skysight-inc/HackerNews huggingface dataset:
Here are two recent decisions from the UK. The ICO has a maximum £500,000 fine available.

In one a company was handling sensitive personal data (medical data). They're required to register with the ICO. They did not do so. The sceptics would claim they got huge fines. They didn't. THey got a letter asking them to register, with no further action taken. ICO released a statement.

Last para here: https://www.bloomberg.com/news/articles/2018-04-26/u-k-healt...

In another the Crown Prosecution Service lost data in the same way they had previously lost data: they sent unencrypted DVDs through the mail and those DVDs got lost. The DVDs contained victim interviews from children who had been sexually abused. It's hard to think of worse: very sensitive data, transmitted in a stupid easily fixed manner, and a repeat offence. Even this didn't attract the biggest fine. They got a £350,000 fine.

https://ico.org.uk/action-weve-taken/enforcement/crown-prose...

We have over 20 years experience of regulation. We're not making this up.
>game that replaces your hand with the object

Yeah, this is the common practice.

But by "attaching eyeballs to your hand" i though he meant decoupling the camera from HMD tracking and attaching it to the controller tracking. Like you move your hand and the view changes. Something similar to The Pale Man from Pan's Labyrinth [1].

Research shows[2,3], that brain adapts to the unusual perspective quite fast. So technically, after a while, the brain should accommodate and it would start feeling "natural".

[1] https://vignette.wikia.nocookie.net/slendermanconnection/ima...

[2] http://www.yorku.ca/harris/pubs/adria_inducing_preprint.pdf

[3] https://youtube.com/watch?v=4PQAc_Z2OfQ
Setup your Roku account in gorokuwireless
If you actually care about privacy touching the US in any way, shape or form is very, very dumb.
What ? It's the opposite, it allow you to access and delete the data, even if you gave consent one time.
And your image concern a lot of other old laws, even if you sell it you can get it back later.
Which raises the best question: how would you exploit someone not escaping single quotes? I do not know. Perhaps it isn't possible.
I think you do have a good point. Of course it's not reactionless like the EM drive, but in practice, what's the difference? Both require a power source and both can continue providing thrust forever without running out of reaction mass as long as they have that power source. Even the EM drive, if it works, would still need an RTG or solar panels or something to power it, and that would still limit its use for interstellar travel.
John Doe says company has personal information on him and doesn't want to delete it. Shows email exchange with the company and company is stating they don't have his personal data, so there is nothing to delete.
How do they judge the case has a merit?
Let's say a group forms on xchan type of site and flood company and "clearing house" with such claims.
If you care about privacy, don't host it on US infrastructure. There has been so much exposure about this, that should have been enough to teach you not to burn yourself.
I read the article and was on the side of the scammer. He wasn't scamming old ladies out of their savings or anything, just a kid having a good time by spinning a story.

The only bit that made me cock an eyebrow was when he pocketed the $10k for the charity.
A Truly 'truly' Decentralised Platform to Manage Compute Power of AI/ML Training
A couple of bright minds from around the world recognises that true decentralisation of AI/ML training cannot be done unless the compute power required to do that has significantly become inexpensive. How do you do that>? A blockchain empowered compute power sharing platform called Raven Platform
The $300K/yr. recruiters I'm thinking of are not people who have some out-sized reputation, at least not as far as I'm aware -- I think the economics of the business simply allow them to make a lot of money if they can regularly place a small number of candidates each month -- see my reply below to another comment about how I figure that might work.

*

I do know one recruiter who truly does have a good reputation, but not for the reasons you suggest -- I met her years ago and while I haven't seen her for a while, every so often over the years, I'd be talking to someone about job-hunting and they'd say they knew a good recruiter I should talk to and, inevitably, the name they'd then mention was hers.

And I don't think she did this by networking or attempting to create a higher profile or becoming an authority or by convincing people she had access to top people at top companies. I think she's just done a good job for people and so those people feel good about her and therefore about recommending her to others. Someone like that might be worth paying a lot to -- for all that good will in addition to her skill and experience.

