skysight-inc/HackerNews huggingface dataset:
Perhaps I'm not an expert, but I always felt there are things left out by the more popular methodologies.

This article scrapes the surface:
https://michaelochurch.wordpress.com/2015/06/06/why-agile-an...

> "The worst thing about estimates is that they push a company in the direction of doing work that’s estimable. This causes programmers to favor the low-yield, easy stuff that the business doesn’t actually need but that is 'safe'".

> "Good engineers want to work in engineer-driven firms where they will be calling shots regarding what gets worked on, without having to justify themselves to 'scrum masters' and 'product owners' and layers of non-technical management"

> "Scrum [is] tailored toward the body shops where client relationships are so mismanaged"

> "Open-plan offices are the most egregious example. They aren’t productive"

> "[Scrum is] Like a failed communist state that equalizes by spreading poverty"

There is more. In "pure scrum" it's not obvious how to account for refactoring, developer experimentation, improving infrastructure (or creating one from scratch!), making tests better. Product driven things - sure, can be driven by scrum. But what to do when work is driven by engineering?
I have now published a writeup here: https://www.robertxiao.ca/hacking/locationsmart/

Hopefully this answers some of the technical questions about the exploit :)
If you are the family IT bod you could register familyname.co.tld (.uk for me) or .org.uk or whatever. Then allocate each family branch their own subdomain. In the UK you are looking at around £20 per year for a .co.uk and not much more from say 1-2-3 for hosting/DNS.

Now you can get Lets Encrypt certs for routers and all sorts! Use a Dynamic DNS service if external IPs are not static.

My family may be a little unusual in that even my Dad's TV has a hostname, and so has my brother's cooker! I put in pfSense, multiple VLANs, Unifi APs and all the other good stuff. A fully meshed IPSEC VPN link up with split horizon DNS. pfSense has an ACME client and a full toybox of networking goodness. Each site config is mostly replicated to the others for backup. The office monitoring system (Icinga) has a few extra systems on it.

That lot took a couple of man days to set up. It looks after itself mostly now and just works. I've saved myself many, many hours of hassle by putting in the work ahead of time and specifying decent gear. Its probably not for everyone.
When I was job hunting I sincerely appreciated any rejection letter at any stage of the process, be it automated or personal. Obviously an offer letter would be better but the absolute worst is hearing nothing back. We should be praising the companies that take the time (or implement the automated process) to send the rejection letters and not leave us hanging.
Social apps. Neglected. Especially voice + social.
https://ico.org.uk/for-organisations/guide-to-the-general-da...

Under the GDPR, you must appoint a DPO if:

you are a public authority (except for courts acting in their judicial capacity);
your core activities require large scale, regular and systematic monitoring of individuals (for example, online behaviour tracking); or
your core activities consist of large scale processing of special categories of data or data relating to criminal convictions and offences.

So - no?
have 2 and would consider having 3 if it wasnt for the horribly short maternity leave and cost of daycare. I just can't do the pump at work, wash bottles all night again. I also anticipate I wont make any savings for the next 1-2 years with the cost of child care. It sucks, it really really does.
This might actually be a good thing, as it will open the opportunity for European companies to step up and fill the gaps.
"Publicly" won't fly. But "let's see your warrant"? Yes, that should be workable. I'd like to see that become the standard corporate behavior.

I'm pretty sure that won't happen, though...
>Each island house has its own wagon — some used to be wind-powered, using sails, but today they run on diesel.

Is that pretty standard?
A betting site offering over/under wagers on the number of people from the Trump administration who are indicted in the coming years.
The op seems to be motivated more by politics than the reality of this as I understand it. The "reasonable" qualifier in most of it, while it will need to be litigated, does a lot to assuage my concerns about overreach from it.

