skysight-inc/HackerNews huggingface dataset:
The EU can't reach over into another country and start applying their laws unless they are willing to invade. The only way the EU has to enforce this law is if you interact with them, so they can physically block or take your assets, or if your government thinks that the EU laws should be applied at home, in which case why are you complaining to the EU?

There is no world police enforcing laws in every country. It all boils down to a monopoly on violence and if a country can't physically get to you or your stuff you can tell them to fuck off all day
I had some real issues with mysql handling more than 2000 connections. Once past that limit, cpu usage increases exponentially with few connections due to context switching. At 3000 connections, 80% of thr cpu was used gor context switching and it got unusable. That was a 64 core/256gb ram server.
Also, the process described will require nothing to ever denormalize the record from the "handle" identifier to the "pointer" identifier.

Caching is hard, so good luck guaranteeing that.
What happens if you have no presence in the EU and the EU tries to fine you? How do they actually get you to pay the fine instead of just ignoring it?
If you think older people have 'no skin in the game', you are severely underestimating the value that most older folk place on the quality of life that will be enjoyed by our children, grandchildren, etc.
AutoCAD didn't start out as an Architectural product, it was just the first CAD system that could run on a microcomputer, it was originally marketed as a mechanical design system for smaller companies. It was also available a long time before people had even thought of a Building Information Model.
Yup. Woke up this morning, FB message with a spreadsheet. Some friends going on holiday together, one has taken responsibility for the house we're renting, got the bill today, cut it up, sent it out. I copy-posted the amount into a web form from my bank and it was in their account later this morning at zero cost to either of us.
I'm curious for some examples where a front-end dev. installing premium themes and creating custom ones is making a huge amount over $80/hr?
Starts to resemble biologic ecosystems.
What's wrong with "press"?
> An enforced retirement age for elected officials would be in public interest.

The problem with elected officials is not with age: most of the time their actions are motivated by self-interest (what benefits them or their cast at the end of the day). I would rather want to see complete transparency of their actions/lives/bank accounts and enforce some level of responsibility for everything they do.
Isn't this (the trend toward longer terms) due to the rewards for seniority that Congress gives itself, specifically to make it harder to be voted out?

I mean, every time, voters basically face the dilemma: "Oh, he voted for stupid policies? Cool. He's also the third most senior member. You can replace him, if you want to start with a new congressman with the least seniority."
> the ones that handle user information responsibly in the first place, and aren't opaque data hoarders as a central part of their business model.

Do you only acknowledge the existence of these two categories? So only "data hoarders" would struggle with becoming GDPR compliant?

I've got clients in the charitable sector having to reconfirm their entire contact list - 99% of whom would be happy to stay in touch - because the provenance isn't up to GDPR standards. We're expecting to lose most of those because people forget to respond to yet another GDPR request.

Expensive audits and code reviews, re-architecting parts of the system that accidentally record fairly innocent personal data (IP addresses in logs and backups, historical shop order data, Test data copied from live data. Staging servers and all the other places that data ends up in when a website has been around for a decade or more)

Yes - this data could potentially be misused and it would have been wonderful to have anticipated when the system was originally built but that was in a more innocent age and nobody could have made a business case for it back then.

I would argue that the cost to organisations (many of whom are non-profit) vs the benefits to users is fairly out of kilter. Protecting user data perfectly is a noble aim but perfection costs.
If winning a majority vote from the public requires massive funding and corruption, what, pray tell, does winning a majority vote from a ruling class require?
Yep, this is right. You can technically use the service without giving consent, so it meets the guidelines. However, the Verge will make that consent box as annoying as possible to encourage you into accepting. Oh, you don't want half of your screen blocked? Well, just click this simple button and sign away your soul.

All the big companies are doing something similar. If you want to be an honest publisher and follow the laws, you can have a clearly written consent box that lets users accept or decline. However, you'll see 95% of people decline, and take a big hit on your revenue while your competitors prosper.

What are we really accomplishing? We're just going to have popups on every site, that do their best into tricking users into accepting. Do you want to see other examples of consent management solutions that will be appearing soon?

https://www.quantcast.com/gdpr/consent-management-solution/

If you want to opt-out, you need to use the tiny "show purposes" button.

http://acdn.origin.appnexus.net/cmp/docs/#/basic/show

Click "execute" for the example. Want to opt-out? Click the "learn more" button, and then you'll need to disable about 1,000 options.

