skysight-inc/HackerNews huggingface dataset:
Ok. Fully admit, old unofficial sysadmin here (50, started with computers at 10 - and I don't work as a sysadmin, but often wind up helping our sysadmin who has less experience). ifconfig, netstat, lsof are some of my top go to tools. I haven't learned the iproute suite of tools yet, but this article is prompting me to start doing that. It will be hard, my memory is fuzzy on when net-tools commands first came out..I remember using Slackware in mid 90s, but don't remember if they were in there yet, but I think I've maybe been using them for 20 years, or close to it.
Why we can’t give up this odd way of typing
Paying cash and using a loyalty card for your day-to-day shopping and then not using it at your local pharmacy, sex-shop or whatever is exactly the same thing as using Chrome for your day-to-day browsing and Tor Browser for looking up that weird thing on your foot, or closing your curtains when you change your clothes.
Newspapers and magazines have sold advertising without individual reader targeting for years and it continues to be a viable business model. Individually tracking users is not necessary.
> People who go on and on about the Google and Amazon "monopolies" -- which only benefit consumers with low prices and expansive services

Whoa there, consumers are not the only people who matter. Suppliers are often exploited by monopolies. Have you never heard of the Fair Trade movement? Please do not forget about the suppliers of your cheap shit you don't need.
The 'loophole' here would be the definition of 'legitimate intrests', where businesses can defend not giving users a choice in many of these matters due to the activity being critical for the service to work or the business to survive.

I.e. Facebook _could_ argue that users would have to have their data collected and analysed, as this would enable them to sell ads which in turn is their core interest.

Another example could be automatic enrollment into newsletters or data collection/analyzation with the option to opt-out by going to settings. You don't _have_ to give users the explicit consent checkbox during signup if you can defend the activity by it being in your legitimate interests.

This article goes into more detail: https://medium.com/mydata/five-loopholes-in-the-gdpr-367443c...
The law explicitly said "within hours of taking effect, these specific companies are to be sued due to not preparing sufficiently for GDPR"?
Can you explain how Google pulling YouTube from the Firestick was good for consumers?
"e.g. "Had Netcraft confirmed it?", "Only old people ______", "IN SOVIET RUSSIA $NOUN $VERBs YOU", etc."

Sorry to point out that you forgot grits and Natalie Portman, of whom some /. users seemed to have a not quite healthy obsession.

Else than that your comment is spot on.
Wow. That's the funniest thing I've seen this week.

Beats the schadenfreude I'm having with some of the IoT lightbulbs no longer working for EU customers - a problem which actually impacted a friend of mine. See: https://twitter.com/internetofshit/status/999619364541394944.

EDIT: 2 friends now. I wonder how many more bought those lightbulbs...
I'm curious as to the business model behind these type of sites?
A 40-Year Debate Over Corporate Strategy Gets Revived by Elon Musk
The option to monetize your own data is an amazing idea: a startup that pays you to upload the data you can download from your google, apple, facebook, BIGNAME account, basically renting it daily until you revoke consent, then uses it to do all sort of shit you can with it. You’ll get hypeprofiled and harassed with all sorts of advertising, but you’re actually getting real money for that.
If your core values are we don't give a f.. to our user's privacy, obviously you don't do anything in 2 years for them.
My big problem with this is that the complaints are too quick (unless Google, Facebook, et al are stupid, which I don't think they are). First you have to make a request to see what they are using the data for. Then you can complain that it is being used for the wrong things. Unless the aforementioned companies are blatantly saying "We're sharing your data for targeted advertising without consent", then I think we have to wait a month for real complaints.
Why? Is there a company behind this webpage?
An example of monopolistic Google behavior was when they refused to make a YouTube app for any Windows platform (Win8, and later Win10) - which is fine - but then they also blocked the app that Microsoft itself has developed. Because they control access to YouTube as a service, they could do that. And because YouTube is the place for videos on the Net, it hurt the platform pretty bad.
Could Cryptocurrency Be a Red Flag for U.S. Workers Seeking Security Clearances?
yeah but now the product is not free.
It was expected that activist groups will say that these two companies are breaking GDPR, it is not so obvious that they will be actually fined (as the requests need to be processed by specific institution and might be found unwarranted).
Read the part of the recital that you seem to be ignoring on purpose for whatever reason. It literally says that the mere accessibility of a site from within the EU does not by itself mean that the site is offering services in the EU for the purposes of GDPR. It’s not really up for debate - it is written right there in black and white.

