skysight-inc/HackerNews huggingface dataset:
I've mentioned elsewhere in the thread that golden rice has yield problems, as do many GMO foods. That's partly because this kind of genetic modification isn't actually all that controlled; one of the side effects is that it disrupts a random selection of completely unrelated genes.
While the other suggestions are great, I would really like some kind of write up on who these people are. Send them on weird paths, hell yes, but

- not on company time, this is not crucial to the business

- try to collect as much information on the attackers (are they really "hackers"?) as possible, the info they send you, how they react to your challenges ... and share it with us!

Thanks and have fun!
Oops. That isn't gdpr compliant!
You are wrong. The entire point of the law is to stop this being an option.
So? Projects like that aren't forbidden now that the GDPR is in force. Just put up a paragraph explaining why you need that email address, an unchecked checkbox if you want them to agree to send irrelevant emails, and you're done.

When corporations like Equifax or Cambridge Analytica have engaged in identity theft to the tune of basically half the continent of North America, you want to repeal one of the few laws fighting against it with an argument about kids in dorm rooms? It's basically the tech equivalent of "won't somebody think of the children?"
That might have something to do with the fact that Germany has 7x higher population density.
The Blockchain Awakens: Imagining Cryptocurrencies as Star Wars Characters
Only one of these stores is near my house.
Yeah, I've worked with XAML and such in .NET-land. DependencyProperties are nowhere near as painless and transparent as the state of things in Vue. Doing computed propeties, trying to use converters in a sane way, setting up templates for repeated items - all quite clunky and arcane. This falls out of doing interception at the library level rather than the language level, I think.
Thank you, I was very weirded out that the article didn't have any direct links.
Reading the law, I only see a single exception for small companies: Article 30.1 and 30.2 doesn't apply for companies less than 250 employees.

Out of an 88 page law, 1% of an auxiliary middle of the law is carved out for small companies.

I'm not sure that counts as differential application for small companies. In the US at least, large portions of entire key burdensome laws don't apply for employers below size 50, 10, 5, etc. This does not seem to be the case here.

Does anyone know whether an official impact study on innovation was even done before its passage?
Ok, sure. How do you interpret Article 6, section 1. Especially subsection f) ?

https://gdpr-info.eu/art-6-gdpr/
You're probably right, but that's the sort of thing I'm talking about.
> Most startups are doing their best to be good stewards of data, and they didn't need big global regulation to force them.

If that were true we wouldn't be seeing daily threads here (like this one) that effectively amount to "I don't want to follow the law/protect the data I collect" for months now.
Not all fishing is coastal.
Note that this 2.2 kg of rice by dry weight!!! Rice something like triples in weight when cooked, so we're talking almost 7 kg of cooked rice.
Appears to be no verdict rendered as of yet.
To be fair, the Sound has hundreds of trillions of pounds of water. 97,000 pounds of anything isn't going to make a big difference. But it would be awesome if we could stop polluting it.
This is pure clickbait. Sure, opioids are detectable in mussels from Puget Sound. That reflects the sad fact that Puget Sound is horribly polluted. I suspect that levels of some pollutants are high enough to damage human and ecosystem health. Organomercury compounds, for example. But what gets the focus is opioids. Because it's good clickbait.

Edit: Following pesfandiar's link about caffeine pollution in the Pacific Northwest, I found this about Puget Sound:[0]

> Of all the flavors trickling downstream, artificial vanilla dominates the sound, Keil said. For instance, the team found an average of about six milligrams of artificial vanilla per liter of water sampled.

Yes, 6 mg/L in water! That's not trace contamination. But "Puget Sound is vanilla flavored!" isn't so scarey, I guess.

0) https://news.nationalgeographic.com/news/2009/11/091112-drin...
What Are the Benefits of Subdomains and Subdirectories and Which Should I Use?
Would you be up for cutting out sugar for a while? It made a huge difference in my life, no longer crave sweets (chocolate).
If they’re set up pursuant to legislation and paid for by taxes they’re the government.
A system that preserves freedom—not your freedom in every particular case, but the prevalence of freedom in general for people in general—must restrict your freedom to give yours away.