They might as well just make personalized advertising illegal. It's pretty clear 95%+ of people don't want to be tracked this way. However, these consent management solutions are saying 70-80% of people are accepting. This is happening because people are being tricked or forced into agreeing. Why are we rewarding businesses that choose to use this kind of behavior and punishing honest ones? Why are we turning internet browsing into an annoying experience filled with popups that are a minefield to navigate?
Unfortunately, most organisations need professional guidance on GDPR, and that's not necessarily cheap or accessible to the budget-constrained. A few points on their issues (IANAL):

1. Most organisations do NOT need a Data Protection Officer (DPO). There are a set of criteria for determining if you do. Here is guidance on it from the Irish DPC: http://gdprandyou.ie/data-protection-officer/

If they are processing health data, then technically, yes, you might need one. You can consider outsourcing the DPO role to a privacy consultant; it may be the most sensible option.

2. If your data processors have not put agreements in place, then you are legally obliged to do so yourselves. This can actually be an advantage because you set the terms. Unfortunately, again it's best to seek professional advice, preferably legal advice when it comes to drafting contracts. I would go so far as to ask your solicitor to send a "threatening" letter with the agreement they need to sign.

3. Why does the visitor book need to be publicly visible? Is there a secretary or receptionist who could handle the book? Switching it to an electronic system is not necessarily going to meet the requirement. (GDPR is intentionally technologically neutral by the way -- there is no inherent advantage of one medium over another, so long as you're collecting and using data in a justifiable way, and meeting the other data controller requirements.)

4. Again, regarding display of health data, which is considered sensitive personal data, I would say it depends. GDPR is not a series of absolute dictums. Use of data does have to be explained and documented, and I believe you could seek parental consent for display of that information under certain circumstances. (Presumably to teachers who will be overseeing children?)

5. The vagueness of the legislation is definitely a problem. The GDPR does allow for an official certification[i], which will be a huge improvement (whenever we see it!).

All the scaremongering aside, the reality is that the legislation is still largely untested. We can fully expect to see a series of test cases appear over the coming months, which will provide clarity.

However, it's important to note and realise that no data protection authorities are going to start doling out extreme fines come Friday morning.

Even if an organisation is reported to the authority, there will undoubtedly be opportunities for remediation first and, unless it's a serious data breach, I seriously doubt anyone will receive a significant fine any time soon.

Facebook, on the other hand...

6. When it comes to training and certification, I'd recommend the IAPP: https://iapp.org/

They are one of the thought leaders in the space, and have a solid track record, with affiliations with lots of reputable privacy consultants.

[i] http://www.privacy-regulation.eu/en/article-42-certification...
"I'm in China, request denied."
This is overcomplicating the underlying truth: in the US and other places we have representatives that are not representative.
DMCA is a big one. Copyright, in general: not complying with US regulations, even if you are in, say Sweden (cough Pirate Bay), is unwise.

There is also the impact of PATRIOT section 215 and FISA, which requires some foreign companies to ensure that some sensitive data is not stored on devices operated by American companies.
The authors mention "having built a database of the over 13,000 members of Congress since 1789" but I didn't see a link to their dataset. FWIW, the folks who contribute to the Github unitedstates repo has historical data in CSV/JSON form:

https://github.com/unitedstates/congress-legislators
TipEx would do, and you could preserve the page.
On your points: the shady and unethical practices by video games companies that the article points are indeed direct consequences of the reward model of capitalism, in that the only variable that seeks to be maximised is profit, irrespective of any other concerns such as ethics, morality, general social good, etc.

Second, of course you just had to come on a meaningless tangent about "USSR, North Korea, bla blah it doesn't work in practice", as if any criticism of capitalism could be dismissed by the magical arguments "well if you don't like it you can just move to korea you commie!" and "it doesn't work in practice, everyone who advocates for socialism is a deluded naive child".
Likely you're right.

OTOH, when time is a factor (as in movies - temporal succession of images), perhaps simple curve fitting may never be quite perfect? Perhaps you need anticipation, and counterfactual thinking, cause and effect, and all that?

Also, like in video games, maybe even some understanding of real world physics may be required for a perfect fake.
>You seem to have accepted the liberal mantra

Aaaannd we’re done here.
They are on top of the subreddit but not anymore on the main landing page of reddit.
Both terms seem equally redundant. Why stress?
At its simplest, if there is still private property it is not and cannot be socialism or communism. Scandinavian countries are social democracies - UBI, universal healthcare, guaranteed labor, etc are social democratic ideals. Please don't criticize the author for lacking understanding you also lack.

> we should educate people so that they can't be taken advantage of? No! It's the system that's wrong!

We are a capitalist country. Education is a part of 'the system.'
Kim Dotcom and the U.S. meddling in NZ.
Enhanced OTA Updater Works with IoT Devices
For House seats, the districts should have roughly the same population (if the Census is doing its job properly).
Internal Uber email announces shutdown of Arizona driverless car testing
List of cancelled nuclear reactors in the United States
Yes.

