skysight-inc/HackerNews huggingface dataset:
Ironically, your employer (from your HN profile) loaded a Facebook tracking pixel, Google Analytics, and a multitude of third-party javascript libraries (from which it calls functions such as "clickTrackerInit") when I went to their home page - all without asking for permission. If you helped with their GDPR implementation, perhaps you aren't as familiar with GDPR requirements as you seem to think you are, because those are glaring violations.
> PII

The GDPR concerns all information related to people. It doesn't treat PII (i.e. identifiers) separately.
How do you go from Amazon ads for ladders to unethical tracking tool?

He's not making a profit. Meaning he's actually paying out of pocket to allow neighbours to lend stuff to each other. Yet he's abandoned his code of ethics?
That doesn't sound quite right.

Of what use is a vision test where it's easy to memorize the answer? In English Pleiades is also known as the Seven Sisters, because of the ancient Greek myth. I can easily believe that Pleiades was also associated with 7 in general Roman culture.

It doesn't help that more than 7 stars can be visible. (https://en.wikipedia.org/wiki/Pleiades says "Its light is dominated by young, hot blue stars, up to 14 of which can be seen with the naked eye depending on local observing conditions.") Muhammad was written to have been able to see 12.

If someone says there are 9 stars, is that a sign of good vision? Or simply a guess?

Then there's the observation that other cultures see six stars. See https://en.wikipedia.org/wiki/Pleiades_in_folklore_and_liter... .

In modern times only 6 stars are usually visible to the naked eye, and there are proposals for why 7 was used in Ancient Greece; eg, stellar variability or a numerological leaning towards 7.
For amusement I recently started watching a French 1960s series called Les Chevaliers du Ciel, there are loads of episodes on YouTube. With my five-year-old, instead of kids' programming.

As well as lots of aeroplanes I have found the same as you; gentle pacing, lingering scenes, no snarkiness, no real swearing. It is very refreshing how drama used to be filmed.

I might try the Littlest Hobo soon, if I can avoid crying during the title song!
> The problem is what happens if a legal firm or an agency targets you. Even if you adhered to the spirit of the law, they can dig up evidence that you didn't obey the letter of the law (since GDPR is quite loose and ambiguous).

But in that situation the regulator writes to you and asks you to come back into compliance. And so you then either write back and explain that you don't think you're not complying, or you write back with a plan to come back into compliance and ask if that's ok.
Ask HN: What would you do to 10x an existing business?
Imagine you have an existing business at your hands. You have one or more products, some cash in the bank and a customer base of a few hundred B2B customers.

If you had 12 months to 10x the revenue / profit - what would you do? What steps would you try?

If you had 3 years, would you do something different?
All the "Facebook" content screeners in Berlin, Germany, are actually employees of a contractor (Arvato-Bertelsmann) who is mostly hiring them through job agencies.
They're in charge of deciding what has to be banned according to Facebook Community Guidelines. They get to see gore, suicide videos, racial slurs etc. all the time, with no proper psychological training. They earn minimum wage (around 10$ per hour) and they're completely disposable.

Nonetheless, when Facebook had to face a small content-related crisis in Germany in 2016, that didn't stop Zuckerberg from saying the the company hires teams of hundreds in Germany to stop the spreading of hate content. They don't.

Source: Inside Facebook - Im Netz des Bösen, Süddeutsche Zeitung, 2016. (sorry, paywall).
http://www.sueddeutsche.de/digital/inside-facebook-im-netz-d...
Most electrical and computer engineering undergrad degrees (not CS) do give you this information.

You first learn how to create a transistor, then basic AND/OR logic gates with individual transistors, then adders and subtractors, and then eventually a pipelined processor with look ahead execution.
Flight of the reposturgeon
Regex course – part one. Basic concepts
> You can be 100% compliant and still be sued by somebody.

No, someone can report you to a member state's compliance organisation.
Fair, and my reply was unclear. I mean that if the act is a crime in both countries, then it's a crime in the USA, so you'd be committing a crime with or without the GDPR.
Unfortunately not on F-Droid.
Are you willing to defend this answer in a court of law? Many GDPR lawyers disagree...
No, those recitals are exactly what make my point. Numbers 23 and 24 of the accompanying recitals on that page state that, even if you are not established in the EU, if you profile people "within the EU", the regulation claims to apply.

"Within" is a physical location, so arguing that IP block associated with request is a perfect proxy is at best a legal grey area. For example, an EU citizen could use a VPN to access your services and then send you a data request. See here for discussion: https://www.gdpr360.com/gdpr-ip-addresses-and-classification...

If this seems like a low risk incident, consider that there are litigious people inside the EU (as everywhere) that may actively explore the boundaries of the law.
> Is there any human who can read binary code 01011010010110101101 without take psychedelic??

Nobody can "read binary code", because you do not specify what you encode.

