skysight-inc/HackerNews huggingface dataset:
A lot of websites seem to place cookies before you can consent to them doing so.

I just loaded up the home page of The New York Times (a random example), and it had placed 23 cookies on my laptop before the "Your tracker settings" window finished loading. Now I still haven't clicked "ACCEPT", and we're up to 43.
I think you mean position: fixed or sticky? Overflow controls what happens when the contents of a bounding box exceed it's allowed size, which is usually to hide or make the box scrollable.
One caveat is that WSL2 needs Hyper-V, and many anti-cheats won't work with it (many CS:GO anticheats, I think it will be true for many multiplayer shooters).
It's already in there. Article 7, third paragraph:

> It shall be as easy to withdraw as to give consent.
Florida is especially problematic, but in general I'm using hospitalizations as a proxy where the hospital systems aren't overwhelmed.
> The current 10% is equivalent to closer to 30%-35% in the early 80s.

Could you explain this more?
> "We" are giving people back control over what happens with information about them.

No. We are training people to click on every button and consent to anything that they are presented.
A website I use used to have a question of "How do you spell 'blue'?" Then a bot figured it out and they had to change it to "How do you spell 'green'?".
There are also self-hosted alternatives so no third-party, or even cookie-less tracking. Something like: https://usertrack.net/
That doesn't need to be a banner. You can ask for permission at the point someone tries to save preferences.
This is your 4th submission of this in six days!
I doubt that is the intent, content can be behind paywalls so I see cookie acceptance as a form of paywall. if they are claiming otherwise you get stuck with only paid content.

So can they do previews only without running afoul of the law and they specifying cookies for full access?
We're a startup from SAP.io's accelerator program, so quite a separate entity.

We received funding/mentorship from SAP via Techstars, but don't integrate with their RPA (right now at least...).

SAP's RPA is more focused on larger enterprise use-cases within their ecosystem, whereas we're looking at SME and even consumer use-cases.
I agree that TaPL is an excellent book, but I did not find it useful in explaining functional programming idioms. (It does do a great job of explaining typed lambda calculus, however.)
They resurged because windows laptops was straight trash and wireless worked like shit. Apple only needed to do a few things better back then.
Ah, I see what you mean. Yeah, that wouldn't apply here.

It's likely that simply setting a particular cookie with a dummy value would bypass this.
Thought it was going to be this: https://www.youtube.com/watch?v=5kZoTcYYio0
Covid fatigue is taking an enormous toll on healthcare workers
It probably wasn't in 2002, when the current cookie law was written. The new ePrivacy Regulation does want to replace it with a browser function though:

https://ec.europa.eu/digital-single-market/en/proposal-epriv...
Before you confidently snark about how I could have researched your point for you, consider that you just demonstrated how small of a problem right wing terrorism is. According to your own post, 2018 saw 50 killings from right wing terrorism in 2018. Compare to 36,560 motor vehicle deaths in the same year[1]. Or, you know, the over 70,000 people who died of Covid19 so far this year.

Keep in mind, right wing extremism in 1918 grew into the holocaust, which killed 11 million people[2]. This from the Spanish flu which killed 17+ million people[3]. I don't think 50 deaths in a year is comparable, and I stand by my claim. In a conversation where events that caused millions of deaths are being discussed, comparing something that caused 50 deaths two years ago as "a danger that we are facing right now in the US" is alarmist.

I'm not saying it's not a problem, and I'm not saying we shouldn't talk about it. But I am saying, we should keep some perspective.

[1] https://en.wikipedia.org/wiki/Motor_vehicle_fatality_rate_in...
[2] https://en.wikipedia.org/wiki/The_Holocaust
[3] https://en.wikipedia.org/wiki/Spanish_flu
That seems like a weird choice. I mean, it makes sense to ban discrimination based on traits that people have no control of (e.g. all the protected classes in the US), but a refusal of consent is a behavior choice, not an unavoidable trait.

I wonder where things are heading.
I thought they could have them all selected as long as there was some "de-select all" button?

