skysight-inc/HackerNews huggingface dataset:
If you have then perhaps you could share your experience more explicitly. It would be helpful to clarify your point of view.
Thanks for answers!

> You could try to stretch the law to include that particular example but from my reading of it this is perfectly acceptable.

But I should still note about the fact in my privacy policy, shouldn't I?

Couple other things I've noted when working on GDPR compliance for my forum:

- It may be good idea to write in your forum rules that you don't allow users to embed their data outside of forum profile.
- Forums accumulate tons of lurker accounts (users that register account but don't post or browse anything) that could be automatically deleted
- Forums like to log IP's used by users when they, say, post messages. Those could be overwritten to 0.0.0.0 for items older than X days.

I've also been working on privacy policy template for people in my position that I have on GitHub and would love to have any feedback:

https://github.com/rafalp/misago-privacy-policy-examples/blo...
The biggest divergence between what's taught in school and what happens in practice is that the Big O limits you saw in school use a different abstract machine relative to what we use today, in practice. Specifically, I'm talking about the assumption that random memory access is O(1), where in reality modern machines' cache hierarchy makes it behave more like O(log n) or O(sqrt n) or something to that effect.
I will fully agree with your points. To me it looks like the peak, but we will only know in 20 years.

Note that business is complex and a good business pivots often, it may be that whole foods was bought at the peak of one, but they pivots to something else and remain successful. If Whole foods pivots to something else and remains successful that would prove nothing either way.
Tangent : what happens to the whois guard if I want to transfer a domain between providers (eg- namecheap to google)? I've heard that during the transfer the whois guard has to be disabled. This means that services such as Domain Tools will log the whois data. Is this true? If so, is there any way to transfer a domain between providers while keeping contact details out of the public whois database?
You acquire Beanie Babies and towels. You earn clients.

How? By persuading them you can add value, reduce costs, control risk, generate growth. The best form of persuasion usually comes down to reputation: a clear record of success and expertise in your field. You will know you have a good reputation when clients seek you out, and your employer doesn't have to offer bounties.

There's nothing wrong with encouraging employees to bring in new business, but if that's the main or only strategy your company has to get clients I would feel concerned in your place.
The fact that everyone who's offended by the post is claiming that React is a "hip design trend" kind of reinforces the point, doesn't it?
> So how exactly it's O.K. for customers if their privacy is breached by mom&pop businesses but not O.K. if it's breached by businesses that have 50K or more users?

One of these has systemic effects, the other does not.

(I don't think small businesses should be totally unregulated. But the administrative burden should be considered, to prevent discouraging new entrants and promoting incumbency bias. GDPR does not take this into account.)
Why we don't `sudo pacman -Sy`
As a 53-year-old Facebook employee, I find the part about Facebook doing this for their own hiring a bit odd. To the extent that anyone has ever reacted to my age with anything other than mild surprise, people generally seem quite glad to see something besides another fresh 20-something face and to hear the voice of long experience.

Then again, I didn't come in via a Facebook ad. Maybe companies use different methods to search for candidates of different ages or experience levels because our own job-seeking habits are different. I was already a principal before the web even existed, let alone Facebook or LinkedIn. Even then I didn't look at generic ads anywhere to find a new job. I used headhunters, and then purely personal contacts. I'm sure many of my contemporaries are the same. If such broadcast ads are basically a waste of money seeking that kind of employee, and other methods are being tried, is that really "disparate treatment" in any meaningful sense?
You _are_ saying they're that person

Yes older coders have weathered more fashions and succumbed to many themselves so in some respects they do know better
I'm talking about functions where the entire string is used to that's necessary on the internet when dealing with billions of strings that are similar to each other
Fact: 70% of residents in the 3 counties (Napa, Lake, Sonoma) had FULL telecom outage (no internet, phone, cell) for 2-3 days. Power was out for 2 days at our house.

When your entire profession and skillset is based on the internet, and computers, etc. -- and those things simply cease to exist for all practical purposes - that is a bad feeling.
You're a hero among insects my friend :)
You definitely have to take the time complexity of addition/multiplication into account when doing big O analysis. But in most cases they are O(1). It is the constant factors you don’t worry about.
Useless without pinning.

If you're using DNS-over-HTTPS, you should be safe though.

dnscrypt-proxy enforces pinning (the parent cert signature is included in the DNS stamp required to connect), and I guess Firefox and cloudflared also do.
Perhaps the author feels comfortable with their new minimalist approach becasue of his history of quantification—not in spite of it.

