skysight-inc/HackerNews huggingface dataset:
I think it's two reasons:

1) People are becoming super averse to conflict and, by extension, confrontation. I think it's for myriad reasons. Not wanting to deal with the possibly-negative response; being accused of something; the other party exacting some form of retribution; and so on. I think the perception is that if one party says "[not-preferred reply]," the other party feels maligned instead of just that "it didn't work out."

2) Along the same lines, I think not saying "no" is also seen as responsibility shifting. "Well, I didn't tell them 'yes' so they'll figure it out soon enough." And then the ghosted party is then held as being responsible for their own feelings. "Not my problem you felt bad that [a possible employer | an acquaintance | some other interaction] never called you back. Those are your feelings, not [mine | ours]."
> For a startup or small company, the cost is prohibitively high.

Nonsense. I look at another high tech data driven start-up every week and not a single one has stated that the GDPR costs are 'prohibitively high'. Sure, there are some that need to do more work than others (medical, ad tech). But on the whole companies that were already doing their best to not fuck up with their customers data have very little to do in order to get to where they should be and the remainder has a bit more work but will mostly likely be more-or-less compliant by the 25th and what work remains will be done long before the eye of Sauron will turn their way by virtue of their size.

The cost is strongly related to the size of the organization and the amount of sensitive data you hold as well as whether or not you were a bad steward of the data in the past.
How do you get 30?
I have 31, but that's because I have only 3 front ones on the bottom due to an anomaly.
Japanese Rail Operator Says Sorry for 'Inexcusable' Departure 25 Seconds Early
Actually they stopped clinical trials because of difficulty with FDA approvement

https://www.oragenics.com/technology-pipeline/lbp/smart
> You're required to have a fire safety officer at these companies too, but it's not a full-time position.

AFAIK, most of the "safety committee" regulations usually have waivers for small companies.
They don't own the bits. They own the data those bits represent. The person/company who does own the bits has to comply with the rights of the owner of the data.

How you decide to store it makes little difference as long as it's digital.

Fun aside: if you store it on paper you're not beholden to GDPR. Crazy.
I am also very attached to this, even though I don't have a direct family member or friend being a felon in the US.

From an ethical and social perspective, how terrible is society if doing one (sometimes small) mistake which we could realistically all make at some point in our life pushes us to constantly fail everything in life going forward? Think about the stupid shit you did at 19 year old that could follow you your whole life?

I understand that some positions require background checks, but it shouldn't be like it is today where no businesses will even take the risk to hire anyone with the slightest dent in their criminal past.
Remember, actually calling someone is the last resort. If google can make a reservation for you online then it will do that first.

If they have to call, I suspect that it isn't 100% without human intervention. I am reminded of "Samantha West" the telemarketer "bot" that will robocall people and respond to people. It turns out it isn't a bot at all but someone pushing buttons on a soundboard to play the appropriate prerecorded response. http://newsfeed.time.com/2013/12/17/robot-telemarketer-saman...

It would be pretty easy for the small number of times that google can't make a reservation online for you to pay some people in a call center to do this.
They're publishing for the sole purpose of getting people to pay them to take them down. I fail to see how that's any different than asking them first, except that now paying becomes that much more urgent.
I think this falls flat in terms of imagination.

Look at a building shell, even if you have zero clue about houses you can see if they used rotten wood. It looks like it will become a house. The more it progresses.. well, you can easily tell "that door shouldn't be where it is" and so on.

Now look at the code generated by $framework via "$tool new project $name". To a non-coder (or even just not using that language) it's not really discernible from a 90% finished product. Your house doesn't turn invisible because looked at it from the back.

Also house construction follows certain "easy" patterns a 5 year old can grasp - you need to start at the bottom, you can't put the paint on before the walls are in, etc.pp - give a coder of 10 years a project in another language without documentation and you won't hear anything in the direction of "it's more 10% or 80%" unless spending days. I'm not saying people building houses have an easier job - but it's palpable.
I actually think it's entirely the other way round.

