skysight-inc/HackerNews huggingface dataset:
no. gdpr applies only to people in the eu. if you are an eu person in canada it does not apply to you.
I get that 'cssinjs' is now new and trendy but how can people legitimately pretend that the act of transcribing your css changes to their js format is anything but developer/designer hostile?

i can't be alone in mocking something up, then switching to browser to fine tune the css, then taking that back in to codebase.

Somebody in work also had the idea of storing every components styling in JSON, then getting the browser to render that as styling...so now you need to understand a JSON->CSS engine just to troubleshoot most styling issues?

When will it end. Do we need to rip out the DOM, HTML, JS & CSS and start over because we're creating more elaborate Rude Goldberg machines every couple of months.
National Debt Costs More Than SNAP Plus Dept. Of Homeland, Energy, NASA, EPA
But that law has to be read in conjunction with others, which set out when trial is at magistrates or crown court; and what the sentencing guidance is.

The courts must follow the sentencing council guidelines unless it's in the public interest not to do so.

https://www.sentencingcouncil.org.uk/wp-content/uploads/Drug...

The starting point is 100% of weekly income; the range is 75% to 125% of weekly income.

> Band B 100% of relevant weekly income 75–125% of relevant weekly income
Heh, found the exact bug on a live bbcode parser some 5 years ago.
The other day I had an argument with a proponent of online voting. As a non-techie, he could not understand my security concerns. In his laic view, we all use internet banking every day and nobody stole all the money yet, right?
> https://arxiv.org/abs/1402.1524 (Which was published about half a year after I initially and timestamped communicated the idea to a physics teacher who was willing to explain me the differential maths used in Einstein's field equations.)

Maybe I'm misunderstanding your point, but your parenthesis seems to suggest that you would like to claim some credit for the idea. If not, then you can just ignore what I'm about to say.

If so, then your comment seems to suggest that you came up with the idea, but weren't sure about the mathematics of it. In modern physics of this type, where experimentation is not practical, the math is the physics; that is, I think the problem is not so much coming up with ideas—my impression is that there are hypotheses and to spare—but rather being able to back up those ideas with rigorous calculations.
So stuxworm is more sophisticated than an OS its written for? Sounds ridiculous.
Having a company which competes with Cisco (Umbrella) - I appreciate it when they give customers reasons to switch to us.
It's not a very strange thing to say at all - It's the truth. The Waterfall software method is a result of a misunderstanding by the DoD.

Waterfall as far as software is concerned has its origins in a paper from Winston W. Royce and not an unguided adoption of mech/civil/electrical engineering principles:
http://www.cs.umd.edu/class/spring2003/cmsc838p/Process/wate...
> The US has never passed a law that is this easy to violate outside of its own borders, is this ripe for abuse, and carries such enormous penalties and burdens for essentially everyone in the world that wants to operate a website.

The US has clearly passed many laws that meet all those criteria but the last (and with much harsher, often criminal rather than merely financial, penalties), so unless you believe that operating a website is somehow a unique class of activity deserving special protection from extraterritorial application of laws, this is a pointless comparison.

And there's actually a number of US laws affecting website operators that arguably meet all three criteria, as other comments point out.
We’d be quite happy if that happened. Seeing our competitors investing in Europe would simply mean less competition in markets with much greater growth.
> who dropped nukes on civilians.

While technically true, in Hiroshima were multiple military headquarters and Nagasaki were industrial city and shipyard. Just saying there there was a bit more reasoning behind the selection then "where we could kill the most civilians".
A Culture of Disruption
In many jurisdictions in the US, you can give away free home-cooked meals to homeless people without the requirement for a certified kitchen.

Some of my friends fought for the right to do so in Connecticut with Food Not Bombs, in fact.
Those are indicative of the public’s enduring lack of technology literacy, and the media’s desire to have facts and eyeballs meet halfway. Media reports Russian election interference via digital ad spend, astroturfing, and infiltration attempts on state voting systems accurately, but the views to that reporting probably pale in comparison to the oversimplified, tweet-size “Russia hacked the 2016 US election” reporting that gets around more quickly and sticks in the public conversation.

