skysight-inc/HackerNews huggingface dataset:
> At what point does one's right to be forgotten supersede another's right to remember?
>
> If Alice knows something about Bob because of their personal interactions, as he asks her to forget about it, but she still remembers it, is she violating Bob's right to be forgotten?
>
> etc.

No, no-one can force you legally to forget something, and I think this brings up the main problem with your argument, which is that we're not talking about Alice and Bob, we're talking about Alice and Bob's Widgets INC.

I'm technically minded and I see a 100% separation between the interaction between Alice and Bob, and Alice and Bob's Widgets INC. Yes, I do think it's completely reasonable for Alice to ask bob to be removed from log files, journals whatever.

Lets look at a parallel you drew:

> More concretely, suppose Bob visits Alice's house, and then a couple of weeks later tells Alice that she must forget that he visited. If she ignores his request is she violating Bob's rights?

I wouldn't say that Alice is violating anyone's rights here. Being unreasonable, yes. Asking for something with no legal or enforceable basis, yes.

> Now suppose Bob is visiting Alice's website, which records his IP address in a log file. Bob asks to be removed from the log, and again Alice ignores his request.

This is a non sequitur, these are different scenarios with different requests, just with the names kept the same. Businesses aren't people, and they don't have memories like people. Businesses don't (for the most part, legal actions notwithstanding) need IP address information. It can be helpful, certainly. Knowing your customer has returned, knowing what they have looked at etc., but it's not essential.

So yes, it's reasonable to ask for removal from logs, and no, it isn't reasonable to ask someone to forget you visited their house.
Where are those fluoride shills, proclaiming the great benefits of involuntrary medicating everyone to improve teeth by osmosis(fluoride is applied topically)?
Sooner or later, this will be on the same page of history as asbestos and leaded fuel.
That's pretty standard in libraries that do i18n (like Qt, for example). It's a very good practice IMO. Not only does it enable i18n, it means you can easily collect every user-destined string and check it for things like forbidden words etc.
USA TODAY NETWORK’S EUROPEAN UNION EXPERIENCE
No. They could start looking at IPs once they actually had a security problem, but there's no way in hell they "need" to write my IP address hither and yon to protect their network.

Look, you can definitely discover and monitor for problems by simply hashing IPs and storing the hash instead. Once you've detected a potential problem (say, a lot of requests from the same hash), only then do you have a "legitimate business need" to record the actual IP addresses and do some short-term analysis of the situation.

The spirit of the law is simple: if you don't absolutely need to store personal data, DON'T. Just don't. Store something else. Or just drop the data into /dev/null. Saying that you'll delete soon the personal-data-you-don't-need isn't sufficient.

And really, if this is the way GDPR compliance is going to go, "muh security" is quickly going to gain the reputation as the bullshit reason shady people trot out who want to disobey the law. People who actually care about security should push back on that strongly.
This!

Sadly most people who care about PM and team leading are of the first category, with zero skill in anything and only a basic set of buzz words from the PM world, which sadly doesn't even give them the opportunity to see how management skill can be a much bigger factor than process.
Great news! I'm absolutely loving the third season, despite not really being a fan of the protomolecule concept. I know the series revolves around it. It's a bit like the white walkers in game of thrones. You go from the super interesting political intrigue about socioeconomic imbalances, oppression, imperialism and geopolitical relations in the solar system / Westeros, to fantasy/magic/sci-fi-bs of glowing supernatural creatures. Absolutely hate that personally, but I like both shows nonetheless and the Expanse has something special. Can't wait for new episodes!
They've drawn these conclusions based on studies of automated (not autonomous) systems from Volvo, Tesla and Range Rover. They didn't study a single product from a company working on an actual autonomous driving system, and of course they can't because those products are all currently in development and not available to study.
Why do people say CAPEX when they could just say “money”?
> they are pretty good at concentrating many kinds of pollutants

Does this mean mussels are not a good food source to begin with? Is it better to avoid them, regardless of origin?
Which gives a hint about the value of the 200 paragraphs before that conclusion.
On top of what others say, the spot price of electricity decreases in the hope that that induces demand. Sometimes, it even goes negative.
You just described a tech lead not a PM.
It definitely gets a bit harder as people get busy family lifes et cetera. Our weekly games turned into perhaps monthly sessions at best, but we kept at it. One person moving to another country was also a hiccup, but it turns out it's quite doable to dial in with a good video connection if the will to continue is there.
Disclamer: haven't touched wordpress in a few years.

