skysight-inc/HackerNews huggingface dataset:
> Instead of viewing GDPR as some nightmarish spectre coming to ruin everything, why not think of it as a potential opportunity?

That's the best way to think about it. When the EU started imposing VAT taxes on non-EU companies on internet sales to EU customers, a bunch of businesses sprouted to handle all of that accounting for you. (So instead of me selling my software online directly, technically all of my EU customers now buy from a US company called FastSpring instead. Fastspring remits VAT on EU sales for me so I don't have to deal with EU tax law, just my own Australian tax law.)

There's probably similar opportunity for a GDPR service that stores customer data via API service, that shields small / micro businesses from all the GDPR compliance. (Eg all your personal Wordpress blog comments are actually stored, hosted and served by a service that handles GDPR modal-consent forms and deletion requests on your behalf.)

>... now try and come up with some innovative business ideas that _don't_ rely on scraping and selling as much data as mechanically possible...

The problem is a lot of us who would never scrape or sell data and have no interest in exploiting our customers, are still worried about not being GDPR compliant, and the EU choosing to pursue us an example for something that none of our customers actually care about.
The key feature is bundles _in the inbox_

Folders and filtering rules never worked for me because they gave me multiple "to do" lists. It's vital for managing complexity to have a single queue to work through. If you want to use your inbox for that - then traditional email clients fall short.

If something is filtered out of my inbox then I usually end up forgetting about it. If I can't group things in my inbox then it becomes overwhelming.
Yeah, that's what I was talking about couple of weeks ago here. I was afraid that GDPR will stifle innovation and it's just a beginning.

GDPR is highly vague omnipresent regulation with huge strict fines. It's like infamous cookie law times a million.

They could make it into a good law, my opinion on what should have been done:

Keep good parts, such as:

- Appoint official 'security' representative who're responsible for breach disclosures, promoting security practices etc, that person can be personally held responsible for shifty company behavior (though nothing draconian) like non-disclosing a breach, so they would be motivated to be on user side in the company.

- Let users ability to download their own data

- Let users clear way to tell company that they want to stop using their account (and related data gathering)

- Mandate more open disclosure of what is done with data gathered from users

And also:

- Mandate easier ways to review EULA and changes to EULA (like each change should be available separately, describe what changed and why)

- Create system of centralized disclosure of security vulnerabilities by third parties, with record showing request and response publicly after some time. Maybe also create some system of grants for third party penetration testing for larger players in the internet.

- Split available data into categories, like 'non-sensitive data', 'sensitive data', 'highly sensitive data'. Medical records, financial records etc is highly sensitive and higher standards are applied. Email and name is non-sensitive data (so you could run a simple forum, or any other simple free service, where you only want email from a user, without being afraid).

- Split companies into tiers, under 50 employees or 100000 users nothing applies; 51-1000 employees higher standard applies; over 1000 - full power applies. This also should be tied with previous point - for example, smallest tier company should still be responsible for some rules if they deal with highly sensitive data, and if it's largest tier company they should be following some rules even if they only deal with non-sensitive data.

- More sensible fines. For example 1% or $100k, whichever is smaller for the first time, 2% or $1m second time etc. Designated security officer can also be held responsible in the same manner (like, % of salary and later being forbidden to work as a security officer). It can also be tied to tiers of companies.

- Start applying law gradually, beginning with just applying it only for european countries.

I believe that would keep benefits for users and won't create giant problems for the industry as a whole.
> It seems overstepping and heavy handed that the EU can enact laws that affect American's and American companies.

Unlike eg Kinder Eggs? https://www.cbp.gov/newsroom/national-media-release/dont-be-...
> It's not just about safety for you, proper disposal of these chemicals is essential for the many generations to come.

Yes Gordon Moore created a superfund site or two in California.
Daily Routine Home Cleaning
A Summary of the Important Points in Capital in the Twenty-First Century
I am perfectly refreshed with 5 hours sleep for exactly that reason. I have narcolepsy. Basically I fall asleep immediately and hit REM sleep a minute or two later. That saves the 90 minutes it takes most people need to reach the REM stage. My normal sleeping pattern is in bed at 1am, up before 6am, at work by 7am.
What I've heard is that the output that the Rust compiler gives to LLVM is much more complex than it needs be, and optimising this is the simplest way to reduce the time spent in LLVM. This seems plausible to me as there aren't many complaints that other compilers using LLVM are slow.
I'd gladly reproduce some vintage style computer with a large number of his ICs. Just for fun :) a B5000 maybe
The Best Mac Apps for a Minimlaist MacBook Setup
Wittgenstein and emoji
> What would usually be considered a matter for civil court was brought into criminal court because it crossed borders

Wasn't it criminal because he was doing it as a business and earning money from it?
Polly [0] is LLVM's optimisation project, at least for memory access. It's a fairly active project.

