skysight-inc/HackerNews huggingface dataset:
It is not how it works in Europe. No-win no-fee is a typical American thing. We don't have class actions either.

It doesn't mean it won't happen, but that would be unusual.
Future tip: your package manager should be able to find this for you, for example:

> $ which ip

> /sbin/ip

> $ dpkg -S /sbin/ip

> iproute2: /sbin/ip
Electron Windows Protocol Handler MITM/RCE (bypass for CVE-2018-1000006 Fix)
I disagree. They are pursuing a Blue Ocean strategy but failing in execution as well as suffering from fast followers.
Investments on a Rugged Landscape [pdf]
What a refreshingly honest question.
I think it's more likely that "to make Medium make money," they engage in tracking for advertising purposes.

Medium works perfectly well for my purposes without that banner being displayed. I can open up developer tools and delete that node.

If I don't click agree, does that mean that this information isn't collected? Because tracking cookies are still placed.

Now what is interesting is that I don't remember being asked for consent for them to place a cookie to log the number of articles I read in a month as part of their sign-up funnel.
"So you have a "driver" who has to be monitoring a diagnostic console, AND has to be separately watching for non-alerted emergency events to avoid a fatal crash?"

This gets your license yanked, herearound. Same goes for texting and driving if you're caught. Even in stop - go traffic.
Or you use tooling that is aware of the syntax and available methods and can provide you live assistance and documentation at write time.
Or you can have move to mariadb, using configuration "thread_handling=pool-of-threads" to enable threadpool that is exactly the solution.

(MySQL have that only for "entreprise" version)
A lot of noise comes from what you're driving on.

As far as improving efficiency goes - I assume you mean miles/gallon or per kwh? The average driver doesn't pay attention to tires until they become flat or don't pass inspection. Keeping them properly inflated, rotating, and periodic alignments will help efficiency more than a different tire.

I have to imaging tire companies would be all over some new tech that would increase mpg.

What type of giant impact are you envisioning?
> Someone will figure out how to capture the outsize profits they produce, or some technology will come along that they miss...

Bear in mind that with extravagant perks and 20% time, Google's strategy was explicitly to maximize the chance that this new idea would be produced by Google itself.

It's interesting to look back at to what extent this has and has not panned out. For example, how come Facebook and Dropbox were not developed at Google and it had to crash-create competing products? Do any of Google's non-search properties count as next big things? Arguably AdSense perhaps, but that depended on being Google to start with.
I can still purchase a "new" 2 year old phone. I think that is a valid question.
> forcing people to accept wide-ranging data collection in exchange for using a service is prohibited under GDPR

Erm... I don't think that's true.

As long as you are open and transparent about what you are doing, and give users the right to request, update and delete the data you hold on them, then AFAIK this is allowed
Yeah, that may be true, but it doesn't matter. Nobody was talking about it back then. /s
But it was adopted on it's merits and not because of politics! /s
Isn't that the quid pro quo, though? I don't feel obliged to accept their shitty privacy policy, and in return they are not obliged to serve me their often equally shitty content.
So that's why I can't buy books on the app... Even though I can find it. Always confused the hell out of me but makes sense now.
Not to say I would be a great fan of Linux, but I think at this point it's quite clear it's the huge winner of OSes. Nearly all servers run on it nowadays, I think all relevant smartphones (not sure though, correct me if that's wrong), many desktop/laptop computers and even Windows is integrating more and more with Linux.

With such a dominance there is not much point in syncing changes of the standard with other OSes. The moment it works different in Linux that is the new majority standard.

And while a lot more stuff is changed all the time than would be necessary one also can't expect things to stay the same for another 100 years just because they have been like that for a long time.
The way "theverge.com" does is clearly not compliant, because they track/store IP/... before I give consent. I also can surf without consent.
> There also other things, like pillow talk etc.

