skysight-inc/HackerNews huggingface dataset:
We've all had 2 years notice since the GPDR has been adopted!

Have we really? The first it cropped up on my radar was late 2017 and I'm in a business that adheres very strictly to EU DP best practices (so was already mostly GDPR compliant).

I'm not sure whose job it was to promote awareness of this but Britain's data protection agency certainly didn't do a good job of it given they've had my email address for years(!)
> You can build random access around tarballs, just need to index the header data.

> Granted, you do have to traverse the entire tarball.

So you can't randomly access a tarball, you can cache the linear access you've already done.
A lot of that seems to just come from the fact that the new settings system is not "done" as made obvious that it can't replace the old control panel yet.

The lack of consistency in pretty much everything is the main reason I'm still on Windows 7. Every time I look at that end of support milestone I shed a tear. I WANT the Kernel other improvements that 10 offers, but dear lord does it come with significant downsides
It's the magically shrinking "AI of the gaps". "AI" covers only things we can't yet do in ML.

https://en.wikipedia.org/wiki/God_of_the_gaps
"... there are some metadata extensions that allow this)."

Where to find these extensions? Are they portable between Linux and BSD?

The 1998 dict project included a utility called "dictzip" for random access to the contents of gzip compressed files.

Dumb question: Is it possible to create a utility or even a hack that performs "random access" into tar archives?

Example use case: the user only wants to untar a small number of selected files from a large tarball such as a source tree.
The user has tried both the "-T filelist" option and using memory file systems instead of hard disk drives.
Konflist – Curated list of tech conferences
Isn't it more likely derived from honeypot
Therein lies the difficulty. They want the information to be in the Cloud, and be able to be accessed when needed by authorized personnel, but not able to be accessed by anyone who isn't authorized. They also need to track and audit the access as well so there's accountability. It also has to be, in effect, absolutely invisible. Sounds like they'll need top dollar security consultants to design it, who also happen to have a side interest in magic. And they can never reveal that they've worked on it. Kinda like a Manhattan Project for government IT.

Good luck to them.
You average around [ed:2M] views a month?
They're just doing their part to waste energy and bandwidth, in the same vein as a real ICO would.
Phages are making a comeback
For what it's worth, FATCA, DCMA , et al really suck too, and I think those have terrible unintended consequences. But this post was about GDPR because that's what the topic of the oringinal post is.

And before you go off on Americans having to comply with a law OUTSIDE OUR JURISDICTION, how about we hold all of our crappy laws over your head. And fine you 4% of revenues for one of our bullshit laws?

Kind of hard to reconcile those two positions, given that the former is just a perfect example of the latter.
I don't get why people still claim that this is "the Docker approach".

Because it is the Docker approach (as distinct from the container approach necessarily).
How can they prevent migration of talented people, given China's infinite war chest ?
Thank you! I was trying to find that before posting but forgot their naming of it.
try turning the brightness up or down. I had the same issue with many of my monitors and this would sometimes fix it.
You are either trolling or incredibly naive. Nothing good will come of working with someone like this.

EDIT: someone that spends that much effort lying has a good chance of being a sociopath.
> Isn't it more likely derived from honeypot

It's almost certainly derived from the Howey Test.
What he/she said, plus it doesnt hurt to tinker with a toy software idea to have fun and keep you in your toes.
I had a similare quarter life crisis and ended up leaving the service for a very different world and can say lot of the advice in this thread is so very true.

First step is knowing yourself, and you know you love skiing, ao as they say, 'party on wayne'
This is my question too... nobody has explained this part.
Namecheap also did the same for the same website. I switched away from Namecheap for this reason.
Then they might have called it Honey Coins. That the SEC named it Howey, after a test that determines if something is a security---thus actually under SEC regulation---seems way more likely.
What makes you hire or no hire a candidate for a software engineering position?
Just out of curiosity, or maybe a valid question that a lot of people might be interested? So what makes you decide to hire or no hire for a engineering position?

