skysight-inc/HackerNews huggingface dataset:
I'm the person who originally posed this question, and I actually am a (former) lawyer. I think these are all good analogies, and courts would think about things like this.

But neither the laws nor the judges will be uniform. The laws use different words to say slightly different things, and will have different legislative histories (the record from the officials who voted them into law).

Some judges will look to the actual words to interpret the law, and others will look to the legislative history. Still others might desire a "living Constitution" approach — applying the laws in a way that they think makes sense in today's world.

Considering the dozens of laws and thousands of judges that could opine, there will likely be considerable uncertainty in this area for years to come.
It’s still not great and it’s a lot slower than putty.
That is nowhere near what's happening. Trying to reduce it to that is extremely uncivil.
Bossa Studios Launches Worlds Adrift, First Game Built on Improbable's SpatialOS
This is good for small stuff but most people should just register their own domain name.

It's so cheap now and such a benefit to have a publicly-accessible and publicly-reserved address. There's no need to make your DNS records publicly-accessible although it's often convenient and rarely a risk.
If you don't have any revenue or nexus in the EU, what are they going to do to you whether or not you block them?

They aren't a global superpower who will or can invade your country to enforce their laws
For what it's worth, many investors strongly dislike DocSend. It helps founders track views but adds friction. Here's a good recent post from Mark Suster on the subject: https://bothsidesofthetable.com/i-know-everybody-told-you-to...
Show HN: Writing an Emulator in Go
> that means is you just can't blindly collect them

Genuinely curious, what about all of the web servers that log every request which usually by default includes the client IP? Not doing anything special with the IP, they are just there in log files and archives.
You're correct about the arms, but I believe the Rift has additional sensors on its touch controllers [1], allowing it to record your thumb position and update the hand model accordingly.

1: https://upload.wikimedia.org/wikipedia/commons/d/d8/Oculus-R...
I have an ARM+FPGA system (Xilinx Zynq), I don't use the supplied BSP either.
Having an app that is non compliant out there induces anxiety. Having 10-20 old or fire-and-forget projects out there, it's anxiety multiplied. There is a non negligible chance that One disgruntled or trolling user or competitor will report you to their country's DPA . There are 28 DPAs and they are not all as good and fair as Germany's or the UK's , they may fine you even if there is no good reason. Example: in my country the DPA fined a company last week (3000 euros) because they searched a company's computer while the employee was not present, even though they found that the computer did not contain any personal information.
Data Protection Officer, right to be forgotten, data exportability, ...

Can you hint me to one of those German laws which do require one of the above?
> It's the same as the annoying wait while Alexa or Siri sends your voice data off to a cloud to be processed (which is utterly unnecessary for the recognition part).

True - in fact the iPhone actually does transcription on-device, AFAIK the cloud loop is for validation and to get answers.

Dont believe me? Put your iphone in airplane mode and use the dictation button on your keyboard!
As much as I'm not a fan of JavaScript, the problem is not so much the language but rather the choice of Electron and all that comes with it. Heck, even a web version or Chrome app would've successfully mitigated these attacks. Electron means you're one XSS away from remote code execution, and even worse, it makes it way harder to mitigate XSS through CSP (which Signal did utilize, but script-src 'self' can easily be bypassed in Electron).

FWIW, Signal's native mobile apps are written in Java and Objective-C respectively, so there's not really much of a difference compared to Wire (which is a good choice as well). Still, even a hypothetical React Native app written in JavaScript wouldn't be much worse; after all, React Native isn't just a Web View made to look like a native app, but uses actual native components.
"What is probably a good thing?"

That citizen's arrests are difficult to justify or do.

"And what exactly are you projecting will happen in this scenario?"

The racist white people who are calling the cops on black people for simply being around will then switch to trying to do "citizen's arrest" on them.

"Are you asserting that the addition of professional policing has meant less projecting of racial violence by the state?"

No, and I have no idea where you got that from. I'm saying that racists would be even more empowered to be shitty and make things worse than they already are.
Thanks for signing up and thanks for the feedback! I agree that that captcha sucks, but it's the default so I left it for now. I'll add all this to my todo list!
I found it worked for all four major carriers (AT&T, T-Mobile, Sprint and Verizon) but around 1/10 phones failed to geolocate for unknown reasons. Unfortunately I didn’t get a large enough sample size to test these before it was taken down. It didn’t seem to correlate to device or carrier - I was locating iPhone and Android devices with equal ease.
It really comes down to the definition of "systematically monitoring". On our service we capture behavior (say in FullStory) and Google Analytics at a "large scale". How the DPO clause gets interpreted is going to be a key finding in the next few months. This is imho the most confusing and potentially difficult part of GDPR
I have no problem being ghosted. The thing that really pisses me off, though, is receiving a rejection letter six weeks after the fact.

