skysight-inc/HackerNews huggingface dataset:
Ah, OK. I read it as upgrading it to a six engine bomber and carrying the load internally - that would require significant airframe modifications though so probably a silly idea.

Given the rest of the Air Force fleet I can't see that a 747 with one bomb would the that useful, but it's one more airframe I suppose. It would also need to be fitted with the arming and release mechanisms so quite a lot of additional work involved there too.
Am in EU, am involved in some compliance stuff and have talked to plenty others at other companies, and it really does seem to be a nothing-to-see-here for all companies except the sleezy ones.
There is no "TLDR" of the GDPR. It has to all be read, understood and complied with. This is basic legal compliance, and is not at all easy for a small business.
Hahahaha...It should!
Avoid Mistakes Before Buying Medicines Online
I know this is helpful, please read through to the end.

I think there is danger in the original thought: That the pain is psychological. This most definitely isn't always the case and tends to make folks not take the pain seriously. This is a major problem for women: They are already sometimes told the pain is all in their head with migraines, especially if PMS and hormones are triggers. And besides, we know that brain tumors can make folks have migraine-type headaches. Blood pressure can cause headaches. And so on. I'd much rather it state that psychological issues can be a contributor: We can't presume the pain itself is psychological.

That said, it'd be silly to think that things like stress never affect it. This is especially true if you get cluster headaches or if stress is one of your triggers. My mother is like this: She gets cluster headaches that persist for months. Part of her treatment is to take an anti-anxiety medication. Granted, this does not stop the headaches, just makes them slightly less frequent or at least gives them less intensity on a daily basis.
Interestingly enough, GDPR gets the most support from the center-right parties within the EU, in my experience because it's a law that protects individual's rights to their data. You'll find that it's not that popular among the left-wing member parties.
Here in UK I have been receiving about 5-10 emails a day from various companies - most of whom I don't remember - telling me I need to sign up again so they can keep my details and keep spamming me.

Fantastic.
The only person who’s opinion you should worry about is your internal legal counsel’s. The nerds who try to carry on like this is a technical problem with a technical solution are so far off. It’s about beig able to argue and justify your interpretation - not how much you have gold plated your tech stack
Is the system of warnings and increasing fines described in the post a part of the law, or does one need to rely on the "spirit of the good natured enforcers" if they are unable (or unwilling) to immediately comply fully?
Actually I think you answered a question that I already asked about Rust being faster than C. If you don't need to carry out as many checks then I see how that will speed things up.
EU law doesn't work like that. Each country has to pass their own local law to enforce the GDPR. For the UK that was the Data Protection Bill 2017.
Yep, and you also walk across a border with a passport and, should your heart have some arythmia, you may have a pacemaker implanted, all from the same common root.

In Italian "passo" is used also for other things, it means also the pitch of a thread (of a screw or bolt) and the wheelbase (of a vehicle).
Sheep Logic
No, analogously to adding a script tag with jQuery, I meant adding a script tag, with javascript inside, to the innerHTML of some other element.
> I was actually surprised by how easy it is to read it

there's a whole two hundred post debate around here whether ip are or aren't pii on their own, with the wast majority holding the wrong position.

there's a whole branch of gdpr that people aren't considering, which is not related to software but to your business (i.e. your mail calendar). you also need a privacy policy if you are receiving phone calls. did you know that?

there's a whole bunch of implication on how liable you are about holding unwanted personal information, including unwanted medical personal information i.e. "hi I saw your gazebo renting service, I'm organizing an event but I am unable to walk due a permanent disability and requiring a ramp is present to access your gazebo, is that so?"

there is a huge surface area for uncertainty, up and including 'best practices' that are a constantly shifting target.

edit: to clarify the calendar part: if you have a meeting with someone, that links an identity with a location. that's why it's an issue, even without considering the address book, which is another issue by itself.
Possibly from the same source but one useful thing I learned was to do with check lists. Rather than ticking a box to say how many scalpels you used, is the tyre pressure OK etc etc you write down the number. The persons doesn't just say yes OK, they write down the pressure. That [generally] ensures they have actually measured it and got a real value.
Perhaps something similar to the supersuccesful EU "cookie law" where a website could ask you on your first visit if you are an EU citizen.

