skysight-inc/HackerNews huggingface dataset:
If an EU citizen believes that their personally identifiable information was obtained without their consent, the EU GDPR allows firms to do an audit on the company. The citizen who filed the complaint would enlist help from a no-win-no-fee legal firm, meaning, if they don't win (with infractions being $10 million minimum), the citizen, who is now a client of the firm, would not be out any money. If they do win, most likely the firm would make a windfall after carving out their share of the proceeds.
If by protocol you mean a standard, consistent API that can be used by password managers to update passwords automatically, then I completely agree.
Remember that the context is a bug.

So sure you don't want to log everything in Prod, but maybe you do in Dev. In that case, a bug would be to push the dev logging configuration to Prod. Oops.

If you have the clear text password at any point in your codebase, then there is no full-proof way to prevent to log it unintentionally as the result of a bug. You just have to be extra-careful ( code review, minimal amount code manipulating it, prod-like testing environment with log scanner, ...)
Can you provide something to support your claim? Why would a private corporation not be subject to Constitutional law?
I'm a radical in that sense too, and subscribe to the principle attributed to Voltaire: "I disapprove of what you say -- and will defend to the death your right to say it."
>my point is that the guarantee is a very weak one, and one based on tradition rather than facts.

This is incredibly wrong. The guarantee is based 100% on facts. This is literally the only thing it's based on. No assumptions about mechanisms and correlations. Just facts.

You then proceed to explain how if something can bypass this method of testing it's only causing mild, low-level symptoms on large timescales. This is a much better guarantee than a paper published on nature. For me at least, because this is an opinion. You're free to be wrong, just as I am. Time shows who's gullible and who's not.
Is that something that most people on HN want? More energy from their food?
Row hammer mitigations exist. Do you have some proof one way or the other?
However, this device lacks FIPS 140-2 certification of any type, which is a huge detractor for any company wanting to shovel that kind of money towards a solution.

I checked the "NIST List" (rhymes haha), and they might have this module under evaluation:

https://csrc.nist.gov/Projects/Cryptographic-Module-Validati...
The final 2.0 release of Altair was actually just yesterday.
Brilliant idea from a business standpoint, but rather a blunt tool.
On my (and other's) current read, it only applies when you are resident in the EU. Specifically:

> It applies to all companies processing and holding the personal data of data subjects residing in the European Union, regardless of the company’s location.
> Or rather, if people have no other options, they'll use whatever they are given.

I have a simple example: Discord. It's a popular voice conference application used by many gamers. I played WoW for many years and I saw voice software gamers used. It was Ventrillo, it was Raid Call, it was Team Speak. They are native programs. Discord is very recent player but it completely disrupted this ecosystem. In few years every WoW community switched to Discord. Nobody cares that it's JavaScript with React (AFAIK). But everybody likes slick interface and features.
Personally I don't think pledge()'s semantics are the best idea in the world, especially since all of the restrictions are cleared on exec() if it is permitted IIRC -- so it's useless for sandboxing.
Does destroying houses and food supply so that civilians starve or freeze to death count? If so, yes. See the Sullivan Expedition.
What is CloverBells? I tried Googling it without any luck.
This makes me _more_ certain iOS will end up being _more_ vulnerable to this type of attack.

It's almost certainly quite hardware specific, and if you were weaponising this there's way more homogeneous hardware on iOS than Android. Get this working on iPhone 7/8/X and you've probably got 75% of the "high value" iOS device fleet covered.
Theranos Cost Business and Government Leaders More Than $600M
How can we be sure AI will behave? Perhaps by watching it argue with itself
Be curious how the US compares to Europe. We often ate packaged salads there for the convenience factor, so it's not like everyone is lovingly hand-washing their artisanal lettuce leaves ...
Most major countries have a similar scheme

https://en.wikipedia.org/wiki/Deposit_insurance
Also to note, if your website and your company structure/gross income is below a certain monetary value, you can just tell the EU to f$%K off - - they cannot squeeeze blood out of a turnip, do you think they will go to the trouble to have a warrant prepared for you through Interpol ?
Perhaps implement some type of “password canary” - some type of test account(s) with known high-entropy passwords.