*

BTW, it occurs to me that the first $300K recruiter I met told me he ran a Python user-group out of his offices -- and perhaps that wasn't the only group he did this for. That kind of thing, obviously, can help a recruiter become known to developers, but, again, not because of having an out-sized reputation -- rather, by just being around when developers congregate, giving him a chance to introduce himself to them, face-to-face. (I don't know how much business hosting such groups actually brought to his firm, but it obviously couldn't hurt).
But the argument is kind of stupid. It would have made a little sense if she said something like "Cave men didn't ate candy bars" or something like that..
Switzerland, which has one if not the most dense rail networks in the world at 126 m per km².
That's why the GDPR talks about residents, not citizens.
The popular creation story of astronomy is wrong
Might it also be they notice headaches and such more often because they're paying more attention than usual on anything they might feel? I mean I'm sure I get slight headaches I can easily ignore from time to time.
I am not trivialising, just pointing out that state is capable of doing unimaginable things.
Some details about byte slices and rune slices in Go – go101/go101 Wiki
These are excellent questions that you will have to have shown you've considered if you get audited. If there's disagreement with the regulator, you'll come together to resolve it, and then may need to appoint one.
Except for cars, those who obsess about cars are considered the antithesis of a nerd.
> You cannot store a users personal data like IP or cookie id unless you have consent from the user.

This isn't right. Consent is just one of six legal bases through which you can lawfully process data under GDPR.

https://ico.org.uk/for-organisations/guide-to-the-general-da...
I personally am not hysterical about any of this, I just am concerned for the citizens of the EU while living under this law. My main issue with the GDPR is that articles and supporters are constantly thinking in terms of "business" and not in terms of other services, and also not thinking in terms of long term impact.

For instance, I run a small community website (~30 people). I receive no income, and I know everyone involved. Everyone is in the United States. Is it open to the world? Yes, technically. What happens when an EU resident signs up? Well, I'll continue to do exactly the way things are currently set up.

How does this situation play out long term? First, I'll tell whomever contacts me that I am in compliance with US law, and I'm a US citizen. I do not have to follow their laws because it's not within my jurisdiction. Second, they will order me to block EU citizens from my site, which I will not do because it's a mandate of work on me for no reason by a foreign country.

So what happens in this situation? The only recourse for the EU is the internet version of "sanctions", to block my website from the EU.

Now they've set a really interesting precedent. How do they now enforce these blocks? Technical issues aside, are they going to do a whitelist or a blacklist? Regardless, they are setting up the equivalent of the Great Firewall for the purposes of maintaining the GDPR.

So why does this matter? It's only an isolated incident that will likely never occur, right?

Wrong. One community website like mine with one EU citizen that decides to file a GDPR complaint means that somehow this situation occurs. It can even be an intentional, "sign up, file complaint" immediately to trigger this legal situation. Think there aren't any foreign governments that wouldn't flood a system like this to censor the EU citizens in various mild ways? Think some random anarchist activist will not decide to monkey with the system by finding and reporting all the small violators?

The end product is a curation of the internet for EU citizens by EU government. Hopefully your leaders are benevolent, and nothing crazy happens in the democratic process. I remember being told during the Bush and Obama administrations that my views against government surveillance due to potential for abuse were unjustified because we could never have a horrible president and that our presidents will always be benevolent, so the policy would never change toward the worse. How did that play out? How do people think democracy functions, honestly?

Again, I really don't care too much. They can self censor if they want, but it really seems like GDPR is a win for Russian and Chinese meddling.
Run your small company website without gathering personal data?

No-one can sue you now, that couldn't before. I'm baffled that so many people believe this. I could complain about you to my country's regulation body. Then they could decide to audit you, and for a first offense issue a warning.

