skysight-inc/HackerNews huggingface dataset:
"The individual can be assured that their personal data will not be restored back to production systems (except in certain rare instances, e.g., the need to recover from a natural disaster or serious security breach). In such cases, the user’s personal data may be restored from backups, but the controller will take the necessary steps to honor the initial request and erase the primary instance of the data again."

It sounds like you need to erase the data again even if you used a backup. That means you need a separate database of the entries you deleted. So it's still unclear how that could be integrated within 10 minutes.
Got a source for that 95% figure?
A Persona-Based Neural Conversation Model
Critical vulnerabilities in PGP/GPG and S/MIME email encryption
> I think trying to frame something you give away to everyone, always, without anyone asking for it can legally be framed as privacy sensitive information. That would simply be absurd…The GDPR is not insane. Chill.

Isn't it? Just one particularly absurd example: logging IP addresses in your httpd's access logs can be considered a violation of GDPR. [1][2][3]

[1]: https://www.whitecase.com/publications/alert/court-confirms-...

[2]: https://www.gdpr360.com/gdpr-ip-addresses-and-classification...

[3]: https://www.smashingmagazine.com/2018/02/gdpr-for-web-develo...
If the sites store other users info, then they fall under GDPR regardless of whether you are a company or not. I'm in the same boat here and this week will be purging all identifiable user data that is over 90 days old, and emailing the remaining users with 'opt in' emails. Then I will be updating my backends to do this automatically on a schedule.
They don’t have to send back all of the raw data, just analyses like ‘person X’s face detected, is in a noisy place’ or ‘conversation included these 5 keywords’. The processing and data transfer could also be deferred until the phone is idle or on WiFi.
I work under 40 hours a week with no pressure to work more, I get along with my coworkers and look forward to going to work in the morning. I have worked a crunch time that was pretty terrible, but that was a once off. It's been almost 2 years since my last crunch time.

The comp is decent. It doesn't match google/fb but it's better than a non tech company. I have a target of ~170 total comp as an SDE II with just under 4 years of experience out of college. This is my last year of my initial stock grant so my take home is quite a bit over 170.

I've never seen anyone cry at work. Closest was a guy that got pip'd, but he was genuinely struggling. I can/could see glimmers of truth in the NYT article but I've never seen it that bad. That said, I am aware that tech (SDEs in particular) tend to be treated a bit better than everyone else.
You're not the first to mention Gopher. I'm curious what you use it for?
They are using the same versioning scheme (semantic versioning) as they have always done.

With an increment in the major version number indicating that a release contains significant new features and/or old features being removed.

The scheme you propose would imply that it is only LTS releases that get significant new functionality.
That is total healthcare expenditures including things like doctor/nurse/lab tech salaries, medical devices, administrative overhead, etc. The amount spent on pharma is ~$1K per capita.
I would consider also "No". If you i would consider to offer a "bug free" version i would charge a lot more for it and i would include a description of what is a bug and what is not considered a bug. Also i would include a description under which circumstances the software should be run (like hardware, software). If the customer updates host OS or changes platform/browser i can't warrant bug free behavior.
Have you tried auctions?
This is my super-simple progress indicator, called dots. I wrote it at least 12 years ago when I was on a slow terminal and wanted to know unpacking a tarball was still progressing (the verbose output would have taken too much bandwidth!). Now I copy it onto every new system I use.

It prints one period (.) for every 1000 lines of text piped into it. It just shows that there is still activity, not progress, but often this is enough.

A typical usage is:

tar xvfz some_huge_tarball.tar.gz | dots

It defaults to one dot per 1000 lines, but the first argument can be a number to specify another interval.

#!/usr/bin/perl

$| = 1;
$i = 0;

if ($#ARGV < 0) {
$number = 1000;
} else {
$number = shift(@ARGV);
}

while (<STDIN>) {
print '.' unless ($i % $number);
$i++;
}

print "\n";
Disabling PGP in Apple Mail with GPGTools
Also known as “bait and switch”.