Have an automated system send periodic login requests (or any other requests which contain sensitive information that shouldn’t be logged) for this account, and have another system which searches log files for the password.

If it’s ever found, you know something is leaking.
Unrelated I guess but I'm kinda tired of Yet Another Mars Lander. I realize we have a lot of experience and success in the endeavor, and Mars is a particularly amenable planet for them (minimal atmosphere, relatively close etc.). But it's just boring at this point. Granted less boring than nothing at all, but there are much more interesting destinations in the solar system; Jupiter's moons and Venus to start.

I'm aware of the huge technical leap from landing on a dead planet to an active one with a punishing atmosphere, much less dealing with Jupiter's gravity well, but the potential discoveries (and imagery) attained from a successful landing on these more challenging bodies would be worth 1000 more Mars landers.

The Soviet's managed at least one Venus landing back in the 70's, imagine what we could do today.

I do remember reading somewhere that Venus's atmosphere was so thick that a lander could soft land on the planet with just parachutes, or minimal retros, so maybe it's not all bad.
Frightening to think something as innoculus as making a website of chocolate chip recipes and logging visitor IPs could provoke that.
JavaScript doesn't break if you don't supply all arguments in a function call.
Fair enough, I suppose, depending. Admittedly, it's been a long time since I've done one of those, but that's more to do with the fact that most of the work I've done for a while has been consulting/contracting/call-it-what-you-will, where the presumption has been that I'm coming in specifically to solve specific problems.
With all due respect to the people who think this is _the_ defining issue of our generation, I think you are wrong. Climate change is the biggest issue of our generation, period.
> If every major tech company in the Bay Area switched to remote work, allowing employees to work from anywhere they wanted to as long as they stayed on the same schedule as those who remained in the Bay Area offices, my guess is that there would be a large exodus.

Yes, but the problem is that many companies have found that remote work is significantly less efficient.

So if you need to cluster your work force somewhere, the Bay Area is probably where you'll have to given the desires of your top people to live there.
ULA has one Delta II still unsold, which will now probably never fly. I should think they would be happy to unload it. Must be a little more to the story. My guess would be some mass growth in the mission that made them bump it up to an Atlas V.
The US Constitution enumerates specific powers granted to the Federal Government, and generally limits its powers. It does not restrict the rights of individuals or of associations thereof (generally both are free to trade, or not, with others). It's a flawed document, intended to be a practical implementation of the limited-government ideals espoused in the Declaration of Independence: that the sole proper purpose of government is to secure our individual rights.
Given design rules covering trucks being driven on highways, yes.

Start with a bumper as per regulations. It has to be the furthest forward part of the vehicle, close to ground level. No pointy aircraft noses on road transport.

Now shape the hulk to sweep air aside in clean smooth lines to sufficient height and width to clear standard sized trailers.

The design goal coefficient dictates how smooth the surface has to be, and the curvature of that surface.

What is left for the designer is flourishes like the profile of the windscreen, how many wipers there are, how they are concealed, and the shape of the door and whether the door opens to the front or the rear.
Agreed. I am assuming they will not do it for the same reason yahoo didn’t. They are simply afraid of losing too many active users.

Yahoo’s case was worse though, since it was hacked.
Comparing Sentence Similarity Methods
Wait! I was under the impression that fines due to GDPR are just that, fines. They are paid to the government, not individuals. At most, getting fined due to non-compliance can suggest that if individuals bring civil lawsuits against the company, they may win and be awarded damages, the amount of which depends on how much damages they can prove they have incurred as a result of misuse of their data, not statutory amounts. Is that not the case? Is the fine actually paid to the individuals?

Or are your suggesting that some patriotic legal firms would do all the legwork for free so that the government treasury would get a boost?
> YIMBY: Build more housing and higher density in desirable places (places next to transit, places close to work). This will raise rents in areas that are more desirable (to market rates) and lower rents overall as there is more supply in the city.

