skysight-inc/HackerNews huggingface dataset:
That's certainly one of the first things they checked for, which is understandable.

They started with a home sleep study (you pick up the equipment and are shown how to put it on before bed), but it showed that my breathing was fine, blood oxygen levels were normal, and I snore less than the average person.

So that's when they had me do the full study where you sleep in a lab hooked up to monitors to track breathing, brainwaves, muscle movements, etc.
This is brilliant, I'm surprised phones don't have this built in.
Social Media and PCount Can Increase Store Traffic and Revenue
Does that include IP addresses? How do you anonymise it such as you can be sure it cannot "be used to build a profile"?
Ask HN: What book to learn about code design and write high quality code?
A friend of mine just got accepted to FB as a SWE even though he has no CS major. He is super smart though he lacks the knowledge/experience in writing high quality code that you would learn from experience or at university in classes such as Software Design/OOP/...

Is there a book to learn such code design that would help him close the gap in his knowledge? Obviously he will learn these things also from the awesome engineers there but maybe the book would also help (And I need to buy him a gift so this would also help me :-) )
They're...completely different risks?

We started out talking about the risk of an opportunistic civil suit filed by a law firm working on a contingency basis seeking a €2m payout; now that we've established that isn't possible, we're talking about the risk of an actual fine for breaking an actual law levied by an actual regulator (who is on record as saying that large fines would be a weapon of last resort in the most extreme cases).

So other than the risk being much lower, the likely penalties much lower, the chance of an unfair outcome being much lower, and the incentives and mechanisms being completely different...

...sure, the risk remains.
>you can't have a web server log

Yes you can, you just need to take all possible precations to keep that data safe, which by and large means encrypting it properly and ensuring only people who need to have access to it have access to it.
Tesla Doesn’t Burn Fuel, It Burns Cash
I think perhaps the random-like distribution of the stars (position and brightness) suggests a huge number of them, even if you can't see them all. In other words, even without modern cosmological theories you guess that there are many fainter stars which you can't see.
Tips on Learning and Improving Your English – Swiss Language Success Articles
Oh, I agree with that. But the phase-in could have been gentler on the unknown legacy software people do run.
No, but why not skip the ads then?

Either you earn pennies (and it shouldn't matter) or you should follow the commercial rules...
Data Transfers Analysis in Computer Assisted Design Flow of FPGA Accelerators
The link to Mr. Love's case, or Mr. Dotcom's ongoing case clearly show being "physically here" didn't seem to factor into those requests.
Requirements analysis done properly it involves more than just checking boxes, there are exploratory exercises like https://www.agilealliance.org/glossary/storymap/ which allow stakeholders, customers and the development team to work together to voice requirements and concerns.

http://agilemanifesto.org/history.html
"The Agile movement is not anti-methodology.."
Agile is not about hacking, and the manifesto is not about replacement of one with the other, but about the balance of how you adopt them.

Formal requirements analysis might be too much process, but then on a financial system, it would likely warrant a necessity on accountability requirements put in place by regulators.
Looser story mapping alone might be an appropriate balance for a Beer Catalog.

I'm not a fan of a agile, but can we stop recharacterising it as not doing process.

*Not a fan: Having a 3 month support ticket, with multi-level signoff, 100% test coverage, cost codes and invoices per change is a bit much for text change on a website, so Agile does help solve a problem that really does exist in places. But is individual and interactions before process appropriate on medical systems? Agile may fit somewhere in the middle ground (between computer games and nuclear control systems), but it is definitely not a catch all for appropriate ways to work, especially in high risk environments.
> The problem is a lot of us who would never scrape or sell data and have no interest in exploiting our customers, are still worried about not being GDPR compliant, and the EU choosing to pursue us an example for something that none of our customers actually care about.

Why would you be worried about being pursued as an example? Is there any data that supports this as a reasonable fear? Isn't this exactly the "GDPR is a nightmarish spectre that can destroy anyone at any time" mentality?
Not so much in H1B data: http://www.myvisajobs.com/Visa-Sponsor/Facebook/189973_Salar...

