skysight-inc/HackerNews huggingface dataset:
I'd strongly argue against 2. Telling people that paying attention isn't important 90% of the time is not going to increase attention the random 10% of the time when it does matter. Google halted all testing for level 3 self-driving cars because of this. They caught employees literally falling asleep.

https://cleantechnica.com/2017/11/01/googlewaymo-stopped-tes...
Ah yes! That's the one. And he owned it but could never drive it on public roads. Thanks very much.
I run a business that follows EU DP best practices (and so was mostly GDPR compliant already) and the first I heard of it was mid 2017.

Likewise. This idea that the GDPR has been in the works for years so it's somehow implausible that very small businesses have only just heard of it doesn't stand up to scrutiny. No owner-run microbusiness is spending the time necessary to keep up with the vagaries of EU debates.

Similarly, the idea that the GDPR is plainly readable and so that shouldn't be a burden and no-one needs to consult experts makes no sense. The document is many pages long, there are many more pages of guidance and interpretation produced by both the EU itself and the various national regulators, and it's still fundamentally ambiguous on many significant practical points.

It is entirely reasonable for a small business that does relatively little trade with the EU not to want anything to do with this, and it has little if anything to do with how good or bad their practical data protection measures and respect for privacy are. If small businesses are overreacting then that is on the EU for failing to pass better law and provide sufficiently clear, concise and timely publicity and guidance on what it really means.

My business interests are in the UK, so we're stuck with this one. However, if we'd realised ahead of time how much trouble the new EU VAT rules would cause a few years back, we would gladly have sacrificed the modest part of our revenue that comes from other EU member states in order to avoid that mess, and it wouldn't have been a close decision. So I find it very hard to criticise anyone running a small business outside the EU for wanting to avoid the latest round of heavyweight EU regulations if they have a way to put themselves outside of their scope.
> My applications share an X11 display, and if I'm not mistaken, they are pretty well isolated from each other.

You are probably mistaken.

https://github.com/esonn/x11log

http://blog.martin-graesslin.com/blog/2015/01/why-screen-loc...

You might want to look at qubesos :

https://www.qubes-os.org/doc/gui/
Remember that time another app (and the baseband!) compromised Signal on iOS?
Really? You think Facebook has an army of bots trying to inflate their metrics?
> so if his chat app has someone in the EU chatting about trade union membership while this chat service then "processes" that data, they might be held liable to the DPO requirement.

This is a ridiculous argument. No, someone in the EU chatting about trade union membership does not magically require him to hire a DPO.

Please.
See: https://www.qubes-os.org/doc/gui/

(they have essentially written 2500 lines of c that acts as a proxy of sorts)
Most commercial email services are not going to get blacklisted: Staying off blacklists is their job. That concern largely only exists with "spin up your own mail" type concerns.

I personally use FastMail, which is a paid provider that I highly recommend to people who value good email service. ProtonMail is really good for privacy, but there's challenges like the lack of normal IMAP support, that can frustrate the average user.

I personally strongly recommend against giving an ad company your data, and could not recommend Google, but it depends on what your friend's values and concerns are.

Note that regardless of the email provider they choose, they should consider buying their own domain and using it as an email alias, so they can easily switch email services later.
How would one identify a person using only an IP address?

If you have "other ways to identify somebody based on an IP address" then that wouldn't meet the criteria laid out by the lawyers.
I’m the author so if you have any comments reply to this and I’ll try to answer them.
Thank you, just to be clear: there is no obstacle to a Protestant sponsoring a child's baptism in the Catholic Church as parent or godparent?

Also I think you are right that many Protestants believe their opinions are clearly implicated by scripture, but it should be obvious on reflection that Scripture is not self-interpreting.
Actually, I'm pretty sure they still stick the toys inside the eggs everywhere except the US. Perhaps a European can correct me on this assumption.

EDIT: Turns out the US-style kinder eggs are indeed available outside the US.
Probably a good reason to not use this product, even outside the EU.
Thanks for the correction, I had completely misinterpreted what Eagleworks was.
For most dynamic languages, the available speedups aren't in simple compilation, but in removing the runtime type checks, method lookups, and other slow operations. This needs the ability to guess at what the code is going to do based on past behavior, and generate specialized versions that get thrown away if the guesses are invalidated.

So, for example, you might see that the last 100 calls to a function were done with integers, so you can generate a variant of the function that only works for integers, and check if it's applicable when you enter the function. If that function stops getting used, you can throw it away.