It's like asking what e.g. a circle symbol means, without supplying any context whatsoever.
Personal data is a big deal and should be treated as such. If you're hell bent on storing your user's personal data then you need to treat it as such.

Your argument boils down to "I don't want to take special measures to protect your personal data, so I shouldn't have to".
> The safety here really is in not being on the short shit list of regulators. And one might end up on that list for any number of reasons unrelated to data protection (eg. size, market position, media coverage/populism).

You might find reassurance if you look at how the regulators already work. They've never sought the maximum fines, and they only apply fines in the worst cases. The vast majority of infringements are dealt with by sending letters asking the company to come back into compliance and explaining how that might happen.
Doesn't the SVG output from QGIS suffice then?
Yeah, and having read over this thread about three times I'm actually less sure than I was. I'll be checking today.
Yes, heroin tolerance is a thing.
Pre-2008 not all banks were hugely profitable. Some investment banks were and some smaller companies. The tech sector isn't that dissimilar. Salaries in SV show that not only Google and Facebook are willing to pay $200k+ for engineers, most of the industry will (and usually can).

As tech can't print money, these salaries must come from somewhere. And at some point those sources won't be able or willing to provide it. Maybe that's a soft landing, maybe harder. I don't know but as I said previously, I'd be surprised if tech's the first industry in centuries that channels wealth into the hands of few (including SV landlords) without any consequences.
3 reasons to keep the IP: statistics, analytics, and fraud prevention.

Anonymizing it does not seem to solve anything, since the anonymized version "can be used to build a profile" so "it's PII"...
Microsoft's relative standing within the tech world also fell, though slightly later,, 2005-ish.

PG's essay, as with most realisations, postdates reality, and specifically suggests by 2005.

http://www.paulgraham.com/microsoft.html
If the title is a question the answer is usually no. If the answer was yes there'd be no need to formulate it as a question.
A blog with ads that isn't compliant with GDPR is probably already not compliant with PECR or DPA.
Things that are not routine in commercial manufacture become more common in Defence manufacture. The volumes are lower and per-unit cost-pressure is less, while reliability requirements are higher.
>Were there a set of key events that led to this normalization of what used to be a frowned upon behavior?

Influencer marketing getting popular most likely.
Google Plus is not the Internet (2013)
Please stop saying IP addresses are personal data. They might be.
It is for this reason that DoD is very careful about the source of all the components in things that it purchases. It ensures that as much as feasibly possible, the individual components are built in the US.
This comment is misinformed and should be deleted because it is so dangerous. HF will kill you for looking at it in the wrong way; please don't handle it unless you understand the danger it poses to you and the people around you.
Cool, looking forward to the magical solutions people come up with for performing full text search on encrypted PII, lest you get sued for $10M for keeping someone's name in your database that they willingly handed over to you.
What was your initial assumption?
Perhaps, but it will be closer to banning bank lending (as it is fundamentally different from lending between individuals).

"Fractional reserve" is just a convenient scapegoat, as banks, once the rules and numbers are reviewed, do not lend from reserves. Any time they approve a loan, new money is put into circulation.
>> nb It's not a ridiculous law - I'm fully in favour of it, as are many others over here.

That's the most interesting thing about the GDPR. While some developers are picking up their ball and huffing off home, others are actually 100% behind the regulation.

It says something when tech-savvy people agree to sacrifice time and effort and probably profits to protect their users from their own software.
> Its only the end-user-is-product companies that have to have armies of lawyers, and that is no bad thing surely?

Note that you're on a site pretty much dedicated to the ongoing viability of end-user-is-product companies, hence the backlash here. My experience, same as yours, is that anyone who provides a service for money isn't having any difficulty at all complying with the GDPR.
That is also PII being used for the purpose it was collected for (identifying a contributor) and I believe falls under Art.6(1)(f) of the GDPR. You would likely have a hard time convincing anybody that you can apply the right to be forgotten to a git repo - especially as that particular processing can be argued to not be requiring consent once you have submitted your commits.
Augmented reality Biz Card
You're completely ignoring the point of GDPR. The point is that users should be in control of their data, and when they give it to someone they have the right to know what it is used for and to be able to retract consent for its usage.

Blaming users for providing their personal data is strange -- if the implication is that nobody should provide their personal data because it can be abused then is it not obvious that the use of personal data should be regulated?

If the majority of banks lost your money regularly, would you blame customers of the bank for using banks -- or would you say that banks should have stricter regulations to stop people from being screwed?