Stuxnet is considerably more sophisticated and technologically more brazen, but won’t get the same reporting. But it’s also worth it to consider whether the lack of awareness/awe over Stuxnet vis a vis Russian election tampering is simply due to technology illiteracy, or whether media is not considering the notability of the means, just the effect of the ends.
For the 0days, probably.

But even the integration is impressive.
Zoning heatmap of San Francisco
Elastic App Search Is Now Generally Available
Mosul dam in Iraq was in serious trouble and some argued that it might collapse after the second Iraq war. If it's ever breached the disaster could kill as many as 1.5 million people living in the city below and displace a further 5 million. It's not beyond the realms of possibility that a Stuxnet aimed at the dam's control systems could kill more people than at attack with nuclear or chemical weapons.
Just show him or her this video https://www.youtube.com/watch?v=w3_0x6oaDmI
In my observation, religions that are extremely far apart generally get along better than religions that are much closer. Also, polytheistic religions just don't seem to have compatibility problems with other religions. The religions that get along the worst are the Abrahamic ones: Muslims and Jews hate each other, Christians hate Jews (more so in the past), Sunni and Shia Muslims hate each other, and Catholic and Protestant Christians have had many conflicts even in recent history (Ireland).

Of course, part of this could just be physical proximity: these warring groups tend to be neighbors or even in the same places, causing friction. But, for now at least, we have lots of Indians (Sikhs and Hindus) here in the US and don't have the problems with them that we do with others.
openshift works for us.
The coal mining stuff is smoke and mirrors. Arby’s employs more people than the entire coal mining industry.
And there are lots of homeopathy success stories...
It’s time to quit your shitty job
Wow I wish we had principle-based regulation in the US. It seems like rules are made specifically so that only wealthy, entrenched institutions can follow them without significant burden. When those institutions fail, the fines don't seem relative to profit or size of the company or anything.
The End of an Infinite Series (PBS)
A similar comment for the HTML portions of the message. Use html/template. It's got a couple of quirks (mostly around how it sort of weirdly conflates having one particular template with having a set of templates), but it's one of the safest template languages to just pick up and throw some stuff out; it's quite strong against injection attacks.

To assist in using JSON, you'll want to declare a struct holding all your config, at which point it becomes quite surprisingly simple to load it from and save it to a file.

Once you have that functionality, I suggest using it for your initial creation as well. I have a program here where I've been using the pattern that I create a default config sample within the program, and if I can't find the config you specify, I print out an error, and the sample JSON file that constitutes a full, legal config for the user's convenience. I wouldn't ship anything that I'd expect to end up in a Linux distro or something that way, but for an internal tool it seems a decent enough pattern.

Finally, I'd suggest reddit.com/r/golang is a better sort of place for this sort of thing if you want a review, and there's probably even better places, as I'm not convinced that a karma-based voting site is all that great for reviews for beginners. (It's really easy for a post like that to pick up a couple of early downvotes, and consequently lose all visibility to the people who are willing to help.) But if you're going to use one, /r/golang would be better.
If you're incorporated, there are crooks running around sending you threatening messages about the GDPR to make you buy their consultancy services.

I suppose the USers would call that "aggressive marketing".

I think this guy fell for it.
I am just your average software dev with zero knowledge of malware creation, speculating here, and might come across as a fool.

The author sensationalizes the effort of the creators, painting a Holywoodesque scenario where they break into every possible software company to steal keys to misrepresent the software, going undetected by every possible security company etc. Since this is a Quora post, I can live with him playing to the gallery.

Given the amount of speculation of involvement of US and Israeli intelligence agencies, and the task this worm was assigned, the real effort might have been just about writing a USB worm that identifies specific machines and handing the USB-0 to a double agent (I stopped watching Homeland after season 5 and am rusty with the jargon). The rest of it would have been simply asking all the associated software and hardware companies, politely, to cooperate.