Data begets intuition. He doesn't need to see the data because he understands the related symptoms of his goals.
I'm using AnchNet's services.
And We've asked AnchNet when I recieved a e-mail from our BGPMon.
They said their staff was configured a wrong config on router.
Also they don't know 1.1.1.0/24 is used by CloudFlare&APNIC.
So they used this prefix to test.
Yeah, I know this is different than the US, but I keep seeing people complaining about it from a US civil rights standard. We should at least appreciate that under UK law there are different rights. For the US, I feel like the enumerated power idea has become a somewhat historical concept instead of being true in practice. As an example, think about civil forfeiture. I don't see how that is enumerated.
While this might be interesting academically, I think if ageism is a problem that might generically scare candidates, then that too is the ageists fault for creating that culture of policy, and not a candidate's fault for sincerely being worried about something that is actually worth worrying about.

We could say something similar about racism. "How much of a factor the fear of racism is, compared to racism itself..."

It seems silly to really spend any time on this type of second-order extra effect when there are real, harmful, huge first-order effects (namely, actual racism and actual ageism) demonstrably happening.

We should focus on the big, up-front, obvious monster standing right in front of us, instead of asking, how much of our problem is caused by the monster in front of us as opposed to a hypothetical monster in the closet, and letting it distract us (or worse, trying to flip things around and blame candidates for being too sensitive or try to sympathetically justify what ageist businesses are doing to their long-time employees or to older job candidates).
Not sexist: "Women on average have a higher rate of mood disorders."

Sexist: "I'm going to be more skeptical of this particular woman's experience because she's a woman and probably is just hysterical."
Again, I'm not all that knowledgeable of the law, but I believe the intent of it is to oppose ageism in either direction.

Shouldn't it be?
>> Amazon will secretly renew your services without even emailing you and when you go to ask for a refund on a non agreed upon renewal, they will refuse to issue a refund.

I got charged by audible over 7 months, told them I wasn't ever interested, they send me 105$ back.
> Honestly I don't get the obsession with recent grads. They are basically useless for years.

But cheap and compliant.
I have seen no evidence to support that assertion.

Life is short relative to what? You will only experience one life, so to you, life is both infinitely long and only a brief moment. Life is what you make it; so you should make the most of it by applying scientific rigor to maximizing what is important to you.
Comments like this don't say anything. Obviously sex differences "in the genetic sense" exist; we have different sets of organs to prove it. That doesn't mean every attribute assigned to women on message boards is worth entertaining.
My argument is in the part of the sentence you didn't quote.

When people go to vote for their government, is that implemented by sending government agents to eavesdrop on people's conversations to suss out what their political preference might be? No. People voluntarily (this is the core of my analogy) go to vote, to make their voice heard.

That's the difference between voting and spying.

Of course, if popcon were enabled by default, then that would be different and not like voting at all! But that's not what it said on the page you linked.
Calibre is very good at converting epubs to mobi (and the other way around.) It ships with a commandline tool called `ebook-convert` too so you don't have to mess around in the GUI.

https://manual.calibre-ebook.com/generated/en/ebook-convert....
I think freedom of the press is lower there in the uk. Plus they it's too easy to win a suit for libel there.
The point is to secure more funding to run better and more complicated studies. If you wait around to publish the perfect study, you'll never get started.
I think many developers have a "macho" attitude that things are supposed to be hard; if you are smart you can handle the complexity of C++, Kubernetes, etc...

Python is a special case. Python was easy long ago but the Python 2 to Python 3 transition was brutal, particularly because many Linux distributions used Python as a scripting language for system scripts. Thus "python" had to be python 2, and a generation of programmers got python 2 as a default and wrote more py 2 code when they should have been writing py 3.
It's alarming because you describe the letter as analogous to an "exploit toolkit" and we all know no patch is coming.

Perhaps proponents of GDPR should have considered this very obvious weaponization of the law...
If that's your understanding then you have bigger problems than the GDPR.
> Honestly I don't get the obsession with recent grads.

They will work more hours for less money. This is nothing new. My first job out of university in the early 1990s was for one of the "big" consulting firms. 50-60 hour work weeks were the norm. I made decent money (they paid overtime) especially for a first job, but I wouldn't do it at my age now with a family and kids.
Your story sounds worse to me -- you sought medical attention for a problem, received a dangerous drug with no meaningful diagnosis. I'm sure your insurance company still received a big bill for those 2 minutes.

I (white, male) have had similar experiences to your friend, minus the "drug seeking" accusation. Things like cysts and tumors are difficult to diagnose without imaging, and imaging is difficult to justify without symptoms. Lyme disease is often doctor-speak for "no idea".
DENIC (.de) has had it’s own policy including their own form of protection for a long time.

Currently you can query for generic data and an abuse email address but the contact details are only revealed if you are the domain holder or have a solid reason[1].

