skysight-inc/HackerNews huggingface dataset:
Don't make me provide my email address.
The article claims it includes app visits: "Since then, total monthly visits to Facebook in the US (both on the web and through the mobile app) have fallen [by 3 billion/month]."
Why do you think only 10 million miles have been driven with Autopilot? This article says a billion+ miles have been driven with Autopilot cars: https://electrek.co/2016/11/13/tesla-autopilot-billion-miles...
Fraud, speculation, and drug trade. Don't forget about the drugs.
It is impossible to sell raw-milk cheese in the United States. Are French cheese makers overreacting by simply choosing not to do business here rather than change their centuries-old production techniques? It is illegal to sell kinder eggs in the US, because of some law that involves children accidentally swallowing toys. Is Kinder overreacting by refusing to sell those candies here? You cannot buy Bovril in the US, because of a panic about mad cow disease from 20 years ago. Are the manufacturers of bovril overreacting by refusing to create a separate production facility that uses only beef sourced from outside the UK? Compliance with laws outside your primary market has a cost, and potentially a benefit. Every business, large or small, is going to do that cost-benefit analysis, and make their own decisions. As an american I can hardly blame the Kinder people for failing to provide me with convenient access to chocolate eggs containing plastic toys. It's my government, and the laws they've put in place that have had that effect.
Yes, the void will be filled by megacorps like Google who were practically GDPR compliant 5 years ago because they have armies of developers and lawyers dedicated to data management and legal compliance.
> [Complying] with the law is stupidly easy: know the law.

You're out of touch.

Compliance just isn't as simple as you think it is no matter how much you double down in these comments. Laws aren't black and white. Do you not use an accountant, either?

Frankly, your advice is terrible.
For jobs to be created (presumably in startups) , there must be startups first. Startups won't be started if you need to hire 1 full time accountant (for the VAT mess), 1 privacy person and 1 lawyer before you even lay down your idea. I get it that GDPR is creating some nice jobs these months, but it won't last long. I wonder if this guy would even make the app if he was in the EU today.

I am all for fair taxation and privacy, but the EU should start creating the mechanisms that make it easy and automatic for startups to comply with stringent requirements instead of leaving the burden upon them.
Why do you feel entitled to invasive tracking of users?
It's not clear to me whether Rome accepts Christians who completely reject its authority. The central point of Lutheran Protestantism is that it's open source: anybody with a Bible can decide for themselves how to implement it without asking for permission. Of course there's value in a community of believers but the requirement is just to gather "two or more".

I guess Protestants have a harder time deciding who's a Christian; probably acceptance of the Nicean Creed is a popular standard, though I prefer "anyone who seeks to imitate Christ".
I’d apply, but I dont want a CS degree.
I think there's a lot of truth to what you're saying, and also a fair amount of angst that's pointed the wrong direction. I've never worked with Atrium, but yc was pretty much the ultimate leveling mechanism for founders with no connections.

Yes they get you access to elite networks, but they _also_ level the playing field so founders don't get exploited the way they used to.

And, they're obviously doing well because of it, but I don't think they're perpetuating the elitism. If anything they've lit a fire under other investors asses to get them to start making more objective decisions about funding. There are a bunch of really good seed funds now that are really easy to get ahold of.
The rate of high-quality content being added to the internet has surely been on the increase as the adoption of the web increased, even if the likes of clickbait and spam grew faster, shifting the "average" quality down.
Facebook was a lot more fun when there was a chronological timeline of non-rich-text status updates and comments from friends. These days it's all semi-spam from pages and random week-old friend's FB activities being surfaced in a poorly targeted fashion. I know there are interesting posts by people on my friend list but they're simply being hidden. Maybe some fb developer was happy with increased engagement metrics merely caused by confused users forever scrolling up and down in desperate attempts to find out where all their friends whose posts used to show up have gone.

And when actual friends' posts show up, 90% of the time it's a like or a share of some uninspiring web page's article with no comment.

It's like it's become digg.com curated by your non-techie acquaintances, with a bonus ORDER BY RANDOM() thrown in for good measure.
You really only need hands so you can see what you’re interacting with and how you’re interacting with them.

I think if we had some other way of controlling your avatar/viewpoint, such as some kind of direct mind interface I think you could put people into nearly any kind of body at all and they would adapt.
JavaScript may have many problems, but I don't really think security is one of them. In a properly isolated sandbox, such as a web browser, it's much more difficult to gain arbitrary code execution privileges than a native desktop app.
Have you considered that a law being "flexible" and "able to move with the times" is exactly why someone wouldn't like it being vague? A law that is "flexible" means that it's a law that can be arbitrarily applied. A law that can "move with the times" means that what might be fine now won't be fine later and just maybe you will be the first to find out.

