skysight-inc/HackerNews huggingface dataset:
My dad's one of those lucky guys who did 5 hours a night his entire career (probably going back to his Navy days at least). Now that he's retired, he's a bit more leisurely and sleeps until 6:30 or so (instead of 4:50!) but often I receive emails from him at 1 or 2am, and we'll easily stay up half the night chatting when I'm visiting. He's one of the healthiest 79 year olds you'll ever meet, and not due to a particularly great diet or exercise (though both are fine in his case; he's just not a health nut). The thing that always made me jealous about him is not so much his ability to thrive on less sleep than most of us, but his ability to wake up. One beep from a digital watch alarm and he's out of bed, feet on the floor. I can't wake up to save my life. But then again, I try to get as close to 8h a night as possible, particularly as I've focused more than ever on my health and fitness.
I have a feeling a number of more services are going to announce they are cutting of access to the EU as we get closer to the deadline.
That would be brilliant. Thank you so much!
Um. There are a lot of cliches in this post. Also a cliched meme. Technically not buzzwords, I suppose, but maybe be a bit less harsh if you're not going to be creative in your use of language either?
I've not expressed any particular admiration towards PCI-DSS (and if you perceived any, I didn't mean to give that impression). Furthermore, the point of my post was certainly not to treat PII/Pseudo-PII like credit card numbers.

Payment card data is secret information, that's a given of the industry. If you disagree with that, I welcome you to share your credit cards in a reply here. Is it a design flaw? Yeah, you could say that; there's much better models and PSD2 will fix many things (not all) at the core of your complaints.

In the mean time, having to treat credit card numbers as highly sensitive is a fact of life, and when you're trying to protect users, you have to be pragmatic, you can't live in an ideal world with theoretical technology; you have to regulate what's there.

The GDPR's definition of PII is broad and contains many things which aren't secrets. I can tell you my full name, it's easy to figure it out from my profile, that's not a secret but it's still PII and GDPR asks that you treat it as such. Same for usernames, which are most often publicly visible on websites.

GDPR, more than dictating what you should encrypt, gives the users a set of rights over a class of data they share with companies in order to give (european) users more trust and comfort when choosing whether to share data with those companies. Things like "I should be able to know what a company has on me, and I should be able to download it and delete it".

I can't tell you the number of websites I've seen that don't let you delete accounts properly. That don't let you edit your real name (even if you get married or you legally change it!). That don't allow you any insight into where your email address ends up after you sign up with it. This is the problem that GDPR is trying to solve.
Bottom of what company? I took a drug test for a summer job, once, when I was building cardboard displays and moving boxes of chips for Frito-Lay. That's it, period, in 20+ years of work.
Yes, definitely less than 12 on average. Probably eight or nine. I think that'd burn me out as well.
Whereof one cannot speak, thereof one must be silent.
An Embarrassment of Riches
Cameras only give a sharper picture in bright light because this allows you to reduce the aperture size. The image is not sharper if you increase the shutter speed instead of reducing the aperture. This is basic physics. Bright light is not magical.

Squinting your eyes is a very poor approximation to what your irises are doing. The light collimation is not reduced uniformly in every axis and your eyelashes partially obscure the light.
yup, time-shifted documentary.

but the value of t in the film is erroneous, and
the actual value is unknown.
The main difference is that you have to tell people ahead of time what you are going to do with the data and what lawful basis you are going to use to justify that usage. Later you can't change your mind. Additionally, you have to record what you have previously told people (so you can say, "On this date we informed you that we would use the data in this way, are we are doing so"). One other potential difference is that you need to be able to inform the user specifically with which 3rd parties you have shared the information.

Generally speaking, I think most sites will require some additional development work to update their UI and to store the data. If you have been compliant with the previous laws then it should be no problem. One wrinkle is that in the previous laws there was no way for your customer to find out if you were following the law or not (without suing you). With GDPR they have a right to both be notified what you plan to do and the right to request evidence that you are following that plan. There will be many companies that will have to alter their processes significantly to account for this.
So this changes nothing then.
So people in America used to cook with lard. Until someone said “oh no lard is bad people are getting fat” so they banned lard. And everything tasted like shit so they substituted lard with sugar. Now America is one of the fattest nations on earth. Go figure.
I'd recommend spaceship prompt if you want an actively maintained prompt with similar features.

https://github.com/denysdovhan/spaceship-prompt
I found meditations really dry and hard to read - are there any translations you could recommend?
And this is a massive injustice. If a person is sued and they come out on top, the suer should be responsible for their legal bills.
It even looks like the 'e' is winking. I really like this logo.
> Those costs can be mitigated though; there's a lot of businesses that make it their goal to solve regulations for small startups.