You're not allowed to sell yourself to slavers, even if you want to. Slavers can't exist at all. It's understood that if they did, the slavers would exploit your "freedom" to create a world where, in reality, the circumstances leave you no alternative except to "freely choose" to be a slave.
Wait, I thought we were talking about tiny inconsequential websites here? You moving the goalposts or what?
>To illustrate: there is common belief that metaphysics became irrelevant -- that it was replaced by science. This is, in itself, a metaphysical position

I think that is wrong. What happened is that we realized we knew so little about physics that most of our meta-physical ideas were basically a case of "garbage in, garbage out." We had bad physics, and so we also had bad meta-physics. So we put meta-physics on hold until we had a body of physical knowledge that wasn't garbage to get meta about.

That's why all these "advances in metaphysics" are all physics discoveries.
I'm not sure whether you're agreeing or disagreeing with your parent comment, but I'm just tacking this on there because it feels right:

I think HN has just hit peak stupidity.

The amount of paranoia, misreading, misunderstanding, etc. about the GDPR is just insane (or intentional shilling, but let's not go all tin-foil-hatty prematurely).

Nobody who's doing anything even remotely above-board is panicking or anything of the sort. If you weren't already mostly complying with the GDPR (paperwork notwithstanding) your security practices and/or business practices were sloppy and/or dishonest and/or exploitative to begin with.

EDIT/Addendum: People who are not in the know are (somewhat understandably) a little bit nervous about "interpretation" and such, but there's a reason there's a "sliding scale" of potential penalties. Regulators don't tend to go for people/companies who are actually trying to do the right thing. They go for the people/companies who are the most egregious violators. (I hope I don't have to explain the reasoning behind this, but do ask if you're confused.)
Somewhat interesting that HN's color palette is orange, and Reddit's is teal and orange. Maybe evidence of these color trends extending beyond cinema.
That's also on one of the YC founder's blog (PG?), and really it makes a lot of sense. Let the market suggest the 2.0 version.

It sucks to fail, but hey; most people do not have the inherent desire to even play. That means something in and of itself. Good luck.
Roundup Ready — not because of the plants, but because of the glyphosate that is sprayed on them.
Do their requests indicate support for gzip for other compression protocols? One thing I've heard people do is send a response with a zip bomb that expands to essentially infinite size, causing their program to crash.

https://news.ycombinator.com/item?id=14707674
In legal contracts "whereas" often expresses sentiment but it's really the actual terms that matter. Having drafted a number of contracts, I feel most contracts generally have a section that approximates "whereas everyone wants things to go well and everyone to benefit..."

That's great that your company works well with GDPR. I imagine many companies will. I'm also sure that the impact on your backups could have been had without the law if you so chose.

However, an organisation that works inside the UK (EU) serving many EU paying customers (presuming here) is very different from say, Instapaper, who pulled out of the EU today because they don't make very much money from EU customers.

If we pass a regulation that says everyone who is in New York for any amount of time must pass an annual 1 hour health exam (conducted by NY state), I imagine this to be totally acceptable to New Yorkers. It correlates with good public policy: you prevent communicable diseases, and can catch health problem before it gets big. However, if this rule were to be enforced strongly, someone who might stop by once or twice a year probably is better off never coming.
Nothing about this GDPR protest has been helpful compared to what the consequences of just rolling forward and silently introducing whatever deletion features are required.
Show HN: Sheng, a Small but Fast Deterministic Finite Automaton
Plus it leaves the market open for other businesses who are actually compliant so they can capture a bigger slice of the market than the existing services. There really is a lot to win.
As someone often engaged in nonmalicious (but unwelcomed) scraping, this is one of the anti scraping measures I fear most
Why Are Dutch-Americans So Different from the Dutch?
Small and especially medium business is vaporized.