I believe wordpress has the siteurl embedded everywhere, no idea why they thought that made sense...

Following the change site url might fix it for you.

https://codex.wordpress.org/Changing_The_Site_URL
Whilst it doesn't solve everything moving our building stock towards passive standards would save enormous amounts of energy.

Some of the growth of domestic solar seems rather pointless given how leaky and poorly insulated so many of our buildings are.
Unsecured Debt Consolidation – Personal Money Service
Amen to this. Raising children is the most important job you are ever likely to do and you will never regret devoting time to it.
Afaik HN checks its cache for duplicates. This means if the cache is used up by something else (e.g. a long discussion about GDPR) the old submission gets flushed out quite early and a duplicate submission after only a short time is possible.
African American inventors and scientists who changed the world
This Is Why We Can't Have Nice Things
> if yoi tell me your birthday how can i forget it?

That's not really relevant. GDPR doesn't ask people to forget things out of their minds.

So let's rephrase to a more relevant example:

> if yoi provide me your birthday on a web form and I put it in a database how can i forget it?

This now becomes relevant, and easy do answer. You delete it.
so, I tend to disagree: your solutions were the old approach, where you keep trying to block, and hope they dont have a wealth of new source IP's to spawn their attacks from. I think what we find is, this doesn't work any longer.

The new approach I would advise is along your very first point: don't let the attackers know you are on to them: silently sink their traffic into a dead service that doesnt even attempt a password login, but don't let them know.
You continue to handle their password bruteforces, but you DONT ever return a success. This could be a straight up static page. This kind of approach only works if you are happy to pay the bandwidth price.. but the nice part is: you keep the attacker occupied, they have no idea they aren't making progress, and the users accounts are safe.
You mean

- right to have access to _your_ information

- right to interrupt the service and get back _your_ information

- right to view a web page _with_ ads but without obligation to give to anyone _your_ information
If you manage to do it for only suspicious-looking login attempts, thats actually a great way to both stall them and benefit. it just feels so much win

but are these scripts sophisticated enough to run JS etc?
> The flip side of all the wailing about heavy handed regulation is that business people will not obey something that isn't enforced. And then feel it is some sort of natural right to go on that way.

Business people aren't special - this is true of all people. Consider the wailing that would occur if police actually enforced speed limits.
They have had that for some time now. It‘s unrelated to the GDPR.

Also, lite.cnn.com
Landpage – Free WordPress Landing Page Theme
this, completely.

The best places to work adapt the process to the team.

The worst enforce a process on the team because it makes managing them easier.

The number of workplaces I've been in who equate the number of hours that people are in the office with their productivity, because managers could measure attendance easily, and had no idea how to measure actual productivity...
This is a false dichotomy that I fully reject. I feel disgust for the current generation of creepy, centralized, ad-ridden websites that make a pittance on each of us and use our data to create the next generation of (proprietary) AI.

I also don't think the _solution_ to that problem is to create a new bureaucracy and complex set of rules ("you won't be targeted, trust us!") that seems to address a "problem" (if it even is so) that is a large superset of ad-driven tech. Overcharged bureaucracy goes against the hacker spirit.

By the way, a way out of this mess seems to include crypto. We know right now that most ICOs are scams, crypto has lots of technical issues, and is in general still not ready for "prime time." That being said, when it _is_ ready for prime time, it's hard to even imagine how a crypto network could even comply with any of the basic ideas of GDPR, despite the fact that privacy is not really a concern.

