skysight-inc/HackerNews huggingface dataset:
>GDPR threatens website owners with fines of 4% of turnover or €20 million (whichever is higher) if they do not jump through a number of ambiguously-defined hoops. The law, combined with parasitic no-win-no-fee legal firms, puts website owners at risk of vindictive reporting. Young websites and non-profits cannot afford legal teams. Therefore the risk posed by GDPR is unacceptably high.

I get the point about legal trolls,but how are the hoops ambigously defined?

- don't store data you don't need for your business' stated purpose

- get active consent before you do so

- be ready to delete data on command

- store the data with best principles (i.e., instead of having ID and other stuff connected, centralize identifiying information and protect,use pseudonyms otherwise)

IANAL, but this seems pretty sensible?
The problem is that with the popularity of tablets and phones, the desktop and laptop market is shrinking. I wonder how much of the recent hardware price increases you can really blame on cryptocurrencies vs it's becoming a niche to have root on your computer and is priced as such.
Exactly our situation. I'd love to be able to build and deploy docker images, but the "docker is root" thing makes this impossible in our shop.
That is our understanding of it too. It doesn't matter where your company is incorporated, or where your hosting provider stores the data - as long as an EU resident uses your service, you have to comply. I could be wrong, but we are erring on the side of caution with our SaaS app and treating this as the case.
Devs like you were some of our favorite targets in the pentest world. What I wouldn't give for your ~/.bash_history file... I bet I could pivot to three different servers in under an hour.

This is an exaggeration, but only slightly. :)

Security costs convenience. But people love to be too lax. And it's so fun to point it out and see the look on their faces, or pop up an XSS in their favorite stack of choice.

My best one was getting remote access on a server thanks to an unsanitized PDF filename. They were calling into the shell like `pdf-creator <company name.pdf>` (or whatever the utility was called). They were a B2B service, so they never thought to set anyone's company name to something like "; <reverse shell here> #"

I just thought it might be fun to contrast the two worlds. Those big, stodgy companies that we love to make fun of... Those guys were some of the hardest targets. I once spent a week trying to get anything on one, and just barely got an XSS. And I was lucky to find it.
What happens when GDPR conflicts with SOX, which prohibits the destruction of data?

GDPR is a great example of the kinds of disasters that happen when nations try to force the entire planet to follow their unilateral actions.
This is built on the premise that the modern 8 hour night is settled science. To my knowledge this isn't the case. I'm not saying that depriving yourself of sleep when you're tired is good, but I'm not so sure this should be taken with more than a grain of salt.
We thought about that, but then you run into other issues. All of a sudden DMCA claims will skyrocket, bandwidth costs rise, we may get our servers blocked from retrieving images from certain image hosting services, etc. That is not a silver bullet without its own risks and additional costs.
Your site has been one of my favorite finds of this decade. Thank you for the fantastic work.
He wasn't overweight, or living on pizza, candy and soda? I ask because people with that sort of attitude, in my experience, tend to take shortcuts on diet as well.
Interesting. I had a pre-diabetes marker read high on an annual blood test a few years ago. It has not reappeared since. I wonder if I just hadn’t slept much the week beforehand.
I'm have Type 1 Diabetes (the autoimmune kind) and when I don't sleep or exercise properly, my blood sugar is at least 2X harder to manage. Its far more unpredictable and inconsistent.

In a weird way, its nice to have my body make these failures blatantly evident, rather than just hiding it behind a working pancreas and then dropping dead at random 15 years earlier than I should.
https://news.ycombinator.com/item?id=16948003

https://news.ycombinator.com/item?id=16949212
Ah, good catch. Didn't realize they were using verizon as their mvno.
Have you looked into Singularity[0]? It supports Docker containers.

0.https://singularity.lbl.gov/index.html
They explained why. Obviously you may still disagree, however their opinion of acceptable risk is subjective (ie it's silly to tell someone what their tolerance for risk should be).

