skysight-inc/HackerNews huggingface dataset:
https://de.wikipedia.org/wiki/Bundesdatenschutzgesetz

It literally translates to "federal data protection law" and has been German law since 1978. In certain conditions it has also mandated a DPO (https://de.wikipedia.org/wiki/Datenschutzbeauftragter) since then, but in fact the first DPO position in Germany was created in 1971.

The right to be forgotten is mandated by article 35 BDSG (https://www.gesetze-im-internet.de/bdsg_1990/__35.html).

The right to a data export is mandated by article 34 BDSG (https://www.gesetze-im-internet.de/bdsg_1990/__34.html). It has always been common use this law to get a free copy of the data which our credit reporting agencies have about you, I've done that multiple times.
Yes, you're being obtuse. You're asking for something you know is not codified, but is very real in practice.
I use Mullvad when traveling, with wireguard app just to avoid public wifi security issue. It's cheaper than rolling your own Digital Ocean droplet
With the intention of following the blueprint all the way to the end, user wishes be damned? No, that would not qualify.

But it would qualify if you actually delivered partially built product in iterations and incorporate the changes that the client requests as they inspect it, even if you preceded it with extensive blueprinting. Only in that case, it has been found that developing such detailed blueprint is very time consuming and at the same time not very useful. So we don't do it for most kinds of software projects, but not because it's against any agile principles.

The original agile principles (I was just getting into software development when they were articulated) really prohibit very few things, if anything at all. But they do emphasize valuing working, useful software over following strict plan. Use planning to the exact extent that it helps you do create such software.
The standard path is more trodden than software development jobs -- ECE grad at a school with a good program.
> that bag needs people that write HDL and understand computer architecture to make good use of

Over time I suppose they could have some machine learning that automatically configures the FPGA based on which programs you are running and the types of computations they have historically used.
That's entirely the discussion here. If, when judged, cops are judged with one standard, and everyone else by another, then yes, they are given increased latitude to use force.
Implying in any way that all JS programs are insecure and all other languages are secure is ridiculous and probably harmful, leading people to insecure choices in other languages. I've seen plenty of security vulnerabilities in strongly typed languages in my days as a software dev
Russia was hoping to get a warm-water port in the bay between Liaodong and Korea. Too bad Japan was already there, having invaded 8 years prior.
New caries cures/vaccines invented appear in news every other year (the only thing that seem being invented more often are new super-duper batteries) yet none of them reach general availability.

The most recent discovery I can remember is about growing new dentine using an Alzheimer drug: https://www.nature.com/articles/srep39654

Anyway, I actually find it shocking that in 21th century people are still walking around with a part of our bodies rotting and consider it normal.
To me, what's fascinating is the way it's operated - families have rails running to their personal garages, and own their own individual wagons.
Yes, it's a horrible and odious enterprise. That's not what's in question here.
The education system prioritizes the average, the mean, mediocrity. It's a political aim I believe - I expect without our 'schools' society would look completely different - the spread of outcomes much wider.
You stated your extremely general conclusions, and only later mentioned that they were relevant to your personal business. And in this particular sub-thread, you made a very general statement about risk, again without qualifying it at all. And you only mentioned the lawyer after you were challenged about a general statement.

Maybe you have huge assumptions that people reading what you say will add all kinds of limitations to what you say? I don't. It leads to terrible discussions, like this one.
"Even if I had the desire to read through the law (I don't)"

"If such a set of instructions exists, I haven't seen it"

https://gdpr-info.eu/

Maybe for me it is easy set of instructions, for some maybe not.
If you abstract away the industry specific details of my examples, you are not supposed to physically endanger, harm or kill people regardless of the actual industry. So I would say it is exactly the same but instead of physical harm we are talking about harming peoples' privacy.

Maybe one could argue that there is something to be gained by differentiating the rules based on the industry but, at least to me, it is not obvious that the result would be better and not just more complex. Also there are already rules and laws for specific industries and how they have to handle personal information, think for example medical or financial data.
"This seems like unfounded fear to me. "

Have you seen the rash of white people calling the cops on black people just for being around? I'm sorry, but I cannot agree that this is "unfounded".

"Just to be clear: you are saying that a criminal justice system with a smaller footprint "

That is so unbelievably not close to what I said that I cannot believe you are discussing in good faith.
My exposure to this is limited to cases in Europe and ones that I was a direct witness to and in all those cases it was pretty clear that the company was created with the express purpose to commit bankruptcy fraud and the result was the owner of those companies lost his shirt. All other attempts to pierce the corporate veil that I've seen failed.
I'm a small businesses owner. When I first found out about the GDPR, this was exactly my view, and I even posted on HN to that effect.