I got one today. It's okay: I got the message. I'm already gainfully employed elsewhere. You didn't need to send me a little reminder that I'm not good enough for your cool kids' club.
While Monal is privacy focused, it is also free, open source and run by a single person — me. I simply do not have the resources or the time to jump through the regulatory hoops required by the EU.

As a new and small construction company we simply don't have the resources to comply with all the building codes and the related paperwork. I just can't afford to meet all food safety requirements, I just want to provide free meals for homeless people in my spare time. I just built this car from scratch for myself and now they tell me I can not drive it on public roads just because I don't have the time and money to meet the required standards?
> The cost is strongly related to the size of the organization

There is a correlation between the number of GB you store and eg. how many DPOs you require?
So... the Bene Gesserit breeding program to produce the Kwizatz Haderach, then.
> Why would you think that?

I think the majority of users on HN are from the US. And going by the GDPR related comments over the past few months, it seems the litigious US stereotype really is true - a lot of people seem to be prepared to "lawyer up" at the drop of a hat!
When will people start using plain old PGP — a tool that does one thing only, and does it right? Sure, it's a little harder than using just one tool that handles contacts, communication, formatting, and encryption, while making popcorn and walking the dog, but it works, and it's secure if you use it right.

Our efforts to make encryption easy are going to get someone killed.
As it was written, so shall it be! Go with Root, my son.
I think there are a lot of good points being made, but you guys may be caught up in the math and are forgetting something fairly simple.

Sex is free, fun, and easy. The less education you have the less likely you are to understand effective birth control. The less wealthy you are the less you have to spend on contraception. Those things together with the easiest and cheapest form of entertainment would seem to cirrelate with a higher birthrate in lower income brackets.

I cant find any studies that support what Im saying right now, but the logic holds.
>Researchers—Iván Ariel Barrera Oro, Alfredo Ortega, Juliano Rizzo, and Matt Bryant—responsibly reported the vulnerability to Signal, and its developers have patched the vulnerability with the release of Signal desktop version 1.11.0 for Windows, macOS, and Linux users.

>However, The Hacker News has learned that Signal developers had already identified this issue as part of a comprehensive fix to the first vulnerability before the researchers found it and reported them.

>Signal app has an auto-update mechanism, so most users must have the update already installed. You can read this guide to ensure if you are running updated version of Signal.

Seems everything is patched, and was already going to be patched before the vuln was reported.
Well, there are quite a few ways you can solve this issue. Namely:

1. Fake it, like on Reddit. Setup a bunch of fake users and create a ton of topics until activity really kicks in.

2. Do exchanges and deals on forum promotion and community management sites. For example, you can ask the people on Forum Promotion for exchanges, where you do five posts on their site in exchange for five posts on yours or what not.

3. Pay some sort of service for content.

One or more of those could work for this site.
Well in the fictional universe the Epstein drive exists in, an advanced alien civilization can make wormholes through space and create microorganism with enough data on them to re-encode all surrounding organic and inorganic material into tools to create gates for those wormholes. :-P
literally this week

https://news.ycombinator.com/item?id=17064129
Guess it's Robinhood then. Free to buy BTC.
Is a single person running an app as a hobby a business?

If I want to put an open source app in the App Store, that’s not a business model for me. It’s more just personal expression.
To the first concern - that’s why I recommend you deliver (ideally) weekly intermediate builds of the product to the end user. Typically an underlying issue will begin to surface pretty rapidly.

To the second concern, first, let’s get on the same page. When I use the home analogy it’s in regards to a custom home - not a from-plan/spec home. To your point, I believe well developed software should also have strong and obvious patterns that are reused in many if not all other projects.
Ideally, they have access logs (for the web API, their backend location requests, or both) that could be used to detect patterns of misuse. Unfortunately, since their API is exclusively POST, the web server access logs will be less useful, but they could be used to detect e.g. direct API queries that skip the consent request.
Realistically, he wouldn't be.

The EU is not the USA.

The authorities have limited resources, and are only interested in large-scale privacy abuses.
The tldr for emdrive: having verified that changing the direction of the engine the thrust direction also changed, but when they attenuated the power to just the drive component, which should have changed the thrust, but it did not. Therefore the thrust being seen was not being produced by the drive itself.

For the piezo one the predicted thrust was below the noise threshold in their final tests (specifically below center of mass movements that were also - to my reading - due to the control electronics)
Very nice. Thanks for the pointer!
I'm not sure what else I should reply to something like your comment before tbh. Neither can I predict the future, nor am I a lawyer. I'm just posting about my opinion, which I got by gathering information online and from consulting with a lawyer. I've stated the conclusion I've come to, based on this information and yes, I believe that to be correct (or as correct as one can be about a law with no reference cases in court yet).

