skysight-inc/HackerNews huggingface dataset:
You know the concept of FUD. We saw it many times before.

Please take a look at the full enforcement process:

https://ec.europa.eu/commission/sites/beta-political/files/d...

You don't have to take my word for it, this is not legal counsel, it is just reading the law before jumping to extreme conclusions.
So, a slightly narrower scope than the usual psychology study.
Show HN: Copycoding- Collect and organize all your reusable code snippets online
Nobody expects the Spanish Inquisition
I am doing this right now, but I think we can solve this issue without needing user styles.

HN looks super sharp and usable on mobile, why not achieve some usability on desktop as well. All that is required is a simple media query for browser windows larger than 1400px in width or using responsive units.
Can someone explain in more detail why they aren't able why they aren't able to cover certain TLDs (including several falling under GDPR in the EU)? Their FAQ says: "Due to registry restrictions, WhoisGuard cannot be used with .asia, .ca, .cn, .uk, .co.uk, .de, .eu, .in, .id, .me, .uk, .nu, .li, .ch, .fr, .sg, .com.sg, .org.uk, .us, .es, .com.es, .nom.es, .org.es, .com.au, .net.au, .paris, .vote, .voto, .xn--3ds443g, .nyc, or .org.au domains."
Posix Threads Tutorial
> In any case, the fines aren't the problem. It's the cost and distraction of going through this process.

>> fines are an exception. There are other machanisms to protect the users

Fines aren’t the problem. It’s the cost and distraction of going through this process. Those “other mechanisms” are still costly and distracting, even if you did nothing wrong.
No, the letters are - unfortunately - not FUD, they are legitimate DSARs and the letter has been carefully worded to give cover to the writer.

https://ico.org.uk/for-organisations/guide-to-the-general-da...

Is a good starting point. Yes, you can refuse a request if it does not qualify but in this case there is more than enough meat to take it serious.
New in town? How to change code without fear
Financial boost for small businesses in Rwanda
Facebook Tools Are Used to Screen Out Older Job Seekers, Lawsuit Claims
Ask HN: Why not AI/ML much used in web-application/computer security?
AI is evolving like anything in these days. But i can only find countable number of startups/security guys using AI.

Is there anything that has to evolve to have a bubble in security by AI?

DarkTrace, Zenedge(recently acquired by oracle) are doing good
> Modern password management services are incredibly secure

There lots of password managers that have had gaping vulnerabilities. From memory I'm sure I've seen LastPass vulnerabilities top HN just a while ago... yeah probably this one: https://www.bankinfosecurity.com/lastpass-patches-password-m...
Yeah I see this a lot. Like in the US they seem to go after individual doctors for mistakes. In Norway it is more the hospital which gets punished.

Also economical compensation for medical error is something you apply to the government to get. If you think they pay too little or don't pay then you go to court.

I've noticed that in the US almost everything seems to go to court straight away. In Norway and probably rest of Europe there are much more non-court systems to deal with problems.

E.g. if a company has behaved badly you contact the consumer ombudsman and they will make a ruling or advocate on your behalf. They kind of collect complaints from many consumers and will get more involved if more consumers complain.

Companies will usually follow a ruling by the consumer ombudsman. If they don't do anything then that is when you get into court.

It might be one of the reasons why there are significantly fewer lawyers in Europe than the US.
Detailed GDPR Compliance Checklist
Yes. It’s a marketing thing. (Someone correct me if i’m wrong) As I know, all domain name sellers should default to privacy (aka Whois guard) due to GDPR.
Yes, it is a false dichotomy, but the point is that it is one that follows directly from your argument: all your 'just like' comparisons apply as well to human biology as they do to the study of the mind, and if a thing studying itself is hopelessly compromised by subjectivity, then, by your argument, this must be so for human biology.

History is another example of human self-study that is not rendered impossible by subjectivity. In this case, there is a term, 'whig history', for one form in which the investigator's bias is applied to his analysis of past events. The fact that this term exists, and that the phenomenon it labels can be identified and corrected for, shows that it is possible to work around the subjectivity of self-study.

As for quantum mechanics, it seems there is indeed a good deal of subjectivity, at least in the Copenhagen interpretation. By your argument, that should have destroyed physics as an objective science, yet physics has been extraordinarily fruitful since the discovery of QM. Here is an example of Luboš Motl dealing, in his characteristic style, with subjectivity, and, in fact, discussing the topic "Why subjective quantum mechanics allows objective science."

https://motls.blogspot.com/2012/11/why-subjective-quantum-me...

It is somewhat ironic that all your arguments for the impossibility of understanding the mind, on account of a lack of objectivity, are themselves subjective.