Edit: Never mind, I guess that would violate Article 7's "It shall be as easy to withdraw as to give consent."
You can charge money, you can have special rules outside of the scope of the GDPR... what you cannot do is make people’s personal data the price for content. Under the GDPR personal data is non negotiable.
>Not if you count rent / mortgage

Depends where you live. There's no reason the 175k employee can't live somewhere "bad" or suffer a long commute. Most major western european cities and their suburbs are by no means cheap to find housing in.

>car & car insurance

Most white collar Europeans with families own cars. Owning and operating a vehicle is astronomically cheaper in the US, even in California which has insanely high costs compared to the median or mean state.

>kindergarten

Part of the free (at the point of use, obviously it's paid for by taxes) public school system in the US.

>And you medical coverage might still cover less than the European one.

I don't want to have a healthcare debate but the cost was addressed higher up the thread and the difference in coverage between what American BigCo employees get and what Europeans get (and both those classes of insurance are diverse enough to make comparison impractical without sweeping generalizations) is not going to be meaningful except in the edge cases.
I agree. I recently started exploring OpenGL and found it pretty approachable. If someone is looking for a resource to help learn OpenGL, I found https://learnopengl.com/ extremely helpful.
Affinity Designer also lacks features compared to Inkscape, so paying more (than nothing) does not necessarily get you a better product.
Europe’s Largest Private Hospital Operator Fresenius Hit by Ransomware
Have cookie consent pop ups made the web better?

If you're concerned (or aware) about your privacy, you likely have an addon that blocks trackers enabled.
My dad built our house in 1971 and the rate for his mortgage was 6% but less than ten years later it was 21.25%, crazy! Even the 6% was a stretch he has to join a co-op. It was kind of like an early Habitat for Humanity but your group did it all yourself.
Yeah, there are a few hilarious data errors around the place. A couple in various oceans, and a really odd streak of trees escaped from Cologne in the northwest of France near the Channel.

Even around Null Island there are a few other trees that aren't exactly on 0,0 but nearby.
Adding a Scroll to Top Button Without JavaScript
Sort of - I skipped over subnormal numbers.
Yes, this long issue comment explains how the true cause is the design of the Windows IO subsystem: https://github.com/microsoft/WSL/issues/873#issuecomment-425...
Tiobe Index for May 2020: May Headline: Programming language C is back in the n
I've been using a similar bookmarklet for years now, and I have never seen any 'proper' content deleted by it. The fixed elements of a webpage are overwhelmingly likely to be useless and annoying wastes of space.
At some point I just stopped reading sites that make it too hard to opt out. Though I would really like to have a browser that automatically opens links to such sites in incognito mode, accepts the popup for me, and makes sure everything is thoroughly deleted afterward.
Will Durant has an interesting quote that has stuck with me, something along the lines of: Out of every 100 new ideas, 99 of them will be bad, and inferior to what was replaced.

My impression is that "It's better now than before" is used to protect the effort that got us here, not cancel it. It's used to protect us against the 99 bad ideas.
I do now!
I'd base it if clicks and not time. You shouldn't need to do more than 2 clicks and any usage of the site for that process shouldn't be deemed implicit consent.
Consent can't be a form of paywall under GDPR. GDPR defines that valid consent must be freely given, and explicitly mentions that if providing service is conditional on providing consent then that is not freely given consent.

Consent that's not freely given is not valid legal basis for processing personal data according to GDPR. If users clicked "I agree" under these circumstances, then that "agreement" click is worthless, it does not grant any extra permission that the website owner did not already have.

In essence, GDPR makes that consent to processing private data is not for sale, it's not something you can legally trade away in a contract for some money or benefit.

It's valid to have informative click-through walls - to gather assertions that the user has been informed that you're going to do stuff with their data because you have a legal basis to do it even if they don't opt-in; but a click-through wall fundamentally can not be a mechanism of obtaining valid consent to some processing where consent is needed. GDPR consent must be opt-in, fully informed, and freely given - something that some of your users intentionally choose because they want to. If you expect all users to "consent" to some processing then that's impossible - you would rather have to argue that the "legitimate need" or some other part of GDPR allows you to process that data without consent. You can have all users acknowledge something, but you can't have all users consent to something, that's not how opt-in consent works.
If I understood their blog posts correctly, the captcha rate should be the same - it's shown to you when Cloudflare detects that you need one, not when reCaptcha/hCaptcha decide. CF just has them show the captcha.
> It doesn't matter what tricks the server does.