If any of this is true, stuxnet is anything but sophisticated. Its just lots and lots of specific API calls.

That brings up the question: what is sophistication as applied to software?
A great shame to see this series terminate.

I've learnt a lot, it took a while to digest some of the videos, but I have learnt so much.
"Zero Days" documentary is focused on Stuxnet. https://www.imdb.com/title/tt5446858/
Well, it's wrong in the sense that profiling activities require a "lawful basis", consent is one of the possible lawful basis available.

So you can profile without consent IFF you can convincingly justify said profiling via one of the other lawful bases. But those won't really let you do blanket profiling willy-nilly either and come with other strings attached.
Or I do but I’ve read and agree with http://sethgodin.typepad.com/seths_blog/2008/01/permission-m... (and the book, short though it is) and other experts. Godin says it perfectly:

> … the new power of the best consumers to ignore marketing. It realizes that treating people with respect is the best way to earn their attention.

Basically, a marketer trying to force their stuff on people - interruption marketing - either doesn’t understand their value proposition well enough to spot ways that it can actually help customers, or is too lazy to act on those ideas.
Don’t whiteboard during interviews? Or don’t whiteboard at all? Dropping the former is good, the latter is bad...
Satori Botnet is targeting exposed Ethereum mining pools running mining software
Unfortunately in the US, any conviction leads to essentially a work "blacklist," whereby employers do background checks and deny employment for anything they find within 7 years.
I know, I was suggesting to try out atheism for someone who believes in something else.

All this to say that such suggestions do not make sense, a belief or lack of is not something which someone can "try out". I can imagine that following some major life events, for someone who is inclined to such a change, "trying out" is an option.

Having had all kind of dramatic events in my life I never felt the need to invoque a superior being. YMMV.
> he only thing that's "dead" is the notion of being able to get away with just writing a native Windows version, and ignoring Macs (or vice-versa).

Linux and BSD however can safely be ignored. (Writing this from an Ubuntu laptop.)
Whiteboard rhymes with waterboard.
Actually, in a capitalist country it might be easier to survive such an attack. If there is demand for a product or service, people and businesses will find a way to meet that demand. Millions of people working independently to satisfy their local market demand. It would probably hurt centralized socialist or communist countries more since it severs their control, surveillance, and communication mechanisms.
It's like if a new law were introduced requiring a license in order to ride a bike, to make sure people don't hit pedestrians or bike dangerously in the road. The license is free, it just takes a weekend to go take a written test and demonstrate that you can safely ride a bike. Some people who would pass but can't be bothered to give up a weekend would instead choose to just stop biking. It's an unavoidable consequence of introducing a friction where there wasn't one, and there's no way to carefully target or wordsmith the requirement so that this doesn't happen.

I think people miss that there is a very large qualitative difference between "no law" and "law". Even a very carefully targeted law will still have the effect, on the margin, of preventing or stopping compliant activities. But in the case of something like privacy, or control of data about you, maybe that's worth it in order to stop the noncompliant activities.

On a non-hypothetical topic: does anyone have a good resource on the requirements with regard to backups? That's one of the larger technical sticking points for me - do we have to delete from our backups as well on such a request?
Forbes, definitely an objective and impartial source about Russia.
This conspiracy theory doesn't hold up to scrutiny. https://mashable.com/2018/05/17/google-duplex-dinner-reserva...
Time to bring back mid-to-high-end open source routers.

Something like Vyos: https://vyos.io/

For low-end you always have LEDE or Openwrt http://openwrt.org
Without power, logistics & supply lines stop working, no more groceries after a few days, riots and plunderings in the streets a week later...
Cat memes transcend cultural boundaries.
To be clear these (Resistive RAM and Magnetic RAM) are really competitors to Flash (EPROM) rather than DRAM or 3D XPoint from Intel. Their main advantages are process simplification (Flash requires a LOT of extra layers) and cost rather than speed. In the industry people are very careful with new Non-volatile memories, because the failures may have long (delayed) failure modes that cause horrible problems and liability.