You are, of course, free to hold the opinion that there is something about consciousness that will put it forever beyond our understanding, and I cannot prove that there is not, but until we run into that barrier, I prefer to apply Occam's razor to the proposition.
This HN comment is probably one of the best explanations of why npm can be objectively said to be unreliable. I think it deserves attention.

https://news.ycombinator.com/item?id=17176486
They kicked off about a month ago. At work we could see them come online by the form letters they sent.
The DMCA?
The Netherlands is taxing (my) Bitcoin holdings as well. The way they do that, is by depending on my honesty. The reason I'm honest is because I don't want any troubles when I'm going to buy my lambo (no, not serious).

Afaik Bitcoin is handled the same as cash: they don't really check how much you have, but they will come down hard when you start spending more than you should be able to.
CSV is also a viable choice here, for the simple reason that it can be imported directly into any spreadsheet software* for inspection and filtering.

* Ironically, people are using Google Drive to do this.
> or Homer J Simpson

BTW relevant episode is called "Homer to the Max".
Omegle used to do something like this. The random stranger chats often started with prompts (but I don't remember what they were).
Proving life exists on Earth
The average user clicks through privacy agreements and contracts without looking. It's up to us to promote good behaviour by technology vendors rather than say I told you so later which is the current status quo.
Effectiveness of anonymization in double-blind peer review
The problem is you have to do all that or face fines and lawsuits which is outside the risk envelope of most people's side projects.
It's always been free at google domains.

https://domains.google/#/
How Wired Lost $100,000 in Bitcoin
They made a mistake by releasing all the stings together. They should have released a few first so other players can pounce upon in a hurry to tweet. That would have atleast got the discussion started.

Infact "Economic Times" (part of Times Group, who's CEO was in the sting) did happen to write about it and later deleted it.
Google is doomed, if this takes off. Short Google !
nil doesn't have to be a failure mode, if we are programming with data it can just mean "empty". The trouble, I think you would point out, is that (.send bus payload) doesn't have a sensible definition of empty – because the bus reference is imperative/stateful/object oriented, not data oriented. Nil punning can't help with foreign interop to imperative systems, but that doesn't mean nil is the root cause of the pain. The imperative dependency is.
If you're not collecting any information "interfacing with the regulator" means replying to their email by saying "we're not collecting any information". (Assuming they even got that far, given that they'd likely take a look at your website and notice you aren't collecting any information.)

I'm not sure what's risky, expensive or time consuming about that.
I'm generally for the idea of staying active, to promote healing with prescribed movement and 30 hours/week of physicsl activity isn't unheard of in my life -

but I'm not sure "always" is the right answer ... always.

I do agree that a lack of physical exercise can cause its own type of pain that counterintuitively can be relieved with movement, or the best thing after a long run is a brisk jog the next day, but if I severly sprain an ankle, maybe it's best to just rest that ankle for a while.
That's a blatant violation then.
Exactly. The term could have been "storing", but that would have been potentially too narrow, as it could be argued that proxies are excluded. As such, "processing" is like a more complete term for "storing or handling".
> The GDPR isn't any more onerous than any of those, it's just new

It’s different. “Complain and investigate” regulatory regimes are expensive to comply with. That is irrespective of whether one is doing anything wrong.

These regimes aren’t inherently faulty. They’re quite good in the American securities business. But they create a palpable incumbency bias, as well as one towards those who can afford lawyers and make a useful phone call.

Such a regime would have been ideal if constrained to large companies. Rolling it out for everyone means anyone mis-interpreting something could trigger a regulatory investigation. Even if found innocent at the end, that process is harrowing, expensive and distracting.

Every jurisdiction has its costs and benefits. Europe is still a huge market. But if one doesn’t see enough revenues to justify a dedicated compliance person, it’s a market which may now make sense to delay going into.
Dynamic Bézier Curves
s/very US centric/realistic/

A law allows what it allows. 'Let's pass a law that sets a maximum penalty of death, but promise just to impose $10 fines for the first decade' is a recipe for disaster.

A law which purports to protect privacy but instead demands that any visitor be permitted to rewrite your year-old web server logs is beyond Orwellian.
That looks amazing. Does anybody remember grooveshark? It had their own little group of popular DJs who would live-edit their playlists and thousands would listen in. This leads me to the question: Do I need to know the person(s) I'm listening with or can someone actually generate a following through your platform? Also, what do you need camera access for?
Wouldn't that be more of an issue of not having an SLA between SaaS and client?

If the silly non-automated dashboard is part of the SLA, then it costs someone money/liability/trust to not maintain it, otherwise "who cares as long the issue gets resolved, people who care about the issue are tracking the bug report?"
Why do you consider testing a punishment?
Ask HN: How to Use HashiCorp Vault for SSH with Windows SSH Clients?
Any idea if there are utilities that make it easier to use Vault for SSH access when users are using windows as their workstation?

The Vault's SSH OTP is annoying if you expect users that login to hundreds of servers every day to run a CLI command each time.

