skysight-inc/HackerNews huggingface dataset:
I am not personally the federal government of the US, so I’m not sure why you’re directing that whataboutism at me. However, comparing identity theft to death or permanent disability is not equivalent no matter which way you look at it.

In any case, none of that responds to any of the points I made. The EU does think this regulation applies to every company in the world (unless you can somehow prove you don’t handle any EU data subjects data - which almost no company could do). One of the reasons being that they don’t want to only hamstring European company’s with it, as that would be a very poor strategic move for their markets. How enforceable this ends up being is entirely unknown at this point, and you can bet there’ll be a lot of legal challenges ahead regarding this.
3rd and 5th year completion April 2018
I follow exactly the same rule. Sleep is maybe the greatest productivity factor. Same for rest in general. If I don't rest, I know for sure I will pay later adding "interest rates"
How do you do it though? My social bubble uses Facebook (FB groups, events and Messenger) exclusively.
I would recommend taking a look at [1]. This is the exact usecase I started working on rootless containers for. I talk a bit more about it in a talk I gave last year[2].

[1]: https://rootlesscontaine.rs/
[2]: https://www.youtube.com/watch?v=r6EcUyamu94
'We're doomed': Mayer Hillman on the climate reality no one else will mention
Mind your own life & business.
I was actually part of a university research group when I discovered the need for this, and started working on rootless containers as a result -- I gave a talk about this last year[1] (though quite a few things have changed since then).

[1]: https://www.youtube.com/watch?v=r6EcUyamu94
I'd tend to agree with "AI is not Intelligence", my problem with the article is that it seems to say "what's called AI today is not Artificial Intelligence", and IMHO the term "Artificial intelligence" has always included system that only do some functions or the mere appearance of intelligence, which is why distinguished cases like "strong AI" exist. I guess the intended audience for the article might not be aware of that as such, but then the article IMHO should cover that appropriately.
Is it a YC company? Just curious. :)
This reminds me of "second sleep" from medieval times.
This is why I don't get all the hysteria and all the "block all EU IPs!" comments of people in this thread. For years, there have been 28 different data protection laws in the EU that you could be sued with. Now there will be a harmonized one.

So from getting sued 28 times with 28 different laws you have reduced your risk to being sued with just 1. Now, in order to have an online business in the EU you just need to comply with 1 data protection law instead of with 28. How is this bad?

What I suspect is that many people were just not aware of the 28 previous data protection laws that they needed to comply with, at all, and are now realizing that these laws exist.
It basically amounts to falling down, except you're moving sideways at a fast enough clip to miss the earth entirely. Just being up the right distance isn't enough, You need the sideways velocity to make sure you don't hit the planet.
Et voila:

https://ico.org.uk/for-organisations/resources-and-support/d...
We have strong opinions about this, and we explained them here: https://translation.io/blog/gettext-is-better-than-rails-i18...

Even if we compared GetText to YAML key/values (Ruby on Rails), the same reasoning applies also for PHP key/values of Laravel.
Here are a few stories about sites/services being shutdown...I expect the real deuluge won't happen until after it takes effect.

StreetLend.com - https://news.ycombinator.com/item?id=16954306

Super Monday Night Combat - https://www.polygon.com/2018/4/28/17295498/super-monday-nigh...

Tunngle - https://www.tunngle.net/en/

Ragnarok Online - http://massivelyop.com/2018/04/26/ragnarok-online-shuts-down...

Verve - https://adexchanger.com/mobile/verve-closes-european-busines...

SteamSpy - https://www.reddit.com/r/pcgaming/comments/8bdkuz/steam_sale...
That's the nature of law. It's a set of principles, it's not black and white in the way techies want the world to be.

Painful when needing to implement? Absolutely (not my favourite either, I want definite answers). The way it is? Yes.
Right, but compilation performance is not a race in which you have to be first, but a minimum threshold that you must meet. Compilation just has to be fast enough that it doesn't annoy developers most of the time. Once you achieve that they'll mostly stop complaining. I believe Clang et al are fast enough.