I will just tell my personal experience both as a interviewee and a interviewer:

* As a interviewee:
Since you probably would never get real feedback from interviewers (due to some policies or whatever), my feel of the interviews that I was rejected:
1. interviewers caught some of your coding bug, even though you fixed it;
2. you think you will discuss/communicate with the solution that interviewer wanted, but maybe the interviewer is expecting to see without too much discussion (hints), you came up something s/he wants or better surprise him/her. If not, you will be probably rejected.
3. Maybe the interviewer just does not like you (chemical not right, etc). No matter how well you did, someone can always pick up something to say you're not "good" enough for the position. This can be subtle, and you as interviewee, just can never know.

* As a interviewer:
From what I recalled, I will hire the candidate if s/he
1. Does some amount of workable coding
2. Even with some hints, the optimal solution is brought up and implemented.

The reasons I rejected candidates:
1. too much unnecessary talking, no real code. or cannot write any sensible code.
2. with a lot hints, he/she can not write up standard algorithm routines
3. border line candidate, in the sense that there is some team member just does not like the candidate and vote for no hire and I did not champion for him/her.

What are your possible reasons of hire/no hire? or "feel" of being accepted/rejected?
agreed. the farther back the data point, perhaps the less applicable it is today.

i was just surprised by the typical length of consecutive runs positive return years (3.6) vs negative return years (1.4).

Also, that if history has any bearing, 2018 will probably be a negative return year (there has never been longer than a 9 year run of positive returns).
This was true 7 years ago. Today JS is in frontend servers everywhere, and powering everything from games to IoT to developer tools, robots and smart fridges. All things that used to be territory of typed/compiles languages.
I think local governments should be able to regulate emissions in their local area. I'm surprised they didn't take that approach as it would have allowed the economic benefit if possible without the harmful effects. After this court ruling, I expect the next step will be related to monitoring emissions and fining as appropriate.

https://www.environment.co.za/environmental-issues/coal-dust...
I have a solution, inflate the size of the first page to correlate with number of active users.
They actually tried to introduce decimal time[1], as well as a decimal week[2]. They didn't stick though.

If you are interested on the topic of the history of the metric system, check out The Measure of All Things[3], an absolutely fantastic read

[1] https://en.wikipedia.org/wiki/Decimal_time

[2] https://en.wikipedia.org/wiki/French_Republican_Calendar

[3] https://www.amazon.com/Measure-All-Things-Seven-Year-Transfo...
I wouldn't think so, its "Howey" with a 'w' rather than "honey".
I'm not sure - in my experience I find that issues from new GH users are usually suspect (e.g. see [1]). So it might be nice to have something like the "Limit to existing users" [2], except not limited to a 24-hour period.

I wish GH users felt obligated to disclose they work for a company when creating issues that are for their company, but that's not something GH could (or should) enforce.

[1]: https://github.com/schollz/find3/issues/66#issuecomment-3829...

[2]: https://blog.github.com/2017-05-30-introducing-temporary-int...
The concern seems to be less about creating barriers to entry than it is about entrenching incumbents.

A legal regime that does the former without doing the latter? Sign me up. One that does both? Well, I guess I do still get privacy laws, but are they worth a damn if the latter is among their effects?
Ask HN: Which domain registrars do you recommend in 2018?
Do you any recommendations for domain registrars for all categories? (ie personal, small biz, medium biz)

If not, which registrar do you recommend and for which market segment?

I could just google this info (as someone suggested below), but the reputation of registrars changes. For example, I used to recommend Namecheap, but then this happened: https://medium.com/@alexandernst/from-successful-to-zero-thanks-to-namecheap-d392c76b2ffd

"But, what about Gandi?" https://news.ycombinator.com/item?id=10182763

"But, what about GoDaddy. I never had any trouble with them." Well other people have had trouble with them: https://www.google.com/search?q=godaddy+hate&oq=godaddy+hate

(I'm currently using NameSilo for personal and hobby projects. But, I was just curious what "the experts" use for more critical stuff.)
I think it came from 60 being highly divisible. Why do you ask?
https://www.coinist.io/the-howey-test-the-sec-and-ico/
GIMP 2.10.0 is out – Girin Studio
The real question is, who are those people? They are really smirking hard. I bet they're SEC employees, the images have real first names on them (that don't match their fictitious names) which would seem to indicate they're not just stock photos.

