skysight-inc/HackerNews huggingface dataset:
All of this is spelled out in the law.

> Pursue isn't currently a fully defined term.

This is pure FUD. This is fully defined that's what makes it a binding legislative act.

Let's go to the actual law:

Article 3: Territorial Scope [1] spells out the explicit territorial scope.

> the monitoring of their behaviour as far as their behaviour takes place within the Union.

Oh, sounds scary. The latter part is clarified [2]:

> Whereas the mere accessibility of the controller’s, processor’s or an intermediary’s website in the Union, of an email address or of other contact details, or the use of a language generally used in the third country where the controller is established, is insufficient to ascertain such intention, factors such as the use of a language or a currency generally used in one or more Member States with the possibility of ordering goods and services in that other language, or the mentioning of customers or users who are in the Union, may make it apparent that the controller envisages offering goods or services to data subjects in the Union.

There's a ton of nonsense about this on HN right now but anybody who's actually read the law should understand that the intention of the law is to prevent non-consensual surveillance of EU citizens. The idea that if somebody who stumbles upon your website and you log their IP address makes you subject is pure FUD. The idea that the EU will pursue American sites who don't target the EU is pure FUD. But the biggest FUD of all is this notion that the EU even has some sort of legal enforcement mechanisms independent of a Member State. As they say, that's not how any of this works. There are no "EU cops" waiting at the airport. Please.

[1] https://gdpr-info.eu/art-3-gdpr/

[2] https://www.gdpreu.org/the-regulation/who-must-comply/
3. The checks are skipped for all the code in third_party which you are using.
If China is a threat to Australia, maybe we shouldn't have sold them the port of Darwin...
From Twitter engineer Chris Thalinger's videos[0] it seems like they're using JDK 9 or 10 and graal via JVMCI. Is there more to GraalVM than just using graal with a particular JDK release?

[0]: https://www.youtube.com/watch?v=_7yIUkP5LiQ
probably this

https://en.m.wikipedia.org/wiki/Navier%E2%80%93Stokes_equati...
WESTWORLD’s Real Weapon Is User Data – Nerdist
"non-complaining poor sleepers" – who sleep badly but don’t define themselves as insomniacs –
don’t suffer the high blood pressure commonly associated with severe sleeplessness.
Meanwhile, “complaining good sleepers” – who get enough shut-eye, but are heavily invested in their alleged insomnia –
were essentially as tired, anxious and depressed as those who genuinely didn’t sleep.

Causation vs correlation? This could easily be the other way around, maybe it's because they don't feel good they complain about it...
How to Fall Asleep in Two Minutes or Less

781 points by rhapsodic 35 days ago | 190 comments

https://news.ycombinator.com/item?id=16671944
Or, to put it another way: a big group of tech people who have no interest in protecting the data of their customers, preferring to be able to cut corners and do as they please with information that is not theirs.

There is nothing in the GDPR that allows for a person or lawyer to sue a company for GDPR non-compliance. All they can do is complain to the regulatory authority in their EU country, which has the sole power to issue fines. And if you're not taking care of my data, then I have no problem at all with you being fined.
To me, asking a small developer with a site that gets a few thousands users to implement GDPR is like asking a dad to do full safety test on a toy car he built for his kid, just because a big company like GM had safety issues. The problem EU is trying to solve here are large companies like Facebook making monopolies and syphoning data. So why the hell do they have to impose rules on small hobby websites that run at a loss?

There's a huge chunk of the web that is filled with niche web tools, mostly made as a hobby, running for free. I myself own 2-3 such sites. Now, I'm forced to spend my hobby time adding a bunch of new features on a site that already loses money? I'm sorry but the couple thousand people that depend on this tool will have to find someplace else I guess.

HN sure loves to worry about AMP killing the internet, well to me this is far more dangerous. Can't wait for larger troll companies bullying small devs with lawsuits and killing all their competition using GDPR.
I try Firefox on Android about every six months and it is consistently worse than its competitors. Its address bar behaviour is erratic, websites render desktop versions or "basic" versions where I would get a more functional version on chrome, it feels heavy and scrolling still sucks.

This from someone who has had Firefox as my default browser on my computer since I unzipped Phoenix off a CD which came bundled with a computer magazine.
laws are interpreted literally in Europe too, or they wouldn't be laws.
But most laws have a range of penalties, and often account for intent and attitude.
E.g. in US law you have "manslaughter" (voluntary or not) and "murder", for example. And you have different penalties for first offense and repeated offence.

I am not one to say "trust the EU government, it is good".
But the intent of the legislator is obviously not to kill businesses willy nilly, it is to punish certain behaviours, they have no reason to willingly cause a business to shut down, which is why the GDPR explicitly accounts for collaboration.

