skysight-inc/HackerNews huggingface dataset:
They have existed on small scales. Everything from hippie communies to Christian monasteries to Israeli kibbutzim. The reason tasks are undesirable is because the tasks are detached from people's lives. Raising kids is certainly "objectively" undesirable, yet people do it for free and at great costs. Why? Because it's meaningful.
c) is very popular among various German websites I frequent. Instead of the embedded content there is a blank area and you can consent with one click to send your data to $service which will then load the embedded content. Sometimes it also includes a direct link so you can open the embedded content in whichever way you like. I don't find this to intrusive or annoying, especially since the website can save your choice for later and can choose to never ask you again.
That’s like dropping half a million dollar in USD and your account number in front of the bank at night when it’s closed and expecting the bank to credit it to your account.
"Can you someone translate?"
Here's my attempt at translating the first four paragraphs:

Dynamic IP addresses are a piece of PII (personally identifiable information) to the maintainer of a website. That's because the maintainer can identify the person using their IP with the suport of the ISP and the responsible authority.

The use of fonts services like Google Fonts is not protected by 'Art. 6 par. 1 S.1 GDPR' because the use of the same fonts is possible without connecting to the Google Fonts servers.

The visitor of a website is not responsible to conceal their IP (e.g. with a VPN).

The revelation of the visitor's IP to Google is a violation of visitor's rights. Given that Google is known to collect personal information to the discomfort of the user, the violation can be deemed so severe that it is justified to demand damages.
Frivolous lawsuits, maybe, but frankly that’s irrelevant to the discussion at hand, which is the legislative liability of running a website. I’ve never heard anything even close to what the GP describes happening in any other country.
The unlikely way Jeff Bezos became one of the first investors in Google (2018)
I think there is not. You are not allowed to download the video and host it yourself, that would be a copyright violation. Am I missing a legally valid way?
As a German citizen, this isn’t nuts.

Leaking extremely sensitive user data, like their IP addresses, to third parties, enable them to finger print users.

Leaking those to third parties outside the EU, and in particular to companies whose revenue depends on this finger printing, like Google, just to serve a font, it’s the dumbest thing I’ve heard all week.

The whole purpose of the GDPR is to discourage this behavior, requiring websites to inform users of all their crappy unnecessary things they want to do before they do it.

The only reason Google gives you hot loading for free is to get your users data. Trading your users personal data to serve a font is brain dead.

IMO this fine of 100€ is too small. They should have made it 10% of their revenue to send the clear message that this is not ok.
no, if external resources are pulled in prior informed consent then there is no agency. Such consent is a hard requirement.

If I visit example.com I am not to guess what 3rd parties it uses.
Why do you think google fonts exist?
For google to Get visitor IP all over the web without any form of user consent, this is exactly what the gdpr tries to kill.
I think the address was valid, the problem is that there is no way of getting the coins out of it.

The same thing was done on the bitcoin chain, e.g. counterparty[0] was relying on a "proof of burn" which was basically "Send BTC to a black hole".

[0] https://counterparty.io/docs/faq-xcp/
Even encryption algorithms proven correct later turned out to be critically flawed.

The legal system is such a quagmire because figuring out what is "right" in all scenarios is anything but obvious. That's how we end up with laws we don't enforce and technical legal behavior that will still get you into trouble. But what's the alternative? Robot justices? No thanks.

If the complexity is in the nature of the problem, then smart contracts must contain all of this complexity. But how can you ever write smart contracts that are bug free and deal with every contingency?

Instead of making systems that are buggy, cold, and unforgiving we should be making systems that are more tolerant of human mistakes.
Things in general when they start to fix them, get worst before they get better. And if you believe that is true, the world is going to get A LOT better soon.

-Steve Jobs.
Given freetype's long history of buffer overflows, I think disabling web fonts is a very good idea.
You could also say that the user is opting in to loading a font from google when he actively sends the request to google. You could also say the user is opting in to storing cookies by accepting the file and writing it to his own disk, and sending the file back when the site asks for it. I think it is too late for these kinds of arguments in the EU though, and maybe with good reason, if it turns out the average citizen is not actually able to configure these kinds of decisions.
It is not gone. You may have to go through courts if the recipient does not return the money voluntarily though.
> c) embed in such a way that it shows a user-controlled notification that opening the embed will connect to Instagram and as a consequence sends data to Meta.

This is how we arrive at cookie popups and annoying "you're leaving our website" notifications. I posit that perhaps both of these could be a feature of HTTP protocol and the browsers - i.e. a browser could just display a small standard icon in its UI notifying user that he's consenting to cookies, and another one notifying him that he's being redirected outside of the domain he's in, The user could then configure the browser to auto-accept or auto-deny such attempts, review all the consents he's given earlier etc. - all in all, it would result in much better UX.

