skysight-inc/HackerNews huggingface dataset:
It might be relatively easy to read, but for SMBs it's hard to actually implement in real life, because GDPR and the EU's stance so far often doesn't take economic reality into account. For small businesses, GDPR in many regards created a legal limbo while large corporations scoff at that regulation and have their legal departments deal with it however they see fit.

For instance, there's this tiny, gnarly aspect of where you are allowed to store your customer data.

Hosting data on servers located in the EU isn't required by GDPR in and of itself, as long as you have a valid data processing agreement with the provider stating how and according to which provisions customer data is protected on their machines.

However, according to a 2020 European Court of Justice ruling you're not allowed to transfer any personally identifiable information to companies that are in any way affiliated with a US-based entity (e.g., by virtue of having a US-based parent company) anymore. Just being physically located in the EU isn't sufficient according to this ruling.

The reason for this is that with FISA US law enforcement can force US-based companies to hand over any data, even if that data is stored with an international subsidiary under a completely different jurisdiction.

This basically invalidates all of the provisions and legal frameworks for interacting with non-EU entities that used to be acceptable under GDPR before (e.g., Privacy Shield).

However, not interacting with any US-based or US-related entities at all anymore would be tantamount to ceasing almost all economic activity. So, until (or more pessimistically: unless) the US and the EU come to terms on a new agreement regarding privacy rules, there probably isn't anything a business can do on its own to completely address this issue. At this point, merely hosting data on servers physically located in the EU perhaps amounts to little more than window dressing.

As soon as a business has dealings with a US-based company or an EU-based company owned by a US-based company that potentially might have access to user data that business technically is in violation of GDPR.
As of now, as a business you essentially have three alternatives:

1. Run the entire infrastructure you need yourself or have it run by EU-based companies guaranteed to have no relations with US-based entities whatsoever (Good luck with finding those ...). This, for example, includes payment systems and banking infrastructure, because guess where many EU-based banks host their infrastructure? That's right, AWS.

2. Go out of business.

3. Ignore this aspect of GDPR for now, document everything, continue to do your own due diligence, and hope for the best.
> There's a stark difference between the "haha, what the fuck, US" sentiment I used to sense and the "what the fuck, US" we're getting now.

Agreed, and this is a nice way of putting it. There's a sense that shit is really hitting the fan this time.
This at least reflects my feelings about visiting anytime soon.

I mean if I was just put on a flight back (for a tweet they found on my phone or such), that'd be kind of bearable. At least one visitor from the UK got locked up in a facility for a week.
I never realised the Dire Wolf was a real historical animal, not just a fantasy one like the Owlbear.
And what exactly is making it complicated?

I've also helped a bunch of organization become compliant, some were easier than others. The ones that were harder were the ones that generally didn't have good processes with data in the first place, where everything was scattered all over the place and everyone had access to everything. It makes sense to me that it's harder to be compliant if you were borderline malicious with how you treated personal data before GDPR.
I would guess that this is a similar situation to mass shootings at school - quantitatively low risk, qualitatively both repeating and horrifying enough that most Europeans would choose drastic measures to minimise the risk of such a thing rather than accept it as a cost of doing business.
That backs up exactly what I said? The president has declared a national emergency and started to use emergency powers. Legislation is supposed to review those actions now.

And it's not just tariffs, he's abusing this for a dearth of other topics. Want to cut down national forests? Nation lumber emergency. Want to mass deport people to an El Salvador prison without due process? National emergency.
They should consider that it's playing against fines of up to 20m EUR or 4% turnover (not income)
Makes sense. Anyone with even half a brain wouldn't take the risk of getting caught up in this ICE nonsense.
Sometimes you just remember the arricle and the right keywords can get it easily from a search engine.
And in the world of bureaucracy, "simplification" doesn't mean what you'd think it should mean.

"Simplification" consists in adding exceptions, which are in effect additional rules and special cases.

Simplification actually means everything gets more complex.
Consent for non-essential cookies, like analytics, is required. You must also provide a clear link to your cookie usage policy, and a simple way to opt-out. This notification is not necessary if you only use functional cookies; for example, using a cookie to only show an on-boarding tutorial once is acceptable.

Organizations, and typically lawyers, skew conservative and lazy. A little cookie-consent cottage industry popped up to handle GDPR, so instead of worrying about the regulations most companies pay the small monthly service charge for a third party to handle consent. The consent companies built the most compatible solution, a banner, with the most conservative options as default to prevent any legal quandary.