Doing that well ahead of time requires an extremely good idea of how the program will behave at run time, and even with good information, is still very likely to bloat up your binary hugely. (Facebook used to compile their PHP codebase to a multi-gigabyte binary before moving to HHVM, for example).
Surely the collective noun for footguns is a cache :)
I should have known this, but I'm glad I know now before assuming in real life. Thanks!
> It is interesting that you listed a number of peoples who have at various times been subjected to genocide because of their initial accommodation of outside populations in your rebuttal of my affirmation that Japan refusing to compromise its stance on immigration is vital to its survival as a cohesive and distinct nation.

Exactly for that reason. Note how the Japanese have had their various wars of conquest in the past. At that time they had no problem with their 'stance on immigration'.
Wrong about what? I wasn't referring to pseudonymization; we thought that wasn't worth trying after the legal teams laid out what it involved. Log rotation is important, like I mentioned.
We much prefer to have original sources. This is in the site guidelines actually: https://news.ycombinator.com/newsguidelines.html.
Please turn of your computer and discard it safely.
When can I buy the Enterprise version? And do you accept Bitcoin?
I like the congruence of lives are at stake and this is not a bug. There's a warning. If you don't read it, you deserve to die. What else could possibly be done?
Nothing... but can X11 applications actually steal data from each other? I wouldn't know how to do that, but I know precious little about the X11 protocol. (Screen shots are an awkward option, I guess.)

If I was worried enough (I'm not), I could use multiple logins. Two different X servers under different users would be completely isolated.
A more polite way to preface a quote like that is 'FTA': From The Article.
up-voted for pointing out this disruptive fact.

However, the explanation is over-simplistic. Perhaps a bigger contributory factor is whether diet contains the nutritional factors require for proper teeth formation. The case for this factor was made convincingly a century ago [1].

[1] http://gutenberg.net.au/ebooks02/0200251h.html#ch5
I can't find the link right now, but there was a similar study that found this effect for golf. The study had 3 groups: one control group that did nothing, one group that spent time thinking about playing golf, and one group that actually played. At the end of the study, the "actually played" group had the most improvement, and the "thinking" group improved almost as much as the "actually played" group.
First, you switched from respecting peoples' privacy to taking notes, thinking, and having opinions. I even responded to your comment before you added the notebook in the park example. You probably also noticed that I put »thinking« in quotes.

Anyway, it is not the act of having the information about other people that is problematic, it is the act of collecting, using, or sharing it. Do you think I should be able to follow you around and write down every step you make? Should I be able to use that information in every way I want? Do you want me to tell your significant other what you actually did on that »business« trip, tell your coworkers what you got from the sex shop? Should your doctor be able to tell everyone about your health status, your bank about your financial status?

It is just naive to pretend that handling information is inherently without any concerns and therefore no rules should apply at all. And it is just silly to pretend that writing down an observation you made in the park in a notebook is the same and should be treated in the same way as systematically collecting information about every website visitor.
'Shadows from the Walls of Death' – Studying Poisonous Pages of a Lethal Book
No, your device location is not CPNI. Generally, only things that appear on a detailed phone bill are CPNI.
OP, the NYT is interested. Reporters email here.

https://news.ycombinator.com/item?id=17089692
It's all about finding and capitalizing on arbitrages in the market the popup and disappear all the time in the blink of an eye.
> The main new feature of Vim 8.1 is support for running a terminal in a Vim window.

Well, my first reaction to reading this is that vim doesn't need this. What's wrong with opening another terminal Xorg window (like xterm)? If you're not using Xorg because you're in the linux console or through a ssh connection, what's wrong with terminal multiplexers (like tmux)? If Vim was already started when you realized you wanted a shell, what's wrong with Ctrl-Z to get to the parent process shell or :shell to open a shell subprocess?

Vim is a text editor, but now it seems it's a terminal multiplexer, too.

Something I really like about vim is that it stuck closer to the unix philosophy of doing one thing well and being highly compatible with the rest of the OS environment for more features through the universal interface of text. This makes it seem like it's trying to move closer to emacs's way of doing things by having stuff integrated and being a complete development environment instead of letting the whole orchestra of the OS components be the environment.
The last time I did it maybe a year ago, I had a combination of batch jobs that once completed, should kick off other batch jobs.

I created a poor mans fire and forget pub/sub model where when one process was finish it would "raise an event".

Raising an event, would look in Hashicorp's Consul to see what jobs should be run based on the event and submit a job to Nomad. There were a number of EC2 instances running Nomad agents that would kick off the subsequent jobs. Nomad jobs could be executables or Docker containers.

I was very much a Hashicorp fanboy until I transitioned to using native AWS services. These days I would probably use AWS Step Functions.
Astronaut Scott Kelly: How Tom Wolfe Changed My Life
> For 11 minutes a day, 5 days a week, they sat completely still and focused their entire mental effort on pretending to flex their muscles.