If you need the address data for marketing only, and you didn't get an explicit (opt-in) yes to receive marketing, then sorry. Get that explicit opt-in yes in the next week, or delete the data.

If you need the address data for other reasons, for example fullfilling your contract with the customer, or tax records, then keep it. But _only use it for those real reasons_. No free marketing lists. Sorry.

Storing an IP for a limited time for security reasons is fine. Have rules in place for how this data is used and when it is deleted. Don't keep it longer than nessescary.

Google seems to think you can still use Fonts. They also seem to think like they will be the data controller, and not data processor, for any user data they scoop up [1]. This seems a bit weird to me. This is the only one of your questions that I'm really not sure about. If it was me, I would just host the font locally so I was sure.

1: https://github.com/google/fonts/issues/1495#issuecomment-382...
You don’t pay them to do it. It’s not their job. In fact by default it is nobodies job, it’s just your own responsibility.

The registrar may see it as an opportunity to sell you another year of service but it is not their job.
Have anyone used Mechanical Turk for tasks that involve non-English languages like Chinese or Vietnamese?
I just water floss now. I don't think any amount of brushing can come near the ability to clean teeth like pressurized water...
Will your DNS break in 2019? [pdf]
They, and other DPAs have multiple decades of history of doing it this way. I trust that more than random people on the internet deciding that GDPR is bad because the DPAs theoretically could do it.

We have plenty of cases serving as prior judgements, and if a DPA suddenly act with a disproportional reaction, there is multiple levels of courts that can and will reverse the decision - nationally and EU level as well.
Yes, relevancy as proximity to our country/region. I think I would first hear about a disaster that killed one single person from Portugal (as a Portuguese myself) anywhere in a world than one that killed fifty from any other nationality (outside of Europe and North America).

That would be different for people around the world according to their country and region.
> You cannot store a users personal data like IP or cookie id unless you have consent from the user.

This isn't true; there's a list of reasons you can keep information and "with consent" is one of them, "legitimate business need" another: https://ico.org.uk/for-organisations/guide-to-the-general-da...

But: "However, an individual always has the right to object to processing for the purposes of direct marketing, whatever lawful basis applies."

So: you can store IP addresses as part of your information security needs, but not turn round and use them for direct marketing. (I'm not sure if web advertising counts as "direct marketing" here)
Kenyans need a license to post videos online
I know it's kind of hard to imagine coming from a US perspective, but it's "supernice" as you say for pretty much everyone in pretty much every EU country. Based on decades of precedent behaviour.
> How do you ask user for a permission

Why do you think permission is required?
If you have a lot of “members” you obviously provide the services by the automated process. Obviously the request processing could also be mostly automatic.
For $1000 you could preregister a domain for a century though.
Why not just not store these things at all?
If you have accounts, you get to directly comply anyway. Stop being drunk on cookies.

If you're talking about tracking cookies from an ad company, you better mention them in the privacy policy.
Y2K is one rare example where all the panic actually got the problem fixed. The dotcom crash was definitely real with huge job losses too.
The substance of this line of criticism is that yes, it's probably going to be fine. But if it's not, they can fine you at 4% of global turnover. They probably won't, but they literally can. "I read on a blog that they'd be nice and send me a warning first" gets you exactly nowhere in court ("very well, but what did your lawyer tell you?"). The article praises the GDPR for having teeth -- being timid can be something you are because that's your nature, or it can be something your are because you don't have teeth.

This is what risk is. Absolutely, don't panic. But responsibly managing risk means considering the 100% real and existing option of regulators abandoning their previous caution and trying out their new teeth. Perhaps they get reined in, but perhaps that takes 10 years, or perhaps it turns out to be politically convenient not to rein them in a all. There are 28 EU countries, so 28 regulators, only one ambitious rising star at one of which need to "break bad".

