skysight-inc/HackerNews huggingface dataset:
The privacy of EU persons coming in from a non-EU IP address still need to be protected under GDPR. This solution is a start but it's not bulletproof.

Edit: I don't want anyone to think I believe it's a good start but it is a kind of solution. I wonder if lots of US companies, once they begin to realize GDPR is a problem for them, won't decide to try one of two things:

1. This: block access from IP addresses believed to belong in Europe.

2. Lobby Congress for a law (or a quick Executive Order) saying that US companies don't have to comply with GDPR.

A few weeks ago on Twitter [1], I speculated about #2. It was too early, I guess. Few people in USA seem to be aware of GDPR at the present time. That'll change in a couple of weeks.

[1] https://twitter.com/CnAdoctor/status/978849723808301057
In the meanwhile, schools all over the peninsula are shutting down because of falling enrollment. It’s only about the “wrong crowd.”
Tennessee Officials Trying to Get to the Bottom of an Election Night Cyberattack
This is GDPR noncompliance as a service...
I'm currently an EU-ish Citizen, not residing in the EU. Will it block me?

Also will it block JS-blocking EU Citizens residing in the EU?

Let's not mention VPNs. Let's not mention Tor.

This feels like a "registry cleaner" for GDPR

o. xkcd: https://xkcd.com/1969/
Can't forget the Quizno's rats.

http://www.slate.com/articles/business/ad_report_card/2004/0...
Politics can be avoided. Instead of asking for the system to do something for you, you just find a way to achieve your goals by whatever means necessary.

You just think of the law as a machine to be hacked. It’s illegal to sell raw milk. I could try to convince some legislators that it’s important (not likely) or just find a way way to operate a raw milk business that doesn’t involve sales.

Some problems may be temporary insoluable, but I find I have plenty of problems to solve. No use worrying about the ones that are fundamentally at odds with statutes.
Observation is empirical.

I genuinely think you’re confused about what science is. It is entirely based on empirical evidence. Broadly speaking it is one source of truth and knowledge, and while there are other sources of truth and knowledge that are also valid, being valid alone doesn’t make them science.
"hobo is an itinerant worker, a career which sprang up during the depression. A hobo, unlike a bum or a tramp, is more than willing to work, but mostly for a short duration, as their main impetus is travel, the love of the journey above the actual destination. A bum is stationary, feeding off of those unfortunate enough to cross his path; a hobo merely travels from town to town, finding work when he can, but only for the sake of financing his next adventure. NEVER call a hobo a bum...they'll kick your sorry no-bo ass!"
I’m wondering the same, the submitter of the link is definitely having some fun with the title.
Yes. VPNs are definitely an issue.

The only foolproof solution is just to block all IP addresses.
We Need Bug Bounties for Bad Algorithms
I too am a podcast addict and listen at 2x-3x on most of my podcasts (the non fiction ones).

According to Pocket Casts, variable speed has saved me 281 days, 2 hours. Removing silence 3 days, 23 hours.

(@rustyshelf, if you're out there, how do I rank? :-) )
You should give AntennaPod a chance, very lightweight and allows for new podcasts to be added. It is open source and has is actively developed.

Additionally you won't have any new requirement to create a new account or pull analytics from your listening habits as you mentioned towards the end.
You misspelled VMS as NT. And actually VMS borrowed the IO model from RSX-11.

Async QIO style IO is all good clean fun, until someone writes something like:

fml(...) {
char buf[1024];
sys$qio(QIO_READ, buf, sizeof(buf));
return;
}

main() {
fml();
do_stuff(); //surprise package delivered into stack here!
}
I thought doing the hard drugs is part of the glamor.
Or take over Europe.
> If prisoners choose randomly though, the expected value of Nb is still 50 though.

The expected value of Nb would still be 50 if all the prisoners checked the same subset of boxes, but the chance of the prisoners surviving would clearly be 0.

