skysight-inc/HackerNews huggingface dataset:
Very well. Two examples, by no means the most egregious or significant, that readily come to mind.

http://nymag.com/daily/intelligencer/2016/12/julia-ioffe-fin...

ADL Council member Julia Ioffe, regular scribbler for The Atlantic and described by the Guardian as "one of America’s top feature writers", whom I trust qualifies as mainstream, made a tweet promoting the false story that President Trump was to appoint his daughter to an office conventionally held by the First Lady.

The claim seems unreasonable to me, but I can't speak to how the warped Hebraic mind operates. Perhaps you can.

https://archive.is/nN00G

Forbes writer Frances Coppola who has appeared as an authority on BBC's Newsnight floats the quite nutty theory that "anti-immigration" groups are somehow orchestrating or otherwise inducing the mass rapes committed by so-called refugees in Germany.

Now, here's a challenge for you and anyone else brave enough to expose themselves to opposing thoughts: find me one article on Breitbart or The Daily Stormer, excluding any manifest satire, that is demonstrably, objectively false.
I have always thought an ideal physics curriculum at such a level would actually involve the students creating software packages to accomplish something like this. I think these are great illustrations of the principles, but there's value in making the students visualize the problem independently IMHO. Then again, I hear the argument "not everyone needs to learn programming" too often to think my idea has a realistic chance of traction any time soon.
> the true cost and negative consequences of this law is extremely unsettling

I think the cost of not having this law is much higher.

Also, lots companies had few problems automating the dissemination of users personal information to dozens of interested parties, building completely automated markets for this information with derivatives trading etc, all without users (and regulators) knowing or understanding anything about these practices. It is long overdue to put a stop to the excesses, and as a EU citizen I am extremely happy with GDPR.

There will be new opportunities for startups, hopefully GDPR can help make sure these opportunities are less detrimental to society than before.
And meanwhile companies just hope that things go okay for them? That's people's livelihood on the line there.
FYI: "Due to the massive popularity of the range search over searching by complete password hash, the significantly improved performance and the enhanced privacy controls, searching by hash will be discontinued on 1 June 2018."

Shown in API docs under "Pwned Passwords overview" and links to here: https://www.troyhunt.com/enhancing-pwned-passwords-privacy-b...
The problem is that there is a lower floor of a $20m fine. Big corps can risk a 4% hit, but for anyone struggling to get a small startup off the ground the fine is too onerous.

As far as I'm concerned the process should be like this:

1. EU issues warning and cuts off traffic to the domain after 30 days.

2. Startup fixes GDPR compliance.

3. EU unblocks startup.

Only after the company breaks GDPR after getting unblocked should they be hit with this massive fine. For those of us that don't give a shit about Europe it's so frustrating having to worry about how we have to comply.

And before someone says something about "it's only for companies targeting the EU" that isn't as clear as people make it out to be. An errant ad, or a single conference talk, or even engagement on social media can be construed into requiring GDPR compliance.

But of course the reason the EU didn't want to block corporations flouting the GDPR technically is because they saw the arms race happening in China and decided that they didn't want a second firewall. So instead they went the lazy route and they pushed the whole mess on small startups that aren't the problem in the first place. Large corporations are the problem. The fundamental design of the internet and web is the problem.
Rust is planning to enable inlining C functions in the near future. I believe this should work in both directions, and works because they are both compiled using LLVM.
> Does the law explicitly forbid people from asking stuff like this?

No. The expectation is each of the EU’s twenty-eight national data regulators will be nice and reasonable into perpetuity.
I believe you meant insidiously? Not sure why you make it sound so sinister.
I've had my whoisguard at namecheap unexpectedly not renew several times, despite my having enabled auto renew, and the domain auto renewing. As a result my info was exposed until I caught it. I've migrated most of my domains to iwantmyname.com. much nicer experience so far. .io domains are really cheap at namecheap though so I haven't migrated them yet :/
Xanadu basics 2 – five working systems
Of course not. The browser performed its primary task, and the consequences are reasonably obvious to the user, who can at least make an informed corrective action.

Is the difference not obvious?
Why shouldn't they have that option? You chose to visit that website and input your data. You are completely free to not go there.

Adding legal costs like this de-incentivizes website owners which is now causing websites to shutdown EU access which I don't like.

I don't get why the EU thinks there are entitled to get content from the web while not abiding by the business model for targeted advertising companies.
Why Sam Harris–Not Ezra Klein–Is the One Making Space for People of Colour
What? How does HTML trigger a GDPR while text file does not?
So in this hypothetical scenario, for some reason the regulator looks at your website, which presumably has no personal information inputs, no tracking analytics etc. and which you have asserted collects no personal information, and they decide that you're still somehow collecting information, and for some reason hounding your low traffic website is the best use of their limited resources.
Or just reserve the bulk of the law’s teeth to projects crossing a low global revenue boundary. Somewhere around €1 million per year, on average.
(Edit: The citation got messed up, it should be:

>The only thing you can do with a function is call it.