How would you implement a "right to be forgotten" on a blockchain ledger? It may not even matter that the EU itself would not interfere, as GDPR also apparently creates private rights of action. Any sufficiently loony EU citizen can drag foreigners to court with gigantic lawsuits.
...and a “pay up or get tracked" model (vs "consent or no business") will go a long way for counting as not forced.

But "pay and agree to get tracked, or else your payment will get you nothing", that would be a surefire way to get in trouble.

Also unconsentable would be a carte blanche for passing on the data to undisclosed third parties for unrestricted use and redistribution. This is where many existing revenue models will still have to adapt and where a lot of bad actors will dwindle or shift from grey to deep, actionable black.
Ads are paid with VC money, mostly.
That's been up for quite a while, actually, to help low-bandwidth and screen-reader users.

What's new is that they're redirecting to it if you're EU (like myself)

Edit: It's a pity there's no real archive in the text version, as far as I've been able to tell. No way to scroll down to yesterday's news or anything.
What the Heck Are Tokenized Securities?
Find an online class on the book. For example, Mythgard Academy's class on The Consolation of Philosophy: https://mythgard.org/academy/consolation-of-philosophy/

Annotated books are also good.
How does this make you compliant for the data you _currently_ own?
Yes. I really feel like this whole thing is based on sound bites and people will regret the outcome. "You are the product" has become a mantra for the people who care about this issue, but everyone else will care when they are having to pay for what seemed free to them.
This is actually somewhat close to how spoken English works. We change many vowel sounds to the neutral 'schwa' in real speech. Also, many accents use very different vowel sounds (think New Zealand) but are still easy to understand.
Wellness Business Management Solution – OnTrack Studio
A cloud based great management and sourcing software built for cross platforms to enhance productivity of the wellness boutique (studios), that creates user centric engagement for wellness enthusiasts and provides an unparalleled integration between all associated stakeholders.
I think it is a response to macOS and trying to make it easier for developers to use Azure.

Sorry, a bit off topic, but I would like to talk with someone who has compared dev on macOS, Windows with Linux support, and the new Google ChomeOS Linux sandbox. I am tempted by the latter, but I would like to hear from many more people who have tried it.
If you fail to detect a bad botnet once and show the mining script to an important crawler (like a search engine), and then land on a blacklist, it could potentially require a huge effort to get off it again. It's simply not worth the risk.
The same is true for sewer water in Dutch cities (Amsterdam, Utrecht, Eindhoven, etc). Scientists can trace which drugs are popular where.

EDIT quickly found some sources (in Dutch) [1] [2] [3] [4] [5]. Some are double, but its been tested for a while. Also, at least [3] and [5] are based on European investigation so English source should be available too.

[1] https://www.kwrwater.nl/projecten/drugs-in-het-riool/

[2] https://nos.nl/artikel/2148110-rioolonderzoek-meer-cocaine-g...

[3] http://www.omroepbrabant.nl/?news/213383832/Waterschap+gaat+...

[4] https://www.parool.nl/amsterdam/meeste-cocaine-in-amsterdams...

[5] https://www.ed.nl/eindhoven/cocaeniuml-ne-en-amfetamine-rest...
Say thanks to zoning... In many post soviet (i.e. developing or non-developing) there is literally "wild west" - you can spend all of your life savings and build/buy a nice house with a backyard, but some other "investor" might build 30-store building right next to you.
This is a fantastic converter of pdf to pdf (!) but fitting your e-books reader:

http://www.willus.com/k2pdfopt/

I like reading with the originally printed fonts on my reader.
Floating point explorer
I don't know. I don't like the new DD (4 and 5 versions) which seem to emulate online mmorpg game mechanics with no emphasis on storytelling. I'd like to play an good old DD session (hacking, slashing, adventuring and mystery solving) but nowadays when I and the gang play we go diceless with almost no rules.
Mint-lang: a language for the front-end web
> They joke about the deluge of privacy policy updates, but the jokes definitely make fun of the companies and not of the law.

