skysight-inc/HackerNews huggingface dataset:
I suspect someone within the US Military or Lockheed Martin is putting Japan up to this in order to build a case to get the F-22 back in production. I'm unconvinced Japan really sees the F-35 as inadequate.
Thought this may be of use for journalists or anyone interested in money's influence in politics.

I whipped this up over the last few days and could use some contributors if anyone is interested. https://github.com/jacob-ebey/congress-finance
They’re wrong, though.
How about 3 strikes for politicians. They do their job poorly, they lose it, regardless of their election status.
In the first two cases, we generally don't. Or didn't, until recently. DMCA is very push-oriented: You get a takedown notice specifying certain URLs, you take down that content. Compliance solved!

GDPR requires restructuring of applications to keep data on a temporary basis with the consent of the users, to remove data after the fact, to selectively restore, and to allow users access to their own data. These are proactive steps required, and while applications written in the next six months will be built with those requirements in mind, it's still a fairly large burden for business-as-usual applications.
Hard work does pay off. Believe in karma.
Give it to neighbors, trade for pickled things or something :D
Then what you do is hire a lawyer for an afternoon, who will tell you the same thing then give you a list of stuff to do that will bring you into compliance.

It’s so, so easy.
A much better rule imo, which I've had success with, is "no software from the Big Five" rather than FOSS-only. This has a bigger impact on actual privacy concerns and gives you more leeway when it comes to media apps, etc.
Yes, because that will certainly be the case, like any GDPR lawyer or consultant will tell you.
It's very likely that the site is non-compliant with Dutch law.
I am about to launch a startup. As an American citizen GPDR scares the shit out of me. My app doesn't do anything I consider rude to my users but that doesn't mean European courts can't find something wrong with the way I do business.

I consider myself lucky that I'm in a state that doesn't make me collect tax in states I don't have nexus.

Europeans are required to use something like chargebee to deal with VAT in different countries. I don't mean to be rude, but if a service like chargebee didn't exist, you Europeans would be fucked.

I'm sure VAT is just the visible part of the iceberg. It's an awful situation for entrepreneurs.
Ok, that does seem to be the consensus and a good reading of the law.

However, IP blocks are still useless for the reverse reason: someone "in the Union" could be vpned through another country. (For example, I'm on vacation somewhere in the EU and VPN through my home computer to purchase something and have it delivered to my house in the US. By virtue of being in the EU at the time, at the least that specific information collected during my stay would be subject to the gdpr. How would said company ever know?
Human Dx is hiring software engineers to unlock healthcare for all
Whoa. That’s actually something! Hand selected at first then machine learning to find photos with good light and focus, repetition of face angles you like, then filtered for a human for final approval.
Proper encryption, limited data collection and exposure, and deletion are not fancy features. If this is onerous, it is hard to imagine you are shipping much.
Yes however i can choose to not interact with non compliant service. The ignorant need to be educated rather than the informed punished.
Be careful about interpreting the law if you aren’t a lawyer:
1) IP addressed aren’t a personal identifier since more than one person can use the same IP
2) Google analytics is a processor of data and the general consent you get from your users can grant you the ability to use google analytics since its use helps you enhance the site and make a better user experience
3) You need a data processor agreement to provide access to data that the processor has collected on your user’s behalf. Given you run your aws services, that should be straightforward to provide access.
The point of the gdpr is that I can't analyze past shipping costs? To optimize how I ship in the future?

Also, how does this mesh with pci retention rules. (Yes, they are not law, but it's still an awkward place to be.)
It makes more sense to ask for literally everything, and provide no feedback on whether the user should join or not until the next page. Literally everything. Even things they can't avoid sharing. Don't check it until the end - preferably several pages later. Then, if they didn't consent to a required thing instead of an optional thing (which should look identical), their entire setup process should be voided, with a great banner blaming European Regulation.
if we're going to take the video game comparison further, then there is something better you could be doing with your time.
You can ask for consent (a trap page) and block access if they don’t give it to you since you need access logs to operate the site.
For curiosity, where are you? Are you unable to find a DMCA-proof server in a country where your content would also be legal, or is there a different problem?
> What stops them?