Textiles? Gone

Light industrial? Gone

Regional banks? Dying

Local banks? Dead

Small retail? Dead

Dairy agriculture? Dying

Family agriculture? Dead

I grew up in a small town. 20 operating farms circa 1990. 2 today. 3 agricultural/equipment dealers, today 0. 5 small/medium manufacturers... 1 today, because of a military contract. School enrollment? -25%.

I watched the beginning of decline when I was in high school. There is no anchor businesses that sustain local economies, and no access to capital. Without government spending, either indirect or direct transfer payments, a shockingly high number of US localities would be in a state of complete implosion.
Can companies do the same here?

“Are you in the EU? Y/N”
US is definitely not the only 30y fixed country in the world... how many countries are you familiar with? For example, the Netherlands has done 30y since forever. Current rates are between 2.5% (best case) and 3% (worst case with 0 down) for 30y fixed. 5y fixed is 1.2% to 1.6%, it's absolutely ridiculous.
adsense ads have not changed much since 10 years go. it had a huge effect compared to 20 years though.
> We couldn’t afford a lawyer, and the amount of time for me (the only programmer) to go through and read all the regulations and make all the requisite changes in the product I would estimate might take on the order of a month or two, which if timed poorly would’ve killed our company. I say again: at an early stage startup with one programmer, you cannot have that one programmer spending two months on compliance.

"We couldn't afford a lawyer and the amount of time for me (the only chef) to go through and read all the regulations and make all the requisite changes in the kitchen I would estimate might take on the order of a month or two, which if timed poorly would’ve killed our restaurant. I say again: at an early stage restaurant with one chef, you cannot have that one chef spending two months on compliance."

Would you eat in a place like that?
Compliance with GDPR for an existing small business might be tricky. But...

I’ve been in the “online payment processing” space for decades. When I first got involved, there were no central guidelines for handling sensitive credit card data. And to be honest, there was a lot of neglect within the industry as a result. As I share memories with my colleagues of what was done in the early days it is laughable and a horror at the same time. We were all learning on our feet.

When PCI was introduced in the mid-early 2000s, it was not easy to undo / redo things to be compliant. It took time and cost money. At the time I wished I was working on features rather than “compliance”. But we got there. It didn’t kill us, and in the end we had a better service because of it.

Fast forward a decade and I found myself working on another startup in the payments space. PCI compliance was in the very fabric from which we started - we designed things from the very beginning with PCI in mind. And that made PCI much easier overall because every decision contemplated PCI.

I feel GDPR will be similar. It will be a transitional burden because existing businesses will have to undo some practices and that is hard. But going forward startups will build services with GDPR in mind from day one, weaving compliance into the fabric of the product piece by piece, and everyone will be better off for it.

I’m sympathetic to small businesses that face a difficult transition. But I do feel that the burden is in the transition, and not something that will hang overhead forever.
San Diego Zoo opens Walkabout Australia with Māori dancers, angering two nations
A different comment character could have been chosen, but this affects nothing. It's not insane.
Outdated info - many CPAP units are happy running from batteries, and there are lots of solutions available.

I use this. You probably don’t even need a dedicated CPAP battery solution these days, but this can be bought with accessories to connect it to many popular models.

http://www.batterypowersolutions.net/product/freedom-cpap-ba...
of course not, there will be more ads. EU developers are not going to just shut down their websites, and there arent any better european ad solutions.
A double quote is in no way harder to read. Only on Hacker News.
That said, we do use ice cores from periods that would cross multiple of these cycles. If these cycles change how we estimate those values, then the statistical models we’ve built based on them will need to adjust accordingly. So, it’s not that it doesn’t have an impact, just that the impact probably doesn’t change the trend line.
I've really enjoyed CSS Grid, to the point where I wonder how I ever got by without it. It makes managing complex layouts, or even simple, much easier to manage and control.
Tarpitting is popular with SMTP, you might be able to do something similar in your web server (but only to those you have identified as "abusers", obviously!).
I'm going to call bullshit unless you can provide a source that any overseas government can levy a fine for whatever reason and then "trash my credit".
There's a fine line between tragedy and comedy. I like Ghostery a lot but this definitely falls on the latter.
> you don't have the right to come to me in five years and demand that I remove all mention of you from my diary at my own cost.