In the end, it is up to you to decide not to abide to the law. There have been local regulations forever, this won't change much.
This may help with that: https://snb.ch/en/mmr/speeches/id/ref_20180116_tjn
> Compliance is trivial and involves steps that are already best-practices anyway.

Isn't that besides the point?

You can be 100% compliant and still be sued by somebody. And you'd have to pay some lawyer a lot of money to make it go away.

That risk already existed before the GDPR (anybody can sue anyone for whatever reason they can come up with), but GDPR is high profile enough to make people scared.

About a decade ago, I ran a website that made heavy use of user uploaded GPS data. I didn't sell any data. The only ad income was Adsense.

If I had bothered to restore the server from backups after a HD crash, I'd probably take it down now. Just not worth the potential trouble.
Automating the creation of release pull requests in Jenkins
Because it provides a comparison point to a statistic in the article? GP was pretty explicit about how it related to the article
GDPR enables class actions for privacy violations.
Nobody is going to fine your 7 year old niece millions of dollars for using GA. At least not unless that was 4% of her little sites income and even then she would have needed to flount the GDPR rules in a number of more serious was as well to receive the maximum penalty.

This hysteria of yours is nonsensical.
The F-22 is no doubt better but the F-35 would still dominate against anything else. Quite effortlessly in fact. My take is the US Military wants F-22s back in production and they are working with Japan to help build a case so congress will pass it. "We already have a customer who wants 150 Raptors, yada yada yada American jobs." That's the way I read this. Japan is in no position to refuse the F-35 given its capabilities thats why I think the DOD is somehow behind this.
This isn't Sarbanes–Oxley, this is literally don't be stupid with customer data.

> "but We Tried and then We Kept Trying"

Will literally get you 100% of the way there if done in good faith. Crypto-shred anything you acquire from an end user and you are good. Collect the bare minimum to offer the service you claim to be offering, and you are good. Alert the customer on how their data will be stored, used and fused and you are good.

Of all people, programmers should stop whining about how hard and oppressed their lives are. The EU is telling you to stop being a clueless *sshole. If you even attempt to stop being one, you are fine.
For anyone interested we (Aptible) made this Slack community to answer questions about GDPR: https://join.slack.com/t/gridiron-gdpr/shared_invite/enQtMzQ...

Disclaimer: we are a vendor that makes a SaaS offering for GDPR
Oneplus 3
There might be some regulatin coming their way.
Using the law to define theft is not a great idea.

Governments can and do steal. For instance multiple nations have now passed laws forcibly seizing land from individuals, without compensation, exclusively because of their race. That's still theft. More accurate would be to state that "this does not appear to be unlawful."
Should you payoff your mortgage?
No-one likes to hear this but it's true. Cut out caffeine in the afternoons (it has a ~6hr half-life in your system) and install F.lux or something to lower the colour temperature of your monitors.

(Anecdatum: When I want to stay up late, I turn off F.lux and it adds probably 2 hrs before I start feeling tired.)
Here's a good explanation of what the sovereign money initiative is (and why it is probably a bad idea) from the chairman of the Swiss central bank: https://snb.ch/en/mmr/speeches/id/ref_20180116_tjn
Blue/Green Deployment: What It Is and How It Reduces Your Risk
Oh! I totally missed that. Thank you for the correction.

Not meaning to be argumentative, but is there a reference for that beyond Article 12 Section 5? (I probably missed that too.) But that section seems to suggest you can only charge a fee (or even decline to act) if the requests are unfounded or repeatedly excessive:

https://gdpr-info.eu/art-12-gdpr/

"Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either:

charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or

refuse to act on the request.

(Google's clause was opting to charge for any deletion request that is not yet automated.)
Using the law to define theft is not a great idea.

Governments can and do steal. For instance multiple nations have now passed laws forcibly seizing land from individuals, without compensation, exclusively because of their race. That's still theft. More accurate would be to state that "this does not appear to be unlawful."

And domains are not like phone numbers, they're like entries in a phone book. This would be more analogous to a famous "Joe Blow" getting the phone book to remove every other "Joe Blow" from the phone book since he feels (and is probably correct) that if somebody's looking up "Joe Blow", they're probably looking for him. And that is not an action I think is reasonable.
I call bullshit. You're now just clasping at straws to make your GDPR phobia justified.

The EU isn't some evil organisation trying to destroy US businesses. And your argument from authority[1] really isn't going to work here either given the number of errors you've already cited on the topic yourself.

[1] https://en.m.wikipedia.org/wiki/Argument_from_authority
Do I get to include the effect of having a lot more stuff because I didn't have to pay for manned F-35s?

