skysight-inc/HackerNews huggingface dataset:
IANAL, but it sounds to me like a very important part of the story is that Google was not listed to end user as entity that would treat their data. Another way to read this could be: failure to inform users that their IP addresses were sent to Google resulted in a 100 € fine.
How to (Try to) Quit (Almost) Anything
Wait, what prevents the next court to say that the browser vendor is responsible for the leak ? Per default the browser is not asking the user if it's okay to download fonts from Google (or any resources from any another resources provider) after all.
There's an "easy" fix for the majority of us who are hopeless junkies.

Stop ingesting caffeine.
It is right there where he sent it. It really did not disappear. It will just sit there forever, very well documented, and very well out of reach for all of us, for the end of all times.
everything that I use computers for has been ultimately to produce aesthetics to my exacting standards a example of which is the 8 years taken from first sketch of my redesign for the company logo to first example of use. But I refuse to allow applications like Figma on my company computing assets. You probably wouldn't be hired if you used such things as part of your work flow anyway. Good design begins with pencil and paper and writing down the words describing what you are trying to accomplish. Art has its own internal function and architectural laws of physics and materials sciences. Great art is like cathedrals (of very well thought out bazaars) the culmination of not only one or more crucial leaders of the design, but the ecosystem of cultural heritage and interpretation and conversation and argument that you are communicating with the viewer. When your typical Figma dogmatic sees their font rendering to their knee jerk repulsion that's really being affronted to have their South Park Authority challenged, all I am seeing is the subtleties and nuances of a critic composition potentially becoming unstable rather in the manner a engineer sees weakening structures and worries about how long and effectively can the edifice perform it's intended task.
Another fellow cyclist here. Aluminium in fact has a very similar failure mode. It also fails catastrophically without warning. This was also brought against aluminium frames when they first started coming up to replace steel.

The bigger issue with carbon (in the context of cycling) is that there can be significant fabrication defects (voids) that are impossible to detect without special equipment. On aluminium frames you really only have to look and the welds to see if there are defects.
Together with the fact that most (even premium brands like trek, canyon...) manufacture ultra cheap in China with very little QC (due to the race to the bottom regarding costs) , means you could get a significantly weakened frame straight from the dealer.
But this costs us much much more than 500k in sum
India Seeks to Escape an Asian Future Led by China
I used crypto in the past, starting a decade ago, but absolutely cannot wrap my head around these new-age concepts such as smart contracts, dozen ETH flavors and whatnot. They seem blackboxes to me no matter how much I read about them. The fact you have to use a withdrawal function instead of the reverse operation used for the initial conversion seems a pretty severe design overlook since they're burned forever this way.
I really can't think of an expression other then "lol" to sum up my response here for just how incredibly stupid this is, as a "platform of the future".

A design which actively discourages robust programming and error handling in financial software. Wow.
It abstracts away underlying hardware, leaving you with a convenient set of abstractions for deploying containerized networked services. Sort of an OS for a cluster of distributed machines. Unfortunately this involves lots of YAML.
How’d I do?
Can you someone translate? Does this mean that hot linking any static media or asset from a third party is against the law unless explicit approval from the user is first received?
The browser can be set to dissallow third party resources
Is the backend opensource? If not, why?

I could totally see this as an alternative to say, Confluence
Check out Veijo Rönkkönen. A modern sculptor.

https://www.atlasobscura.com/places/veijo-roenkkoenen-sculpt...
Are you implying there are backdoors in iOS and Android, thanks to US intelligence?
Survivor bias.

You don't see all the perfectly designed codebases that never went anywhere.

We only talk about legacy code because it's the one that pays the bills.
I'm starting book 3 right now. Due to being written over 200 years ago his work might be out of date, but is there anything he got wrong? I could see scholars having issues with some of his opinions, but as far as I am aware, his factual history stands.
Most people are not joining his new project. Source: I was part of the core team.
I had incredible succees with a method I accidentally implemented.

There was a game that I played way too much, hours every day for months and months. It was a multiplayer FPS so the game wasn't really giving me anything new either, so it felt like a complete waste of time that I just couldn't shake from my habits.

I decided that I would meditate whenever I wanted to play the game. I never played it since. Oddly enough, I also didn't meditate for this reason even once.
Yep, I actually pulled out the Supabase realtime code into an individual library so that you can listen to Postgres changes right in Elixir:

https://github.com/cpursley/walex
can the code be corrected though

it sounds to me like the fix would be create a new map that maps account ID -> tokens, where account ID = the "sender" account where the tokens came from, and do the migration to move these 'orphaned' tokens into the right buckets.

admittedly I guess that would break everything/trust if someone can just rewrite the code to say who has what tokens!
as a short man myself I agree that simply changing location or target audience can get you a partner.