The server doesn't serve you the content until you accept... so it does matter what the server does.
Yeah, I can feel your pain.
We deployed a fully virtualized HPC cluster on top of OpenStack and there was a fair amount of testing and playing with knobs (SRIOV, Jumbo frames, CPU pinning, etc) to get close to bare metal performance on a 100 GBit/s SDN fabric.
If you are coming from imperative land (more specifically C++) then nothing beats articles and videos by Dr. Bartosz Milewski:

https://bartoszmilewski.com/2014/10/28/category-theory-for-p...

https://www.youtube.com/watch?v=I8LbkfSSR58&list=PLbgaMIhjbm...

https://www.youtube.com/playlist?list=PLbgaMIhjbmElia1eCEZNv...

https://www.youtube.com/playlist?list=PLbgaMIhjbmEn64WVX4B08...
How would the legal system look if it was inspired by a materialist worldview? I'm not sure that it would change much from how it is set up currently.
They're talking about ReCaptcha v3[0], which is completely different in comparison to current ReCaptcha that requires you tick a checkbox. The new version analyzes your behavior across an entire website and, when the website requests your threat score, it returns 0.0-1.0 with 1.0 being considered human.

The problem with this new system is that it doesn't solve the problem developers wanted to solve before: preventing unauthorized signups. Most developers don't want to know how likely it is that a user is actually a bot, they just don't want bots signing up for user accounts. With the new system, Developers have to decide what to do with a threat score. Should 0.5 require some interstellar page with a v2 captcha? Does a 1 or 0.9 mean they should give them access to certain data that might be otherwise hidden from boys? It's something developers generally didn't need before.

We likely won't see the "i'm not a robot" checkbox (/invisible recaptcha[1]) go away anytime soon since v3 solves different problems, but it does mean websites might start sending you down different verification funnels depending on how human Google thinks you are with no way to solve a Captcha that proves Google otherwise.

0: https://developers.google.com/recaptcha/docs/v3

1: https://developers.google.com/recaptcha/docs/invisible
For an example of that see: 1929 & Money Supply Reduction.
>... a motorcycle could be either gender as it's strongly analogous to a horse, but a car is always female.

In Brazilian Portuguese, we use masculine pronouns for cars ("o carro"). Same goes for boat ("o barco") and plane ("o avião"). This can also be seen in Spanish ("el coche", "el barco", "el avión").

I believe that the gender these things are referred to in languages with gendered nouns is more linked to the etymology and development of linguistics than psychology, although it is very likely that the later has some influence as well.
Tap targets are hell. On certain forums I like to open comments by using link in the comments number below the post and they register once in 2-4 tries usually. That I need to check in other browsers, I thought it was bad everywhere.
It doesn't directly. The central banks have lowered "safe rates" down to zero and sometimes below, but desperate businesses still have to offer high yields over 10% to find willing lenders.
Models vs. Evidence – Covid reveals 2 competing philosophies of science
What does TFA mean in this context? I know what it usually meant on Slashdot, but it seems out of place here and other comments I see often on HN.
Programming in Three Dimensions
Washington Post's paywall has a fun variant on this where not only does it omit the content, it changes the current URL so you can't reopen it in another browser or share it with someone. It's exciting seeing how creative services will get when they're trying to get you to give away your data and/or money for something you can't see.
It means it was overrated relative to the importance of listening to feedback.
> Tell me, please, how does this support the idea that mass spread without extreme protective measures (as was the case in January or February) can result in no excess death?

I'm not saying it can result in "no excess death", I'm saying if there had been mass spread back then, even on the order of hundreds of thousands of cases, it could've gone unnoticed, because the excess death would've been within the seasonal variance.

If there are really 10x as many actual cases as reported - which is what antibody studies suggest - then the virus has either been spreading much faster than we assumed, or has been spreading for longer than we assumed.