[0] http://polly.llvm.org/
The End of Intelligence
I agree with the title.
> uninformed comments talking exclusively about how the music in the video makes the commenter feel

If someone is talking exclusively about themselves, why is this considered uninformed?!?
If you want to run many of the examples in this book, you can (on a Mac) usually create and save a text file (with .ps suffix) and then double-click the file in the Finder. The ps2pdf distiller should convert the contents to PDF and open in Preview. (Not all the IO functions are available, though.)
That's off quite a bit. See https://gdpr-info.eu/art-3-gdpr/
Beyond all the "why" questions, here's an actual company blocking the entirety of it's EU userbase: Warpportal/Ragnarok

source: https://forums.warpportal.com/index.php?/topic/235548-import...
> Europe will get less innovation but have more privacy

You know Europeans can build software too right? The start-up culture is a lot less than in the USA - but we're getting there. Perhaps Americans will also realize the importance of privacy and data protection, and thus opt for European software. It's hard to predict.
No. This is a fundamental misunderstanding of the law. IP addresses are considered PII if and only if they can actually be legally used to identify an individual. And even where they can be, what on earth are you doing with them that you imagine is non compliance?
I think jackfoxy was referring to their press releases, not their engineering team.
Recover website from wayback machine
In the mean time, cern even got it's own top level domain, because of its international nature.

CERNs homepage is https://home.cern
i think this is an oreo issue
if u just google "oreo lag android" many things will pop up

do this

go to developer options > opengl > OpenGL Skia

also through boot recovery delete chache my nexus 5x became much faster
Thanks. I'm actually a huge fan of Muhammad Yunus' microloans program. I've had ~ $400 on a loan rotation at kiva.org for some time now.
Blue Origin’s New Shepard skims space in successful 8th test launch
Op #GhostSecret – ThaiCERT Seized a Server Used by NorthKorea HiddenCobra #APT
That's cause his blog is full of Javascript shite, including something that prevents me selecting the text, or right-clicking.

> "what I can’t be sure of is what happens to data that passes through the various apps, WordPress plugins, cookies etc that are part of this blog, but not controlled or run by me."

This is a dumb argument, it's his personal blog, it's controlled by him. That including how much JS and social media trackers to stuff into each page.

With comments, it's easy. Somebody wants you to post the comment, which is why they submitted it. No extra consent needed, although maybe they'll want it deleted in future. Of course, an email address is required to post, but "it will not be published". Why exactly is it required then?
Email addresses, account user names (especially if they commented by logging in via Twitter account). Personal website URLs if they included it. Maybe IP addresses on the server end but hopefully not. All of those are personally identifiable user data.
Honest question: can anybody predict if Google Analytics is going to be on the list?

Because as interpreted today, GDPR compliance for google analytics on any website would simply kill the UX for the first-time visitor of that website. Which is pretty much the most important UX for any website...
> The problem is what happens if a legal firm or an agency targets you.

Nothing. GDPR enforcement is carried out by each country's regulatory authority; they're the only ones who can sue, target or take action against you for non-conformity.
If you think a hobby app runs a risk of being fined $20m then you clearly haven't looked into this at all. Why don't you do that first before getting worried about it?
A PoC was shown of how to do this with buildkit several weeks ago in [0], but in your words - it's also not for the faint of heart (involving patching the Kernel). This is the way of the future - Docker image builds should not need to be privileged (they often are for mounting filesystems)

https://github.com/genuinetools/img [0]
Similar: https://github.com/AkihiroSuda/runrootless
>It's certainly not a recent development

Really? If it's a currently established practice, what are some prior examples of countries punishing foreigners on foreign soil over websites with no payments component?

Maybe each jurisdiction should be the business of regulating locally-accessible websites, not just locally-hosted ones, but that's a fundamental shift in the nature of the internet. "Not available in your country" is currently an anachronism. In that world, a prudent web publisher would start out local and enable specific countries for cross-border traffic only as its legal team expands. Internet communities like this one would splinter as people get tired of clicking links they can't follow.

The countries currently regulating available web content do so with network blocks, not extraterritorial enforcement actions against publishers.
How many times i have seen comments comparing civil engineers and software engineers and the liabilities each have.

Civil engineer failing to comply with regulations ending up in jail vs. software engineer well, doing nothing if his software does something wrong.