Then I actually spent a little time to find out more and, as someone who cares about privacy, quickly realised the positive intent behind it, and how simple it is to comply with in principle: let users know what data you collect and what you do with it, and give them the possibility to request it or request it's deleted.

TBH, if someone requested any of this, I'd do it without the GDPR.
I see, but in addition to a valid baptism aren't there required beliefs as well? Such as the immaculate conception and Papal infallibility, which Protestants would deny?
You can be respective of privacy without complying with GDPR. It requires a lot more than simply being privacy-conscious. (E.g. I don't think Hacker News is doing anything unethical even though they blatantly violate GDPR)

> Legal compliance is a requirement for any business

You are required to comply with the laws of your country, not those of other countries.
If you want to avoid tooth infections, the #1 thing you can do is stop eating sugary food / drinking alcohol or sugar water; for a more complete caveman approach, cut back on other starchy foods like rice, bread, and pasta. The #2 thing you can do is occasionally visit the dentist for a checkup or whenever your teeth give you trouble. The #3 thing you can do is occasionally apply topical fluoride (it’s not clear what difference there is between drinking fluoridated water, brushing weekly, brushing daily, ...). Getting a nutritious diet is also probably important.

Our modern culture taboos anything less than brushing multiple times per day, but it’s not clear how reliable the evidence is supporting this as a blanket requirement (the studies I’ve seen had many other confounding variables, but admittedly I did not do an exhaustive literature review), and most of the tooth infections probably result from other causes.

There are people with perfect teeth who brush rarely, and people with frequent caries who brush religiously after every meal. On average, hunter–gatherers have better teeth than people in agricultural societies, including modern ones. They don’t have access to oral surgery, so when things go bad they can go very bad. But that’s not really related to brushing.
I traveled on the sister ship to this one couple years ealier on a similarly exotic trip to all sorts of far flung destinations. While it was a small crowd (~50 passengers) it was mostly all these types of hardcore dedicated travelers, mostly eldery folks, that are keen on checking off the most remote of destinations. Sure, a few of them were rich lambo-types but by and large they were pretty down to earth, nature focused people with above average means. I find it hard to believe they would fall for such swindling but it sounds like this guy had just enough real stuff going on to convince folks he was legit...
I have had a long history of dental issues - I can blame so many things for how they got to this state; severe substance abuse two decades ago, homelessness, teeth grinding, GERD. The reality of it though, is that I let my teeth get really bad, and ultimately they were too sensitive to properly take care of - which caused so many more issues. I have spent so much money to attempt to save them over the years, and finally came to the conclusion that they were not worth saving due to the amount of neglect that I had caused them. For years I have mumbled when I spoke to not cause attention to them, and I rarely smiled for the same reasons.

Three days ago I had the remaining 12 teeth pulled and I am currently at home adjusting to dentures - and around the new year I will be looking in to All-on-4 implants. It's truly amazing how much better I already feel about myself for just a few hours of work - and I look forward to the quality of life improvements that I will have. Even with this relief though, there is definitely tons of regrets on how I could let it get this far.

Take care of your teeth - it's worth it.
> Even though no message traffic passes through Monal’s sever

He has no data of the kind described in Article 9.
> extremely shallow interpretation of the GDPR

Please elaborate. I was unable to perceive the legal depth of interpretation.

> you should probably shut your business down completely rather than to hope that just ignoring European customers is going to make the bogeyman go away

Businesses limit liability and legal exposure all the time.

It's a tradeoff, as all things are.
Yeah, it's odd that they make stronger claims in the middle of the paper (e.g. "This clearly indicates that the “thrust” is not coming from the EMDrive but from some
electromagnetic interaction.") than in the conclusion.
Stellarport – Stellar Trading Client Removes Unverified Assets from Exchange
tweet:
https://twitter.com/stellarportio/status/997201638128603137

medium:
https://medium.com/@support_55248/new-update-removes-unvefied-assets-e7bf465bff1

exchange:
https://portal.stellarport.io/exchange
There are other laws which require you to keep data for up to 10 years. This will require you to split up your backups and clean the ones for the longer storage from all unnecessary PII. That is already costly and challenging. Problem is nobody really knows what data you have to strip of and what do you have to retain for other laws.
Thanks! I have your paper open in a tag, im excited to dig in more. Congrats!
Wasn’t the Epstein drive not “new” physics but rather he just fumbled into making a “standard” fusion drive extremely efficient?
That's not a reactionless situation, there is an asymmetry of photons causing the acceleration.
It relies on several features of PGP that mean that messages aren't tamper-proof. If PGP made sure messages replayed and altered by attackers would not decrypt, then the attacks wouldn't work- you couldn't replay an email back to someone to steal it.