Yes, I agree that this is probably a very small risk. But having a calm and correct view of the fact that there is a risk is 100% the right move here. Something like every other lawyer in Europe is worried about this right now, and do think it's a bit of a big deal. Don't panic, but take the advice of a non-lawyer's blog over your actual lawyer's at your own extreme peril.
> then again it is a business and costs of doing business are the norm.

Does a cost become acceptable because it's the norm?
Super over reaction. "End of an era"
A suicide in Gaza
Sure. My point was not only did Elsevier see the "tsunami" coming, they also prepared for it profusely. Using a combination of legislation, regulation, lobbying and technology.

Obviously any company can fail. I'm just offering a little inside information that pushes back against the notion that Elsevier is a static, dumb, backward-facing entity, taken completely by surprise by this new-fangled thing called "open access". Not the case.
I kept hearing yanny even on full laurel, then I tried thinking "laurel" and there it was. ... Ok, when I imagine myself talking with a deep voice I hear "laurel" even in the middle where "yanni" was super clear. Strange!
The U.S. has been doing this for decades, applying U.S. laws to global citizens who happen to travel to the U.S, and I'm not even talking about kidnapping foreign citizens and taking them to Cuba.
It takes time, and real money to be compliant, and getting slow on this quite plausibly can make one a repeat offender. You can, of course, say "don't be slow then", however, when for an out-of-EU entity (be it biz, or NGO) simple math doesn't show it is worth the effort, then it makes perfect sense to stop offering services to EU. Which is a side effect of the legislation. OP apparently understands it puts GDPR in a bad light, so he says about "overreaction" in every topic related, and this post is likely comes as the response to the latest one.
> Fun aside: if you store it on paper you're not beholden to GDPR. Crazy.

Do you have a source for this?

From some quick googling that doesn't appear to be true.

https://www.orsgroup.com/news/compliance/how-the-gdpr-affect...
https://www.winterhawkconsulting.com/4946-2/
https://www.p4p.uk.com/gdpr-compliance-paper-documents/
Bitcoin Threat to Planet via Carbon Emissions
There's No Good Explanation for Why Ozone-Ripping CFCs Are Back
No, people were correctly answering the specific question: is an IP address on its own personal data? (No, it can't be used to identify a natural person).

THe problem is that it's a stupid question. No-one has just IP addresses, they have a mix of data. If you can combine the IP address with anything else to identify a natural person it becomes personal data.
So how do they know if the response with the data a user requests, are all we've got about them, and if indeed where stored the proper way?
I don't know how it works for others, but my migraines are closely linked to my diet. Certain types of foods, especially anything related to dairy or fermented things, somehow seems to trigger day-long migraines.

Simply eliminating these from my diet has helped cut down migraines from 2-3/month to 1 in 3 months
Challenge yourself today, are you a math genius?
If NeXT hadn't been bought by Apple and the operating system hadn't become the basis of OS X and then the iPhone, it would have been no more than a trivia question. But since it is running on over a billion devices, I think most tech savvy people know about it.
Ask HN: What killed IA-64?
One question that I have thought about is how are foreigners supposed to learn about the GDPR's existence? If it wasn't for the fact that I spend more time on HN that I should I would never have heard of it. I doubt there are many businesses here in Australia that know about it.
I don't work on these radar systems, but have played a lot with ultrasound for robotics. It seems possible these radar systems give almost continuous false positives. You could get a pretty strong return from potholes, slightly sunken drain covers, etc. Using doppler to reject any return that matches the car's own road speed just leaves the returns from moving vehicles. You can then track speed vs distance to sanitize that data. It becomes a tractable problem then to detect that the car in front is slowing quicker than you are. But telling the difference between a stationary car and a slightly misaligned bridge expansion joint is probably not trivial.
I used proxies to make a fun library where you can call arbitrary functions, and it tries to make the function based on the name. For instance

declaraoids.findWhereNameEqualsX(persons, {x: "Mats"});

It will generate the function on the fly.

https://github.com/Matsemann/Declaraoids
> But GDPR enforcement is incentivised by large sums of money, for an organisation that is technically bankrupt.

