skysight-inc/HackerNews huggingface dataset:
No idea if deleting the email is required under GDPR, but for a taste of why it might be, imagine scaling up a bit. If they keep one email in this scenario, they're keeping one personal fact: email A is affiliated with email B. Suppose that process runs at scale for a while, and ends up with a database of 10 million email addresses averaging 100 connections. That becomes a digital map of society, with lots of private facts hidden in it -- a valuable/dangerous pile of surveillance to leave lying around for no reason, even if they're not actively using it.

There's a big difference between one fact and a billion, of course. But that's what keeps happening on the internet -- what feels like one small harmless thing turns out not to be harmless at scale, with no real warning that you're crossing from one regime to the other.
Custom resolutions would be great... need 5120x2880 for use as my background.
>A century ago, both coyotes and wolves were kept in check by humans

Annihilated the population, FTFY.

>As things stand now, we're going to have coyotes and wolves everywhere. They will be in city parks, eating the garbage and pigeons and raccoons. City dwellers don't normally shoot predators; it would be weird and would likely result in an arrest. Small and frail people (children included) won't be safe alone, as they had been for a couple centuries.

Not likely. You forget about Animal Control? And if populations ever were to become a problem you think city dwellers are too helpless and stupid to do anything about it? Like increase the animal control budget...

Your lack of imagination doesn't project onto reality very well I'mm sorry to say.
The new mawk has it, just the old Debian version not yet.
Ok but if you could hold on to that house/land and pass it on to your kids they'd be millionaires! So it's the "markets may remain irrational longer than you can afford idea".
If there is, they don't make it obvious. Whenever I've tried setting up a stock Android phone, I've looked for a way to do so without adding a Google account, but found no such option.

Perhaps it's possible to do so by pressing or holding some obscure sequence of buttons, but in that case it is reasonable to argue that a 'hidden' option isn't really an option at all. After all, you can't hide microscopic text on a paper contract and expect signees to be bound by it.

There may be stock Android phones out there that do provide a clear option to not use a Google account, but there are certainly many phones that do not.
We don't need billions of years though, "hundreds of years" of fuel is hopefully long enough for us to figure out the tech that will get us through the next couple hundred years after that. And nuclear is fine for that. We're not talking kicking the can down the road by 20 years, we're talking hundreds or perhaps thousands of years of fuel.

Humans are plenty smart and the people of tomorrow will be better equipped to solve tomorrow's problems.

It's not even a matter of "ripping off a band aid" and paneling up the planet - solar panels aren't going to last hundreds of years either, we will be lucky to get 30 years out of them. Can we make more, sure, but we could also do nuclear and then make solar panels in 500 years when we're running out of fuel.

The biggest problems are that we need to come up with the political will to reprocess waste (extracting additional usable fuel and compacting the amount of true waste that needs to be disposed of) and then dispose of it in a proper repository rather than just letting it sit around on-site indefinitely Fukushima-style.
Same here! Was living in NE during the 2007 crisis. Found a new job, gave my landlord 30 days and done.

I had coworkers who wanted to find a new but were now $200K under on their house.

The mobility renting offers can't be understated.
That's awesome. I have a huge respect for Qt- I use it in all my non web applications. Gets the job done with less work and fewer surprises than any other toolkit I'v eused.
Do not work at Google. But would be cool if I did. I am actually old and retired. Do not think they hire too many old people like me.

But do suspect I will eventually have kids that work there or hopefully. I have 8 kids and a couple very good at math. My wife's father was an engineer as I was trained as an engineer so not surprising.

My oldest has graduated CS but does not have the passion I had so works at a pretty sleepy enterprise doing Java. But my next son just finished his junior year and he is crazy smart. Also studying CS with an emphasis in AI. He has the ability and think the passion. Driving him home from University last week he was pretty beat up by his AI classes. Had to give a bit of a pep talk.