(This is true for performance and optimisation is general: fast enough is good enough.)
Doesn't require running anything as root. Almost all of OpenShift runs as root.
The main area of ambiguity in my opinion is around "legitimate interests". Many companies who would otherwise breach GDPR regulations are using this as a get out of jail free card, particularly sites/applications which collect personal data without consent.

Personally, I think there will be a number of court cases post-GDPR to clarify what precisely is "legitimate interest" and what is a breach of the regulations.
"no waiting will take place" confused me for a moment.

I guess what they meant that the kernel doesn't wait for the crash handler to exit, but of course it does wait for it to read the crash dump from stdin.
> what part of what you linked to says they won’t use their discretion to assess the maximum penalty in most situations?

There's at least twenty years of regulation under existing DPA law, where the maximum fine has never been asked for nor applied.
DPO?
The GDPR is not fluffy language per se, just for people used to the overworked American style of legal documents where everything needs to be explicit.

Also, people seem to get hung up on consent. There are several lawful basis for processing data, consent is one of them. It's also the most abused, so it's the most heavily regulated in the GDPR. Ad-tech and the scummy parts on the web rely on "consent" (or lack thereof).

Normal website usage like eCommerce or even posting a comment can use other bases, like most legitimate interests - that's why they call it that.

Right to erasure is also fairly obvious as far as deletions go. Right to restrict processing is a bit trickier. Server location is also much more interesting, due to the infamous and rather shaky Privacy Shield.
Why take this pictures at all? Just get the photographer as an extra to an all inclusive holiday package [1]

[1] https://www.theguardian.com/travel/2015/aug/27/instagram-pro...
Asf
asdf
The burden is not about the technical processes of data protection. That is the least of my concern. The burden comes in the form of administration, continuous compliance (it is much more than what you listed!), managing takedown requests (especially when it's hard to verify a user's identity), and yes, getting sued, or having a lawsuit threatened. These are all real burdens that have nothing to do with the technical application of data security. So far the only response to real lawsuit concerns I've heard from GDPR defenders is "oh we don't sue people in the EU" -- WHAT? "Your honour, I was under the impression I wouldn't be sued, which is why I didn't make specific considerations for subsection 16 of article 6." sounds like a pretty shit defence to me.
In the current version of Firefox for Android (59), you have 2 options to open a link in an external app:

1) Long-press the link, and choose "Open in <app name> App". (This won't work if the destination is hidden behind a redirect, as in Google search results. Use DuckDuckGo, instead.)

2) Navigate to the address, and press the Android icon in the navigation bar.
Then what's the problem? I have to be honest here, this smells far more of FUD than anything based in reality. Nothing in the linked post is talking about anything which the GDPR makes harder.

Unless you're doing something shady with user data (and you _know_ if you are) the GDPR essentially comprises having _some way_ of giving a user all the data you store on them, and _some way_ of deleting that data.

In this case both of those appear trivial to automate, and even more trivial to just do if somebody actually wants those things. Shit, dropping email login and only accepting federated auth would get you there in one step, unless you're doing things you're not saying.
Crypto Voucher- Simple, secure and easy way of buying Crypto
The space shuttle main engines did fire at liftoff while the SRBs were firing. They may be a bit hard to see at launch but the exhaust mach diamonds are clearly visible e.g. in [0]. They were much more clearly visible in the 7-ish seconds before liftoff, after the SSMEs had been ignited but before the SRBs go off.

[0] https://upload.wikimedia.org/wikipedia/commons/d/d6/STS120La...
Marketing piece with marketing comments on hn on the marketing piece.

It's marketing all the way down.
1) 99% of websites are secretly sharing their users' identification and browsing habits with a single multinational advertising company. Yeah, let's shut that down as emphatically as possible.