Most job ads mentioning Haskell and OCaml are really for Java too.
No change since the NYT article.

Amazon only changes things when it has to, and only in a lip-service kind of way. There was a flurry of discussion and proposals when the article was published, but it's all died down and we're back to where we were beforehand.

Compensation, culture, and perks are infinitely better at Google, Facebook, Lyft, Uber, etc. All of them start vesting your stock monthly after 1 year, whereas Amazon has a ridiculous vesting schedule (5% after year 1, 15% after year 2, 20% every 6 months thereafter). Not to mention the awful 401k matching, no free food/drinks, terrible drab offices, etc. All in the name of "frugality." Leadership claims that our competitors waste their money on these things, despite all of them being insanely profitable with higher employee happiness and retention.

I'm working on moving to one of the above competitors now. I recommend avoiding Amazon, even if the role you've been offered sounds cool.
Disabling PGP in Outlook with Gpg4win
Yeah, but they're mostly old low end desktop computers.
The math can work out in some cases. I've had my 400$ Allen Edmunds for 8 years, some wear, but generally still in fantastic shape and very comfortable. Prior to getting them I bought 1-3 pairs of ~70$ department store shoes per year.
#deletegoogle
Hosting old forgotten files mainly. Some people actually blog with it (phlogs).

if you want to know more, then https://gopher.floodgap.com/gopher/ is the place to start.
Tbh I don’t agree that this is amazon specific, generally at any big tech co you will feel this way unless you find your way into something more specialized. For instance, I have a friend at G who was on a front-end team for maps for a while but recently switched to work at google brain after collaborating on side projects. He said the difference is night and day for him in terms of self direction and responsibility.
You mentioned Minetest back then. I had a look at it recently and it seemed like it's not that much fun without mobs. Could you describe your Minetest setup in more detail? I'm sure it can be used to get more fun of it than I managed to.
Yeah that sounds pretty bad. It is possibly some injection attack since it mentions automatic decryption of PGP. Or maybe some fundamental flaw in the formats... How exciting!
Tamper Evident Microprocessors [pdf]
Praise for Radical Candor
Is it not normal for a keyless car to beep like crazy when you leave the car with the key inside?

My car does this. As soon as it detects the key is not inside the car it will beep and remind you the car is on. The other problem this solves is that you don't want to be driving somewhere without the key either, eg when you're dropping off your wife and she happens to have the key.
You can tell them to stop contacting you and it works.
Critical PGP and S/MIME bugs can reveal encrypted e-mails. Uninstall now
France and Germany are looking pretty good these days.
I recently went to a Tolkien expert's lecture (author of the latest biography https://www.amazon.co.uk/Tolkien-Raymond-Edwards/dp/07198098... ). He was very adamant that Tolkien didn't like allegories and instead filled his books with his moral values in a more subtle way. It is easy for us to project our own allegories on someone else's books, but anything you may see in LOTR was only made for good storytelling and not with an intention of allegory.
Crypto microprocessor for executing enciphered programs
I sympathize with you and have also found this frustrating, but note that job ads are first, speculative, and second, seen as marketing material. Many ads will list fads because they think it makes the company seem like it's on the cutting edge and they believe it will attract candidates. Most such companies will end up not doing anything significant with the tech.

"In the cloud" has become such a thing these days that companies that explicitly avoid the cloud on the technical side end up writing job ads that say things like "help us transition to the cloud!" I don't know if this is now considered standard marketing/HR mumbo jumbo or what, but just like a resume, a job ad should not necessarily be taken at face value.
Yeah... I'm a big fan of both Go and Clojure, but they both easily lend themselves to over-engineering. When you have to consider time to market, rapid iteration, and other such annoyances, languages that optimize for developer productivity definitely have their place, and Docker is a huge win for working with interpreted languages.
Dyad: A System for Using Physically Secure Coprocessors
I think what you guys are trying to say is that time is equal to 400 total jerks at a two dick rate.
Agreed. It's easy for engineers to assume because they have a deep understanding of a complex topic, that it is a good proxy for assessing general intelligence.