I’ve been through this with actual lawyers. There are things you can do that make you subject to GDPR without explicitly saying you want EU customers - an example might be creating a site in English but that exclusively reports German news. But, for example, if you have a US news site that doesn’t sell subscriptions to EU citizens, isn’t based in the EU, doesn’t specialize in news arising from EU countries, and doesn’t translate its content to EU-only languages, you aren’t subject to it. Again, as stated in the recital, the mere fact that an EU resident can access the site does not by itself trigger GDPR exposure.
>Newspapers and magazines have sold advertising without individual reader targeting for years and it continues to be a viable business model

Newspapers and magazines charges a subscription. Are you suggesting we should now charge Europeans a subscriptions where we do not for others? I'm ok with that. Don't want tracking? Then give me your credit card and subscribe, or there's the door.

Plus, nearly all newspapers are in economic free fall, advertising was completely destroyed by the internet, and there are almost no newspapers which are in the "green" without having an internet product or being owned by a larger corporation.
"To make Medium work, we log user data and share it with processors. To use Medium, you must agree to our Privacy Policy, including cookie policy."

No Medium, I must NOT agree to your privacy policy and your cookie policy, because to use and share my data you need my FREE consent. AND you can NOT deny me reading an article without giving consent, because then the consent is not FREE, and it is NOT strictly necessary for the service.

Medium: either you allow me to read blog posts on your webserver without FORCING me to allow you to collect my data, or you don't.
Choose. But stop fucking annoying me with lying banners.
“Within hours”

You mean “within the 2 years probation period + a few hours”
A casual home user sure, but this is a professional commercial film producer. This can hardly have been the first time he'd had to deal with contractual distribution rights. If anyone should have been able to understand the consequences of that EULA, he's clearly one of them. However it does seem this usage was not covered by the EULA.
This is slightly off topic. Netflix has transformed the output of netstat to have more immediate visibility. Its good to have something like this.

https://imgur.com/a/g8P2Nm2
When “you are the product”, you can sell that product.
Ok, so AMEX is unreasonably expensive. That 2-3% is exactly what I expect - maybe even a little lower, esp. for bigger merchants. Why would anybody accept such an expensive card?
Directly from Wikipedia:

Buses exposed through the M.2 connector are PCI Express 3.0, Serial ATA (SATA) 3.0 and USB 3.0, which is backward compatible with USB 2.0. As a result, M.2 modules can integrate multiple functions, including the following device classes: Wi-Fi, Bluetooth, satellite navigation, near field communication (NFC), digital radio, Wireless Gigabit Alliance (WiGig), wireless WAN (WWAN), and solid-state drives (SSDs).
> Better rent some personal webspace/server (rule of thumb: if you do not pay for it, you are not the customer, but the product), put it there and create for everybody who should have access to the data a private account.

There needs to be a name for this kind of suggestion on places like Hacker News, where someone suggests renting your own server or compiling the program from source yourself or anything else that is very obviously beyond the interest and/or capabilities of the average user.

> EDIT: If you must mail the data around, encrypt it beforehand.

Haha, yes!
Wow. He seems like a really awesome guy. I'm sad the world and his family have now lost him.
One way to think of it is that “a business” is not “a user tracking, ad targeting website.” Whatever the business is, it’s not equal to the website, which is just one means of distribution of information or content.

If the business was so predicated on user tracking and selling that data or using it to target ads, I think GDPR (in spirit) is saying “that’s not a business” and requiring a greater form of transparency and informed consent before a website can inflict that on a (possibly unwitting) user.

I’m not trying to say this point of view is right or wrong, just that I think there is a spirit here in the intention of GDPR to say “that’s not something we’ll allow to be called a business model.” (Obviously it doesn’t fully go that far, but it’s the idea.)