2) You can write a book without tracking my every page-flip. You can write a desktop app without phoning-home and tracking my usage. You can operate a store without secretly selling my shopping habits and purchase information to other companies behind my back.

Do something honest, or don't do it at all.
I am just confused.

Why can he write? It is not clear.

How does the author know that this letter is not edited/approved by PR and legal?

The culture of worshipping CEO sets very low bar on human ambition.
Why is Rust so popular on HN? Honest question.
Or block everyone in the EU from your content perhaps, which would also solve the problem.
GDPR violations aren't something a troll can sue you over. All a troll would be able to do would be to raise a complaint with their national entity responsible for it, who analyzes the complaint and then takes action themselves if deemed appropriate.
Can you explain how they managed to cope under the twenty or so years of things like data protection law or eg PECR?

Can you explain why they can cope with PECR but can't cope with GDPR?
Ah, yes. On a second reading that's probably true.
I think this is horrible idea. GDPR is about data protection and consumer. It has nothing to do with companies or their profits/sizes.
There are so many examples I don't even know where to start. Disease eradication (through education, sanitation improvement, suppressing disease vectors, vaccination, etc), then there's poverty reduction, the way piracy was eradicated in the 19th Century, the way ozone depletion was tackled. There are endless examples.

Anyway, what are you actually saying other than taking a cheap shot?
not gonna say it is best to use bleeding edge but since releasing their photon ui on ff58 nightly for android it was the best experience i had :)
Probably because of its memory safety, which enables easier parallelisation of workloads among other things.
Everything you mentioned is considered PII according to GDPR.
Not getting root on your own machine as a developer? That's ridiculous.

That way leads to the classic “works on my machine!” response to any bug report. Developers machines should be locked down to resemble Prod.
TripAdvisor Acquires Bokun to Bring Experiences Sector Further Online
This. GDPR is a huge burden for small companies. The extra work for implementing the new GDPR requirements can completely halt any new development if you only have a small team of developers. For big companies the workload is relatively much smaller.
The Implicit Association Test (IAT)
MS Office Outlook 365 App for Android Latest Version 2018
No. The first hit from GDPR violation will be from the regulator, asking if you actually are in violation, and giving you advice about how to come back into regulation.
Amazon's Cognito makes this super simple - I only learnt this last week because AWS' naming schema is so wonderfully opaque
Is that really true? I'd expect there to be cost associated with shitty law. Uncertainty and frequent changes shouldn't be in the interest of anyone but those whishing for extremes. Thus i'd hope for companies to support politicians who's legislature achievements will last. I'd hope, but am of cause not sure this can overcome those seeking short term benefits and political tribal blood sport thanks to the shitty US two party voting system.
Can the process be streamlined into a single amateur-friendly device/lab? Yes, I mean a chip printer, as a commercial product.
Sometimes I can be asleep even though I feel as though I'm awake. I know because my wife will wake me up because I've been snoring.
My understanding is that's not sufficient. Here's where I personally got very worried (sorry this is so long):

MailChimp recently sent out an email to their customers advising that all their current HTTPS Submit forms are not GDPR compliant. They're rolling out all new submit forms in May that have legalese that must be explicitly agreed to, in addition to the Email field & Submit button. It's a Modal blocking form so the visitor can't possibly do anything else.

Here is an example of their new modal submit form, it's a doozy:

https://kb.mailchimp.com/binaries/content/gallery/mailchimpk...

I don't do any "customized ads" or "direct mail", but apparently that boilerplate of legalese and "we use your email address to send you email, tick here to confirm you want email" is still required. It's a bit like the Cookie notifications all over again.

I realize I haven't directly responded to your blog comment submit button, but I hope this explains the motivation / understanding behind my comments here. I too would have thought an email field & submit form would be a reasonable expectation, but the form designed by MailChimp's lawyers is way more legalese & boilerplate than I ever anticipated would be required by GDPR.