And the best jokes where made by those who still have personal memories of the y2k scare. Did you remember to stockpile cash and food?
Half a world, but only 100ms.
PatternFly – a web UI framework by RedHat
I had a similar reaction, I was wondering if I should update the Tomato on my WRT54G, but no matter, it's still running nicely.

If it ain't broke...
Giving scrapers fake but realistic data is my favorite way of dealing with them (as long as it does not consume too much resources).

It will hopefully waste their time and discourage them from trying to find other ways.
Yes. If you're trying to build an honest ad network, you're not going to do that; but you still have to worry about leaking information to less honest clients. If the information is in the browser, someone will try to exfiltrate it.
I just check two html pages with Netbeans, there are around 5 errors in them. For example at the end of all TML file that I looked:

</html>sa
"No wonder many American services would rather shut out EU users than comply."

Good bye and good riddance. And I don't really care if the door hits you in the ass.

If Instapaper, to name an example, wouldn't do shady shit with user data, there would be no reason at all to forgo the European market.
It was probably this:
https://arstechnica.com/gaming/2018/02/flight-sim-devs-say-h...

Tho back then I missed their spin how they are supposedly only targeting "that one specific cracker", they must have come up with that a bit later because on their Reddit they mostly tried to argue "it's only affecting pirates".
I think the big part of every movement is that initially it's done by people who like to do things, and who want the doing part to be more fun for people like them.

But the huge public success comes through people who lead huge businesses or countries, and who are faced with the situation where they have a set of mostly unmotivated, unskilled people who should do something for mostly unmotivated, unskilled customers/citizen. So for them it's not at all about making it more fun for people who love to do it and who have skills, but about making it simple, controllable, and most importantly look successful although they already know BEFORE they start that it won't be successful at all, due to the lack of motivation and skill in their general userbase.

So that "The values have been totally lost behind the implementation" is neither a coincidence, i.e. it doesn't just happen in software dev, nor a surprise, i.e. it was known before it became popular that it couldn't become popular and keep its values.

Sometimes when I watch/listen/read about people explaining this as a surprising and undesired result, I wonder whether they really are so naive, or if they are looking for a way to profit from a younger audience who hasn't experience such a complete popularity loop yet.
Selenium with docker live now at
> "hope they dont have a wealth of new source IP's to spawn their attacks from"

You'd still be able to detect new addresses and block as necessary. I don't see your point, of course the solution proposed isn't entirely hermetic, but how does your suggestion overcome this exact issue?

> "This kind of approach only works if you are happy to pay the bandwidth price"

Precisely the reason why most people would rather opt-out of serving malicious requests.
I used to use single quotes for dictionary keys and other constants, and double quotes for strings intended to be read by human. I read some article about it a considered it a good convention. Now I see it actually isn't a convention. :-) I switched to black just yesterday and overall I like it, still I miss a bit this distinction between single and double quotes.
I keep track of login attempts via Redis based on IP address. As soon as one IP address attempts to sign in under different account name (e-mail in my case) and wrong password, IP is added to the set. Once there were more than 3 similar attempts, web server starts to return '403 Unauthorized' errors. In a few minutes (cronjob) IP address is added to the blacklist of 'ipset' (great tool for managing and keeping IPs in sets for iptables), which results in all connections from the offender silently discarded in a kernel firewall. Define your own terms when to purge sets and offer amnesty.
Programming is obsolete. This 3D browser game was made in 2 weeks with no coding
You could ask, but them not complying fall neatly in the legitimate need case...
ODKCollect: Android app for forms, designed for use in challenging environments
Ebay deleting accounts accidentally today? Just append to me
Are teeth more important than brain? Only when your real interest is to sell more sugary drinks and processed sugary foods. Sugar is cheap and addictive and if you somehow fix the tooth decay, it is your "perfect product".