It’s not that different in spirit than regulating usury or payday loan businesses. If your business model profitably works only because it preys on people, the spirit of the regulation is to say, “that’s not a business model,” and regulate or disallow it. Usury laws in the case of excessive short-term interest rates; GDPR in the case of excessive user tracking and data privacy concerns.

So when you ask, “how can be a business sustainable in this way?” it sort of has the wrong premise.

Instead, if the business could not be profitable without this then it wasn’t actually ever a business— rather it was some other data exploitation entity, and the lack of an alternate way to be profitable in compliance with GDPR is a signal that the entity was unable to determine a way to exist without causing the kinds of harm that GDPR aims to prevent.

Again, I’m just trying to represent what I think the spirit is behind the GDPR choices— not saying they were right or wrong.
IP addresses are PII, as defined in the law. Every website you visit gets your IP. HN has yours now, and now had a headache to deal with.
Find Your Cereal: 5 ways you can fund your startup without angels or VCs
You could still access YouTube through the web though couldn’t you?
M. Siebenmann's actual main point, ignored by much of the "I do/do not like ip/ifconfig." discussion here, is that it is valid to replace ifconfig because the standard output of the command is an interface contract that is set in stone because of people using it in scripts.

I disagree, on two grounds.

Firstly, the ifconfig commands in the BSDs are existence proofs that this is not so. The BSD people actually have modified ifconfig to keep up with changing kernel networking abilities, and one will find the (say) FreeBSD ifconfig of today having a lot more functionality than the Linux one. The BSDs, by their very natures, kept their ifconfig tools aligned with the rest of the operating system as it changed.

* https://freebsd.org/cgi/man.cgi?query=ifconfig

* https://linux.die.net/man/8/ifconfig

* https://unix.stackexchange.com/questions/319350/

Secondly, an aversion to breaking (badly designed) scripts is isn't really the reason that ifconfig hasn't been changed. The reason that ifconfig hasn't been changed, as evident from the net-tools bug and other discussions of this, one of which I have hyperlinked elsewhere in this discussion, is more to do with (purportedly) doing things portably and not having two disjoint code paths, one for Linux using netlink and one for everything else using ioctl. Two code paths and code that was not portable to other operating systems would be the result of adding netlink capability to net-tools's ifconfig.

That reason does not itself hold water, however. The net-tools package is highly Linux-specific anyway, in the first place, so arguments about its portability are moot. Given that, the actually expressed reason for not doing this given by the developers themselves (as opposed to the differing reasons inferred by people other than the developers, the most often given one of which is directly contradicted by git repository activity as recent as 2016) founders.

* https://github.com/ecki/net-tools/commits/master

One of the more disappointing things about Linux's ifconfig is that this:

# ifconfig lo inet6 ::1
Don't know how to set addresses for family 10.
#

is a fairly trivial oversight in a case statement in the code, a missing case for AF_INET6, rather than a fundamental design or implementation problem, and doesn't even need the netlink API to fix.

* https://sourceforge.net/p/net-tools/code/ci/master/tree/ifco...

* https://sourceforge.net/p/net-tools/code/ci/master/tree/ifco...
I've seen this idea thrown around in Tor mailing lists as well.

The developers basically replied that while they're not happy about how Tor is used by some people, if they started censoring some things, they would eventually be required to censor others. At that point, what is really the point of Tor - just chain some VPNs together.
I always assumed this was because Amazon didn't want to have to pay the 30% or whatever cost to Apple for in-app purchases.
TIL: iproute2 has a color, a brief/human mode, and a one-line mode. I think I am going to be aliasing ip -color to ip from now on.

