skysight-inc/HackerNews huggingface dataset:
> the market will correct itself.

...and the market of voters will "correct" the elected politicians. Which is why no politician is foolish enough to do this, and they have a monopoly on making laws.
3rd world has high birth rates because:

- lack of birth control and related education
- desire for “free” manual labor to work stuff such as farm fields
- desire to ensure continuity of one’s family tree (i.e. high mortality rates for infants and children due dangerous conditions and/or lack of healthcare)
Corporate veil piercings happen a lot more when your a small or one man shop, and officers can often be directly liable for the actions of the company. It's not as bulletproof as you think.
I think everyone already knows that more regulations hurt businesses. We don't have to wait for the result to find that out. The question is whether the help done to consumers outweighs that. There are many ways to tackle the privacy issue beyond a large, sweeping law.
No RFC-type document yet but quite a bit of commenting here:

https://github.com/zerotier/ZeroTierOne/blob/master/node/Pac...

There is also a higher-level description of the entire system here:

https://www.zerotier.com/manual.shtml

ZeroTier solves a broader set of problems than WireGuard and has SDN-type network flow rules, security tap capability, and is a full L2 emulation layer with support for multicast.

From what I've seen the WireGuard protocols are excellent and the implementation is very nice and clean. A core ZeroTier implementation to support a simple L3 VPN use case could be as short as WireGuard but that would be without all the rules engine, multicast, etc. stuff.
You can use publicly available data feeds that changes every few minutes. For example, CNN's Afterhours trading data [0] seems to work pretty well. And it's just HTML, so you just hash it and you're good.

[0] http://money.cnn.com/data/afterhours/
There has been a noticeable difference in the quality in top universities in the US. No really top student from anywhere really wants to navigate the nonsense that US immigration is.

The only people who are coming in are reasonably well off, but desperate to move.
I highly doubt they even know.
From my German perspective this whole GDPR panic is so interesting. The GDPR is basically a carbon copy of the data protections laws that have evolved in Germany since 1977. Yet we still have many thousands of small companies dealing with data, individuals running web forums etc.

It's especially funny when small to medium German companies suddenly panic because of the GDPR and when you look at their situation all you can say is "yeah, you should have implemented that 15 years ago, it's already been German law that long".

In Germany not much will change, but at least companies like Facebook can no longer just move to another country with worse privacy laws (like Ireland) and call it a day. For us the GDPR means that protecting user data will no longer be a competitve disadvantage. But if you're a small company and handling data reasonably, the GDPR won't hurt you anyway.
> The mere act of pulling all my database backups from glacier at once would cost enough to force me to just shut down my personal projects.

Okay: when you were writing this, you must been either drunk, you forgot how easy it is to find your projects via your HN profile and general googling, or you simply don’t have a single enemy out there who is waiting to hurt you/your business. I hope all of it together!!
The first four detected asteroids, in fact. They were all discovered in a 6 year period during the early 19th century. And all were labelled planets.

That's how things sat for years, decades even. And then in a span of 5 years in the late 1840s the next 6 asteroids were discovered. By the end of the 1850s they were up to 57 asteroids, in the 1860s they found more than 50 more, in the 1870s they found over a hundred more than that. It had become rapidly apparent that Ceres, Pallas, Juno, and Vesta weren't just little quirky oddball planets, they were merely members of a much larger population of other bodies (that would come to be known as asteroids) separate from the planets.

The situation is identical with Pluto, the only difference being that Pluto was alone in its new classification of "little quirky oddball planet" in the 20th century for about 80 years. But now it has become apparent that Pluto isn't a weird little planet, it's a member of a different family of objects (Trans-Neptunians, of which Triton was probably also a member before being captured by Neptune).
My anecdata shows one amongst 4 dogs who I used a shock collar on wanted to get outside regardless. And he was aptly named Loki for a reason. So no, not 'any dog', not by a large stretch.

You're making assumptions that I didn't exercise or allow my dog(s) outdoor time. Wether it was daily visits to the dog park or visits to the beach or the hinterland on the weekend. You're wrong to assume that the dogs whether adopted or fostered where ever deprived of anything. Shock collars are barbaric but they are means to an end, and an effective one once all options are exhausted.

Plus the whole, let your dogs roam free in a country like Australia would come at a significant cost to the local wildlife where wild dogs and cats are pests and not all of us live on farms, I'm not sure what you would have suggested for the dogs under my care. Or if your opinion here is almost entirely biased?
Section 1 only requires A DPO when you are operating at "large scale".
I had these dreams 4 or 5 times during a depressive period of my life. I never knew how common this dream was until I saw in Reddit from others. In my dreams, I would spit them out one by one and soon all my teeth would be in my hands. And I would wake up scared. I don't remember having them before that period. I haven't had them for the last 3-4 years once I came out of that phase.
As a mostly disinterested party here, I can't help but to be happy about GDPR. I know that the large internet companies in my country like Google, Facebook, Amazon, Twitter, Oracle, IBM, etc. will have no trouble complying with this law but it will help to deter smaller competitors and upstarts from other countries and from within the EU. That's more money for us and a nice fat moat to keep everyone else out. This just made Silicon Valley impregnable.