It relies on a client having an HTML renderer, but the underlying issue is messages that can be tampered with.
Ah, so don't use the now secured opensource client using Signal's protocol. We should use PGP with all the weak yet-to-be-patched clients. Cause it's not PGP which got hacked it was the client. Very different from how the Signal client got hacked not their protocol. /s
I think OP was more pointing out that, at least from the outside, the product and its features appear unchanged from several years ago.

I tried Svbtle myself, and while I like the product aesthetically and conceptually, customization features that I really wanted like adding custom tracker tags just weren't there yet. I chose to keep using Ghost for now.
I'm actually saying that both are a requirement for logging IPs in the circumstances being discussed here, but I certainly don't mean to suggest that either would grant you "carte blanche" to collect and log IPs.
> He's not handling sensitive personal data.

How do you guaranty that nothing in the messages being handled by the server is "sensitive personal data".
The TSA is a make-work program, not a legitimate security solution. Its only reason for inception was to provide employment for a pool of otherwise unskilled workers. Same with the DHS-- terrorism has always been a concern; we didn't need another law enforcement arm.

Despite either's questionable utility, no public official wants to be responsible for putting so many people out of work or jeopardizing the illusion of safety they provide.
Oh I was referring the comment about "terraforming" other planets/moons that have water by plopping fish into the oceans there.
By "almost nobody", you mean everyone who used Apple Mail/GPGTools and Thunderbird/Enigma, meaning, the vast majority of everybody who used PGP?
If you are not doing anything shady, if you have your house in order security wise and if you do not collect data that you have no use for you are 95% there. The remainder will maybe require consultation with a lawyer for an hour or two if you want to play it safe but you could also simply wait for a few months to see how it all plays out.

If you are respectful of other people's privacy then there is very little chance that you will be found afoul of the law and even if you should be then you will be warned to become compliant long before you will be fined.

This whole discussion is beyond ridiculous.

Imagine the rest of the world reacting to the DMCA this way which has far wider scope and effect.
No, I would venture that the majority of people flying with pocketknives - or even guns - arent' doing so with the intent to use them on the plane.
The title is well supported by a statement in the paper (section 2.1, next to last para): "This clearly indicates that the “thrust” is not coming from the EMDrive but from some electromagnetic interaction." I think the conclusion is written in carefully understated scientific style.
I don't disagree, but I have to think that agile/scrum with a bad company just exacerbates the pain.
I'm not actually sure he is running this as a business? It seems open source? He even suggests people download and build their own?

So all he's done is save himself the time and effort of dealing with the GDPR and cost himself nothing.
> opened himself up to competition from a company with a comparable product that does comply with the law

I'm sure another free and open source product will seriously impact his profit.
I'd definitely talk to a lawyer. You don't need to engage them for an employment dispute; they can merely advise you on what to do and just as importantly, what not to do. One consultation can prevent a lot of unnecessary difficulties and pain.
I think John Deere is perfectly fine using something that is proven to work. I can't imagine anyone wanting to tie themselves to Tesla's software at this stage of the game.
Corkami illustrations
The "Eros incident" does imply that the aliens have an interesting relationship with momentum, since ordinarily accelerating something that big that fast would grind everything to a pulp.
NSTAAF talks about sail trains on

https://www.stitcher.com/podcast/flavio-briatore-3/no-such-t...

(@14minutes)
I am surprised that nobody has yet to attempt the "simple" solution for testing something like this.

The simple solution being to put it in space, turn it on, and see if it 'stays' in space.

The claimed amount of thrust is significant enough that it will either obviously succeed or fail if you actually put it in space.
It's a bit silly to send one so late, but I'd rather get some word back rather than absolutely nothing.
The share of our attention captured by isolated bank failures is disproportionate to their effect relative to the systemic banking failures created by centralized banking systems.

I would argue that the negativity toward such things as the wildcat banking era is a result of cognitive biases like this that manifest when dealing with complex social systems.

More on the wildcat banking era:

https://www.alt-m.org/2015/07/23/real-pseudo-free-banking/

>>Indeed, the all-around record of U.S.-style free banking improved significantly as the Civil War approached. Even banknote discounts — another consequence of unit banking that has been wrongly treated as a necessary consequence of having multiple banks of issue — had become almost trivial by the early 1860s. According to my own research, someone who, in October 1863, was foolish enough to purchase every non-Confederate banknote in the country for its full face value, in order to sell the notes to a broker in either Chicago or New York, would have suffered a loss on that transaction of less than one percent of his or her investment.[9] That's less than the cost merchants incur today when they accept credit cards, or what people typically pay to withdraw cash from an ATM that doesn't belong to their own bank.
Sure, but those aren't the only two options. You can just pass normal laws. They don't have to be amendments. That's also difficult, though, due to the extreme partisanship in our political environment, but it's theoretically the fitting solution.
If you write a new question on Google Maps about a location, gmap users that visited the location in the past and accepted to be a "local guide" get notifications about the question. They get points for answering the questions that are not worth anything. This is only a small part of your idea, but the problem with making money with that would be the same: who will qualify the peoples answers ? Will the answerer be payed if the questioner says the answer is wrong or didn't help him(and what if the answer is actually right but the questioner don't want to pay) ? Who would pay for a answer if it could be wrong ? If you want a fast answer, how can you guarantee the quality of the answer as the answerer must also be fast to sell his answer ?
Thunderbird does not download remote content by default.