Also, do I get to track moving targets from low Earth orbit using small-ish satellites, or is that right out?
Want to know what people think? Would be great to know both the arguments.
For many, that lawyer for an afternoon is an additional $1000 out of packet expense on a side project website that wasn't profitable to begin with.
After more than a decade of privacy abuses from almost all companies, I am perfectly ok with the collateral damage to start-ups, apps and personal projects that this law will cause, as long as it stops the abuse.

Society doesn't owe entrepreneurs a business model, but it does owe people a dignified life and some control over information that can be used to harm them.
And an FAQ/rebuttal: https://www.vollgeld-initiative.ch/fa/img/English/Clarificat...
I’m sorry, I have a great deal of difficulty believing this.

Then you obviously haven’t read the whole thing or had to comply with it.
I infer that you're suggesting the failure of the Southern Homestead Act of 1866 disproves Phillips' thesis.

I'm pretty sure the American Civil War was over before then.
ESCORT ALEXANDRA – ESCORT ATHENS – ESCORTS ATHENS – ESCORTS
Typical.. Equifax gets off with a slap on the wrist. Facebook talks to Congress for a bit before returning to business as usual. Nothing happens to Cambridge Analytica.

But damn if they don't destroy a few small businesses to show that the government is on the case.
Functional Programming with JavaScript Object Arrays
According to the Geneva Convention, war crimes have international jurisdiction.

This means that a court in, eg, Spain can "tell foreign citizens how to behave"
If you are an European company, most of this stuff has been the law for decades!

Running a project/company means taking on risk. Financially and otherwise. Why is data-care risk so much worse?

And sueing is only going to happen in the US.
In Europe getting sued is extremely rare. I expect most DPA (gov bodies handling this) starts out with a kindly worded letter. You comply, nothing happened.. (Most other legislation works this way in Europe already). Fines are mostly for repeat-offenders or clearly black sheep.

In the US, who knows... Most europeans are baffled by the courts and cases in the US. But I think US companies have to be handled by an EU DPA anyways, so we are back to the letter again..

I run a small company (two employees) and I am not concerned. I know a lot of small companies, they are mostly not concerned. I know a few larger companies, they are not concerned (unless they have data handling as their main business).

My own work in this has been somewhere in the neighbourhood of a workweek. Not any worse than complying with tax-law...

There is also no "automatic 20M euro fine". Most matters are likely handled by a kindly- or sternly worded letter, or a small fine (in the 5-20k EUR range for small companies, which sucks but shouldn't kill you....
They were not democratic at all. Clearly you know nothing about the history of these countries.

Universal enfranchisement in the UK happened only after WW1, with more than 90% of the population unable to vote for the whole history of "voting". And germany was just simply a dictatorship.

In 1800 90% of all of europe were farmers. The political class to even create a political system was tiny.

Democracy is rule by the people. Votes among feudal lords for which is the most powerful is not democracy.

You made a claim about two political systems: USSR's communism and western democratic capitalism.

If you're going to equivocate any old political system with any other then the claim to "convergence" is incoherent. I'm not even sure what "covergence" means when we're equivocating 19th Germany dictatorship, democratic capitalism, and USSR communism.

"Convergence" is severely under-evidenced. And my original claim is only ever-more evidenced: it is only possible to imagine our present system of government "converging" to mass murder upon some resentful delusion.
Announcing Storybook 3.4
In Rust, static analysis ("lint") is part of language and every lint can be disabled in per function and per module basis. So ugly workarounds are never required.
presumably you have laws that require street vehicles have a valid license before they can go on the road.
Do you remember the police arresting someone because of a toy car they built?

If not, then why do you expect the EU to go after the equivalent site with a few thousand users?
> I am hopeful that the US will pass legislation exempting US firms from enforcement of fines under GDPR on US soil, but I am not optimistic. Under current law, it is likely that they can be enforced.

What would be the mechanics of enforcing the GDPR against a US company with no EU presence? I'd understood the opposite, and that the EU's best options to enforce were probably indirect (via customers, vendors, etc. with EU presence).
That's not how the EU operates nor has it ever done. I live in the EU (and also work with online services by the way) and I'll grant you the EU is about as anti-business as governments get but only to the extent that it actually looks out for consumer rights. Which is a good thing because you're not going to get any of that from the US government.

However the EU has also frequently put processes in place to protect businesses - particularly the little ones - from unfair bullying (eg FRAND patents).