You can also abstract over it, and pass it around. Which allows you to build whatever you want, numbers, booleans, if-then-else, etc.)
Click the "Playlists" tab (center of the page on the website, separate tab on mobile) then click on the playlist you want and on the top right click "Add Playlist to Queue". And the playlist will get added to your queue.
Stupid question here. But shouldn't websites/apps simply lock the account for 5 minutes after 3 bad password attempts? -- basically ending the usefulness of bad password lists, etc etc. Do sites actually let you run limitless password attempts -- thus really find these password lists important? If your password was "foofoo", and there was a password lock after 3 attempts I don't see how you would crack it with a password file (in this lifetime).
Great but you are dependent on Spotify. I don't use spotify, I often listen off youtube for example and it would be good fallback.
Well, if with your best technology you can pack B bits of information in 1 m^3 of space, and you need to store N bits of information, you are going to need (N/B) m^3 of space to store it. And then the speed of light limits you to around (N/B)^(1/3)/c seconds of latency to get to the farthest bits.

(This ultimately violates the Bekenstein bound - as your server cube grows it will eventually collapse into a black hole - but this is not really a concern with forseeable technology! More practically, though, Earth's gravity makes it hard to build very high in the air, which limits you to O(N^1/2), and things like cooling and maintenance access probably impose a limit somewhere in between.)
And then they spend their entire free-time playing administrator on a service that doesn't make them any money. Time they could've spent on improving the service. The alternative is that if they're outside the EU they just block the EU and if they're inside the EU then they abandon the project.
Combine that with the usual publication bias and you can be sure that more than 50% of the studies are wrong.

https://www.nature.com/news/over-half-of-psychology-studies-...
I don't have one and just pick random letters or names when it doesn't matter. Then I know which ones sold the info to the marketers. "Oh the place I have the X name to is now spamming me with junk mail..."
You could say "Group Listening" or "Collaborative Listening" possibly.
In a legitimate - not trolling - exchange I could see a situation where asking about back-up policies is valid. For instance, a company could have had a breach where backups were involved. But the letter has been carefully worded as a DSAR, a Data Subject Access Request and throws in some cover in terms of concerns the user might legitimately have. So you can't just ignore this letter.

The safe guards question would be valid in that context as well but not right of the bat in a first exchange, but if a previous answer left something specific unsaid.

The location of the servers is a valid request depending on the context, for instance when the data is sufficiently critical to be legally mandated that it stays within the EU (yes, there is such data).

Agreed on the automated response, that's the best way to handle this.

Again, this is a troll letter, but even so it still requires a response otherwise you give the claimant grounds for forwarding their complaint to the regulators (who likely will ignore it but I'd play it safe).
Stand by your choices instead of pretend they're the only choices to make. Grow the fuck up.
These articles seem common, recently.

I don’t really understand what this sentiment is about.

It’s a really useful orchestrator, in some cases. In other circumstances, it’s unnecessary complexity.
Google, AI and Healthcare
Imagine your bits stored in a sphere around your CPU. Take into account the time light needs to reach the bit you want to touch.
Imagine a world where the management chain is characterized by increasing levels of upper body fitness. Sexist, but hilarious.
Thanks for the feedback! I actually had a different intro I chopped off - it's here:
https://www.youtube.com/watch?v=TXB_j-_jPmU&t=1s
Oh I see, so you send only the first 5 digits, but you then get back ~16,730 digits (478 * (40-5)) and search those for your full hash.
> there it is, a citation to back up the claim that Snopes is biased

Disinformation is built on shared assumptions with weak evidence.

When "everybody knows" the media is biased, all the effort by reporters, fact checkers and editors is instantly discredited and disinformation gets equal standing.

"Citation needed" is a challenge to examine the evidence. Sure, you can find citations to disinformation that "substantiates" disinformation.

It's not about the citation, it's about examining the credibility of the evidence.

No, it's not perfect and it never will be. But letting "everybody knows" statements go unchallenged is how we get to a world where "nobody knows" and evidence doesn't matter.
What? That doesn't make any sense. The regulator would only care that you sent a valid request.
It's because of trust - Bitcoin is a community not a thing.
My bank has a password length limit of 8 characters.

Do they throw up an error? No, they silently truncate it.

The cherry on top is that it’s also case insensitive.

I stick with them because they’re good otherwise and they make it clear that they take responsibility for any losses due to this nonsense. But holy crap, “bank grade security” is definitely not a positive thing in my eyes.
The "social" part was that the inventory of links/websites was provided, and voted upon by users.
I know it's not black and white at all.

