skysight-inc/HackerNews huggingface dataset:
I didn't mean ads need to be served 1st party. I think GDPR does not prevent Google or anyone from hosting ads for their customers. Maybe it's hard to imagine, but it is really simple to host ads without tracking users... Google simply has to NOT DO it. And guarantee that in writing to the publisher.

Counting impressions and clicks are no problem, as long as no personal data is collected. But storing personally identifiable data for the click/impression (such as the full ip address, or advertising id in a cookie) needs consent. Unless you need (and only use it) to prevent fraud, which is a valid legitimate interest. Using it for (Re)marketing is not.
I'm not a lawyer, but sure it'd be trivial to argue that blocking based on national origin (eg the country a user was born in) is not the same as blocking based on geography (eg the country they're in right now).
That was the point: The evolution of stylus-based interfaces to multi-touch was clear to the major players in the field, and the direction the necessary UX changes had to evolve to were obvious.
You can also disable Google's ads on some sites, https://contributor.google.com/

Sadly, Google Contributor is not available outside US. I am eagerly waiting for it.
I wonder how well you could track cash if you wanted to.

ATMs could OCR and log the serial numbers of bills they dispense, and they obviously know who they're dispensing to. Banks could do the same with incoming cash at the end of the business day.

The tracking would be weaker than with electronic payments since some notes will be re-used after being given as change, but it'd still be useful to a government that wants
to track its population.
You're right, but there are safer constructions to do this. Maybe this kind of knowledge will get more popular now that GDPR is mandating it :)

Active concern for me: GDPR will promote a bunch more homegrown looks-fine-but-actually-busted crypto schemes. I don't think GDPR will be used to enforce that even in the case of breach, and I'm not sure it should -- I think we should make better schemes available instead.
Are you limiting the discussion to positive outcomes? A friend on mine used to say if you can't be famous you might as well be infamous. I don't really buy in to that, but some people might need clarification.
After using these systems I think it's plausible: the current ML systems produce valid but incorrect words frequently and since the UI is designed for marketing rather than usability nobody wants to expose low confidence levels or a correction UI. They have enough customers that someone was bound to get a false positive which the system mapped to one of a few constrained choices in a brittle interface tree.

As an example, I've noticed that Siri tends to default to offering to open Notes on my iPhone any time it fails to recognize a query correctly. Alexa on the FireTV is better but still has lots of failure modes which look suspiciously like the default branch of a switch statement where it ends up really off on a common query in a quiet room.
CohortPlus is built with the vision of re-imagining how professional communities work on mobile. Our aim is to carve out highly engaging professional groups on mobile by focusing on enriching the end-user experience. The CohortPlus app is already live with over 20,000 downloads. In fact, our Product Management community is the largest community with over 8000 professionals on our platform.

Rich and spam free professional discussions, knowledge exchange, questions, and answers as well as job-related content get debated and discussed daily on the platform. It has helped a lot of professionals to interact with like-minded folks and further their careers.
This is why I purchased Balsamiq when I was contracting, even the basic Bootstrap theme, even with bold text saying "ignore everything design related!!" I'd still get comments about button shapes, colors, complaints about shadows and graphics, etc.

Even with more "theme" stuff in a Balsamiq mockup like colors and images clients were able to focus much more on content, layout, and information architecture than design.
The law is explicitly aimed at direct marketing. It's mentioned in the text: (article 21)

"Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

3. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes."

(also I think "In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications." means that suddenly people are required to respect Do Not Track, which will be .. entertaining)

All laws enable action to be taken against people who are not following them at the time they come into effect. That's what "coming into effect" means.
I didn't expect to see a comment like this, but it is kind of eye opening. There are probably at least 2-3 tools I use on a daily basis that probably fall into the same bracket. You are onto something, I think.
Conversely, I recall social trust being so high in Switzerland than when we comes at a restaurant, my coworker just handed the waiter a business card, and he took the name down to bill the company our tab.
If companies successfully argue that maximising revenue is a legitimate interest and thus, don't need users consent, then the GPDR will worth less the paper it was written on.

I would be extremely surprised if the EU goes through all this tome, effort, and money just to let corporations continue with business as usual
That’s just a helper function for:

process.exit(1);
You can't store the e-mail address without consent, and getting consent would probably involve sending a confirmation email.
It's a bit ridiculous the amount of resources wasted by everyone having to please all these stores... maybe Europe will force them to come up with a standard so that 1 app will be compatible everywhere (a bit like HTML5) and prevent them from removing any non-malicious apps (which would be clearly defined and easy to understand for any non-attorney)...
They're trying and it's quite effective. If they're fined (unlikely), their fine will most likely be greatly reduced.
Dump the database and replace all http urls; for instance: `sed -i -e 's|http://mysite.com/|https://mysite.com/|g' mydump.sql` and reimport it. Most often, there's always one setting that doesn't get switched.