Some people just accept it when someone says they won’t do something that they totally can.

I know, it doesn’t really make sense. If someone tells me “well it says that we can do that if you go by what’s on paper, but we wouldn’t actually do that”, then change it so that it says on paper that you won’t, or I’m inclined to think that you totally will, because you totally can.
Unmanned aircraft works as a strike fighter once air superiority is established but I don't see how it can replace a stealth air superiority jet at this time.
That’s a nice theory. Except that the top tax brackets pay way more in income taxes, both in dollars and as a percentage of income.

Also, the viewpoint you advocate is extremely patronizing. It assumes that a large swathe of voters are just rubes who have been taken in by parlor tricks and sleight of hand. Have you considered the possibility that, instead, they have taken the earnest position that the point of democracy is not to use the votes of the many to take from the few, but rather to set up a system that is reasonably fair to all?
If you want to do business in Pakistan you do.
What would be great is an 'open source' legal movement.
Non-profit legal orgs which read the details of laws, cases and then put up detailed 'views' of the laws from the perspective of an individual, company, buyer, seller, landlord, tenant etc.
Instead of having a list of laws, have an experience based checklist for each type of agent.

Also, requiring the government to not just frame laws but provide this kind of information. The ico website[1] seems to be doing it for this particular law.

This might be less useful in boundary cases, where firms with legal resources play at the edge, but it can at least serve as a safe upper bound for a lot of regular activity.
Lot of this information already exists in books, legal reviews, but this is important enough to be made conveniently available on an public website.

[1] https://ico.org.uk/for-organisations/guide-to-the-general-da...
Are you storing any user data? Sounds like it could all be stored client side and the GDPR is irrelevant to you.
those that now what a dial-up modem sounds like and those that don't, and to think there was also a time when it was a big deal to be able to also talk on the phone while surfing the information superhighway
Unpaid advert: LXD supports unprivileged containers quite well.
That's not an accurate description of this community.

Pick any point on the opinion spectrum and you'll find some HN users there, just like with any large population sample. But it doesn't generalize. We know this because the generalizations people come up with are wildly contradictory, except in one way: you can guess a person's own views from the generalization they come up with.
> If the WORM store rotates out old data (webserver logs, tape backups with retention and rotation, etc.) then you simply inform the user of that and that's it.

Can you point me to where that's allowed? What if retention is reasonably long (a year)? or not (10 years)?

> s it truly a WORM store that cannot delete any data ever never? If so, you'll need to encrypt the data in a way that allows you to make records inaccessible.

So now I can't perform impromptu analysis of my own data in any computationally easy way? Security analysis? Analyzing shipping information to optimize in the future?
> The World Health Organisation and Walker both recommend about eight hours a night as a good baseline.

I’ll take the shorter lifespan and bet that more diseases will be cured in the future. The extra hours of life I get every day will ultimately allow me to afford treatment.
I am resisting a push into converting from an on-premise, installed product to a SAAS model for precisely these reasons. I don't want to be responsible for that liability, and I'm just the engineer doing the work. It's a minefield, compared to the way things were.
They're not arguing about the laws themselves, but rather the implementation.
If you're making a purchase for delivery to the US and using a VPN to hide your EU location, that wouldn't bring the website under the scope of the GDPR regardless of your physical location: the EU guidance talks about signs of targeting the EU for the offering of goods or services.

Examples they list: use of EU languages or currencies not used in the host country, use of EU domain names, specific wording addressing an EU audience.

This kind of nuance is where it's good that humans are the ones enforcing the GDPR, instead of needing a programmable rule.
Buying a foam mattress topper and high quality pillows was the best thing I ever did for my sleep.