But it feels to me that if I'm processing personal data about my users, then it's reasonable for them to ask what it is and where it is.

There are overheads that come with doing business.

GDPR is going to shake out some of the companies that are competent at using personal data but incompetent at telling people what it is and where it's stored.
How Can My Software Company Get the Best Services?
Taking that risk (of a regulator mis-interpreting something and needing clarifications, again and again, or worse, mis-interpreting something and getting hostile) across the EU’s twenty-eight members is a good one for Facebook. Probably not for a hobbyist.
> Like all things, there must be a sense of context and proportionality. This issue is specifically about the .NET Core SDK command line tools.

Exactly. Command line tools don't usually collect your data and send it off somewhere without asking. You wouldn't expect ls, cat and grep to spy on you. That's why it's so surprising.

But even big interactive applications like IDEs don't normally do this without asking. IntelliJ had a dialog pop up just a few days ago to ask me nicely to participate, defaulting to non-participation (!). Visual Studio and Office used to do the same thing, as I recall.

(Additionally, once you figure out how to opt-out in .NET Core, does it tell you somehow that you did so successfully? I think I've set the environment variable correctly, but how can I be sure?)
I don't believe that. You can clean safely. How do you smoke a pack a day, safely?
Chinese app Xiami already has this
Wow I'm blind. Thank you!
Because the email/password combination is already known. From a previous breach where you used the same combination. So the attacker needs exactly 1 attempt to get into your account.

And with the ease of using botnets now, they can get access to a very large number of IPs to distribute the attack, so you can't reliably throttle at IP level either.
A keylogger is pretty much game over regardless of your password strategy. Your passwords can be fully offline but you still need to enter your bank password on a connected device.

On the security spectrum, for the vast majority of people, a password manager is a step up in how safe their passwords are.
Show HN: Howtogdpr.me – how to do a GDPR request and what the site will return
I agree the following two items have made me happier:

1. Removing my alarm clock and all electronic devices when I sleep
2. Stop measuring all exercise
As interesting as I find this stuff I'm not really sure it's Hacker News.
https://en.wikipedia.org/wiki/Rat_Park

Rats that live in interesting, healthy environments don't get addicted to opiates.
The status page doesn't display what customers care about. It displays whether the servers are up and reachable. If this effected everyone I see your point, but it didn't. Note that most NPM "customers" don't pay a dime.
One should also mention Isabelle/HOL [1] and Concrete Semantics
[2]. As of May 2018, Isabelle/HOL has the best proof automation, in case you want to get things done.

[1] https://isabelle.in.tum.de/
It's a combination of despair and corporations spending a lot of money pushing it on to doctors and patients.
LifeFaker cracked me up - thanks for sharing.

"Being able to pretend I rode an elephant in Thailand really helped my confidence"
Plausible, but they had six digit codes from the beginning.
I've tried that once in a site and it was a maintenance nightmare. Users kept bombarding me with emails asking to unlock their accounts. Turns out 99 times out of 100 that a username/password combo has been mistyped it's from users jerking around or not remembering the password, rather from hackers trying to brute force their entrance.

Now imagine having a site with a few million accounts and 0,1% of them mistyping the password every now and then.
> You could die falling out of a treehouse, whereas the actual damages from mishandling a single users data is several magnitudes less.

That's a very dangerous sentiment to have. Identity theft is a very real thing. You can do pretty horrible things impersonating other people, things that will lead to people ending up in jail, things that can ruin whole families and drive people into poverty, desperation, and suicide.

It opens people up to blackmail, manipulation and a whole list of other, rather nasty, tactics.

On the extreme end, there's also the fact that not everybody lives in a "free country". In many places saying the wrong things, even online, can have very final consequences. In such cases, you not taking proper care of your user's data, sharing or leaking it all over the place, can result in people vanishing in some torture dungeon never to be seen again.
You could have an automated report generator/emailer to deal with a), point the user to your privacy policy for answer to b), and finally again have an automated process for c) as well. This doesn't seem to be in the "learn a new language" effort ballpark to me.
If you're handling user data for a side project, then you'd better be serious enough about protecting your users' privacy; if not, either remove the need to store any more data than is required to provide whatever service it is you're providing, or rethink your approach to starting a project in the first place.
Does it seem reasonable to you? Let me propose a scenario to you. Let's suppose that you commenting on Hacker News would mean that you must adequately respond to certain messages sent to you. If you don't do that then you can be fined. Does this sound like an environment that would encourage you to share your thoughts on Hacker News? Or does it sound more like an environment, where you would just not say anything and perhaps go elsewhere?