Part of my concern is that in order for those regulation-solving businesses to have a working business model, they can't just support every stack under the Sun. Instead, you'll get something like GDPR for Azure™ — which means that it'll be that much more expensive for a startup using an outside-the-box stack to get started.

That's the point of a lot of regulation, really: to insulate firms which already exist from disruption.
I wonder how much of this is BECAUSE of T-Mobile? Finally the big carriers are offering not-horrible (but, at $10/day, not great either) international roaming, more unlimited plans than ever, etc. It's hard to tell what prices are doing because of the constant un-bundling of subsidies, and dropping BYOD discounts and so on, but overall, data quotas are going up, at least.
The difference here is that the GDPR is widely believed to be aimed at Facebook, Google, and friends, and those companies are a threat to privacy partly because of the enormous scale of their data collection in addition to the intrinsically private nature of the data itself.

The question, then, is whether a small "business" that's closer to a charity or a resume padder needs to be regulated in the same way as Facebook when it doesn't collect data on the same scale. I don't think this applies to medical startups, where human lives are at the same risk regardless of how many customers are using the tech.
> They install bitcoin miners.

I think of bitcoin mining attacks as pentesting with a contingent fee. Probably the cheapest and least destructive way to learn you have security weaknesses.
I have asked a friend of mine to bring some from Russia - it is available over the counter there under the brand names of "mexidol" and "mexiprim". Amazon.com search for emoxypine also yields a number of offers. AFAIK it is produced in Germany and is also available there under some brand name I don't know. No world-class credible research seems available but Russian and Chinese research says it is safe and helps brain to fight suffocation and oxidative stress. What the Wikipedia article says and my own experience is all I know about it. A friend of mine has told me he has taken too much of it (4 pills at a time) once and it made him very drowsy. I have never experienced any undesirable effects myself (because I've never tried taking more than 2 pills at a time probably).

I take emoxypine when I start feeling mild yet chronic feeling of suffocation during summer heat peak weeks. Walking in the woods helps even better but I don't have time to just walk there all day long. This happens to me every summer since my very childhood. I am not really sure if it actually works or if it's just a placebo effect (unlike to piracetam - I am absolutely sure piracetam effect is real).
Regulation always has unintended consequences. This is an example of it. Although they mean well regulation never accomplishes its goal and restricts the freedom of many.
Staying in low fat percentage range for long time can f up your hormonal and other systems. Not saying its the case here but something to take in considerations for those staying lean naturally
When I was reading about the GDPR today, I read that email address and IP are considered private data as well. This means any website with an email login or subscription or that even logs hits with the request IP must take action.

I fully support protection against physical locations and personal information (name, address, etc), but to include email and IP address seems a little excessive.
Will a court pierce the corporate veil of a single-member company for a GDPR fine? Doesn't seem outside the realm of possibility, but what single-member company has the resources to a pay a lawyer to find out?
No-win-no-fee lawyers don't just take any case that walks through the door.

The expected value of the case to the lawyers is the probability of winning, multiplied by the minimum of the expected award and the resources the defendant has available to pay, multiplied by the fee percentage that the lawyers are charging, minus the costs involved in litigating the case.

In the cases we're considering here, the probability of winning is low, the expected award is low, and the resources available to the defendant are low. They're simply not going to take them on.
Progress Report: The Global Computer Employer Index
The weird thing about this to me is that phone numbers always take you to the same phone, but domain names just involve me trusting some table I use to look things up.

The internet is deeply democratic, maybe anarchic -- whatever rules I want my machine to follow it follows. If people generally disagreed with this decision, a viral hosts file would roll it back.

(I don't think this so alarming a case that it will spawn a movement, but that response is available.)

.onion and namecoin and various others are a wholecloth attempt at this.

But it goes farther than hosts and alt roots. One of the unique properties of the internet is that if it gets overburdened with cruft people don't like, we can just build it from scratch on top of existing systems.

There are infinite namespaces. You could build a copy of the Internet that's the same but with no Facebook. You could build a copy of the internet where all domains are mapped right to left. You could build a copy of the internet that only hosts MUDs.

Adoption isn't guaranteed, or even likely, but maybe widespread adoption is part of the problem you're running from in the first place.

Here's to the dystopia of unregulatable and unusable internet fragmentation. Some pros, some cons.
> Though I guarantee you're overestimating the number of touch ups

Is this really your experience? Because that would be surprising. I see the damn snapchat eye enlargement on pretty much every second female dating profile photo nowadays.
> This is an obtuse, bordering on malicious misreading of the post. They're not unwilling to implement the necessary features. They're unwilling to shoulder the risk.

I think your reading of the comment you're replying to is itself obtuse, bordering on malicious. They clearly understood that the core issue with GDPR for the OP is risk, and suggested a reasonable solution to address it:

> The solution is to create a company so that the company can shoulder most of the risk

Further:

> It's extremely straightforward to not share data with a "fly-by-night" website like this.