I hate to break it to you but yes I do: by doing business within the EU market you're accepting that. In fact you're accepting that the very same way that you're accepting that you can't store all your clients' credit card/cvv numbers that are used on your store.
Applogies for my assumption.
Definitely. I’ve eaten at restaurants with out power floating on the river serving fresh crocs, ate right beside the meal.

Best donut I ever ate was done up in a metal bowl sitting on a cinder block with a hole chipped into it for the tiger torch.

It’s not rocket science to make a meal without killing people.
No, GDPR effectively says that you have to get the users to opt in to your targeted ads (aka the business model) but you also cannot deny them the content if you opt out. In effect, the EU wants to get all the content for free while not paying the costs that give them such great content which is targeted advertising.

The "stealing" is because they are trying to get companies to give their content out for free without paying the cost which requires targeted advertising (and no, generic ads pay shit which is why tons of companies are blocking all the EU because they now aren't worth the server costs).
It's the opposite. "In-principle" creates lots of potential for interpretation, depending on who is doing the reading. The spirit of the law is also taken into account all the time in America.

It's really not as simple as you make it out to be and the EU has plenty of argumentative litigation.
I'll take this opportunity to plug a paper of mine, "A machine that knows its own code", as a humble example of recent progress made in philosophy :)

https://philarchive.org/archive/ALEAMT
It doesn't quite translate to that but yeah, the theme of 'make a thing and it turns against you' itself is one of the oldest around.
It's the only code example on the 'Introduction' page. I'm sorry for expecting something better.
Your Sound and the Perfect GIF= Your Keyboard with Sound?
Yes, when you're telling the angry mob why you won't give in to their irrational demands, you should definitely tell them who you are and how to hurt you...for transparency.
But they're all providing that technology to American firms who are implementing the technology rather than developing it at home. See what I'm driving at?
Yes, in fact I think I have eaten at literally hundreds of places like that all over the world.

Also: your equivalency is ridiculous. I have had a "food manager's card", which means that I am certified to oversee an entire restaurant of chefs and cooks who all presumably have their own "food handler's card". The certification took about an hour. Food handler's cards take even less time, and you'll be shocked to know that many people working in restaurants don't actually have them.
if a preexisting startup doesn't care for the market, its probably because it's too small to be worth it. This is not 1999, most ideas have been tried at least once. And experience shows that "extra privacy" is just not a selling point.
Re: Go, it describes the flags with a single dash, but it will accept them with a double dash and a more traditional style (both --string "foo" and -string="foo" are accepted, for instance)
Anonymizing like that would be GDPR compliant yes, as long as the remaining information absolutely cannot be used to identity the original subject.
...you just repeated it again. Not wanting regulation does not mean not wanting to follow the law or protect data.

Complying with GDPR can involve a significant cost, but as said multiple times already, the issue isn't data privacy and security but the vast ambiguity of the law. Costs and risk explode when the rules are vague and applied "on-principle".

There are numerous comments on this page that keep saying you need "a good reason" without realizing that is absolutely useless in a legal sense and can open up a large volley of litigation against any business.
> Part of creating a business is figuring out how to do things that won't get you sued into oblivion.

The harder that gets, the fewer businesses there will be.

If you look at businesses that managed to exist, sure, you'll see stories of how they used their "innovative entrepreneurial spirit" to triumph over every obstacle. Hurrah! What you won't see are the companies that just barely weren't able to exist, the ones that didn't quite make it through every hoop -- and it is this unseen cost that should keep every regulator up at night.
I'm kind of surprised by the number of people surprised that companies are thinking this way:

If GDRComplianceCost > EUVisitorProfitMargin Then BlockEUVisitors
You edit code, test it, and then have some program rewrite your code after testing but before it becomes an immutable commit hash?
I'm not sure if it was exactly a "home robot", but there were these programmable toy tanks called "Big Trak" of which I had one in the 80s:

https://bestofthe80s.files.wordpress.com/2012/07/mb-bigtrakg...

