skysight-inc/HackerNews huggingface dataset:
The ipfs.io url is a public IPFS gateway, ie. bunch of IPFS nodes running on servers and "caching" content to be served through that domain. From that perspective, you're not accessing the content through the IPFS protocol but through http like any website. It's a public service operated by the IPFS community, but underneath it does all the "...get it to look-up some distributed hash table in order to find peers with the content (a la torrents)".

However, if you install the IPFS client (https://dist.ipfs.io/#go-ipfs), you can get the blog post peer-to-peer through IPFS by running `ipfs get QmY2LufsW3v6AfxTTkp6SGqDGa5AeJhSZXH8RSsdiao4Ds`. Note how the hash in the ipfs.io url is the hash of the content stored in IPFS.

Hope this clarifies it!
> DBUS replaced dcop and things became a complicated mess

That's what happens when one makes compromise with Gnome people. It's too late to undo the damage, but we can learn a valuable lesson.
How the Go runtime  implements maps efficiently  (without generics)
...or people can "feel" their general status and therefore those that think they will not live long didn't actually live long.
Show HN: Monsiv – A lightweight alternative to Chess
TL;DR: all countries use their own definition of sea level, and this can cause issues when building bridges between countries. There is a proposal to standardise on a global sea level or distance from earth's centre, but politics may be involved.
Thanks! Sounds great and I‘ll look into it for the next project/use case!
If he intends it to be working and accessible, and if he doesn't know that it's not working, then simply using a proxy is good for me, but bad for him.

I like to provide value to people who write articles worth reading. Jacques is definitely one of them.
> Note, I think, you also need to be GDPR compliant for EU users when they are not in the EU.

No, location is what matters. Of course one could argue if IP is a reliable indicator of location, given VPNs, potentially faulty GeoIP databases, ...
Because people then use that letter to increase the burden on companies 'just for kicks', it creates an asymmetry that the law did not intend. It forces attention away from the positive effects of the law and gives companies reasons to say 'see, this is what you get'. It's irresponsible.
The CISO Needs to Be a Business Leader More Than a Technical Leader
Thank you.

It's a bit sad that you require a whole new client. I think that will add enormous friciton to adoption, no?
when states issue more currency to buy bonds, do you call that stealing?

This clearly inflation and possibly fraud (depending on what claims were made when you bought the crypto coin), but I don't think you can call it theft (unless you think all inflation is theft).
A corrupt data center official has much easier options to attack bitcoin at the network level. For example, a rogue sysadmin at a major Tier 1 ISP could use BGP hijacking to mount a partitioning attack against the network.

See the paper “Hijacking Bitcoin: Routing Attacks on Cryptocurrencies” [0] for more details on this.

[0] https://btc-hijack.ethz.ch/files/btc_hijack.pdf
Survey of 700 chefs predicts top 20 food trends for 2018
this is pretty much how i feel about computing in general

if it works, it works, though.
I've added the non-working IP address into the original reply in case that's of value.
The article's just full of people saying this isn't what will happen so who's saying it will happen exactly?
Unfortunately, that doesn't match my experience at all. Haskell requires understanding many more concepts to use effectively than Clojure. Lazy evaluation, large syntax, and the advanced type system all add complexity. My experience is that it takes people a long time before they're able to read and write idiomatic Haskell code without assistance.

With Clojure, we're able to do a very quick ramp up, and then have new hires write code with very little assistance from the rest of the team. I simply haven't seen this be the case with Haskell even for experienced developers.
There's work on running the IPFS protocol over WebRTC, so yes, it makes sense and is another way of enabling normal browsers to access it.
Why can't they just make it opt-in?

When one of my kids ask for something and I say no, they might ask again. But the more they continue to ask, the more determined I am to say no. The difference between me and Microsoft (in this context), is I'm trying to bring up respectful children.

This is just what Microsoft are doing - judging by the +1's, there's a huge majority of users who just don't want this. Instead of giving their customers what they're asking for, they just dig their heels in further. This is one of the main reasons I started the transition away from Windows since the 8 preview.

They said that making it opt-in would mean less data. Well, doesn't that tell them something?

I'm sure the .NET team would have got the same answers if this where opt-in - and let's face it, the discoveries aren't exactly ground breaking.

If you ask me, I probably would have opted in. I'm sure other people would do the same (if they could). But it's not, so I jumped through the hoops to disable it (added it to /etc/environment). You don't ask, you don't get.

And another thing, why not disable it using the registry when running on Windows? Personal experience tells me that only a minority of Windows devs even know what an environment variable is, let alone know how to set to globally and persistent.

It's arguable whether or not this is personally identifiable. Even if it's not, it still leaves a bad taste as it's still classed as "spying" - they're sneaking the data out by making people take effort to disable it; it's beyond a simple Y/N, people have to actually learn how to do something. And it's also giving people the impression that their own apps will be contaminated.