Such assessment is a good proxy for a certain kind of intelligence only, because intelligence itself exists on a fairly wide spectrum, it is not a binary trait.
In statistics, there's a classic quote by John Tukey "The combination of some data and an aching desire for an answer does not ensure that a reasonable answer can be extracted from a given body of data."

This should be printed in large letters on the wall of anybody claiming to do data science.
If it's just about the statement "Earning your trust is my most important interpersonal goal", why include the remainder of the comment? If it's not part of your commentary, why reference it all? You've already seen fit to elide most of the rest of the profile - your thinly-veiled attempts to publically shame him for his Christianity are as shameful as your verbal diarrhea while pontificating that the only IMAGINABLE reasons for collecting telemetry are because he's going to sell the data.

Collecting telemetry is a decades-old method of getting real data about the behaviour of a program in real-world environments. This is why web browsers, smartphones, and OSes all have telemetry collection routines.
Forgot the /sarcasm tag... The car industry is sick from the latest-trend-virus. Touchscreens does not belong, neither wheel-less. But I'm sure someone will see the wheel as a risk if you crash into something and remove it. That the wheel could have avoided the collision completely is not important.
Thanks! It's just a tad before my time so I've never been exposed to it before. Will read up on it.
This is only very small amount of information, though. Of course it depends on the team. I think even at the crappiest of employers you will find a team or two that are not as painful to work with.

And since this platform here allows more than one person to answer a question, it is totally valid to just describe your own, personal, non-objective experience and let the reader make conclusions based on the sum of what they are reading.
Same, and exactly; the car should just shut down when it detects the key is not inside the car. Could someone just get in and drive off?

I'm fairly sure this might be true for older models though.
PyCon 2018 Talk Videos
I am on CenturyLink dsl and have ipv6 kinda. I had to go through the trouble of turning on 6rd myself since it is not enabled by default.
Dai cryptocurrency review (decentralized stablecoin)
Given that they recommend against decrypting any email, it sounds like the bug is some sort of remote-code-execution against the decryption step, that would then allow (among ~anything else) exfiltration of keys, ciphertexts, and plaintexts.

EDIT: Having read a bit more I'm not so convinced that this explanation makes sense.
One of the criteria for freely given consent is that the customer must be able to revoke it at any time without detriment.

If revoking consent causes a detriment, then it's not freely given, and so that "consent" isn't sufficient to grant the data controller a legal permission to use that data.

Quoting recital 42 from https://gdpr-info.eu/recitals/no-42/ "[...] Consent should not be regarded as freely given if the data subject has no genuine or free choice or is unable to refuse or withdraw consent without detriment.", so it's quite explicit.
That's the component that Apple replaced the headphone jack with, apparently.
I read his biography by Isaacson. He was a fascinating person, extremely smart, a keen sense of design and a (self-taught) ability for sales. He was most definitely a boss I wouldn't have wanted to work for though, because he was an extreme narcissist.

Smart and terrible person don't exclude each other.
I have a 2010 Prius with keyless entry and start. If the car is on and you close any door without the key in the vehicle it will make a loud audible beeping noise. It means if you jump out to get something from the trunk, it first starts beeping when the drivers door is closed and again when the trunk is closed. Pretty hard to miss.

If you try and lock the car while it is on (using the keyless entry), it will just produce a continuous audible noise and won’t lock - again pretty hard to miss. The same thing happens if you try and lock a key in the vehicle.
Except you are essentially being forced since the previous version becomes immediately unsupported. By the time you consider and work through all the implications of upgrading to Java 10 it will be September and Java 11 will have come out, and Java 10 will be obsolete and unsupported. That’s a bit crazy for a major version that just came out in March.
Not in my case. I’ve asked them numerous times to remove my email, it subsides for a while and then comes back at the same rate.
You could try Kimsufi or Hetzner to get some cheap VPS or Dedicated Baremetal to host on. Selfhosted doesn't only mean hosting on private premises, the core idea is rather (IMO) to host it on hardware you paid for no matter where it is.
> You can have thousands of CentOS servers, and you can use an old technology, such as Puppet, to be sure those servers are identical.