Serious questions need to be asked about the World Health Organisation for supporting and pushing fluoridation globally.
> (b) your interpretation nonetheless contradicts the statement that using the site is agreeing

IANAL but implied consent, by visiting the site, is not enough anymore. Consent must be explicit and informed, afaik there are a few exceptions there for stuff that's "vital to the sites function".
My favorite part - beyond watching SpaceX embarrassing the critics over and over and over again, with reusable rockets, bringing down launch costs by 80-95%, out-launching the rest of the world, and just surviving in general - is that if you can do Falcon Heavy, you can do BFR, which gets you Mars. The engineering keeps proving itself, no need to buy any marketing spin. The only debate left is whether it's going to be closer to 10 years from now or 20.
It doesn't load in Firefox or an older Chromium install. I guess programming isn't obsolete yet?
> do targeted ads without collecting personal data

You're still processing the data on your system, even if you're not storing it. This approach takes care of deletion rights but not processing.

(Unless you move the entire list of ad inventory to the user's computer and let it pick the ad to load?)
The paper doesn't actually argue a linear relationship and seems to show .8 mg/L might be ideal, which is the lower part of the current range. But I think you would need a much larger study of people exposed to the recommended range to see if lower is always better.
> most EU citizens just gained a few basic rights without any significant downsides

It's actually quite liberating, yesterday I made Twitter delete a whole bunch of contacts they got off my phone.
Rena-Wrap-Skirt – RageCraze
Mozilla experimented with the idea you're replying to -- a system that would download a bundle of disparate ads from a central server, and then decide based on information in the browser which ones to show. Take away active content from the ads, or (very distant second best) sandbox them, and you can do targeting without the advertisers or even the distributor being able to figure out why a particular ad was shown.
> have the logic that chooses ads run locally

Unless you are unconditionally loading all possible ads into that code that runs locally, it still betrays the result of the local code's analysis when it loads the specific ad. This kind of request is already used to exfiltrate personal information. Even if it isn't explicitly sending personal encoded into the choice of ad, simply sending coarse data about someone is still an unacceptable betrayal of privacy. Small, currently insignificant pieces of data become revealing specific life details when joined with other databases.

In addition to the choice of ad, the server can also log at least a timestamp, the IP Source Address, the {TCP,UDP} Source and Destination Ports, and any other interesting features in the IP protocol headers[1]. With some effort, this is probably enough to allow the ad requests to be correlated with other sources of personal data.

> you have targetted ads without invading anyone's privacy.

No, you only made it very slightly more difficult to invade privacy. This would only result in a minor rate limit to exfiltrate personal data, and added the need for a few more INNER JOIN clauses.

[1] This may include a significant amount of identifying entropy. For example, nmap's -O uses the variations in the IP headers and protocol implementation to guess the remote host's OS (sometimes to specific versions).
K6 v0.21.0 released
Things to consider before Crypto Trading – 2018
In conclusion, to be successful in the world of cryptocurrencies, you have to be a hard-working learner and a smart thinking implementer.
Your backup retention policy should comply with GDPR, and you should be prepared to justify extended retention periods.
Yes, when I was on CPAP, I also felt like I slept much worse with it on, despite the machine showing an AHI < 2.0 every night. One doctor suggested it was psychosomatic and that I am effectively cured of my apnea with the CPAP on. To this day, I continue to feel much more well-rested without the CPAP even though I _may_ have more apneas.
I'd happily put money on the stock market not budging. I'm not planning to adjust my portfolio.
Read the full blog here: https://blog.coinswitch.co/things-to-consider-before-crypto-...
Show HN: Weather CLI – get weather in any city
In the 80s, I wrote at least four different versions of a character generator, all using the various PCs available at the time. For me it was like FizzBuzz.

Some of them got quite involved, with full-page printouts with all kinds of stuff on there. I even rented a booth at one of the early cons and attempted to sell them. (Along with another program that made custom crossword puzzles)

D&D was a happy part of my late childhood. Many good memories.