I can imagine the email to the office now. That would be the coolest thing ever... "we need volunteers, must be reasonably photogenic and capable of producing a foreboding smirk...."
Yes, but when "system administrators" with valuable data just want to do things in a quick and convenient way in production, we've got problems.
> ORG

What's ORG?
> Further, does any RFID chip on the market have a real security story?

A few minutes of Googling would have told you that, yes, such things already exist and have for a while. Slap one into a implantable tag and you're done.
Advertisement and info gathering beyond a certain point (which we probably passed long ago) is simply an arms race/prisoners dilemma. All the companies would be better off or at least no worse off if they all mutually scaled down their efforts, but it's to no one's advantage to scale down their own efforts. Why ridicule the players in a prisoners dilemma for trying to jointly move to a superior outcome?
The government does regulate what ISPs can host. In this case, the local government is trying to regulate what the port can host.
> the usb ports are disabled and the usb ports on new issue computers are epoxied to prevent trying to use them.

That means many current day laptops can't be charged.
Yes, if it gets to the point where they've already shopped around you're going to be paying a much higher price to retain that customer, than if you simply gave them a reasonably competitive premium or deserved discount. Insurance companies are not like cable, customers are free to switch to one of many options at any time. Acquisition and churn costs are huge problems.
Then what about routing protocols such as RIP, OSPF, etc?

Don't forget BGP. I don't think they do what you think they do, at least, not to the extent you think they do them. There is a hell of a lot of manual work in running any sizeable network even within a single organisation.
> Advertising should only be assumed to drive mindshare, whose link to sales is often discouragingly weak.

Regardless if advertising is effective at driving sales, a dollar spent advertising Women's Self Defense on Facebook drives (Mindshare|Behavior|Sales) more effectively than a dollar spent advertising Women's Self Defense in Black Belt Magazine.
Absolutely - I don't understand why this is "new", "odd" or "difficult".

I work for an European company (travel/tourism) and the day they hired me (4 years ago) I got a corporate laptop with Windows 7 which would accept usb mouses, keyboards, charge smartphones... but would not "mount" anything that had storage.
Interestingly enough I can connect my (personal) iPhone, and I can read pictures stored there, but I cannot write to it - I haven't tried installing iTunes because I don't need to backup to my work laptop so no idea how it would work with dedicated sw, but for sure there is no need to use epoxy glue or physical locks.

(Granted, I never tried to see how strong the protection was because it's not my specialty and frankly I don't care, but it looks like it works well enough as it is).
Yeah, and my point was that we start the young people that we hire on the open stuff. Then we move them up and on to the other open stuff, which runs on top of the cloud vendors.

(As almost everyone else points out, the closed cloud vendor stuff is nowhere near flexible enough for most moderately complicated use cases unless you’re running at serious scale.)

This is a false crisis.
> It would be a mistake to fully associate container workflows with docker itself.

It would also be a mistake to fully associate Docker containers with Docker.

Joyent can run docker containers, securely (zone-isolated), on smartos.
> This data is sold to whoever wants it. Hedge funds or services who analyze it for hedge funds is the big one. It's normal to track hundreds of millions of people a day and trade stocks based on where they go. This isn't fantasy, it's what happens every day.

Honestly, this is the least bothersome part of the whole thing. The only problem is that there's no way I trust anyone involved to properly anonymize and secure the data in question.
HTTP headers are not anywhere near 1kb of text.

the packet's themselves are only 1.5kb.
It's hard to give you any specific recommendations with so little context, but I will try. For starters, I should point out that you can't really compare Guix directly to Docker. Guix is a package manager, Docker isn't. The article talks about 'guix pack', which makes it possible for Guix to interoperate with non-Guix systems, and one supported system is Docker. You can deploy software with just Guix, too, either on GuixSD or a foreign distro with Guix installed.