I think it's correct that if the prisoners don't get the see the contents of the boxes, then any arrangement where each box is opened by 50 prisoners is equally good and optimal - but I can't quite see a proof.
Developer cares about efficiency. It seems strange in today's world of Electron apps and text editors that take up a GB of ram and have hundreds of ms of latency, but that's clearly where his priorities lie and I, for one, can respect that.

If people are so up in arms about the security problems of 7-Zip, they're free to fork it.
The article doesn't say if the tribes were exceeding Dunbar's number ?

> And most of the time everyone went to some lengths to avoid being singled out for selfishness or self-importance. Unsurprisingly, this created an atmosphere that was harmonious and that was torn asunder only rarely when someone felt wronged.

Can we assume the atmosphere was good just like that ?

A good book on the topic - on the opposite side of this article - is Helmut Schoeck's "Envy" ( https://en.wikipedia.org/wiki/Helmut_Schoeck#Envy:_A_Theory_... ), in which the author rather assume that theses kind of societies were oppressive and gives example of people fleeing out of there in hope to build a better future for them
How does he do that?
A benefit would be that under the sort of circumstance in the OP, assuming sites salted the input passwords, the hashes would need reversing in order to acquire the password and so reuse issues could be obviated. But I don't think that's really worth it when password managers are around.

I'm imagining we have a system where a client signs, and timestamps, a hash that's sent meaning old hashes wouldn't be accepted and reducing hash "replay" possibilities ... but now I'm amateurishly trying to design a crypto scheme ... never a good idea.
Hmm why should passwords (hashed or not) be stored in logs though? I don’t see a reason for doing that. You could unset it (and/or other sensitive data) before dumping them into logs.
I think its more that while it is being chopped, its tumbles with a whole lot of unaffected lettuce,
Obama did push those healthcare legistlations...
Credit Fixing
Hi, there are a few recommended steps you can take to improve your credit score that put you on the path to a good credit score.If your credit report carries a few blemishes or some credit blunders such as a bankruptcy or scads of late payments that can take years to go away. I came to understand that improving your credit score is all about doing the right things over a long period of time, but after I opened up with my colleague about my credit score who then told me about HackWest, I contacted them via HACKWEST@WRITEME.COM and also sent text to them via +1 424 307 2638 and asked if I could get my credit report fixed after I must have explained to him about the negative items in my report and low credit score of 365 he said yes and demanded for some information about me and after 14days my report was sound with positive trade lines posted on it including a revolving credit card and a 790 credit score. I sincerely recommend their services to you if you require a credit fix; these they did at a very affordable price. I am sure you will appreciate this later; please don’t fail to also tell the world about HackWest after getting your report solved by them.
Maybe I'm missing something - but as a US citizen, with a US company, how can EU laws be enforced against me?

What's the legal channel here? Do they plan on arresting me if I decide to vacation to an EU country? Will the US gov't comply with levying fines due to some treaty/agreement between the countries?
have there been any drives designed with an array of fixed read / write heads i.e. one per track or a head that can access multiple tracks on a platter simultaniously?
No exit from housing cost hell
Thanks, I've always wondered under which conditions BSD networking performs better compared to Linux. It's the number of simultaneous streams as opposed to raw bandwidth for fewer streams.
Of course I'm seeing those candidates. They're my coworkers. Many of them are sad that really strong people they've worked with in previous jobs. Others are sad because they have coworkers who are incompetent jerks with good interview skills.

You're assuming that the height of the bar is tied to how good people are at their jobs. You're also assuming that having a high bar has to mean that the interviews must be a bad experience for the candidates. Neither of those are true.
Anyone can expand on what "vindictive reporting from no-win-no-fee legal firms" would exactly consist of?
Hate to break it to you, but even cardiologists can’t summon causation from correlation.
Yeah after posting I thought about this too. It's not that a car is "better", but it's better in certain instances.

