skysight-inc/HackerNews huggingface dataset:
Unladen swallow has never been an official attempt to solve that. It was the initiative of one guy (http://qinsb.blogspot.fr/2011/03/unladen-swallow-retrospecti...), during an internship, with basically zero support. And so google never even consdered as a serious solution.

Beside, when they took the Go decision, they were still using Python 2.4. It had poor unicode support, bad async io, no multiprocessing pool, aweful packaging and deployment story and the project of a 3.X breaking everything.

It made a lot of sense, business wise. If you have to rewrite your code base, better rewrite it in a language you control (no PSF to fight against), specifically design for your workfload, and fixing all those quirks, plus running faster and eating each memory.

Today's Python unicode support is top notch, asyncio ensure easy networking code, you can use multi-core easily, deployment is pretty much a solved problem and 3.X is running pretty much for 90% of people. You even have a hook to plug in a JIT inside CPython, waiting to be used, and Type hints to facilitate the handling of huge code bases.

Their decision would probably have been different then, although that wouldn't have made Python any easier to speed up. But if a few smart people managed to make it work, by rewritting python in python, no less, I'm sure a dedicated google team would have done great.

They did it for the slug that was JS after all. But they didn't have the luxury to be able to change the language for that. So they pourred millions into it. Not one guy during an internship.
Most small companies (below 10 employees) will refrain from appointing a DPO claiming that they don't do large scale systematic monitoring (not clearly defined).

The issue however is that for a DPO you need to avoid conflict of interest, as the DPO should be as independent as possible, even though the DPO could be an employee of the company.

Shareholders, C-level execs, employees that establish means and purposes of processing or handle the actual processing cannot be reasonably expected to place the interests of the data subject(s) above those of the company.

See article 38 for reference.
Hardcoded Password Found in Cisco Enterprise Software Again
You can litigate disproportionate fines, and there's a general requirement for proportionality in both EU law and under the ECHR.

Again, people are assuming that this is the first and only directive that has fines associated with it. It isn't. You don't hear a lot of people talking about the three month prison sentences possible for CE marking, for example - because very few of them have been handed out and only for egregious violations such as unsafe machinery that has caused injury.
Blockchainhelp
I initially stared at that with horror, but I suspect that Stack Overflow does something similar with their code snippets. If you write console.log it gets output to the screen [0]

[0]: https://stackoverflow.com/a/49968603/327074
FYI to anyone downvoting this / the OP:

I didn’t mean this to be offensive or crass. I was asking because generally security exploits are ranked by (a) severity and (b) triviality. That is, a severe bug that is extremely difficult to exploit is not as alarming as a severe bug that is trivial to exploit.

When laypeople read that a CMU researcher discovered a bug, they might assume it is not trivial. So in that sense mentioning the PhD almost does a disservice to expressing the triviality of the bug.

When a high school kid in Hungary discovered he could purchase train tickets for any price by changing it client side, non-technical people could understand it was a trivial bug. When a CMU researcher discovers a bug, they likely assume the opposite.
YouTube Music - music streaming is coming to YouTube
What kind of Python code are they migrating to Swift? On the server? If so, I'm a bit surprised they're already using Swift on the server. It's a cool language, but for Linux servers it seems really young.
The piece of text you're quoting is referring to obligations of keeping "Records of processing activities", and is not the definition of large scale, which is undefined in the GDPR.
If you're already an atheist there is no need to "try it" because you are already familiar.
The site linked in their profile works just fine with all JS disabled.
Ricochet is an instant messager that doesn’t trust anyone
Actually it's 120
It's probably not a single project, but the insights of many projects for years, finally merged on one that took a long time as well.
Facebook and Youtube both seem to obviously be optimising for the wrong metrics. It's really unfortunate, their original versions were much more fun to use and probably easier to code, but they have sufficient network effects that any disruptors will have to be not just a little but a lot better to replace them, even as their quality drops.
How Much Do You Spend on Energy?
Interested to hear how much people spend on (if any):
Electricity
Heating Fuels
Gasoline/Diesel
Others?
You can litigate disproportionate fines