Wait, or is it EU residents and not just citizens? Be sure to get that correct.
I have the same experience. All those forgotten accounts.
Now I can just go on and delete them.

Super basic stuff.
The memory models that underlie programming languages (2016)
GDPR is just good data protection practice.
The Emperor's Naked Army Marches On (documentary, Kazuo Hara, 1987)
And as so often the EU will be the initiator of a world wide adoption of (semi) unified rules, as it was for USB charging, among other things.

It will naturally get a lot of flack and a few people/companies will make it their scapegoat as to deflect from them as usual, but that's - sadly - almost normal now.

Is it all good: no!

Is it a good start: yes!

Is it IMPOSSIBLE to comply: heck no, I'm working at a small Austrian company and we had to change almost nothing, as lo and behold, we have no desire to be a data kraken and tried to held the privacy of our customer and users always on a reasonable level. As we'd wish that others do with our data and use of service...
AFAIK a compressor like zip builds a dynamic running table of frequent byte sequences; the resulting archive is written in such a way that when you decompress it, you re-build the table in the process.

So if you concatenate files A, B, and C and then compress the result, then by the time the compressor starts compressing the data of C, it will have that table built from A and B. To extract C, you'll need to re-build the same table and thus you'll need first to decompress A and B.

In a zip file each entry is compressed individually; this gives random access, but worse compression rate, because the table is not re-used between files.
Yeah so there's a vaccine that kills the bacteria that causes tooth decay, but you don't hear much about it That would definitely cause disruption in the dentist field if someone were to make it readily available
For me it's this. I am actually pretty indifferent to trains. But i am fascinated by railways.
on what experience about gdpr case law is the linked article basing his statement?

all those claims about warning shots and leniency and goodwill of the regulator are completely unfounded. the linked article makes the claim, the linked article should substantiate the claims, and we maintain a healthy right to remain skeptical of those claims until some meat is added to them.
I'm loving that too. It's amazing just how many mailing lists I'm on that I either haven't signed up for myself or have forgotten about.
Ask HN: Problem with Firefox and SSL_ERROR_RX_MALFORMED_SERVER_HELLO?
I've noticed yesterday and today that various sites are not loading first attempt in Firefox with: SSL_ERROR_RX_MALFORMED_SERVER_HELLO

Refreshing the page makes it work again.

The only thing I've been able to find relating to it is: https://askubuntu.com/questions/1037501/firefox-fails-to-securely-connect-to-google-services-at-random-times-ubuntu-16

For instance, this one just did it for me: https://forums.theregister.co.uk/forum/1/2018/05/18/network_roundup_17_may_2018/

Anyone else experiencing this? Trying to figure out if it is something network related/firefox related/ssl related
On what experiences with EU bureaucracy do you base your question?
so you're just around baiting with the same copy pasted comment?
>Don’t Panic

That's thoroughly good advice. Panic reduces efficiency and the capability to react rationally.

>Becoming compliant with this law will cause my business to go under

>If becoming compliant with the law will cause your business to go under that is more or less the same as saying that your business is built on gross privacy violations. So if that’s your busines model then good riddance to you and your company

Hmm, I would nitpick on that, Google Adsense has been ass about getting GDPR compliant, they don't offer any method of serving ads without storing consent including their tracking-free ads. This is not something that affects me personally but I know people running larger websites that rely entirely on ad revenue (premium model is hard since they drive visitors with UGC, most people don't have an account, they don't want to paywall anything or ask money from the people that drive traffic). The site itself is already fully compliant and with exception of very minor changes (minimum age 13 -> 16, adding a "download everything" button) was compliant in the past.