A simpler solution is better in cases where you want many participants to operate the "backend" (the printing of money/distribution of money, so to speak). The biggest issue is that if your model is too simple there could be an easy way to game the system.
It's still pretty bad with travel blogs. They'll always have at least one mention per article about how you, too, can travel the world and get paid to blog about it, after you drop $300 to join TravelBlogSuccess.
Any better strategy would have to exhibit the cyclic behavior of the proposed strategy. I don't think there is any.
You have to get the password into the object model first, though—and your object model can simply not contain a Password type in this process (and only in the password-handling one). You shouldn't pass the password on as a naked string and then drop it—you should prevent the password from getting past the auth service at all.

I think the risk of logging raw passwords in the auth service model is lower because logging in a password-specific microservice is an intuitively dangerous thing to do, so both code authors and code reviewers will pay heightened attention to it. Meanwhile, "log all requests" is a common thing to want to do and will raise fewer alarms in a primarily-business-logic service. (In fact, another usually reasonable thing to do is "log all requests that don't parse properly and return 500...")
They shouldn’t. It was an unintentional bug
The most likely solution is the same way the US enforces US laws (e.g. Megaupload case) in other countries: Seizing their assets (through cooperation with banks) and then asking for extradition.
Thought this was a joke SaaS offering, but inputting google.com as the domain and a burner card, it's real [0].

[0] https://judge.sh/3Bc2E0GR.png
They shouldn't. It was a mistake.
Its an app that downloads mp3 files off the internet. There’s not a whole lot of secret sauce there. There are dozens of other apps that you can use if Pocket Casts doesn’t suit you any longer.
If our civilization figures out how to turn heat into electricity with a high efficiency and a small solid state device, it changes the economies of so many things.

But it’s a hard problem, mostly because of “entropy”.
In the context of production, why would you need to log anything other than X-Forwarded-For/X-Real-IP, timestamp, and the endpoint that was hit?
Keybase
[ my public key: https://keybase.io/sqrdevl; my proof: https://keybase.io/sqrdevl/sigs/n4ESKq8pQRXvJ5vPuCWcx-_qw-bRVnaAMDiFDDiqnBk ]
I can't tell if this is a fake service or not, but blocking users from EU IP address ranges (which I'm assuming how it works) will still not stop the EU from following a trail of data that could originate from your organization.

That's the biggest thing from the EU's GDPR rules - what is your organization's data inventory, how does it map outside of your organization, and how are you securing PII?

If a complaint is made from someone who is an EU citizen, and another organization shows logs that they got this information from your web app or service, that will trigger an audit from the EU. Blocking access to a subset of IP ranges will do absolutely nothing to stop this, and will not stop the sharks once they have smelled blood.

In a sense, the EU has plain rules that you can protect against, unlike the FTC/FDA (for HIPPA etc) who are vague and will not disclose how you can protect your own organization.
Finding the most-significant bit in constant time, independent of word size
I am not attempting. Mainstream journalism has indeed become mostly irrelevant and self serving betraying the very principles they are supposed to uphold. That is my point.

There are some wonderful journalist as well but they are mostly the exceptions.
> to some of the low income housing groups that have existed for a while

And that group is now pegged as a tech proxy.
>but if something has been working for thousands of years, even imperfectly, it carries a guarantee nobody else can provide.

my point is that the guarantee is a very weak one, and one based on tradition rather than facts. something being used for thousands of years merely means it doesn't cause harm in small enough timescales so that people can associate it with the effects. see: smoking, which is dangerously poisonous, but the effects are on such long timescales that its negative effects are dissociated from it.

>Finally I don't understand why people are so angry at organic produce. I rarely buy it too, but what's the big deal? It sounds like they need to prove something. I don't get it.

I guess the anger is directed to both the people that are gullible enough to buy it and continue to perpetuate the myth that it's somehow better, and the companies pushing organic produce (by exploiting said ignorance, and perpetuating said ignorance as a way to sell high margin produce)
Another annoyance about the sync is that it is only recent episodes that are synced. When you get a new device you lose the status of most of your episodes.
Would having a run-of-the-mill SaaS where users can sign up from wherever mean that you have to comply?
my machine (is currently) with 8GB of RAM and an older processor.
> The minority groups who opposed SB 827 support increased housing construction -- just with better protections against displacement than what CA YIMBY has been pushing. To suggest otherwise is a false dichotomy.

