skysight-inc/HackerNews huggingface dataset:
These EU regulations, particularly GDPR, are out of this world unrealistic and clearly drafted by old school bureaucrats.

For example, one of the requirements is that a person should be able to reach out to a company and get all of the personal data the company holds about them (plus be able to amend or delete their personal data).

HOWEVER, the bar for identifiable data is so high (anything that can identify an individual, within the context), that you can easily call up and get information on anyone else, and abuse these rights.

The same laws that are supposed to protect people, are actually exposing them. An enraged spouse can easily gather data on their partner’s whereabouts by calling up with their partner’s MAC address.

Also, the burden on companies to deal with this is so unreasonable. I understand giving people rights as to how data is used, but to have on-demand access to everything one keeps about you? Really? If you want to know what others (including organisations) know about you, keep a track record for yourself.

Can you imagine if someone walked up to you and asked you to immediately forget everything about them?

I am not trivialising the matter. Organisations are like people. When you interact with them, you give them information. But to place the onus on organisations to keep track and allow you to manage all of your past interactions is highly unreasonable.

The economic effects of court cases that relate to these regulations, as they start to unfold over the coming years, will not be positive in the slightest, I believe.
Stop abusing GitHub stars
It depends a lot on the company. I've been fortunate enough to avoid companies like the one posted, but there really are two (maybe three) views of developers:

1.) Treat them as engineers who are capable, able to communicate problems or expected delays, and professionals who want to grow.
2.) Treat them as assembly line workers who constantly want to screw around and need to be whipped back into shape.

I'd argue maybe a third is the startup mentality where you need to sell your life to the company, but maybe that's a mutually exclusive thing.

In my experience, the second comes from the same mentality as the old waterfall companies. Spec everything, trust no developer, micromanage, etc. Developers are a risk, not an asset, and never trust them at a management level. I would never work for a company like that, and avoid them like the plague.

Regardless, both of the views above seem to be a self fulfilling prophecy. Professional shops who treat developers as engineers produce some quality stuff and usually on time. Sweat shops have a lot of failed and over-budget projects and a high turnover.
Not at the time of the hack. Insider access was not used.
sdinsn is commenting on the (startling) omission of the journalist who wrote the particular article here and not on my post. The information is already reported widely elsewhere.

In fact, I'm very surprised that my post highlighting the bullying actions of prosecutors against transgender people was flagged. This is a very real issue, as anyone with any experience of the criminal justice system is aware.
Because they have different semantics. Contracts are generic over multiple types and as /u/munificent mentioned elsewhere, they allow you to write code that enforces homogeneity. You can write a generic function that takes a slice of elements that have a Foo() method and all instances in the slice will have the same concrete type. This would allow the compiler to easily specialize those function calls, so no virtual function overhead. This means we could have an efficient, straightforward sort implementation that performs as well as a hand rolled implementation.
I require this book for my Databases class since nowadays we cover more than just the relational model. I hope students will keep it.
Yup. I had to include both my parents tax information. It was assumed they would contribute a bunch of money, which zero was contributed from them. I got $0.00 in free money from parents or government. That was fun.
Our society should give up expecting these things to stay private, secure, secret etc and figure out how to do financial things another way.
I live in Baltimore. Is this on hacker news because of Trump? Baltimore is great. It has rats, sure, but I just went to a synchronized swimming exhibition at a public pool in Druid Hill park (of Dru Hill fame) that involved a segment about allergies with a man dressed as Gluten in a bread costume doing coordinated swim moves with others dressed in pollen costumes. It's a weird place. Come visit.
Data security professionals don’t make these decisions, random developers do. And they do what is easiest.
I much prefer to have a daily standup and/or weekly/fortnightly planning session scheduled rather than having someone randomly come to my desk whenever they see that I am having non-work conversation for a bit (we are humans afterall). The project can't go too awry in the intervening periods and if you can't trust your engineers to raise any issues that they have you have way bigger problems.
I love this book! After reading it, I can finally say I know something about data. The book gave me a systematic view of the technics related to the data. I marked lots and gave the book to my intern.
D'oh. Yes, HURD.
You also need somebody good to pair with. It can be really infuriating to have to deal with someone who can't keep up but on the other hand if you work with someone you respect, it's great.
> I only read the first paragraph and couldn’t read anymore.

Indeed. I got about that far before I quit reading and started fantasizing about the unspeaking things I would do to the idiot that wrote this if I ever met him. Things involving sharp blades and fire.
Ask HN: Is There any good way you are using to tracking your books reading
Hi HN,

I wonder is there any good way of application you are using to tracking your book reading plan or just a book reading?

Thanks!
Ask if you're good enough for a monorepo
An aside, I absolutely adore Vice games (formerly Waypoint). They seem to cut this really interesting line between game design, game critique, and social commentary.