I went years without before housesitting for a friend and realizing how much better I slept.
Memorising derivations of algorithms and solutions to puzzles from a book like Cracking The Coding Interview surely is just rote learning. There should be a high correlation between the content of the interview and the actual job, or what is the interview really for?
Though they were never rich, they will be remembered for all of eternity. Whereas history quickly forgets about the merely rich and famous.
Yeah thanks. If I meditate enough maybe my pancreas will work, I won’t be worthless, and there’ll be a reason to get up in the morning.

Sometimes there’s no answer and nothing that will help make things better. I can accept that. Seems to be other people who can’t.
I don't think I've heard of many EU regulatory bodies that will immediately go for the maximum punishment the moment anyone does a minor infraction. First you get a letter, then a sternly worded letter, then a tap on the finger, a hard tap on the fingers and if you still refuse to learn the lesson then they break your knees.

If you have minor infractions caused accidentally and you cooperate I have doubts that any regulatory body for the GDPR will go beyond sending a simple letter asking you to fix a problem.
Don't use people personal data and dont allow others to spy on your users (ads, analytics,..) and you wont need to do anything.

Work in best interest of your users and you will be compliant. I don't think that this is harder than food safety regulations.

By the way, the technology is changing fast and a strictly defined law with "do" and "don't"s would be downplayed in weeks. that's why GDPR is conceptual (and thats why everyone is pissed off, as they can't downplay it - how many sites have you seen that are giving you a fair cookie choice?)
Ask for consent and you can store the data. And even if you don’t ask for consent, if you store it for less than 7 days, you are okay.
That seems like a lot more trouble than shuttering the site now.
So why doesn't this apply to larger companies?
Also, the Brave browser is a great FOSS option. It's a chromium fork that only adds privacy/adblocking features and doesn't require google services.
> Lying in bed, relaxing and not focusing on not being able to sleep.

That sounds a lot like meditation! Let your thoughts flow, do not grasp onto them, simply lay there and breathe. It really does help. I have been doing this for the past two weeks and it has helped me realize that my "sleeping problems" are mostly self-created. I found my biggest problem during bedtime was always rooted in thinking. In hindsight, it makes total sense that training myself to let go of my thoughts was the solution. The short term gratification of interesting thought is outweighed by the long term benefits of healthy sleep.
Just to clarify your point: it applies to users physically located in the EU. Fines assessed under it apply businesses that serve them anywhere in the world, which is what makes it so damned scary. The EU government has essentially declared itself the Emperor of the Internet.
The attitude you have here is exactly the reason why GDPR is required.

Companies worldwide have consistently failed to safely store and process personal data. There are new data breaches every day. Irresponsible processing of data has a direct negative effect, and that’s not related to the idea that it’s misused for advert targeting.

Minimising the incompetence we’ve seen worldwide by treating it as “just some data collected while surfing” is baffling to me.
No you were right with the second sentence. We're better off spending our defence budget doing what the US says.

Unless we're going to nuke up, our defence strategy is being an actual powers bitch. Solid relations with the US will go a lot further than some anti ship missiles.
The grace period for the GDPR started in 2016 when it was adopted. Everyone had over 2 years to read and implement the GDPR.

All those concerns about the GDPR are, as far as I can tell, younger than a year, most of them even younger than a few months.

You had two years grace period.
Sexting with Your Ex– Good Idea or Not?
> There are no FOSS clients for Plex, Netflix, Hulu, or Spotify.

Hm... there's a client that is suspiciously absent from that list...

> In other words, I couldn't listen to any of my music, unless I copied the MP3 files from my Plex server to the phone's internal storage. I couldn't stream any TV shows or movies, either.

Ok, that's just technically inaccurate. The author didn't want to use a particular open-source app (or perhaps category of apps) to stream video/audio to the Android device.

There is certainly a persuasive argument as to why one would refrain from installing such apps. But a piece about following FOSS-only dogma which omits a discussion of that app category is misleading. Especially when there are probably tens of thousands if not hundreds of thousands of users who currently have such a FOSS app installed on their Android devices.

