is impressive. Especially if those workers live in a place like California with high living costs.

I think growing housing costs are much more scarier for a worker than an idea that some engineer gets 200-300k less.
Perhaps "using customers as guinea pigs" is not the hill you want to die upon? A/B testing is not a good justification for data collection. It may, actually, be a good reason for condemning it.
It does. But, it's also pretty surreal for those of us that worked through the anti-linux Microsoft of the 90's. Windows subsystem for Linux, and initiatives like this are a real confirmation that MS finally "gets it". Right tool for the right job. Good for them.

It's also a big swing for me in that I trust MS more than Google now to do the right thing. I'd have thought that impossible a couple of decades ago.
Why don't more people just live in RVs/vans? Taking out a mortgage is a huge risk over 30 years - what happens if you lose your job and cannot find another one at the same pay? Or you get sick and cannot work?

I guess you could sell and take the equity out of the house but you lose so much money and time to the banks.