I imagine that a lot of folks here might not like their takes, as they tend to bend towards a social justice framing of games as media. (E.g. a recent podcast discussed, among other things, the differences between queer representation in games manifested as 'I can form a queer relationship with my character' vs 'there are queer people in this world.'. Another, not so long ago, discussed games with a specifically decolonialist bent.)

Plenty of discussion about unions in the games industry, and how developers handle bad working conditions as well.

So much games media these days seems to be about reporting on what press releases the games companies ship, or try to strike an inoffensive tone. Or even try to push the idea that games aren't/shouldn't be political (which is a pretty silly idea, imo.) It's nice to have an outlet really trying to dig into stories and present them with a deliberate lens and framing.
All book links are affiliate links (tag liston00_20).
Nobody wants to hear this, but modern Africans have been left behind for a reason. They never left Africa.
Oh, there were.

Tyco International
Adelphia
Peregrine Systems
WorldCom (which was a big one)

And there were many more.
> Consumer grade diamond is a propped up market where the cost and price disfunction is about as big as it can be.

A few years ago I purchased a pair of diamond earrings for myself at one of the big chains. Kay I think it was. When I paid I was prompted to get a paper receipt or have a receipt emailed to me. I hit paper and then decided I probably should have gone with email in case I needed to get them serviced or anything so I asked the woman helping me if I could change my selection. The two women working spent quite a bit of time at the computer trying to figure it out before one of them said "I'm just going to do this and be done with it."

I should have known that wasn't a good sign. They must have added my email address as some sort of corporate/store account because I was emailed a copy of every receipt for every. single. purchase. made at that location from then on.

I called the location, I called their headquarters, I talked to someone in IT at HQ. The receipts kept coming and no one at Kay knew why nor did they seem to care. I finally just gave up and abandoned the gmail address but I've often wondered if I'm sitting on one of the most comprehensive consumer diamond data sets of "retail price" vs "purchase price" in the world.
Excel is also used extensively by investment bankers and hedge fund bankers.

Because, it often is the right tool to use...
Did huckabee sanders draft this? It’s also the bottom of the page... of course.
It's illegal to lie to the Federal Government period:

https://www.law.cornell.edu/uscode/text/18/1001

More precisely, it's a violation of 18 USC 1001 to lie about "any matter within the jurisdiction of the executive, legislative, or judicial branch of the Government of the United States" (with a couple of specific exceptions as given). Technically you don't even have to lie to a Federal official since the statute doesn't specify that; it just has to be a matter "within the jurisdiction" of the Federal government.
I am an American and I had to look up PwC. That said, you can be a household name outside of America.
They can breed, but if I'm not mistaken the off-spring can't have off-spring of their own.
Don’t forget to mention that on your next interview!
https://news.ycombinator.com/item?id=20560342

190+ points
Put that on your college application and you'll get a free ride so they can meet their diversity quota.
You successfully convinced me never to want to go there
Meanwhile Institutional Investor continues to trot out thinly veiled marketing fluff pieces, produced by self interested parties, as news articles.
The list of investors and advisors is impressive. It'll be interesting to see if the model takes off.
To clarify my definition:

Changing requirements should only happen outside the scope of committed work; otherwise you're building churn, poor features, and poor code.

This lever of "committed work" can be adjusted per team (1 week, 2 weeks, 4 weeks, and so on).

It seems you agree with my view of a minimum of 1 week before it can change.

I agree also with fine grained tasks/stories. As small as possible and as consistent as possible. They should all have clear DOD's though.

Definitely agree with smallest possible units of value (that also varies per a person).
> At the bottom of the comments, a member of the Hypercard team said it was killed in 92, before Jobs returned.

Well, HyperCard had several lives.

An early version of HyperCard 3.0 was demonstrated at WWDC in 1996 which used QuickTime ("QuickTime Interactive", or QTi) as its runtime. That would've allowed stacks to run in browsers, and in every app that leveraged QuickTime to render multimedia content.

The 1992 killing was before my time, but in any case HyperCard was effectively killed forever in 2000 when Jobs reassigned the HyperCard engineering team to not-HyperCard.
I went through basically this. Worked full time while I was at school at various jobs to make ends meet.

But I don't resent the school system for denying me aid. I understand that I represent a very small population of people who:

1) Want to go to college

2) Had very wealthy parents

3) Wanted nothing to do with said parents

In basically every other case, the system works reasonably well, and I'm not sure we should be making financial aid easier to get for the wealthier folks just because a few folks like me come along every year.
> Institutional, special interest, group or bulk purchases, if and when they are included, are at the discretion of The New York Times Best-Seller List Desk editors based on standards for inclusion that encompass proprietary vetting and audit protocols, corroborative reporting and other statistical determinations.