Not if you're using the site. The €20 million fine OP is worried about is only triggered in case of an actual leak of personal data. If you're seriously worried that you might end up leaking personal data, maybe you shouldn't be storing it to start with?
The gift part is lost on so many.

Perhaps it was unintended to increase the potential burden of monetary cost to running services that were created and provided as hobbies or otherwise as a goodwill gesture to others. Or maybe the regulators didn't care to consider the impact on such services. Or maybe ...

Regardless, thanks to regulators and data/service silos the web we once new or dreamed of is fading from reality. With just the silos to contend with such services could hitherto continue to exist with little concern for the actions of the behemoths; but now such an existence is threatened by regulatory concerns which blanket all regardless of their role and activity.

Perhaps the correct action is to blackhole .EU?
I'm with you on this. There was over a decade where I regularly stayed up for days on end hacking on projects and just generally studying and learning new things. It's never been a challenge for me to do. If there's something engaging which I'm immersed in, the days just tick by, no drugs/caffeine involved.

Had I not done those projects, I wouldn't be anywhere near as knowledgable as I am today. So far my health and fitness is great, and there doesn't seem to have been any lasting negative effects.

But I make a very conscious effort to avoid pulling all-nighters now which I still naturally will tend towards if immersed in something. Before age 30 though, depending on your physiology and general health/lifestyle, I'm of the opinion that all-nighters can easily be a win.

I think the biggest risk with establishing the productive all-nighter capability earlier in life is later in life when the consequences are more grave you'll still have that tendency. It reminds me of how body-builders or similarly oversized muscular folks often tend to become obese later in life when they can't sustain the physical activity of the past, but of course habitually/pleasurably persist the high intake of calories.
That could mean anything from “site was written in PHP and our programmer only knows ASP.NET MVC4” through to “it is a giant mud ball and there is no documentation. We figure it would take less time to rewrite from scratch and can’t afford either project.”
Reminds me of William Hershel and a classic example of "if your scientific theory relies on you being special/unique, it is almost certainly wrong"

Hershel made a lot of amazing discoveries and advancements with this telescopes, so decided to count the stars in every direction of the sky. He found that there were equal numbers no matter where he pointed his scope, so we must be at the center of the universe!

https://en.m.wikipedia.org/wiki/Galactocentrism
You'll never find real numbers, and anyone pretending to know is putting too much weight on their own impression. Most people on medication don't mention it, especially when there is a stigma (like with mental issues).

The only times I ever learn about someone on prescription "smart" drugs or antidepressants is when we're close and I confide in them first, or they're the type of person who shares their adderall with people who want to take it recreationally.
> The value of Facebook is that it's easy to use and almost everyone you know has an account. Any competing solution needs to get both of those things right.

Email has those qualities. And doesn't need people making 6 figure salaries to run it.
> The €20 million fine OP is worried about is only triggered in case of an actual leak of personal data.

The author is clear that they are concerned with having to defend themselves in court.

The fine is the bait that draws the true threat.
Not joking. Single word domains under the .com tld are worth a lot, especially very common words.

I don't know that kittens.com was ever turned into anything, they may have just bought it betting on it being worth even more in the future.
You mean for metadata, of course.

Not message contents etc.
I suggested something similar for transistors in 2014[1], and I'm sure I wasn't the first, so you're probably blameless.

[1] https://news.ycombinator.com/item?id=8759749
Arguing the EU is overreaching in demanding basic protections its citizens data, and that the only people who support it are... rioters (?) is a pretty vacuous and idiotic argument to make.

If you're making something that stores personally identifiable information outside of what you need, and don't care enough to secure it or offer ways for a user to manage that data then yes, take it down. Good riddance.

Or, just don't store that data in the first place. If you're storing usernames, passwords and the like then you have nothing to worry about.
Yeah but in the EU/UK I'm not sure people sue for this kind of thing. The US is different. In the UK we don't really have class actions, you can only sue for the damage caused to you which in the case of a website like this isn't going to be much and legal fees are expensive making the whole thing not worth while.
Not wanting to become more well-acquainted with the law is NOT the same as running a lawless operation. You make a weird conflation in your comment.

Truth is, for most tech people, law is a huge extra expense -- of time, money and tons of risk.
I was prescribed Adderall daily for 4-5 years for ADHD. Adderall significantly increased the amount of time I could stay in "intense focus" mode for. In otherwords, I could be "in the zone" for hours at a time - rather than maybe 30 minutes at a time without it.

The biggest side effect I ran into was de-personalization, Adderall made me lose interest in many non-productive things like taking relaxing walks outside or making small chat with my girlfriend. It turned me into a productivity machine.