However it's not about how you see yourself and how confident you are so much, people will subconsciously judge you anyway and have more affinity to taller people than you. Nothing you can do about that. Just accept some people will like you and most won't.
There is such a thing as a "proxy" contract. The contract can delegate to another "delegate" contract that actually performs the functions you want. The proxy contract also has a function that allows the owner to change the address of the delegate contract. If you tell you users to interact with the proxy contract then they will always interact with the latest version of the delegate contract.

Some ERC20 tokens implement this but I believe many do not.

https://docs.openzeppelin.com/contracts/3.x/api/proxy
No, I don't think so. If the company has the right to edit the code, then it can contract that out. If someone paid the company to clone or use the code, that would be distribution.
> A nation does this, refuses to reign in the perpetrators, and really believes itself to be the good guy?

A government. Large parts of the left and the right are no fans of the CIA. But it's one of those things voters have lost all control over, just like no matter who they vote for, US meddling in the middle east will continue.

Edit: In fact, even the (elected) government has lost control of the CIA: https://www.theguardian.com/world/2014/jul/31/cia-admits-spy...
Does DMC++ run on Linux? Or just Windows?
> The services (here: web fonts) could be supplied another way, so exposing the user's IP to google is not strictly necessary, from a technical POV.

Because an IP address needed to receive a download. This kind of decision means that any hot linking of static media assets is now in hot waters.

A sensible judge would say IP address is not PII but a prerequisite to use Internet in the first place. Like a license plate on car e.g. other broken analogue of tracking. Like a power socket. However the definition of PII in Europe is overly capturing (saying this as an European.)
Honestly, it's not that big a leap to reach this interpretation.

1) Your IP address is considered personal data, as it can be used to identify you. In general, everyone can see and agree with this.

2) In the absence of additional protections and/or contract terms[1], the transfer of personal data out of the EU is an offense under the GDPR (well, technically it's not out of EU, but transfer to a country without GDPR equivalence).

So - embedding code / data from a 3rd party into your website results in a transfer of personal data.

[1] The idea of additional protections/contract terms is even questionable, but that's a whole other thing...
Linus Tech Tips – unmonitored, unscrubbed, too wide zpools die in mess
I was quite interested in the cryptocurrency ecosystem around 2017/2018, precisely because of the talks around smart contracts. I see these smart contracts to be just (in my opinion), confusing, error prone addressable state machines. Writing smart contracts (at least for Ethereum) has so many gotchas, that it's almost equivalent to rolling your own cryptography.

I'm not sure if issues around smart contracts are just the tooling, or developers are just rushing to push something out there; but the UX and DX is bad. I was hoping that Cardano would be a blockchain/cryptocurrency pairing that would make me interested again in this space, but their Plutus smart contracts[1] are something I wouldn't touch with a 10-foot pole. On the upside, at least testing Plutus smart contracts with QuickCheck seems to have brought improvements to QuickCheck itself[2]

[1] https://playground.plutus.iohkdev.io/

[2] https://www.youtube.com/watch?v=V9_14jjJiuQ a fun little watch for those that like Haskell
Better than all the crypto nonsense.
yes. That's a fact. A 3rd party is a 3rd party and a website leaks it's visitors to it.

Just don't do it but serve your stuff from your domain.
Keyword: per default. It's an opt-out, GDPR requires an opt-in.
When I saw the phrase "code is law" I immediately thought of all the code I've written in my life, and I'm not even the very worst coder out there...
The issue is the question here which is probably invalid.

Cryptocurrency is designed for general use. Kubernetes is designed to abstract specific problems away for specialists.
It's not about looks, it's about social skills. Can someone be friendly, make friends, make you feel good. Or are they awkward, unpleasant and weird.
I really wish browsers like Firefox/Chromium could output WARC.
This is regulated in the GDPR, article 28. You may have an external "processor" of your data (which is almost always the case, because few people have full responsibility over their hosting setup), but this processor is bound to abide the rules of the GDPR, and you need some sort of contract with the processor.

Since you have no control over what Google does with the data of visitors when you embed Google Fonts, it is not compatible with the GDPR (just like Google Analytics).

https://de.wikipedia.org/wiki/Datenverarbeitung_im_Auftrag
https://www.gdpr.org/regulation/article-28.html

This is a good decision by the court. Sure, web developers may not like it, but it may force them to improve on how they work.
Hm. Interesting.

I need some coffee to think about this properly.
It reminds me of the famous Steve Jobs quote, "Good artists borrow, great artists steal."

Apparently Steve stole that quote from Pablo Picasso, who borrowed it from Igor Stravinsky, who lifted it from T.S. Eliot.

https://www.uvu.edu/arts/applause/posts/stealing.html
Running a website in Germany seems like a god damned nightmare:

https://allaboutberlin.com/guides/abmahnung-creative-commons
This seems logical and reasonable to me, though it seems others are surprised/appalled.