At least for the base salary I guess.
This revolution in our understanding of depression will be life-transforming
Perhaps I shouldn't have said "large" or "notable". The point is that when a prime number is discovered meeting certain criteria it is included in public databases. This makes the case of an "illegal" such prime interesting.
Objective c questions and Answer
>many other complex laws

It takes 30 seconds to find out whether your identifier violates a trademark. Your content is trivially not a copyright violation if you created it yourself. Hobby projects are not debating the finer points of fair use and whether the conflicting name is for a sufficiently different kind of business to avoid confusion. But every HTTP server handles personal data, and a web-based tool with a database backend especially so, so all the subtlety of GDPR is in play.
How  to Use APIs in Your Business
It'll be interesting to see how this plays out. How explicit does the consent need to be? How obvious do deletions need to be? Will server location cause problems?

It seems obvious that comments won't cause an issue but because of the fluffy language of GDPR some interpretations could make simple things like this problematic.
Add SMS automation to your business using HubSpot Workflow
> What if America assigns themselves a.com and Australia also assigns themselves a.com ? Only one can prevail.

This one's easy; the US owns .com and Australia doesn't, so obviously the US will win.

This makes it pretty mysterious why France would have a claim on a .com domain, though. They own .fr, not .com.
It's how `vue-template-compiler` works to transform a template into render functions.

checkout here: https://github.com/vuejs/vue/blob/dev/packages/vue-template-...

also checkout last 'state of Vue.js' on YT where the creator talks about it ;)
Yes. And some of the things that are shutting down probably wouldn't have come under GDPR compliance anyway (they were personal projects, not run as a business) or were aready violating existing law such as PECR.
Isn't the F-35 already more costly than the F-22 without Japan's involvement?
Exactly. Same goes for game industry.

As for Netflix - you get to paid premium for taking a non-reliable job - they brag about their high turnover rate in their "culture" deck.
Top Checklists on HN
Literally the only thing the landing page says is the purpose and what your email is used for: "Join the Slack workspace Aptible Gridiron GDPR Slack", and "Verify your email"
new Function(...) isn't equivalent to an eval
How would they have the jurisdiction to fine a one man company established say in Panama?

What about companies like Alibaba?
Why would you keep the ip-adress in the first place?

If it is for fraud-prevention, then that is sufficient reason to keep it unanonymised...
Are many US based businesses considering limiting access to EU consumers to avoid GDPR? Reselling user data seems to be part of many business models, and I don't know if EU is such a huge market internationally, especially without UK. I support the goal of improving data privacy, and in general GDPR is seen positively by those I've talked to, but the EUs last attempt resulted in useless, intrusive cookie warnings all over the place.
Interesting, I've only ever seen Pornhub on Pornhub... ;)
Another pointless argument that could have been avoided by RTFA.
Uoou... now this is really cool, this guy is incredible :)
I'd say posting somebody's comment they want posted qualifies as legitimate interest, and therefore doesn't need consent. What other reasonable expectation could a person have that you'd do with that information? No need to overthink or overengineer this.
In re the 'and nothing improves' sentiment at the end: there _is_ a safety limit and it's even documented in dump(5):

/proc/sys/kernel/core_pipe_limit

When collecting core dumps via a pipe to a user-space program, it can be useful for the collecting program to gather data about the crashing process from that process's /proc/[pid] directory. In order to do this safely, the kernel must wait for the program collecting the core dump to exit, so as not to remove the crashing process's /proc/[pid] files prematurely. This in turn creates the possibility that a misbehaving collecting program can block the reaping of a crashed process by simply never exiting.

Since Linux 2.6.32, the /proc/sys/kernel/core_pipe_limit can be used to defend against this possibility. The value in this file defines how many concurrent crashing processes may be piped to user-space programs in parallel. If this value is exceeded, then those crashing processes above this value are noted in the kernel log and their core dumps are skipped.