Anyway, in your Dockerfile I see that your application uses Python and you do some package management and service management stuff that is mixed together. In Guix, these things are separated. So the first step would be to define a package for your software, and then you would deploy that package. For a real world example of a Python application, here is what the AWS CLI package looks like:

(define-public awscli
(package
(name "awscli")
(version "1.14.41")
(source
(origin
(method url-fetch)
(uri (pypi-uri name version))
(sha256
(base32
"0sispclx263lybbk19zp1n9yhg8xxx4jddypzgi24vpjaqnsbwlc"))))
(build-system python-build-system)
(propagated-inputs
`(("python-colorama" ,python-colorama)
("python-botocore" ,python-botocore)
("python-s3transfer" ,python-s3transfer)
("python-docutils" ,python-docutils)
("python-pyyaml" ,python-pyyaml)
("python-rsa" ,python-rsa)))
(arguments
'(#:tests? #f))
(home-page "https://aws.amazon.com/cli/")
(synopsis "Command line client for AWS")
(description "AWS CLI provides a unified command line interface to the
Amazon Web Services (AWS) API.")
(license license:asl2.0)))

The package recipe contains all the metadata, build instructions, and dependencies. Now that you have a package, it can be built with Guix and then deployed in a variety of ways. Judging from the Dockerfile, your software is some daemon that listens on port 8080, so:

* You can install the software directly using 'guix package -i your-package-name' and run the notify.py program. Good for trying things out.

* If you are deploying to the Guix system distribution, you could write a service definition so that you can manage the daemon via the init system. The service would take care of creating the notifier user and group, starting the service on boot, etc.

* You could use 'guix pack --format=docker' to export an image suitable for running with 'docker load'

* You could use a different 'guix pack' format (and maybe make it relocatable) for running on some other non-Guix system

I should also add that I don't think the work is fully done yet on handling the entirety of Docker use-cases. It's a work in progress. I can think of a number of things that I want to add to Guix to make this workflow better that I haven't had a chance to hack on yet.
Not the OP, but farmers tend to get up really early and have long working hours to boot. (I worked on and managed a dairy farm for a few years early in my career, plus have read about farmer life, is how I know.)

As an aside, I remember and like the point in a children's book I read as a kid, where they vacationed on a farm, and saw that the farm workers took their time about their work, did everything at a (somewhat) slow and measured pace, and still got a lot done (and well) by the end of each day. Very applicable to the modern software field, IMO, instead of the noise, flame and fury, often quickly descending to ashes, that we see a lot of nowadays.
I'm not assuming that all "by pointing out that they can make more money elsewhere". In this case I'm talking about someone who can make more money elsewhere.

I've often heard variations on "don't be greedy" from startups and recruiters when I was working as a consultant.

I'd tell them "We'll I'm making X now, so you're going to need to at least meet that in total comp before I'll consider it."

The response is almost always something like "We're interested in programmers who are really passionate about Y and aren't primarily salary driven, so we only pay X/2 here."
I know that RMS is not GNU, but the man is a raging egomaniac - and the way he talks takes credit for basically everything he's come into contact with. Unless I'm underestimating the bounds of possibility for one person's contributions, he uses 'I' in a lot of places it would be fair to say 'we'.

(Note, I came to this conclusion after reading about a bunch of his technical accomplishments, which I can see are awesome, even if the obvious megalomania evidently occasionally dampens their effects.

I think his work is fantastic, his politics are largely reasonable - but I think his self-obsession is often the driver behind a large amount of damaging and counterproductive behaviour.