I blame Adsense on that one, not GDPR though. The ad industry has to adapt, pushing the work on the website operators won't help and is not appropriate. IMO Adsense should either offer a fully consent-free ad experience in compliance with the GDPR or operate the consent dialog for the website owner in a non-intrusive manner.

Maybe this means there will be an opening for a GDPR-compliant adnetwork in Europe
same with the age check, you ask them
The problem of multiple ambiguities in GDPR hasn't really been addressed here.

Also, must be nice to live in a country where the regulator is as benevolent and reasonable as is described in this article.

I think it's ok for foreigners to be skeptical of this promise, as the article implies that this reasonableness is not encoded in law.
I can finally hear Yanny 1.5 notches to the right, but I have to overshoot and then return. Moving it anywhere left of that first notch instantly goes back to Laurel.
Well technically if you use async / await, it's built on top of generators and promises.
I'm not an english native speaker and all I hear sliding he slider to the right is "Yelly" - with "l's" much like "jelly".
That make sense, thanks
I absolutely cannot hear "needle" anywhere in that. Brainstorm, Grainstorm, even Greenstorm. But nothing resembling "needle".
If a business doesn't want to be compliant with the laws of all ~200 sovereign states in the world, they're most welcome to just select a single one and do business there (not the US though, as laws often change for each state so that's right out the door). I'm sure the competitors in the space will love having one fewer competitor.
Twitter to look at your conversation to identify the trolling instincts
Wisdom tooth extraction funny reaction to anesthesia
Stop spamming every single comment on this thread. Your question is irrelevant and misdirected - I've literally started my argument by saying that "there's currently no case law surrounding GDPR".
You're bringing your US-American assumptions about politics and left vs right into the context of European politics where they are a poor fit. The world is not Democrats vs Republicans.

There is no GDPR debate or fight: it's done, it was done six years ago, and the only people pushing back are American companies who are unhappy that Europeans don't want their data hoovered up by corporations they have no control or oversight of, for who-knows-what purpose.
Variable Fonts: making the promise a reality
I'm not sure about the point regarding the DPD. EU Directives themselves don't have teeth, but they're supposed to be transposed into national laws - e.g. the DPA in the UK - and would be enforced nationally. A regulation comes into law across the EU, but is still often transposed, and the enforcement mechanism (to begin with) is still basically the same.

He's right that the DPD was not well-adhered to, though.
The GDPR gets so much hate because it hits so many businesses where it hurts: data. GDPR "simply" gives you guidelines on how you can handle data from people within the EU. And that that data cannot be handled so liberally as it has been before. Of course that's annoying from a business perspective, but from an individuals privacy perspective, it's fantastic.
Odin: AWS Serverless Auto-Scaling Group Deployer
In all of my research, talking to lawyers, and seminars on GDPR, it is about:

1. Ask permission for collecting data

2. Keep sensitive data safe

3. Restrict access to said data

4. Keep a log of what happens with the data

5. Delete it upon request

6. Have all of the above documented and adhere to the protocol.

It's such a none issue unless you're relying on the very thing GDPR is designed to combat. If you not collecting and selling peoples data, and you don't do the above already, see this as a good opportunity to do what you should have been doing all along. There is such an awareness now, that it's the easiest it has ever been to know how to handle sensitive data properly.
The seasonal worker visa is talked about for Brexit. The people who need the workers, the fruit farmers, say it's far too much effort and isn't workable.

The poor here just aren't willing to do that work at that price. The supermarkets aren't willing to pay more for the produce. Something has to give and in both countries I'm sure it's going to be the rules on visas.
Can't hear "needle" anywhere in that, I absolutely can't.
Indeed but he head a TLD from a self-governing dependency which is implementing the GDPR:

https://www.gov.im/about-the-government/data-protection-gdpr...