Let's be honest, the web / online industry isn't new anymore. They've had a chance to self regulate and instead all they've done is finely honed how to capitalise on their customers data. Even services you pay for are now in the business of tracking their users and selling that data. So someone had to step in and regulate the industry. And if GDPR really affects your forums that significantly (I'd wager not because forums are a dying breed and you're hardly sounds at the forefront of forum tech, from little you have disclosed) then I'd suggest you're likely doing something shady with your user data as well in which case I welcome the EU protecting me against your unethical business model as well. But more likely is the argument that your site isn't that big of a risk and you're just being irrational / listening to so bad advice. Maybe the consultants you've bought in are trying to justify their own jobs by feeding you FUD about GDPR? Either way I'd recommend you switch kool aid brands.
If he could get feature size down to 10 microns someone might have a shot at making a microprocessor.
France seizes France.com from man who’s had it since ‘94, so he sues
Don't read it end-to-end like a novel. It's a great book to keep around. Open it, every once in a while (even at a random page), read a passage or two, think about it, and go on with your day. Over time the ideas seep in and really change how you approach certain aspects of life, I've found.
>Oh, sounds scary. The latter part is clarified [2]:

And according to that clarification, having paypal as a payment processor might make it apparent that the controller envisages offering goods or services to data subjects in the union. That's what I said. Or it might not. Its not fully defined. A cautious interpretation makes sense.

>There are no "EU cops" waiting at the airport. Please.

And to be clear, I never said there were. I was making the point that, contrary to g-g-great-grandparent, it is absolutely possible for a country to exert control over the actions of people outside its borders, assuming those people might have interest in international travel.

If you're going to keep yelling FUD about things, you should first confine yourself to calling out things people are actually saying, instead of creating ridiculous strawpeople. Its not productive to call people out for saying ridiculous things that they didn't actually say.
Meet the 50 top-funded startups and tech companies in Southeast Asia
How to Choose Cell Model and Test Indicators on Determining Clinical Basic Topic
About clinical basic research, the innovation will be how to design the gene research content. Clinical relevance, function, mechanism, all of which should be taken into consideration. Besides, how to choose cell model(animal model) and test indicator also is an important section, that is being regarded as the approach to evaluate the scientificity of topic. In this post, we will highlight the information on how to choose cell model and test indicators from cell level.

In the history of disease research, it is usually better to research deeper in accordance with the requirements of scientific research. Scientists will search the cause once the clinical manifestations of the disease determine which organ tissue lead the disease, furthermore, as cells are the smallest unit of organ tissue so that they will work on studying the difference between normal cells and diseased cell (pathological changes) and finally figure out which lead to the disease and clinical manifestations
As somebody from Switzerland I think this is insane. I will vote against it.

Honestly, most people who want this dont have a clue about monetary policy.
The following 3 issues should be considered from the cellular level before starting the research:

1.How to choose cell model - One class or multiple classes
2.How to make innovation for test indicators
3.The Project Feasibility
How to choose cell model - One class or multiple classes

You may regard it as a naive question in case somebody asks you to identify whether the diseased tissue is one class of cells or multiple classes of cells. However, it is closely related to research topic design:

In some conditions, the topic design must concentrate on one point. Such as the experiment being handled on cells is to verify if the A gene and drug that scientists are investigating will cause pathological changes in the cells, or play a role in alleviating pathological changes. We all know that the function and mechanism of the same gene may vary even just putting in the different cell type. That’s why scientists should pay more attention to the depth of topics instead of breadth, focusing on the chosen topic more penetratingly.

Obviously, there may be some different opinions on the above view, especially for the popular CTR research in the field of cancer treatment. It can not offer accurate results if scientists are just involved in one class of cells, as CTR is to study the lethal effect of immune cells on tumor cells which will reveal the relationship between two types of cells. So scientists need to involve all the related cells type if the topic is about the relationship among cells. As a result, it will be helpful to figure out the research objects before setting the topic.
How to make innovation for test indicators

Scientists need to know what indicators can be applied to demonstrate that the genes or drugs play a disease-related function in pathologic cells. For example, scientists work on epilepsy research which pathogenesis organ and tissue are brain tissue and cells are brain neurons. While evaluating if the test indicator design is reasonable, the scientific assessment is based on whether these indicators lead to clinically pathological changes in this type of cells. Abnormal excessive differs the brain neurons of epilepsy patients from the normal human, and scientists need to process electrophysiological testing from the cellular level.

It is not necessary to design a totally new experiment while submitting experiment methods, instead, scientists should understand if the planned methods are commonly used by most researchers. Even if the outdated methods are still acceptable, just coordinating with common experiment methods.
There is a set of rules that are followed when determining a fine:
https://www.gdpreu.org/compliance/fines-and-penalties/

These rules look at whether your company has infringed before, whether you've notified the state on your own, etc. pp.

The current Information Commissioner Office system has a similar system in place. Out of 17,300 cases reported in 2017, 16 resulted in a fine. Source: https://www.infosecurity-magazine.com/opinions/gdpr-timebomb...
Here's an even dumber question. If you don't live in the EU and your site is not hosted there, do they have any legal power to get to you? What is the worst case scenario if you don't respond and don't pay any fines? Will they block your site from the EU or get your provider to take it down? What kind of power do they have to come at you?