I was just pointing out, that when a lawyer says "probably", he usually has a good reason to do so. And it's my strong belief that the reference cases in court will not be fought by small companies, because they rarely are.. There is just not enough money to make fit the effort you need to put in winning the first case. Before there is not one single case, I don't think it's necessary to panic and shut everyone out.

You don't need to believe me or agree with me, but reducing this to "my personal appetite for risk" is really weird.
True, but the number of executives and managers that are just starting to ask "what's this GDPR thing I keep hearing about?" tells me that it's about to be a growth industry.

IME, there's also a significant overlap between the execs that insist "2 years isn't enough time to get compliant" and execs that ignored it for the last 2 years. Not sure what that means, but it's at the point where I write off timeline complaints as whining and lack of forethought.
You're not required to delete information from archival data such as backups
Except this is already standard operating procedure for most companies, and it doesn't seem to have affected them.
> must contain letters in mixed case, must contain numbers and must contain symbols

I mistook this for being about usernames at this hacker forum
In other news, prepetual motion machine found not to work.
> The problem is that it's also computationally expensive and therefore we reduce the stiffness of objects to make it faster.

Are y'all using penalty methods for the collisions? Which model does it use?
I'm not a professional; I would strongly caution against offering or following non-professional advice in a situation like this one. IME, even professionals - experts in their field - will not offer advice based on such limited information.

If for some reason I can't imagine I offered such advice, I would do so in as judiciously, measured, and precise a way as possible. Hyperbole is, IMHO, not an indicator carefully considered ideas but of emotion.
Not a surprise, but certainly a disappointment. It would have violated our understanding of physics, but it's not like that's never happened before.
I'm no economist, but I've been mulling over some of the common problems the majority of citizens of modern countries are all facing.

I think that most of them (low purchasing power, high cost of living, high house prices) seem to stem from the effects of our collective activity and lack of large-scale and long-term organization and planning; it doesn't help that we've been lately -- as a society -- focused on optimizing for GDP, which is as an indicator of how well a country's economy is faring.

I'd like to say my opinion, and would welcome any educated response, but I fear a backlash or repercussion. This is something I've been thinking about in terms of game theory, and though they may seem a bit crazy, I would invite everyone to consider them before disregarding them as conspiracy theories.

I believe there is an interest in keeping the majority of people uneducated, busy and plentiful: in essence almost everyone is easily replaceable, and the majority of the population have to settle for meager wages.

However, in a scenario where people were to be educated and scarce, I posit that inequality would tend to disappear as people would have a higher bargaining power, a likelier scenario to organize or respond, and a higher quality of life.

So, even if this hurts housing, healthcare and industries indirectly (less infrastructure to be built, babies to be delivered and products to be sold), I'm glad that fertility rates are below replacement level because this indicates -- in my opinion -- that average quality of life will increase.
To answer "Which VPN?" you first need to answer "Why VPN?" because there are a lot of different reasons for using a VPN.

If it's just privacy from snooping, you'll be fine with setting up your own VPS with OpenVPN. It's simple enough that any technical person can do it in a few minutes (or hours).
To clarify: I don't doubt that there is a work on it, but this particular call in demo was scripted prepared fake.
> With Merged Patches in Projects of: Apple, Dropbox, Facebook, Google, NASA

Can you share the links to the merged pull-requests?
I believe you described the US case.

In Europe with the free healthcare, the elderly can be kept on care for a very long time, all covered by the taxes of the younger workers. This is gonna become a huge hole in the budget.
Another major aspect of jaw development is tongue posture. Resting the tongue on the roof of the mouth and breathing through your nose results in increased jaw development, e.g. a broader palate, thanks to the bone's natural response to give and grow under pressure.

I've been playing with this myself, thanks to discovering recently that I grew up with an undiagnosed mild to moderate tongue tie. I've changed my tongue position, and even as an adult have noticeably expanded my palate such that there is more room in my arch than their was before (as determined by modest gaps developing between my mid-molars).

In short it's been a big discovery for me this year, and the results are manifest in my life. Sad that this is not well understood by orthodontists and such everywhere.
It's impossible to talk about Agile vs. alternatives today because the fundamentals of Agile development are just the de facto way all software is developed now. Continuous integration, regular builds, iterative development cycles, etc. Even people who think they would be doing "Waterfall" today would do so still using these techniques.

The reason why Agile techniques were created was due to a serious crisis in software development. Projects were failing, lots of them, in ways and with a severity that few software projects today fail. At its core Agile is very simple, it's a system of hedges against failure:

Always have software that is in some sense in a usable state (builds, runs, passes smoke/BVT tests). This makes it very difficult to complete a project without anything to show for it.