What do you mean here? It seems to be about suggesting that GDPR is about getting the fine money? Elsewhere the law is quoted where it states the fine should be appropriate to be effective. So even if you don't trust this there's legal ground to back it up. Secondly, why is the EU technically bankrupt? Or is this a theoretical organization?

Appreciate some clarification because currently the sentence I quoted is too open to interpretation.
A Surgeon Turned Entrepreneur Shares Life Lessons
I'm not making that argument. It's a reflection of how the law is about expanding government power without considering technology.
Was looking for something exactly like this the other day! No idea this existed, this will especially be great while stubbing/mocking in tests.
https://en.wikipedia.org/wiki/Oil_pulling#Effectiveness

There is no good evidence that it does anything.
I run a soup kitchen, doens't mean I can ignore fire regulations, or health codes
> The candidate gets back a formatted dump by email of all sorts of recruitment data, including interview notes, etc.

Interview notes would not have to be turned over to the candidate. They are personal opinion of the interviewer even if they mention the candidate. GDPR protects that data: you may not disclose it because it would violate the rights of the interviewer.
I guess if you have to ask that question you are not a large scale.
Is that a GDPR issue, or a copyright/"release" issue?

(note that privacy and GDPR issues apply differently for children)

> natural rights to their data which they would otherwise have

This is not a thing. Data has traditionally "belonged" to the entity doing the recording of the data.
Fun ways to render business metrics to dev-team's everyday life
Did you experience unusual and fun ways to render the boring business metrics in the dev-team's office.
Something mapped to emitting but not limited with color, sound, vibrations, movement.
I've been doing a bit of consulting work on the GDPR and for the most part small sites aren't going to have a lot of headache dealing with the GDPR requirements.

Typical, simplified, workflow (varies):

1) Review what data you collect and why

2) Document these in an updated privacy policy along with third parties you share data with and why

3) Update all forms on your site collecting personal information

4) Update your cookie policy and the way you handle cookies, for some of these you might need consent, for some there might be exemptions

5) If you expect this to be an issue, set up automated means of handling requests pertaining to data subject rights, otherwise process them as they come via email

While some smaller sites are getting around the need for an EU rep by claiming that they are only processing data occasionally and not on a large scale (whatever that means, as it's not defined by the GDPR) there is a big problem with getting an EU rep, because as opposed to a DPO, which doesn't have liability, your EU representative "should be subject to enforcement proceedings in the event of non-compliance by the controller or processor." making that natural or legal person liable, so you won't be able to easily outsource this.

If you have set up shop in the EU, then it's pretty easy to handle the aspect of an EU rep. Also, if you're transferring data between your EU and US offices/datacenters, you can self-certify under the privacy shield, starting from ~$250 per year to not have to deal with binding corporate rules or standard contractual causes, so that you can effectively make these transfers "safe" under the GDPR, along with various technical safeguards, of course.
WOW air mulls to start service in India from Dec 7
The consulting companies use exactly the same MO that Y2K consultants used. Cherry picking case studies and data sets to make executives think the sky is falling when in reality it's not all that hard to be compliant with GDPR and it really is comprehensible by an average person spending a day or 2 reading up on it.
I had trouble getting to Sci-Hub and LibGen at my uni (this was about a month ago) and I don't know if it was my uni's firewall or the recent court ruling smack-downs in earlier this month[0] and last November[1]. I just checked from home and I found https://sci-hub.tw/ and http://gen.lib.rus.ec/ work okay for me so ¯\_(ツ)_/¯

[0] https://torrentfreak.com/sci-hub-pirate-bay-for-science-secu...

[1] https://www.theregister.co.uk/2017/11/23/sci_hubs_become_ina...
Adding features to your chart on Android
I think it's a matter of performance. Compiler / interpreter / runtime will only add overhead in lookups for this objects explicitly matched as proxy, but in normal case it can go directly to the cached functions.