skysight-inc/HackerNews huggingface dataset:
I totally agree, re: possibly being unsolvable for some companies. It'll be very interesting to see how the actual enforcement develops.

I suspect the regulators want companies to create these kinds of consistent identifiers where they don't already exist and make sure that they ride along with personal data wherever it finds it's way.

There's a comment in the article about an oblique reference in an email to "a tall, bald guy living on East Whatever St." being PII and must be included in data subject review/deletion requests. How do you find that, even if you're scanning everywhere?

What about users' computers with excel sheets with personal data? That's how reporting is done a lot of places that I know of. You can make them install an agent to scan data or require all data be put in centralized storage like a network share or corporate subscription to a service like dropbox or something. But, I 100% guarantee that Andy from HR or Jane from marketing going to "forget" to do that or put it in some insane format that the scanner can't handle.
that should say Joe Dispenza
>It would literally take me a single Ctrl+F though the codebase to see every line of code that uses CustomerID.

Most real world applications aren't that simple unfortunately. You can Ctrl+F all you want, but that won't show you the logging that automatically logs parameters from requests that include customerID or the reports based on DB replications or ETL.
I really didn't understand that point at all. Were they talking about price? Because adjusted for inflation, computers consoles and games have never been cheaper.
Can I revoke that consent after I gave it as easily as I made it? It seems not, this would be a violation next week. Article 7, part 3.4 "It shall be as easy to withdraw as to give consent." is as literally clear as it can get - not possible to withdraw consent, not easy to withdraw consent, but as easy. Counting clicks required and the size of font used for links are likely to be used as criteria.

Their current privacy policy and cookie policy linked there doesn't mention how can I withdraw this consent, so it violates the information requirement of Article 12. It does mention that browsers can be used to block cookies (which violates the "as easy" part) but says nothing about the ".. and other tracking technologies." sentence of their "consent" window.

Futhermore, a popup window that occupies half of my phone's screen is intrusive. It's not sufficient to, as you say, "You can still use the core functionality of the site without accepting" - Recital 32 (https://gdpr-info.eu/recitals/no-32/) states "the request must be clear, concise and not unnecessarily disruptive to the use of the service for which it is provided.", so it seems that this request may violate the requirements.
we use both uuid's created in our application layer and stored as char(35) and also uuid's produced in the database stored as uuid data types. We have tens of millions of records and have no issues. Once we get upgraded to PG10 and can use hash indexes for them we expect a further speedup.

I don't know anything about the author, but every time in the past ive heard someone say that uuid's as keys are a problem it turns out theyve never actually tried it, theyre just saying what theyve heard in the past. Theoretically they should be worse than they are - and theres no doubt that a regular int/bigint would be faster - but the truth is there are so many other things that are going to slow you down before that.
this states all of the drawbacks to process vs thread but none of the benefits (resiliency / compartmentalization of errors, less need for lock coordination and less risk of locking related bottlenecks with scale, somewhat better host OS CPU & IO utilization, etc. )
Maybe it's just me but I can't stand 'wasting' weekend hours in bed.

It's my only real personal time, I want to maximise it.
Also we keep thinking the important thing is that they're computers but actually the important thing is the Network. So in a way phones (which are all about being connected to the network) might be the best term anyway even though we rarely use them to make a voice call.
"[...] every time I had a few minutes during the day and basically every evening I felt an irresistable urge to move the emulation a bit forward [...]"

Ahh, memories of the good old days... before I got married...

"[...] if I have 5 minutes of a spare time, I was trying to fix this weird GPU or sound bug. I guess it’s not too healthy (especially if you have a family) [...]"

Oh, crap, this guy apparently has family, too! Shame on me! :-)
At the start of the article I was revelling in the enjoyment of confimation bias washing over me around how reddit is changing, but then I read this

> Allen admitted to the Daily Dot that he deleted popular r/science posts so AMAs would be more prominently featured. But he argues the controversial action was required for his posts to gain widespread visibility.

Don't think Reddit is in the wrong here...
Political threads do appear on Hacker News. I regularly see threads about universal basic income. I wonder why this thread, which I started, was flagged. Political bias?
Districts are much larger in population than they were at the outset of the 20th century.
Uber to offer European drivers free insurance for illness and maternity leave
Sorry, I'm not following. Is "Great Male Narcissists" a popular pronoun in this context?
GDPR does not apply to Bitcoin because Bitcoin is not a company. But it may apply to companies using Bitcoin. See https://ec.europa.eu/info/law/law-topic/data-protection/refo...
Has anyone run the numbers of how UBI would be financed? I'm genuinely curious, not trying to attack the idea. My impression is that people are more positive on UBI than they should be because they think it will enable a higher standard of living than it actually will. I would be more in favor of a jobs guarantee since I think people find working meaningful, but this isn't an area I've researched very much so I'm definitely open to changing my opinions if I learn more.
This quote is bonkers:

> like “an oblique reference, like the tall bald guy who lives on East 18th Street. If someone said that in an email, that would be information you’d need to provide me with access to under the GDPR,” says Straight.