(Honestly, I do also get the comments here about "you're not going to be caught or made an example of so don't worry" too. In practice I will do what I can to be compliant, listen to what my visitors & customers want, and hope for the best.)
How can I manage a return request in my eCommerce store?
I've an Magento store and want an extension that can help me to managing the return request of the customer.
The "open tabs in background" is a really nice feature. I love it for adding stuff to read from other apps to read it later, eg from chat or email.
Wildlife photographer of the year disqualified for using a stuffed animal
Have YOU done it or are you talking from your imagination?

Analytics and statistics are in every modern developer's tool belt. Because they ultimately benefit users.
For me it was an unintended side effect from starting to meditate. It dawned on me one night that I could just quiet my mind long enough to fall asleep. I wish someone had told me that was a use for the skill, I would have learned it way sooner.
Ask HN: How valuable is having a technical blog for hiring engineers?
Hi,

I'm currently in the process of doubling our engineering team from roughly 30. I'm trying to expand our funnel as much as possible and I'm wondering if anyone has had lots of qualified candidates apply to their companies because of a strong technical blog.

Any thoughts appreciated.
> you can probably see at least 4k-5k stars

8768 is the number of stars of magnitude still visible by naked eye across the whole stelar globe. You can see a half of it at the moment, and near the horizon you will not see the fainter stars because the light has to pass much thicker layer of the atmosphere. So about 3000.
Why would legal trolls use GDPR? What's in it for them?
It's the other way around: it applies to people within the eu, regardless of citizenship so for example a non-eu national that resides within the eu would be covered but data provided by a eu national while living in the us wouldn't be covered.
> I'm honestly wondering what the law previously said regarding data protection.

In the businesses I'm working with, I'm finding the biggest problems with GDPR aren't with GDPR - they're because the business wasn't compliant with the UK's Data Protection Act (1998). So the pain is the scramble to catch up.
Singularity in general requires root, it's just in the form of setuid helpers. Now, you can force it to not require root but from memory there are a lot of caveats with using it that way. Unprivileged LXC is much more full-featured. And obviously rootless runc works great as well (though I'm a bit biased of course).
Because it's interesting.

It is interesting because it advances the state of the art: it makes safe "systems programming" possible, which no production ready language previously provided.

It is interesting because it is accessible to many of the people who frequent HN. It's community is similar enough to the community of HN readers that many HN readers can use Rust and not feel out of place. The concepts it introduces are not such a departure from the concepts familiar to many programmers that a huge amount of learning is required. (Compare to, say, more research oriented languages like Idris).
I mean a link inside Firefox. Search on google.com in Firefox for a YouTube video and click the result. It will open in Firefox, not the YouTube app.
The de facto units in aerospace is usually thousands of feet for altitude and nautical miles for distance, knots (nm per hour) for speed and pounds for thrust. Some older aerospace literature I have even uses nautical miles for orbital altitude.

I'm fine with this, but I'm not fine with mixing imperial and metric units. The worst was NASA Space Shuttle launches where they used statute miles for downrange distance with some nautical miles here and there for good measure.

I'm guessing they use SI units internally for engineering.
What if most of your prod setup is read-only file systems? There's probably a more suitable middle ground than locking down everything.
Yes, you are totally correct. It could be personally identifiable if it's a static IP or something, but most often it isn't entirely personal.

You are right. I apologize.
Wow, it is interesting how this project ties together the devops environment with the user interface. I feel this is higly domain dependent: As soon as I install this on my cluster system where http://modules.sourceforge.net/ is commonly used, it doesn't help me any more. Same with my home brewn environment based build system for my C++ project. Obviously, the spaceship-prompt needs support to be built for such environments.

This does not reduce the enormous efforts of the author to include all the different ecosystems, thought.
I'm working on [1] and the plan is to make this work much easier for people, so they don't need to hit the "docker is root" problem anymore -- this was a pain for me a few years ago when I was a university student trying to run some code on a shared computing cluster.