> Personal data that has been de-identified, encrypted or pseudonymised but can be used to re-identify a person remains personal data and falls within the scope of the law.

Solution:

> Personal data that has been rendered anonymous in such a way that the individual is not or no longer identifiable is no longer considered personal data. For data to be truly anonymised, the anonymisation must be irreversible.

Source: https://ec.europa.eu/info/law/law-topic/data-protection/refo...
RE: "That's why Apple is trying hard to restrict it without scaring off consumers"
Don't you understand why Apple V-2 (the one who works for shareholders, not users as Apple V-1 did) is trying to restrict APPs from selling your information?
Its because they are competing with Apple, who is trying to sell the same information for maximum revenue.
Everything at Apple V-2 is driven by greed and profit. If looking good publicly is needed to generate sales, they'll also try to do that. But what happens behind closed doors doesn't necessarily match the promoted image.
(yes I'm cynical. I've been around long enough to recognize the BS happening).
There are limits to which data can be requested to be deleted.
How I’m raising my daughter to be 100 percent, unapologetically Indigenous
"everyone who advocates for socialism is a deluded naive child"

glad we could agree on something
A school does not necessarily meet the definition of a public authority [1]; I would say it's not; it depends on individual EU countries to legislate on that definition.

Furthermore, in Ireland, for example, fines cannot be levied against public authorities: https://www.irishtimes.com/news/crime-and-law/public-bodies-...

[1] https://www.lexology.com/library/detail.aspx?g=e71ac55f-566b...
That's not how I read it, since there's already data protection laws for how to handle kids information. If the data is being used for it's intended purposes ("Parents, give us this information so we can use it in an emergency"), and there's some kind of safe-guard (Only teachers can see it), that should still be fine. What about that under the GDPR is not okay?
I wonder if the roles of "payment network operator" and "credit provider" need to be as entwined as they are now
> You're line of argument could also be used to argue that we don't need to audit banks at all.

That's the whole goal of blockchains though, don't rely on central systems, banks, authorities, audits, or any control. Like someone has to decide the request to be forgotten is legitimate at some point, and that alone defeats the upside of the blockchain.

> The reason why Bitcoin is slow and expensive is because of the proof-of-work and decentralization, not because of the blockchain itself.

Having the full blockchain history saved vs. only last state saved like regular databases, it's obvious blockchains are more resource intensive.
Revisiting “Serverless Architectures”
Account ID is only personal info if it can be tracked back to a person.

Source: https://ec.europa.eu/info/law/law-topic/data-protection/refo...
It seems like this would be a trivial problem to solve. In the extremely unlikely case that some guest requests access to or deletion of their data in your physical guestbook, just ask for the approximate date of their stay, look through the book for the relevant page, (presumably entries are sorted by date), make a copy for them (with the data of anyone else that wrote on the page censored out), and stick the original in the shredder. Done.

Yeah, it's gonna take you ten, fifteen minutes, but how often is it going to happen, realistically?
> I feel really bad for smaller companies/orgs.

Why? I've seen most places (big and small) adopt a very simple page with one button on it asking if you want to opt in or out. Takes 5 seconds at most.

Too many 'smaller' and larger companies have gotten my details buy buying data from resellers, and then they have the gall to plead with me to let them keep mailing their crap?

I'm happy to opt-in to companies that I like doing business with.
What if you just want a stable row ordering, and don't care what that ordering is?
Those jobs will not be in peril. There are plenty of rideshares and the tech is trivial compared to the actual services. Uber’s valuation and capital gamble is not about ridesharing, it’s self driving taxis, and they May very Well go out of business with that gamble.
FATCA is a huge one. It's a huge cost to European tax payers and it's not even clear if it benefits Americans.
No it isn't. That's not the SI unit.

https://en.wikipedia.org/wiki/Acceleration

TIP: Look closer =)
tks for getting back to me @tsandall. what i was wondering was OPA's performance scalability when it comes to millions of hits -- do you have any metrics or known implementations you can share with me?
Announcing Pine: An Next Generation RSS Reader and Microblog Client
911 Calls on Cougar Attack Near Snoqualmie
Micro transactions allow some "video games" (I use quotes as it seems to mostly be mobile apps) to play nearly identically to machines you'd find within a casino. We regulate those casinos due to the known addiction of gambling - some applications employ the same psychological tactics that result in gambling addiction, and they sit right there on your phone; a phone that is constantly with you, and constantly sending push notifications to convince you to take another hit.
What organization is responsible for fine enforcement?