It's a command-line tool I'm running on my local computer for professional use, not a click-bait website or social media platform.
>When searching for the absolute maxima

Another corollary: When searching for an absolute maximum in a population of individuals with the ability to communicate with each other, it may be helpful to compare notes with those who appear to be at higher levels on the dimension whose maximum you are seeking.

Also, choose the right dimension (or projection).
I've yet to see anything other than PoW that's got all four;

* genuine decentralization

* reliably generates a concensus with global supermajority, little or no forking (objective chain selection)

* fault tolerant network, minimal fragility / auto recovering, can't be permanently crashed / hijacked

* requires no human intervention

Everything I've seen so far in terms of PoS violates at least one of the above.

Hashgraph doesn't deal with concensus (it offload that to other layers), Ripple doesn't really deal with decentralization, Algorand is fragile, most PoS require human intervention besides often having several other faults.

Also there's probably more criteria like these that matter.
What very few people talk about is eliminating taxes on diesel fuel. That would lower costs and increase margins which would result in companies being able to pay more.

You must be new to capitalism. Snark aside, I doubt most trucking companies will raise wages if their margins are increased. Most likely it will result in bonuses for management.
I'm not an Apple customer, but it's moves like these that really make me glad sometimes that it moves the industry like this. Consumers stand a lot to gain from OLED. Lower power consumption has obvious benefits such as either a longer battery life or lighter/thinner phones, depending on what manufacturers believe consumers want, but also non-obvious ones like always-on displays such as those on the Samsung Galaxy and on a lot of smartwatches, which for me are almost a game changer for some daily functions.

One point that this article missed, however: OLEDs suffer from burn-in.
I am going through Steven Skiena's book on Algorithms. It's quite a nice refresher.
> But those stations are pretty rare

In my experience, not all stations have natural gas, but it's not exactly rare. I found a list which matched my intuition: http://www.gasnet.com.br/postos_gnv_lista.asp?nomestado=Rio%... shows 531 stations on my state, several cities have 10 or more, the state capital has over 200.
Strange how spotty the problem is. Anyway, I'm sure the guys at my hosting provider are on top of this.
I haven't done security research for a long time, but the way I did it was to pick a specific category of vulnerability (say, SQL injection) and try to exploit it everywhere you can possibly think of, where there is a potential for input.

Even nowadays, I regularly see people leave their systems open to these super basic input validation vulnerabilities because they only think about doing things right on the surface area, but then they'll have some batch process that analyses log files as a one-off script that is vulnerable if the user has a malicious http header or something like that.

Another way would be to try and think how a particular thing was written and figure out ways you can break it. I found plenty of buffer overflow vulns in custom TCP servers this way, but you can also find less serious things that let you do things you're not supposed to.

For example, an ecommerce business that would let you add an optional service charge allowed negative numbers (to deduct money from the order).

Another online shop had test item ids with negative prices in the database.
I experience the same, UK based.
Yes, very handy, thank you.
>there is no one external purpose

Avoiding pain and seeking pleasure seems to be a built in goal to almost all living beings.

No living thing creates that goal for themselves, it comes built in.

One of the easiest way to find meaning then, is to strive to reduce other sentient beings sufferings, and to increase their happiness.

There is no need for a god, or an idea of a god to promote this point of view.
Middle name initials enhance evaluations of intellectual performance (2014)
I don't agree that this is trolling, even if it is a fishing expedition. The primary purpose appears to be to probe for GDPR compliance, which is a valid expectation of customers and prospective customers (Europeans at least).
I feel like I have a pretty clear idea of the rules in the cases you describe. For GDPR I have no such confidence.

It seems like the smart thing for US startups to do right now is ignore EU customers until they’ve validated the business idea enough to justify the engineering and legal expenses of taking this on.
Is this a test case? Kenya is a global pioneer in mobile money (Vodaphone M-Pesa). German publishers are seeking upload filters in the EU, with a scope that far exceeds video, e.g. Github has objected to source code upload filtering.

Upload filters may soon become EU law: https://news.ycombinator.com/item?id=17164244
DOUG FORD'S LAST CHANCE TO MAKE a FIRST IMPRESSION JAYDO
Depends on how far back they're capable of rewriting the chain.
Doesn't load for me either from several different IPs in France. Downloaded the HTML from a server in the US. Really weird.

I've mirrored it here in case it may help:
http://blogs.intellique.com/so-your-start-up-receive-the-nig...
> even if the claimant has no use for a lot of the information they are requesting.

It's not about wether the information is useful or not, it's about seeing what a company has.