There's still lots of stuff left to do (like unprivileged bridge networking with TAP and similarly fun things like that).

[1]: https://rootlesscontaine.rs/
On my oneplus 3t Firefox works like a charm. Only scrolling definitely is not as smooth as chrome or webview based alternative but it's working really well otherwise.

I was using it on a phone with 1GB of ram before (a moto G3) and it was definitely another story, but chrome was as bad, so I was still using Firefox.
If GDPR is so easy to apply, why isn't HN complying?
That's too cumbersome for me, as 1) doesn't work with redirects (as you said) and 2) only works when the page has finished loading.
Careful. You were talking about capturing data in the comment I responded to. Now you are talking about profiling. These are distinct things under GDPR, with different rules.

Profiling data subjects in the EU is covered, regardless of where the processor/controller is located.

If you are processing personal data but not profiling and you are not established in the union it only applies if the processing is related to the offering of goods and services to data subjects in the Union.

For those who are not profiling, blocking EU IP addresses should help establish that they were not envisaging offering goods and services in the Union.
Until your competitors figure out they can sue you for non-compliance in your early stage, then you have to mount a defence proving that your software is in fact compliant, but by then it won't matter - your company is competing with an unrestricted American company that can profit off the data and is ready to acquire your company using the profits.
It is exploitation most of the time though. And it's pretty hard to say when it isn't : you can't talk about choices without considering the conditions in which they are made.

There are most likely situations where prostitution is not exploitation, but I don't think they justify making it something normal. I'd rather live in a society in which we agree that some things are not for sale. Intimacy seems to me like a good candidate for something that is not for sale.

We want people to stop objectifying women, let's not have womens' bodies routinely sold and bought.
The fundamentals of a transistor, sure, but where does computer engineering include the chemistry of the actual lithography processes?
8mil nitrile x2 with no extended(!) contact option. Like silane: http://amo-csd.lbl.gov/downloads/Chemical%20Resistance%20of%...
None of this violates the GDPR.

So long as they clearly allow opt in to what data is being processed, and why, and a way to delete it, you are mostly ok.

As the site might need to deal with issues of fraud, you are allowed a little more leeway in storing personal data.
My wife is the same. I am more of a night owl and my ideal lie-in-bed time happens in the morning. Unfortunately society seems to frown on doing that.
My coach said something like: Focus on yourself. Don't care what other people think. If someone laughs at you, then great, it means they are not focusing on themselves and you will have an advantage. If someone thinks you're a looser, it doesn't matter, you can still have a happy life, while others are occupied on trying to look good, you can spend that energy on improving yourself to reach your own goals and desires.
In my own coaching I try to make sure goals have intrinsic motivation, not based on what other people think. For example a bad motive is "I want to have big muscles so others will respect me", vs a good motive is "I want to have big muscles so I will feel better about myself". So don't have a party just to show off on Facebook how a good life you have, instead, forbid cameras and enjoy yourself.
That is a false choice. According to that, you A) love this law or B) exist only to profit off tracking pixels and JavaScript beacons mwa he ha

Or it could be the people running 100-user-or-less sites are trying to see if they can just leave their sites up, ignore the "oh yeah, well your web server has IP addresses in your LOGS doesn't it!? Well guess what, OUR logs show an EU IP address, so you know what the letter of the law let's us do? €20 million fine, you data slurping fiend!!" frivolous lawsuits in hopes of keeping their little side project which while (maybe) technically noncompliant, aren't actually using the data for those nefarious purposes, only DDoS and spam mitigations.
Salaries in SV show that (...) most of the industry will (and usually can).

Yeah, that's what I doubt. SV is not the tech industry as a whole. The average salary for a software developer in the US is less than half than that, and if we removed those top outliers, it'll be even less. So I'm skeptical that this is out of the ordinary; doesn't seem that different from other well-paid white-collar professions like lawyers.