I'm fairly positive on these two choices (Re&M-RAM) mostly because people have learned to be fairly sceptical and require a lot of testing and they are porting to mulitiple Fabs. Even with the license it will be at least 12 months before there could be customer samples from the first licensee, Microsemi.
You won the internet today, sir.
One needs to give it more than a superficial glance. ZOO was designed to be randomly accessible, with the directory headers forming a linked list. It actually has an uncompressed index and can take advantage of seekable files. It also supports both long and short filenames; CRCs of the metadata structures (c.f. the recent kerfuffle about xz); and an extensible, versioned, header mechanism that not only could be extended but actually already once was extended to add the long filename support amongst other things.
My point was that we use mathematics to model physical phenomenon and by definition every model is an approximation of the phenomenon which means that you cannot say that the phenomenon is actually doing what the model says. Instead we say that the model is useful only to answer certain set of questions to certain degree of accuracy.
Stuxnet changed history. Any "game of chicken" style equilibria is broken if the probability a nuclear actor's command and control drops below 100%. If there is even a 1% chance that when a Big Red Button is pushed the missiles fail to launch the game becomes unwinnable. Simulations of imperfect information in dynamic brinkmanship where both players are known to have advanced cyber capabilities results in a single dreaded endgame: general nuclear exchange.

Thermonuclear Cyberwar

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2836208

We have moved into uncharted domains. And herein lie demons. Past Rules of Engagement universally agreed upon regarding the use of kinetic weapons no longer apply. For wiser heads to prevail in the current global climate, the voice for peace must become the loudest one.

Rules of engagement for cyberspace operations: a view from the USA

https://academic.oup.com/cybersecurity/article/doi/10.1093/c...
> It is irresponsible not to assume that if the law is written a certain way then at some point, the law can (and likely will) be enforced that way when it suits the government.

With the caveat that "the law" in this case isn't just the GDPR, it's the entirety of EU case law. GDPR exists in a particular legal context.
For 20+ years the US - as the dominate controlling agent regarding the Internet - ensured the modern (post early 1990s) Internet remained extremely non-regulated and non-interfered with by ~195 nations (when it came to the global Internet system). It worked globally out of the gate and required no special adherence to US laws. The Chinese did not have to adopt US freedom of speech approaches to use the Internet. The Iranians or Saudis did not have to adopt US freedom of religion approaches to use the Internet. The EU did not have to adopt US legal approaches or laws to use the Internet. Any other scenario than the one the US pursued would have resulted in a fractured, mostly useless global Internet. The US was about as good of a shepherd as any nation could have ever been: thus we got several billion users onto the Internet from wildly diverse background jurisdictions. The way the US built the Internet made it possible for the EU to say: hey, we're going to do GDPR, because that works for us (and yet the Internet still works); and for other jurisdictions to say: hey, we're going to do this that or something else because that works for us.

> The whole internet dances to the US tune, legally.

You've got that almost exactly backwards. The US approach has required almost no dancing at all to the US tune. That's precisely why ~4 billion people can use the Internet from 195 nations, all with dramatically varying laws. They're not adopting US law to use the Internet. That's why the Chinese have been able to implement their unique approach and still use the Internet (restricted to fit their tolerances at a government level).