Not entirely true. New units would cause rents to rise if rent has been kept artificially low by rent control, but for the last 23 years a California law has prevented vacant units from being rent controlled: Even rent-controlled units are market rate if you are trying to move to a new home.
https://la.curbed.com/2018/1/12/16883276/rent-control-califo...

But building higher density is inherently how you get lower rents when land is restricted.
http://marketurbanism.com/2018/02/05/density-working-poor-ou...
Personally, I'd just get a computer (server) and launch Flask[1] - using a single HTML landing page that sends the form (e.g., email) input to a MySQL database or something. I actually find that setting up a WordPress/Wix/Squarespace site (correctly) is harder for me to do (properly).

But if I was a little less technically adept, I'd go with Wordpress[2]

[1] http://flask.pocoo.org/
[2] https://codex.wordpress.org/New_To_WordPress_-_Where_to_Star...
They have no physical product and are still trading in dreams.

Tesla has a functioning prototype.

Which company is the practising entity?
Confluence is one of the best designed products I've ever worked with. Makes the web behave like a native editor, awesome semantic macros that let you put in warnings or collapsible sections in a few keystrokes, you can generate page source with scripts.

Specifically regarding structure:

- every page has breadcrumbs letting you navigate up to its parents

- "child view" macro shows all children of this page automatically, so you can easily make a "category" page linking similar issues that is always up to date

- can move pages to new parents/spaces with a few clicks, or en masse with a drag-and-drop tree view

- built-in widget that searches only children of the page you embed it into

- spaces so you can tell a page in the search is owned by a different section of the team

Plus just a way lower barrier to entry than Wikipedia or the other wikis I've contributed to. I love Confluence.
> meaning old hashes wouldn't be accepted and reducing hash "replay" possibilities

How would the server even verify the hash, then?
A Falcon 9 produces about 149 metric tons of carbon dioxide from launch. The US produced about 9.5 metric tons a second. In 16 seconds the US has produced the same amount of carbon as a Falcon 9 launch. I don't think that is terribly significant
If you don't agree with the assertion, that's fine. Convincing you is not a productive use of my time. Ask your nearest high school economics teacher to explain it to you.
Wasn't this discontinued?
Hydrogen is mostly produced by stripping it off of hydrocarbons; it's not really a carbon neutral fuel.

It could be, but it mostly isn't.
I for instance believe that 1+1=2 under the first order Peano axioms of arithmetic. This belief of mine is so strong that it would be imposssible to convince me otherwise. This is a truth for me (and for every other sufficiently educated person). But there are differing levels of assuredness in our beliefs. Some not as strong as others. Therein lies the rub when one talks about “reality”. Isn’t reality ultimately person and perception dependent? Are there objective, universal truths?

For me a strongly held belief is more or less equivalent to truth for the person who holds such a belief.
Kind of related: The Lottery Hackers
https://news.ycombinator.com/item?id=16494280
The road to PyTorch 1.0: production ready
Do you not believe that the international network of atomic clocks that measures the passing of time actually exists? This is all that we mean when we attach numbers to particular points in time, i.e., the "truth" that the current time is "noon" can be judged by reference to that atomic clock network.
Thanks, that makes sense. I’m very interested in these kinds of perceptions, so I appreciate you taking the time.
How is that distinguishable from truth from the perspective of the one who holds said belief?
It's unfortunate people are just gonna gloss over this comment because today it's a company supporting a commonly held belief on HN. Tomorrow when it's a company supporting something HN hates we'll be back on the "lobbying sucks, corporations aren't people and don't get 1st amendment rights" etc.
Would love to hear about your process for working out probabilities, etc. I've had a horse racing project kicking around ever since I was at uni but that's mostly around stats gathering vs prediction models
Decentraleyes[0] is a great plugin that intercepts many popular 3rd party CDN requests and replaces them with local copies. It's not a silver bullet, but it reduces CDN-based tracking and the chance of the attack described in the parent comment.