Who's to say that 10% of the maximum for a minor violation isn't proportionate? Also, most small businesses do not have the resources to hire competent counsel on the other side of the planet to litigate these things.
How to use Ansible to set up system monitoring with Prometheus – Opensource.com
Whichever approach is fine, the end result is that less effort is made to directly support PGSQL in the long run, and you'd get to support any database back-end as a result. I only mention ORM's cause some have decent tooling (EntityFramework (Core), Diesel.rs, etc) which can be useful for generating schemas out of object models. Also in some cases ORMs are using DB abstraction libraries like for example Entity Framework is built on top of ADO .NET.
Website extreme makeover: brushing fear away and trying something new
Intel at 50: Moore's Law
Hi Jos, and thanks for coming up with this.

I found the project quite useful as a way to move away from C++ to Rust [0]. Of course, there were still some unsupported features, but that didn't stop me.

I did some additional work [1], where properties can be writeable references to Rust objects, and where I hope to make QML objects (list items) possible to create from Rust as the next step.

I'm sure you thought about those problems before, and I'm curious if you know any non-obvious solutions. Apart from that, what's the preferred way to submit changes?

[0] https://github.com/rhn/notquick/

[1] https://github.com/rhn/rust-qt-binding-generator
I'm ashamed to admit the first one of these I saw ('Musk' celebrating a launch last year) I was totally credulous of and forwarded it on to a couple of ETH-owning friends who quickly put me in my place (..and subsequently disavowed friendship :)..). I spent the next 24 hours on ETH-tracking sites watching as these bastards raked in nearly $80,000, from that one scam alone.

In my defence, I don't use Twitter much, and I mistook the value of ETH 'Musk' was asking for at around $20 rather than $200+ - had it been my own money, I would've been far more eagle-eyed and cautious.

Still, I was amazed/horrified at the gall and success of these people.

I never cease to be surprised at how unremorsefully sociopathic some people can be when it comes to getting their hands on other people's money.
Ask HN: Why didn't the Android Security Super-GAU happen yet?
Most Android manufacturers support there smartphones only a year or two. There are only a few exceptions like the Google Pixel or the top models of Samsung. Since many devices older than two years are in use, many devices don't receive the latest security updates anymore. This is a pretty sad state from a security standpoint. So why didn't the Android Security Super-GAU didn't happen yet?
The UK ICO will not push to fine if disclosure is provided within 14 days OR there is evidence to show attempts were made to secure data.

GDPR should only strike fear if the organisation/individual actively harvested data to sell without a Privacy Policy or market without an opt-out request.

The ICO also offers a free advisory service that anyone can petition for help in conforming to GDPR alongside training docs already mentioned in comments.
Well, to be fair, Iran is trying to build a nuclear weapon and wants to wipe out Israel.
>So even if blacks had easy access to guns prior to disarmament, we would have expected them to give them up with relatively minimal resistance.

That seems to pretty clearly undermine the whole case for guns somehow preventing violations of rights.

>~150k surviving black soldiers with an unknown number who decided to stay in south, doesn't really justify stating that blacks had easy access to weapons.

Then why did they bother passing the laws? It's also patently absurd to suggest that an occupying army doesn't constitute a significant force. No citizens' militia is likely to approach the capabilities of a 150k well-organized soldiers.
I would agree. I've been in higher ed for the last 10 years and can tell you there are a lot of compounding factors that gotten us in this mess of high costs.
People in Europe are not extremely litigious by nature and will likely resort to calling upon their supervisory authority instead of suing directly.