As for the Amazon bit, I think you're underselling it. Amazon tracks users in arguably unethical ways (due to the lack of consent, and the scope, and the inability to opt-out) and display their ads is inflicting that on your users. If you care about your users privacy (which is what GDPR is trying to enforce) then you would know that "just slapp[ing] some Amazon adds on [your] site" is not the correct approach to handling users' personal data. I do agree it's not trivial to handle GDPR if you don't have a lawyer (though you can get a data officer from a legal firm), but complying with laws is part of doing business.
Thanks for the example. I'd be surprised if content screeners are employed with Facebook anywhere in the world. Most don't make that job for a long time and they probably want to avoid being sued for compensation, I could imagine viewing those videos/images without proper training will lead to long-term psychological issues for many. It's easy if FB can just hire a subcontractor that files for bankruptcy once claims come in.
No, I think it’s totally possible (albeit exceedingly unlikely). But we already know that CRISPR has (rare) off-target effects. That’s why I’m saying that the i-motifs don’t change the risk assessment. At best, they can explain why CRISPR sometimes misbehaves (although it’s much more likely due to just plain old nonspecific binding in most cases).
We probably have a different definition of “incel” then. To me “involuntarily celibate” means “unable to find a willing sexual partner”. That’s the problem prostitution has been solving quite handily for thousands of years.
Isn't there some (e.g. NodeJS) library for that?
On my phone (I use Lineage), I have control of what app opens what link.
Writing an OS in Rust: Unit Testing
The point is that this is the justification that's been cited by, and is at the root of, the criticism of government (and, more covertly, taxes).

Koch uses this as his justification, but misstates and apparently misunderstands the concept. This is his prior, the lynchpin of his argument, and it is mis-applied.

The sentiments of Weber are not inconsistent with a long prior line.

Your "God or Nobody" presumption is incorrect. The principles also arise out of systems studies and ontology.
First person convicted under Malaysia's fake news law
Giving more constructive comments/directions to newbies is important but I think that an high threshold for questions is still mandatory in SO.

Majority of people are lazy and don't like to think deeply or search first and.. it is normal for this lazy people to protest; rewards and punishments are needed for a society to work.

About the discrimination part, I have never seen "not respectful posts" for women or people of color... imho this is a no-problem for SO and I think that it is dangerous to create a discrimination case when there is none. Because in this way, you are creating artificial discrimination and real distance between people.
Personal data is literally anything related to a person. That encompasses a few sensitive kinds of data, but is not a big deal in the general case.
"Everything in the world is about sex except sex. Sex is about power." - Oscar Wilde.

The incel phenomenon is not about the act itself. Especially not in an era of many forms of highly available internet-based sex work. No, it's about power and status. That is fundamentally harder to solve. A more egalitarian society just makes them angrier, as suddenly there's fewer people they can feel superior to.

(Remember that the word was coined by a queer woman; there are plenty of people who feel that they are unwanted sexually but aren't going to flip into mass murder because of it.)
If I tell you that the maximum sentence in the UK for possession of marijuana is 5 years in prison or an unlimited fine, are you going to tell me that everybody who's ever been caught with marijuana has been thrown in prison for half a decade or bankrupted?

No, in fact, most people get served with nothing more than a formal caution or a £90 fine. This is normal - this is how the law works in this country. Anyone who doesn't understand this hasn't even been paying attention to the lowest-common-denominator newspapers, which are constantly screeching about how people usually don't get anything close to maximum sentencing.
That sounds interesting but would probably be a paradise for tax lawyers. You just create a network of companies, one for each income band. That way, an employee never makes more than the average. Of course only large corperations can afford that so that smaller companies will have a harder time hiring talent.
> You can be 100% compliant and still be sued by somebody. And you'd have to pay some lawyer a lot of money to make it go away.

I fail to see how GDPR makes that new. You can be sued for any reasons already, being in the right or not.

E.g. 99% of useful websites violate some patents (that shouldn't ever have been issued), actual predatory suing about this issue happens, yet no one closes his website because "the patent situation makes it too uncertain".
Another major use-case of rootless containers (though image building is not as useful in that case) is being able to run things unprivileged on computing clusters. I implemented rootless containers in runc and quite a few other tools (like umoci) in order to be able to handle cases where you don't get root on a box.

There is also the security benefit of there being no privileged codepath that can be exploited. So the only thing you need to worry about is kernel security (which, to be fair, has had issues in the past when it comes to user namespaces -- but you can restrict the damage with seccomp and similar tools).
The IP address IS considered personal data by european courts.

You can be compliant by either only storing an anonymized IP address (set the last/couple of last to 0) or by not storing the IP logs at all. However, there might be resonable situations where you need the full IP address and the GDPR allows to store it in this case, but only for a specific reason and a limited time, and only if you documented it so the user is aware about the process. Reasons could be fraud protection, consent documentation (mailing list opt-in), error handling and so on ... but not "we don't really need it but store the IP address anyways without informing our users".

See here:
https://ec.europa.eu/info/law/law-topic/data-protection/refo...