> GDPR threatens website owners with fines of 4% of turnover or €20 million (whichever is higher) if they do not jump through a number of ambiguously-defined hoops. The law, combined with parasitic no-win-no-fee legal firms, puts website owners at risk of vindictive reporting. Young websites and non-profits cannot afford legal teams. Therefore the risk posed by GDPR is unacceptably high.

> Perversely, this new EU law hurts small and ethical startups, but helps reinforce the dominance of Facebook, Google and Twitter, who are able to prepare and defend themselves using established legal teams and cash reserves, and who now face less competition from startups. The EU Cookie Law, EU VAT regulation and now the EU GDPR are all examples of poorly-implemented laws that add complexity and unintended side-effects for businesses within the EU.
Just wait, it's a fake door test and sanctus.io is actually going to pivot to this due to the overwhelming demand /s
Sun released the GNU Compiler for Java in 1998 [0], so I'll need a source for that.

[0] https://en.m.wikipedia.org/wiki/GNU_Compiler_for_Java
Işıklı bebek ayak kabı
What hasn't worked: thinking in terms of monads / applicatives / functors / other FP / category theory concepts.

I know what those are, but this is just not how I see the world, and forcing myself to think about code in those terms just isn't productive.

What worked: using FP composition / organization / abstraction patterns that often involve those same FP concepts but without cargo culting.

Non-hardcore FP has been very rewarding to me. With Scala, mixing FP and OOP patterns is a great way to get the best of both worlds.
I sleep therefore I am.
>The truth is you're really doctoring your images to satisfy your weak ego.

I don't think this is true if everyone is doing it. It's like an arms race, you have to do it just to reach a baseline, as opposed to doing it to stand out.

Something similar that occurs in online dating is that guys add 1-2 inches to their height. The vast majority of men do this. I'm somewhere between 5'10 and 5'11, and most people my height list themselves as 6'+, so I started doing it too, and there's been a noticeable difference in the number of matches I get.

If I put my actual height, women will assume I'm under 5'9, because every guy who is 5'8 is listing themselves as 5'10.

You can claim that I'm being "insecure", but I've never been dishonest about my actual height in person. I used to just round down and put 5'10 because I really didn't care, and I'd always get remarks about how I was taller than they expected. Funnily enough, lots of people who are the same height as me really do believe they are 6' because this exaggeration has become so common, and the average adult doesn't measure their height properly and just goes off what everyone else says.
It seems like more research into GDPR could have prevented this.

Firstly, there's nothing this site does that is so unusual. If the user gives explicit and informed consent for their data to be used in this way, then you are likely to be covered.

Secondly, it's looking unlikely that the rules will be enforced that strictly in the near term, especially against a small, hobby website. IANAL but you likely have a couple of years until you have any chance of being on the ICO's radar (ICO is the UK's enforcer). And even then, you can reasonably expect the find to be << €4M.

Thirdly, if you run this site from a limited company (about £100/year to maintain), then the very worst case would be that you are investigated under the GDPR in the future, and you can fold the site then at which point your liability ends. No need to do it now, in fear of something that may never happen.

I hope it's not too late to change your mind about shutting down!
Sidenote to this: if you want to sign a Windows driver (and on XP+, you do), you can only use Microsoft approved CAs.
Britain used to rule over half of the world, France had some in Africa - like Algeria; Belgium had Congo, the Netherlands had a few colonies some time ago. Not to mention the colonies of Spain, Germany when these countries were not quite as democratic as they are now, but democracy is a continuum, isn't it?
Enjoyed the video!

Can't wait to see the orbital stuff. What blue origin is showing currently looks reusable. Curious if it will scale, some of this is easier at lower scale.