I don't know anybody who is using Apple Mail with GPG, but if there are such people, they have been doing it very wrong regardless of this vulnerability. It's an unsafe combination.

I have no statistics on what people use PGP with, but asserting that most people use it with Apple Mail and Thunderbird is baseless and without proof.
California’s Coffee-Cancer Folly
Businesses hate regulation and uncertainty because it just adds to their costs. Large companies just eat the cost. For small businesses it’s practically impossible to be in compliance for all laws. But if the risk of not being compliant is too high and the reward is too low then they will choose this.
Waterfall was a strawman, used in a paper as an ideally-bad project management strategy. The name was chosen on purpose to describe its fatal flaw.

Our industry being rather foolish, people read the paper and thought, 'hey, this sounds like a good idea!'
What are you talking about? There's a ton of information about what GDPR means, both from the EU and the national regulators (particularly the ICO). The best sign that the regulators aren't going to go crazy with this, is that they already have quite significant powers and they're not throwing their weight around now.
The old "We take privacy and security very seriously" line.

But for some reason, access control has something to do with LocationSmart's entity body serialization format... hmm, okay then.
Could you tell me more how you’ve done this?
I don't think that's a particularly normal mindset, at least on HN. Or am I wrong?
JC Penney Outlook is negative and could follow Sears into bankruptcy
WireGuard is easy to setup for particular use cases. A small number of dedicated links or a small number of mobile users.

WireGuard provides the foundation of a complete VPN service. It doesn't provide features such as user management and authentication, key management, ip address assignment, client configuration distribution, end-user friendly VPN clients, support for easily implementing complex split-routing and dns configurations for VPN end users. And most of those things aren't in progress. And it is likely there will be multiple solutions competing to provide these on top of WireGuard, so there may never be on true flavor WireGuard solution. Also once these are in place the overall attack surface expands to be closer to OpenVPN and IPsec.

Other issues include lack of support for multicast which means IPv6 which requires multicast is mostly supported but not completely which can cause issues in some circumstances.

Accomplishing some simple tasks like using a floating route to provide failover across two WireGuard links isn't possible. WireGuard interfaces don't go down unless you manually tear them down, so you either have to run another tunneling protocol over the WireGuard links and assign your routes to those interfaces which can go down or use a dynamic routing protocol. And WireGuard has a few caveats when being used with certain dynamic routing protocols which starts to make it as complicated as OpenVPN or IPsec at scale.

Currently there is an issue being discussed on the WireGuard mailing list regarding there currently being a requirement for time to be set on devices before establishing a first connection to a peer. This is because of an anti-replay requirement WireGuard has for initial packets which IPsec and OpenVPN don't. This is impacting a group that was hoping to use WireGuard to encrypt the traffic across a community wireless mesh network. The devices used in such networks often don't have a realtime clock. There are potential workarounds but again suddenly the simplicity advantage starts to slip away.

I think Jason has done great work, I like WireGuard and I use WireGuard, but it is not near ready to replace OpenVPN or IPsec in most circumstances.
Oh ya, I hear you. I worked at GM in the early 2000s and I remember personally dealing with an issue where we needed over 100,000 of a particular part for a recall and the vendor could only supply about 2000/month (not including what we needed for current production). Most of the other major automakers also used that part and they needed them for recalls too! It was insane.

I've been in automotive ever since and worked for a number of the major automakers and I currently do a lot of consulting for one automaker (not Tesla). So, I understand very well how one tiny thing can really throw a wrench in production (or sales, or service).

But, Tesla has an illogical amount of goodwill right now and they can't seem to burn through it. So, until that goodwill really starts to dwindle, there are going to be investors willing to take preferred stock.
Getting a palpable Summer Wars vibe from that giant floating whale island ;)

https://www.worldsadrift.com/island-creator/
I suspect that logging IP only for security purposes is fine, but the idea that it is a bulletproof defense is just wrong, we have no idea. Current indicators are that regulators think IP is personal & that legitimate interest defenses are suspect.
It probably does affect them, though, whether they're aware of it or not. Some of the best talent they can get probably reads HN threads like these. A prospective great employee could easily read this thread, see stories of company X ghosting people, and decide to avoid them.
Apple shipped an estimated 600,000 HomePods in the first quarter of the year