I surely do feel old reading this. I actually remember being excited about Puppet as the new thing.
It probably doesn't bear repeating at this point, but Brian Herbert's dreary offerings are pretty dismal and should be avoided by all but the most ardent Dune aficionados jonesing for a spice-fix and/or sci-fi masochists hoping to negate any enjoyment they derived from the Herbert novels.

Full disclosure: I didn't enjoy the Brian Herbert stuff.
For modern cars, I think that's what's happening actually - engines will power off when stationary and not in gear, but the car is still on and the engine will restart when it's running low on battery power. Thus, people leaving their car in the garage thinking it's off.
> Our advice, which mirrors that of the researchers, is to immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email.

This advice strongly suggests a side-channel attack, not anything which affects encrypted data at rest. The worst case is that PGP has a remote code execution vulnerability in the decryption step.
I think PGP should implement a centralized auto-update mechanism so that software can disable itself in cases as severe as listed (with advice to "immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email").

[I've removed an earlier longer version of this comment.]
Parallels Desktop 11.0.1 Serial Pro Edition Crack for Mac OS X – Crack4Mac
- Exim, MTA (https://www.exim.org)

- Dovecot, MDA (https://www.dovecot.org)

- Nginx, HTTP(2) Server (https://nginx.org)

- Gogs, Git service (https://gogs.io)

- Coldsweat, RSS aggregator (https://github.com/passiomatic/coldsweat)
I know exactly how many machines I have, where they are located and what IP address they should have. If a single machine isn't doing what I expect, it is immediately obvious in the pretty graphs that I have with Grafana/Prometheus. Any 'mistakes' are easily rectified, but so far, we haven't had a single issue along these lines. I've tried it both ways, the benefits of static IP, for the reasons I mentioned, far outweigh any negatives.

DHCP is great for a coffee shop, workplace or college campus, where you don't know anything about your clients or care to. In my case, I need to know exactly who is on my network at all times and exactly where they are located, without having to cross reference switch ports and MAC addresses. In one DC, I don't even have access to the switches.
I think you should not always take an authors word at face value. Just because he said he didn't like allegory doesn't mean it is not present all over the work - come on, is Eru, the Ainur and Melkor not an allegory for God, the angel and the fall of Satan? Did it just happen to closely parallel the Christian mythology purely by coincidence?

Tolkien and Lewis had some bizarro theories about universals myths which meant that to them, blatant Christian allegory was not actually allegory but just a retelling of eternal truths in the form of myths. But as a reader, we don't have to accept those theories. We can enjoy their stories as stories.

I think a lot of fantasy readers dislike allegory because it kind of turns reading into work and takes the escapism out of it, so it is nice when Tolkien in person validates this aversion. But be careful - you can enjoy Tolkien without caring about the underlying worldview, but that emphatically does not mean it is not there.

(Of course to me Christian mythology is just as much fantasy as Middle Earth, but it certainly was not like that for Tolkien)
HSBC Makes World First Blockchain Finance Trade
I think the issue people are taking is that they think you are overestimating exactly how much society has declined. The ABCs have special authorizations to essentially break the law, but that practice has not yet trickled down to the local politburo. It is not quite the time to call the stability of US-style contract law in to question. (Even though the attitude behind the special authorizations, namely "I don't care what happens just do something," will be what undermines it if ever anything does.)
अमावस्या को सुबह-सुबह पुरानी झाड़ू से करे ये उपाय, महालक्ष्मी दोनों हाथों
Ask HN: Why aren’t ‘team retrospectives’ a thing in ‘traditional’ industries?
Like most people on here, I work in the software industry, and my team follows a version of ‘agile’ methodology that (disregarding all of the software-specific principles and aspects of it) is a result of continuous iteration and input from the team itself. Over the course of months and years, we’ve developed a system that more or less works for everyone on the team, accomodating not only the nature of the work we do, but certain personal needs and cultural quirks of every individual. While never perfect, the system is continuously revised, as we are encouraged to regularly ‘look back’, voice concerns, discuss issues, and come up with action items to solve problems that arise within and outside the team that affect our productivity and happiness.