All that's very well though. The fact this was posted on a large traffic like Hacker News means the author of monal.im will be subject to spiteful abuse from EU citizens whom believe their nation^H^H^H^H "union" can do no wrong.
Careful with drawing too many conclusions from that book. Your take away is pretty ironic, considering that was Kahneman's problem: "I placed too much faith in underpowered studies" [1]

[1] https://replicationindex.wordpress.com/2017/02/02/reconstruc...
Do all carrier customers get hurt by this? If I don't use LocationSmart, does it impact me? What products use this that expose me to this?
The statute does not provide for differences in force between these two; it requires that peace officers use only "reasonable" force.

Are you suggesting that the absence of similar language in 837 (I assume this is what you meant, not 836.5) means that other people can't use reasonable force?

Has a court ever held this?
It's literally named waterfall in order to reference the idea that each step becomes immutable as it's being passed to the next step. This isn't some unfortunate consequence of an overstretched metaphor; it's literally the core concept.

It's not my fault that it appears you've been using the term wrong. Waterfall with feedback ceases to be waterfall.
If your businessmodel does not allow for the proper dealing with the information it collects you shouldn't be in business in the first place.
The DJ who took a u-turn to follow her dream in life
Avoiding the cost and removing the app from the EU market is also a reasonable decision.
Every company showcases ideal conditions during product demos. Literally every iPhone interaction during a WWDC has been totally scripted. I don't know why people would assume a company would do anything other than show their product in the best possible light.
Actually, it might be more subtle than that. Simply referring someone to your landlord might be ok, but if you discussed anything at all about the property with that person, I think you'd definitely be in violation the moment you cashed the check.
There are a multitude of foot bullets that you can generate when synthesizing valid HDL to real world hardware. These languages were meant for specification and simulation and as such allow you to do things that are plainly wrong for synthesis in the real world. It's very easy to generate a circuit that works 99.9% of the time and causes Heisenbugs if you approach it like software programming.
Chrome Android shows this text if you click the lock:

"Your information (for example passwords or credit cards) is private when sent to this site"

That sounds so wrong because it implies you can trust the site... but writing something clearer is hard!
You don't even have power to downvote.Or are you working for Stripe or its affiliates?
My point is that some people will always see avoiding answering questions negatively, no matter what way you feel it should be seen. You can’t control how other people interpret your acitons or intentions, they may not match up with what you want, and in my personal experience, people tend to see avoiding answering a question (either by sidestepping it or by counter-questioning) negatively, if they notice it.
AFAICT, it's not a public authority or body (37(1)(a)), it's not "regular and systematic monitoring of data subjects on a large scale" (37(1)(b)) (it seems to be merely crash reports and minimal information required for the service, not systematic monitoring), nor is it one of the special classes of data (37(1)(c)). I'm not sure how you could could conclude a DPO is necessary.
Nobody forced me to defend the company, that should be obvious, plus I'm sure I'm within policy here.

It seems that I am "attacked" primarily by fellow googlers, which speaks to my point: If this demo was fake, it would have been rightfully torn appart internally.

By the way, did you just copy-paste our internal policy on a public forum ?
Telecoms, not LocationSmart, are to blame here. They made an API providing access to location information without any supervision.
Sorry for the irrelevant comment - I've just been looking at your past comments. Looks like your gripe with Google started 4-6 months ago and been continuing ever since. What happened?
This is blogspam in my opinion.

The actual link should go to https://cloud.google.com/preemptible-vms/
can this be used to help children with developmental delays and disabilities?
Harmonized. So an ok from one would count pretty heavily when interacting with others.
In security less is more.

The more we try to make encryption mainstream, the more difficult it gets because the mainstream interacts with computers predominately via browsers. The mainstream won't adopt something that isn't highly similar to what a browser has to offer in terms of media richness (photos, videos, html), so you see Signal choosing technologies like Electron, a browser, to develop their native applications. The heart of what signal is and does well (encrypt, decrypt, authenticate) is dwarfed by a pile of code that was added to make signal usable by the mainstream. Desktop Signal, in terms of code and complexity, is no longer a security product -- it's an application with a web-like media experience that happens to tack on a very good library to do encryption and authentication.