What would a technical solution that respects privacy look like? The website making the call to Google in the background (minus user details) and forwarding the response onward? Why isn't it done that way, it feels like it's the more obvious solution if you're not trying to track users.

Early internet was very wary of 'hotlinking' because it costs money to serve things, people used to try to offload hosting costs to others. Now it seems people take that on willing with the expectation to make enough money to cover it.

Is it just scale, or is it the user info that makes these services viable?

Early Google used to use the argument that them making the web better was profitable, because more people using the web meant more money for them. Does that still apply? Would they still provide Google Fonts if they were legally bound to not use any user information they recieved?
Nitrux Linux 2.0.0
Because then they would say "ok, here's crypto".
Requiring something weatherproof which can be displayed outside and not degrade quickly when exposed to the elements will dramatically increase the cost. Can you make your artistic point with something which can only be displayed inside?
Hopefully we won't see popups like "This site will forward your IP address to Google is that OK?", because I'm already beyond bored with "This site uses cookies do you accept?".
I think it has never been easier to enter electronics (especially embedded stuff) than it is now. You can get a starter set including RPI/Arduino/Breakboard/Components for less than $100. Also, with a breadboard no soldering iron is needed.

Try chemistry, mining, process engineering or even mechanical engineering in comparison?
IIRC signing by multiple CAs isn't possible, so you would have to extend TLS or X.509 or both.
Thank you, Captain!
> But no one is forcing them to buy those seeds

Oh yes, lobbying, price gouging and all other means to force someone don't exist.

Almost Hobson's choice.
The court explicitly noted that the IP was exfilled to the United States where adequate data protection measures do not exist and that Google in particular is well known for invasive data collection

The court also noted that there was an alternative in the form of embedding the fonts directly into the website.

I'm not a lawyer, but the reasoning doesn't sound like CDNs are a problem in General, but that one should be very careful before connecting to US servers (which was always one of the goals of the GDPR)
(IANAL)

They say that GDPR Art. 6 Par. 1, (f) (see [1]) is not applicable, so using a webfont from google is not "necessary for the purposes of the legitimate interests pursued by the controller". They explicitly say this is because you could host the font yourself.

In my interpretation, another way could be to use Art. 6 Par. 1 (a), namely ask the user for permission before loading a Google font.

[1] https://gdpr-info.eu/art-6-gdpr/
Typically in the US, a margherita pizza is a very specific combo of cheese, tomatoes, and basil on top. Very different from just a plain cheese pizza.
Why "what the hell"? This is exactly what happened, and a logical consequence the moment IP addresses are classified as private data. Which it is in a system where it can be used to find the civil identity of the user, which is the case in Germany via Vorratsdatenspeicherung and the rampant misuse of the legal system.

Note how the decision contains the question of whether leaking the IP was necessary. They noted it is not necessary to serve the fonts via Google, it can happen without leaking the IP (I assume they mean self-hosting):

> Google Fonts kann durch die Beklagte auch genutzt werden, ohne dass beim Aufruf der Webseite eine Verbindung zu einem Google-Server hergestellt wird und eine Übertragung der IP-Adresse der Webseitennutzer an Google stattfindet.

translated:

> Google fonts can be used by the defendant in a different way, so that a connection to the website does not make a connection to the Google server, thus without transmitting the IP address of the website visitor to Google.

Which is good news! It is a totally consistent decision with the current privacy rules and best practices: Do not save or leak private data if not necessary, always minimize data exposure as much as possible. The as much as possible part is very important - if there is no way to embed Youtube videos without leaking the address, then that's still possible to do. Sounds fair to me.
In this case it's absolutely unrecoverable.
You have to waste energy to create ETH because ‘inflation baaad‘ but destroying ETH is possible by accident. Crypto bros should really take some macroeconomics courses.
You just need to have a bit of common sense about what's good for your users and what's not good for them.

That copyright example by the way, that applies everywhere.
Ha, my reply too!
Sure, but celebrities and grifters aren't pushing the general public to adopt Kubernetes or bet their life savings on their understanding of it.
1) Your IP address is considered personal data, as it can be used to identify you. In general, everyone can see and agree with this.

Only if you're the sole user of that IP, which is e.g. not the case in a family.
VCs optimize for high risk/high growth startups. However for a person investing his time it may be worth to keep more control of the business and greater share of the profits in the future.
Would you rather own 1% of 100M business and thus be a minority shareholder, or 50% of 2M business and be in control. Financially you may fare better in the smaller business. And after a certain amount of money in the bank, health, time and controlling your day to day life gets more important than "selling to Google" or "managing the board" (an euphemism for my new boss is the board).
Then why not share all typography with everyone under a license, that allows every OS maker to include all the fonts they want plus allowing users to choose what else to install and then only use system fonts? That way we can have it all, fast websites, without additional secret server side tracking, and the fonts of the system being used and the artist getting their message communicated. No need for any web font.
The article asserts that in their opinion, it's a valid legal theory that GPL constitutes a contract. One hopes the courts will put a limit to what that "contract" entitles the users of GPL software to sue coders for.
Smart contracts are not something people who just want to send and receive money are meant to use.
Lessons learned from training 104B model
From the FSF's GPL FAQ:

However, when the organization transfers copies to other organizations or individuals, that is distribution. In particular, providing copies to contractors for use off-site is distribution.

https://www.gnu.org/licenses/gpl-faq.html#InternalDistributi...
> What would a technical solution that respects privacy look like?