What is however very interesting is article 80, which will allow a data subject to mandate a not-for-profit body to seek judicial or non-judicial remedy on his/her behalf.
This will give quite a bit of power to non-profit organisations built for this purpose and will likely add quite a bit of pressure to large companies that don't comply with the law.
They would never admit that
Thank you (the author) for this.
What Is CloudComputing? And Use in Various Industries
The island fruit that caused a mutiny
The coconut oil thing is quackery.
I would even go as far as saying that that article is straight up wrong/misinterpreting at least some of the articles.

I randomly checked Article 14, as I am wondering how I am expected to communicate to users that I don't collect any PII([0]), and it turns out Article 14 is not about

"You need to tell people what you’re doing even if you’re not collecting personal data."

but about

"Information to be provided where personal data have not been obtained from the data subject" = "You have collected personal data about the data subject, just not directly from them, but via some other source"

[0]: Even though I'm not sure if that's even easily possible for any company that has a website, now that IPs can fall under PII.
> This driver was digitally signed by Realtek

> that driver started signing it with secret keys from JMicron

I think this is the scariest part of the worm. Not only do the people writing it have access to zero-days, they also somehow have (possibly physical) access to the private keys of two large corporations.
Facebook Privacy Options: Will It Meet EU’s Requirement or Face Fines Up to 4%?
How to deal with developers who lack standards?
How do you deal with developers that don't comment their code? They're fully aware that they should and that it's the decent thing to do or when they update functions and move things around, they actually remove the comments.

Things like PEP8 or PSR-2 mean nothing to them.

I could also mention changing functionality, but not making sure that the tests are updated.
Israel has nukes and is trying to build an excuse to wipe out Iran (without incurring internal or international wrath).
Is Social Media Luring Hikers into 'Death Gully' on Capitol Peak?
That's because they're all part of an evil conspiracy, obviously ;)

People are weird about dentists. Almost no-one is claiming, say, that penicillin doesn't do anything, or that doctors only tell you to stop smoking to hurt you. But when it comes to dental standard advice, people go nuts.
APAP metabolizes to AM404 in vivo, which acts indirectly on the cannabinoid receptor type 1. AM404 is likely responsible for a large amount of the pain relief (and, unsurprisingly, an anticonvulsant effect).

I suspect it's tolerance and not addiction, but docs see this and code it as "medication overuse headache" all the time.
Well. I know that I have GTM, GA with DC integration (currently) still active on my blog. DC integration will be dropped and the privacy page will be updated to describe, what I am tracking and how long data is being stored. As needed to comply with GDPR/DSGVO.

As I am still having 7 days to go and that is just a personal blog, I plan on using my free time to do that (would just take 3 - 5 minutes to disable everything if I wanted to by removing GTM and redeploying).

So removing everything is quite easy. It is way more difficult to selectively remove singular features - in this case the DoubleClick integration. As I am not doing that exact step all day (even being a data analyst with a focus on web data), I would have to look, where to configure that exactly. That would take longer.

So be snarky - I don't care, as I am already preparing for GDPR compliance and will have my house in order come May, 25th.

[Edit]
Took 12 minutes in the end. Will take some time until caching catches up. Using a incognito instance all good to go regarding the trackers. "Only" the update for the privacy page remains for the weekend to do.
> We are still waiting for the first court battles that will help determine how GDPR is actually enforced in practice.

I'm wondering if this is yet another point where cultural differences are muddling the discussion. In particular, the difference between common law systems (like the USA) and civil law systems (like nearly all of the EU).
Thanks. I tried to achieve that. As I am surfing with a lot of JS being blocked/disabled, I wanted my own site to be usable for myself.
Don't rinse at all, is a pretty common recommendation.
"easy-to-disrupt"... no, that's the whole point. Prove me wrong.

Yeah, have you ever tried to send .002 gram of gold to anyone recently?