$ ip -br -c a # ip -brief -color address

lo UNKNOWN 127.0.0.1/8 ::1/128
eth0 DOWN
wlan0 UP 192.0.2.1/24 2001:db8::1/64 fe80::1/64

$ ip -br -c l # ip -brief -color link

lo UNKNOWN 00:00:00:00:00:00 <LOOPBACK,UP,LOWER_UP>
eth0 DOWN 00:12:34:56:78:9a <NO-CARRIER,BROADCAST,MULTICAST,UP>
wlan0 UP 12:34:56:78:9a:bc <BROADCAST,MULTICAST,UP,LOWER_UP>
Guess Im done with apple
It'd be great if companies offered a "buy back your privacy" subscription model. For the services I really don't want to stop using (Twitter ...) I'd definitely be using that.
This, actually, should be part of Docker itself. Thank you!
Hospitals Running Short of Powerful Pain Killers
I really don't see the difference. If you don't blast the file-sharing link to everybody and their brother, it's the same as emailing the pictures to someone. Either way you're just trusting that the person you're sending the pictures to isn't an asshole.
Well, because GDPR.

They can block the EU entirely (after deleting all data they may have on EU subjects) or implement a compliant privacy policy. This is not. (if you click on the policy link, they will lie that it is in accordance with GDPR, but very clearly it is not).
Databases on Kubernetes – How to Recover from Failures, Scale Up and Down
In general, the online site of a newspaper doubtless does a lot of ad tracking. To the degree that readership is mostly local (as it is for most newspapers with relatively few exceptions), geofencing seems like a pretty rational response to potential compliance headaches. More trouble than it's worth is a wholly rational business justification for a case where a geo is currently unimportant and there's no business plan to expand there in the future.
Good now they have to make it worth paying for.
I don't know how long you are allowed to store PII under GDPR (I'm not a lawyer)

This article indicates that default settings are problematic: https://www.ctrl.blog/entry/gdpr-web-server-logs

> All of these logs contains personal information by default under the new regulation. IP addresses are specifically defined as personal data per Article 4, Point 1; and Recital 49. The logs can also contain usernames if your web service use them as part of their URL structure, and even the referral information that is logged by default can contain personal information (e.g. unintended collection of sensitive data; like being referred from a sensitive-subject website).
The rule they’re following is that method names should be verbs, and upcase / downcase are shorter than alternatives like to_upper etc. So while it’s an unusual choice it’s not an arbitrary one
Not quite because they can't transfer those rights to others.

I've got no problem with the Youtube rights. They need to be able to store and distribute the content you upload on a variety of media, through a variety of formats and to all sorts of end user devices and services in perpetuity, many of which haven't even been invented yet. Any thing less than these rights they reserve would almost inevitably lead to them breaching those terms eventually.
> actual monopolistic behavior

> a significant share

If it's only "a significant share" it's by definition not a monopoly.
The London Tube Heartbeat
What do you think changed for governments?

If there is a search warrant, police could and still can access data. GDPR didn't change anything in this regard.

My feeling is that in the EU there is a different view of government: it's not a third adversarial entity.

Many other remarks you've made don't have anything to do with GDPR, for example fake accounts and takeovers.
They would take your money and track you anyway, and everyone knows it
"political enforcement of draconian laws"... like: how the US use their extra-territorial law to fine US Business's competitors (banks, industry...) ? ;-)
It's funny to see how the US way of mixing law and business is terrifying when others may use it too, no?
Anyway: it hasn't been how Europe worked until now, so relax. French Regulator said, for example, that it won't enforce strictly the regulation ... because... well... EU companies aren't more ready than US ones. And they'll have to.
Somebody on Reddit posted a list of Tumblr's "partners" that they share data with by default: https://i.imgur.com/YCNvEMa.png

I'm finding it difficult to believe that they can come up with a "legitimate interest" for all of those that would also actually hold up in court.
Ironically, imgur shows a wholly non-compliant 'when you click yes here, you agree to all our default opt-in tracking, storing and sharing' popup when you open that link. But I have to give it to them - when you actually go into the scary-looking part, they do spell out in detail in what ways you're being tracked.
How Smart Contracts Address Issues: 5 Examples of Use Cases
Moving Millions of S3 Keys with AWS Batch
Ask HN: Why doesn't GDPR go after web browsers?
As expected, as of today more websites are displaying complex options for accepting or declining cookies, analytics, and personalized advertising. Wouldn't it make more sense if this was asked once by the web browser, and not separately on every website?