(keep a copy of the original db just in case)
When asking "what's the default gateway?", more often than not, the real question you have is "what's the gateway to IP address X", which would be:

ip route get X
I am more than willing to pay $20 a month for both Google and Facebook. Do you hear me? Take my money!
www.increment.com by Stripe.
It's not stagnation if the majority system (Linux) makes an effort to reach consensus with the minority systems (*BSD) on changes and improvements. It is unclear to me that that happens to any meaningful degree.
Given that iPhones account for just 35% of US mobile phones [1] and only around 15% of phone shipments worldwide [2], this is in no way monopolistic.

[1] https://techcrunch.com/2017/10/13/ios-and-samsung-market-sha...

[2] https://appleinsider.com/articles/18/05/02/apples-iphone-buc...
Did you google fraud detection. There are some services for that.
But the OEM is responsible for software support for their devices (this is the entire Android model and why Google has been working so hard on the Treble project the past year+). Since the current version of Android doesn't have this problem, I don't see how this is Google's problem.
Got an LG G5 and quickly learned that they added a "feature" where double tapping each volume button opened a preconfigured application (Camera or QuickMemo+). Even when locked. Phone had to be completely powered off for it not to trigger. Went in settings and disabled that on day two when I saw how many pictures I had of the inside of my pocket.
Haven't burglar alarm systems been doing something similar for years?
OMG not everyone has the same education as me!

OH THE HUMANITY!
I don't understand how a facebook post made by me 'belongs' to me. It was addressed to specific audience that facebook made available to me, it wouldn't have existed in the first place if facebook didn't exist. How does it completely belong to me.
Wildfires, the ‘Natural’ Disaster Caused by Humans
It seems to me this counts only as pseudonymisation and not anonymization. While the hash is not directly readable, it's still reversible with additional information (such as a large list of email addresses and knowledge of the hashing algorithm).

One of the GDPR notes says:

> [p]ersonal data which have undergone pseudonymization, which could be attributed to a natural person by the use of additional information, should be considered to be information on an identifiable natural person”

Consider that you are running some kind of controversial/embarassing site of sexual/political/other sensitive nature. You keep a hashes of people who once were users but unsubscribed or something like that.

If that database is leaked, a user could re-hash list of political figures, celebrities or just some big list of well known email addresses and with this information find out they were users of this sensitive site.

So to me it seems that pseudoanymized/hashed emails still count as PII and have to be treated as such.
An email address identifies an email address, not a person. More than a few times I've signed up to newsletters with a distribution list address, that maps to n number of actual people behind the group, who may or may not be fixed members of that group.

You could track c_sharp_enthusiasts@myCompany.com, but that is not identifying a person.
Toy cars seem perfect for perfecting AI driving skills.

With a model train like setup, you could have construction, peds, etc.

Wow!
PAUSE Privacy Policy
This is a little over the top, it could easily be debated that an IP address isn't personal data under "Article 4, Point 1" since at least in the case of IPV4 address it will likely be shared by multiple people and the only way to "indirectly" identify the person paying for the IP is via the courts so I'd have said that was pretty secure by default. Plus, why would a regulator consider IP address as personal information? It just makes more work for them that doesn't benefit the "people" the law is designed to protect.
Thanks to the pointer for Node Red; I saw it on my Pi and forgot about it. It's pretty impressive (esp since it's got IBM all over it).
UPENN had something called F1 autonomous racing competition where they design and build 1/10th version of a F1 car race. They also have a tutorial on how to build one.
Here's the link:
http://f1tenth.org/
I can’t find anything even close to “moderate success” for the KeyOne. Most of the articles I pulled up describe awful sales although Blackberry had an optimistic outlook. Most outlets citing sales numbers say that Blackberry only managed to outperform one company: the now-deceased Essential.
Ah, thanks? :)

I have no problem with 'boring' solutions; actually, I prefer them. Processes that are simple, self-explanatory and/or easy to follow are usually superior IMHO.
Tesla settles class action lawsuit over 'dangerous' Autopilot system
The article doesn't mention that Let's Encrypt certificates expire after 90 days. It's not enough to issue the cert, you also have to renew it in that time period, which requires repeating the whole process.