Could you be sued to the poor house from it? Maybe. But that's the risk of operating a business in the US every single day.
Companies with less than 250 workers have fewer requirements, but the obligation of a DPO follows a different set of rules https://gdpr-info.eu/art-37-gdpr/

Edit: Art 30 "The obligations referred to in paragraphs 1 and 2 shall not apply to an enterprise or an organisation employing fewer than 250 persons unless the processing it carries out is likely to result in a risk to the rights and freedoms of data subjects, the processing is not occasional, or the processing includes special categories of data as referred to in Article 9(1) or personal data relating to criminal convictions and offences referred to in Article 10."
Well, they weren't wrong.
I keep telling people - the thing that changes with GDPR is that personal data you handle is now still owned by the person and only in your custody as long as they explicitly allow it.

All of our infrastucture has to change to honour that. If you cannot honour that change, maybe you shouldn't have been handling personal data.

I don't have any knowledge about monal.im (don't know what it is - some kind of im client?), but this person is making some claims:

- he needs a data-protection officer: no, only larger orgs handling lots of personal data need this. If he's making an im-client and not servers that store data he certainly doesn't, but I don't know what his setup is.

- crash analytics: This can be handled by telling the users clearly that you'll be gathering the data (and defaulting to not gathering if they don't actively approve). As long as you have a proper PURPOSE for gathering and storing the data and don't use it for anything else you're golden. You do have to document this, in case of a review (hyper-unlikely).

- Push: he's getting a message and storing the device/ip combination. This seems to be central to the service he's providing. Therefore he can and should put that in the description/terms of his service (as he cannot deliver the service without this). As long as it is clearly explained to the end-user this is fine, and he can keep doing it. If he stores it and does anything with this data other than the central purpose that he informed the end-user of he's in violation. I'd suggest putting it in clear text in front of the end-user and deleting the data as soon as it's no longer needed. Don't do any non-approved analysis on it. If you want to analyse - ask for permission.

XMPP federation may be a problem, I agree with that. The problemer here (as I see it) is that each service getting the personal data must only process it for the purposes explicitly agreed to by the end-user and honour any subsequent notifications of rectification and deletion. This is a hard nut to crack indeed.
> We used to live in a society where webmasters' rights to the fruits of their labor weren't trampled on by inane regulation (to this degree at least)

So someone having a copy of my data that I wish be removed is trampling on a webmaster's rights? That makes no sense whatsoever.

> Now if you run a website in the EU, any user who signs up to it has control over the contents of your servers

This isn't even true. They have _a tiny bit more_ control of what you can do _with their_ data. That's it.

Buckle up because this type of regulation is only going to happen more frequently and in large part because of your attitude that it is "your" data versus the user's data.
The only real complaint I would have over WireGuard is that with zerotier, I only need to connect to one server and then can talk to any servers on the same "network" as long as the acl permits it. The other servers are discovered automatically.

With WireGuard, I'm pretty sure I would have to set up multiple peers and custom routes. Although I'm assuming you could run BGP on top of the wg interface and that would solve some of it.

That said, I'd much rather something the simplicity of wireguard or tinc because it doesn't require a server who's only purpose is to manage clients.

I know it's not specifically related to the protocol either uses, but I think people would consider that as a drawback when comparing the two. If you're coming from openvpn/ipsec, then setting up any sort of mesh/routed network would be a similar process. I don't think wireguard would need to implement functionality like that either, I think it would be better if something like tinc used wireguard for the plumbing as someone else mentioned in the comments.
The other thing everyone is forgetting is how much TIME kids require; it's not just about the money. As someone else in this thread said, poor people get their entertainment from their families and communities, whereas richer people have other ways to entertain themselves (travel, etc.). Raising kids is a huge time-sink; you never get any time to yourself, you never get to do anything that isn't kid-friendly, etc. It's a huge lifestyle change if you're used to being able to take weekend trips, go to fancy restaurants, go on international travel, etc.
No there is no requirement for most bodies at all. Please see my other comments on this discussion. A person at my company is called the DPO, but that is far from their main role in the business
Why would the aide have to be good looking or young?
No. That article says you only need a DPO if you're a public authority or if you're processing certain data or you're processing very large amounts of data.