No, they don't. Organizations like SFTU do not support construction of any market-rate housing.
Hunting Down the Malayan Mata Hari
If your axioms of Geometry allow statements about the length of line segments, it's probably possible to implement integer arithmetic.
Amazon warehouse workers tell their horror stories
Because when fatal exceptions happen you want to know what the request was. It helps debug what went wrong.
How exactly does one manage in a major company to set up an app in production that spits passwords, or even less sensitive customer data, to a logfile?

Is that the state of infrastructure engineering? The cynic in me wonders if it's related to the trend to take developers with some systems knowledge and turn them into Ops/SA's.
Thanks for this. That link is extremely helpful and goes in depth to the ACH Networks from a developers perspective. Cheers!
I always found this interesting because surely no matter what effort you go through to prevent yourself from providing your service to EU citizens, you're probably going to collect enough information to be subjected to GDPR during the period where you did not remotely know a set of users were EU citizens. (e.g., those residing overseas, traveling, etc)

And then -- what if you finally have confirmation? You were attempting to avoid it, but now you cannot. If your attempt is to avoid it at all costs, you're effectively required to validate whether users are EU citizens much earlier in the process than before GDPR, which means GDPR already has had a big impact despite efforts to avoid its umbrella.
> and for their neighborhood to be too expensive for poor people

Come on, this (specifically) is untrue. Your average NIMBY homeowner isn't trying to maliciously price poor folks out. The closest you can get to that would be wanting to prevent their property value from decreasing because of eyesores.

While that can be problematic in its own right, it's not malice directed specifically towards folks who make less than $N per year. You'd find the same aversion if somebody making 2x their salary left their home in a shambles.

Folks buy homes partially as an investment, and understandably they have aversions to things that could damage their investment.
For some reason your comment shows grayed out to me, making me think it's been downvoted. I don't know why this would be downvoted.

FWIW I've seen the same behaviors you described in most developing economies where people don't seem to trust the larger system. I don't know if the end result is any better - food borne illnesses are still quite common despite these 'heuristics' (as you aptly named them), but there might be far more causes than just unclean veggies.
Everyone who follows Tesla knows about Nikola One, the super sexy class 8 tractor that promises to be a turbine/battery hybrid long range hauler.

Shell teamed up with Airflow to build the Starship prototype which will be doing a test run this year.

Sadly, functional requirements don’t trump patent filings (Apple vs Samsung) so Nikola is free to sue everyone whose aerodynamic truck design includes a curved windscreen.

Your opinion about whether these patents are valid or should have been issued is irrelevant. The Patent Office issues parents and leaves it to the courts to determine validity and worthiness.
I think one of the things I'd really miss is Google Maps. The directions are really good, and the web app is unusably slow
Shipping rockets to tropical islands is brutal from a corrosion perspective, though. If I recall correctly, that was the root cause of SpaceX's failure of the first Falcon 1.
Law firms who proactively investigate infringing companies, then sell their service to citizens willing to sue. As an incentive for the potential customer, they agree to only charge if they win.
It does. You can do the same with with the salted hash of the password and not the password the user entered. It's still worse than real authentication protocols where you don't store the shared secret at all, but better than those diy schemes described earlier.

Also you can't get away from sending the shared secret during registration. Even with asymmetric cryptography you have to rely on the TLS to make sure you exchange the real untampered public keys.
Except for minor services such as Verisign's DNS which uses netmap, sure.
Last kernel hacking I had to do some work with 10Gbps NICs, so 80Gbps is just so attractive to my eyes.

There are different pass-through/fastpath patch for different chips to avoid memcpy, or do zero-copys, but they are all kernel patches, kernel-only.

