Hacker News Reader

buzeron The Going Dark initiative or ProtectEU is a Chat Control 3.0 attempt

I believe it's this one (which is likely leaked document as that document number isn't publicly accessible): https://docs.reclaimthenet.org/eu-data-retention-presidency-...

There's also this one: https://data.consilium.europa.eu/doc/document/WK-11640-2025-...

The first one appears to be the result of the of the second which called member states to submit their opinions.

buzeron The gift card accountability sink

Did you confirm it was a scam? Primarily wondering if it's possible that the company itself contracted someone to do phishing test for new employees. I know there are plenty that do email version of this.

buzeron Devs say Apple still flouting EU's Digital Markets Act six months on

> I mean, it absolutely worked for effectively sinking the DMCA, where pretty much everyone now equites that law with obnoxious 'cookie banners', to the point that these regulations are being relaxed.

I don't think DMCA has anything to do with that though I did wish everyone hated it. You probably meant GDPR.

buzeron Windows drive letters are not limited to A-Z

The recovery partition might work if it exists.

buzeron 250MWh 'Sand Battery' to start construction in Finland

Note that even if Central Europe did have sufficient energy for export it wouldn't really help during crisis. To get the energy to Finland it would need to either go thru the Baltic Sea via undersea cables or via Northern Sweden. We have seen that it's not necessarily good idea to rely on the former during the crisis as those lines can easily be cut, they have been multiple times in just past year or so by certain commercial ships "accidentally" dropping their anchors.

As for latter Sweden, doesn't currently have capacity for it and I don't think they have been very interested in increasing it, currently Finland often benefits from the fact that there isn't enough transport capacity between Southern and Northern Sweden electric grids so Finland gets some cheap electricity from there.

buzeron EU Council approves Chat Control mandate for negotiation with Parliament

> - Making design choices such as ensuring that E2EE is opt-in by default, rather than opt-out would require people to choose E2EE should they wish to use it, therefore allowing certain detection technologies to work for communication between users that have not opted in to E2EE

So you make it so that when the user starts the application you ask them "Your current configuration allows government, and probably some hackers as well, to see your messages. Do you want to enable encryption? Your government's suggestion is that you should say 'No' here. That's also what the foreign intelligence agencies suggest" "Yes, enable encryption" "No". That's clearly opt-in, you even provide the government's recommendation. And of course you then ask that whenever they open the application if they selected "No", we have learned that it's completely fine to keep asking same question from the user.

Oh, and make sure that the other party is clearly aware that the other side has not enabled encryption.

buzeron ZoomInfo CEO blocks researcher after documenting pre-consent biometric tracking

https://news.ycombinator.com/item?id=45980117

Some more details:

https://noyb.eu/en/eu-commission-about-wreck-core-principles... Textual analysis of the changes from the original leaked draft (especially "Overview Table of the Draft & Comments by noyb")

https://noyb.eu/en/digital-omnibus-first-legal-analysis Video about the proposed changes (there are some changes compared to the leaked draft)

buzeron Europe is scaling back GDPR and relaxing AI laws

You should probably look into pseudononymization in your case, not actual anonymization. Look into C‑413/23 P in more detail to see if it's applicable in your situation, it's essentially the first case law around it. You probably do need some extra controls (like contract that the data is not shared) just in case to avoid the data coming in hands of someone else who could identify the people depending on how detailed the data is.

buzeron Europe is scaling back GDPR and relaxing AI laws

> The new proposal which suggests that pseudonymized data is not always PII is a different thing.

This actually is already the case, see the recent CJEU C‑413/23 P. Currently the main question is if the recipient has a way to unmask the user. In case of IP address the answer is almost always yes since the recipient could ask competent authority to unmask the IP address if there is crime involved. That was the exact reasoning provided in the Breyer case.

In C‑413/23 P the recipient didn't have any reasonable way to map the opinion to real person so it was determined that it's not PII from recipient's POV but it was from the data controller's.

One of the issues in the new proposal is that it lowers the standard quite a bit compared to C‑413/23 P.

buzeron Fizz Buzz without conditionals or booleans

Other would be to use goto (though Python doesn't have it) & introduce something that will panic/throw exception, like creating variable with value 1/(max-i).

buzeron Two billion email addresses were exposed

> But also, how did 2 billion email addresses get exposed?

The list contains emails which have been part of some other breaches. In my domain I have 2 emails that were exposed that weren't my normal email address. One of them was a typo that I used sign up for one service which was later breached. The other one was something someone used to register to service that I have never used & that service was later breached. Those emails have never been used for anything else as far as I'm aware.

Of course judging from what posted there are likely some other services as well which were breached but wasn't noticed/published until now.

buzeron Samsung makes ads on smart fridges official with upcoming software update

If you are asking about some stoves that can be installed that way, there is for example FÖRDELAKTIG from Ikea. The manual is at https://www.ikea.com/gb/en/manuals/foerdelaktig-induction-ho..., you can find the wiring options from page 13.

buzeron Samsung makes ads on smart fridges official with upcoming software update

My understanding is that many of them can be wired as 1, 2 or 3 phase at least in Nordic countries, though admittedly the ones which allow 3 are somewhat rarer especially when looking at stove top-only models (not combined stove+oven).

buzeron Alaska Airlines' statement on IT outage

NEB in Finland is Traficom, but they don't handle individual complaints. Those handled by Consumer Advisory Services and European Consumer Center & these are residence based as far as I understand (I'm Finnish citizen but I don't live in EU).