I am curious about the claim of a feather soft landing - there is pretty much nothing lighter than feather light, even an airplane landing is harder. That's a big accomplishment if true (and looks like there should be at least a jolt of some sort just eyeballing. Props to the team for getting it so light.
Common antibiotic significantly reduces child deaths across Africa
> Most of the jobs that mint new members of the upper / upper-middle class are based in big cities.

i feel that this claim is exaggerated. anecdotally, i live in a suburb of a midsize city. i rent a 3br house for under $2k a month and there are tons of tech companies within a 25-45 minute drive of my dwelling. an entry level job at any of them would easily put a person in the high end of middle class incomes for this area.

to be sure, companies in the wealthiest US cities offer experienced employees compensation that is unmatched anywhere else. but for entry level and/or average skilled developers, it seems like SF, NYC, etc. are the only places where you aren't guaranteed an upper-middle class lifestyle.
Posted with a straight face by a startup with no actual qualifications for talking about mental health, but with an Instagram full of smiling people and pithy quotes.
For my own startup. I quit my corporate life and took a year to tour New Zealand while slowly spinning up/planning everything. More or less stereotypical life-crisis stuff. Obligatory Medium post: https://medium.com/@TylerLastovich/pressing-shuffle-on-life-...
The GDPR is about 68 to 90 pages depending on which language you're reading it in. It is trying to be futureproof by leaving measures defined in terms of 'current state of technology', 'reasonable security considering the risk' and other such ambiguous terms.

I run a small business and I like this. Just about anybody can read it and understand what rights and requirements are being set out in it.

The GDPR specifically refers to the concept of "micro, small and medium-sized enterprises" [GDPR 40p1 and 42p1 use this text; they direct member states about the spirit of the law, referring that the needs of such businesses need to be taken into account].

GDPR 58p2 sets out that regulatory bodies in a member state have the power to issue warnings. As in, if you mess up, unless the mess-up is malicious or excessively negligent, you get a written warning and reasonable time to fix the problem. My government (The Netherlands) has taken the effort, as have a significant number of third parties, of creating a legal document of 3 to 10 pages covering some details, and they generally set out more explicitly that you grant yourself a week or so to fix problems without penalty. Whilst the GDPR is intentionally ambiguous in order to try to be somewhat futureproof and remain short enough to read back to back in an afternoon, it's fairly clear this is perfectly fine.

The most strenuous sections of the GDPR involve requests from those whose data you store. If they ask you to supply what data you have of them, and whom you've shared it with, you have to comply. Within reasonable timeframes, and you cannot lie about it. If they ask that you delete this data, you must be capable of doing so, and you must do so within a reasonable timeframe. However, the GDPR is nice enough to grant you exceptions for reasonable measures which nevertheless make it hard to comply. Things like a backup tape are specifically called out. It's okay if data that's been requested to be removed, stays on those. You would have to show that this data is pseudonimized (GDPR-ese for encrypted, pretty much).

Any service which has a hard time supporting requests to explain what data you store and where you've stored it, or which cannot delete it from the main service on demand... should indeed just call it a day and shut down. I don't think a service like streetlend would have a hard time supporting such requests, however.
> Long term return on invested capitalhas been declining since the 1960s.

Need to take into account the ever-greater share of the GNP consumed by the government.

MSFT has been around for >30 years. Still waiting for their sacrifice of the long term to produce a precipitous fall.
> Seeing someone's thought process when debugging something like a kernel would've been really useful.

The first thing when doing a kernel is don't be clever. Suboptimal isn't just good--it's preferred. Linear searches are fine. Shell sorts are fine. Arrays are fine even if you have to recopy them a lot. Hashes are too complicated. Trees are too complicated. Randomizing things is too complicated. Until your kernel needs to scale, the "suboptimal" ways are more understandable, and, as a bonus, they sometimes are more optimal as they require less up front overhead.

The second thing is "replace pieces". Because you weren't clever, you can rip out and change chunks with relative ease. It's not "proper", but, if you're on a deadline, sometimes swapping some component and having the bug go away is good enough. Just realize that, if a bug goes away randomly rather than because you understood it and killed it, you have planted a time bomb likely to blow up in your face at the worst moment. :{

The third thing is "hypothesize and THEN test". This drives me crazy with junior folks. If I had a nickel for every time I got the response "I dunno" in reply to "Okay, why did you think doing X would fix things?" I would be a rich man. This is the piece that makes debugging a kernel hard. You have multiple layers of abstraction, and the bug is probably 3 layers away from the thing that triggers it.