Perfect example. Do you always ensure there are no smartphones within earshot?
Somebody has to pay for it in the end, so Facebook could simply say "agree to targeted advertising and use the site for free or do not agree and pay a monthly fee for the site".
no. if you control the entry and exit nodes, you can identify the source using traffic correlation analysis
Or Europeans will have to do with paygates and subscription fees.

There is no "making due". These companies are run very thin already. There is already much less talent, much less pay, and much less quality than most of us would want.

There is a breaking point for providing free content on the internet, and so many publishers are hitting it today WITH TRACKING. So many sites have moved to a X free per month with subscription, or just hard paywalls.

Enjoy your subscription models, because there is no "making due" left, we've already used it all up.
To be fair, lots of 'automated driving tech' is killing people?

And what they aren't failing at, spectacularly succeeding in fact, is in marketing. They are a household word; their cars are considered the top of the heap as electrics go.
when I do ^L, only black pixels except for the shell prompt
I agree that the name issue is a red herring, but not for this reason. Autopilots are operated by people who are trained in their use, and, for the most part [1], understand their limitations. 'Understanding their limitations' is exactly the issue here.

[1] Following a number of WTF-type accidents, there is some concern that airplane automation has become too complex for pilots to reason about when it partially fails, but if that is actually the case, it raises the bar for all partial automation, including for cars.
I see this 'VPN' argument a lot, but it's wrong. If the Chicago Tribune tracks users accessing their site through a VPN, without informed consent, they are in violation. Art 3 para 2 in b makes the Regulation apply to them and doesn't make provisions about whether the controller or processor has a way to find out if the behaviour of the data subject takes place within the Union. I don't see any reason for a different interpretation in the Recitals, either. Furthermore note that subs a and b in art 3 para 2 are alternative, not cumulative requirements.

Let me rephrase: when you collect data on people with the goal to do behavioral / preference analysis on it, it doesn't matter any more whether or not you're 'marketing' to them, or even that you 'send them a clear message' you don't 'market to them'. The GDPR still applies to you.
Nice. I was actually looking for a simple image host with an API that I could use for a personal project, and didn't know about Pix. Ended up using Cloudinary, which is way overblown for my needs. Maybe I'll make an iOS port of your app!
Good lord. I’m glad we’re finally getting the chance to see just how pervasive this problem is.
https://gdpr-info.eu/art-83-gdpr/

>2When deciding whether to impose an administrative fine and deciding on the amount of the administrative fine in each individual case due regard shall be given to the following:

> any action taken by the controller or processor to mitigate the damage suffered by data subjects;

>the degree of cooperation with the supervisory authority, in order to remedy the infringement and mitigate the possible adverse effects of the infringement;

>the manner in which the infringement became known to the supervisory authority, in particular whether, and if so to what extent, the controller or processor notified the infringement;

>where measures referred to in Article 58(2) have previously been ordered against the controller or processor concerned with regard to the same subject-matter, compliance with those measures;

>any other aggravating or mitigating factor applicable to the circumstances of the case, such as financial benefits gained, or losses avoided, directly or indirectly, from the infringement.

So, a whole bunch of very explicit things that are to be used when deciding if whether to impose a fine (at all).
This could definitely happen, but would not make sense for the Chicago Tribune and LA Times, which are big corporate entities united as subsidiaries of Tronc, Inc., and could even pool resources to have one compliance office among them from the parent company.

For a large, well-capitalized company to make this choice, it’s an indication of a few possibilities:

- Tronc doesn’t practice anything close to adequate IT practices to even know its compliance status, and pefers not to invest in doing so.

- Tronc can’t remain profitable if displaying GDPR-compliant pages in EU (this seems fleetingly unlikely, given the specific attempts to grow digital subscribership by marketing the papers as more global).

- Tronc is trying to make a political statement, like a boycott, hoping that many companies do this and it puts pressure on mitigating GDPR.