This is not a criticism of Let's Encrypt, they are awesome and you should totally use them instead of paying some sleazy corp like Comodo. Just be aware there is more work involved than the article suggests.
Or even if ShadyAdtechCo just knows what the hashing function is, and has a list of plaintext email addresses to test against – perhaps obtained from one of the datasets they're joining against, or even from crawling the web.
The literal text of the GDPR is as follows:

>the request for consent shall be presented in a manner which is clearly distinguishable from the other matters, in an intelligible and easily accessible form, using clear and plain language
It's not a case of need versus not; it's that all your lists being mutable creates an extra cognitive drag on everything you do. It's one extra possibility to think about when debugging and trying to understand what's going on when something "impossible" happens (which is what a lot of bugs look like when you're investigating them), right when you can least afford to spare any extra brainpower.

(Kerrigan: Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it.)
> This becomes an email address you truly own, and your email provider cannot hold you hostage anymore.

It's hardly yours. Using a custom domain for anything sensitive like banking is not a good idea. Your registrar is almost certainly a lot easier to phish/social engineer/whatever than Google.
for million it's simple, do anything, butterfly effect will do the rest for you.
This is a rather standard response from people when companies get disrupted. See how intel would enter the mobile market and dominate.
So basically all that Valve has to do is to redirect everyone that wants to make a purchase through Safari to the Steam web based store. Then it would be doing all of the selling on the web like a normal store, but content consumption could be done anywhere.
I can't believe. So sad =( RIP
depends really, the law says you can't deny service, but doesnt say you get to get the exact same service. I would expect the same for people who deny ad cookies - they 'll get more ads shown.
You do realize that the merchant pays the processor, and that only a few places actually pass that along to the CC user differentially from cash customers?
IANAL, but specifying how you hash the e-mails (algorithm + salt generation) would be part of your GDPR compliance process.
It's the comment before the link and the subsequent comment I'm referring to.

Also, fuck the pigs. Dude killed someone for no reason. Maybe you'll experience the same then you'll get some empathy for the guy that died and his family because Johnny Pig couldn't keep his trigger finger under control where the rest of them could.

Nah, Piggie wanted to be the HERO! I TOOK THAT GUY DOWN!

You're why Pigs can kill with impunity, just like the rest of the fucking military/police/authority worshiping ignorant fucks in this country.
There is a Professional Engineer exam for software engineering in the US but it's going away because almost no one sits for it. Getting a PE is by no means universal for other engineering branches in the US either. It's most common in industries where you deal with regulators and have to sign off on plans, drawings, etc. for those regulators.

When I worked as a mechanical engineer for oil rig design and other work, I took an engineer-in-training exam and would have gotten a PE after working for the requisite number of years.
Show HN: I wrote a book about UX that anyone can understand
Thanks for this. The discussion about living with stage-4 cancer was especially compelling.
Buy Weed Online Canada
>And what are the biggest pain points for GDPR,

For me as user the most annoying thing is companies trying to be "original" with their GDPR email notice. Wording like "it had come" or "we are affected too" are fun for first time, but eventually they start to annoy more and more. All attempts to be original here are doomed to fail, so be brief with your message god dammit.
Nothing in the directive requires the access to personal data to be done "in band" through the normal login only. It's a valid interpretation of GDPR to only accept "give me all my data" requests by post, and require additional ID to confirm that you're giving it to the right person.

"The controller shall take appropriate measures to provide any information referred to in Articles 13 and 14 and any communication under Articles 15 to 22 and 34 relating to processing to the data subject in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child. The information shall be provided in writing, or by other means, including, where appropriate, by electronic means. When requested by the data subject, the information may be provided orally, provided that the identity of the data subject is proven by other means."

"Without prejudice to Article 11, where the controller has reasonable doubts concerning the identity of the natural person making the request referred to in Articles 15 to 21, the controller may request the provision of additional information necessary to confirm the identity of the data subject."

(article 12)
Huh, does "ip" also support "tc" (traffic control) commands - qdisc is a queueing discipline... tc seems to be the an earlier thing from the people who brought us ip. tc must have the worst command line interface and documentation ever - it is very hard and very frustrating to use, like no other command line interface I've ever seen.

I once tried to use tc and gave up after more than a day of trying, that is how bad it is. The syntax is a word soup and the semantics are very poorly explained.
In theory, if you don't reply, all these companies should stop using your data and quite likely delete it. Sounds like improving safety for me.
But providing an email so it can be associated with your profile implies giving consent, as you don't have to do that.
Shunning as pseudopunishment is silly. If it's not a problem, let them be. If it is a problem, fine them or arrest them.
I'm not sure about Facebook due to not using it, but Google's actually one of the less shady companies in this area. At least they do let you opt out of tracking-based advertising. Other sites don't. For instance, I just tried to view a Forbes article and it redirected to an interstitial which defaulted to letting them track me for advertising purposes, then when I changed the setting to only allow essential cookies it made me wait for several minutes with only a Cancel button, then finally redirected every page on the site to a message saying "You have arrived at this page because you have chosen not to consent to the use of cookies that help us provide a great experience (and great content) to you free of charge" and not allowing me to do anything but change my settings back.