As we all know, sometimes vulns are in broken crypto, but most of the time they're in a gotcha beneath a mountain of code.
And people stop at red lights even if the intersection is open with no cars on intersecting roads or no turning cars.
> Being the sole owner and manager and being the DPO is clearly a conflict of interest.

Could you clarify why you think this is so? As an owner, my interests would align with the DPO's interests so it's hard to me to find where the conflict of interest would reside in the case of being the sole employee _and_ DPO.

Now if it's a large company where they make money per GDPR policy workaround then I could see it being required another person than the owner, but it could still certainly be an employee.
A tomorrow's closing share price for aapl-bot. A latitude and longitude of my soul mate-bot. A formula for the cure for cancer-bot. A reason to give a damn-bot.
I spent near to $10,000 in 6 lawyers 2 in usa 4 in different european countries and all wrote detailed report for me negating what you just said. IP is one of the most PII identifiable elements of an internet user. Exception is when you can prove such IP is a merely a proxy. please get some other lawyers opinion!!
>We can import strawberries or find something else to eat.

> Whenever the supply of illegal aliens is reduced, wages rise. The "living wage" can not happen in the presence of illegal aliens. Once wages rise, Americans take the jobs. You can even see this today in the record-low unemployment rates.

So we import our strawberries and wages will rise? How can both of these things be true? And the alternative is we won't eat strawberries anymore?

What you're proposing is setting our country up to be a worse place on the individual level "hey, why can't I find strawberries in my grocery store?" and on the national level, because we'll be beholden to whoever we're importing from.

There's a reason why a country should grow its own food. It's critical for our national security that we not be dependent on outsiders for something so basic.

Whoever told you they're doing this to "Make America Great Again" was lying to you. Not being able to buy strawberries would make America worse.
My only still active side project to which this applies isn't open for public registration yet, and I fully intend to completely block the EU before going live.
Why would you think that? If he wanted to be compliant he only needs two things:

1. Some procedure that allows him to answer users privacy requests ("what information about me do you have?", "Please delete my personal data from your servers.")

2. A so called "directory of procedures" which states what data you collect and who's responsible for it.

If your fail to comply with 1. the user can call upon their local data protection agency who will contact you and request the contents of 2..

At no point would he need a lawyer or spend money, even if he were based in the EU. That's not saying it's a bad idea to ask a lawyer for advice if you do handle lots of user data.

Most of this stuff has been law in Germany for years, I've dealt with the German data protection agencies many times (from both sides of the aisle).

- They helped me force my university remove personal information about me from the public uni website (by constructively explaining to them why it's a bad idea to have this information about student online in the first place).

- When someone trolled me by registering me to a dating platform which refused to delete the fake profile and spammed me for a year, one mail to the agency was enough to stop these idiots.

- When I worked with social workers, the data protection agency (after a client accused us of mishandling their data) helped us go through our communication procedures and identified some point where client privacy could easily be improved.

As a US company, if you don't want to deal with this, just don't. If you do handle user data you should, though.
I think you're lumping together too many things.

> I keep telling people - the thing that changes with GDPR is that personal data you handle is now still owned by the person and only in your custody as long as they explicitly allow it.
> All of our infrastucture has to change to honour that. If you cannot honour that change, maybe you shouldn't have been handling personal data.

What if I didn't want you to visit my website. Sure, by the letter of the law I am collecting PII (your IP address) but I think I can reasonably argue that it's quite a technical feat for a private layperson to go from "sudo apt-get install apache2" to "removing IP addresses from log files".

Sure, this is tongue in cheek - but most of that panicking I read was people concerned about their personal websites, especially with the "might be taken as professional work stuff just because of ads or you're blogging about tech as a tech freelancer.." - didn't really hear anyone with a company panic.
> you can make your case

What if you don't want to deal with any of that. You can no longer just create some useful, free service and make it public.Heck, I don't even like having to be familiar with software licensing just to add something in Github.
Just sign it after you verify the original person’s identity so you know if it’s been tampered with.

Company would be responsible for effectively verifying identity - similar to how this is done for websites.
It's common for me to misunderstand or confirm it back to the person due to background noise.
Thanks.I am suspecting this as much.If you pay attention for a while in HN,you will notice what I am saying here.
I was on board with the article, head-nodding all the way, until I got to that part.
You assume that a substantial portion of bitcoins are being mined in populated areas where the energy would otherwise be used for what you deem "better" purposes. How do you reach this conclusion?