Yes Google shared a paper on Map/Reduce as well as GFS and so many other things. Those papers gave away their "secrets" on how they do things. Same with how they use containers and Borg to manage their workloads. There is so many others and could go on and on.

I have never seen a tech company give back as much as Google. I would love to debate it and use facts to compare if there is anyone else close? The Amazon Dynamo paper was a fantastic give back but that is still well short of what Google gave back.

Heck Amazon uses Android still to run almost all their hardware. Where Google gave Android away to everyone.

On Android and security. It is a very different thing to support a wide variety of hardware that is not in your control versus Apple controlling the entire stack. I personally have a Pixel 2 XL and feel confident it will be as secure as my iPhone which I also use but less and less. More to share location in iMessages with my kids when on holiday than anything else. My iPhone is more of an iMessage phone. Even have the kids off of facetime and now using Duo.

Another great example is the Google WiFi. We can see the recent router security hack that hit so many companies but if you have a Google WiFi you are pretty comfortable that you are safe from such attacks. Google just built in much better security than any other router I am aware of.

Then on desktop ChromeOS is really the most secure machine you can buy. Just take a look at how Google implemented GNU/Linux on the Pixel Book versus MS adding some GNU/Linux support.

The Google approach is far more secure. The GNU/Linux applications separated by containers and then the entire thing using the hardware sand boxing. That is a far more secure approach.
Ask HN: GDPR and the Civil Rights Act 1964
With the wave of sites blocking users based in the EU as they don't want to comply with the GDPR, has anybody looked into the legality of these blocks? Specifically, how do they tie in with the Civil Rights act 1964 which prohibits discrimination based on national origin...
> How is the timing here relevant to attacking shacrypt?

By observing the time on the CPU it takes for the password hashing algorithm to complete, you can learn the length of the password. It's a side-channel timing attack.

But, as mentioned in the post, it's a negligible concern. In the case of md5crypt, the algorithm processes the password in 16-byte blocks. For standard 8-bit ASCII, this is 1-16 characters. Knowing that the bulk of user passwords are 7-10 characters, we aren't really learning anything anyway. We're not assuming here the adversary has the salted password hash. We're strictly talking about observing running processes on the machine.

> The run time does not depend on the length of any secrets here.

For md5crypt, sha256crypt, and sha512crypt, it does. sha256crypt will hash a 10 character random password faster than a 35-character Diceware passphrase. That's the whole point of the post.
For that matter, could you just slice it down to a /16 or /24?
Hmm ... Does Google has its own troll factory? Whenever I say something against it, downvotes come, always without replies.
Compared to whom who achieved more, non-money related, goals?
I understand how you feel, but no.

Having been a FF/NS/Mozilla browser user since the 90s, I know it's not nice to be treated like a 2nd class citizen. However, unlike the current Edge/IE users, I made a choice.
The same happened to me. I was pretty sure that the VPS that was running the node was shutdown but it turn out it was still running.
>News companies are dying, news is commodity, if I can't read something on the LA times, I'm sure I'll find that same article on some other news site.

Or the original news simply ceases to exist as is already happening at the local level in many cases. There's probably a continuing market for some global news organizations that are at least muddling through with subscriptions and other products. (Or not. See story on Time Inc. recently.) But I suspect the non-national/international journalism will continue to decline.
That's exactly it. I try and help foreigners who look lost at stations when I can, and while I'm a foreigner myself, I have been here 8 years now.
Because one doesn't "fight" with ABS not wanting to break. It will break when you hit the brake.

Same with power steering: it won't steer into a different directorion. You don't have to "fight" with it.
The option to refuse the new terms is there, it's just not explicit. I'm not saying this is nice or good, but OP's comment sounded like there's no option, they just made it less obvious.
Wasn’t v1 made by mobileye (?) and teslas in house v2 has a much worse rep?
GDPR scooters
Even then, you have to delete them at some point, b/c the retention policy has to specify duration.
Vivo Z1 with Notch Display, Launched
You can argue that, but of course the only non-LEO missions have all been government projects. It’s not as though Apollo missions were private endeavors after all. All of the US and European missions beyond LEO aren’t the function of the market. It’s also hard to see how the market would support long range probes and so much else that doesn’t offer a short term monetary reward.