A small business or a startup should have a relatively limited amount of data capture, and that data should be stored in a relatively limited number of places. In most cases, it should be straightforward to make sure that this is documented and appropriate controls are in place.

On the other hand, large companies have vast quantities of uncontrolled data gathering that nobody is responsible for.
You've made many concrete, general statements in this discussion which turn out to be relevant to your personal situation and your personal appetite for risk. Maybe that's not an effective way of holding a conversation about the general issues around the GDPR?
README.txt: Guerrilla metadata entry
You forget the most basic fact. We understand how children are made now, or not made.

It may sound stupid but it was not obvious a hundred years ago. The wife is pregnant again, well, must be an act of god.
I still am against hiding the protocol. Color https green and http red if you want to (though I think http deserves a less condemnatory color like yellow).

Hiding it, unhiding it, is too much magic. Yes, I believe web users need a certain level of technical understanding, so that they are savvy enough when they see it elsewhere, like in an email or some other document.

I am for hiding the inner workings of things, but I believe the URL is part of the user interface.
SciHub says:
подходящих прокси не найдено

no proxies found
I like http://www.fpga4fun.com/ as a decent high level overview + a bunch of great tutorials.

Grab a Lattice CPLD/FPGA demo board($25-$50) and have at it!
I was going to say the same thing. If you're an individual running an OSS service, or a small business, requests for information or deleting information really are going to be really rare.

This really isn't a burden.
Its certainly an issue. But antisemitism / Holocaust deniers are kind of a universal group. Not only are there certain Arab groups who are Holocaust deniers, but there are also Right-Wing KKK Members who were making their anti-Semitism quite clear just a few months ago.

https://www.adl.org/sites/default/files/styles/inline/public...

Antisemitism is on the rise. But blaming it squarely on Muslims is just plain wrong. The above Swastika was found at the infamous Charlottesville "Unite the Right" Rally.

I don't necessarily have answers. But I'm also not entirely sure why Muslims get all the blame here. There are plenty of Muslims who are literally thousands of miles away from these incidents (ie: Nigerian Muslims) who really shouldn't be lumped together with the rest of the crap going on.
Do you know of any systems that actually do this? It's the first I've heard of this technique.
> When I got my Vive and was playing around in The Lab, and one of the experiences puts you on the side of a mountain, I stepped off a cliff edge and I could feel my heart rate increase slightly as my brain was expecting me to fall to my death. The immersion is real.

Not disputing anything you're saying but I actually have this same experience playing games where you can fall and the player accelerates (particularly if the camera is first person or right behind the player). Just looking at the screen when I jump off a cliff in something like WoW makes my stomach feel like 20lbs of iron while I'm falling. I've kinda learned to enjoy it at this point.
No one in government has announced a plan to repeal the GDPR from UK law.
I agree. These kind of systems need 99% precision.
CNIL is one of ~20 regulatory agencies & this isn’t their “official” stance.

Other opinions have concluded that you must keep an index of requested deletes in the face of backups, for instance.
If, instead of using the metric getting a job as a Software Engineer, you used building and deploying quality software in a timely and cost-effective manner, then a CS and/or SE degree may be very important.
There are tech jobs everywhere. From Toronto to Paraguay and from SF to NYC and everywhere in between.

Technology is everywhere, it is almost impossible to find a place where there are no tech jobs. But the bigger cities tend to have more of them and for better pay and Silicon Valley, New York, DC, Amsterdam, Berlin, London, and so on will have the best paid jobs but also the highest cost of living.

Silicon Valley is an outlier in many respects, you should not calibrate your worldview by it. If you mean by tech job: a place where I can sit in a chair and make 7 figures easily then indeed, there are no tech jobs outside of SV and Seattle.
Unfortunately yes.

I'm what you would call a (potential) high-skilled immigrant (STEM Phd soon completed at top tier college). Clearly, the current policies don't make me want to stay. The path to permanent residency (i.e. proper immigration) is getting harder and harder.