So welcome to the future where software engineers will be held responsible for what they create. I think it's right direction. And don't start with 'hackers playing for fun with side projects will no longer be able to do this'. It's same for engineer building a shed in his backyard. No one will have problems if he has not done load calculations and is using that shed by him self. Only difference is that if you put it on the internet it's like building that shed in a public park. And then you have problems if you don't think what you are doing.
Honestly, I'm more surprised that other folks are surprised. How much do ya'll think top SWEs make?
I should have clarified before: I meant LLVM compilation speed, no the speed of the code generated by LLVM :)

I've edited my original comment to include the clarification.
The point you forgot:

- Understand the big ball of legacy you've deployed over the years.
Polly is not part of LLVM, really.
I don't know what your problem is, and I don't know why you believe certain 'facts' that have never been presented at trial, but would clinch the case against Google.

I'm tired of reading legal documents to answer your complaints. You can read yourself, or continue ignoring the court case. Adios.
For company; sure. For a non-profit org, or for a smaller company in the field, the compliance costs might just be that extra burden that causes them to shut down. That's not to say the GDPR is a bad thing, but it's just a reality, that when retro-fitting it onto existing systems, will cause some of them to need to shut down, for better or worse. Change sometimes breaks things.
It seems to me that they website would be easy to make GDPR compliant. What was the challenge here?
iPhone X Like Gestures on Any Android
I remember my first dollar in MRR so well. It's an incredible validation that you have something that can work. Going from $0.00 to $1.00 in revenue is difficult and impressive, so take a minute to appreciate that.

That said, as I'm sure you know, you're a long way off from a sustainable business.

To answer your question, it's not too early to look for investment, there are plenty of businesses that get funded without revenue, but it may really not be the right decision for you. Do you have a lot of competitors that are breathing down your neck or a large entrenched market that you need capital to get into? If so, then you may need the funding.

Sales automation is very competitive market, so in this space I would generally lean towards yes, you need it.

But on the other hand, it sounds like you're making some money without that. IMHO, with what little I know about your company, I would try to hustle your way to $7k/mo in the next 6-12 months. During that time, figure out what you and your partner/contractor/buddy are good and bad at and where the bottlenecks are (e.g, coding, marketing, sales, customer support, etc). Get a good idea of your growth through different marketing channels, your churn, and generally how much your customers like your product. While investment makes your feel good and can get you some press, it's a necessary evil, not necessarily something to be proud of.

Keep going on your own for a while.
If Amazon and FB make unethical tracking tools and you put them on the website, you are most definitely an accomplice to their acts.

"But it's such a small site/ the person's side project" all the more reason to stay away from this. Having a code of ethics where you end up using the most profitable option anyways is not a real code of ethics

The point of ethical judgement is that it's _not_ the best choice by other factors
How “Artificial Intelligence” got started 60+ years ago
Is it possible to do revocable private messages in a decentralized system. My understanding it that the Zot protocol (used by Hubzilla) deals with this by keeping private data on the hub of the user sharing it, while public message can be mirrored to the hubs of any users receiving it. "Sending" a private message (or media file) to another user actually sends a notification to that user that they have permission to access it. When the receiver wants to access the message, their hub has to correctly identify them to the sender's hub, using credentials sent as part of that notification. But all of that is handled in the background, not a painful, confusing manual process users have to know about. See:
https://github.com/friendica/friendica/issues/2894#issuecomm...

From what I understand of SSB,it works by distributing messages to receiving users as part of a blockchain, making all messages effectively public, even if not published with the goal of giving the public access. But maybe similar functionality could be added by setting up private "clubs" - pub servers set up by groups of users who know and trust each other - which would play the same role as a Hubzilla hub, storing private messages and displaying them to users who can authenticate correctly.
Invariant Truth Number One: Any irritating issue in any sprint at any scrum shop will be described at shitshow, a mess, etc.

Number Two: If your software's a mess, then unanticipated forced changes are a worse mess.
Ah, Polly actually slows compilation speed. [0]

[0] http://polly.llvm.org/docs/Performance.html#compile-time-imp...
>You don't have to implement any new features to comply with the GDPR.

How do you deal with user requests? You need at least somehow be able to gather the data, pack it into an user underdstandable format, and delete database entries, also from your backups.
Nice HF technical overview: https://ehs.unc.edu/files/2015/09/hydrofluoricacid.pdf (tldr; nope; read it.)

I needed to dissolve(ha!) fluorite once. You can get it started by adding a few drops of conc H2SO4 to your beautiful aqua regia solution. It goes deeper red, some happy bubbles appear, and as long as it stays put, makes it's own "aqua nasty"(pg88) as you gently add your powdered sample.

