skysight-inc/HackerNews huggingface dataset:
There is. A law which requires carriers to provide sufficiently accurate cell phone location data so they can send it along with 911 calls.

https://www.fcc.gov/consumers/guides/911-wireless-services

"Phase II E911 rules require wireless service providers to provide more precise location information to PSAPs; specifically, the latitude and longitude of the caller. This information must be accurate to within 50 to 300 meters depending upon the type of location technology used."

Not the law I'm guessing you were after, huh?
In general less is more, with proper abstraction, not just in security.
I read that enforcement report. I think it was fully warranted that the 1,000 pound fine was levied against that company. (1) they did not immediately report the fact that they disclosed that customers private information and (2) they did not have appropriate technical measures in place to avoid such problems, specifically: they were tasking their cs reps to cut-and-paste information between screens that could display the information of two unrelated customers, a super stupid and error-prone set up.

The fine, 1000 pounds is proportionate given the size of the entity it is levied against, the resources at their disposal and the turnover of the company, if the company had been much smaller one would hope for leniency but the fine would have not been levied at all or it would have been 1000 pounds, no middle ground there.

You'd hope they learned their lesson.
Totally agree. Bad management will mess up any methodology and good management will make almost any methodology work. Good people will just adjust things until they are OK.
There is no good reason to be happy about having less people.

Most of the earth is empty now due to desert belts, and we almost have the technology for terraforming them but do not have enough people to need that.

Losing people instead is really scary because that will mean we won't have large enough economy to afford large geoengineering projects, and will be caught in runaway effects of permafrost melting without possibility to do anything.

There are two things that give me hope that number of people on earth will keep increasing: first is technologies for increasing lifespan, and reproductive age, second is that subcultures that encourage not having children, will die off naturally.
Not to answer your question but if you want C / C++, have a look at Shedskin

https://github.com/shedskin/shedskin
That's ridiculous, and the same non-logic as "anyone who declines to let the police search their home without a warrant is trying to hide something illegal". In both cases there is no upside and a chance of a large downside, even when you're completely innocent.
You have my upvote, but I imagine that tptacek means that iOS is very very well sandboxed, and has an extremely tight and well authenticated download and update system which is extremely difficult for a third party to monkey with.

This is security via centralization and trusting a benevolent capitalist dictator. As long as your personal interests are aligned with interests of the benevolent capitalist's shareholders, you should be fine.

It is my least favorite security model. But, in the case of iOS it seems to be working well (for now). My long-term hope is for a decentralized FOSS model, but for the time being, in the USA, on a multipurpose machine, the benevolent capitalist dictator beats it, especially on sandboxing and package/app authentication.
But most of the argument is between fucking idiots who have no clue what the law actually says, and people who do know what the law says.
I'd agree that the total amount of good information has increased but if bad infi is being added at an accelerating rate compared to good info then I wouldn't say the rate of good information is increasing in anything but the most technical sense.

For all intents and purposes the information doesn't exist if you can't find it, you can only find information as a certain rate, and a larger and larger chunk of that information bandwidth every day is bad information. The practical result is that the rate of good information someone has access to has decreased even if the total system has a nominally higher rate
http://altheamesh.com

We will likely use Cosmos which uses proof of stake validators instead of miners although we are prototyping on Ethereum. In any case, the miners/validators would decide, as they always have and always will. If there was a big divide between users and validators, the users could choose to leave and use a different fork (although they would have to modify their router firmware). The only power that the developers have is thought leadership, and the ability to claim that something is an "official" binary. This is also how the Ethereum DAO hardfork went down.
Given the absent security of desktop Linux, and the dreadful opsec of its users, as revealed by many cryptocurrency wallet thefts, I wouldn't place much trust in persistent PGP secrecy unless all participants used Heads, and renewed keys regularly, and ran nothing except gpg. How many people do that, in the entire world, do you think? A hundred, at best?
lol, you might be right. I thought it was an honest question from someone of a different native tongue.
I'm not sure what it is you are arguing about. I am in 100% agreement that regulation is necessary for a functioning society. However, the natural result of introducing new regulation is that some businesses will choose to leave the market. This is the cost of doing business. If a society can bear the loss of the business from the market, then things are good. That's about all there is to it.

> Another way of looking at it is that it levels the playing field between those that ride roughshot over their users rights and those that try to be nice.

Neither of those viewpoints are in opposition. You can both believe that more regulation kills some businesses through a 'death by a thousand cuts' and that these regulations level the playing field.
<nit>

"Manager" isn't a verb.