A value of 0 in this file is special. It indicates that unlimited processes may be captured in parallel, but that no waiting will take place (i.e., the collecting program is not guaranteed access to /proc/<crashing-PID>). The default value for this file is 0.

(edit: in case if that came off as curt i didn't intend it to, i do agree that far too many things suck because "it's documented in a defunct mailing list somewhere and if you don't know it's your own fault")
> Is the IP address any user sends to my site in order to simply access it "personal"?

No. Something is only personal data if it can be used to identify a natural person.
Is it enough to identify a person?

Name alone is probably not as many people share names, unless you have an unusual name. Add address and phone number and it will be. IP address on its own is not.

Is "1.8m tall guy in green T-shirt who is head of team X" enough to identify them? If so it's personal data.

Most of this applied to the Data Protection Act too. GDPR adds some items like biometrics
You pulled that statement out of context, which is that the site may be doing something that is perfectly acceptable, but with the addition of legislation, the claim is now much more serious and requires legal consideration. This is particularly troublesome if the request is made in bad faith, which is a great way to "DDoS" a company/individual.

Why, in the case of a single individual running a website, is it suddenly their responsibility to properly manage someone else's PII? Where is the responsibility on the individual whose PII it is? How did the PII get there in the first place? Surely it should be considered negligent to hand out PII to a company whose business model is transparently selling user data.
Quite a few (30-40) listed here https://wiki.lineageos.org/devices/ - if it runs LineageOS it's probably going to have other ROMS available too
> done some various projects on Github (Using Go, JS, & Python)

What exactly does this mean? Do you have a bunch of repos that are tutorial projects or did you create something yourself? Are they deployed? What state is the code in, does it look prod ready? Are there tests?

When an artist applies for a position they bring a prepared portfolio not a bunch of sketchbooks. Is your Github a portfolio or a sketchbook?
No, you also need CSS.
There is a famous precedent with milka.fr https://fr.wikipedia.org/wiki/Milka_contre_Kraft_Foods

tldr : a woman named Milka bought the domain for her own business and used it for a while before Kraft foods noticed it. Lawsuit followed, big business won.
I guess you never heard about the German "Abmahnung" industry.
I tried this for a while and I consider the experiment failed.

No closed source means no Whatsapp, etc. Let's face reality, no-one is using XMPP ;)

In the end I started the policy "Prefer open-source software on Android", which works pretty well:

* Note taking using orgzly

* Tasks using opentasks (https://github.com/dmfs/opentasks)

* File Sync using Syncthing

* Contacts, Calendar using davdroid & nextcloud

* Firefox for browsing (this is a no-brainer)
I've always felt that git is poorly designed for that reason. At the very least, there should be an "identity block" that commits etc point into, rather than embedding names, emails, and other identity information into immutable commits. Under GDPR, that's how it would've been designed in the first place. Of course, this'll never happen without a complete fork of git.

Once you've got that sorted and you can change/remove identity information, the likes of GitHub have no issue so long as they have GDPR-compliant contracts with any business partners who can access git repos. Obviously, anyone using GitHub who decides to store all identity data forever is, generally speaking, not GitHub's problem, same as someone who noted down the names of all their friends on Facebook isn't Facebook's problem.
The regulation has been known for years.

BigCorps, I work with, have been working on this for years...

If you start now, then you have a problem.

Also, I expect there will be quite some years before the book is thrown on companies, that do not willfully disobey the law..

As most new major legislation, there is a long process of dialing it in (for the lack of better terms), and in most north- and western european contries (at least, I don't know that much about eastern and southern european) most regulatory handling is dialogue-based and not fine-based unless you are a black sheep..
Not "relating to", but "can be used to identify a natural person".