No longer that two days ago we got an email about "public charges" (i.e. -legal- public help that would make Dhs/State consider us a burden to the US) and how we should be careful not to use those while in the US, otherwise we can get denied entry/visa. Yikes.
If you read Doerr's book, he specifically said OKRs should not be tied to performance reviews, compensation, and promotion. Also, OKRs should be aspirational.
No, that's incorrect. You have to have someone's number to send a message to them.
There are many amazing teachers and school administrators, and many who are just muddling through doing their best every day. There are also some sadistic jerks, and some who are incredibly bad at communication and problem solving and controlling their own emotions, especially among the lower levels of the administrative staff.

I can understand that dealing with scores of angsty teenagers every day, and especially getting stuck with resolving all of the most intractable disputes, can be trying for even the most patient person. But there are some administrators who escalate every situation brought their direction into an aggressive pissing match. As if the reason some of them stuck with the job is that exercising control over other humans (in however petty or counterproductive a manner) makes them feel powerful.
Trains are like an information network you can see in action.
The GDPR faq disagrees:
https://www.eugdpr.org/gdpr-faqs.html
You can ride an underground tiny train in London -- what used to be used for postal mail delivery (Mail Rail)

https://www.youtube.com/watch?v=gCsKUNIspW8
I find your view very interesting. You have a very capitalist and US law based perspective on it. For one, not everything in a society needs to allow to "collect the fruits" of individual work (which is essentially capitalism). Europe has much more socialism mixed into their understanding of their societies than the US.

Further, the US law is based on risks of heavy punishments but few regulations, while the law in many parts of Europe is based on strict regulations but less high fines. It looks like the EU has too many rules, but that is a subject of perspective.

Problem here: The internet gives a shit about borders and society.
GDPR does not require you to delete PII from backups. This is a misconception.

You do need to have a documented and implemented backup retention policy and communicate this if you receive a request to delete a user's data.
Lots of Ruby and Go, my languages of choice. Makes me love Tesla even more.
Not 'literally every' one - ""I'd like to order 4,000 lattes to go, please."

[1] https://www.theverge.com/2013/3/4/4063272/meet-starbucks-bar...
Hey Steve, glad to see you saw this post, now I get to personally thank you for all of your work on the Rust project. It's a really great community, it was very easy to get help in the IRC when I'd get stuck on new-to-me concepts. The documentation was also incredible, and the language itself is awesome! So thanks, and keep up the great work over there, I'm going to be definitely peddling Rust when I can haha.
No the _worst_ is when they offer you the job verbally on the phone and in between the phone call and the written offer they give the job to someone else.
I dunno... Apple could, for example, buy T-Mobile and their network for ~$50B [1] and still have a $230B pile of cash left over [2].

[1] https://www.google.com/search?q=TMUS

[2] https://www.cnbc.com/2018/02/01/apple-earnings-q1-2018-how-m...
Haha, the old Mechanical Turk trick! https://en.m.wikipedia.org/wiki/The_Turk With all the smarties on the Google Brain team, I'm surprised they need it.
Happy to see Tesla /finally/ make some traction on GPL compliance.

Some additional context [1]:

I’m reaching out you since you are someone who has expressed interest
or requested open source code from Tesla in the past.

We would like to let you know that we now have two repositories on
GitHub that might be of interest.

You can find them here:

https://github.com/teslamotors/buildroot
https://github.com/teslamotors/linux

Today they contain the buildroot material that is used to build the
system image on our Autopilot platform, and the kernel sources
for those boards as well as the Nvidia Tegra-based infotainment
system in Model S/X. It is expected to be amended with material for
other systems in the car in the near future.

Currently the material that is there is representative of the 2018.12
release, but it will be updated with new versions corresponding to new
releases over time.

It does not contain the proprietary applications Tesla has built on top of
this system image such as the actual Autopilot software stack,
Nvidia proprietary binaries, etc.