As far as I know, Vault's CA Signed SSH Keys are not supported in any of the popular SSH clients other than OpenSSH, most users on windows do not use the CLI OpenSSH as their client and its a hassle to expect them to switch.

I'm not talking about myself, or one other person. I'm talking about an enterprise with hundreds of admins and developers who do a LOT of ssh-ing. Having them all switch to something different than what they use now will be a show stopper for this whole project.
But what is the value-add of this service?

Complex passwords are quite useful if the server gets hacked and someone walks away with the (salted) password hashes. Against brute-forcing passwords at the login screen of an application they don't add much value, other than making it the user quite hard to remember what the password for this particular site could be...

Theoretically, if you block a user ID after say 5 or so invalid logins, almost any bad password from the Have I been P0wned list will prevent you from being hacked. The chance that you pick exactly that password from the 1-million or so list is quite minimal.

So with that in mind, wouldn't this service be something for website owners that don't know how to properly secure the information they control?
I'll happily bet that I spent more time reading the GDPR than you did (such as: for the last year as a part of my day job) and you are spreading some pretty dangerous information in this thread up to and including telling people to ignore legitimate requests under the law.

If you give out that kind of advise and in such an unqualified manner you should not then follow up by saying that 'this is not legal counsel'.

A DSAR is a legitimate request under the law if you feel that this particular letter is not a legitimate request then you should address that with specifics.
> OS work

What is OS in this context? Operative System? Open Source? Other Stuff?
It's not a log-scale graph for the things you talk about. Y-axes are linear scale. So for O(1) algorithm time has an upper bound and plateaus as caches stop being helpful and every operation has to go all the way into the RAM.
') DROP TABLE Employees;--
This actually seems more comprehensive than most. They tested multiple times!

There is a pretty decent episode of Freakonomics Radio around how reproducible (or not) many psychological studies are. I know this is an issue for most studies, but Psychology seems to be in a league of their own with the "reproduction rate".
Not sure about the others, but if you do a whois on a .ca domain you will see it already returns a proxy address (Canadian Internet Registration Authority). You have to provide a valid Canadian address to register a .ca, but they'll only give that information to law enforcement.
Hey, these are great. Must have taken a lot of work. Nice job!

I wanted to do the same thing for a long time, but never got around to it, so seeing this made me very happy.

It mostly works on my phone, too (layout).
Consumer says “I think you’re lying” and forwards to their national data regulator. (This is as simple as writing an e-mail.)

Data regulator now asks you questions. You must respond. Hopefully they agree with you. But maybe not! Twenty-eight regulators appointed by different political groups are a complex system. You will need to gain expertise on them or hire someone with it.

All I’m saying is that time and money might be better used elsewhere. Particularly by someone just making side projects.
>a representative sample estimated to reflect over 475 million US adults.

Thems some odd numbers
Sending boilerplate almost guarantees that a regulator will put your request at the bottom of the pile if you decide to take it to the next level unless the company responds in a way that shows their contempt for the law.
Mind to share what you choose to use?
Well, for the full enforcement process: if your answer is not satisfactory, I will forward my letter (together with the notice of non-answer, or the notice of unsatisfactory answer) to my national data protection agency. Believe it or not, it's just an email. From there on, you have bureaucrats (who are paid for this & motivated to write fines) that will take up the legal process. The whole setup is similar to the consumer protection agency - and I hardly ever have to do anything after notifying that agency, I just receive a later with the resolution after a few months.
This is awesome! Order of the Phoenix has a special place in my heart as well, because this was the first book I have read in English :D Me and my mom didn't want to wait half a year for translation.

But actually on-upping professional translators? That sounds amazing!
Is the deal flow a challenge for angel investors?

Isn't that what AngelList tried to do, a marketplace for Angels and Founders? I will suggest researching/sniffing around AngelList business to see what worked and what didn't work and what could be done differently to overcome challenges AngelList encountered.
> The best way to deal with that is to answer the request in detail

I keep hearing this but I think in reality the volume of troll requests will dictate whether that is practical or not for any given company. Small startups might have problems if that volume is not proportionately small.
Please stop spreading incorrect (and identical) advice all over this thread.

https://news.ycombinator.com/item?id=17178562
Thanks!

1. You don't need to know the person in order to listen with them. What you do is you create a room (or join an existing one) and then you can either step up and DJ in the room (with friends or strangers) or you can just do nothing and listen to what people play. You can also make rooms private if you want to do it w/ just people you know.

2. I need camera access so you can upload your avatar. I should probably only request it at the time of upload however- so that's my fault and I'll look into fixing it.

3. I didn't try that Grooveshark feature but it sounds similar. It draws a bit of inspiration from turntable.fm which has been out of business for a couple years.
Ovh. They also always had this service for free.
Yes, that status page is only for the registry.