I have no idea how anyone who deal with user-generated content can possibly comply with that. Even if you had an actual person reading through all your content to try and find data related to "Jason Straight", without personally knowing him there's no way they would know that this is referring to that person.

I see a lot of complaints about 1500 page bills in front of Congress and so on, but this kind of nonsense is exactly why you need 1500 pages of dense, precise language to define these laws.
I sure hope someone higher up in the management hierarchy learns about the events that happened. The person who posted the question states that some managers above him or her are on leave, so people up the food chain might not hear about it.

Obviously as an outsider I don't know the specifics, but if the team overall felt their manager was unilaterally instituting bad policies and further felt intimidated and unable to speak freely about it in front of the manager (as mentioned in some of the comments further down), then the manager probably should be fired.

Being a manager means you work for your direct reports, and facilitate their ability to do their job, while intermediating with other internal stakeholders in a way that protects your team. Unilaterally walking in and saying, "I know y'all do great with your preferred Waterfall approach, but fuck you, here's Scrum" is outrageous. Being a manager does not confer that sort of unilateral dictator behavior to you.

Separately, the Scrum master probably should also be fired for not first trying to transition the conversation of that retro meeting into a feedback meeting, and asking people to think of it more like, "how can we give feedback to the manager, and how can we customize and tailor fit something in Scrum to make you guys happy?" ... and then go talk to the manager privately about it before having meetings with the team that are ostensibly about team policy.

In the best teams I've worked on, we would have team policy meetings and mutually come up with our working agreement about the behavior, attitude, and workflows we expected from ourselves and each other, and we would produce documentation (usually in some version control system, preferably with 'code review' for the team to weigh in on any proposals for policy changes). Treat people like grown ups.

If these people are pulling such a mutiny, there is probably good reason.
> What about that under the GDPR is not okay?

I don't know because I didn't write the original post. However your interpretation seems rather peculiar considering the last part of the sentence explicitly mentioned safety issues. One should surely give the original commentator the benefit of the doubt that he talking about a real issue and not just saying "I don't care about pupil's privacy"
My wife and I have the same process, and it's worth its weight in... well, processes have no inherent weight, but, anyway, it's amazing. Highly-recommended. Also gives the awake parent some valuable quality time with the kids, build some traditions unique to that one set of relationships.
> UUIDs are way more painful than serials to recognise, remember, input or transmit especially if you're not dealing with huge tables. "18574" is easy to read/grok, "21caeffa-0fca-4f4e-b845-46ef0576e42a" is not.

One of the reasons we use them is because theyre not easily recognized or sequential.
Or more likely, they search for and install "cookie warning plugin" in 2 minutes and then forget about it forever.
"Once I've solved the puzzle, the fun is gone, and actually finishing the project is a lot more like work than fun."

Simple life hack: Next time you're planning on starting a project like that, declare that the goal in advance.

If you're finishing projects at work, you know you could finish, if you wanted to, but whether you "finish" a project should be subject to cost/benefits analysis just like anything else. Your $COOL_PROJECT isn't a failure if it doesn't attain 15,000 stars on GitHub, unless you chose to make that a goal.
Again, only in America. They're "mobiles" many places.
> EXAMPLE: I was once handed a MySQL database of IoT signals where timestamps were in seconds since the epoch and asked to report on this data without changing the database

I'm not following why you moved the data into postgres other than to say you did? Are you suggesting that because you were restricted from making schema changes to the MySQL instance that that's a reason why postgres is superior?
I think 60 is a little early but I would definitely force-retire them by 70 or 75. I would also set a max age for being president. There is already a min age so why not a max age?

But I think your point that old age doesn't make people think about the future is not correct. I don't see a difference in behavior between different generations regarding tax policy, deficits or environment.
If that is the case, why are there only 2000? The conditions must be more complex than that. Unless 2000 is nearly every phone they touched in that time period?
Is this Kurzgesagt video relevant? https://youtube.com/watch?v=YI3tsmFsrOg
War for Blockchain Talent Heats Up with $1M Signing Bonuses
A* Search Algorithm in JavaScript
Apparently they will all be taken down by the end of the year. It was posted on HN a while back. I'm not sure why this current article seems unaware of these plans.
Can you clarify how your entire response is substantially different in any way from the single word "maybe"?
Holy shit, they finally built the Urine Box.

edit: since I'm getting downvoted, here's a link for the millenials to one of the greatest BBS-era hoaxes of all time: http://cd.textfiles.com/group42/PHREAK/BOXES/URINE.HTM
Here is one: without a block chain to prove you developed something first you have to write it in an engineering log, in your handwriting and pay a fortune to store that some place safe, probably environmentally secured, etc.