</nit>
Pretty mindblowing that Signal allows things like `dangerouslySetInnerHTML` in any of their apps. A simple linter would have caught this.
Larger time window with comparison to Google and Snapchat.

https://trends.google.com/trends/explore?date=all&q=%2Fm%2F0...

Google is also dropping in Google Trends. Assuming there is a drop in usage of FB (not just a drop in searches for FB), I guess the 2016 election is only one contributing factor.
scrape and publish the data over TOR. problem solved.
I'm impressed by the amount of good guesses you had to get there. Good job!
> I always recommend running everything with public IP address. No more excuses. It's public, so security is a must.

Fully agree but depending on the culture of the company, you'll be treat as fool is you make such a claim. One of my clients is a Fortune 500, VPN access is done without 2FA, you will find all sort of company credentials available from a github search. Was surprised to see one of those credentials belong to a Thales contractor working in the security field ... Security is a good as the weakest link, you can't win against people madness.
You should be far more worried that desktop apps don't require permission before eavesdropping on your conversations using the microphone (including 3rd level sub-dependencies of that NPM module you installed), than that Android or iOS is secretly recording your conversations under the guise of "ok Google" or "Hello Siri".

Regardless of the device form factor, if you don't want the OS to have access to the microphone then you have to physically disable the microphone (but if you are that paranoid you should probably live in the woods away from all electronic devices).
These were people's personal phones that they had with them, but no guarantee that they were actively being used.
Anybody know a EU citizen in the US who'd be prepared to request how often their data's been accessed using the GDPR regs?
It's not magic. Anyone can learn.

I think you are doing yourself and anyone reading a disservice by thinking it cannot be learned like any other field, like software engineering.
I don't think that the majority of those players get angry outside the game.
Hey! I was just sitting here grumbling to myself:"I whish they'd prioritise a solid portable user-space version" - and it turns out you did!

How realistic is it to get this running on Windows 10?
Also Robin Hanson's elephant in the brain
That’s a shame. Seems like there is some evidence from folks who experiment with LSD that it can cure migraines. Maybe we will see a clinical trial for that in our lifetime.
But, again, if you're not compliant they'll just write a letter telling you this and asking you to come into compliance.

At that point you can check your understanding of the law and what you're doing and write back letting them know why you think you're in compliance; or you can change your process; or you can take it to court.
Without going full VR I still think a dedicated piece of hardware might be the way to go to normalize across everyone's setups and preferences. Maybe a big ass tablet (or around the size of the Surface Studio) with networked persistent whiteboarding / kanban boarding / alert-messaging software could be an MVP. Those are the main things that I wish were improved after ~4 years working with distributed teams. Informational meetings per se I haven't really had problems with, google hangouts/meet or GoToMeeting have worked out well enough. I'm not sure how we'll ever solve the "conversations that only happen because your desk is next to mine" problem without VR though.
I actually love to browse Facebook, mainly because I've taken the time to curate groups / pages I enjoy getting updates from. In addition, all of my friends still actively use Facebook too (all college kids) for status updates, photo uploads, and a LOT of event postings (most college campus groups/clubs/activities have migrated to be exclusively on Facebook).

Maybe it's one of those things that drops off after highschool / college / when everyone goes their separate ways ?
IP law is not a natural right. It's been encoded into existence by laws. The GDPR is encoding new rights into law in regard with personal data.

I don't see a way to declare one bad and not the other unless you're just saying that new things are bad.

Additionally the terms of websites can say whatever they want but it doesn't mean they are legally defensible. I could put into my terms "by finishing this sentence you agree to be enslaved by Lovich LLC" but that doesn't make it happen
I think the idea was to let single line shitposts compete with all the other shitposts, but they went the wrong direction. Should've made the media shitposts sized down to the text posts.

I assume big media pieces are where the advertising money is.
I feel like most of HN would rather have an IRC server/channel
In a democracy, politics does deserve the front-page. What's shameful is how the masses and media cover current events...
Very very excellent points. I think that everyone on my team would be capable of learning them, but at least in this specific case it's not so much that they feel it's beneath them, but more of a fear. They talk about C as if it's something that only dark wizards understand, likely as a result of poorly taught early CS.

I think what I'm saying is that I feel like sysadmins are frequently needed for sake of expediency, especially when hiring younger developers. And maybe, due to that same bias, I actually mean "senior developers who understand abstractions several layers deep" :)
I get paid 130k with a phd EE from tier 3 with <3 years industry experience. If you want to get in get ECE and study computer architecture and RTL. I am doing hardware modeling to predict future performance. It’s difficult to get in the industry from a tier 3 w/o experience but it’s worth it. My counterparts in FAANG are no doubt getting 300k/year. Sometimes I think maybe I should leetcode and get a software job @ FAANG because HW is difficult.
Heh, the psychology underlying that opinion is fascinating.