Work is underway on preparing sources in other areas as well, together with a
more coordinated information page. We wanted to let you know about this
material as it is available now while work continues on the other parts.

For further questions, please contact opensource@tesla.com.

[1] https://teslamotorsclub.com/tmc/threads/tesla-releases-some-...
You have a remarkable conception of what life was like a hundred years ago.
Allow me to present an intangible analogy to illustrate... If I see a chair at ikea and they own a patent on it and I go home and make a chair based on their ip, but don't commercially manufacture and distribute it then did I steal a chair? If it is stolen what have I stolen exactly?

I guess my point is that my point is that ip is a liscense to manufacture and/or distribute rather than a total monopoly on the idea or demand for the product.
I'm pretty sure lawyers and "consultants" are the only ones super happy about GDPR. Companies will still harvest user data with updated T&Cs and more buttons for the user to click, because all services will be useless without accepting. Governments will also continue gathering users' data for "the common good".
Why would anyone in their right mind try (or even want to try, except as a lark) this?

"...The input of Hastlayer can be a program written in dozens of programming languages (including several of the most popular ones as C#, C++, Python, PHP..."
Hey, thank you for that. I really needed this motivation at this point in my life as an EE (RF, RTL and PCB level).
No. This is very, very clearly set up for the sole purpose of extorting money out of the people who's mugshots they publish. There is no other reason for this site to exist.
> but at least this way if the developers are working a late shift because of a rash promise they’ve made, they are the authors of their own misfortune, which is easier to bear. It’s a social contract: we give people control, they accept responsibility.

Congratulations, your lead developer is now a middle manager.
I've never been a fan of "committing to a certain amount of stuff done by the end of the week" as in scrum sprints. It's a zero sum game. Sometimes you do 3 days' worth of work in an afternoon and sometimes finding an extra semicolon takes 2 days...
Spot on. The biggest problem cases are hospitals, banks, insurance companies, airlines and - funny enough - governments. They all hold mountains of data and the systems are old and in many cases no longer maintained by anybody that was there when the system was first created.
This is eerily similar to the concept of a 'cookie' seen in the Black Mirror episode, White Christmas.

(Spoiler Alert)

A cookie is a device "that is inserted under the clients head by the brain and kept there for a week, giving it time to accurately replicate the individuals consciousness. It is then removed and installed in a larger, egg shaped device which can be connected to a computer or tablet."

Highly recommend this episode for those interested: https://en.m.wikipedia.org/wiki/White_Christmas_(Black_Mirro...
And I find it equally disgusting that you think users' feelings are more important than webmasters' property rights.
Note that I didn't say IPs aren't PII; I said they don't count as long as you are collecting them for the specific purpose of security and don't have any way to identify the person using that IP. Pretty much by definition that is not PII.

That came from the legal departments from our German, UK, and French entities.
I believe the flow of info goes:

phone--carrier--LocationSmart.

The carrier determines the location of the phone because it's a cell phone. The Carrier provides the information to LocationSmart. There's no querying of the devices by LocationSmart per se.
The Roman Catholic Church does not recognize, in a doctrinal sense (obviously, it does in a secular material sense) the existence of any other Christian Churches [0]; it takes the “Catholic” in its name quite seriously.

From the doctrinal point of view, there are no non-Catholic Christians, just Catholics of various degrees of imperfection, is and everyone who intends to join Christianity, or to join someone else to it, intends joining to the Catholic Church as the two are identical and coextensive.

[0] it does recognize particular churches, but they are part of rather than separate from the universal Church; in addition to those in full communion with Rome, these include Christian communities who are out of Communion with Rome but who retain valid episcopal apostolic succession, including the various Eastern and Oriental Orthodox Churches, among others.

> Generally Protestants don't recognize the authority of the church at all (i.e. Sola scriptura).

Sola scriptura is a doctrine of a subset of protestantism; there are Protestants who don't adhere to it but instead to prima scriptura, or to doctrines that aren't clearly either. It is certainly not the case that Protestants as a whole reject ecclesiastical authority.
There are two sentences there.