So basically, they use editorial discretion when ranking bulk sales. Which means they are prone to exclude books they don’t like and include books they do like. Excluding some bulk sales but not others isn’t objective. Institutional and bulk sales should all be excluded from the counts.
Yeah, pairing is a learned skill!

If you put two random programmers together and ask them to "pair program", you'll very likely end up with two annoyed people at the end of the day.

I was lucky in being mentored into it by some very seasoned pros, and I learned the tricks of the trade that way.
From what I read in the complaint, it wasn't as blatantly bone headed as other breaches. Seemed to be an IAM permission issue related to AWS WAF.

This argument is constantly made on HN and it is analogous to; you left your back door open at your house, and instead of arresting and prosecuting the robber, we are going to arrest you. Sure, I made a mistake and left my back door open, but that doesn't give the robber the right to break in and steal my stuff. It is lacking a moral compass and sense of right and wrong. There needs to be consequences for bad behavior.
I don't know that there's a "quick audit", there are too by vectors for any single professional to check. You'd be best served by using an auditing or monitoring solution. Even then, you're really just auditing _known_ vectors as it's likely impossible to cover all possible ones.

I used to work on an auditing and monitoring platform, there really are too many vectors.
> Municipal water and irrigated water are very different topics I agree, but from the direction I work in we look at them in a similar light.

Yet another strange, nearly zero-information post. Another post you made the other week sheds more light on this job of yours:

>I work in critical infrastructure planning. My organization builds software in R, Python, and other programming languages customized for these major organizations.
Gentrifiers want to live near the culture of low income people (restaurants, bars) while they push low income people out.
Initial reaction:

1. For transparency any member of the team can identify blockers in Kanban by putting them in the blocked column.
2. If you're blocked, and running into issues, you'd reach out to anyone that can help you. Why would you wait for a standup or "talk to the wall" for that? Just be proactive.

Dependencies should be known before committing to a scope of work (iteration) with the team. Planning stage (minimal time investment for scope of work definition) vs committed work stage (in progress iteration).
Goodreads?
extensions could just as easily modify executable you download, or source code.
Because there isn't much money to be made. Frequency control used to be provided inherently in every generator. With renewables that isn't the case and no consumer wants to see a new line item on their bill for all the extra cost of accommodating energy markets and renewables so it is all hidden in the network connection fee which is controlled by regulators. So the return on providing grid services that aren't MWH (energy) is Essentially fixed to what regulators will allow, which isn't that attractive, so better for tesla to make the lump sum profit up front on the equipment sale and let the utility run it for 5 years until the batteries are worn out and the utility have collected their ROI.

In terms of actually bidding MWH in to the market when supply is tight so the price is high, it will end up lowering the price by increasing supply, and the intervals of high prices are few. By virtue of existing the system will reduce frequency of high price intervals since the market participants will know that capacity will come on at some price so if they try to bid really high their is will not be accepted. So batteries at this scale is nice for the system operator and politicians to put a lid on high price intervals but won't actually sell enough MWH back to the grid to amount to much.
What do you mean by integrating every 3 seconds? As an ISO in the US, CAISO is pretty standard in that they have a day-ahead hourly market and a 5-minute real-time market. Of course they have very large ramps due to solar (duck-curve).
Sure, it's one of the main ways states incentivize the growth of small businesses and moving business to their state.

Why City Governments Give Tax Incentives to Businesses
(https://www.thebalancecareers.com/why-do-cities-offer-tax-in...)

Maryland Incentives and Workforce Development Guide (https://businessfacilities.com/2015/01/md-incentives-and-wor...)
Yes, I think we basically agree. Normal practice at Pivotal is to hold weekly Iteration Planning Meetings (IPM). Most product managers aim to keep around 2 weeks of ready work in the backlog, based on what Tracker is predicting. Anything more than that will be usually be cards in the icebox.
It’s here because I saw it in /r/Baltimore and found it interesting and, as a Baltimore resident, encouraging.
> die on the Vine

Clever. Also, I think you nailed it.

YouTube is trying to curate their content. Any site that stays around for a while and wants to attract top advertising dollars does it. Reddit curates to an extent. Facebook is in all kinds of trouble for not curating.
Google knows where you are, who you are, what you search for, where you live and work, and what you buy. Everyone these days has a lot of data on you.
Assuming it's not an iphone, the phone you bought will likely be getting few/no more security updates and is obsolete, that's why it's so cheap now and in part why it was so cheap then. As you said, the value add here is in running mainline linux and that means your phone really will be usable for several years. Some of the other big pluses over android are ease of development, no java bloatware, more FOSS and no spyware. Those things are just eating your specs anyway.
It doesn’t matter. There is never a reason for credentials to be anywhere near your repository. If you’re running locally, you should have your credentials in your home directory (via aws configure). If you are running your code on AWS either on an EC2 instance, lambda, or Docker you should be using the role associated with the execution environment.