Part of this could be a need to feel that one's own choice was rational or ideal. People make decisions based on emotion, and then invent reasons to justify the decisions.

A related factor could be the fact that a person could be compelled to move if they knew of a better place, but moving is a pain.

Another possibility is being unreasonably picky. Maybe somebody feels they need to be near all of the big internet giants, not that they can simultaneously work at them all.

A failure to consider cost-of-living may lead one to an unreasonable cut-off point. If a person does normal software development and sets a minimum salary of $300,000 then yes, there are "no jobs" in nearly every location.
I like open source software as much as most people on HN, and have worked with it for most of my career. But help me understand how a decentralized FOSS model gets ordinary lawyers, reporters, and congressional campaign staffers the level of security that iOS does? What are the mechanisms that assure safety for users?

The closest I can come to seeing something like this work is a Chromebook, and Chromebooks are locked-down and get their security model from a central authority.
Lol at the ad for Peer Mountain at the top

Relevant.
Legitimate interest definition is almost exactly the same as the existing laws on handling private information. If you want to complain about it, don't complain about the GDPR. If you've been handling private information for EU customers and have been complying with the law, then there is practically nothing for you to do.
It is a departure from the way things have always been online.

The EU can certainly demand that web creators jump through hoops, but then they can hardly complain if creators outside the EU decide that interacting with the EU isn't worth the trouble.
Lose Weight, Belly Fat
Are you suggesting that you must be equals with Feynman before you can apply what he taught?
I'm sure such businesses exist. But this isn't one of them, the article writer is leaving his EU users for reasons all his own, as in: he made them up.
Sorry, my fault with that first comment. Then why is your doctor not allowed to share your health information but a website where you search for and read about medical conditions can collect and share what you looked up as they please?

And while you personally may not have any expectations of privacy in the public, that is certainly not true in general for everyone and in every country. Here in Germany the constitutional court ruled just this week that having a dash cam in a car violates the privacy rights of the people you capture.

You are also generally not allowed to take photos of people in the public without their consent. It is not a problem if they randomly appear in a picture you took of a building or whatever, but you are not allowed to take photos were people are the main motive.
The GDPR is by most accounts and interpretations aimed at "the big players" ... but it is not SPECIFICALLY written to be limited to them.

Two view points to this:

1) If make to specific, big players will find a way to slip through the exceptions and game/lawyer the system

2) So vague , that only the "big players" will have the infrastructure/legal approval to actually guarantee 100% compliance. Smaller fish that the reward just doesn't justify the risk/uncertainty will certainly pull out of the market.

If the law is about "supercookies" and targeting an individual throughout the entire internet ... it should say that.

If its about the transfer/monetization of the aggregation of data ... PII being sold for money or some other in-kind transaction ... say that.

If a single entity uses a cookie and retains data for one single domain and that is ok ... say that.

If retaining logs that contain an IP Address and the logged in credentials are ok to keep for security auditing. .... say that ... if its only ok to store them for a year(??), 6 months(??) , 1 month(??) ... say fucking that!

If a company/site is aggregating PII of over a million unique users is troubling and should be specifically bound by these restrictions and need a DPO ... say that.

If a site only has a few 1,000 - 10,000 Unique PII records/users of note , and is not the focus of these regulations .... say that.

Give concrete examples, lawyer the shit out of it ... leave open for amendments so when abused can be modified.

It's just a shitty law trying to fix an already shitty situation.
I would say that the Japanese are the most "into" trains by a fairly wide margin. They permeate everyday life and popular culture there in a way which is hard to appreciate unless you actually go there. The Yamanote line is probably the most romanticised railway line in the world, appearing in countless shows, both animated and live action, and Shinjuku station is the most popular transport hub in the world, of any type, by far. It has over 200 exits (!) and is arguably the heart of Tokyo.

So yeah. Germans love trains, it's true. Japanese love trains and do so in that overboard way which is at once both cool and kind of scary...
I think the concern of the regulatory agencies (valid or not) is that there are db for sale that allow extremely precise locality information based on IP. Close enough to identify a household, which combined with other data can limit the data to a single person.
In fairness, this story is consistent with my own (limited) experience dealing with EU law. A few years ago, I was trying to determine if an EU based company I was advising really needed to offer the now-ubiquitous cookie advisories. I met with some very high profile (and very expensive) lawyers, who told me that although I technically needed to include the various popups and advisories, I was not in any real danger, because of selective enforcement. Eventually, they changed their mind and we added the sliders anyway, but for a time, the law was stricter than the actual enforcement.