I'm struggling to understand why that's unclear. Is it the use of "public authority or body"?
It has a maximum, not a minimum: The higher of 4% turnover OR €20m. That means even with 0 revenue, your fine can be up to €20m (It won't, because if you're not making money your small fry to them, but still, the fine can be greater than 0)
BetOnSports, an AIM listed UK company took sports bets over the internet, including from US customers:

> In July 2006, their then-CEO, David Carruthers, was arrested while changing planes in Texas on the way to Costa Rica from the U.K. In April 2009 he pleaded guilty to federal racketeering charges, and in January 2010 was sentenced to 33 months in prison.
The request-reply delay was between 3-5 seconds in most cases, but sometimes much higher for unknown reasons. I suspect that, if this is pinging the phone, you might be able to drain the battery remotely, but that's a fairly secondary concern considering the magnitude of the primary issue.
FAQ = 404

https://hackerforums.co/help/faq
Would this be covered under the new sports betting legalization?
Almost certainly obtained from the carriers.
Yes, and don't forget, in the past, women were also essentially indentured servants/slaves.
Implying that every company operating in the EU needs to hire someone to be a DPO is as ridiculous as it is completely false.
This. I believe the conversations were genuine, but I also believe they were two of hundreds or even thousands. Cherry picked. I am absolutely certain that some calls ended in complete confusion on both sides.
Why the downvote?!!?
Hackers siphon hundreds of millions of pesos out of Mexican banks
I see this as a good thing. Hopefully by helping other countries implement plans that engender educational and employment opportunities for women we can finally hit “peak child” and begin to slowly shrink our global population over time.
I went to several remote places just to ride a weird train. For instance the Pilatus Bahn in Switzerland is a must-see. Or "Le train à vapeur de la baie de Somme". If it's a steam locomotive, its appeal is greater; if it's ancient and weird, the draw is indomitable.
If he really said "probably", then he’s the one who doesn’t have to worry about the advice he gave you being incorrect.
Discord is an interesting idea, though I am not a fan of them retaining all messages forever.
https://www.robertxiao.ca/hacking/locationsmart/ provides the technical details. In short: much more likely the latter than the former. And this /try/ page has been up at least since Jan 2017 (~18 months).
First of all, you're saying "core business". Is this even a business?

And I copy-pasted direct text from the regulation. Note how it says "large scale". Twice. If he is actually processing personal data on a large scale, then maybe it is not unreasonable to have a DPO.
Top Conferences on Cloud Computing and IoT: Highlights of IC2E and IoTDI
This project is completely out of scope for GDPR, not having any presence whatsoever in the EU. You aren't going to be arrested when going on holiday. You wouldn't be breaking the law at all, even if it was possible to enforce anything.

Even if it was in the EU, it wouldn't require a DPO, and your use of IP addresses is very reasonable and within the standard allowances which don't require user consent.

Maybe bother reading _anything_ from an official source before coming to this conclusion? This reads to me more as something you want to have a rant about because you don't like it - rather than as any kind of pragmatic decision.
It will mean a big problem for Europe as the level of outflow is likely set to accelerate over the coming decades. Who knows what the political consequences will be..
This was marked [dead]. Vouching for it because the actual article is at least topical, and somewhat interesting. But the title should probably be edited to match the actual title: "AI's 10 to Watch: The Future of AI".
I worked for a "household name" towing insurance company years ago. Often times people calling in don't actually know where they are, because it's on a highway somewhere unfamiliar. We integrated with a service provider to be able to get the GPS through the phone. It worked largely like you suggest, we hit an API, it asks them permission, they grant it, we get GPS.
which clause would apply to require a DPO?

clause a: not a public body

clause b: not systematically monitoring (eg. installing video cameras all over the streets)

clause c: not processing large scale sensitive or criminal information.