So while I agree with you for some small businesses just not wanting to mess with GDPR compliance or risks, however small, it certainly isn’t aviable explanation for these newspapers.
Twitter’s “partners” are the same (you can request a list from your privacy settings)
The GDPR has the notion of "_legitimate interest_", however tracking, marketing and advertising don't fit the criteria.

For an explanation see:
https://www.gdpreu.org/the-regulation/key-concepts/legitimat...

Basically you can say that a company doing home deliveries needs your home address to do so, therefore that's a legitimate interest. But note the same company cannot use your address for sending marketing materials.

And publishers cannot claim to have a legitimate interest in tracking users, even if their revenue comes from serving ads and even if their performance improves by tracking. That is because you can serve ads and do optimizations without tracking users. Even if it is less effective, it's not legitimate.

And it's not that complicated, really. The question is, by providing the service, does the user expect you to use his data or not? In case of pizza delivery, the customer does expect you to use his address for delivering pizza, but at the same time the customer doesn't expect you to give his address to other companies or to use his address for sending marketing materials.
How do you know I am not personally affected by freeloaders who wish to steal content from me and use laws as justification for their entitlement to free no-strings access to my work?

That's very presumptuous.
https://eugdprcompliant.com/personal-data/

> [...] The conclusion is, all IP addresses should be treated as personal data, in order to be GDPR compliant.

https://privacylawblog.fieldfisher.com/2016/can-a-dynamic-ip...

> What does the GDPR say?

> [...] Recital 30 clarifies that "online identifier" includes IP addresses.

http://www.privacy-regulation.eu/en/r30.htm

> (30) Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers such as radio frequency identification tags.
The problem with that model is... how much money is a single profile worth, really?

I'd love to be proven wrong and for a company to implement this. But as far as I know, it's not being done because the math doesn't work out. It's too cheap for regular people to be interested, and an incentive for spamtech to mass create fake profiles and get paid pennies for it.

In fact, the one variant I am aware of that works is survey sites, but that's because you get paid per result rather than for your data as a whole. If you're just renting your data daily, you'd get a lot less.
I can already hear the Apple apologists defending them, something about Valve not adhering to the highest standards and best quality, some BS like that.
Yes, I meant that too. First party ads next to search results are some of the most relevant and profitable you could serve without tracking, I think.
> If any user can see their data on any service than any government can quickly plug-in to access all user data on any service. This is like NSA Prism for everything.

This could streamline processing of warrants, but beyond that, not much changes. If company's infrastructure was vulnerable to governments, it probably still will be. Maybe less so, given that GDPR also adds extra motivation for keeping users' data secure.

> If a user can export their data easily from any service, they can easily resell their own data for money to services that seek to monetize that data. They could even rent out their data by the day for model training using the right to delete.

As it should be? They own it, so they can sell it.

> Account takeovers by hackers will lead to much more severe data breaches, since all data on that user in the system is easily accessible.

Not necessarily. GDPR isn't about storing all user data in one big table named PII. It's about knowing, via company procedures, what data you store and what the lifecycle of that data is. Also, with rights to delete data and revoke consents, there'll likely be less data available for an attacker to exfiltrate.

> The information apocalypse is made all that more easy because acount takeover + deep fakes + lyrebird plus all that easily accessible juicy data = impersonate anyone.

Not sure how this is relevant to GDPR. Could you elaborate?

> Data renting will create a way to monetize account takeover. The account takeover will include all possible information used to identify a person so how are the data brokers supposed to know it isn't you and how are you supposed to get your data back once it's out there getting monetized?