So he wants the funky TLD from Europe but he doesn't want European law 'hassle'. Hypocritical.
It's a strategy an EU bureaucrat would be proud of!
Indeed. I was reading a tragic article about the energy cost of bitcoin and I started to wonder how much energy, bandwidth,HD space is totally wasted on sending everybody spam, junk, messages every day that they will never read. And keeping info for the same. I wonder if it is a reasonably large chunk of the total energy and infrastructure of the whole web?

Maybe we could power a big Chinese city just by getting ourselves deleted from gym mailing lists (weirdly a gym in Cardiff sends me spam mail -- I have never been to Cardiff???).
This news saddens me. I’ve been the last user of the Signal desktop app around me and it looks like I have been too optimistic about Electron. I’ve now deleted any Electron app and recommend everyone to do the same.
What is metatables?
Is there even a single thing forbidden under GDPR that wasn't already forbidden before in at least half a dozen member states? In that case, it makes everything easier except for ignoring requirements.
Top 18 Headless CMS Platforms Available – 2018 Review
They extracted it, so it means it was in a context. Address + context is very much personal.

Also I note that the comment author prefers not to answer.
the GDPR will be enforced by the same entity that was enforcing this before, so why would it be different?

The truth is that obviously the authorities don't have an incentive to come after a minor player.
The national regulators have been operating the previous regime for twenty years, so there IS plenty of experience and history to look at. The UK's ICO has made quite clear that the style will not change, as have bodies in other countries.
Do you have any experience with a Eu country internet regulatory service?
I have experience with the CNIL (The french one), and they were helpfull and yes, good-natured. Part of our demand to be able to host data from hospital was drafted with their help, when they had no legal obligation to help us.
A friend who work in a legal/tech startup also had good experience with them, and i don't know anybody who ever had a bad run with them.
So if you have contradictory experience, please share them. Until then, i'll still take all this "GDPR will kill tech companies" articles from people who only experienced the US legal system as jokes.
Exactly. It will take a while before standards and best practices form, but they will.
Says the guy giving away the ending of The Expanse in a science thread.
This doesn't consider some factors that dictate how strong any company will experience their firehose of GDPR requests to be:

- how incentivised people are to make GDPR subject access requests of the company (how angry, confused, hostile curious they are)

- how easy it is for them to make requests (entirely manual vs. online service)

- wildcard factors (internet flash mobs bent on vengeance against a corporate)

There are also possible business models that might incentivize technology players to deliberately ramp up GDPR requests.

For example, unsuccessful candidates applying for a job at a company could forward their rejection email to a bot. The bot parses the details and fires a GDPR access request in to the HR department. The candidate gets back a formatted dump by email of all sorts of recruitment data, including interview notes, etc. There are obvious ways to monetise a service like this, hence incentive for someone to do it. Recruitment at a large company means engaging with thousands of people and then rejecting them. It is natural for people to have bruised feelings, and also to be curious about why they were not hired. A GDPR button lets them indulge their curiousity and start digging in to interview notes etc.

Naturally GDPR requests like this won't flood a company on the first day of GDPR. But the internet is a turbulent place.
The trick is that it doesn't really get worse after a couple of days.

If you stop brushing your teeth for a week, that's about the final state (unless you eat lots of sugary things which actually break your teeth).

Same thing for showering. At some point you stop getting stinkier.
The regulators have been running for two decades, and this is EXACTLY how they operate. Scepticism in this case is unreasonable, given the massive evidence base.
For those of you understandably intimidated by the GDPR regulations themselves, here's a good summary in plain English: https://blog.varonis.com/gdpr-requirements-list-in-plain-eng...

The UK's ICO also has a good structured summary: https://ico.org.uk/for-organisations/guide-to-the-general-da...