Leave your comfortable bubble and look at countries with hyperinflation like Zimbabwe/Argentina, how are they going to use a cash (not dollar) in a trustless fashion?
In England and Wales, you could be fined £10^99 for having a crumb of cannabis in your pocket. There is nothing - and I do mean nothing - written in the Misuse of Drugs Act that requires any warnings of any kind, or places any limits on fines. The maximum sentence for possession of a Class B controlled substance is five years imprisonment and an unlimited fine. Period. A fine larger than the number of atoms in the universe is perfectly lawful under the Misuse of Drugs Act. The idea that we can trust judges and sentencing guidelines rings hollow to me.
> Crystal can essentially have a sum type by representing it as a union of different record types. It's not common to do in crystal though, at least not with 3+ union entries.

Sum types usually only have two or three entries too.

> And pattern matching isn't really needed if you have flow typing + OO (at least I haven't found a usecase for pattern matching which crystal doesn't already have an answer to)

How does "flow typing + OO" solve the problem? You can use OO to emulate pattern matching via the visitor pattern, yes, but that's notoriously cumbersome; I don't see how flow typing makes any difference to that?
Is that also true for professional use? For private use/relatively few threads I'd agree with that, the insistence on IM on desktop is a niche, but I'd think most people using chat a lot professionally (e.g. Slack) do not use it mobile-only. And if you'd want them to shift communication away from e-mail, it gets even more important.

(as p49k alluded to, iPads help, but few professional users have them as the primary device)
The native code (RedPhone remnants?) did not inspire confidence last I looked at it.
Choose to Encrypt – What is search neutrality?
Try not to think about how many SREs in the big five are likely receiving a second secret paycheck from Langley and/or Fort Meade.
I honestly don't think these interviewees know what they're talking about.

The most objective argument I have to support this is that they keep talking about "whites" as a race. Never "white Americans", "caucasians", "white europeans" etc etc, just "whites" or "white people". Which is hugely problematic considering the entire concept of white as a race is incredibly modern. Before the 19th century, there wasn't a concept of whiteness, you belonged to a nation rather than a race. And it kind of makes sense, since where do you even draw the line on white? Are Egyptians white (Rami Malek...)? What about much of the middle east, many Syrians could pass for either white or Arabic? Or some western Asian countries, like most of the -istans?

Ultimately, the idea of a white race was created on classist principles. The Irish were accepted as whites, despite being persecuted for centuries, as they were seen as "better than black". They weren't seen as white at all since that concept had not been created until mass immigration to the US. There's a good quote on this: [1]

>The Irish, arriving poor, were in direct contact and
competition with the African Americans whose social class they shared. They
managed to become identified as white through their complicity in the oppression
of blacks. Despite, or perhaps because of, calls from Daniel O’Connell in Ireland
for the Irish in America to support the abolition of slavery, the American Irish felt
their tenuous position in America would be weakened further if they were to
associate themselves (or allow themselves to be associated with) the plight of the
Africans in America.

My point isn't really to start a debate on whiteness or anything like that. My point is that throughout this entire interview, where they say the word "white" in various forms eighteen times, and use phrases like "white supremacy", "whitesplaining", "whites cannot be the victims of racism", they never once mention that whiteness is a concept that was made specifically for discriminatory purposes. Even if that doesn't fit their agenda, mentioning the origins of the "white race" should be a prerequisite to talking about race hierarchies at any such length. It's like an electrical engineer not knowing what electrons are.

A lot of this interview just reeks of Jordan Peterson-esque pseudo-intellectual tripe. They even mention him in passing, and the site seems to have multiple articles on him. I probably won't have the patience today to actually debate any of this in length, but I implore anyone who is taking this article seriously to look up the troves of valid criticism of Peterson [2], because a lot of it applies to this article too: I honestly do not think the authors are qualified to discuss the sociological concepts they're talking about, and this is coming from someone who freely admits he does not have the qualifications to discuss it either. We shouldn't be giving a platform to people like this.

[1] https://web.archive.org/web/20130428181555/http://www.polsis...
[2] https://www.youtube.com/watch?v=4LqZdkkBDas
It's not inconvenient, it's costing me money. I don't want your data, I need to collect it and store it to comply with other laws, now I need to verify that the particular way I collect and store that data isn't violating some other new law.