I almost take this for granted, feeling like this is ultimately the only way to get any team work done over a long period of time, as this gives room for everyone to speak up and bring to light problems that management may not necessarily be aware of (or be willing to solve otherwise).

However, most ‘traditional’ industries don’t seem to be adopting this seemingly superior way or working. Why is that? I hear complaints from my working parents who are often dissatisfied with the way their work is organised, having concerns about their roles on their teams, the efficiency of the process, etc. Yet, my obvious suggestion of ‘just bring this up at your next retro’ doesn’t apply here, as there is no such thing in their world.

Is there something special about software with the level of introspection workers in this industry are expected to do, which cannot (or shouldn’t) be done elsewhere?
I think we're talking higher numbers than is possible in a tunnel. If there was as much CO in the air there that it would trip CO detectors, it wouldn't be safe for people to use.
Ignoring any one specific company for a moment, an investor consistently able to invest early and time their exits near the peak of each company's valuation would be a roaring success.
I'm ignoring German opinions since Art 51-52 suggest only the ICO is going to be involved.

> if you're arguing collecting IP addresses is absolutely necessary for you to facilitate the service, no, you don't need consent. But I would not want to have to defend that, since disabling collection is as simple as a webserver reconfig.

Using IP addresses for audit and security is best practices; I can use the IP address to make sure that a user isn't logging in from two countries at the same time (and then require a call e.g. to whitelist).

Thinking of an IP address in binary, as you're suggesting is extremely dangerous: The GDPR is not supposed to prevent you from thinking about what you're doing.

> That's reflected in their site (I gave you a specific example).

Your example doesn't come out and say IP Addresses are always personal data. Try again.

They've previously said the opposite:

https://ico.org.uk/media/for-organisations/documents/1591/pe...
Neither of those things are true. The question in my mind is, do you know that, or are you just repeating garbled information you've heard elsewhere?
Yea, and that was exactly my point
There's this: Walkthrough: Hosting WPF Content in Win32[0]

That does use C++/CLI though, but I'm sure you can play around with the embedded api if you really want a pure C++ solution.

[0] https://docs.microsoft.com/en-us/dotnet/framework/wpf/advanc...
This is quite dangerous going down the highway at 55mph when a GPS jammer malfunction causes the fob to 'disappear'.
If it's a yes or no /all or none, then they do not own it. They can't.
My main question is does it affect gpg as well?
James Hogan describes a similar vision in Voyage from Yesteryear: https://www.goodreads.com/book/show/849484.Voyage_from_Yeste... .
You're speaking in some kind of holier-than-thou tone of voice, I don't think you're seeing the full picture here. Do you have a car? Do you live in an area that gets bad weather from time to time? Do you even own a house?
I self-host a few things on a cloud instance, and some other on a Raspberry-pi at my home.

On the cloud instance:

- Tinc VPN

- FTP and a postgres server

- NextCloud - For storing files

- ZNC - IRC Bouncer

- Lounge - IRC client

- Prometheus - TSDB for aggregating emtrics

- Grafana - For displaying the above metrics

- Cloudtorrent - A nifty app when I don't want to download torrents on my machine.

- Monica - An app for managing personal relationships, as I'm really bad with remembering people.

- Cloud9 for a web-IDE.

- Gitea - for mirroring some git repositories.

- FreshRSS - RSS Reader

- Some personal projects

- Traefik - the webserver I use for all these services.

- HAProxy - To proxy traffic from a virtual IP to the raspberry PI at my home.

The rPi is connected to the cloud-server over over tinc VPN. It hosts things which are related to my media:

- Traefik - webserver

- Prometheus - for monitoring purposes.

- Sonarr, Radarr, Jackett - for downloading some TV shows and movies

- Transmission - torrent client

- Ubooquity - for hosting comic books

- Kodi - for browsing/playing media.