This error was in how clients were appending ports to the HOST header.
High-Frequency Trading for Bitcoins
There's no need for that, TOTP runs everywhere, including J2ME apps installed from WAP.
I've been on JQBX just about every day for a while now. The sense of community on this site is amazing.
Quick and dirty encryption and steganography script using Openssl
Sinopia was used at a previous job https://github.com/rlidwka/sinopia
Sure, looking forward to that!
Critique my second amateur boxing fight please im in Blue
> you need to respond to requests to (a) tell a person what data you hold on them, (b) tell them what you do with the data, and (c) delete it if asked, unless you have a legitimate reason to keep it

Over the course of a few years, doing these things might take up as much time as it would to learn a new language. For a side project, I’m not sure that’s a smart trade-off.
Thanks! Couldn't do it without you :)
Please, take a look at the user's rights:

https://ec.europa.eu/info/law/law-topic/data-protection/refo...
That is a fair point.

My concern though is that when companies see an example in which someone deflects on addressing a real need for private space, and externalizes the cost onto the employee (via micromanaged work-from-home), it sets a precedent that further entrenches open plan designs for new offices later on, and also discounts the value of investing to rebuild office dividers and spending to change from an open plan back to offices.

I’ve had fully remote jobs before and jobs where I could generally WFH when needed, but neither option provides a good solution.

If your spouse lives with you, they might need to generate noise at home, especially if there are young children. Or you might just live in a cramped city apartment with no space for a desk, or noisy neighbors, etc.

The point is that this pushes the costs onto the employee: “here, you figure this out.” But providing good tools to get the work done is the employer’s responsibility. WFH solutions let them try to absolve that duty, often without actually resulting in private or quiet space for the worker anyway.

A better proposal might be that an employer will pay the cost to fully rent dedicated private offices at a coworking space, and then let the employees who want offices simply work from that company-rented private office space.

This way the employer bears the costs, and doesn’t view it as “right” to just lob the grenade back at the employees by leaning on WFH as the only possible way to work in a quiet setting.
It doesn't really cost much to provide. I think it was just an easy upsell.
I'm not saying you're wrong, but there is a difference between constructive feedback and merely negative feedback. Most of what I've seen is feedback with little understanding of the situation or empathy, and I think that is why people have become negative about receiving any sort of criticism. I had a boss that was great at that, and I always got constructive feedback, but those managers are far and few between. Most of the time I get things like, "The project is late." without any understanding as to how or why this happened.
This applies to .co.uk domains too.
A BitTorrent client in Python 3.5
Try to build a treehouse without following legal guidelines and see what happens to your side project.

I frankyl don't understand why web site owners are entitled to a wild west, now-law zone?
Implementing Seam Carving with Python
I don't travel enough to be worth it, but it's a good tip!
Elm actually means Elm + JS.

Given

1) The language development pace (localStorage does not have an Elm equivalent, let alone service workers, etc)

and

2) The Elm ecosystem is very closed and only one person can actually release powerful libraries in the blessed package manager.

Make it so that Elm will still not be able to do everything we need it to to write an SPA in 5 years without javascript on the side.
With GDPR coming into effect, I must say that this checklist will be useful for all of us.
Looks like it already have been implemented: https://tex.stackexchange.com/a/28033/133525

I mean having any macros name you want, even Unicode.

So you can even have \γ macros. But if you want to write \coercivenessSymbol (even on the blackboard) we cannot stop you - after all it gives you pleasure.

My conclusion about this feature: https://github.com/kiwi0fruit/sugartex/issues/1
The problem would be in answering just one of these, then the amount of effort would be disproportionately large. But to answer a whole bunch of them is a 'mere matter of programming' unless you've really made a mess of things.
Elixir State Management: Agent or GenServer? (2017)
Taming Irreversibility with Feature Flags
I'm not sure if it's a model thing or just that software has bugs, but lots of people really dislike Maven. Not sure it's an example of a good package manager.
Test Strategy for Microservices
Office Inspiration 2018 – A Recap of Boston Tech Office Tours
The VentureFizz Podcast: TJ Mahony – Partner at Accomplice
Hmmm, is it possible to edit post titles? :/
Fines are just the last resort. There are many mechanisms that the DPA office can take.
Take a look at the user's rights here:

https://ec.europa.eu/info/law/law-topic/data-protection/refo...

As you can see, the letter clearly extralimitates the user's rights. So you can forward as many letters as you want but that's not gonna work.
The law was engineered to inflict maximum damage for abuse of personal data.

This letter is designed to inflict maximum administrative paperwork without first establishing whether abuse has taken place.

Also, "grave economic harm" cannot be dealt with such a simple letter. The maximum fine cannot be levied by individuals, only regulators, and they will not do so for individual cases.
Can someone tell me is it legal (or even viable) to just automatically completely remove all the information on the person sending those letters? Certainly beats banning whole EU by IP.