My doctor and I played around with various dosages ranging from 5mg XR to 30mg XR and from 5-15IR in the afternoon as it starts to wear off.

My philosophy these days is to take the minimum dose required to just barely get that focus I need to finish complex long tasks that require a lot of focus. For me that's 10mg XR for a whole day or 5mg IR for a hour or two. I also only take it on days where I have one of those tasks, and neither my doctor nor I see any benefit it taking it every day.

In college many of my friends took it for studying, and being a pill that increases deep focus of course it helped with used correctly. Even for those without ADHD.
I second this. The commentaries are what made me really enjoy and appreciate the book in a way I hadn't before even with my illustrated coffee-table version of the barebones verses.
Absolutely. As currently outlined, (big or legal) companies with any legal resources can harass regular people all day long. They can bring a million dollar suit and if you don't defend it, they get a default judgment, meaning they win by default. Defending it can cost a lot. It costs nearly nothing to file a lawsuit too. An example of this in action is the NRAA and patent trolls.
ITT: literally everyone saying "I'm the only one who does this"
They are both great solutions.

Blue Origin could design the most elegant solution to their problem without a lot of compromises.

SpaceX always intended reuse but originally they were going to recover boosters with parachutes. They already had a full flight manifest depending on engines designed for mass production and thrust to weight, not throttle ability. So they had to work with what they had which was a rocket that could not hover. They turned the limitations into a benefit because the hoverslam is more fuel efficient which is far more critical for their service than it would be for Blue Origin.
Capacitor size is pretty much set by the technology, but where possible smaller equivalent parts are usually cheaper. You can't spam this in all of your products anyway because it makes it too likely that you'd be discovered, plus again there's the issue of making it pass spurious emissions testing. This sort of thing would probably only be used in targeted attacks.
It might not "freak you out" how would you feel if your kids told you their new favorite rapper is 6ix9ine.

https://youtu.be/gAs9HZC9c7Y
That's impressive. I need to re-calibrate my assumptions about this. Thanks!
Art Lessons from My 5 Year Old Self
It might sound like a crazy question, but are you sure you were seeing the milky way? If you have any streetlights at all on your street, there is no way that you can see it with the naked eye (magnitude +5-+6). If you live in the north, it's more likely that you were seeing the aurora.
You’re Ugly – Click Here to Fix It
> What part do you think that is a disaster?

uh... this post is about a guy losing his business because of the GDPR. What part of that isn't a disaster?

>If you are a bank and a client asks you to delete their data. The bank will still keep it for the tax agencies.

> If a tribunal gets asked to delete the personal data of the accused, they will keep the data.

> There is a principle of public interest and public obligations to keep data.

In other words, GDPR has no teeth outside of Europe.
Super Monday Night Combat has very, very few plays on steam[1]. Likely was not worth any development time to fix it up.

1. https://steamdb.info/app/104700/graphs/
Sounds more like they are unable to maintain the code since the TES takeover. Perhaps from having a fraction of the former team or being an unmaintainable fur-ball?

TES are a long standing UK company so Wikispaces will have already been subject to the Data Protection Act if there is any possible GDPR angle. DPA wasn't so different, GDPR just adds, modernises and adjusts.
Yeah, right. Clearly they have nothing better to do and are all egomaniacs.
Sure, feel free to message me at tyler(at)lastovich.me.
Curious how you know that. Blood tests?
If your small site is saving all that user data in an unsecured S3 bucket then yeah, pulling it down seems like the right idea.
>In the mean time, having to treat credit card numbers as highly sensitive is a fact of life

It's a fact of life because the payment card industry found a legal way to externalize the risk of its idiotic architecture onto others. The networks are as motivated as can be to continue having transactions to intermediate, and had the technology for what I describe 20+ years ago. Smart cards are a 1990s technology. (Magstripes are a 1960s technology). They continue to drag their feet on the migration because we've made it cheaper to implement "security" through the legal system. Fraud losses are low enough for the industry to prefer the status quo, but high enough that credit card fraud is still a fact of life, because we have allowed it to create liability around data security.
these people are self-selecting into this thread.
It was like this at one of the companies I worked at. All dev desktops were heavily locked down and you had to file tickets to get software installed - sometimes the IT folks would log into your machine remotely and do it from there. It was kinda neat in a way.
> Can you name a conflict?

GDPR (EU Law) requires companies to delete private data upon request.

SOX (US Law) requires companies do not delete private data, in case the government wants to investigate those companies later on.

SOX has existed since 2002. Did the EU lawmakers even consider this when crafting GDPR? I'm betting not, considering the damage they've done to the WHOIS system as well.

This kind of fallout is the result of poor planning and pushing incomplete legislation for political purposes and I think all of us realize that, so let's not pretend otherwise.