Google has probably not proposed and implemented something like this in Chrome already only because it would actually improve privacy and that's obviously not in their interest. Which proves that de facto giving up Web standards to the commercial entity was never a good idea. If the EU was better at execution, they would mandate something like this as the law, instead of the current requirements which can be met by just spamming users with popups no one reads.
The website tried to rely on legitimate interest as the legal basis for processing the data, and that precisely requires a balancing test between the interests of the website host and the interests of the data subject.

If you want to make sure that you're not getting the balancing test wrong, you can always go for the legal basis of last resort: consent. Just ask the user whether you can load content from Instagram and only do it if they agree. In fact, since in parallel to the question of your legal basis under GDPR, you also have to comply with the cookie provision from the e-Privacy Directive, where there is no "legitimate interest" exception to the requirement to ask for consent, you will have to ask for consent anyway (as Instagram embeds place cookies).
In 1995, I don't recall a lot of people actively against the internet. It's true that most businesses didn't believe it was relevant to them.
> not forced to follow the instructions

Again, you're talking about an opt-out. GPDR (the law) requires an opt-in.
Unfortunately, GDPR is an insane web of laws and regulations that any non-lawyer has absolutely no hope of understanding.
You call. It’s Friday. Rush hour. His hands are full, so you’re on speaker. Pizza guy is Italian. You’re not. Neither of you know the NATO alphabet.

I’d take the app any time.
Exactly. Why would you serve your own copy of the fonts if a previous request to that cdn may have cached them in your browser already? Opt-In goes against the architecture of websites. What's next? A popup for each third party request? It is not feasible and just another stumbling block - like Impressum for private persons and third party cookie consent to host websites in Germany. It makes more sense to fix the issue at the fundamental browser level by the vendor (natively, without the need for plugins) and explain the dangers to the users. Educated users block requests anyway for example.

I think hosting it by yourself is the solution here, but it's getting difficult to keep up with all the rules, especially when the fundamental design of the web moves in the opposite direction.
For use off-site. Hiring a programmer off-site to maintain it isn't "use". Giving it to someone to use in
a productive way in furtherance of your business or in exchange for money would be "use".
It's almost as if different people have different opinions and outlooks on complex matters!
Prices gap due to illiquidity and markets being closed, in an AMM if a price should gap people can still get it there, but I can also see the reality of the AMM preventing people from just switching to the correct prices in the bids and asks without making unnecessary fills along the way. I just think that kind of coordination is so uncommon in traditional markets that its not worth the distinction.
You're not sending your nginx logs to Google, a well known advertiser, do you?

In this case you can store IP addresses if you have a legitimate reason (e.g. you can show you need it for troubleshooting etc), as long as it's reasonable and doesn't infringe on the rights of the user, and you have documented it along with the retention strategy.
This is all true, but people voted for it with their wallets. At all levels, people understood that when their electronics break they would be paying for it again, making the ownership of the product more like renting with recurring payments. People understood the term "planned obsolescence". But they saw the cheap shinny blinky lights and decided they wanted it. The consumer is far more guilty than the company that gave them what they wanted.
no. They just can't care about everything themselves individually all the time.

So penalising unwanted behaviour isn't about stupidity at all.
Point taken. But I am not hyping the specific technology here, I would be glad FTD ends up being the language, but I believe a FTD like like language is definitely needed. We need a programming language for human beings, that we can hope all humans can write. Unfortunately JS is not that language. You can do very little with just knowing JS, you have to learn a lot of other technologies.

FTD is my proposal for one such language. https://ftd.dev/philosophy/:

> If the vision is for every human to own their data, one must ask, data in what format? XML? JSON? YML? Markdown? FTD hopes to be that format.
This is so outdated. GDP figures seem to be from 2012. A lot has changed since then. E.g. USA GDP PPP is $63k in 2020 by World Bank, but this websites claims it is $53k.

I see similar data points, were figures are decade old. Some countries improved a lot in the last 10 years.
> It could be configured not to.

Not in practice. It requires configuration that is non-trivial for most users and might not be available for them in all cases (eg: using a computer in a library).

In fact, I can't think of a solution that doesn't require third-party software/hardware/product and some computer expertise (AdBlock? Pi-Hole? VPN? Little Snitch? Hosts File?).
Explorers and Architects
Well, I hope so for the people of India but the Indian PM doesn’t a lot less “authoritarian” than Xi, I think India will establish more relations with Russia and Turkey than UK (in the future), that are -more or less- on the same (non)democratic level and have common interest.
or too under-powered in relation to the powerful organizations that take advantage of them, or too overworked by all the tasks and details of their lives to deal adequately with all the things it might be beneficial for them to deal with, but are not strictly necessary for getting through the day.
Volunteer. You might prefer to find an area of volunteering that offers a favorable balance of the sexes.