If such a fine is levied, but the company is based in China, does China have any treaties with the EU demanding the fine be enforced, or can they tell the EU to go pound sand?
4 minutes is plenty enough time to validate the concept. And all these would "crash". Cruise missiles generally dont plan on landing. I wouldnt write this off so casually.
I for one use pop3 and am really content with it. I cannot bear the idea of keeping my personal mails on a remote server. And that of having to use a web interface to configure splitting rules via a web interface, unable to easily version control and undestructibly and easily test.

You seem to have a personal (!) problem with POP3. Why is that? Are you forbidden to use IMAP because of it? Are you forced to implement a POP3 server?
I very much disagree with most of your examples. Most people don't seem to have a good sense for how associative memories work. The brain is so good at lying to us that we think we have all these discrete pieces of knowledge, but the reality from my studies is less reliable. When we 'learn' something, what's happening is that a bunch of neurons are being stimulated by inputs from all over your body. What ends up happening is you end up getting a neuronal pattern, that is largely repeatable given similar enough inputs (it's why we can roughly see images someone is looking at with fmri brain scans). But there is a problem when we 'learn' something, in that if we are in a different context and many of our sensory inputs are significantly different then we may be completely unable to recall the thing we learned, or be unable to apply that knowledge because not enough of the neurons fired to 'pattern match' our knowledge. What this means, is that if we want an instuitive understanding of something we probably need to have a lot of concrete examples to pull from, in as many different contexts as we can.

To get back to your gas pedal example. I'm fairly positive that the brain needs to map as many of the degrees of hardness of pressing to percieved acceleration as possible to get a good intuition as to the necessary force to achieve a given acceleration. And it's even 'worse' than you realize, because your brain also need to map out pedal depression vs environment (hills and turns effect acceleration), and depression vs car load. And, if you want to be a really good driver, collecting all this data in different cars.

Now we humans seem to have the ability to abstract away this underlying machinery to some degree, largely thanks to the wiring of our neo cortex, so after the age of 5 you can start to interpolate where unknown data points might lie on some spectrum given a few reference data points. But even then it won't be intuitive until we've done the exercise many times with different data.
To a certain degree - though practically the bar to entry is very low to get your ideas onto the 'net. You do need access to a networked computer, but beyond that... While it's true as you say that Medium / Github / Youtube etc. can take what you post down, they do so with some risk that there will be public outcry. That doesn't prevent them from handwaving that away with reference to laws requiring them to shut you up, but at least it makes it harder.
>No one would collect data, and not care about its basic security?

Um...

I think that's exactly what most small organizations do.
That's a good point. I think they are not nearly as entwined as they used to be (before Paypal) and that trend is going to continue.
I'm in that gap between millennial and genX - but, I'm not concerned, we'll get our chance, and we'll fix it up right.

Nothing is permanent.
That's not my argument, my argument is that using a blockchain as your underlying data structure is entirely pointless if you have a way to selectively remove blocks. I'm saying nothing about how we should audit other things, just that a blockchain's "audit method" is the ability to follow the chain from the genesis block to current without any trusted 3rd party or outside information. You remove that ability, you've removed the point of using a blockchain in general. I don't care how other central authorities audit themselves, that's completely off topic, I care that a blockchain is by definition a chain of blocks.

A simple list of "data", it's hash, and a counter would be better for what you want in just about every way. You'd still be able to see that data was modified or removed, and it would be faster, simpler, and easier to work with.

>The reason why Bitcoin is slow and expensive is because of the proof-of-work and decentralization, not because of the blockchain itself.

I never said anything about Bitcoin. I'm saying that using a blockchain while throwing out the "chain" part is more complicated, slower, and more expensive than using a simple append-only log file.
https://economix.blogs.nytimes.com/2014/01/07/enlarging-the-...
A small shop absolutely does not need a DPO. See guidance here: http://gdprandyou.ie/data-protection-officer/

If the small shop happens to be collecting sensitive personal data -- health data, political affiliations or union membership, etc. -- (a) they should probably stop and (b) they would need a DPO.

Highly unlikely in any case !

As to the DPO, it is meant to be an independent person within the organisation, who cannot be unduly influenced by management, etc. Assigning the role to a regular employee who, e.g., reports to the principal and is a teacher by day, would not seem to satisfy the requirement.

Bear in mind that a DPO has to have "expert knowledge of data protection law and practices and the ability to fulfil the tasks referred to in Article 39".
If they are at the top of r/science, then why did the r/science mods have to remove other popular r/science posts so that the AMAs could be at the top of r/science?

> Additionally, Reddit stopped allowing what Huffman calls “post manipulation” to highlight certain content. Moderators at r/science and other popular subreddits have been accused of deleting highly ranking posts to push individual items to the top of their page. From there, they would gain visibility and receive upvotes to be featured on the main page.
These mesical data were supposed to be private by other laws even before - unless you have consent from parent.