Maybe it depends on the person, but that actually sounds more difficult to me than just lifting the weights.
Try not to post the same comment over and over again, especially when you are making a point that has already been addressed elsewhere in the thread.
What exactly did that less than £250 get your customers in return?

Even if you had a business that was whiter than white in terms of compliance with previous data protection laws and had perfect documentation of all its data collection and processing activities, it would surely cost far more than that just for the time to write some basic notes on the extra things you now have to tell data subjects and/or your regulator, get them reviewed by a lawyer, incorporate them into the relevant policies, and send notifications to anyone affected about your updated privacy policy.
Cannot agree with this enough. When I first started looking for a VPN, the only source of information I found were these disingenuous websites that based their reviews off how much vpns were paying them, with every off-site link being a referral. thatoneprivacysite is by a landslide most unbiased source of information I found on VPNs.
Side effect may include headaches, stomach aches, nausea...
I highly recommend keeping your wisdom teeth if you have room for them. I have all four -- a full rack as my dentist says -- and they're nice to have; I chew pretty far back in my mouth so they get lots of use. Cleaning them hasn't been a problem so far. I'm 42 years old.

Like you, I also had a baby tooth that didn't fall out. It was anchored to the bone somehow. It interfered with the movement of my adult teeth as they came in and thus had to be removed in my teens. It was a pain to get out. It had to be broken into pieces and dug out, and since there was no adult tooth to replace it, they put in an implant, which has also worked just fine.
Yea you can pick up a PCIe 10G adapter for $40 on Amazon and a 4 port 10gb dlink switch for $200
This is the furthest thing from true, like almost every single question about this terrible law. Vague law + faceless bureaucracies + universal application + crippling penalties...sounds like a brilliant combo to destroy people’s lives.
> This is an easy thing to say when you're not personally exposed to the risk.

No, it's an easy thing to say because we have over 20 years experiences of regulation around data protection. The regulators send a letter asking you to come back into compliance unless you've been really bad. They only move to fines if you ignore them.

Here's a company that was handling sensitive personal data (medical data). They have a legal obligation to register with ICO. They didn't do so. Imagine what would happen under HIPAA. Now read what happened in EU.

https://www.bloomberg.com/news/articles/2018-04-26/u-k-healt...

People freak the fuck out about the big fines, but they don't realise they're conditioned by the pathologicaly dreadful US system which aims to over-charge and over-sentence at every opportunity.

Here's some examples: The UK Criminal Prosecution Service sent some unencrypted DVDs through the postal mail. Those DVDs got lost. They got a fine.

Some time later they did it again - this time the DVDs contained interviews with children who were the victims of sexual abuse.

Think about this for a bit: no encryption, no secure mode of delivery, a repeat offence, incredibly sensitive personal data.

Sure this requires the maximum fine, right?

https://ico.org.uk/about-the-ico/news-and-events/news-and-bl...

No. Only £325,000 out of a possible £500,000.
There's absolutely nothing wrong with asking for peoples' thoughts on a discussion forum that's built for, you know, discussion.
GDRP doesn't ban the milk from which messengers are churned at the messenger mills either.
The fundamental properties of doing business overseas have changed. What used to be a prohibitively expensive enterprise is now within the reach of everyone.

And the cost of regulation, which used to be negligible compared to the cost of the enterprise itself, has now become a significant barrier for small businesses.
How Will the GDPR Affect Your US Business
You have a fair point. Still, if S Mutans was nullified, I do believe this will significantly impact dental practice cash flow that I wouldn't be surprised if most goes out of business (over a long timeframe, as more people get this treatment).

If your practice has margins of 20%, then a 25% drop in procedures will mean you go out of business.

And why hasn't anyone started selling this? Well, large-scale synthesis and reproduction of genetically modified bacteria has significant upfront costs; no one is going to invest $20m in a production line if all they can do is sell it on darknet markets.
Sure, that’s what I mean by chasing interaction regardless of whether it’s negative or positive. If you comment on something, they show you more items like that, assuming you like to comment on those things. My impression was that Facebook’s user behaviors analysis is way more detailed than that, though.

There are the specific negative indicators you can give to them such as hiding stories, which even says it will make them show fewer stories like that one, and unfollowing people. When you unfollow someone, surely Facebook attempts to analyze why? Neither of these seem to have an impact on the type of items shown to me.
I think AOL is a good model of where Facebook is headed. It's happened to MySpace, it's happened to Digg, it's going to happen to Reddit, wtf were they thinking? Strangely enough, the worst site of them all, Twitter, will be the only one left alive as it is.
Everyone seems to have latched on to this 20mm € fine part, but missed the surrounding paragraphs that require that fines are proportionate to the offending, and only to be used after, on in conjunction with other methods of enforcement.