The fact that somebody who died in France in December appears to have been infected with COVID-19 strongly suggests that there has been community spread far earlier than we assumed.
From Algolia's outage retrospective:

What we did so far:
We’ve secured the impacted SaltStack service by updating it and adding additional IP filtering, allowing only our servers to connect to it.

So clearly unrestricted access wasn't a necessity.

I understand it's a pain, I've been running a 1000+ server stack with puppet on a public network and relied on iptables to secure it. But I'd rather cope with the daily iptable rules update than having to fight a 0-day exploit...
https://outline.com/LM8MTd
Unbelievable, this means that at least two people think this is a good idea.
I see how it could sound weird to the eyes of an American, but the only place where I think his statement would be incorrect is Western Europe. A part from that I'm confident that a majority of people around the world would very much like to either have been born in the US or give their children the opportunity to live there.

At least where I'm originally from, emigration to the US is seen as an an incredibly desirable outcome even more so than to europe. Though personally I'm glad I've ended up in canada! Funnily enough, my parents first choice was still the US and they only tried for Canada when they didn't get picked in the Us Visa lottery.
> you get stuck with only paid content.

That’s fine, isn’t it? They want money, I want information. If the information is worth it, I pay.
it amazes me how many hackernews readers/commenters seem to have no idea what gdpr is or what it means for them.

if a site has a "gdpr popup" then that means they are doing something that the know is morally and legally questionable - not that the law is wrong ffs.
I did a lot of tasks in inkscape for a while and switched to Google slides oddly enough. Of course it's a significantly smaller subset of features, but once you get good with it, it's very powerful. That said, I would be happy to switch back for a lot of things now that native macOS support is on the table. I think the big advantages I saw in slides is the collaboration and iteration (you just make another slide and hack) instead of cluttering a workspace and then having to collaborate or be a gate keeper on a local file. Super excited to give this a whirl though!
SlashB – (Sizzy Alternative) The Browser for Web Developers
Tell me a legitimate use-case for position:fixed on a website. Not a web app, a web site.
2020 Ketone Stock Simulator
It's a shitty choice, which is exactly why it is not a genuine choice.

And yes, that is exactly what it does. That is the point. We have decided that that is a good thing to require.
He commit suicide.

The headline and the article try to imply something different. Weird.
Click-captcha has tiny touchpoints, so I fail a couple times on mobile, just from that. Phpcaptcha has autocorrect enabled on the text box, so "alk" was changed to "all", causing a fail. Captcheck worked well.
Thanks for the clear explanation. Looking at the source code, it looks similar to modern allocators, just without the per-thread heaps. (I think all modern allocators use size-class slab allocators for small objects.) Curiously, I don't think the academic community has much literature on hardened allocators. It's been a while since I've worked in the area, but I wasn't aware of any other than DieHard from 2006 [1]. I did some searched on the ACM Digital Library (I love that it's all free right now so I can easily provide links in forums), and the only other thing I could find was FreeGuard from 2017 [2]. Maybe the issue there is that academics who design memory allocators tend to be on the systems side of CS, and such people tend to use raw performance as a part of the evaluation. Better security for a new thing does not show up in a graph. (Even that FreeGuard paper from 2017 claims security with better performance.)

In the non-academic world, I found the one we're discussing, but also Scudo (https://llvm.org/docs/ScudoHardenedAllocator.html). And that's it. If I still worked in the area, I would try to go after scalable hardened allocators. I wonder if there's still some clever stuff we haven't thought of there.

[1] https://github.com/emeryberger/DieHard, https://dl.acm.org/doi/abs/10.1145/1133981.1134000

[2] https://github.com/UTSASRG/FreeGuard, https://dl.acm.org/doi/abs/10.1145/3133956.3133957
Magic Leap in Talks for Urgent Funding: Report
But still I would argue, we keep forgetting:
- Food
- Health
- Shelter
- Freedom
- Family is safe, not killed or taken away by barbarians or the plague or a demon

are pretty much at the top of “things that really stress us when we don’t have them.