Every SDK that I have used let’s you use a constructor without a parameter and can get your credentials from the config file/role.
Why does Boeing sell planes instead of operating them directly? Why does John Deere sell tractors instead of operating farms? Companies focus on what they’re good at.
We really did break America.

Now everyone is looking for loopholes or they want to subsidize everything.

Of course, the subsidy is soon folded into the price and quickly makes the problem worse.

https://www.forbes.com/sites/camilomaldonado/2018/07/24/pric...

Healthcare, the cost of infrastructure, trillions in unfunded pensions ... now we’re adding a trillion in debt every year.

I don’t really see how this works itself out
> Or students that had cash-paying jobs to keep their income low

So they committed tax fraud as well as financial aid fraud? (Presumably “cash” is another way of saying “unreported income.”
Yes, the $90 was my copay and I got a copay reimbursal from the drug company so my net was $5. The drug company is trying to mask the cost of the drug from the consumer so they can charge the insurer a higher price. The insurer is charging a copay so the patient feels some of the cost.

However disclosing these practices is not enough. The end consumer has no negotiating leverage particularly if they have no insurance. The government or some big organization needs to negotiate the best price for them.
They haven’t commented publicly but I’m guessing they’ll play a key role in regenerative braking for semi and pickup and also help higher powered super charging
> What if you have a couple thousand acquaintances and friends around the world?

Then that's what you say in response to the question.
Some of these species are thought to be smarter than us, so you better be careful or you will end up the specimen in the zoo.
+1000

Extensions should be able to have their permissions limited by domain (e.g. to customize YouTube or Reddit) at a minimum.

And I'd also really like a way to track both injected scripts and elements so that they wouldn't be able to make any HTTP requests without additional permissions, not even an <img src="..."> tag if the src isn't just a data URL or local extension resource.

E.g. I want to be able to install an extension that stops YouTube videos from playing as soon as I navigate to the page, without worrying my entire browsing history or worse is being sent to a third-party.
> At the very least, YouTube can offer a service your video can go into limbo before it's sent out to your subscribers, where all of these "mistakes" can be ironed out.

This has existed for some time. You can upload your video as "unlisted" and then later make it "public."

(N.B. "unlisted" != "private")
You still have to do all of that for a ROM patch, plus reverse engineer the (apparently horrible) ROM code. At least the emulator's source is probably available.
IME anyone is able to pair, given the right conditions and being paired with the right person.

However, it's like therapy: being forced to do it instead of doing it by yourself will result in a terrible experience.
Yup, knew parents of good friends and my own that would help a little in a dire pinch but the expectation was to get scholarships and/or work through college for it. Makes sense particularly if you consider a family with 3 or more kids. I make good money but I ain't got half a million dollars to throw at Universities..
That's a privilege, unfortunately.

It might not be safe for me to drop into queer coded language in a public place, for instance. Or it might not be safe to be publicly out as non-binary somewhere and I can use coded language to signal to others in my community that I'm "on the level", so to speak.

And even then, I think it's pretty safe to say that most folks have a professional and personal tone at the least. (I swear a lot less in the office, for example.)

I wish it was the case that we could all just be who we want to be all the time, but we have different expectations put upon us in different places and times, and adapting our language is one of the ways that we cope with that.
The Feds aren’t like state courts. There is no parole and judges have minimal discretion on sentencing in many scenarios.

Most federal cases are about negotiating the sentence, and win a public defender she is probably screwed. She’ll spend more time in prison than the average rapist.
> This is why lately I’ve been a fan of very extensive standard libraries (like Crystal has) - its like having a huge repository but vetoed by the same team and without any of the package management drawbacks.

Having had some involvement in the early days of node, I had imagined there being something like the Python stdlib. When the npm world grew, I thought "oh, that's pretty cool. It's neat how npm can handle multiple versions of the same package."

Now, I'm in absolute agreement with you. There are definitely downsides to a large standard library, but I think the upsides are worth it if that library is maintained.
Ice cream is delicious. So are nectarines.
I'm an Amazon employee here - but my words don't represent the company.

Internally we also talk to AWS support. They absolutely don't have much visibility into our accounts at all - much to my frustrations. They only see metadata - even for internal accounts.

The only teams that have some access to such information is security team, or when you Grant access explicitly to the other person via standard AWS auth mechanism (IAM)
Rich people throw loud parties too.
And this is why we need more regulations on the "Bootcamp" industry: https://twitter.com/KeziyahL/status/1155154616281178114
Recently I started an extension which ran into a need for that 'everything' permission. IIRC it has to do with tab management. I imagine browsers could limit requests for tab access by URL patterns, so not sure why they don't yet.