Still, maybe you’re right, and reality is just waiting to catch up to your bold capitalist vision of market forces solving everything.
> If they're not "processing" it (that feels like code for "data mining") is this really required? I mean my email address is literally a public means of contacting me.

It's also a means of identifying you. It's not just the piece of data, even if it's only your mail address that is stored it can be sensitive information due to context. Say, due to a data breach a list of all members of a company's mailing list is leaked. You might not mind too much if your publicly known mail address shows up on Amazon's mailing list, but you might care if it shows up on the leaked mailinglist of transexual-midget-porn.com
Angering gamers might not be all that bad though, as it would bolster the "Apple is for serious creative work" part of their brand identity.
As I edited above, it looks like Amazon changed this (or maybe it was always like that since I always use the website). According the Apple documentation though, a user should be allowed to bypass IAP for purchases that will be consumed outside the application. See:

https://developer.apple.com/app-store/review/guidelines/#in-...

https://developer.apple.com/app-store/review/guidelines/#phy...

Admittedly it has been a few years since I was deeply in iOS development dealing with this.
> In Europe, if you use ATMs of your bank’s network, it is free.

Who do you think is paying to run that ATM?
The summary is: ifconfig output format does not support new networking features like IP aliases[0]. Changing the output format would break many scripts, so ifconfig will not be changed.

[0] It does support "interface aliases" and that seems to be something different
Targeted advertising has always seemed pretty dumb, to me most advertising is done by Coke and their target is every where.
Are they also planning to sue Apple? I can get it activated without creating account.
HFS! I just watched the Numberphile video literally today with those two incredible wire memory, oscilloscope display calculators from the 60s. What a phenomenal piece of engineering! Cliff needs his own channel. I could listen to him talk all day.
Yeah that is how they really get you.. They want their pound of flesh..
Flash was a wonderful era for the web. It's sad that nothing equivalent ever really came along to replace it.
> Also that clause appears to apply to Youtube using content from the site to promote Youtube's service

I'm not sure about that. The preceding statement of "including without limitation" to the mention of promotion seems like Youtube et al can use your content for literally anything they want. However, if that's the case then why bother including the mention of promotion and redistribution at all?
Where does it say that paying for GSuite means that Google stops invading your privacy? I can't find it, and can only assume the only difference is you don't see the ads.
You're absolutely correct. It's been awhile since I have bought anything not on Amazon's site. At one point I thought I could buy books in their app, but it's possible that was only samples. And yes, it's comical how bad the user experience is.
Exactly how politicians like it
To add some flavor to this, there are only a handful of vendors that sell cookie opt-in software in the US, and implementing one on our own tiny site was a nightmare. If the business model revolves around ads or third party services, I can't imagine how much worse it would be to get running.
Try a more specific query, or just scroll back to find the option you want
should be 141 if you want to print out a string that would be 140 characters, NULL termination is a thing.
Whether it's the right business or the wrong business would be something decided upon in court. The prosecution could make the argument that the business in question broke the law. If the defence does not present a strong case and the judge sides with the prosecution, the business could still be reprimanded, regardless of whether they feel it is just or not.
I feel like certain people will constantly complain about “not being made aware” about things no matter how clearly you state it to them. It is obvious in hindsight that many owners do not read the manual, don’t read screenwar warnings and skip the first time intro. But they still complain that “they weren’t made aware!” Ultimately if Musk himself took a trip to each individual owner and screamed at the top of his lungs the terms of service in their face, we would still be hearing people saying they weren’t made aware.