"Examples of personal data:
a name and surname;
a home address;
an email address such as name.surname@company.com;
an identification card number;
location data (for example the location data function on a mobile phone);
an Internet Protocol (IP) address;
a cookie ID;
the advertising identifier of your phone;
data held by a hospital or doctor, which could be a symbol that uniquely identifies a person."
> We strongly suggest that you use GetText to translate your applications since it allows a simpler and more maintainable syntax.

Care to elaborate on that?
>> This could easily be used to suck money out of foreign countries.

We both contributed to a conversation where you made the same point, a few days ago:

https://news.ycombinator.com/item?id=16888026

Back then, I was not convinced that you had a clear idea of how such a money-grabbing scheme could be implemented. I would kindly ask whether you have a clearer understanding of the relevant procedures now.
Rootless containers are quite useful for things like accessing computing clusters which are shared and thus nobody gets root access on them (such as in universities). Rootless building is quite useful for other reasons (mainly because it allows you to build without ever hitting a privileged codepath which is arguably a huge security improvement), but to be honest it's more of a cool feature you can implement once you have the far more useful tools implemented (such as rootless storage management and rootless containers).
"clean box" is already used. It's called FOUP: https://en.wikipedia.org/wiki/FOUP
The problem with translating any Chinese classics lays in their multi-layered meaning. Old Chinese literature is complicated because every author expected that the reader was accustomed to volumes of other classics and could comprehend all the references to them hidden in the text. No matter how many good translations we have, they will not help us resolve this issue. Furthermore, understanding Dao De Jing is problematic even for native speakers of Chinese, because they do not have proper educational background to comprehend what ideas the author wanted to convey even being able (as they think) to read the original text!
Goof Off MSDS: https://goofoffproducts.com/wp-content/uploads/2017/08/RustB...

Good to see the (not so out of place) note about conc HF. They claim <0.5%. I would treat it with respect. Getting it on your skin is a bad idea.
... well, you set up a LTD precisely to limit liabilities in that catastrophic case scenario but you'd probably find that people "coming after you" will be proportionate to how much you have to come after ... I.e. if you're a guy with a side project that makes no money; you're unlikely to attract "parasitic lawyers".

Further, in my opinion the GDPR is wholesome. You ought to implement it even if it didn't exist. If your business relies on playing fast and lose with user data then IMO it's not an honest business ...

Further still, the worse punishment is 4%/20M; it's not the default intervention or anywhere near the only way that the GDPR will be enforced.
Are your really suggesting there is no value in looking at successful businesses we actually rely on and that determine the competitive landscape in multiple business domains, how they are run and who runs them, and that doing so is a disease?

OK.
They also do a lot more work.
Comment history includes both a employment and location history. He's doing this in America.

But just be aware of the legality of whatever you're doing. Broadcasting that you're having your friends mule prescription drugs into the country for you is going to take the very laziest of warrant applications to work out who you and your friends are.
Black-Green-Red Nylon Nato Straps PVD-Black 3-Ring
Those who are concerned about this have three options:

* make the effort to learn how to set up and maintain your own instance of your chosen federated social app. You get to decide exactly what data is and isn't shared with the network. You don't depend on the goodwill of any third party , or their security competence (just your own).

* find a geek you know, and get them to host an instance for you. There is a third party, but it's someone you personally know and presumably trust.

* find a public instance run by a collective or organisation you trust to care about your privacy and know how to protect it, eg some people might trust the motives and competence of EFF, or their country's civil liberties organisation (eg ACLU in the US), or a collective like RiseUp.net or Disroot.org.

While export/ import of accounts between instances is an unsolved problem at present (Hubzilla can do it using Nomadic Identity but only between Hubzilla instances), the devs of all the federated apps are aware of it as a major pain point, and work is underway to implement it. In the meantime, if you're willing to go to the trouble of re-following and nagging all your followers to re-follow, you can move between the 3 options above at will. FB and other datafarms offer you none of these options.

EDIT: formatting
I think being responsible for negligence in security practices and GDPR are not the same. GDPR is overreach. There is a saner middle ground, for example in Australia new laws coming in mean executives can go to prison for the negligence in your example. That makes more sense as it doesn't invalidate 90% of standard tools processes in technical marketing for example.
GDPR: Getting Ready for the New EU General Data Protection Regulation (2016)
Why I'm campaigning for councils to consider the impact of strip clubs
Yup. I implemented the rootless containers support in runc and I love working with the LXC folks when it comes to topics related to low-level container implementation.

It should be noted though that by default LXC does require some privileged (suid) helpers (for networking and cgroups) -- though you can disable them as well. runc by default doesn't, though that's just a matter of defaults and what use-cases we were targeting.
There's a link on that site [0]. Essentially they want just the central bank to be the source of money supply.

[0] https://www.vollgeld-initiative.ch/fa/img/English/2015_10_22...
Using Jenkinsfiles for Continuous Deployment Pipelines