My sister had an Omnibot:

http://www.theoldrobots.com/omnibot2.html

I can't remember if either of us had one, but I also remember the Armatron:

https://en.wikipedia.org/wiki/Armatron
>native code can almost certainly run faster than javascript code

What if you write it in Electron though?
Or use csvkit ...
Poor quality of life? I guess my standards are low, because my quality of life here is great.
Which is an investment that we will inevitably have to make at some point. I think it makes more sense to start preparing for that future than spend money on what is appearing to be a stopgap solution like high speed rail.
No big deal. I think you're right that they scratch about the same itch.
Oh, yes, there are evolutionary dead ends, but e.g. the Moa (or even the Dodo[1]) basically evolved for really long without any evolutionary pressure towards avoiding "enemies" and thus was stuck in a local optimum with no way out.

Still ~25 seconds of sustained flight, just about the record for a chicken, I think seems like not-evolutionary-dead-end-enough to my untrained eye. :). YMMV.

[1] AFAIUI, it was humans that ultimately drove it to extiction, but it could have been any invasive species that would kill bird-like thigs. Maybe I'm wrong on that.
Dumb question, but how is the EU going to come over here to the US and file charges against me?
I guess a mix of being able to grow it for export and because other countries may look to the FDA decision for guidance.
Blue Frog tried something like this over a decade ago.

https://en.wikipedia.org/wiki/Blue_Frog

It didn't work out so well.
And what if I have already incurred the cost and am happy with my decisions, and they differ to yours? I now cannot use your potentially useful tool, even if 90% of our decisions do accord with each other. That's disappointing.
You filthy person. You're violating people's human rights! Shut it down immediately or face the consequences! The world is better off without your dirty honey trap that tries to STEAL AND THEN SELL USER DATA!!!

/s, obviously

This is only slightly more hysterical and illogical than the typical fan of the GDPR on HN seems to be.

IANAL, but if I were in your shoes, I'd either block the EU if that's easy, or just ignore this entirely. They can't enforce anything.
All those and SHRDLU.

https://news.ycombinator.com/item?id=17156049
Salts are designed to be public knowledge. They’re just supposed to be unique per hashed password to prevent rainbow table attacks against all passwords in the DB.

No two users should ever have the same salt, but they’re not a secret. As evidence I cite many of the Password Hashing Competition entries which offer “Server relief” as a feature by giving the salt to any unauthenticated client who asks so most of the hashing can be done on the client followed by a single hash iteration on the server.

A “secret per-server salt” is called “pepper” in the security community and is commonly buried in a binary or config file. Pepper has limited security value. An attacker that can get your password DB usually is able to pivot and snag config files and binaries as well.
This isn't a vast majority by any stretch of the imagination.
To be honest most of those articles look like something I want to read. Especially soda-can steganography.
...or I can just not sell to Europe. Solved.
Thanks for passing those on as well!
> Getting people to click on ads on smartphones

Clicking on ads is how they fund AI research. Not all tech is equally profitable but you need all kinds. Meanwhile EU is still debating whether it's worth getting into the AI game.
What does it make easy for you over flexbox?
If they were more efficient, they could be spending 30k per homeless person!
To disenfranchise a whole continent because you are inconvenienced is ridiculous

Oh, please. To not offer a service or website or whatever to people half a world away is not to "disenfranchise" them. I don't think you have room to call anyone else's comments "silly".
You clearly have not looked hard enough, here is a write up on him:

http://nicemangos.blogspot.ca/2018/01/jordan-peterson-his-st...

There are all of these claims for a reason. He's pseudo-scientific, he's hypocritical, he dangerously misrepresents things he doesn't agree with ideologically (C-16), he cites and uses the work of racists in his lectures and yes, he is anti-women. There is a reason why the alt-right flock to him.