Most public facing sites do have analytics (usually LOTS of analytics) and ads, so the banner is mandatory for them. If you understand the regulations, and don't violate them, then consent is not necessary.
Just put it on the Privacy Policy page on your website, as many websites do.
One of the guidelines from Project 2025 was to do this
I completely understand why. It is difficult to comprehend how much damage is being doen to America's reputation and soft power. I feel it necessary to give the following advice:

1. Erase your phone before entering the US. Restore it from backup after arrival. CBP has the right to inspect your phone. While you may be able to refuse, likely this means you'll be denied entry and there's nothing you can do about that unless you're lawful permanent resident ("LPR");

2. Don't post on social media under your real name about topics that are likely to get you into trouble. The big ones are anything pro-Palestine or anything critical of Trump;

3. If you are an LPR, do not sign anything they want you to sign if you're detained. What they're trying to do is to get you to voluntarily surrender your LPR status [1]. You have the right to be paroled into the US. Only an immigration judge can forcibly revoke your status;

4. There's stricter enforcement of rules that always existed, particularly abandonment of residency. A green card isn't (and was never intended as) a way to visit the US freely a few weeks a year while living somewhere else;

5. If you are a visa holder you have fewer rights. If you live in the US on a valid visa, I would be extremely hesitant to travel outside the US at all; and

6. Notify friends and family of your travel plans. Additionally, if your country supports it, register your travel with your embassy. The US version of this is STEP [2]. You want someone to make enquiries on your behalf if you are detained and are unable to make outside communications. It's wild that this is where we are.

[1]: https://www.uscis.gov/i-407

[2]: https://travel.state.gov/content/travel/en/international-tra...
There are PDP-10 emulators with well-maintained copies of the different operating systems for them, so someone could check that the typed up source can be assembled.
A couple years ago my girlfriend and I spent about 2 months travelling through europe. We visited about 10 countries on our trip. A lot of our travel between countries was by bus. After a few bus trips we started noticing something strange - the busses often pulled over for rest stops just after we'd changed countries. Everyone would all get out of the bus to stretch our legs, and some police would miraculously appear and decide they wanted to talk to some of the people who were on our bus.

Now, officially the shengen zone means there's no need to show your documents between countries. But countries still don't want certain people coming in. And they don't want drugs smuggled in either.

It was really interesting who they decided to pull aside for a chat. It was almost always men who were travelling alone. Almost always men who were in the 25-45 age range. And I wouldn't be surprised if there was some racial profiling going on as well. The police never questioned me - probably because I was with my girlfriend the whole time. If she wasn't there, I bet I would have been pulled aside every time too.

Anyway, I believe your experience in Europe. But if you were a man travelling alone, its possible it was partially or fully due to that. For about a decade, every time I went through security at an airport I was always "randomly selected" to have my bag swabbed for chemicals. It never happens any more, and I'm as white as they come. I assume it was a gender + age + travelling alone thing - but its still a mystery to me.
Its like Tesla's FSD killing people. The threshold for acceptance of fuckups is very small, especially when you don't do anything wrong and there is a lot of needless humiliation. Why risk it? There are actually nice welcoming places all over the globe.
The cookie banners don't make companies less "careless"

They just introduce a needless bit of friction in the UX.

If the EU wanted to prevent digital identity triangulation or cross-domain advertising data gathering, it should have banned it outright. Rather than getting all users to click a stupid banner every time they visit a website.
Thanks for this comment, here is something fast I pulled around:

Distributed Testing: BuzzBench runs agents directly in your environments, while Gatling/k6 typically run from a single location

Coding Required: BuzzBench uses UI configuration, while Gatling needs Scala and k6 needs JavaScript

Dashboard: BuzzBench includes a built-in dashboard, Gatling/k6 require separate setups

Environments: BuzzBench tests multiple environments simultaneously, harder to coordinate with Gatling/k6

Setup: BuzzBench has a simpler install with lightweight agents vs. more complex configuration for others

Learning Curve: BuzzBench is designed for quick adoption, Gatling/k6 have steeper learning curves
yeah locking up for 2 weeks just doesn't make any economic sense, it must cost the tax payer a fortune vs just deport them?
Please explain how can I convert compressed RAF to DNG with same size.
Personally I think it's just their social circles that reinforce this, not the boogeyman MBA stuff. Because at some level, yes, they can be intimidated by technical people and this is a defense to avoid the "why am I even employed" spiral.

It would be nice if they could meet us half-way on the technical stuff. They regularly merge architects and sysadmins into developer roles making us learn more stuff.
"Trump says he'd 'love' to send American citizens to El Salvador federal prison" - https://www.irishstar.com/news/us-news/donald-trump-hed-love...
Do not come here.

First, do it for your own safety. A wrong form or the wrong answer to a verbal question after 18 hours of travel could land you in weeks of brutal detention.

Second, do it to help the cause. We here in America need to suffer the consequences of our actions. We need to see conferences canceled. We need to see imports stopped. We need to see people refusing to bring their knowledge and expertise here.