I thought AQR+SA was called aqua nasty, but I cant get any hits other than this AA pdf with explicit HF added. Maybe an actual chemist can chime in, is there another name for the aqua regia +H2SO4 mix?

https://archive-resources.coleparmer.com/Manual_pdfs/28750-1...
That's literally one troll comment, the rest seem to be technical discussion, speculation about the future of space travel, and people asking about metric units. Why not reply to the comment in question?
Thinking that the answer is making something that everyone "needs" to use is a problem. For example "to enter the conference they need to install this app that also tracks them" is a common thought but it's a bad idea as forcing your end users into a fixed action is bad UX. Mostly it just annoys attendees who will then try and find a workaround.

The result of networking apps is some sales people generate a lot of very low quality leads at the expense of the event's reputation as most delegates don't want spam.

For messaging apps 99% of messages will be sent by 1% of delegates: the pushy sales people. "Hey, want to meet to discuss my amazing product!"

As you say, another option is is "tell me who I was talking to" but again the sales people pollute that experience. B2B events are about selling but there are sales teams who'll scan your badges as they're saying hello (electronically or visually) and then email you forever afterwards. I imagine that "tell me who I stood near" would result in sales teams walking around the entire venue, on the lookup for anyone that looks important to loiter near. Or they could just hide a device in the toilet and get everyone ;)

We tried allowing delegates to build a contact list to message and then also notify when those people were at the same networking event just once. It really wasn't much value to anyone other than, you guessed it, pushy sales people that our VIPs would rather have avoided.

I don't know if it's still the same but Grip's "tinder for events" used to rely on both parties showing mutual interest before allowing communication. That's the best mechanism that I know of but I wouldn't be surprised if the messaging connection rate was incredibly low.
The VIX and Unwinding of Short Volatility Trades
I think I agree with you, and I say this as someone who was probably a beneficiary of such an alignment, after college.

But the submission does not mention job interviews. The linked book (the author is “one of the organizers of the Finnish Olympiad in Informatics […] coached and led the Finnish team at several international programming contests, including the International Olympiad in Informatics”) is someone's labour of love, written for people interested in this hobby. It brings joy and satisfaction to many people, most of them young students. Why throw cold water on them, by reacting to mention of such a book with terms like “irritating”, based on something that others do in some other setting entirely? Or, even if bringing up job interviews is justified (no doubt your irritation is real), it would be nice IMO to at least preface the comment by clarifying that the comment is not about the hobby/competitive-programming world that are the subject and audience of this book, but about something else.
The TLA+ Video Course by Leslie Lamport
> 1. This regulation is specifically (deliberately?) anti small business. If your revenue is less than €20m their fine is up to €20m, i.e. can be 100% of your revenue, meaning bankruptcy. If your revenue is greater than €500m, your fine is capped at only 4% of your revenue, i.e. an acceptable fluctuation. It's worse than a regressive tax.

With the amount of creativity observable for inventing tax-avoiding business structures, I'm sure if the minimum clause weren't there, big players would quickly find a way to spread their revenue over dozens of small entities, each looking like a "small business" on paper.

So I'm not sure it would be even possible to make a regulation "with teeth" that explicitly exempts small players.
I downvoted you because you insinuated that the other side is only whining, which in itself is not adding to the conversation.
> People are downvoting you because they don’t understand that downvote is not for disagreement

For one, downvoting for disagreement is fine, see https://news.ycombinator.com/item?id=117171

Secondly, guidelines state that talking about voting is frowned upon, see https://news.ycombinator.com/newsguidelines.html
> So once the account info is deleted, that link is broken. This another piece of DP legislation that has been subject to a great deal of FUD since most of the headlines just went with ‘court confirms IP address are PII’ and omitted ‘in some cases’. TBH, this was already pretty explicitly obvious from the legislation defining Personally Identifiable Information (hint: clue’s in the name).

Makes sense.

Given the above still seems like a potential issue to not delete the ip logs.

1) Bob signs up for a service and is logged

2) Bob than asks for his account to be deleted. Account details are deleted, but the ip logs are retained.

3) Bob signs back up for a new account allowing the data processor to make the link from his new account to his ip old logs with the first account.

Weather the data processor can relink the two records with reasonable probability in step 3 depends on the particulars of the circumstance.

I assume cases like the above will be judged, at least in part, based on the data processor following best practices, and operating in good faith(not actively trying to unmask individuals and actively try to prevent unmasking).

Currently I would not let the GDPR stop me from going forward with any web services plans, however my casual reading of GDPR articles on HN and beyond have not made it obvious how cases like the above will be handled.
Do you also block all US IPs to avoid patent infringement claims? What makes you think the GDPR is broader in scope than the patents the USPTO hands out? In the patents' case, there is even a direct financial incentive for companies to sue you, whereas in the GPDR the interest of the regulatory body is primarily compliance.