It's most certainly not a blanket "Everybody who is not in compliance with the GDPR will get a 20 million Euro fine".
How could this possibly be true?

You claim to know a lot about the GDPR, I’m not sure my business is compliant. Can you take a look and tell me?

What’s that called if not an audit?
I thought Walmart dictated to their suppliers that every item had to have an rfid chip in it, and this was years ago.
Perhaps having one on every single item was cost prohibitive.
"cultural compatibility"... Sounds like a concept created by someone who hasn't met people from very many cultures.
Says random person on the internet. Other random people disagree.
And the easiest way to comply with the law in this case is simply to block EU users, as was done.

You can hardly complain that someone who gave you something for free wasn't willing to spend their time or money to comply with additional demands.
First, notice how things like legitimate interests are not narrowly defined and left up to the DPA to judge. Which makes it hard to know whether you even need consent or not. Second, this is ICO, the British regulator. There are 28 of them one in each country and they won't always agree, so the application of GDPR policies can vary.
You contradict yourself, either its PII or not. Common understanding in the industry is that it is. Purpose of security doesn't change if its PII or not. Although security/auditing might allow to hold on for longer because you need the PII as a feature (which you should be transparent about). For pure telemetry you don't need it, I'd claim.
There are no ephemeral keys at all? It's just static-static DH?
Hardcoded Password Found in Cisco Enterprise Software, Again
Right... which is why this guy has decided this is no longer going to be his hobby in the EU. While the EU has every right to say 'those who do X for a hobby must do Y to comply' they cannot say 'everybody must have X for a hobby' or 'Bob must continue doing X for a hobby' .
I've seen this variety sold in Poland

https://www.candywarehouse.com/assets/item/regular/kinder-jo...

But I'm not sure it's typical.
If you don't want to be bothered you don't want to be bothered. Also it's not like you're off the grid. You have more structured (and meaningful) communication on non-immediate devices, when you want it. People who care will reach you no matter.
You're talking about clients, and I'm talking about the total effort to set up clients and servers. You are not a "couple of checkboxes" away from setting up an IPSEC VPN. The simplicity of setting up a WireGuard client is nice. Watch the quick-start video on Wireguard.com and look at what the server setup looks like.
Thanks a lot, asshole.
A "society" is all about building up information about the people around you and knowing about them. Complete anonymity often leads to the breaking down of people filters and behaviours, they think they can do whatever they want without consequences.

Many countries outlaw face coverings as they imply correlation with lawlessness.

The direct linking of IP address as PII flies in the face of that. If I am logging IP addresses for security and to monitor against abuse, and I in fact determine that an IP address is abusive, it behooves me to have any/all data that ip address used in my system to try to identify them.

The right to be forgotten .. why just online? Why just digital?

What if a shop owner or waiter in small town notes which customer like what, or what client tips well. Which local has annoying kids that she lets wander an vandalize the store.

If that owner/waiter writes that down in a log, and shares with co-worker on next shift ... is that in violation. What if they don't write it down and just have a really good memory ... what if they just 'organically' get a reputation and word gets around.

Is old wives gossip illegal under GDPR , or the "sterotypical" Italians mothers who keep an eye out on all the kids in street and report to each other who is doing what.

Plenty of stores and bars will have a list "don't take personal checks from these people" ... are those types of lists not allowed anymore?

If the GDPR was JUST limited to "customers" or people who have explicitly created accounts that might be one thing, but over reaching to say ANY apache webserver that automatically logs IP addresses had to be GDPR compliant is absurd.

If I post a tech blog with how-tos , personal ramblings, or even example code projects I release as open source that you are completely free to use or not use ... why do I have now have some obligation to you? You chose to walk up to my storefront and look inside ... I'm free to remember whatever I want about you while you looked around.

The US passed pretty broad overreaching Computer Fraud and Abuse Act [https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act] that many have argued is so broad that a violation of TOS could be considered abuse/hacking. If you view my site without agreeing to my TOS, should I be able to have you prosecuted?
Ironically propagations of articles like this is actually more or less the reason I stopped using Facebook.

No one reads primary sources anymore. All kinds of baiting conclusions and titles are drawn on absolutely minimal data with zero scientific rigor like this blog entry and my feed is just reshares of these McNews for shock value and social credits.
Because space is big and there’s no friction. Your 0-60 time is not as relevant as here on earth.

0-60 in 1 hour is actually not so bad in space! That’s 10,000mph per week.
I didn’t write the original comment about the notebook in the park, just FYI.

And your examples are not all the same. If you’re in public, you have no reasonable expectation of privacy. So yeah, take all the notes about me you want. That’s entirely different from my doctor sharing my health info.