An IP addres, for example, isn't automatically personal data. It might be if you can link it with other information that can be used to identify someone.
Cardano Becomes One of the Most Scalable and Secure Smart Contract Blockchains
Going by the comments here, a lot of people think this way.
Kind of like asking is it possible to make an AI from twine.
>> The problem is what happens if a legal firm or an agency targets you. Even if you adhered to the spirit of the law, they can dig up evidence that you didn't obey the letter of the law (since GDPR is quite loose and ambiguous).

As I understand it, you will be able to appeal or somehow else address the European Data Protection Board, that will be tasked with ensuring the consistent application of the regulation:

Coordination and Consistency

Under the Directive, there has been a certain level of coordination in interpretation and enforcement. Apart from informal contacts among authorities, there has been a succession of non-binding opinions issued by the “Article 29 Data Protection Working Party,” an advisory committee comprised of representatives of the national supervisory authorities (commonly termed “data protection authorities” or DPAs), along with the European Data Protection Supervisor appointed by the European Commission. Under the Regulation, that group will become a more independent and powerful regulatory body called the European Data Protection Board, tasked with ensuring “the consistent application” of the GDPR. An entire chapter of the Regulation (Articles 55-63) is devoted to cooperation and consistency, with procedures for multiple DPAs to coordinate investigations and promulgate consistent decisions and policies reviewed by the Board and reported to the European Commission.

One feature of coordination that should be helpful for multinationals is a provision for companies to work with a “lead supervisory authority” in the country where the company has its “central administration.” That authority will then coordinate with the authorities in other countries where the company operates, attempting to achieve consensus on issues that affect all of them.

https://www.infolawgroup.com/2016/05/articles/gdpr/gdpr-gett...
>There are lots of guides out there designed for humans.

It's not even remotely okay to use random people's blog posts as a compliance strategy.
Amitriptyline is primarily an antidepressant, and it's very common for them to cause drowsiness, but there doesn't seem to be many studies as to how well they help maintain sleep, which would probably be key to my issue.

It's good that Amitriptyline is able to help you with spasms, though!
When I read things like this I start to think about the following question:
Given no technology at all (i.e. after an apocalypse!), how would one go about creating a computer (as we know them). What sort of knowledge would you need?
The science of these things is basically multi decades of trial and error in various disciplines. Imagine a manual that explained how to create everything from scratch!
Thank you for highlighting this gross misinformation.

A Data Protection Officer, especially from a law firm, is not in any way imaginable "almost nothing" regards the cost.
It's based on 1 year's worth of investigative research. The guy is publishing a book.

So, no, this isn't some yellow journalism hit piece.
Although the ebooks are generally good quality, the spelling and grammar are in many cases (deliberately) changed from the original. When I read a book I want to read the words of the original author, not a modernized version. It would be nice if you could download versions without the "[Editorial]" changes.
An IP address is only personal data if you can link it with other stuff to identify a natural person.

If your weblogs are used to prevent crime (fraud, for example), you're allowed to keep them.

People are making the mistake of thinking that "user permission" is the only reason you can keep data, but that's not true.
Repblicanism vs Monarchism seems a terrible comparison.
Chris Beach accuses the GDPR or beigng ambiguous and an example of a of poorly-implemented laws. Combined with the guidance from something like the UK ICO, it seems to me to be remarkably clear and not onerous if your business isn't based on extracting value from user personal data in the first place.

Could we have some examples of the ambiguity and poor implementation?
I suspect that there are many contours of the law that European regulators are not entirely decided on. The next few years will be a learning process for them as well as the tech industry (and their lawyers).
A couple years ago I was diagnosed with DSPD (delayed sleep phase disorder) after several months of non-24 hour sleep cycles.

The advice the specialist gave me was similar: don’t worry if you can’t sleep. If that means you have to get up and do something, do that and try again later. If you’re relaxed enough just laying there, do that.