With a block chain you can pay 1 sat (ie less than 1/100 penny) to have your git hash stamped forever into the blockchain. You can then pay nearly nothing to have it safely stored until you need to prove it, at which point you have very, very good evidence to prove you had what you claimed, when you did.

You can also stamp the git hash into your twitter, (you can, as of this writing, delete but not edit tweets), but that assumes you are counting on Twitter to be around 30+ years.
If they can enforce their data protection laws on the global net, why can't they enforce their 'hate speech' laws on the global net?
Smile for the Camera: Using Mocks for Reliable Image Snapshots
I used to get bad pain in my right shoulder from using a mouse. I switched to a keyboard that doesn't have a num pad so that I don't have to reach so far to use the mouse and haven't had pain since.
It's probably the slur, "late stage capitalism" on a website for entrepreneurs and employees of for-profit companies.
> The Weather Channel found it was only making $28 per minute of video produced. For comparison, Katz pointed out how the CBS reality show “Survivor” cost $45,000 per minute to make in 2009.

Can they make up for it by hosting the content themselves, combined with advertising?
I think the spirit of GDPR is to target the multinationals who also have tax dodging subsidiaries the world over. E.g. The EU could calculate global revenue for Facebook and then fine Facebook Ireland (or wherever) the resulting sum; which Facebook Ireland would be legally obliged to pay. But I am speculating

Edit for clarity
Wow, Tesla used a whole two bits to track the number of associations!
Zain Ramadan 2018 Commercial – سيدي الرئيس REACTION
Non-US traffic is essentially non-revenue for many American web sites (unless you're running AdSense). Serving pages still costs money, though. So it makes more sense to block non-US traffic than to serve it ad-free.
It sounds like something a youngster would say. I bet they are in their 20/30s.

Not to mention, 60 is pretty damn young. You're cutting off people in the prime of their maturity, especially with longer lifespans. Teddy Roosevelt died at 60 and one of his greatest regrets was that he peaked too soon, and that was a century ago

Changing age limits is just a bandage on a bigger wound, which is that US society struggles to produce quality leadership. But that's what dominating the world for a generation will do, it makes you soft.
Green funerals are a thing. But are they really green?
I couldn't use a computer for 9 years. Then I followed "The Trigger Point Therapy Workbook: Your Self-Treatment Guide for Pain Relief" by Clair Davies. Within 3 days I could type for 1 minute, within 9 months I could work again, but with occasional relapses. It is still the best $30 I ever spent.
"The critical difference is that in China, the apps effectively are the banks, whereas in the US, regulatory capture ensures that the banks stay the banks and it's the app's problem to figure out how to interface with them."

Are you sure it's that? Or is it that the apps don't want to have the responsibility of safeguarding people's money? Cause really, payments and money are things where you really do not want to "move fast and break things".
PDFs in Django: The essential guide (2015 – upgraded for Django 2.x/Python 3.x)
Oh come on. Hanlon's Razor.

GDPR, like all laws, has something to do with power struggles. But do you have evidence supporting your doubt that it's actually intended to be about protecting citizen privacy?
0 mention of language or datatype extensibility, which is huge.
"Something which old people necessarily lack by definition."

Where does that definition come from?
But generally speaking, you could do better still by continuing with both product lines - that's pretty much what 'profitable' means. Situations I know of where this is not the case:

1. The product line is not actually profitable, the measurement was wrong, and the CEO isn't comfortable with nitpicky details so prefers to ignore the measurement than fix it.

2. Interest rates are very high, so the working capital for the more profitable product is better obtained by cannibalizing the less profitable product than by borrowing. Or put another way, interest rates are so high that the bank will give you a better return than a profitable product will.

3. The profitability of the product is so marginal that the management time spent thinking about it is worth more than the pennies of profit.

4. The two product lines require diametrically opposed corporate cultures. (But then you should sell off the other product rather than scrapping it.)

I don't think any of those apply here. What am I missing?
> no reply/action is 'assumed consent' for them to keep my data.

This is illegal under GDPR
Lyft invests $100M in its drivers
I would say that you could provide a notice specifying that signing the guestbook also constitutes consent to the public display of the person's name.

If you want to take it further, you could ask them to submit a small form confirming their consent.

Worst case, you redact their name -- use a marker! -- and document that process as part of your data review.