Legally they were made aware, if you want to change the law do so. But please stop letting user play morons selectively when it turns out they didn’t rtfm. That is on them and should be on them.
What about EU citizens residing outside the EU? Banning visits from EU aren't avoiding the GDPR problem.
>The rules are such that it is practically impossibly to comply; it is then left to the powers-that-be to decide which ones of those in breach are investigated and prosecuted.

I'd not say they are impossible to comply at all, coming from a company extremely heavily impacted by the GDPR, with multiple divisions loosely connected (hence harder to ensure forgetfulness) and a lot of customer interaction. I do consider GDPR a very good tool/means to enforce some thought and discipline during development process.
just curious to know how long would it take for someone(a single person with no prior Rasp pi experience) to build/replicate something similar. I'm highly interested in doing this project for my self-learning
The fine is Up to €20 million, or 4% annual global turnover – whichever is higher.

I doubt any of the listed companies will be happy paying 4% of their global turnover in fines.
...and little of value was lost. American news sites are overwhelmingly filled with nonsense.

But really, I’m surprised they even bother to block EU users. Not like the GPDR can really be enforced in the US.
I've been served ads on US outlets for products which clearly target my home market (Germany). This will make a hard time arguing that you are not targeting that audience. In my opinion, if you serve ads on your site which target EU consumers, you're doing business here. I don't think it matters whether you do that through a third party.

By blocking EU ip-ranges, that may change, I admit that. However, if by other measures like finger-printing the browser you serve EU-specific ads to vpn'd users you may be up to problems.
There was one other topic wanted to address with you. I listen to a lot of podcasts and watch a lot of tech videos on YouTube. Plus went to Google I/O last year.

I am constantly amazed at the grace of Googlers. That should have been your first clue I was not a Googler.

They have every reason to be cocky but they are not. Either it is done in the hiring process or training or maybe both.

I would love if any googlers read this post if they would explain where it comes from?
Suica, Toica, etc. should work in each other’s areas now. There is a list here: http://jreast.okbiz.okwave.jp/sp/default/faq/question/show/1...
from the DPA that you can sign with Google with regard to GSuite:

> 5.2 Scope of Processing.
> 5.2.1 Customer’s Instructions. By entering into this Data Processing Amendment,
> Customer instructs Google to process Customer Personal Data only in accordance
> with applicable law: (a) to provide the Services and related technical support; (b) as
> further specified via Customer’s use of the Services (including the Admin Console
> and other functionality of the Services) and related technical support; (c) as
> documented in the form of the applicable Agreement, including this Data Processing
> Amendment; and (d) as further documented in any other written instructions given
> by Customer and acknowledged by Google as constituting instructions for purposes
> of this Data Processing Amendment.

So no, they probably can't track and feed that into youtube ads, because it is not a cause that provides the service or support.

Afaik Google announced last year that they stopped processing GSuite account emails to a large degree.
Who in turn copied Sony it seems https://www.theverge.com/2012/7/26/3189309/apple-sony-iphone...
I consider my time too valuable to read NYTimes.

You may not respect yourself enough to say the same.
Badly written apps and forgetful users won't be solved by larger batteries. It'll just extend the time between incidents slightly.
Second this. Even dual monitor support would be great
doesnt have to be a company. it processes data and it's not a strictly personal site, it's all over the internet in fact.
privacy policy, cookies, analytics, opt-in
When you have competing priorities and finite time and budget, people often don't investigate external requirements, assuming that they'll just comply when they no longer have a choice.