A lot of people are claiming that a DPO is required. GP is saying that a DPO is most certainly not required and that the claim [that a DPO is required] is simply untrue.
No, you are wrong.

1. Enforcement is not arbitrary, but like all regulation the goal is compliance rather than punishment.

2. The idea is good, and the implementation is widely regarded as good by anybody familiar with data protection regulation.

3. Most of the panic seems to be from woefully misinformed US tech companies.
I fail to see why it should hinge on whether I publish first and ask for payment to take down, or if I ask for payment to not publish.
The calls were likely edited. As far as two-party consent, maybe they called businesses outside of California... maybe they got consent after the call. Either way, something still seemed weird about the calls.
> so as long as they didn't make the exact claim

There's the rub, they did make that exact claim...
Babies' milk-drinking actually also has an effect on jaw development, because of the pressure generated when suckling on the breast.

Think about the mechanics of breast vs bottle feeding: while superficially similar, one requires the child to draw milk out of a breast by generating suction, while the other allows them to mostly passively receive milk delivered via gravity.

http://www.sparkledentaljoondalup.com.au/Blogs/Sparkle-Denta...
Ethics do matter.
How is knowing and writing down what your actually do with user data (and employee data, btw) and who is responsible an onerous regulation?

In a world where lots of small shitty businesses (and some bigger ones) don't care what happens to your personal data it's long overdue for this being finally regulated.
This is going to sound crazy, but I spun up an instance of a simple open-source comments system[1] for a blog that I write, and I chickened out of deploying it because I wasn't sure if it complied with GDPR. I distrust Disqus over their ad-driven model and deep tracking of users, so for now I’m just doing without comments.

Is it possible to self-host something that handles user data (name, comment, IP address) and comply with this regulation? What if there's more data, federated data? Can one just spin up an instance of Friendica, for example, or are there additional steps required for compliance? I'm honestly not sure anymore.

[1]: https://posativ.org/isso/
It is up, it just happens to be serving an error message instead of the content you want :)
I think you are right but introducing a new paradigm (usually smart) over a standard operating model is a mistake.

These are all problems we have solved for years before without the technology so there are established ways of handling the situations. Adding complexity and a different way of doing things actually makes it harder and riskier.

Coordinating how to use a smart lock between two people is harder than it looks.
You're reading bias that isn't there. Both were equally stubborn!
It doesn't. It says:

> Any information related to a natural person or ‘Data Subject’, that can be used to directly or indirectly identify the person. It can be anything from a name, a photo, ... or a computer IP address.

Emphasis mine.

I said:

> IPs don't count as long as you're collecting them for security purposes and don't have a way to identify a person using the IP.
Unless you consider the company's reputation and good will a resource...
I'm not certain what the actual product uses, but the LocationSmart demo posted here last week had three data sourcing options: "[Cell Tower], AGPS, Best Available"
One of the few news articles that make feel a bit nauseous. What’s stopping organizations from doing warrantless tracking?
Did you find that it was carrier- or model-specific?

When I tried their own trial (before it was taken down), they were unable to locate my iPhone on AT&T.
Mind the Skills Gap: Treating the Root Cause
I don’t think developing a solid and complete blueprint at the beginning of the process qualifies as agile.
None of this is caused because of them using a dynamic language. It's caused because the developers used a function literally called "dangerouslySetInnerHTML" that doesn't escape HTML. That's it. It's just lazy programming.
Here's your problem, you have 6 lawyers.

If you're too worried about this, remove the last octet from the IP or and/or it with a mask. And especially don't associate the IP with the user (by default you can't find out who's the user only by IP).
I think .su is still a thing, but not being assigned anymore.
No. Compliance with GDPR for a small company is relatively straightforward if you aren't doing anything shady with private data. It's not even an unknown.
there is plenty of secure software written in javascript. poor engineering can occur in any language