Or take up some kind of sports. Kickball seems to be a thing for 20-somethings now, but there's softball, and there are running groups.
States have crazy amounts of resources and they are not worried about their return on investment the same way other actors are.

If a hacker wants to scam people out of their savings they have a limit on how much money they can potentially earn. I don’t know what the actual numbers are, but let’s say an attacker can hope to extract 100k USD from one in every 10k prospect. If those are the numbers then the attacker can’t waste more than 10 dollar on any individual targets on average or they would start loosing money. I suspect the real numbers are even worse.

On the other hand if you work for a state and you burn a few billion dollars to research some zero day vulnerabilities which you then use to delay the weapons development of your adversaries by a few months you get a medal. Or maybe you don’t but one thing is for sure the state won’t collapse just because of this.

What does it mean in practice. Imagine a scenairo where you left your smart phone at the side of your bed for the duration of a bathroom trip. You return and you look at your phone. Can you trust that the phone on the side of your table is the same you had earlier?

It is absolutely 100% sure that the would-be-savings-scammer doesn’t have the resources to camp outside of your bedroom, monitor your comings and goings, sneak in when you leave the room, swap your phone and leave unnoticed. An operation like that costs serious money.

But if a state put in their collective head that their national interest is best served by your phone being swapped then the above can and will happen. They have the resources to do it and they don’t care about “ROI” in a traditional sense.

Now will a state actor sneak in to your bedroom? Probably not, because there are lower hanging fruits to achieve the same cheaper. For example by paying a batalion of nerds to find zero day exploits in complicated software.

The thing about states is that they are higly uneven. One can have slow and inneficient burocracy and crumbling infrastructure and failing healthcare yet still pursue some other goal with dodged persistance. And the truth is if someone decides to spend a billion dollar to hurt you you will be hurt, if they decide to spend a billion dollar to know your secrets your secrets will be known. States can be both bumbling idiots and godlike entities at the same time, maybe even in the same building.
The ruling says the website owner illegally shared the user’s IP address with Google. AFAIK, this is an incorrect interpret of events. The website merely tells the user’s browser that the content is intended to be displayed using a font that, if not installed on the user’s computer, can be downloaded from Google’s server. It is the the user’s browser that initiates a request to Google’s server. A request by the website itself to Google sharing the user’s IP address never actually occurs.
I think people would volunteer. Main reason not many volunteer is because they are busy with work. In a workfree society people would have much more free time to spend than they have now.
While I haven't lived in Portland, when I visited in 2019 I was like, this is a larger Santa Cruz. And I have lived in Santa Cruz so I can make some extrapolations:

* Stifling lack of local prospects; in SC, the majority of jobs were "over the hill" (SJ/SV) making it a bedroom community. Portland has a little more going on for itself but it doesn't have the strong jobs pull of a city like Austin, which Portland has often been compared to in the past.

* Isolated city. If you leave Portland you reach rural farmland relatively quickly compared to larger US metros, which have a cluster of coties SC as noted has some distance to the city, but also proximity to farms east around Watsonville. SC being a college town with a major university contributes to the difference, bringing in a wider young demographic. In both cases this contrast and close proximity enables a dynamic of "city vs country", which exploded in Portland in 2020's protests with aggressive displays and a fatal shooting.

* Ethno-nationalist legacy: Portland was designed to be whites-first and only reversed on that relatively recently. California harbors some of these sentiments, but mostly not as strongly. It adds a layer to the culture that, while not always blatancy obvious, makes it feel more insular.
Eth is the native token, WETH is an ERC20 token (token creted by a contract implementing the ERC20 interface). Many applications don't want to handle these separately, so they only accept ERC20 tokens. WETH is Eth wrapped in a token contract (can be warpped or unwrapped 1:1). Think of it as similar to Java's int vs Integer.
Lol. Well just going the UK doesn't follow suit with this madness
but... what is this stuff used for? the OP just gave you a ton of use cases for the Internet in 1995 which you ignored?

> businesses were seeing the benefits for product information, sales, support; people were using the web to research and book travel plans; email and chat were becoming quite popular (people had been meeting and getting married online since the BBS era); etc

For "crypto", it's... flipping coins to whoever pays more, doing illegal things and... apparently moving money to Argentina. Anything else?
And they decided to pay? FFS… well, that was certainly educational.

It has a very chilling effect on innovation no doubt.
I guess there aren’t any commercial incentives to do that.

But that doesn’t change that typography is valuable.
Ah, that sounds like lovely use case for average users with higher than 0 chance of blackouts... Right timing bad design(sensible one) and it is all gone...

So in the end regular user probably ends up doing everything on centralized wallets or exchanges and then those are likely to do some off-chain book keeping as that is cheaper... Brining us back to banking...
This as well would "leak" the IP address to Cloudflare, wouldn't it?
Ever live in more than one country?