I’ve not been able to rid myself of the timing issues that plague my sleep, but my secondary insomnia is completely gone, and most of it was because of my attitude toward sleep (and a little because of better sleep hygiene lengthening the cycle time of my delayed phase).
> A PoC was shown of how to do this with buildkit several weeks ago in [0], but in your words - it's also not for the faint of heart (involving patching the Kernel).

Rootless builds work without kernel patches (the "rawproc" stuff mentioned in issues is not going to be merged into the kernel and there are other ways of fixing the issue -- like mounting an empty /proc into the container). I can do builds right now on my machine with orca-build.

The main reason it's for the faint of heart is that we don't really have nice wrappers around all of these technologies (runc works perfectly fine, as does umoci, as does orca-build, as does proot, as does ...). Jess's project is quite nice because it takes advantage of the cache stuff BuildKit has, though I personally prefer umoci's way of doing storage and unprivileged building (though I am quite biased ofc). I'm going to port orca-build to Go and probably will take some inspiration from "img" as to how to use Docker's internal Dockerfile parsing library.

For more information you can take a look at https://rootlesscontaine.rs/.
A storied though difficult-to-cite source.

Sounds vaguely Schumpertarian.

Though your first description is mor National System / Friedrich List.
What kind of litigation is made more possible with GDPR?
That depends on what you are comparing to. Both GCC and Clang are very slow compared to, say, the Go standard compiler.

However, comparing compilation speed across languages and compiler implementations is a bit difficult.
> 1 year old coming into bed and wriggling in her sleep waking me

I respectfully suggest you put a stop to that before it becomes a habit, as your child needs to learn to go back to sleep in their own bed.

Quietly & calmly return them to bed, tell them to go back to sleep, wait outside a few moments, then go back to bed. Repeat as necessary.

It will take a few nights, but they'll soon realize bed-hopping is not accepted.

(Not to mention, 1 sounds pretty young to have moved from a cot to a bed.)
When I think of my current partners name, I sometimes cycle chronologically through all past partners until I get to hers. Normally in my mind, but sometimes out loud.

She doesn't like that.
>Free doesn't mean you are exempt from complying with law

It doesn't, but free on the internet has so far meant you're only on the hook for your own jurisdiction's laws.
We've had data protection law for 20 years.

And GDPR has been in place for 2 years already. It just comes into effect now. Businesses have had about 5 years to get ready for GDPR.
Well it tries yes.
A Limit to China’s Economic Rise: Not Enough Babies
Try Telegram instead of WhatsApp. It's a good drop-in replacement.
I find more often than not that the kernel people are reasonably good with documentation. User space on the other hand seems to treat documentation either like a chore best avoided, or something to bludgeon people with when and API is mangled between releases.
Sure, that is what I meant by dialing in.

But that is a process without fines (unless the companies are entirely unreasonable)...

At least here in Denmark, the DPA is really reasonable and willing to work with the companies to get compliance...
>almost nothing

Yeah, I'll just get a small loan from my father.
Methinks Uber should be a close runner up?
What are the features of bootstrap?
This one helped me:
https://www.amazon.com/Clean-Code-Handbook-Software-Craftsma...
1) You do realize those sites are pretty much 99% of the web, right?

2) Those sites used GA to statistically analyse and understand their user base, in order to better serve them. How do you propose to do it instead? How to find out what was a bad redesign? A bad landing page? How to understand a conversion ratio? The churn?
I think some men are missing three things:

- Belonging

- A Path

- Status

For most men in the past, family has provided both the path and belonging (in addition to career and hobbies etc).

As for status, it was a lot easier to be good at something in your small circles. Now with the internet it's almost impossible to be good at anything vs the rest of the world.

As for how we solve this, I'm not sure.
Links which can be handled by apps (e.g. YouTube or Reddit) won't open in the app but in Firefox instead. This is a show-stopper for me :/
> Zuckerberg took a $1 salary last year and got no new stock grants (on top of the $70 billion in Facebook stock he already owns). His $8.8 million in compensation last year was mainly for his personal security detail and private aircraft use.