doesn't look to me like a DPO is needed based on this article?
Nonsense. We all know that teeth are unrelated to general health, or else they would be covered under the same insurance policy.
Native or PWA?
Website to collectively buy satellite pictures
This domain could've been better-used for a collection of IoT devices that shouldn't be IoT devices
The telcos are almost certainly selling it. Verizon used to have a page noting that LocationSmart was a "Network API Partner": https://archive.li/tCLrd
The article foundation is fair: "Agile tools provide a steering mechanism, not a homing device". But I'm not sure what point it's trying to make after that? "Use an Agile framework"? Just "be aware of it"?
As it seems that we are making society-wide sweeping statements here, I'll add mine:

In a society where the webmasters have shown that they can't uphold their duty to secure PII (or any kind of data really), as evidenced by ~monthly high-profile data leaks, they deserve to be restricted in their "rights to the fruits of their labor".
Please be nice to the developer. I didn't post it to shame him. I'm just very sad about the post because I was hoping to establish XMPP as the group chat in my family, of which half are iPhone users.
79% of all CS grad students are international.

You may find a somewhat rich applicant pool of international talent that can get student visas but not work authorization. Fish in a barrel.

My college advisor was Turkish. Over 75% of the grad students in the department were Turkish. This was no coincidence. Start warming up those contacts at IIT and other well-regarded (outside the US) universities, and you may find yourself beating them off with a stick.
Reading the FAQ, the only way to really safely ignore the DPO provision would be to hire a law firm with GDPR expertise to parse the vague language in the law and to give written guidance as to whether the law applies to each specific web site, which you can then present to EU authorities in the future to show you performed due diligence to try to meet the requirements of the law.
I think it's difficult to argue that we need more people when we are already straining ecologically. Fewer people is better, especially when we can automate away jobs that are unfilled.

However, this does expose a gaping hole in capitalism, that it can only deliver improvements to the masses under conditions of growth. With falling birthrates and immigration, we will need to find a more sustainable political economy.

Nonetheless, immigration is falling for dystopic reasons, not good ones (i.e. other countries are more attractive in a positive sense). It's falling because of authoritarianism, xenophobia, and a program of ethnic cleansing targeted at the most vulnerable people that is being performed by ICE.

EDIT: The last paragraph is justified because there are 325M people in the US and 11M undocumented people. There may be a marginal effect on jobs, but the bulk of the economy is made up of everyone else. We're talking about 3% of the population.
Not true, you just need to be in poverty and keep the man out of the house and you get all of those things with welfare.

The people not having kids and not receiving support are the ones paying the taxes which support a system that does not benefit them.
Wireguard is easier to configure and use and in my informal tests performed at close to line speed, around 870 Mbs on a gigabit network.

This is extremely fast for an encrypted network given most other solutions tend to take a severe toll on performance often operating at 140/180 Mbs on gigabit networks.

The only drawback currently is it's a kernel module and needs to be compiled, which makes setup across systems a bit involved, however there are ongoing efforts to merge into the kernel.

It's unfortunate innovate open source tools like Wireguard that add a lot of value to networking and clustering are not more well known.
I think you're being downvoted, i would say mistakenly, because that's not the case. What's happening in astronomy is that huge amounts of new high-quality data are becoming available.

This particular bit of Planet Nine business fell out of the Dark Energy Survey [1]:

The collaboration built and is using an extremely sensitive 570-Megapixel digital camera, DECam, mounted on the Blanco 4-meter telescope at Cerro Tololo Inter-American Observatory, high in the Chilean Andes, to carry out the project.

Over five years (2013-2018), the DES collaboration is using 525 nights of observation to carry out a deep, wide-area survey to record information from 300 million galaxies that are billions of light-years from Earth.

Other big surveys recently include Kepler, looking for exoplanets since 2009 and only now running out of fuel [2], and Gaia, which for the last five years has been mapping over a a billion (!) stars across the galaxy [3] [4].

And in a few years, we should get the James Webb telescope going up. Exciting times!

[1] https://www.darkenergysurvey.org/the-des-project/overview/

[2] https://www.nasa.gov/feature/ames/nasa-s-kepler-spacecraft-n...