In general I agree with the sentiments in this article. I've probably spent a total of three to four days reading around the GDPR and I don't really see what's special about this law other than it's imposing decent standards on what was in effect a wildly unregulated industry in people's personal data. If you have a broad distrust of any government activity then I suppose any new laws with "fines up to €X" might feel like "I run a small site on a Digital Ocean droplet and I'm at risk of a €2m fine out of the blue." But that doesn't make it true.
Same here, finally recruitment agencies will unsubscribe me from jobs offers that I'm totally not interested in. I used to get a few emails per week asking me if I'm interested for relocation and work in [insert programming language I have no experience in]. I asked them many times to stop emailing me this crap, they never did until this week :)
Blockchain Brings Transparency to Santander's AGM
is this not re-captcha -able?
Completely agree with everything you list, and would add that 6. you can't force a user to give up privacy in order to get some other benefit, e.g. you can't offer to unlock some feature in return for more tracking
BT aren't really big as a mobile carrier. I think they might offer business services for that, but they are most well known for their residential and business voice and broadband services.
>there's a whole two hundred post debate around here whether ip are or aren't pii on their own.

Largely pointless. EU courts have in the past ruled that IPs are personal data because they can be tracked back to a person. End of story.

>there's a whole branch of gdpr that people aren't considering, which is not related to software but to your business (i.e. your mail calendar).

was largely already covered by the previous EU privacy law and the german privacy law. Courts largely agree that calendars for appointments are fine as long as you keep them reasonably secure and don't throw them around in public.

>you also need a privacy policy if you are receiving phone calls. did you know that?

Yes I did. I informed myself when I registered as a small business.
I agree, and there seems to be a lack of conversation around this! Next week could be ground-zero for all sorts of unintended consequences. Especially, a flashmob of GDPR requests could sink a company.
So if the brain is just doing some sort of computation then do you also agree with the statement that any flow of fluid (river etc) is just solving fluid dynamics differential equations?
I agree it doesn't seem super useful, but it can be used to pull some semantic tricks. I used it in [Rebridge](https://github.com/CapacitorSet/rebridge/) to implement syntactic sugar for database access, so that accessing a property on an object translates transparently to a query, and I've seen it used to [allow for typos in property names](https://github.com/mathiasbynens/tpyo).
When people are playing music in their earphones, loud enough that you can hear it, while sitting next to them on the bus, they are absolutely damaging their hearing.

And I'm not even talking about big headphones, which do tend to leak a lot of sound, I'm talking about the little earbuds. The sound level in their ears must be off the charts.
This sounds like the arguments that organisations make against freedom of information laws. There is that risk, but what is the alternative? There doesn't seem to be a middle ground to me - either people can make subject access requests or they can't.
How so? It's just a syntax. It doesn't remove the physical coupling of elements that are infrequently used as a unit.
> The candidate gets back a formatted dump by email of all sorts of recruitment data, including interview notes, etc.

Unless data is removed before end of the process and company keeps only final outcome. ;)
Comments created by bots have existed for years.

Before AI was the new hotness, hyperbolic tech tabloid The Register used to (it may still? I only ever read the BOFH articles) have a frequent commentor called 'a man from mars' who was quite clearly a bot of some description outputting semi-coherent nonsense based on the content of the articles and other comments.

Despite largely spouting wordy nonsense, people would regularly reply to it's comments and attempt to engage a glorified toaster in rational debate. Now throw tensorflow at that, and you can do some fairly interesting things...
The problem with the laws stemming from the DPD was that there were different laws in each EU country, and the enforcement options were too weak for slippery international corporations.

One critical change in the GDPR is the mandatory reporting of significant breaches. Before, it was entirely optional, so reports could come out years after the even once the material surfaced online.
Similar laws have been on the books in most if not all EU countries for literally decades. How Americans can be blind sighted by the way things have been for years is absolutely beyond me.
What, I was expecting to hear the first, but I can only hear green needle.
I guess we should only enact new laws which already have established case law. /s
I can't help but love the turmoil GDPR is causing in the adtech "industry". Like wasps buzzing around the exterminator who's about to destroy their nest.