I mean, everything else is icing on the cake. Not too long ago, people didn’t know whether they would starve to death during the next winter, their wife would die from childbirth or some local bogeyman would just burn down your house and enslave your family.
Uber is laying off 3,700, as rides plummet due to Covid-19
Avoiding Memory Leaks in Node.js: Best Practices for Performance
A 2u asus with 2 xeon silver, 64gb ram and 4 x 2080ti is maybe us$15k?

We'll use it for as long as its producing useful output. Lets say 5 years? Probably a little longer?

A 60bay 4u western digital with 14tb drives is under us$50k?

definitely got a dell md1280+1u server with 70x10tb 2yrs ago for under us$50k. Fully populated the following year..

A 2u dell with maybe 20 cores n 128gb ram each should cost less than us$10k.

And we just got 4 or 5 dell switches with 48x10g ports for 50-70k? I'm not sure.

What's the equivalent in the cloud?
> ... and yet everyone is claiming there's no evidence that any data or secrets (customer's or otherwise) were exfiltrated from the network.

A number of people have carefully reviewed the payload that was deployed to servers, especially during what we're calling v1-v4 of the attack. (v5 onwards got more complex, but that wasn't until Monday (with variability for timezone).

> Nobody has any idea what was run on the servers ...

Well that's not true - there's a number of victims that have useful IDS tools, including auditd, plus the review of binaries and shell scripts deployed, etc.

Some of us also have netflow collection at the edge, and can review connections initiated from within our networks.

> ... once the initial attack script was deployed it downloaded and executed new scripts every 60s and then removed themselves.

I don't think any of us have found scripts that removed themselves. While that may sound naive, there's a few researchers that have been analysing these tools, including via large honeypot networks, and this just hasn't (at least for the first 2-3 days) been a profile of the attack.

Thankfully - and I appreciate it's very weird to say this - the initial attacks were very much vanilla crypto currency mining opportunities. It could have been a lot worse, and algolia's assessment matches a lot of other independent assessments on this front.
how can the browser know what a cookie is for?
Just because you can't be arsed doing the research and want to give your users a poor user experience instead doesn't mean alternatives don't exist.
I figure without tech, I'd be a monk or clerk.
IRS stimulus checks sent to millions of dead people
This was interesting enough that I subscribed to Smithsonian Magazine. Thanks for the recommendation!
Nope, not in a hundred years.

I go to work for 1 reason: compensation. I expect to get paid, and get the benefits agreed upon when I agreed to work here. I will be friendly to those I work with, so that I don't hate to come in to work every day.

Does that mean they have the right to meet my SO or friends or things/people/hobbies outside of work? Absolutely not. If I choose to do so, that's on me.

Work != outside of work. That's a hard boundary.
Thanks, this makes sense.

Edit: I'm surprised that elondaits's explanation isn't at the top of my thread. It makes clear that "exchanging your data as payment for 'free' services" is the target of GDPR and seems to me that's the only sensible explanation. Is someone willing to refute their explanation?
Nostalgia ain’t what it used to be.
Very nice, but not a stitch on LyX's math editor [1]. Especially good are its user-defined math macros (scroll down to point 6 in [1], or look at this video [2]); you can even define different versions for the output and for editing. Entering macros (both built-in and user-defined) and positioning your cursor in the arguments can be done with keyboard or mouse.

Unfortunately LyX tends to get dismissed a lot because long-term LaTeX users naively assume that it's just for beginners. Ironically I think you need to be a fairly advanced LaTeX user to start with before you can use it effectively.

[1] https://www.lyx.org/VisualTour

[2] https://www.youtube.com/watch?v=68Gys4rp3u4
UK grey or Seattle grey?
Legally they have to show the consent screen again if anything changes, such as them working with a new vendor, of if the IAB releases a new version of the Global Vendor List.
Rep.ly – Create your own public Q&A page
I am wondering when Google will get around to providing better "out of the box" support for GPDR. I should be able to get UI to let users opt out, and see/delete data, as easy as installing GA in the first place.

Most of my projects are non-commercial, but they still usually have GA, GA tends to be the only thing I have that requires GPDR attention, that I'm aware of anyway.
LabVIEW Community Edition