An alternative method will be BPF/XDP and DPDK for which you will need modify the kernel drivers somehow for good performance. Wondering if Netmap does that already or is has nothing to do with them.

All of them are addressing Dataplane packet move, hope I can have an environment to experience these close-to-100bps network in my next projects.

In the meantime, I am wondering, why do you pass 4K uncompressed video using IP packets...
If company A is entitled to discriminate against party B because of the things the latter says and/or does -- how and why do you stop business C from discriminating against party D because of their sexual orientation.

A: hosting company (GoDaddy today)
B: anyone (Spencer today)
C: bakery
D: gay couple

I think a Twitter equivalent of this provocative argument is: now do this for restaurants refusing to serve certain people because of the color of their skin.
Good. Dumbass "Analysts" can go eat you know what. Tesla is not there to earn some granny their pension, it's there to be life changing company
Conveniently those requirements exactly matched the buffers of legacy FPGA designs. Funny that.
This appears to be Javscript based... Assuming then that it works on the client side, I wonder how long it will take for someone to release a browser plugin to bypass it.
I was interested in reading this until I realized the scrolling was broke.

Please consider using default scrolling
Funnily enough it is likely to be the other way around since the Nikola has flammable fuels on board (hydrogen, CNG or LNG are options on the drawing board) so it is more likely that Nikola Ones catching fire because of turbine exhaust problems will taint Tesla.
I have this fantasy that Apple starts rejecting App submissions that don't allow use of a password manager.
For short-term competitiveness. The largest pool of technical jobs is here, so the largest pool of technical workers is here, so the largest pool of technical knowledge is here. Each generating more of the other.
https://www.scientificamerican.com/article/glaeser-triumph-o...

On a selfish personal level, I prefer my home city to remain solvent and a viable place to live. Without the tech jobs, the city government would be even more in the red, services would have to be cut, and the various support industries would have to move out. I would prefer for my city not to collapse.
http://www.sfexaminer.com/san-francisco-officially-10-billio...
No they charge per platform. I've bought it 3 times (Android, iOS, web).
A honest question from a hardware guy:

Why isn't the password hashed and salted client-side, with the salt being sent from server to client?

I understand that hashing in the client side would only substitute the user password for a new one. This alone sounds like a win to me, as it at least contains the damage somewhat in case of leakage, specially if salted.

EDIT:Sorry, I just found the exact same discussion in this thread.
Edge allows to prevent Alt-F4. I guess other sane browsers have the same behavior. Power outage is an extremely rare condition (especially in a world of laptops) so I don't think that it's a problem worth solving. I didn't understand that part about Windows update, it never closed my browser.
That was the first thing I thought of too! I wonder if he'll update the comic in light of these new findings.
Seems like some sort of fallacy. If an organization doesn’t have an ethics code, then critics can say that the organization needs to hold themselves up to ethical standards, if they do have an ethics code, critics can point out, like you have, that there must be a bunch of ethical violations which created the need for the code.
Ok.

Creating a User object that holds a password (much less a password in plaintext) seems next level stupid to begin with, but fair enough, I guess it could happen.
Then perhaps Musk could be honest and state explicitly that there is no answer. Instead, he chose to respond in a fashion that has multiple interpretations:

- There is no answer

- Musk does not know the answer

- Musk does not want to admit he does not know the answer

- Musk does not want the answer to be known
> This feels like a "registry cleaner" for GDPR

Probably. It seems like a quick "let's make some money" scheme to milk the GDPR panic.
I'm certainly not the one downvoting you :) I think your comments in this thread have been very interesting!
Assuming that you are referring to browsers as client here. One simple reason is that the client side data can always be manipulated so it does not really makes any difference. It might just give a false sense of safety but does not changes much.

In case we are talking about multi-tier applications where probably LDAP or AD is used to store the credentials then the back end is the one responsible for doing the hashing.
Amazon is finally cashing in on Alexa
A Lifecycle for the Web
Facebook says it has a tool to detect bias in its artificial intelligence