If I get some unsolicited comms from a company then I'm going to want to get information about all the data they hold on me, preferably including where they got it from and where they sent it to.
Do Rothschilds control cryptocurrencies? – Etherium founder asks
Alright, let me rephrase: I am interested in such companies that somehow have my details on record despite me never contacting them, and who show no understanding of the principles of GDPR; in particular I want to know what they hold about me and what the source of their data is, which is why I send the letter (which I have modified to remove the stuff I am not concerned about).
Some of them have since replied with "we've gone ahead and deleted all your data", which could be interpreted in many ways I guess
> I feel like I have a pretty clear idea of the rules in the cases you describe. For GDPR I have no such confidence.

I seems reasonable, but I would argue it's due to the law being new, not to some intrinsic property of it, no?
Either way, it cant represent 64 bit integers unless they are boxed (which is very slow)
I have a general question about this. If you have a privacy policy which discusses (amongst other things) the answers to these questions, would it be sufficient to just reply directing the customer to that privacy policy? i.e. let him dig out the answers he "needs" from there.
Ugh. Between burn in and PWM, OLED is not ready for prime time yet. (And it may never be at this rate.)
You can probe for GDPR compliance without inflicting a large amount of work on the counterparty, assuming that you are on friendly terms.

For instance, if you wish to know if they are GDPR compliant you could ask them something along the lines of "Hello there dear valued business relationship, I would like to know if you are aware of the changes in legislation re. privacy and if so whether or not you are at present compliant with that law and if not if you have a time-table when you will be'.

To ask for the maximum under threat of reporting a party to the regulator is not aligned with 'probing for GDPR compliance'.
Nope. But note you said pallet. Nothing stopping those pallets from making the long haul on tracks, and the last mile on a truck.

(Except politics, that is)
> What actually stops me from launching such an attack on something like Einsteinium?

- lack of exchanges accepting it
- delays on withdraw/deposit to/from exchange
- exchanges requiring verification of user PI

That is probably all.
Supply in token count is effectively infinite, yes. But what's the supply in VALUABLE tokens?

The availability of gold in the galaxy Andromeda doesn't affect gold prices on earth. Not equivalent analogy, but related - your market will only be hurt if there's economically accessible supply of equivalent or competing assets that fulfills the same need.

Valueless tokens don't fulfill the same need.
I think this is a totally flawed way of thinking. Most systems do not need a fully distributed database, for example, and as a result most don't need the flexibility.

E.g. over years of using Etcd. I've come to the conclusion that none of the uses I've actually used it for were necessary, and so I've generally stopped using it. I'll use it again if I come across instances where consistency is sufficiently critical and the system needs to be distributed, but that's a rare situation to be in. E.g. I've seen lots of systems try to use it to distribute configuration data. Most of the time this doesn't need to be consistent, as long as you can determine whether or not it is (and so take outdated instances out of rotation, or not put them back in rotation). Same for load balancer configs, for example.

It's gone to the point where whenever someone mentions "distributed database" alarm bells goes off in my head. 9 out of 10 times it's a sign of someone over-engineering a system and building in unnecessary complexity.

What I want out of a system to manage my containers is something that reduces complexity of deployment and operation, not something that introduces more complexity. So far I've seen nothing of Kubernetes that indicates it fits that bill. Maybe it does on the very high end. My largest systems have "only" been in the few hundred containers/VM range over dozens of servers in 4-5 physical locations (on premises/co-location, managed and public cloud). For that scale, I've personally found Kubernetes overkill and adding too much complexity.

Maybe that'll change some day as it matures, but I'm not in a rush to complicate my stacks.
It doesn't really matter which hash function they use here... Your common MAC-48 address is a [Manufacturer ID (3 bytes), Device ID (3 bytes)], this further reduces the enumeration requirements...
SugarTeX is tweakable. You can write your own Panflute Pandoc filter that additionally defines new non-standard replacements alike yet defined in SugarTeX. But I dont know if you need it: LaTeX macroses are valid SugarTeX too after all and they are quite powerfull.
I think it depends on what the use case for IPFS is. Many use it "server-side" to just transfer and store files, so a "native client" makes a lot of sense. The IPFS devs always recognized the importance of the browser though and as such js-ipfs (https://github.com/ipfs/js-ipfs) has always been a first-class implementation of IPFS. With js-ipfs, the IPFS protocol works in the browser and can be embedded to JavaScript applications in a way that doesn't "require a new client".

Highly recommend to read into IPFS and how it works to understand the various use cases and possibilities. A good starting point would be https://ipfs.io/ and https://github.com/ipfs/ipfs.
Invalid comparison, in my humble opinion.

Pushing a secret API key to github, even accidentally, does not happen covertly or as an unexpected side effect of some other tool written by github, and you'll soon realize what happens because you'll see your key sitting there. You also have a general idea of what you are playing with when you start using github, whether it's private repos or public repos.

Having a local CLI tool submit your secret API key as part of telemetry collecting command line arguments is totally unexpected and invisible for the user, and you won't even see it has happened.
It's a bit like that old Radio Yerevan Soviet joke.