It's unreasonable, because it imposes an administrative cost on anyone that tries to do things on the side regardless whether they have good data handling practices or whether they have any intention of abusing the data. I would bet money on the fact, that JUST the fact that they must respond to a letter is enough to make some people go do something else. And who knows, maybe the side project could've been the next google.
> I think the cost of not having this law is much higher.

There is no way you could know this and every indication to the contrary. Many EU countries are struggling with jobs and claiming to want a tech sector. This just made it much less likely.

> There will be new opportunities for startups,

The barrier to entry was raised. That means that startups which cannot afford proof of compliance will not exist - whether or not they meet your subjective definition of "detrimental to society."
- fork OSS project

- add your proprietary locked down bullshit on top

- make sure you don't have manpower / time to reintegrate patches into your fork

- profit.....?
Boilerplate says that you don't care to even bother write a specific letter with your specific questions. Going on the assumption that the regulators will receive a large volume of complaints they will do what every overwhelmed institution does:

Triage.

- which requests can we get rid of immediately?

- which requests are definitely legitimate?

- which requests are borderline? but will need work?

The boilerplate letters will - unless the boilerplate contains major errors - fall in the third category. It is my expectation that most enforcement in the first period will come from the second category, and in those cases where enough people each individually expended some effort on their complaint to the regulator.
The ghost of TurnTable.fm!
Interestingly in Java 8 they changed HashMap buckets to hold a binary tree instead of linked list to change from O(n) to O(log N).

https://stackoverflow.com/questions/24673567/change-to-hashm...
Sounds great.
To buy latest laptops visit this site :
https://mycomputerlessons.com/best-buy-laptops/
Is this why nobody actually builds treehouses for their kids anymore?
The download for macos seems to be a bit broken, it's meant to be going to download.jqbx.com but it's not redirecting. I think it might be a cert issue (firefox dev edition). Looks cool though, going to give the web app a go.
If it was once, or twice, I'd probably just show them id and move on. What is shocking to me are the stories about people for whom this is a regular occurrence, and where even thinking about what to do to avoid trouble at the regular police checkpoints is a thing.

To me this reminds me of my parents telling me about dealing with police checkpoints when they visited Poland before the fall of the Soviet Union.
You don't have a 'forgot password' system?
> The problem is that there is a lower floor of a $20m fine

I don‘t believe that you truly believe that, after it has been refuted a dozen times in every single GDPR discussion.

There is no lower floor. There is not even an obligation to hand out fines.
Possible BGP hijack of 1.1.1.1
Ask HN: Hackable Digital Photo Frames?
Can somebody recommend a photo frame with a decent display on which I can run custom software?
Next-gen technology elevates retail experiences and pop-up shops
I can't tell whether you knew this from the way your post is written, but this refers to searching by complete hash, not searching by the first 5 digits (aka range search).
Been addicted for a few months now, really great to see how it's shaping and developing in this rich community. Hope it sticks around for a long time.
> Static typing is massively overvalued

Are you serious? If you job involves using a scripting language in the browser, then at least have to decency to look into TypeScript. I converted to TypeScript after having worked on a code base in JavaScript and realized that just adapting one module to TypeScript, the conversion revealed stuff I had no idea it could have possibly slept thru jslint. I am talking major stuff like string to number and non-existent method calls. Ugh.
Europe’s Strong GDPR Privacy Rules Go into Full Effect
What exactly is the risk to a hobbyist here?

Even if we assume a completely bizarre and pathologically incompetent regulator that somehow ends up zeroing in on some tiny website which exhibits no evidence of violation, the hobbyist might have to... delete their website?
GTA V maps is to little when you play online
After a months of experimentation of GTA V online ... 80 level .. no money get from special card ... all won by experimentation, I can only say that the map is too little when there is a lot of people in the session and money card booster are like cheat, it just go against the game itself. (It certainly generate a lot of money for rockstar and people around) but goes against the game itself.
> Most laws require, to kick off an expensive process, someone to (a) pony up to start a lawsuit or (b) convince a public prosecutor to take on the case.

Seems like a lot of red-tape just to enforce some laws. Why wouldn't you want to lower friction for law enforcement?

> If GDPR looks identical to other laws, in the EU or U.S., to you, you may want to speak with your lawyer about it.

Don't worry about my lawyer, mind your own business.
Feel free to shoot me an email jason[at]thebestagency.com if you have anything specific. At a high level a lot of the components end up being pretty different because the UI is naturally pretty different. They share some functions but the "DOM" is mostly rewritten. But the redux actions and reducers are all pretty much the same (small changes depending on how to store state but that could definitely be abstracted away).
Will this work with / any plans to make it work with a Sonos speaker?
I don't think most organizations possess the ability to cultivate these skills. I know mine doesn't, and from the outside-looking-in we should be more likely than most.