When you install a web browser it would ask...

1. Do you want to allow websites to use third party cookies for analytics? This may share information about your browsing activities with third parties, but help websites better understand how their users are engaging with their service. Yes, I would like to use cookies for this reason. No, I would not like to use cookies for this reason.

2. Do you want to allow websites to display personalized advertising to you? This will help to display more relevant advertising by sharing information about the websites you visit online. Yes, I would like the advertising I see to be personalized. No, I would like the advertising I see to not be personalized.

And, that's it. The regulation could focus on the wording that should be displayed, ensuring it's clear, unbiased, and fair. The browser could also allow you to toggle those options individually for websites if you decide not to use the defaults you specified.

Wouldn't this make sense? We wouldn't need to see a popup on every website, and configure these options a hundred times a day as we're browsing the internet. If I just want to quickly search for a recipe on Google, I don't want to spend 30 seconds going through the cookie settings on the website before I can spend 30 seconds reading the recipe. It's also annoying when every website is setup differently, so it's hard to navigate these settings and avoid the tactics they're using to opt me in.
Yes very much so:

Newspapers and other sources of information ARE having a horrible time and it going to get worse.

BUT the solution to the revenue problem - aka advertising - is now a problem in its own right and driving the creation of content to keep itself going.

All of our major information problems trace back to 3 related things.

1) the makeup of our wetware

2) advertising as a way to subsidize/pay for content

3) the vicious cycle of increasingly louder techniques to grab audience attention, ranging from “sex sells”, partisan news, product placements, and invasive online ads.
Reconfigure your server to stop logging IPs, and/or stop storing logs forever. Here, done.
Ask HN: Is WebDav still relevant?
Has it been abandoned totally?

It would be really helpful if anybody who has used WebDav can actually share their experience on what worked and what didn't work for them?
I don't think he did, not much use for a bike when both your arms are in a plaster cast from hands to shoulders. Poor guy couldn't even go to the toilet without help.
Somebody wanted to build something, so they did.

Not everything published online is for immediate financial reward. Sometimes it's to build a digital portfolio. Sometimes it's to learn some new technologies. And sometimes it's just for the fun of it.
You have to learn to walk before you run. You also need to make profits.

HMD Global (Nokia smartphones) started with low-end phones and is slowly building better and better phones. They sold 10 million smartphones in 2017.

Their first high-level model is promising but far from perfect. It does not matter because they are not going out of business if it flops. Next iteration will be better, one following that will be better yet.
Are there any DIY projects for creating a LIDAR?
Based on Enterprise Code, Tested Millions of Times: OpenSUSE Leap 15 Released
I guess self promotion, mostly. Maybe a bit of feeling good and showing off.
> Then give me your credit card and subscribe, or there's the door.

I don't understand this type of thinking from some of the posters here on HN, as if GDPR is right now personally affecting you in a negative way. It's a very aggressive way of writing and I've seen a few posters comment in this way.

If you want an example of a company that does non-personalised advertising and is successful: DuckDuckGo.
The joys of living in a homogeneous society with an average IQ of 106
Aka python helps you think more like the computer does. Perl helps the computer think more like you.
Legitimate and reasonable data processing is just that: it's obviously compliant. If there is any doubt, it's excessive and careless data processing, even if not illegal and without malicious intent.

No, it isn't. Sorry, you can't just hand-wave the whole issue away that easily. If this were all so obvious, we wouldn't keep having these conversations, where even people who have been looking into this for months and taken real legal advice are still in doubt about what specific actions they can or must take to be compliant.
Weinstein surrenders over sexual misconduct charges
The need for decentralized and functional app stores are more real than ever.
Infection Monkey – An automated pentest tool
Firefox extension: https://addons.mozilla.org/en-US/firefox/addon/amp2html/

I'm trying to find something similar for Chrome, but all I'm coming up with is extensions to redirect to AMP. Anyone up for some monopolistic behavior?
Turok (Nintendo 64 game) is now available for Linux on Steam