It is going to be a long, dark four years for the globe. It's going to take all of us working from within and without to have any hope of dismantling this evil empire.
Why would Trump fire anyone? Voters have signaled that they no longer care how classified information is handled. Maybe they no longer know why classified information should be carefully guarded, or it's just not a priority anymore. We all remember the FBI's photos of top secret documents being stashed in the Mar a Lago bathroom and ballroom. Not only did Trump not face any consequences for that whatsoever, he actually gained votes compared to the last time he ran. Trump is behaving completely rationally here. He's not going to lose even 1% of his support base over this, so why would he take any action? It's pretty interesting that for all the decades of skepticism and distrust of the government I've heard coming from conservatives (2A to guard against tyranny, "government is the problem", etc), they're putting an awful lot of blind trust in this particular administration.
Interesting how does the performance compare to KV or Durable Objects?
Sure, you pop all that nonsense on the privacy policy page linked at the bottom of your page, down near that "terms of use" nonsense
Ah, gotcha. Apologies for not reading usernames, I thought you were the grandparent!
but I think it’s going to far to say most Americans don’t care about the impact elsewhere.

Indeed.

Recently in Palo Alto for a few months. Saw lots of people protesting Tesla dealerships, lots of interesting and creative anti-Trump and Elon signs.

Not one word of Canada, of Greenland. Trumps stated goal of destroying Canada's economy to force annexation, or to outright just take Greenland seem not protest worthy.

Most people I spoke to seemed barely conscious of the issue.

To be fair, other matters may be higher pri in their minds, so if other events were not happening in parallel, it may be different.

But when 65 billion dollar defence hardware purchases are being dropped (they are), when future military purchases are not going to happen, when police cars, municipal vehicles are not going to be from US companies any more, when natural resources are going to be sold to the EU and China instead (sadly), the US is going to feel this for a very long time.

Because these are choices for decades. And it's not only Canada making them.
If you're careful about how you store personal data in the first place, meaning you start a greenfield project today, being compliant with GDPR is a breeze. You make it sound like there is a ton of paperwork to fill out because of GDPR if you start a business today, which there isn't.
Interesting, I (being pencil ignorant) wonder how they compare to the Japanese ones: https://news.ycombinator.com/item?id=43243716
No. The reason it exists is businesses get guidance from legislators and existing case law on what prevents you from running a foul of GDPR and the cookie banner is what we ended up with. If those banners did nothing, companies wouldn't include them. They are there as the lowest effort legal defense.
Show HN: Lightweight open source "framework" for building hybrid iOS/macOS apps
I just released a lightweight open source framework for building hybrid iOS/macOS apps using web technologies with native integration. It's designed for devs who want to combine the flexibility of HTML/JS with native features—without relying on something heavy like Cordova or React Native.
> I mean, I don't know anything about circuitry, or how to build robots.

Every time I read this story I wonder what else could Erik had done in his circumstances that would have been any better than what he did. Is there something out there for the programmer who wants his computer to push a button but doesn't know anything about circuits?
Yeah funny how that works: https://149909199.v2.pressablecdn.com/wp-content/uploads/201...
Browsers should be the things handling cookies, not websites.
> Americans do not understand how much press there is outside the US about tourists from Ireland / Germany / Canada getting locked up in ICE jails for weeks on end.

We read about it, too. It just seems absolutely nobody close to power is willing to do anything to even tap the brakes.
This is definitely not the case.

https://eur-lex.europa.eu/eli/reg/2016/679/oj

You are required to OBTAIN CONSENT from people you want to process the personal data of. Their consent must be INFORMED by telling them who you are and what you intend to do with their data. Their consent must be FREELY GIVEN and can be WITHDRAWN at any time.

That's what's at stake; not the cookies/state themselves, but how you intend to process the data of individuals. As long as you are not profiling natural individuals, no matter how they leave traces, then you don't need to ask for their consent.

It's bad-faith people, who clearly want to process personal data, who make a huge fuss and tell you everyone needs a cookie banner. Mainly because they are raging that they can't data-mine and monetise every last byte of data they can get, without the consent of the individuals they're profiting from.
I'll just come out and say it, "crazy" is "interesting" only when the "crazy" is happening to other people.

If the "crazy" is gonna happen to you, yeah, that's an entirely different story.
>> a) do away with the worthless cookie banners requirement

My understanding is that if your site doesn't use cookies, you don't even need that. Don't use cookies, don't collect or share personal data, and GDPR is complied with. Apparently from TFA it sounds like even then you have a lot of proving it to the government, and that's a hassle.
True, and if the objective is to get some raw diamonds as fast as possible demonstrating mastery of the game, I'd expect a strategy like making a boat, finding a shipwreck and then a buried treasure chest. Takes just a few minutes usually.