> In all other cases, DENIC will generally not provide information. Instead, if you think that the contents of a website that can be accessed via a domain may be illegal, you should send an e-mail reporting the matter to the e-mail address for abuse reports (Abuse). You find the e-mail address on the domain query page. Moreover, the imprint, if any, of the website concerned will inform you who is the operator of the website.

To add some additional context, a proper, up-to-date imprint, including a postal address (no P.O.) and in most cases a phone number, is legally required for practically every website in Germany

[1] https://www.denic.de/en/service/whois-service/third-party-re...
I'm waiting for the first time a GDPR DSAR deletion/retrieval portal is breached. Mass exfiltration or mass deletion are both great attack vectors.
I had exactly the same impression. I jumped right into that section, because that's what makes or break an howto book on the Scheme language. That part should definitely be rewritten.
I'm not saying there is no due process, but it definitely is massaged in some parts of it. In the country I mentioned according to the statements of the Ministry of Justice the conviction rate is 99%. Out of 100 cases that go to trial only 1 gets a 'not guilty' verdict.
EU is great and you anglos don't understand the visionary nature of this law and our leader, Jean-Claude Junker. Additionally, this law will create so many jobs, think about it for a second!
What’ll we eat in 2050? California farmers are placing bets
Sure, HSBC gets security right. They just deal with criminals directly rather than indirectly :-)

https://www.google.com/search?q=hsbc+criminal+investigation
For dnscrypt-proxy, definitely not.

In addition to a signature of the parent cert, the DNS stamp for Cloudflare DNS says that validation must be done against dns.cloudflare.com so this would require getting a certificate for cloudflare.com.
The advertisers are the reason why many of these jobs existed in the first place. Developers don't run off of hot air and exposure.
AI for Customer Service: Actual Projects Insights
I wrote a negative Yelp review and it made my life a nightmare
Suppose for the sake of argument that on average women have higher rates of thinking something is physically wrong with them when there isn't. Is it not rational for doctors to take a Bayesian approach and weight their diagnoses accordingly?
Wait what? I upvoted your previous announcement a few days ago but I didn’t dig in.

Why is this blockchain based? This sounds incongruous.
bravo. It took me a couple minutes to figure out this was fake. But then it kept on giving and giving.
A BGP attack does not compromise the destination host. It reroutes (some) traffic destined for the host. Any traffic using TLS to establish destination authenticity (e.g DNS TLS, DNS over HTTP) or content authenticity (e.g. DNSSEC) would detect the attack, while other types of traffic (traditional DNS) could be exploited.
For the fact that you have to explain in a paragraph or two what are continuation, I don't think the material in the book is doing a good job.
Can't tell if you're trolling, here or when you said "authoritarianism is the only way to protect the people from runaway capitalism" [1].

[1] https://news.ycombinator.com/item?id=17099952
Facebook themselves are a big age discriminator in recruiting.
Most of the company in the silicon valley do age discrimination.
This is such a big hyperbole that I'm just gonna call bullshit on this.
I think we'd be better off if poorer people were not concentrated, of course today it's economic concentration or discrimination that makes it harder to equalize things. Not only am I lucky to live in a good school district for my kids, but people in my more wealthy area are much more willing to support school levys and donate money and time.

There is some lower income housing, but in a boom town like Seattle you get a second negative impact on poorer people, which is displacement through rising prices of homes and apartments. Poorer people have to leave because they can't afford rising rents. Their old neighborhood starts to get more of the better educated people who could help the local schools with their background and money.

It's not impossible to go up, but it feels like it is harder. In my family, my grandparents were both some of the first people to go to college during the great depression, with basically no money. They came from tiny high schools but managed to make it.
I'm completely naive, but even so I'm tentatively confident saying yes, it's a halting problem thing.

My understanding of formal verification is a) that it doesn't eliminate bugs, it just reduces their probability by a percentage, and b) that it's academically very attractive (which is why HN is constantly hearing about it) but practically very expensive in terms of investment/return, in the sense that formal verification requires formal modeling and so forth in order to exist in the first place, and that requires actual design lockdown, and suddenly everything got Complicated™ :)

You could possibly get away with an FPGA-targeting compiler (low-relevance related conversation: https://news.ycombinator.com/item?id=17151024) set up in a stripped-down form, but you'd need to lock it down a bit tighter than https://www.corsix.org/content/malicious-luajit-bytecode (a bit old, but illustrative of a point), and then the question would be whether that would negate the performance benefit of the FPGA in the first place.

The thread I linked the comment from had some interesting info on FPGA vs GPU (eg, https://news.ycombinator.com/item?id=17150985)
Disregarding the morality of the law itself, how is it collective punishment if each person is then drug tested? If you do not consume drugs it shouldn't be an issue
Women _are_ on average more neurotic than men. You don't get to shoo-shoo the facts away.
Canada's $1bn federal government payroll system disaster
Why should I spend money to make sure I keep and delete all your information you gave me correctly? This is affecting a single person, the one that gave the information. He is fully responsible for his information, yet he gave it. It's like saying, well we should protect Tesla owner from using the ludicrous mode toward a wall. Maybe he should just not do it?