It doesn't matter if European law has a history of being "principle based", if it can fuck you then someday it just might. Europeans might be fine with this, but I think most Americans would not be. If I was in OP's position I would do the same thing, by simply blocking an IP range all possibility of being made an example of by some people from another continent is flushed down the drain. I'm absolutely baffled why people think this is absurd, if you're not even making any income off of it, why would you ever open yourself up to such expensive potential liability?
Almost every single movie by Martin Scorsese would say otherwise.

Seriously, though, Catholics and Protestants? There was a reason it was a big deal that Kennedy was the first Catholic president.
In the article it is speculated the main patient didn't get better during the initial course of treatment because the bacteria infecting him resisted the multiple phages they used to treat him - they were all variants of the same vector of attack(that worked in the labs on the bacteria in question), and the researchers had to find different phages to continue treatment, so they came across resistant bacteria immediately.
It's true. You're making a ton of unsupported statements.

Is it so crazy that they would have two teams, or more, working on something like this? Not really, especially if you're familiar with how Google does things (how many chat apps have they had? do you think those were from one team?).

You're making statements like they're facts but you haven't backed anything up at all.

There is no concrete evidence supporting the theory that the demo was faked and you have multiple, hard accounts even just in this topic, that Googler's have been using this service already. So everyone is lying?
Bot DAU's are a fraudulent metric. FB ( and other social media sites) have been using this for quite some time to inflate their performance.
The scariest thing is that you can still buy this data legally. No vulnerability required.
This is such a terrible argument. You’re essentially arguing that any business of any kind should never complain or choose not to do business in a jurisdiction if the reason is regulatory burden, no matter how onerous, expensive, ambiguous, and offensive that regulation is.

That’s illogical and not the way that any business evaluates what activities to pursue or forgo.

You’re casting aspersions on this one guy and implying that he must be up to something shady, all because he’s chosen to not serve a market that has decided to pass some horrible regulation that you happen to like. Unbelievable.

You can’t have your cake and eat it too. The EU can pass whatever laws they want, but the rest of us are still free to tell you to pound sand.
I just tested it in Python3:

def foo():
exec("a=1")
return a

print(foo())

Fails with a NameError:

Traceback (most recent call last):
File "test.py", line 5, in <module>
print(foo())
File "test.py", line 3, in foo
return a
NameError: name 'a' is not defined
Well - you haven't refuted any of his core points wrt DPO, Push & XMPP. All your comments have been stated in an aggressive tone which generally is a negative signal. At this point, I feel you need to provide more context to your core points vs. just saying read the GDPR and comply with it (or that you should have already done 2 yrs back). Even companies like Google and FB are complying with it in the past month.
"Getting to use a website for free in exchange for your browsing data being analyzed is a great deal and a win/win for everybody."

Which is why you are perfectly capable of giving consent to other websites to do that.

"Surely anyone who disagrees with your feelings on this matter must be a sociopath, though."

No, just those who insist on a "take it or leave it" approach.
What do you live for?
Relatively deep question, but I'm curious what people say.

What do you live for? Your family/friends? Some sort of responsibility you have? Do you get fulfillment and meaning from work? Or volunteering?

I'm really curious.
It's getting a lot better but still not what I'd call remotely polished compared to iterm2 on mac, or even terminal.

Copy/paste is still somewhat janky, as well as window resizing and the like. If you move a window around now and hit enter in the console, it resizes the window vs. terminal. Just little things like that which make it much less productive than current alternatives.

I basically still rank it as a "decent emergency shell" but not something I'd use for a daily workflow.

I hope it gets better. My goal 2 years or so ago was to ditch securecrt so I could use a mosh client - but windows terminal was nowhere near good enough both for hi-dpi support as well as just decent 256 color support.

It's come a long way since then, we'll see if the trend can continue!
Any laws that have the potential to reach me I am compliant with. If there are countries with laws that strike me as idiotic - such as anti-blasphemy laws - then I will do my level best to be informed of that beforehand and I will not break that law even if I feel that it is idiotic.

And as for the 'don't insult the monarch' law, we have that law here in NL and I purposefully broke it as a private individual to make a point.

The tax regime of every country in the world has no impact on me, I reside in NL, my businesses are here as well. But when I had several businesses in Canada and one in the USA I complied with the tax laws there too.

> The creator of Monal has decided the easiest way to be compliant with another country's laws is simply not to do business there, and I think you're underestimating the difficulty of the alternative (trying to comply with every country's laws).

He's taking the easy way out because there never was a real business behind this. This is my conclusion because he feels that his holidays are more important than the rights of his users.
If its my wife calling about my son going to the hospital, you are damn right its important enough.

Stop assuming the meeting is more important that people’s lives. In fact, I say the meeting is less important.