[3] http://sci.esa.int/gaia/28890-objectives/

[4] https://gizmodo.com/tomorrows-star-map-release-could-revolut...
I have exactly the same background as yours. To recover from a CRUD boreout I plan to play with some RaspberryPI and a bunch of Arduinos for home/building automation and monitoring coupled with an autonomic solar power supply. No futher plans about making career out of that yet but who knows - such bundle may be an interesting business in remote/rural applications.

Play. Publish. Get an offer.
It's shallow, but it makes better PR when you're trying to scandalize middle America.
Think about the implications of these corporations already having that data to themselves...
This sounds like absolute bullshit.
> Bullshit.

I provided sources showing that this is, empirically, what happens, no matter what you would like to believe.

> If the pay is right, you will find plenty of people to pick produce.

Obviously! But once you do that, the produce costs so much that no one wants to buy it. That is the fundamental issue here.
UK is not the only country that can sue you under GDPR. What if Bulgaria decides 20 million sound pretty good?
> Who will pick strawberries? Who will clean your hotel room? Etc.

1859: But who will pick cotton? Perform household chores?

We will either develop a technological solution or gasp the wages and benefits for picking strawberries will rise to such a point that it makes sense to pick that up as a career choice.
Ceres was also reasonably considered a planet, until evidence was discovered that showed it was just one of many similar bodies.

Including Pluto in a classification with the 8 major planets, but not including Eris, is simply not a useful way to describe the bodies in the solar system.

Personally, I use the word “planet” for anything even vaguely planet-like, but there's no logical way to count “planets”, under any definition of the word, that leads to Pluto being the 9th.
> It actually taught me a lot about my body and what cravings for specific nutrients & minerals felt like. Nowadays I just drink a lot less!

That's great, actually! A lot of people don't know what specific cravings mean. Helps a lot with overall health because I know if I'm craving fried food I just need some good fats so I go and make something with avocado oil or what-have-you.

>I take kratom for anxiety

I've wondered about kratom before. How specifically does it help your anxiety, and how often do you take it? Does it impair any cognitive functions to any degree? (Could you take it before class or studying and still be able to focus well?)
A good, simple and anonymous chat app.
And there's the free tier which has served me well too.
Yup, I read that and I don't see how it would be in the conflict of interest for probably the vast majority of cases. But, yeah, I'm not a lawyer too.

Edit: DPO Network says this which I think is a pretty good summary (though it's not part of the explicit legal policy, it's someone's opinion)

> CAN WE ASSIGN ONE OF OUR EMPLOYEES AS OUR DPO?​​​

> Yes. However, you must ensure that other professional duties of this employee must be compatible with his/her new duties as DPO and do not result in a conflict of interests.

https://www.dponetwork.eu/faqs.html
A fair bit of the blame here goes to HN, where the PGP cheering section uncritically repeated statements by members of the Enigmail and GnuPG teams that turned out to be contradicted by the public record. In one case, someone posted a mailing list post by Werner Koch from GnuPG that established the November 2017 timeline, and HN found a way to argue that it might be evidence in favor of the position that the researchers had botched the disclosure.

More evidence could come to light, but from what we have now, it looks pretty clear that what happened was the Efail researchers made an unusually strong effort to notify and coordinate, and were thwarted by the judgement of the GnuPG project members that the vulnerability was "boring" and not worth liasing over.
Yes, and much like a religion, there are people who refuse to see any positive elements to it, despite those elements being numerous and obvious.

Also, there are larger truths that live at its heart which make discussions about the topic difficult because if you're seen as disagreeing with some of it, you're seen as disagreeing with all of it, even if you don't.

What a good analogy!
One interesting aspect is the difference between displaying yourself and others in VR.

For yourself you do not want to show body parts that cannot be tracked correctly because of the jarring effect of the mismatch, as you say. But for showing other people you can get away with more, so for example you can show full arms even if the elbows are not exactly in the right place (as long as they are not unphysical of course.)