Caller: Is it true that Comrade Petrov in Leningrad received a car from the Party?

Radio Yerevan: Yes, it is true! Though it wasn't a car, instead it was a bicycle. And he didn't get it, his bike was taken away by the Party.
Any large enough bundle of carelessly collected metadata will be enough to identify a person.
In part this form letter seems to assume that all the burden is on the company, whereas if the company has already answered these questions in a public medium you could (1) take that as a signal that the claimant is a troll (otherwise they would have read your privacy policy) and (2) that they probably don't care about the answer, they're just looking for a reason to stir the pot, so any deficient answer will be used to contact the regulator.

The best way to deal with that is to answer the request in detail (which makes it very unlikely that a regulator would follow up if there was a complaint) and to refer to public resources such as your privacy policy because that's something that indicates that the claimant didn't do their homework, which is something a regulator will use to weigh whether or not to follow up on the complaint.
3 Ways You Can Benefit from App Gamification
Jacques, thanks a million for your work on this topic. It makes me feel much more confident about being able to efficiently handle such a nightmare letter if it one day comes.
You short a small currency not bitcoin.
Here it is: https://www.dougs.fr/
(there may be referal bonuses if you want to subscribe, we can PM each other)
Paywalled.
Scihub has it (DOI: 10.1145/3177540.3177542)
Yes, this is more or less what rms wants to happen: that GNU gets the benefits of macOS. Then when both OSes can use those colourful emojis, he will accept the code into Emacs.
This looks like the original article that everyone is basing this information on:

http://www.etnews.com/20180528000239 (in Korean)

> Apple has decided to adopt organic light emitting diodes (OLEDs) next year for all new iPhone models. In addition to premium smartphones, we will also adopt OLED in entry-level models.

> According to industry sources on the 28th, Apple recently launched a new iPhone model in 2019 and decided to adopt OLED for all three. In the meantime, the industry has released two iPhones, one with OLED and one with LCD, and will make the same choice next year.
Then you ask that without resorting to threats of reporting someone to the regulators unless that is your whole goal.

Keep in mind that the writer of the letter claims he/she is a 'customer of the company', so a friendly relationship, not a hostile one like the one that you are describing. Those are totally different situations and different strategies apply.
Honestly, I'm not interested in buying an OLED device until it can be confirmed that burn-in won't be a problem for at least 4 years. That's just me being stubborn....
I went down the rabbit hole on this one a little. They're sending a SHA256 hash of the user's mac address with every telemetry event (which can be trivially reversed. I leave it to the reader to decide whether MAC addresses are personal identifiers).

And also for what it's worth, it appears that they are using this ID to correlate what users are doing across their products - as indicated by this comment: "// The hashed mac address needs to be the same hashed value as produced by the other distinct sources given the same input. (e.g. VsCode)"
(https://github.com/dotnet/cli/blob/b45f1fb439b36872c249b07f1...)
Anywhere that has made my acceptance an "opt in" I have then sent a polite email asking for my details to be removed. I'm happy to continue to use any services that follow GDPR and use them with the minimum of fuss; but anywhere that feels like they're trying to worm their way around the law feels like the kind of organisation the GDPR is designed to protect us against.

Thankfully the responses I've had thus far have been equally amicable.
The article mentions burn-in.
Is flickering the issue with PWM? The article does mention Apple’s research in microLED.

Edit: iPhoneX flickering: https://blog.elcomsoft.com/2018/03/iphone-x-eye-strain-how-t...
It's the same as all the prices should be with tax
Is artificial intelligence the future of drug discovery?
From the ICO: (the UK regulator)

How should we provide the data to individuals?

If an individual makes a request electronically, you should provide the information in a commonly used electronic format, unless the individual requests otherwise.

The GDPR includes a best practice recommendation that, where possible, organisations should be able to provide remote access to a secure self-service system which would provide the individual with direct access to his or her information (Recital 63). This will not be appropriate for all organisations, but there are some sectors where this may work well.

However, providing remote access should not adversely affect the rights and freedoms of others – including trade secrets or intellectual property.

Ref: https://ico.org.uk/for-organisations/guide-to-the-general-da...
I think that's what people (used to?) call "ego-dystonic" situations (?). I like the zen of the particular wording you give.
De Beers to sell diamonds made in a lab
You don't need a budget, you need to feel in control of your finances and knowing your net worth is the way to do it.
Knowing that I spent $312.23 on groceries is not.

If/when your net worth is too risky for you get more tight and try to improve it every month. If/when you feel confortable with your number you can loosen up. I started to track it in a spreadsheet every month. I loosen up to every quarter. This is my new religion.
I've described how I'm preparing for GDPR as a solo developer running commercial side projects without a legal team to back me up: https://pawelurbanek.com/gdpr-compliance-blog-rails