The environment affect EVERYONE, it's important to protect it because of that. It's a single entity that affect everyone. It's funny because it's exactly the opposite of GPDR, which is a single entity (the one that gave the information to the company) that affect everyone (every potential customer of a company).

GDPR just shift the blame over corporation instead of the one that gave the information in the first place. It shift the fear toward them instead of the one actually responsible for sharing it in the first place.

I'm happy that GDPR will push company to keep less information, there so many website I avoided because they asked for information I didn't want to give, but that's an issue that many website already solved (because that friction was making less user too). What it did bad is add confusion.
I'm really not. I'm just saying I've experienced a non-trivial amount of "that person", and it's a possibility worth considering if they want to remain hireable.
Because it's not remotely true, and is very cynical and biased without any evidence. k8s success isn't because of some consultancy marketing, it's because a lot of people are using it very successfully in production, myself included.
Show HN: Analytics Bar – Google Analytics from the convenience of your taskbar
But it means that the laws are poorly thought out, if only some of them get caught and it gives a big advantage to those that do it.
I don't know. I was recommended to a specific domain-specialized role in Facebook by someone with a long tenure inside the company, and after the recommendation, I was just auto-routed into the standard, crappy candidate pipeline like everyone else, told I'd have to do whatever 6-month rotation bootcamp, asked why I didn't have a bunch of Javascript experience.

It certainly felt like they make an effort to pedantically screen everyone through such a process exactly to enforce various uniformity and policy standards.

I am not claiming that I specifically experienced ageism, although it is possible. But I definitely experienced some type of "junior dev, infinitely flexible, doesn't know his own market compensation worth, etc." filters, which in many cases are going to systematically filter out experienced professionals.
So you want to be a great developer? 30 inspiring stories
Hurricane Maria 'killed 4,600 in Puerto Rico'
How psychotherapy improves poor mothers’ finances
They did consider it, there is a pretty extensive part written on what can go into a DSAR and from what I can see this letter skirts the edge and in some places goes over it but on the whole it is not an unreasonable burden to deal with it as it is.

Take into account the lengths to which companies will go to collect data, it stands to reason that in that context there is some balance to be found if a Data Subject makes a request about that collected data. If you don't collect data the request can be answered immediately and without further work.
> (c) delete it if asked, unless you have a legitimate reason to keep it.

Deleting it if asked might be neither cheap nor possible, depending. What if he has an audit log in his system recording that foo@bar.example attempted registered, baz@quux.example wrote a record &c.? If the audit log is a secure audit log, it's not possible to mutate a record after it's written — but that's exactly what the GDPR requires!

So now he has to either allow his audit logs to be mutable (and thus no longer secure), or he has to e.g. use an opaque identifier for his users, which means he needs another database, his audit-log–viewing system has to perform joins between the logs & that database (which means that it will no longer be straightforward to view with tail(1) & friends), that join has to handle deleted users in some useful way, &c. &c. &c.

That's thought he has to spend on something he didn't have to previously. There's obviously no problem with that in the case of something that's essential (and several provisions of the GDPR are essential). The problem is when the GDPR is mandating something inessential, or — in the case of its mandate that users be permitted to rewrite history — outright wrong. He's being forced by the law to implement a misfeature.

It's somewhat similar to a law mandating key escrow: it imposes engineering cost to achieve a wrong end.
If you can pass the clunky interface and cryptic error message from that badly designed app.
I think it used to be easier in the US to be a dev without a degree, but it's hard to get all the background to pass interviews without serious education, things like time complexity and their of computation.
What good things can you be doing with my stored data that you don't need to run your service?
> The even more ridiculous thing in my opinion is that these mom and pop sites are not already GDPR compliant. What could they possibly be doing that makes not abusing a handful of user's privacy an insurmountable issue?

You are writing as though not abusing people's privacy is all that is necessary to comply with GDPR. This is incorrect. GDPR has specific requirements for any company handling certain types of data, and extra requirements if it's handling this data "at scale" (though it doesn't actually define what this means). Any data revealing any of the following is considered protected by GDPR:

> racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation shall be prohibited.

So, basically any user uploaded images or text can be argued to fall under this category since users might reveal their political, religious, or philosophical beliefs in this text. How about something as innocuous as a heart rate monitor? Well, apparently people have correlated 15-30 minute spikes in heart rates in the evenings to figure out people's sex lives so that's restricted by GDPR.

I could go on. The point is, it's not enough to just not abuse your user's data and cross your fingers to be GDPR compliant.