If a boss did that, I’d leave and find a new job. I’m not a 5 year. I’m an adult. I will be treated like one.
Perhaps it's not obvious to the author of that software, but publishing products (even free ones) involves liability. You cannot simply say, "Well I didn't charge you!" A free product can still be the subject of a fraud lawsuit, or a negligence lawsuit, etc.

And I think this is as it should be. I'm not sure why people think software meant for use by a broad audience, however cheap, should not be subject to basic safety, security and privacy regulations.

What's more, it's pretty clear the author doesn't actually have a lot of GDPR obligation. They need to maintain a contact point which Apple is actually doing for them. They need to forward RTE requests to crashlytics. If they're doing ANYTHING else with personal data, that's shady as hell and I'm glad they're not doing it to EU citizens anymore.
Right, just because some proto-scientist in a primitive ivory tower had observed two goats fucking, doesn't mean the common person had access to that kind of knowledge.
Well it would probably add a bit of time, and there are also cases like someone is kidnapped, the phone is still on them, but obviously we can't ask them to opt in right now. Not that any of that would justify having a system to sell your location, but presumably they thought they had it locked down so that consent was required (which it apparently was for XML version of the API).
Free speech of a webmaster being infringed by not allowing them to repeat information that their users gave them. Easy.
A properly sandboxed desktop application is no more dangerous than an iOS app. Of course, Chrome doesn't work in that sandbox, and they're using Electron, so this doesn't quite work.
> newer LTE Data devices don't even have GPS, which would make locating a device harder if your a cellular carrier.

Nope, AGPS isn’t required. At any given time, multiple cell towers can hear your devices signal. In the rare event it’s just one, you still get a surprisingly accurate location due to a quirk of cell towers (there’s never just one antenna, except for small cells in places like subways, it’s usually three or more using sector panels). Given a 120° direction (or less) and a distance based on time of flight, you usually get within a few blocks in most cities, and that’s without factoring in triangulation or other more advanced localization techniques. One carrier (maybe more) has the ability to localize a person with a range of ten feet (not everywhere, but enough places to turn it into a product they sell), which is generally more accurate than AGPS.
Is that £250 each just for GDPR compliance? That's one law in one region. Now multiply it by the number of legislative bodies worldwide and the number of relevant laws passed by each - how much does that cost?
It's not irrelevant, it's a fallacy to attack the messenger as opposed to the message.
> pretty girls posting selfies of themselves doing nothing interesting, or dudes with gym photos, that kind of thing

That's Instagram.
> Well, that is for one simply completely impractical, those people are few compared to the amount of software the world needs and also very expensive. But it's only one of many reasons why there are better approaches so let's move on.

How many years of expertise do you think architects of large buildings probably have? Engineers of critical bridges and other public infrastructure? One thing we need to do is stop aging out our best talent.

> Many detailed requirements have, as matter of fact, been very visual, with detailed user interface mockups, process diagrams etc. When they are large in scope, they have been found not to be useful compared to the effort required to create them. When they are small in scope, they are actually used in real world agile software projects.

> And, I have to ask something about this process where extremely experienced people create detailed visual blueprints for the entire scope of the project and then deviate very little from it. Is it something you've actually seen produce good results (repeatedly) for your run-of-the-mill software projects?

Absolutely. I have a 100% success rate using these techniques with over 20 under my belt. Granted, I'm mainly a solo operator but I've used it for larger projects too on occasion.

> Well, every time you give concrete proposal about what to do in the face of uncertainty it sounds exactly like agile.

The difference is time frame and phasing. Consider deciding to enlarge a kitchen in the middle of building a custom house. Now compare that to an addition to an existing home. They are very different situations.

> That would, again, be agile. And I say that as someone who is not even particularly fond of of most standardized agile processes, such as scrum.

The difference again is the time frame and the phasing. Messing with the scope/design every week I think is an anti-pattern and a contributor to project failure.
Alexa – I need a haircut (demo included)
Yeah, I recall a thread earlier this week talking about a large divergence in how resets where handled between FPGAs and ASICs.

It's a interesting space for sure and I'm definitely curious how these hybrid systems shake out.
> I think the current situation in Europe, and other instances of mass migration in history, demonstrate that not all cultures are compatible with each other.

Japanese Americans?
Chinese Americans?
Indian Americans?

Plus, the very concept of some sort of empirical “cultural incompatibility” seems highly questionable. I mean, it’s not like cultures change over time or anything like that.
> The UX of the main menu, however, is terrible. Scrolling through it is incredibly slow because the submenus are synchronously expanding while scrolling, and I've had a submenu get so stuck I had to refresh the page to be able to interact with anything.

Thanks for the feedback, fixes are on the way for the issues you mentioned. :)
I am the primary maintainer. :)

A minimal implementation could be much shorter, but the ref implementation is not minimal and includes a lot of features that go far beyond the scope of WireGuard.