Politics is the art of compromise - not convincing everybody you're a saint while alienating your natural allies.)
https://www.openrightsgroup.org/
How will you develop an equation that maps time-to-fall to height without some consistent unit for time?
Regulations that create positive obligations -- "you must do this" -- create barriers to entry, because it costs money to do that. But I'm not sure it's the same with regulations that create negative obligations, because not doing stuff is usually free, except when the negative obligation is actually a positive obligation "to prevent xyz".
But to be used in that way, you'd have to plug the phone into the computer.
And what exactly do they do that I don't understand?

> There is a hell of a lot of manual work in running any sizeable network even within a single organisation.

I'm not trying to say they do everything, and no manual work is required. I'm trying to say machines are already doing part of it. OP believes that give a world where machines can code, they can't design or maintain networks, which I find truly ridiculous, since machines are pretty far from doing any kind of "coding" today, but they do networking and network protocols pretty well.
Android can be quite well driven by the keyboard. Even alt-tabbing between applications works.
only drawback ghost has it doesn't support EL7.
and there is documentation only for ubuntu. pretty bad :/
It's rough because, like many backend type jobs, the best thing that can happen is nothing breaks. Incremental improvements in stability or scalability will not be noticed, but every single change you make is a massive risk of a page at 2am, all-nighters trying to fix things, outage reports, incident reports, root cause analysis reports, etc. You're stuck between process and outcome.

You have to constantly fight the urge to just never touch anything.
Would it be possible to just disable the usb driver from the OS(or just limit it, to a very very few tasks). Without it being a burden for UX purposes. One could argue that an exploit might be written in such a way that, it could be triggered before the OS boots from the BIOS. But, at that point, any external user-land exploit would provide the same level of access to sensitive data.
In fact, land wasn't really measured in units of area as much as it was measured in units of productivity (ie bushels), which was much more useful to know
I'm glad you do, but I don't think that's true for most.

You see constant praise of Lyft, but constant demonization of Uber. Lyft has quite literally done all of the "dirty" business tactics that Uber has. In fact, most of the reason Uber started operating UberX in cities without express permission is because Lyft was already doing so, and Uber noticed that there was no backlash against them for it.

Unfortunately for the tech world, sexual harassment and misogyny is all too common. There are numerous reports about women in tech, and how hard it is and why many of them ultimately leave their careers. This is not something that has only occurred at Uber, and yet, all of the news about it is about Uber. All of the outrage about it is directed at Uber. For some reason, it's fun to hate on Uber, and it always has been.

Let's hold Uber accountable, but let's also hold every other company accountable too. Let's have equal outrage for google, facebook, snapchat, and every other tech company that has done the same stuff. Let's have outrage for Blackwater(or whatever they changed their name to now): a company who literally profits off murder and the destabilization of world order.

I say all of this as someone who experienced a lot of negativity while working for Uber, and I would never work there again. I don't think it is an "evil company" I just think they have chewed up and spit out a lot of folks on the way to the top.
Now explain that in a time-constrained debate.
> I always thought the focus of HN was the thoughtful conversations that took place around topics, not the accrual of fake internet points.

Apparently, ranking is only a function of the time since submittal and the # of points. From https://news.ycombinator.com/newsfaq.html:

> The basic algorithm divides points by a power of the time since a story was submitted.
Would it be possible to just disable the usb driver from the OS

For that you would need the capabilities of a world-class IT outsourcing company.
So exactly how do you think your friend should have handled it? Tell his employer he was checking out a potential new job? How do you think that would have gone? You think someone of "integrity" needs to ruin their current employment every time they even think about finding a new job?
Rhizata – automate your data layer
In the US export tarrifs were not allowed, though other countries do (or at least have)
Show HN: NanoStack – A Virtual supercomputer powered by smart devices
Are people brilliant because they don't care or do they not care because they are brilliant? Seems to be a little of both...
The map is not the territory, right?
:( I did not know.
Should cities where fiber cables land be able to regulate what packets pass through them?
They announced the deprecation date back in December.

https://blog.twitter.com/developer/en_us/topics/tools/2017/a...