How was this different before GDPR? I don't see anything changing in that regard; what you wrote is already the case. Again, if anything, GDPR will reduce the amount of information an attacker can extract from a compromised account, because companies are incentivized to reduce the amount of data they store.
Thanks! Just aliased that in my .zshrc. The route object doesn't seem to do colouring sadly.
My ancestors didn't use SS: they killed them.
It’s in the faq, you can’t be upset with people repeating it.

https://www.eugdpr.org/gdpr-faqs.html

[edit] faq linked has been changed in the last weeks. How about this one https://ec.europa.eu/info/law/law-topic/data-protection/refo...
The data belongs to the user. There's nothing Facebook can do to prevent exporting if it's via the data backup. They can just design it in a way that is easy to read by humans but very challenging for parsers.
It's Python 3. You ran it with Python 2. In Python 2, 1/2 == 0. In Python 3, 1/2 == 0.5. That means that in the drag function, this expression:

1/2 * p * Cd * math.pi * r**2 * v**2

always gives 0 on Python 2 because of that 1/2 factor.

If you want to run it on Python 2, either change the 1/2 in the drag function to 1./2 or 0.5, or add

from __future__ import division

at the top to tell Python 2 you want to use the Python 3 division behavior.
I love it when the governmental organizations release data for public use. I wish this happend more often. Good find!
Thanks. Tldr: he pointed out it was fair use and they dropped their DMCA claim.
StumbleUpon shuts down
> In this case, tracking you through cookies for advertising purposes seems to be a "necessary" part of the verge, as it is literally a core aspect of the monetization strategy to offer free content in exchange for tracked advertising, as they explain in the pop-up.

That is not how GDPR defines "legimitate interest".

Even if it is less effective, you can serve ads without tracking users via cookies. Therefore it isn't legitimate.

For an explanation see: https://www.gdpreu.org/the-regulation/key-concepts/legitimat...

> No ads = no content

True, but this isn't about serving ads or not, but about tracking individuals.

You can serve ads without user profiling, which is what TV stations have been doing since the invention of the TV. You can even infer certain demographics from the content, which should be enough to hit a target. Articles on publications like The Verge emit tons of signals about who their readers are. Consider just the profile of the website. You don't actually have to track individuals.

It's also true that tracking individuals can yield better profits, although I have my doubts about that. It's also true that, due to abuse, ads are less and less effective, but this is a race to the bottom so might as well stop it now, instead of permitting these companies to collect data that can be abused later.

But yes, if there has to be an end game, the end game IMO is for companies that are doing user tracking to fuck off and do something else.
Reminds me of back when people used to make hand-drawn controls in Adobe Flash! Good memories. Nice work.
It's a common misconception, but consent is only one of the 6 recognized lawful basis for processing specifically recognized by the GDPR, and a company may contact you when any one is applicable. For example, if you have an existing business relationship via a contract (you bought something), or the business has a legal obligation to inform you of changes, or the nebulous "legitimate interests" basis on behalf of the business.

Those emails which ask you to click to continue to receive marketing are a red flag that those companies did not have any legal basis previously, or they're just cargo-culting other companies even though they already have a perfectly valid basis to keep in touch (like you being a an actual customer). Check out your favorite big-company SaaS signup today (like, Jira), you will still typically not see any explicit consent checkboxes, because due to a customer relationship it is not needed.
instead of complaining...

http://bfy.tw/IInc
The decision is made with regard to organisation, not medium. You may make one decision for one website, and another for another. Also different sites have different options to choose from: some ask you for permission, some have many variants to offer. Many websites have apps, once you agreed to something via app, browser settings are irrelevant. What exactly to decide on or agree to vary by site as well: its not just about tracking and ads.
One size does not fit all.
Based on the entitled behavior in this thread, I seriously consider it.

It it a cultural thing to feel entitled to other peoples work? Or just the agegroup of people on hacker news?
I really like the idea of being able to track your overall progress. I use trello for all my tasks, but it always stays on the granular task level and it's sometimes difficult to see the bigger picture. Maybe you can explore this concept a bit more and work on a polished product?
The attack surface matters. If the only exposed services are tor and sshd with public key authentication, one would need a vulnerability in either to compromise the host. How long ago was the last RCE on pre-authentication sshd?