Really though, if AI wants to impress me it needs to collect an assortment of materials and build a decent looking base. Play the way humans usually play.
I think 2 things can be true. Bluesky gives users more control to shape their feeds how they want. And many want Twitter with different politics.
> See that's the part I really struggle with. Cratering foreign aid has an obvious ideological component, but who hates hiking trails? Like I'm sure there are a few people who hate the outdoors and a handful of oligarchs who want to privatize everything, but where's the constituency for it?

They don't care about constituency. They could pass these cuts as part of a deal but choose not to specifically because it wouldn't be popular. They are trying to sell national parks to oligarchs.
> otherwise they'll face fines and eventually they'll chose to either be compliant, or exit the market.

Or declare war against the EU, which is the option they've gone for.
>There’s no reason to lock tourists up.

As has been a rising sentiment as of late: "The cruelty is the point"

You're right that it isn't efficient in any sense. But the kinds of people who go into and are chosen for "law enforcement" tend to be the very people that should never be given a weapon. It's just a large scale Stanford Experiment in that regard.
That’s gonna be a no from me dog.
So, since they didn't ban it outright, doesn't it make it clear that the goal wasn't to remove it fully? The goal was to let users be informed about it, so they can make their own choice, not to remove the choice at all.
A Different Kind of Anti-Trump Resistance Is Brewing
Smart Content Filters for a Safer, Smarter Reading Experience
I’d never heard of Schiele until yesterday when I was reading about an actor on a show I was watching. I’m not really an art buff but his work is quite interesting (if a bit disturbing at times).
Absolutely agree. If you follow it all the way, advertising and the insatiable demand for consumer attention is the root of so many of our social problems. 24 hour network news bubbles, social media addiction, pharmaceutical companies spending more on advertising than R&D, etc. It all comes down to companies having to abuse the end users because to leave advertising money on the table is to go out of business.
I still can't believe that no-one in the Post Office leadership has been prosecuted for perverting the course of justice or fraud. They "reclaimed" lots of money from the falsely accused postmasters, so I don't see why that isn't treated as fraud.
This is linked right in the article: https://www.axios.com/2025/03/23/allies-issue-usa-travel-gui...

In it you’ll find several direct links to the official warnings
People coming home for fear of retaliation? People coming home to help family who might get caught in some detention issue? People who were working for agencies like USAID no longer having a reason to be abroad?
Great for her. It sounds like she didn't have a lot, especially in 2013 when computers were easily available even in 3rd world countries.
Do you think the US is a monoculture?
there's never backstory given, we're just supposed to automatically feel bad and never get to have a real story about why that decision is made.

this is less of a defense of ICE than more of a push for transparency so we don't have to deal with low information appeals to emotion.
Measuring OpenAI embedding API latency (and why you should always cache it)
Hah, this is about the ~2010 Google ai contest “planet wars”. I participated in the 2011 iteration, ‘ants’, which was a fun but humbling experience. Anyone else try that? I recall the final winner’s solution was far less elegant than I expected after the code was released, but man was it effective.
ICE sure isn't. That is tax payer money at work, sadly.

But yes, there are incentives that do reward cells and even individuals for number of imprisonments. And no, they do not check nor punish "administrative errors".
Again, the cookie banners have nothing to do with GDPR, where are people getting this misinformation from?! Was there a popular article saying we have those cookie banners because of GDPR, or what?

The banners are the result of much earlier directives that predate GDPR by a lot...
Semi-related: very few people, even capable professional writers, use "disinterested" correctly.
> But in theory the RAW converter has been profiled for each specific camera using ICC color targets and stuff like that.

In practice too, if consistent results are desired. The format being identical doesn't mean the values the sensor captures under the same conditions will be identical, so a color-calibrated workflow could produce wrong results.

It would be nice to have a setting for "treat camera Y like camera X (here there be dragons)" though. I've had to do something similar with the Lensfun database to get lens corrections working on Mk. II of a lens where Mk. I was supported, but a GUI would be nice. A prompt to guess the substitution automatically would be even nicer.
I believe uBlock Origin can automatically do this by enabling "EasyList – Cookie Notices" in the extension settings. If you have this extension installed, there's no need to install another.
> Musicians love a good trend to dump money into.

If I get just one more thing my music will sound good :)

Euroracks will not go out of style in any serious way, in the same way
guitar has not gone out of style over the years even though there were fads.

A few months ago I bought a https://www.dreadbox-fx.com/erebus-reissue/ (semi) and
within an hour I decided modular was cool.

Funny enough I was just looking at the Erica Synths github the other day. There's been a few synth and audio posts on HN the past few months. Pretty cool to see it.