Integrate early and often, don't wait until the last minute. Integrate skeleton frameworks together and then iteratively add features. This helps avoid having a huge amount of unknown risk due to integration failure at the end of a project, mitigating that risk translates to more schedule reliability and higher chances of project success.

Also, working iteratively helps ensure that progress is constantly being made rather than potentially wasting lots of dev-cycles on work that may not be ultimately viable.

Keep the "customers" in the loop. With a version of your software that actually runs they can keep up to speed on the latest features and capabilities as they are actually implemented. This makes it much more difficult to ship something that is wholly different from what the customer actually wants. This isn't a sure-fire recipe to avoid shipping the wrong thing, but it is one of the most reliable, achievable, and cheapest ways of doing so. It's certainly preferable to getting a room of lawyers and engineers to hammer out a contract that embeds a precise specification for the software to be built. Besides which, a lot of software today is not built on contract, it's built for the market.

The cult of Agile is a serious problem, and people who think that any management technique can actually protect them from not doing any management work is an even bigger problem. Agile's core problem is that it can serve as a conduit for micro-management and it can make it hard to sell doing research or expensive (but valuable), long-term investments. But the solution isn't to abandon the concept, the solution is to work better.
Broke Your Right Arm? Exercise Your Left
> I’d bet it’s happening with humans, too, but that’s just an observation for another day.

Ho Ho!

Tell me more brother. I am curious.

This links up with David Krakauer's ideas I'll bet.
> That citizen's arrests are difficult to justify or do.

They aren't, though. That's the whole point. It's just that they're rarely necessary.

> The racist white people who are calling the cops on black people for simply being around will then switch to trying to do "citizen's arrest" on them.

This seems like unfounded fear to me. If it were a real concern, why isn't it happening now? Conversely, since we do currently have a regime of professional police, why hasn't it proved insulatory against this phenomenon? The criminal justice system is at the core of racism in the USA; it certainly hasn't had the effect of inhibiting "racist white people". Instead, it has been the very mechanism by which racist outcomes are assured.

> I'm saying that racists would be even more empowered to be shitty and make things worse than they already are.

Just to be clear: you are saying that a criminal justice system with a smaller footprint will result in a situation in which "racists would be even more empowered"? That's what you're saying? Because that sounds completely backwards.
It looks like the purpose is to link to for being GPL compliant, not like an attempt to contribute to open source.
Your point is clear, but this is internet software all having to comply with the same regulations regardless of actual industry. I'm having to close my small construction company because the FDA passed harsher food safety requirements.
Would that be Geico? They were mentioned doing that in the comment here¹:

“It's funny that this is coming up now. The other day I was on the phone with Geico's roadside assistance and they wanted to know my location. I told them I didn't have their app downloaded, they said it wasn't a problem and they could get it without it. Sure enough they could. I checked their disclaimers [1] and they purchase the data from my cell carrier. They didn't even have to know which one.

[1] https://www.geico.com/web-and-mobile/mobile-apps/roadside-as... (see disclaimers at the bottom)”

――――――

¹ — https://news.ycombinator.com/item?id=17082583
Might I hazard a guess that you are operating in the USA?
It's specific per group. We usually talk about a certain thing a lot in a group. Sometimes it's pulling up an API document. Sometimes it's a huge group with a lot of parties and you just want a summary of a long conversation. Sometimes you want to highlight certain links or be up to date with certain items.
> Fail-open security is useless against any actual attack.

Except that if the user is not visiting for the first time, then HSTS comes into play if the security headers are set, browsers can let the user know something is amiss.

We both agree that fail-open security is useless, but right now Chrome and other browsers default to going to port 80 for first visit instead of port 443. All I am asking is that the default becomes 443, and the fall-back, for first visit, is port 80.

This way I can stop running web servers on port 80 that do nothing but send a 303 with https as the protocol for that particular domain.
Nibiru exists! https://en.wikipedia.org/wiki/Nibiru_cataclysm
Ask HN: What freelancing platforms don't follow the bid/auction model?
I currently am in the email list of moonrise.works and am looking to find other alternatives that don't follow the model of bids and public auction like Freelancer or Upwork. I don't care about what my competition is bidding, or where they come from, or be tied to their time tracking software. I just want information about the project and client, be able to reach him after reviewing my background, and take it from there.

Toptal appears to be great for freelancers, but their application filtering process appears tough. The process is almost like applying to a regular full-time job.
I don't know if feedback is provided as standard where I work, or only on request - but we do provide meaningful feedback as far as possible.

I suggest that few companies will object to you asking about their timeframe for decisions, or (once that has expired) asking for feedback. Some companies won't be set up to provide it, which is unfortunate, but I suspect many will.
A relational/lang mixed access/excel platform.

Looking for enough funding to work on this (just to cover life expenses US1000/month)