Subresource integrity[1] is a technology that's been available for a while that also mitigates this attack, if used properly by website owners.

[0]: https://decentraleyes.org/ and https://github.com/Synzvato/decentraleyes
[1]: https://www.w3.org/TR/SRI/
When you make a reasonable effort to block access to EU users, EU citizens aren't covered under GDPR if they happen to access your site from a non-EU country temporarily:

"This won't apply to every U.S. business — just the ones that are knowingly, and actively, conducting business in the EU. In this vein, EU courts have the discretionary ability to determine if a U.S. company was purposely collecting EU resident data and subverting GDPR compliance. So, in some cases, the inadvertent collection of personal data will be forgiven if it is found to have been occasional and "unlikely to result in a risk to the rights and freedoms of natural persons."

(from
https://community.spiceworks.com/topic/2007530-how-the-eu-ca... )
From my reading the supposed damages are Tesla getting thousands of preorders, with each preorder for a Tesla being exactly one lost sale for Nikola purely because the buyers want a truck with a particular windscreen design.
I have two-factor authentication with Twitter and wherever else I can using authy. Isn't that enough for me to not change my password? It truly gets bothersome. Maybe I'll need to break down one day and finally get a password manager. :(
FIPS certified HSMs cost 10-100x what the YubiHSM does.
Slim Framework, Twig and Bootstrap.

And then the client probably vanishes because Wix is free.
Older people are on average on fixed incomes, sure. They're also on average the wealthiest age demographic in the US.
'a' and 'm' are assigned to in the body of the function. Having them as arguments that aren't provided (and thus initially set to undefined) just ensures that they can be assigned to without 'var', saving a character or two.
So your claim is you have better scientific basis than industry experts? I'll gladly challenge you to a 6-12 month comparison of you eating meats and me eating a primary plant based diet and pay for WellnessFX panels. If you lose you repay me.

Edit: vegetable --> plant, and if I win (we can agree on some defined objective comparisons and scoring offline) I'll even donate the money you'd have repaid back to the charity of my choosing. I'd be glad to make our miminal findings public as well.
The easy way to deal with EU persons coming from non-EU IP addresses is to mention in your terms of service that EU users are prohibited from using your website. Then if they use a VPN or otherwise access your website, they will be in violation of the CFAA https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act
Yeah, I can read a table of figures too, but what does that mean in the context of a hard drive? What percentage of the heat generated by the write heads (or whatever) is conducted away via air?
Yep - PocketWeather is also great. ShiftyJelly has been a standout in the Aus indie dev scene
Economically created housing has the benefit that it pays for itself. If we can’t even get housing that pays for itself, then the system is completely stupid. (Dennis Richards, take note.)
This looks like Intercooler, but purely focused on UI transition and animation—with a bit more conceptual overhead than IC tends to require.
> Simply paste our JavaScript snippet into your website's code. We'll check every visitor of your site and will block access to users located within the EU.

See, the problem here is that you actually have to send an HTTP request to the site that's trying to block you, then you load it along with their JavaScript which then blocks you, but at that point the initial request(s) has already been logged and now they have to comply with the GDPR.

I refuse to believe this is not a joke.
A Stirling engine supplied by sodium heat pipes [1][2], even! It's a fascinating design of closed-cycle engineering, with minimal moving parts.

[1] https://en.m.wikipedia.org/wiki/KRUSTY

[2] https://en.m.wikipedia.org/wiki/Heat_pipe
Isn't there also a potential problem with hydrogen embrittlement (depending on what materials are exposed) that you avoid with helium?
This sort of empirical determination of different groups of people's "intuitions" may be interesting social science, but should it really matter to philosophy? Shouldn't terms just be defined carefully enough that intuition doesn't come into it?