But I was an american being advised by a top tier british law firm. How is a random guy releasing free (or cheap) services on the internet supposed to deal with a situation like that? The arbitrary nature of the enforcement is exactly what makes this a problem. If there were strong penalties, but clear ways to remain in compliance, this developer might have made a different call.

If I know I'm technically out of compliance, and I don't have a high powered lawyer telling me it's not a big deal, then I'm not sleeping well. And if I can solve the problem once and for all by taking the unfortunate step of simply cutting EU residents off of the service, then I'm going to at least consider that option, and probably take it in the short term.

If the EU wants to reassure people that "The regulators send a letter asking you to come back into compliance unless you've been really bad. They only move to fines if you ignore them." then they would be well advised to make that very clear. If they don't, you're going to see more of this, and really, if it's true, why wouldn't they?
Hi, does your team have an opening? I work on performance modeling and am always curious if I could make the jump to low-level system software and learn a ton of stuff for a while.
You say one thing, other people say other things.

It's easier just to say "this tool blocks Europeans" and problem avoided.
That’s because home.arpa isn’t intended for the office LAN - it’s for residential use.
:) I started reading the "12 rules for life". I like it, it's well articulated. I might have acted differently if I read the book before quitting. We all suffer from the human condition but some bosses recognize it differently.
article the software won't let me submit:Science and feet:
I am doing to tell all you medical people,the most neglected part of the body,by the AMA and doctors,is the foot.Podiatrists are phonies for the most part,and often do not fix serious feet problems.Often some one with medical problems of the foot have to go to orthopedists to get any help.The most common problems of plantar faciitis and other problems that seriously can discontinue walking,and cause great pain,are ignored by many podiatrists. Strangely, often sports medicine doctors know the most about foot problems because they treat runners.Considering that few medical people really treat serious problems of the foot,patients with painful and injured feet cannot find any real help,until the foot injuries are so bad the person cannot walk,or is in too great pain to walk.By that time, the problems have gotten so advanced, often it will take years to get any relief.Shoe companies,until athletic shoes came out,made a whole generation of women limp,hurt,and have serious feet problems because of women's shoes.--high heels,pumps,flats,and tight shoes(sharp toes)and stiletto boots caused a whole range of feet deformities.High heels alone caused back trouble,Achilles tendon problems,and injuries to all the bones and tendons,muscles,and other tissue in the feet,including heel and ankle problems.Yet so few orthopedists specialize in problems of the feet, that there are a tiny percentage of them available--often requiring a lot of money, or the very best insurance.Try and find a orthopedist specializing in feet--during my life time,I was only aware of one doctor--and he refused to accept my insurance because it was not good enough.This situation is very common.Older people often acquire such bad feet,even serious foot arthritis, that they can no longer walk normally.--And very good doctors refuse their Medicare.
Norses and waiters often get bad feet inflamatuon, but can't quit their jobgs.Today the only treatment is 30 or 40 years old:"Put ice on it,and also soak them in hot water with Epsom salts."The over used treatment "Put ice on it, and put it up"has not advanced in so many years, there is nothing else.Some times the patient insists on paying for injections of a material that fills up the very fleshless old feet,but it is expensive and keeps wearing off.Insurance won't pay for it.For a while the person with very bony feet has some cushioning.Most people can not afford the thousands of dollars over and over.The extreme absence of any advance discoveries in the science of medicine for the foot, is inexcusable,but there is a good reason; there is no money in treating feet.Sports medicine is booming, there's plenty of money in sports.
I sometimes wonder if truly my friends have started posting less on Facebook or is it their algorithm messing up again?

I see almost no original content posted by friends and only posts from pages with comments by my friends on them ("X and Y commented on Z page's photo")
I made statements that most claim are ignorant, which I will abide by, and mentioned that Feynman said to ask questions.

Maybe you people are the ones Feynman was criticising? He certainly wasn't hard on ignorant people looking for answers, he was hard on smart arrogant people who thought they couldn't be wrong.
Anyone else have an aesthetic feeling for this? Signal desktop felt clunky to such a degree that takes away from trust that Telegram feels equally secure - even though it is not.
https://www.fcc.gov/consumers/guides/911-wireless-services

"Phase II E911 rules require wireless service providers to provide more precise location information to PSAPs; specifically, the latitude and longitude of the caller. This information must be accurate to within 50 to 300 meters depending upon the type of location technology used."
The difference between “it can be made to work securely” and “it works securely” is much more important than most people realize.
Still in the dark mate. I'm sorry, maybe it's me, maybe it's you, but we seem to be speaking a different language.
You‘ll still have access. Probably at a higher rate.