(Of course, the lack of patches means that, once someone gets a RCE on either of these daemons, it's probably game over for the host.)
Adobe add IGP acceleration to Premiere, improving render time significantly
Cheap, small cars in Europe get way better milage than that - I'm just surprised how poor MPG figures are in the US.
Yes, it was pedantic. I didn't want it to be but I won't pretend it wasn't.

The point I was trying to make is that I believe the noteworthy event is that a self-driving car struck a person, without even attempting to avoid it. That she was killed is a tragic twist to the story. I believe that even if she wasn't killed it would still be a noteworthy event because, again, the car did not attempt to avoid it.

I do not at all intend to diminish the fact that Uber killed someone.
Edit: Just to be clear. I'm not in the EU, so I can't check the ToS. If they are being stupid, then that's pretty stupid of them ;-)

The thing is, it is possible that as of today they have stopped tracking. I agree that it's very unlikely, but unless they actually tell you that they are tracking you, how would you know? You get ads, but they could be completely random. Who knows? As of today, maybe all EU residents are getting random ads? Until you make a request, I think you can't quite complain (again, unless they are stupid and actually telling that they are tracking you).
So, to summarize, ifconfig has to be replaced because it relies on the /proc filesystem and it doesn't handle aliases?

This is easily disproven: ifconfig on FreeBSD doesn't rely on /proc and handles aliases just fine.

It sounds a bit like the whole OSS/ALSA discussion – some argued that ALSA was needed to replace OSS because OSS didn't support muxing multiple simultaneous audio streams, but strangely OSS on FreeBSD did support it, with no need to replace the entire audio API.
AWS ECS was GA in 2015. With load balancing, autoscaling, health and update management. Just saying :)
> and isn't given an option to decline consent to Googles ToS

You can turn off the phone and sell it on Ebay
I made a thing. To wrap my head around the Milankovitch cycles. https://i.imgur.com/V3RIKL5.png
Aren‘t the ToS pulled from the web when you set it up with a google account? I doubt you‘re agreeing to two year old ToS.
This was on the GDPR Hall of Shame blog, heavily discussed here yesterday:

https://news.ycombinator.com/item?id=17143200
Define retention policies and explain you would keep IP addresses up to xxx months to ensure service operation/troubleshoot/etc.

Prune the logs.

There you have it.
> It is very far from clear that that covers IP addresses, which tend to be recycled

Enter stage left: Address van Six, carrying an EUI64 card in his right hand.
Google intentionally ignores issues Edge/IE users have with their products because they want them to switch to Chrome. This isn’t an issue of Microsoft making “browser upgrades”, it’s an issue of Google developing to and supporting Chrome and ignoring the rest of the web.
The GDPR ensures that only Facebook will be able to comply, and prospective competitors shouldn't even bother.

The regulation counts 58 000 words.
People are not "suing," they're filing complaints.

It's a small but important difference, since a lot of the uncertainty and doubt around the GDPR seems to revolve around being sued out of existence in courts of law, which is not a thing: you can't get sued randomly by disgruntled users.
Can also confirm that this was easily done with uBlock using the "block element" right click option.
Always a good idea to include a personal attack in your comment, well done!

Second, my point is not about what I'm doing but about what others will do. I have not and will not work for companies who base their business model on selling data without consent, ad networks or in duping people. I've declined several very lucrative CTO offers in large companies due to their privacy stand.

Third, I'm for more data protection and privacy and removed my Facebook and other social media accounts years ago. I would also not click such EULAs as I do not care about "news" sites.
I knew about the short password, but hadn't seen the fingerprint option - that's just what I need to make it "secure enough" while being usable!
> Now what is interesting is that I don't remember being asked for consent for them to place a cookie to log the number of articles I read in a month as part of their sign-up funnel.

They could probably make this compliant by storing the counter in your local storage and never sending it anywhere - just having a piece of JS that essentially does: if(Storage.getItem("visits") > 6) { displaySignnupPopup(); }