In case of fonts: hosting it on your domain.
Yeah, if you do that and the other party runs off with the money you’re screwed.

You can certainly pursue the matter in civil courts, but law enforcement does not like to touch this kind of stuff at all. If the recipient transfers the money overseas, you will most likely never be able to recover it.
I'm sorry. Let me explain.

My perspective is a european one. Germany turned off three of its reactors while at the same time tons of people are screaming out of their lungs that it's a really bad idea doing so, because of technical reasons related to the safety of the european power grid.

From our, the people's perspective, we should only care about making sure that the power keeps running, while it does so without harming the environment more than really necessary.

I don't care about governments building new reactors when they shut down the old ones. New ones aren't going to help us, when the grid starts to fail, because they're not even going to be built yet.

Talking about new reactors is just distracting from the fact that powergrids need to be in order, which apparently they aren't. The reason, why talking about new reactors is a waste of time, is because more reactors help NOTHING when the powergrid fails, which is a far more pressing matter than literally anything else related to power and energy.

The reason, why my words don't really relate to the article, is because it's bullshit. Complete, utter bullshit.
The UI seems backwards? I'm in a country and want to see what a list of other countries are like compared to my current country
It only counts as distribution if you give it to them and they start using the software as well.

If you send them the software, they reverse engineer it and fix bugs that's not distribution.

If you send it to them, they fix bugs and then start using it themselves that is distribution.
They assert that it has been courts opinions too.
A main selling point of using CDNs for commonly used assets (like Google fonts) is that lots of websites use the same URL, so the browser is likely to have the asset in cache already from a previous use on another site. Makes the site faster and uses less bandwidth.

I don't think there is a solution right now. Maybe browsers can stop sending these headers to well known CDN domains by default.
Except for the very last part because I don't know what YAML is, but the rest was understandable.

Which I think drives the point of all this crypto talk in acronyms contributes to it being incomprehensible.
About what exactly? I don't know about Japan but post lunch siesta is very much a thing in China. Even employees working 996 schedules take a nap.
This is a good judgment and less onerous than people are worried about here: there's not going to be a need for a raft of pop-ups.

GDPR is clear about processing personal data. If you're a website, you're a data controller, and you are responsible for the security/confidentiality/etc. of that data. If you want to use external services that's cool, but you need a formal data processor agreement in place that maintains your control of the data, and you need to list that in your privacy policy.

So, can you embed fonts? Yes, it's not a problem: either they should have directly embedded self-hosted stuff and not used the supplier, or ensured a proper data processor agreement was in place. Post-Schrems II, the latter becomes more difficult if the supplier you're contracting with cannot promise the level of control over privacy/etc. that you need as a data controller, however.

The alternative position is to say that it's OK to embed resources that basically allow large corporates like Google to track your activity across the web without an agreement in place. That's obviously not OK under GDPR.
That specific scam does not have to work anymore though. Abmahnungen in Germany are the most stupid and lawyer serving system in the world, but the CC image scam got closed by judges deciding no monetary harm was done. Possible that these lawyers are still trying, but note that the article started 2018.
WETH is WTF ETF.
Whereas in the US you don't need to worry about frivolous lawsuits at all...?
It's a device that connects to your local telco network. Telcos have evolved from calls to data. I'd say it still fits. It's a device that connects to your telco to serve internet access these days.
Seems pretty simple to me. I visit not-google.com, then don't load anything from elsewhere without being asked first. It's not too dissimilar to app-level permissions.
There's a page explaining it with that exact title: https://weth.io/

Can't say I understand it now after reading it though.
Sure, I grew up on those games and have thousands of hours in the Total War series. You can learn some general principles from games because it illustrates them pretty well. But they are also fundamentally distant from reality because they cannot simulate anything like the real dynamics and physical characteristics of historic and current-day combat. Even micro things like how human beings move or communicate tends to be profoundly different in real life despite the visual fidelity games are sometimes capable of.
> Designer's choice of fonts are frequently lower in legibility and/or do not have good hinting (not at the same level of most system fonts). On non-retina displays the qualitative difference is sometimes staggering.

This. Plus sometimes, for some reason, they choose hair-thin versions of fonts that are a pain to read even on (non mac) retina displays.