Either way, it's complete overkill. It's not about following the letter of the law; it's about the spirit of the law. No one is going to get sued or fined for providing a public guest book.
This makes sense for the US Government. But at the same time, it makes more sense for me - as a US citizen - to use Kaspersky. The Russian gov't doesn't care about me at all, so I have little to fear from them. But I do fear the NSA because I am subject to the whims of the US government.
"Even if Kaspersky were spying for the Russians, they won't give a damn about your porn, tax cheating, affairs, your padding of expense reports, or whatever they find on your computer"

How can you be so sure about that? You never know what they would need from you. You write on HackerNews - you are probably a computer professional, maybe an admin somewhere, but maybe you just know someone and you'd be useful to put pressure on that person? Think about the Swiss banker from the Snowden leak:

"""
The Guardian said Snowden described a “formative” incident in which he claimed CIA operatives were attempting to recruit a Swiss banker to obtain secret banking information.

The operatives purposely got the banker drunk and encouraged him to drive home in his car, he told the newspaper.

When the banker was arrested for drunk driving, an undercover agent offered to help “and a bond was formed that led to successful recruitment”.
"""

The American agencies don't need to blackmail you - they can get access in many other ways.
I see what you mean about being setgid; I did not think to check for that.

That said, I still don't think the processes group is what stops you from debugging it (it's the undumpable flag). The group check wouldn't matter and would never take effect, since your uid matches that of the process, that would be sufficient to allow you access to the process, would it not?
I was thinking about that in response to the other reply below. I think it's definitely based on value; at some point you realize that you'd be happier doing something else. At work, you don't have the same calculation because it has to be done and personal rewards are not the only motivation.

I've also found that how intellectually rewarding my day job is (and how much agency I have) has a direct affect on my hobby development. I have a lot of creative freedom and interesting projects at work right now so I care less about coding in my spare time. I only have so much free intellectual energy to devote to something.
> Some provinces play a recorded message when someone tries to call a blacklisted debtor, informing the caller that the person they want to speak with has outstanding debts. And in May, a short cartoon with the photographs of debtors' faces began playing at movie theatres, on buses, and on public noticeboards with a voiceover that said: "Come, come, look at these [debtors]. It's a person who borrows money and doesn't pay it back."

Assuming that's being reported accurately...wow.

Although I'm always led to wonder to what extent the facts in articles like this are exaggerated in order to portray one of the US's main global competitors in a negative light.
Exactly this. I have tons of weather bookmarks, all of them are from the gov't. No dancing ads. And their API is straightforward, as mentioned.
It's not that people like Erich Fromm, Hannah Arendt, Noam Chomsky, Joseph Weizenbaum, Stephen Hawking are outdated -- their inconvenient questions and points remain unanswered. They're so correct that by now it's really just shooting a bunch of confused, arrogant fish in a barrel who call that progress. Free fall feels really great and liberating until it doesn't.
1) Are you allowed under the GDPR to ask for additional information (i.e. date of stay in this case)?

2) If you stick the original in the shredder, you are removing much more than just the requestor's data.
Ah, I misread the comment obviously.
The GDPR is pretty vague on that point -- from https://gdpr-info.eu/art-37-gdpr/, the regulation just says:

> The data protection officer may fulfil other tasks and duties. The controller or processor shall ensure that any such tasks and duties do not result in a conflict of interests.

It seems to me a bit of a stretch that working in IT is a conflict of interest with adhering to data processing regulations; ensuring that your infrastructure is compliant is generally one of the remits of the IT function. You could convince me that the head of "analytics and user data extraction" at Facebook might have a conflict of interest with the DPO hat, but I'm skeptical about the broader claim that these conflicts are hard to avoid.
I'm not sure that we disagree. The person I was responding to was framing things in terms of how US immigration policy benefits people who are not US citizens. I was just pointing out that the US government is morally obligated to attend primarily to the interests of it's own citizens (IMO; I realize this is a controversial opinion in some circles). I tend to take a pretty expansive position on what constitutes the best interests of US citizens and generally think it's good for the US that most countries have significant expat populations in the US.
Talked to my mother the other day. She works at a tiny local (German) home care company. (That means 5 middle-aged women in an office and a bunch of nurses on wheels.) They've been ready for GDPR for a year now, including sending their new data officer to the required seminars and whatnot.
I don't own a Windows license, so this is a non-starter.
You're not arguing with what I said. I argued that ad targeting is not evil or shady.

But to answer the argument you put in my mouth, I have accounts on both services and use them plenty, so yes, these firms have plenty of data created by me and about me.

But if I didn't, they'd just have a few anonymous ad profiles linked to random cookie IDs. I've seen such profiles. That's not very much.
I really don't understand why there's this huge presumption of ill will toward Amazon.

HQ2 is a project that will involve hundreds of thousands/millions of people when you add up the employees, contractors who will build it, local politicians/electorate, and everyone else. There's just no way to keep something that big secret. It seems easier to just come clean, announce to the world what you're doing, and be open about it.

Plus something of this magnitude is going to require political support so the proposal is as much an appeal to the local electorate as anything else.

I, for one, think it would be great if tech jobs spread out across the US.