Concepts like "justice" are just social constructs and not aspects of the Universe that exist outside of humanity. They will always be arbitrary.
Surfaces are important, because it is all most people ever get.
It is interesting to note that DDR and DDR2 are more immune to this kind of attack. Older computers with decently patches OS/browser would be safer to use for those who want to avoid Row hammer.

https://en.wikipedia.org/wiki/Row_hammer
Not a joke :). GDPR Shield as a product is GDPR compliant. Customers sign a data processor agreement with the service. It anonymizes IP addresses, they aren't transferred to any other third-party provider and aren't stored.
FWIW a quick search suggests the 8TB drives have the same RPM too, so it's not like the helium-drives are running faster just because they can. (Helium-filled HUH728080ALE600 versus air-filled ST8000DM002.)
I agree, except i think you missed parents point, which was to document why the function was being written, not what the code _does_
I had lots of inexplicable failures and kernel panics, and ran the diagnostic (hold D during startup), got an error code, brought it in, and got a new motherboard.

https://support.apple.com/en-us/HT201257

Runs mostly ok now, though still a pretty crap machine in my view (keyboard, 4 hours battery life (less if you do any actual work), terrible WiFi (2.4 GHz) when any dongle is plugged in (and with 2 ports, one of which is for charging, you need dongles), etc.).
Is this philosophy of code commenting the antithesis of literate programming?
At the moment there is no way the EU can enforce you to comply with that law, unless you have a subsidiary in the EU. Only if USA sign a special agreement with the EU this may change, but I don't think this will ever happen (very unlikely). Otherwise every country on planet can create their own draconian laws and expect that every single company in the world comply with it...
Well a truly bizarre thing happened, the Mapfit staff just altered the text on their pricing box from 100,000/day to 2,500/day (Google cache confirms). Doesn't look very professional.
To quote the last sentence of the comment you're replying to:

> Prices could stay high, however, if more people move to the area, increasing demand to match supply.

I think that's key. Places that are seen as the most desirable to live in tend to attract people. If housing got (temporarily) cheaper, more people would move in and it would return to a similar equilibrium.

I think this problem is best fixed by creating more desirable places to live, not by trying to find a way to pack more people in (though efforts to reduce housing prices are admirable and worth doing).

Something I've wondered a lot about is if it's possible to create desirable cities deliberately, rather than let them spring up naturally. (Obviously a lot of developers have tried to do that as a way of making money, but I suspect you could get better results if you set out with the primary aim of creating a pleasant place to live and work and structured it as a non-profit.)
What browser were you using.

Scrolling works perfectly in Firefox 57 on Linux.
Amazon and Google both most likely have more to gain from reducing their compute requirements for in house voice recognition than from keeping the cost high for others.
Definitely to the west ... those winds are killer: https://earthobservatory.nasa.gov/NaturalHazards/view.php?id...
But like I mentioned on Indie Hackers, your customers still have their own logs that need to be GDPR-compliant, which defeats the whole purpose. The page that requests your JS still has to be sent by a server, which will likely log the EU citizen’s IP. And then there’s the case where the EU citizen is using a VPN server in the US...
Did anyone else have trouble getting PicoLisp to compile on MacOS? I was eventually able to get it to work, but I had to tweak some source.
But if your JavaScript is inserted into your customers site, then the initial request that loads their site the first time + your script will be logged on their servers just like any other HTTP request.
iOS Safari
well technically you're kind of operating on 2 continents,mainly because you're storing data about an EU citizen on your servers located in US.
Since the data is originating from an EU citizen,i assume the GDPR is making sure you at least inform the user of the data collection.
Also consider that GDPR is kind of a TOS for connecting with an EU citizen,some sort of a "copyright" system.

As an EU citizen, "cheap" wourkarounds like these ones will definitely not solve the problem, might actually make it worse.It's like an anti-adblocker, it won't work on the long run,people who are tech literate enough will just start using a VPN
Are they? The film you went to see doesn't make any money in both cases. That is a very similar thing to me.
The NPR One app does collect statistics such as when do user start and stop podcasts etc. I remember them mentioning the app in a couple of their podcasts and how they use that data to improve their podcasts. It's very likely that they will use Pocket casts for that purpose and it's probably why they bought Pocketcasts, since so few people use the NPR One app.