Journalists are just a lot less willing to criticise the state of the free press than they are to attack companies like Google and Facebook that eat into their collective profits.
We'll have to wait til someone got sued into oblivion before we know that
I wonder what would happen if you took a black marker to the serial numbers? Perhaps modern bills have other means of encoding their serial numbers.
Surely a robot needs a 'mobile' OS?
Over the years I have seen multiple people forget their wallet and then someone else pay for them and give them their address so they can bring the money later.
Didn't generate the short URL for me. I'm on Firefox.
The Collateral Damage of a Petty N.F.L
Hashing should be done with salt for precisely that reason.
How to Do Bayesian AB Testing FTW
In my experience, it has little to do with public trust and a lot to do with payment processor fees and an older population (which includes middle aged and older shop owners) having an aversion to paying in anything other than cash.

A cashless bakery opened up here recently, and it was a big enough deal to make several newspapers.
Navigating the container security ecosystem
When in doubt, make it a consulting fee
Most of the examples actually come from the unexpected behaviour of evolutionary algorithms.

My favourite example of such (and it doesn't look like it made it into the paper the article is based on) was an attempt to create a random number generator via a genetic algorithm that controlled the development of an electronic circuit. The unexpected way the algorithm solved the problem was to produce a radio.

Edit: I may have been thinking of the result reported this paper. http://people.duke.edu/~ng46/topics/evolved-radio.pdf . If so, the goal was to build an oscillator rather than a random number generator.
I love all these posts that assume because they've never been on a software that team that makes compliance part of their job, that it's completely outside the grasp of a small team.

Those of us in fields regulated prior to GDPR are laughing at you.
I love how much shorter and terse the output is with iproute2. I reach for it a lot on my mac and get a bit sad when it’s not there.
This is where I become confused; your definition seems to align with Wikipedia, but my in browser dictionary and googles dictionarh Service both include an “unlawful”.
Microsoft: Why Windows Defender Isn't Ranked Higher in New Antivirus Tests
I would say it did panned out. Gmail, Google News, Google Reader, Orkut [released before Facebook and becoming a leading social network in South America for a while] and many other projects were built as part of the 20%.

The challenge wasn't to get people to build incredible new ideas, it was the same as in every large company with "an unit" generating ideas, like Xerox -> PARC, Bell Telephone Company -> Bell Labs, etc. The leadership doesn't care about any of this, they want to expand their main business.

No executive wants to be made obsolete and be replaced by the next thing run by other executives. Google is no different. For instance Orkut (person, not site) was running the site on his own on couple of servers the whole time. Google paid very little attention to it.
Much like comparing an oven to a microwave.
E-Voting and DDoS Concerns: The Devil’s in the Details
To be honest, I thought most companies just took it as an excuse to send me one final piece of spam.
So being blinded with autopilot on is safer than being able to see, but allowing the possibility of inattentiveness? That's ridiculous.
Sure, that's a criterion for art 3 para 2 sub a. What I am talking about is sub b, for which the question whether one offers goods and services is irrelevant (that's what I meant when I said 'a and b are alternative, not cumulative').

So the question is - does the Chicago Tribune 'monitor user behavior'. The recitals say about that

In order to determine whether a processing activity can be considered to monitor the behaviour of data subjects, it should be ascertained whether natural persons are tracked on the internet including potential subsequent use of personal data processing techniques which consist of profiling a natural person, particularly in order to take decisions concerning her or him or for analysing or predicting her or his personal preferences, behaviours and attitudes.

If I look at the list of tracking scripts, it's rather obvious that this is what their 'data processors' are doing. Hence, the territorial scope extends to them.
Rover’s epic raise, Uber’s Q1 results, and a trio of IPOs
The number that's been kicked around for he value of North American user is about $50/year. So $5/month will cover it.
"you would need to agree to the ToS to get that update"

If you have to agree to their ToS before you can use the device, it should be before you purchase.

Google intentionally waited until they had your cash to say GOTCHA! We require an additional payment of your soul. Now its biting them in the ass, it is entirely fair.
At which point it becomes "Legitimate Interests" (or whatever the correct term is).
Why is it a problem that you have to agree to be monetized to read a stupid blog post? If you don't like those terms, go read something else. If you refuse their terms, it seems obvious to me that they should be able to refuse to serve you. Maybe I'm missing something here, but this sounds like asking for a free lunch.