You are not my customer, but even if you were, keep in mind that for every piece of regulation (and there's tons of it!) I need to fulfill, I have to pay, which means you need to pay. I need to set prices to keep my bottom line. If I can't keep my bottom line, I'll eventually stop providing the service, because I'm not providing it for fun. That's for paid services.

Now, some companies don't even charge you, they provide (aggregate) data about you to advertisers, who are then willing to pay more for their ads. It only makes sense, how much would you pay for an ad for a piece of specialized software that gets shown to the wrong audience 99.99% of the time? What's going to happen if that kind of data usage becomes infeasible? Those companies need to start charging, or go out of business. There will be less free services. I suppose that helps companies who do charge, but it hurts people who can't pay and don't care about data collection.

I'm not providing such a service, but if I was, you would be paying me with your "privacy". If "respecting your privacy" means you don't want to pay, you can get lost, because you're only costing money. The definition of "customer" is that you compensate the other side.
Wow... 2.5 seconds to load... </irony>
do you really understand how transactions are recorded in bitcoin? Care to educate me how a government can censor a transaction?
Yes, but the point I'm trying to get across to people is that there's a general legal requirement that the legal and administrative systems be proportionate, even if it's not incorporated by explicit reference in every piece of legslative text.

(I can't lay hands on it at the moment but there are clear guidelines to UK judges on what constitutes reasonable fines for offences, such that it should be feasible for the person to actually pay the fine)
i did not mean that the site doesnt work without tracking, but according to the law i should have the option to access the site without being tracked.
> Who's to say that 10% of the maximum for a minor violation isn't proportionate?

A large body of case law, well-defined guidelines for evaluating harms and mapping them to fines, and the EU's general fear of stymieing economically productive activity (the motivation behind GDPR is to enable more data trading, not less, but within better-defined legal boundaries).

We have had laws with "open ended" sentencing guidelines since the very beginning of organised society. This is a solved problem.
>It is perfectly legal under the GDPR to make an example out of you by levying the maximum fine for a first offense, and without warning.

No it isn't. Read Article 83.

https://gdpr-info.eu/art-83-gdpr/
Show HN: FlipBits, the best random powered AI to take decisions
GDPR lacks clear and unambiguous limiting principles and attempts to impose costs--a tax if you will-- on what you know. From a u.s private person perspective, that looks like a significant overreach. Yes, GDPR reigns in a data industry run amok. Great. But GDPR does not clearly stop there, and for the rest of us GDPR seems to hint ominously that if you know anything about anyone, that may be a problem. So overtly cut ties with Europe or forget what you know. Are we to become know-nothings? New-age luddites? Whatever happened to liberty, representation, and the freedom to learn about the world? The commentary largely focuses on online data, ips and such, but GDPR is not limited to such things. This has the flavor of regulation written by foreign bureaucrats in consultation with big business, having little concern for the significant risk of mystifying and annoying literally anyone else in the world. It's a negative development for interconnectivity and international comity.
Interesting. This is the first time I've seen a public comment anywhere about a strong suspicion I've held for more than 20 years.
I remember this, thanks for brining it up,:I had read it years ago and it always haunted me.

The evolved solution involved using only 37 out of the 100 gates available, no clock, and some units were logically disconnected yet disabling them caused the chip to fail at its task, indicating it was relying on EM effects particular to the chip. Truly amazing (and perhaps a bit creepy too).
I really miss a way to connect with other interesting people from HN. I'm afraid that a simple forum won't work, though, because of (social) scalability: there are good reasons why HN practically bans all banter, light exchanges, or turf wars that usually come to dominate popular subreddits and similar places.

As a matter of fact, I'm thinking about a possible solution focused on allowing remote hackers to at least do professional networking. It could become a real project; anybody interested, feel free to contact me (email in my profile).

With this said, I hope I'm wrong, so I'll subscribe and wish best of luck to this new forum :)