Edit: typo
this would be hard to scale as you would probably need to generate new images for each client, but if you could auto-generate imagery per client that would help (still the subscription needs to be priced higher)
> Because checks in Error Prone are self-contained and written against the javac abstract syntax tree ... it is relatively easy for developers outside the team to contribute checks... As of January 2018, 733 checks had been contributed by 162 authors.

Somewhat interestingly, Clippy is an analogous tool for Rust and has 181 contributors now, more than Error Prone. https://github.com/rust-lang-nursery/rust-clippy
Wasting time & energy planning for a scenario that never happens is over-design.
Why do you equate cutting edge with unlimited unregulated collection and processing of personal data?
Health is never a priority until you smack your proverbial head off the concrete...
What I understood the authors point to be was not that missing sleep is no big deal, but that focussing on it being a big deal amplifies the insomnia itself, while being relaxed about the need for sleep allows you to sleep more easily.
Laws that are stupid and not widely enforced because they are stupid are damaging to the entire concept of law. Particularly if they can hang over like a sword of Damocles if you piss off the wrong people.
It’s like a few minutes of work and you couldn’t be bothered. Baffling.
Is it possible to have air superiority because of missiles fired from the ground? A bit less heroic than manned fighter jets in dogfights, but ...
That isn’t true. You can ask for what is necessary to run your business as a precondition for using your site.
OK now grow your own SI wafers using repeated Czochralski process based on silicon you made by melting sand.
An old economics major roommate.
Transactions with EU users should be expected to comply with EU law. What’s unusual about that?
Saudi Crown Prince: Palestinians should take what the U.S. offers
I do cool things, but I'm not a cool person. I sometimes broadcast the cool things I do.

I do admit, I try to dominate the hashtag that is tied to my son.
IEEE has a background piece for those (like me) wondering "who is this guy?"

https://spectrum.ieee.org/semiconductors/devices/the-high-sc...

Impressive.
Ask HN: Has anyone made a GDPR graveyard?
You know, sites that are shuttering because of the risk/burden GDPR is placing on them. I've seen a few so I'm wondering if anyone is compiling a list. Such a list would be politically really bad for politics in the EU, I think.
Except right now, you may be paying for a lot of nothing because US relations change from tweet to tweet. I mean, I know politics is playing for the long run in these things, and Trump won’t be there in 10 years, but his voters might, and if the US is really closing up, then the powers at be near Australia just might end up being China.
I'm not doing business in Pakistan or in the EU.

The mere fact that a Pakistani or European uses my site doesn't subject me to the laws of Pakistan or the European Union.
This is the case with anything you didn't discover it yourself but rather 'learned it', that's actually just a replaceable term for 'memorized it'.

People who discovered/invented these algorithms traversed several years of curiosity, blind alleys, dead ends, failures and successes. You can't possibly expect to get it all and make it up on memorization alone.

Algorithm learning is hard for the same reasons memorizing Math tables are hard.

As of today there is nothing novel about merely learning how a algorithm works and spitting it out in an interview, if anything it achieves the exact opposite goal of what it is supposed to.
That’s not what the law says they have to do. All reasonable businesses have to assume the worst case, not the best case. These governments have a built-in financial incentive to not be lenient in any way, shape, or form.
The new Windows admin interface is now out as “Windows Admin Center”
Your attitude towards my privacy makes me happy you won't be marketing your products in Europe.
Globe Air Cargo Is Finnair's New GSA Partner in the US – Air Cargo
No personal attacks, please, regardless of how wrong another comment is.

https://news.ycombinator.com/newsguidelines.html
Unfortunately there is no more site to prove it, but I would imagine something like this. GDPR on its own shouldn't be a problem for Streetlend, there was something more, users data releated and how to make money off them.
The End of Super Monday Night Combat
Japan would be better off with the F-22 but I don't believe Lockheed would want to restart production on that. Such a decision would disturb the perfect political engineering Lockheed has done by spreading out the F-35 logistics across all 50 states.
I was just clarifying that the Internet’s new Dear Leader will be trying to reach outside its borders to enforce this law. It doesn’t just apply to companies in the EU.
> for reasons of public interest (for example public health, scientific, statistical or historical research purposes).