Something which I tend to use more for things like kernels than "normal" programming (whatever that means) is that I religiously check and assert on my data structures even at great performance penalty. Having a data structure blow up immediately is far better than soldiering on and getting the malfunction after everything is scrambled.

Something which I am becoming increasingly religious about is that time is an input to my functions that operate on "external" inputs (button presses, RF events, USB events, network packets, etc.). It's a pain sometimes, but when you need to debug something subtle, it is really nice to be able to replay things exactly.

And, a final piece of advice, learn your tools. GDB, for example, is amazingly powerful. Unfortunately, I only seem to learn more about it after the fact. :( I do something really stupid and someone asks "Why didn't you just do <mumble foo mumble> in gdb?" and my response is always "Because I didn't know about it."
You're overthinking it in my opinion. If it were GDPR related then you could bet they'd have added something about that.

More likely is they just have years of tech debt and their operating profit isn't high enough to warrant the reinvestment into the platform. Particularly if their paying membership has been in decline (or even just stagnating). They're in a crowded space and sometimes it's better to bail out while you're still in the black rather than throwing money at a problem that simply is never going to see high returns anyway.

Also for what it's worth the EU isn't some evil organisation that will go after every single business until everyone is bankrupt. There seems to be a fair amount of hysteria in your post about just how negatively GDPR will affect the average online business. So long as you handle your data properly and don't work in the ad / social media industry or other sectors where your business is selling user data, you don't have much to worry about. Frankly I welcome the GDPR.
http://podcasts.joerogan.net/podcasts/matthew-walker
the flipside is you really get a lot of quality time in in your 20s 30s and 40s. Doesn't that count for something? If you sleep five instead of eight hours a night that's actually about two years of additional lifetime even if your lack of sleep kills you at 70 rather than 80, and I'd guess 10 years of life reduction is way too pessimistic of a guess, and it's the bad years at the end you're sacrificing anyway

I'm somewhat serious actually, I'm not convinced that sleeping your youth away is actually a good trade-off. Not to mention that sport, a healthy diet and checkups can probably mitigate the downsides to some degree.
If a public blockchain can belong to a single entity than it really isn't satisfying the moat sacred responsibility of a blockchain: to be trustless.

The fact that the times ran with this story despite the headline meaning very little just shows how hollow so much journalism is.
Facebook warns investors to expect bigger and worse scandals than Cambridge
Probably YC Round 2019.
Diabetes is known as a/the major driver of heart disease

“Those identified with cardiovascular disease, not
identified with diabetes, are simply undiagnosed."

https://static1.squarespace.com/static/52faa95ee4b0b0a74811f...
edit: I understand this is an unpopular fact. However it is a fact that the EU does not have global jurisdiction to overrule foreign national sovereignty and dictate legislation. US businesses do not need to comply with GDPR if they are doing no business in the EU, period.

No, you do not have to comply if you're outside of the EU's jurisdiction. They can only hit you if you've got business in the EU that they can directly touch. Facebook, Google, etc. are aggressively complying because they want to continue making money in the EU.

They'll have to overrule eg US or Chinese jurisdiction to force outside companies to comply with GDPR.

How exactly do they intend to force compliance upon the two global superpowers with $34 trillion in economic output? It's laughable. US Federal courts will bury any attempts by the EU to legislate US laws/regulations on these matters.