The only alternative to court is Consumer Disputes Board but their resolutions are just recommendations & Finnair has a long history of ignoring them so spending 2-3 years there seems like waste of time.

buzeron Alaska Airlines' statement on IT outage

In recent case I quoted the actual law & caselaw and the response I got was that I need to contact the marketing carrier and they will stop responding now. Funnily enough, the carrier I was in contact with was the marketing carrier (as background, codeshare flight was cancelled almost month earlier but I was never informed & I only discovered it when I went to airport).

So in my case the next step is to find lawyer.

buzeron Amazon’s Ring to partner with Flock

I don't think GDPR violations are normally handled by police. It might be if there is separate a crime (in Finland illicit observation can probably be both GDPR violation and crime though that probably doesn't apply here).

GDPR violations would normally be handled by the national DPA. They can investigate things by their own decision but normally you need to try to exercise your rights (in this case probably ask copies of your data, information regarding processing & recipients of your personal data), get denial from data controller or find issues on their reply and then make complaint to DPA. They will then investigate & give decision. You or data controller can then appeal it to court if either disagrees.

buzeron Amazon’s Ring to partner with Flock

In most of EU doorbell cameras that point to public places are not covered by GDPR's household exception so if you use them you would be classified as data controller which come with it's own set of duties, responsibilities & limits. Is that not the case in Netherlands?

buzeron GrapheneOS is ready to break free from Pixels

Unfortunately the EU regulation makes the truly user controlled 2FA methods essentially non-compliant.

https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...

> Article 7 Requirements of the elements categorised as possession

> 1. Payment service providers shall adopt measures to mitigate the risk that the elements of strong customer authentication categorised as possession are used by unauthorised parties.

> 2. The use by the payer of those elements shall be subject to measures designed to prevent replication of the elements.

buzeron Why did Crunchyroll's subtitles just get worse?

From what I remember TheFluff was arguably one of the best timers (and encoders) in the fansub scene in the past and he could time the dialogue in under 10 minutes. https://www.youtube.com/watch?v=00xX0PwGUg8

Karaoke and typesetting can of course take longer (I remember someone complaining about how much effort it was to typeset every single book name in some scene that had a bookshelf) though karaoke is usually ~3 minutes of unique content (OP & ED) per ~12 episodes. Typesetting depends heavily on anime, like isekais don't usually have a lot Japanese writing anyway.

buzeron Offline card payments should be possible no later than 1 July 2026

> Do they not have account alerts in your country? Any time any of my balances change, I get an immediate push notification.

Just to be clear, I currently live in the US. In Finland some banks offer email/SMS notifications but they often have fees associated with them.

Frequent notifications can create notification fatigue and that's not really great either as I'm sure anyone who gets false positive alerts from monitoring system knows.

buzeron Discord customer service data breach leaks user info and scanned photo IDs

> for whatever reason

For example if the face verification failed and you need to file an appeal which requires uploading government ID. That's likely sizeable number of users, especially since the breach happened shortly after the requirement was implemented and many existing users had to do it.

buzeron Offline card payments should be possible no later than 1 July 2026

> The money has to go somewhere: Into another bank account, usually, which is easily traceable since banks by law have to know who they're dealing with.

Yes but you actually need to notice that it happened which requires them to actively monitor their transactions on all of their accounts. They then need to use their own time to report these transactions and wait for banks to resolve it. And that's just in the good case where bank doesn't dispute it. If they do, you now need to file official complaint with regulators or sue them. Former can probably be done by highly educated people by themselves (others likely need some legal help), in latter case you are going to need a lawyer. I'm not even sure if you are eligible to recover costs for those.

Why is this better than just not allowing pulls without explicit authorization by the consumer (SEPA Direct Debit) or just asking consumer to actually send the funds (bank transfer)?

buzeron Offline card payments should be possible no later than 1 July 2026

In Finland, and I imagine in most of Europe in general, people just make bank transfers for most of those things. Unlike in USA you cannot just pull cash from someone's account if you know their bank account number, you need to setup SEPA Direct Debit to do that and it requires explicit authorization from the account owner. It isn't even really used much in Finland, most companies just send electronic invoices that you can setup autopay for in your bank. They aren't free for companies but the cost is negligible (likely less than the postage stamp would cost).

buzeron Building the heap: racking 30 petabytes of hard drives for pretraining

I know, I was specifically answering the question of "why the hell would you want public IPs".

I don't know why their network setup wouldn't support DHCP, that's extremely common especially in "enterprise" switches via DHCP forwarding.

buzeron Building the heap: racking 30 petabytes of hard drives for pretraining

> Wth would you want public IPs.

Possibly to avoid needing NAT (or VPN) gateway that can handle 100Gbps.

buzeron People want platforms, not governments, to be responsible for moderating content

> "The holocaust never happened"

Not really an opinion but it can be a belief. I'm not sure why we are okay with people believing that Earth is ~6000 years old, but not with someone believing that we are in a simulation and everything before e.g. year 1999 is just a collective memory fabrication.

buzeron Updates to Consumer Terms and Privacy Policy

> An in-app notification pop-up will alert you to the change. You can opt out in the pop up.

The in-app notification that I got was a pop up which contained some buttons and some images. There was no text. Just in case it was some dark mode issue I checked the DOM and I couldn't find any text there either. I just clicked outside the modal and it went away. I assumed it was some announcement about some new feature and ignored it.

I did end up seeing the news yesterday in Reddit (I'm having issues getting the research tool to actually being used, tried to see if there was some recent changes) but it's unlikely that I was the only one who experienced modal the issue & if those didn't follow the tech news they could easily miss the change.

buzeron The Deletion of Docker.io/Bitnami

The images are currently in Docker Hub. If $9/month (or $15, not 100% sure if $9 includes organizations) to keep those images available is too much for Bitnami I'm sure there are many organizations who wouldn't mind paying that bill for them (possibly even Docker Hub itself).