Comments could be considered that…
If you launched just 2 weeks ago, then you still know absolutely nothing about your churn and I suspect that will be something you should be monitoring month over month to see if those initial customers stick around at month #2 or month #3.
Acronis, a german corporation, is implementing the GDPR too [0] and they recommend that if possible, you split backups per customer, if that is not practical atleast do your best to protect the data and don't keep it for unnecessary time frames. You should have a retention policy and encrypt your backups.

[0]: https://www.acronis.com/en-us/blog/posts/backups-and-gdpr-ri...

[A0]: http://www.gdprarticles.com/gdpr-articles/data-subject-right...

[A1]: GDPR Art. 5 §1 a, b, c and f, §2

[A2]: GDPR Art. 17 §1 b and c, §3 b and e

>So now I can't perform impromptu analysis of my own data in any computationally easy way? Security analysis? Analyzing shipping information to optimize in the future?

Any analysis will have to be done in a way to make sure you're not exceeding the bounds of network security or you're outside legitimate interest.

Analyzing shipping information is the same, as long as you do everything to make sure the data is pseudonimized or not otherwise in risk of leaking personal data, it's fine or alternatively you ask customers about it.

>What if retention is reasonably long (a year)? or not (10 years)?

Use your own judgement of what is reasonable, worst case you get a letter from the EU asking you to reduce the retention timeframe as long as you made an actual effort to implement the regulation.
Agreed in general. If you're literally looking to get paid money to do something for the very first time in your life, then I'm not sure the amount matters much--just code a landing page for $100 or whatever, and then use that experience to get a real job.

Aside: Not a great sign that the answer that most strongly advises honesty is the lowest-rated...
Fear Under Chinese National Terrorism
True, but things like reproducible builds can help prevent your laptop then being used to hack others.
Read the fine article please.
Show HN: An opinionated Swift for TensorFlow starter project
Cybersecurity teams that don't interact much perform best
Yep fully got that. Big catch 22 though, as you're only likely to read said article if suffering from bad sleep.

(And: My thoughts were more like, if you don't read HN, then that's whole lot easier.)
I’m just confused by your view.

This is a relatively simple regulation that basically required anybody processing user data to do so responsibly. How does one have an ethical objection to that?
AWS EC2 Cost Savings – Why one solution does not fit all?
This is getting silly.

The law will be enforced, just as current data protection is.

The law can be enforced without every case attracting the maximum penalty. That's why nearly every law has a range of penalties.

Accidental and minor breaches can attract a minor penalty or a letter asking you try harder. Wilful and repeated breaches affecting many customers will attract harsher penalties.

Same goes for speeding offences - go 40 in a 30 limit, get a fixed penalty ticket. go 140 with the GoPro race footage of you and your buddy posted to twitter expect a much larger fine and a driving ban.

In neither instance is it not enforced, or damaging to the concept of law.
I'm starting to wonder if that is a picture of my heirloom foosball table or someone else's
> As a single engine light platform with a small arsenal of just four air-to-air missiles

It is quite the opposite, it is a lardy brute heavier than Japan's two previous top-line fighters:

Maximum take-off weight tonnes / installed thrust tonnes / length

F-35A 31.8 / 19 / 15.7

F-15C 30.8 / 22 / 19.4

F-4E 28 / 16.4 / 19.2

And for comparison:

F-22 38+ / 32 / 18.9

Both the F-15 and 22 show their air superiority primary mission with higher thrust-to-weight ratios, which approach unity once transit field is burned off. But the F-35 is not a light fighter, it is a modern-day F-4. Maybe it should have been named Phantom III...
This features you need to implement are the bare minimum required for good security practices.