Salsa20/12 is standard and according to the docs is considered secure. I recall that DJB initially specified the cipher with 12 rounds but added 8 more for margin. There are Salsa20/12 implementations in many crypto libraries. The best public cryptanalysis on Salsa breaks 8/20 rounds with a time difficulty of 2^251.

Personally I think concern over algorithm strength is usually misplaced as long as you're using an algorithm that is not known to be very weak (e.g. DES, RC4). Halfway decent cryptographic algorithms are almost never broken. Implementations and protocols are broken all the time.

One thing we did to guard against protocol issues was to implement what DJB calls "boring crypto." The cryptographic encapsulation is dirt simple Salsa20+Poly1305 constructed exactly as in the NaCl secret box functions, and nothing more. We've resisted adding more advanced features to the cryptographic layer because so far they haven't really been necessary and the risk is not worth the small benefit they may have.

At the time this was designed (started in 2010) Salsa20/12 was the best option to achieve high performance across a variety of devices including ARM phones and slow VMs with a clean and small code base. If it were written today it would probably use ChaCha20 (faster) or AES-GCM since almost everything worth mentioning has hardware AES now. We will likely rev the crypto at some point but would also like to upgrade the asymmetric cipher as well. Waiting to see if the Goldilocks curves (curve448) get added to the NIST standard. They are proposed but not yet approved. If they are we'd probably go to curve448+AES256-GCM with a longer IV.

That being said we're not solely oriented toward crypto and generally tell our users not to rely on network crypto as their only line of defense. Network crypto is sort of analogous to hard drive encryption. It protects you from people who don't have access to anything, but won't save you once someone gets any access beyond the perimeter. We advocate the use of encryption and authentication within networks as well if you care about security. This also guards against the discovery of a bug in any layer-- if someone breaks one layer they are confronted by another layer.

An RFC-style write-up has been on the to-do list forever, but the to-do list is very long.
You should not have done that.

* http://jdebp.eu./FGA/dns-use-domain-names-that-you-own.html
Incredibly out of touch. I can virtually guarantee that a regulator or prosecutor who wanted to make an example of him could tear his business apart finding violations over 30+ years.
So... like twitter then?
I guess it reads as a little gross or awkward on the surface but those are all signs of people who are feeling lonely or powerless.

When you’re really turned off by a post (or posts), try flipping it the other way around and see if you can feel your honest concern. Don’t patronize the person and make a big deal of the post, but act constructively: reach out and say hi and share the things that you like about them.

And if you can’t feel moved to do that, that’s fine. You’re not obliged to do anything. But it just might make you leave less grossed out and it might do your friend some good.
Ignoring the recent LocationSmart revelations, if you disable location access you should basically have the same level of geospatial anonymity.
How is a subspecies defined?
> Only niche local providers won't share with these types of companies.

That is what I am looking for! Do you know where to find those providers?
Please don't post this to Hacker News.
I think this has been since debunked, with a retraction from Nature no less.
Loaded question. I don't consider targeted ads etc. invasive.
> didn't have a religion that promoted extremism and placed them at odds with the existing inhabitants.

You mean like European Christian colonizers and the indigenous peoples of North and South America?
Again - no substance in your points. Rebut his core points if you understand GDPR so well.
Does Duplex neccessarily save recordings? i.e. does it save actual recordings of the called party's voice, or does it do real-time voice to text, never saving the voice after it's decoded?

Sure, there are going to be some ephemeral copies made in codecs, DSP's and such, but my cell phone does the same.

Google may want recordings so they can evaluate the system after a call, but they don't have to make them.
.local actually has two conflicts.

* http://jdebp.eu./FGA/dns-use-domain-names-that-you-own.html
You don't need a 'full time accountant' for the VAT mess, I've been doing this for years (decades) and it took about 2500 euros / year / company for the full administrative burden, including payroll for up to 25 employees.

You don't need a privacy person either (I suspect you mean DPO), but you do need to know what you are doing.

> I am all for fair taxation and privacy, but the EU should start creating the mechanisms that make it easy and automatic for startups to comply with stringent requirements instead of leaving the burden upon them.

That I agree with, it can still be better. But VAT/MOSS took the sting out of the VAT reporting and the privacy law is entering a shake out period now and will also end up to be manageable.
? I've got 34 technically. Behind my wisdom teeth I have little buds of teeth which can never surface (not nearly the size of a full wisdom tooth/molar) Supernumerary I believe it's called. I happen to have a pretty long jaw, so still have my full set of wisdoms surfaced.
Funding Blockchain Ecosystems
> The carriers most likely keep a database of most recent location of their customers based on customer phones pinging towers.

You can strike “most likely” from your statement. Carriers definitively do this.