The article does not make any effort to investigate the location of bitcoin mining facilities or sources of energy being used. For all we know, 99% of bitcoins may be mined using sustainable energy, off the grid. Without this information, any estimation of raw energy consumption is meaningless.
Can you imagine yourself trying to convince a regulator of that?
Typically (but not always) the complaints about this kind of thing come from people who believe they've been discriminated against, but in fact pretty much anyone can complain. In NYS, you can call the DOS and register a complaint for pretty much any reason you like, and they are pretty consistent about investigating all of them.
Furthermore mark your callendar as 18 of march 2019 is when UK leaves EU and GDPR wont apply anymore.
Your home network DNS can be authoritative for any domain / TLD.
That is not how the EU works, in the US i would be very afraid reading that, in the EU nothing will happen if you do not violate in a spectacular way, and that, after many warnings. They are after companies tracking you across real estate and selling relevant data from their vast silos to companies that can market stuff to you. They tried many ways already to prevent this kind of practice in some countries but loopholes were found so this is the hammer. As a small company, if you answer and act on actual user complaints, you have no worries no matter what the language. It is not in their interest to go for small offences. And if your story is reasonable, like OP, they will just let it go.

What this gives the EU is the hammer to hit persistent abusers of user data. They want you to be careful with user data and not treat it like you own it; you do not. It is not yours to sell or share or publicize.

Edit; note as well that every country has a compliance office; if they know you are in complaince as in you are ‘good people’ (best effort, no giant holes etc; just best practice in our field which you should do anyway) they will not bother you with every (or any) user complaint after that. I have good experiences with this with far grave (and potentially criminally punishable) matters in a few EU countries.
There are limited towers / carriers who support 2g. Less data to triangulate I would assume.
I'd feel better if there were a definition of 'large scale' somewhere but the official documents are just too ambiguous.

Are 1 million IPs in my logs 'large scale'?
The jobs that are getting priced out of superstar cities
> Yeah, the tendency to 'ghost' people is a huge problem in society now, and companies seem to prefer it to just saying 'no'.

What do you think this is attributable to? Is it that technology has shortened our attention spans so much that we no longer encode the memories of recent experiences?
Right here. You get a month to comply with any deletion request and can extend it to 3 months if needed.

https://gdpr-info.eu/art-12-gdpr/

"The controller shall provide information on action taken on a request under Articles 15 to 22 to the data subject without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests."
Thoughts on Publishing a Technical Book
One aspect that wouldn't eliminate the issue of "useless" or fake tx would be to have the liquidity aspect be a modifier where stakes being il-liquid devalue but over some threshold, the stake modifier is at a constant 1x.

Another potential mitigation tool would be to have the protocol look for tight tx loops (i.e. Naive liquidity falsifying) and either negate or reduce their influence on the liquidity calculation. Whether this is actually possible I have absolutely no idea. If I was to have any real trust in this idea I would have to look for/develop either formal proofs or some real demonstrable examples of it working.

Beyond that I think it boils down to game theory and economics. If it could work, it would likely require careful calibration to minimise the benefit of gaming the system or otherwise being a bad actor.
I don’t believe the buggy API was ever restricted just to US IPs, so anyone in any country could have been tracking US phones since the API came out (in Jan 2017 or earlier).
They should have used word Encrypted instead of Secure, it's misleading. Now I think they should at least keep the padlock green. Also next logical step should be blocking javascript on http sites by default.
issue isn't the business model, is the size. For a large company, handling GDPR is trivial. For a startup or small company, the cost is prohibitively high.

I'm not arguing for or against it, just pointing that the resulting unintended consequence is protecting large companies. Exactly the opposite of the original intent.
Do you happen to know where those clusters are in the US?
I hate this binary choice between all or nothing

Your personal info, username, account settings, marketing anayltics, etc. are definitley you're data and you should be free to have them deleted.

The two year old IPs in a server log sitting in backup, or a chance occurrence of your username in a random call stack for some web exception is not your data, and you shouldn't force a business to have to dig through that mound of digital noise to satisfy your deletion needs
Article 1 (c): the core activities of the controller or the processor consist of processing on a large scale of special categories of data pursuant to Article 9 or ....

What makes you believe that the "large scale" refers to the size of the organisation and not on the amount of processed data.
"Startup" people and "the suits" often don't see eye-to-eye, even today. Paul Graham describes how Yahoo's "anti hacker suit-culture" did Yahoo in. (paraphrased)

He wrote: "That's why people proposing to destroy [hacker culture] use phrases like "adult supervision." That was the phrase they used at Yahoo. But there are worse things than seeming irresponsible. Losing, for example."
Dishonesty is about misleading somebody, regardless of what you say. You can say 100% truthful things and still mislead people, which is still dishonest. A common method of dishonesty is by omitting important things. We are saying that we feel that your response is sidestepping the question asked of you, which is dishonest by omission, because this omission misleads. Communication is about more than the words you say.
Interesting, and a sensible exception. Like I say, the rules on this are sure to vary substantially from state to state.