I was clearly referring to the US.
the car example again.

There is a legal framework that has certain requirements. Enforced by a court here. These laws are from elected representatives of the people.

So they are binding. Like it or not.
Then I suggest you implement it and prove the author wrong by providing a benchmark where your implementation outperform the algorithm provided in the article.
IP information will still be sent to Google, and a notice would have to put up before.

Easiest way to deal with this is to self-host the videos. Most people over-estimate how popular their websites are, and for the ones who don't, getting a dedicated instance with unmetered bandwidth is trivial to get and setup for video-hosting.
Yeah anti vaxxers got by covid.
Absolutely right, if I had any students to teach I'd start with bogosort. It's arguably the best one.
I personally find the two questions awfully related: i'm buying hardware that performs operations without my knowledge/consent and answers to someone else's commands. Now one may genuinely believe there are valid usecases for this (i don't), but it's not exactly "whataboutism" as i'm definitely not trying to refute the original argument that pre-bundled malware is bad.

Although i personally consider hardware/firmware-level malware more troubling than OS-level malware which you can just wipe away by setting up a fresh system (which i recommend anyone to do when they receive a new machine, for related reasons).
Curious how useful is an IP address with a simple HTTP get request?

As long as a sane Referer-Policy is set, the Referer won't be sent. Sure there's a lot more to browser fingerprinting but with just an HTTP request, all the data that would be known from it is the language and the user agent. Both of which are not unique data points and shared by thousands of other users. No cookies either in this case of Google Fonts.
Easiest if you use the URL: https://www.ifitweremyhome.com/compare/US/CA

The first country is your home country. The second is the country you're comparing to.
Absolutely - put your order in and pass it on to the next person to add their stuff. So much easier!

Ordering on the phone might be faster for some people and bad apps, but I find ordering on the app more chill. I can be sure what I ordered, see the whole menu with the latest pricing, and get delivery updates without ringing back.

(As a sidenote - i'm not sure it's actually faster though, particularly as most people seem to be talking about repeat customers. I usually order from Dodo's Pizza (dodopizza.co.uk) and just opened the app and attempted to order a pepperoni pizza for pickup, and the whole interaction took c10 seconds. I logged out and tried and it took 15 seconds instead as they have sign in with Apple).
> one could argue that it is less eco friendly as well given how much space is going to be used repeating the same file on a multitude of server

Browsers don't share cache between sites: https://www.stefanjudis.com/notes/say-goodbye-to-resource-ca...
This:

> In a new recent paper, academics at Korea University in Seoul have outlined how solid-state drives (SSDs) can be cracked open with malware that goes beyond the reach of traditional antivirus scanning and user access.

is not the same as:

> Hackers are now dropping malware into SSD drives through firmware updates

The title doesn't describe the content at all.
Training load responses modelling and model generalisation in elite sports
Reductio ad absurdum: if serving fonts from Google is “unnecessary” and leaks information, so would be using any CDN service to deliver any content.
Or linking anything, for that matter
and: many are forced to use the www if they like it or not. E.g. for tax or to get access to public services.

So there's no excuse for hostility but it has to be legal and layperson-friendly.
> they can say that this is to preserve the context in case that the user subsequently deleted the post).

And this is how it should be done, otherwise you read the article a few years latter and see a strange mess with empty holes.
Using this logic I can send full fingerprinting data as long as I do it from the front-end?

I mean courts are not that dumb, it's still the website owner which decides what is done.
> (I assume they mean self-hosting)

Or proxying. Or proxying with caching, which is kind of part way between self-hosting and proxying. :)
This is exactly what stops me from hosting websites. I simply have given up trying to keep up with the rules. It is a massive burden if you are not a corporation trying to extract information and just want to host a simple blog from a german server. At some point, private persons and maybe small businesses won't be able to keep up and the web becomes even more centralized.
The interesting thing that a lot of services don't consider is that blocking these cookie banners is perfectly allowed and does not implicitly allow services to collect personal data.

Twitter is one of those service that just states "we collect data, deal with it when using this website" (which is already not legal) but the thing is, I don't even see this pop-up because uBlock is filtering it out. If Twitter now collects my personal data, it is not only breaking the opt-in component of GDPR but also doesn't even notify me about data collection.

Quite a lot of services have JS-only popups which I also don't see. Do they collect data? I think so. Do they know they are doing it illegally? I would bet quite a bit of money that they never thought about somebody getting past their cookie banner without consenting, so probably no.
hmm, a lot of these stats are worded in a very obtuse way.

Calculating percentage difference of two percentages overstates their differences in regards to the underlying statistic.

For example... 'be 12% more likely to be unemployed' is used to state the difference between an unemployment rate of 5.6% and 5%

Unfortunately that removes a lot of usefulness from the site.