If I'm a US service/site, I do no business in the EU, and I store information from EU residents on my servers in the US, the EU can't force me to comply with GDPR. They have no means to force that compliance, and to overrule or dictate US domestic laws. The EU doesn't govern the world's laws, if they didn't already realize that they're about to discover it.
Sleep is one thing I never sacrifice, everything else can wait/ be put off and Im in my mid 30s. 8-9 hrs a night and I feel fucking great every day.
An emacs mode for what? I don't use emacs much but would be up for using it it helps me with something. Fairly happily plodding along with just the GNU APL interpreter and akt though (and akt seems to work with vim through invoking `akt vim`).
start by turning all notifications off... as a bonus, your battery life will extend dramatically...
francesucks.com cannot be mistaken as an official France site. Americans looking for travel information won't know to type france.gov.fr
Why the altered headline? That makes no sense
And what’s the deal with airplane food? Could it tast any worse?
Blog Series: Data Science for Startups
I'm writing series of blog posts focused on building a data science platform for a startup. Please let me know if you have any suggestions for the series.

Introduction Post:
https://medium.com/@bgweber/data-science-for-startups-introduction-80d022a18aec
True, evidence looks more like this:

Two well-done meta-analyses of statins for primary prevention showed no mortality benefit. After the exclusion of four trials with serious risks of bias, the relative risk of cardiovascular events associated with statins was 0.99 (95% confidence interval, 0.90 to 1.08).2,3

http://www.nejm.org/doi/full/10.1056/NEJMc1207079
Context and culture suggest the latter interpretation. It's definitely talking about descendants, not agriculture, and it's definitely using "as many as the stars" in a fashion that suggests a lot more than 9000. Some clearer quotes:

> Deuteronomy 10:22: Your fathers went down to Egypt seventy persons, and now the LORD your God has made you as numerous as the stars of heaven.

Shortly before that quote was written, a census numbered the men at around 600,000, for a total population of 1.5-2.5 million.

And there's also the New Testament interpretation of the same events:

> Hebrews 11:12: Therefore from one man, and him as good as dead, were born descendants as many as the stars of heaven and as many as the innumerable grains of sand by the seashore.
I suspect you are trolling at this point.
For that tutorial the only problem you might run into is multiple statements or recursion in dfns (bracketed functions)
This hit home to me, as my high school was in the same conference as Browning, MT, which is on the reservation.

Also, if you have read the Kate Shugak series, you will see some resemblance.
If your security model relies exclusively on the integrity of information processing systems, it's going to fail. Failure is only a function of how much interest there is, and thus investment in, breaking that security. Therefore any decent security model will rely heavily on non-technological methodologies for preserving security compartmentation and protection of vital assets.
I find 8 hours of sleep excessive.

I'm always battling myself to sleep less than 6-7 hours every night but my body always manages to get better hold of me.

Sleeping more than eight hours gives me a headache and getting fewer than 6 hours sleep makes my entire day feel drowsy.

But I'll take feeling drowsy than a headache as it's been shown that working in sleep deprived state improves 'creativity'.
Ask HN: How true is it that most founders are taking drugs like Modafanil?
I keep seeing references online taht a lot of people in Silicon Valley are taking prescription medications such as modafanil, adderal, etc. Is this actually common? Anyone here take those things and do you need them to survive?
As CTO at a small healthcare company, one of my primary goals is to prevent even our employees from getting unaudited access to the db in our production system. In dev, no problem.
>it's been a long time since Miles per hour and feet were used to talk about rocketry

Falcon 9 is built on the imperial system, as are Atlas and Delta. SpaceX is only switching to metric with BFR.
He said the site does not make money. So why would he spend more of his time to make the changes needed to be compliant?

That said, I think the fear of no win, no fee legal firms is a little overblown. You can't get blood out of a turnip and if he's not making money there's no reason any law firm would be interested in suing him.
You are right in that I don't agree. I don't think this is a question of tolerance of risk, but that he doesn't seem to want to study all the implications.

I will be first to admit that GDPR is full of holes and ambiguities and has never been tested in a court of law yet, but rather than (as the two quotes you pulled from his site) assume that GDPR has been set up to give the 'big boys' free reign and punish small operators, I'd like to think that GDPR actually puts a LOT more accountability on the larger players and actually will put smaller players on a semi-equal footing.

I really don't think that the EU will be spending the money and time (and open themselves to the PR disaster) of suing websites that might make $1000/mo for the full EUR20Million, do you?
Three kinds of memory leaks