That's why the first few audits (SOX, PCI, etc...) for a company new to them, are always such a struggle, people starting to look at the months of work needed the same week the auditors are planned to come in.

edit/PS: Did you notice how many "We changed our policy" emails you've received in the past 2 weeks, including from very large international companies like google, yahoo, etc... Companies for which not being open for business in Europe would have financially impact. Probably a good indication that they ended up with a lot more work to comply that they had anticipated, and still made it just in time. Now imagine the same situation in smaller companies running on very thin resources that cannot afford a sudden increase in staff!
Ireland’s abortion referendum under siege from bots and fake ads
Some of us have better things to do than research rumors from every comment on the internet. It is not too much to ask for sources when making certain statements.
You can't take ten seconds to browse there? Seriously?
Aside, I've found an interesting thread on GDPR in Mastodon (an open-source "Facebook competitor") here:

https://github.com/tootsuite/mastodon/issues/7280
> with a penalty of up to 20 million euros if you get it wrong

Much like if you set up your billing software wrong, you could go to jail for years for fraud. Or you could violate a safety regulation and get shut down for months.

Staring at the worst possible punishment is hopelessly hyperbolic.
Two more men charged over the fatal Call of Duty swatting incident
A Peek Inside That Intel Xeon-FPGA Hybrid Chip
Agreed. M-key version coming soon with onboard RAM and 4x PCIe: https://github.com/RHSResearchLLC/uEVB
Is your site still working if you go back to http? Why not revert it then? You'll have time to debug the issue, check the logs for what happened, stand up a test copy which won't impact anyone while you're trying things. You don't have to push for an emergency fix. (Possibly... Unless you can't revert easily, but that's a lesson for the future :-) )
Your project aims to rate billionaires...but based on what aspect of their personality? Musk wants to rate journalists based on their credibility: do they write what is true or do they blend the truth for a better story? A yes-no rating, regardless of what your target group, makes absolutely no sense.
Oh, don’t get me wrong, I think that Apple is totally wrong for blocking the app.

If they’re blocking because it doesn’t use MFi that’s a blatant cash-grab.

I’m not trying to justify it, just trying to understand wtf is going on.
Bavaria is a bit more conservative, it's true, but still, Munich is a major international city. I'm not out in the sticks here.

> You can pay at McD or Aldi with Visa Paywave / Google Pay.

Wait, you can pay at Aldi with Google Pay? I admit I haven't noticed that...although Aldi Sued is a different company so I guess I'll have to check.

> If you complain that a CC is not accepted then get a local debit card :-)

Oh, I've had the local debit card for a long time now, but even that often isn't accepted, and I admit that having to use it so much bums me out a bit. US credit cards are really nice if you can use them responsibly.
I commented two hours ago asking for the URL to be set to the canonical one not the amp one.

It’s been upvoted at least 40 times, but appears at the bottom of the comments and is collapsed-by-default.

What’s the deal, HN?
Interesting line of argument; if it was a CE compliance issue it would clearly be the vendor/importer. But the GDPR doesn't talk about devices, it talks about data controllers.

Information commissioners can't require data controllers to do things which cannot reasonably be done. So I think this ends up with "the existing phones are fine for technically necessary data processing, but buying an Android phone cannot be direct marketing consent in and of itself".
I would actually pay a small amount to have a read-only account for facebook that doesn't track me at all. I don't want to post anything, but I would like to view stuff more easily on the platform. Especially since so many events are organized through fb.
Agile development exposed as techie superstition
Unless we're running on some forgotten machine in a closet somewhere.
Everything's fine if they add generic, non-targeted ads that are completely under control of the news publisher, hosted on their servers, don't track users, don't use cookies. Just like print media and TV does since forever.
Foreign laws are not enforceable in the US unless we a) have a treaty saying so and b) have an analogous law here. I see a lot of Europeans and tech bros that don’t seem to get this. They can make a law saying people or corporations must kiss the rings of every EU citizen no matter where they are or face fines... likewise not enforceable here, and hopefully that example makes that clear to you.
There are still minor issues. The roughness slider disappeared when I slid it all the way to the right (on Firefox 60).

But good work anyway, the results are really nice!
There are absolutely people who work on something for 21 years (++) even though they don’t like it. It’s harder to say no to the incredible amounts of cash and promises of future fulfillment.

Although I’d hate to insinuate this is what Rubin did.