You very specifically do not have to dance to US legal tunes to use the Internet. Even when it comes to IP laws, you do not have to dance to the US tune (Europe has varied widely from the US on such, eg as it relates to piracy, and yet the Internet keeps on regardless).
No worries I never down-voted you (can't do that anyhow) Enjoy your Friday and the weekend!
I don't think there's a need to cut the transatlantic cables, but if a company doesn't want to take proper care of user data then it's perfectly reasonable that they stay away from that market and let other companies have that business.
Ask HN: Data Analyst vs. Data Scientist
It sounds like these two terms are often used interchangeably. What are the differences between a data scientist and an analyst? If you were to hire for a data-related position, and you had a candidate with each title (and not their resumes), what skills would you assume each had?
Show HN: I implemented some LINQ extensions in JavaScript
I'm intrigued by your phrase 'securitize those families.' What do you have in mind?
This is pure opinion. I've heard that the code for bitcoin is pretty complex too. But since this opinion, it's all a debate. I kind think the linux kernel or Windows OS might be in the running too.
>So, what’s the plan when the boomer menace is over in 15-20 years? Where will their wealth go when they die?

China, that's where.

China will become the new world superpower, filling the vacuum left by the US in its decline. That's the legacy that the Boomers have left behind.
Awesome job! One suggestion, when going to a new page scroll the user back to the top of the page automatically.

Great design!
I havent used facebook in 3 months for anything other than a status asking for volunteers for an event.

(and that status didnt even work)

I havent missed it. It was a bunch of people that arent my friends sharing things that drive me crazy(politics that I have no impact on).
Why is this on HN? It's not gratifying for one's intellectual curiosity. I hope by now it's not even _surprising_.
I was just speaking with a co-worker about how I consider this interview culture to be a race to the bottom in how much unpaid work companies are getting from prospective employees. When I interviewed with Facebook they do back to back whiteboard interviews for about 6+ hours then sometimes they give "homework" problems, etc. Even skilled candidates can't refuse because a less skilled candidate will come along willing to make the sacrifice.

I don't have any solutions only complaints and bitterness, sorry.
Virtual weapons are worse when it comes to proliferation. And they are worse when it comes to identifying attackers. Both of these could make them more likely to be used.

Software which say opened the throttle and disabled the brakes on millions of vehicles simultaneously would be in the ballpark for total destruction in a short time. With self-driving cars, the total destruction can be optimized, hunting down pedestrians and hitting vulnerable infrastructure.
The point is simply that the school is now at risk of huge fines, so in turn it puts pressure on parents to sign as strong as possible waivers. Not many people here seem to understand it but that is what is happening.

The force is of purely psychological nature, of course: "surely, you don't want to cause problems to your school?"
I cannot imagine how difficult it would be to purge my friends list of thousands of people.

I moved on.
Might be worth clarifying whether this is “don’t use a whiteboard during interviews” or “don’t ask candidates to code obscure algorithms” on a whiteboard.

We use a whiteboard in our interviews for sketching UI, and sometimes drawing a database table. Generally candidates find this much easier than talking through their design, and we think that interview very closely represents what we do on a day to day basis.
> This driver was digitally signed by Realtek, which means that the authors of the worm were somehow able to break into the most secure location in a huge Taiwanese company, and steal the most secret key that this company owns, without Realtek finding out about it.

> Later, whoever wrote that driver started signing it with secret keys from JMicron, another big Taiwanese company. Yet again, the authors had to figure out how to break into the most secure location in that company and steal the most secure key that that company owns, without JMicron finding out about it.

Oh come on... "most secure location"? I'd wager it would be harder to break into the janitor's closet and steal his toilet paper supply than it would be to get those signing certs. If this was most companies it was stored on a public file share used by software engineers or in an open source control repository. They either got someone hired as a contractor or bribed an engineer they found on LinkedIn a couple thousand dollars.
Yes. At the time I was a contractor in southern Azerbaijan (borders Iran) and our pendrives were infected.
The word choice of citizen vs resident is a red herring. The issue is the extrajurisdictional reach of the law.

An EU resident visiting" your business which is hosted and operated in the United States, is the same as a Saudi Arabian coming to the United States to buy alcohol.

This is the reason why the GDPR requests an EU designated representative, so there is someone to charge locally.
>"run itself"

I find that misconception worse!