jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Adopting a zero-tolerance policy for CAs that are bad actors (including those that allow others to have their full power who themselves act as bad actors) and removing their root certificates from trust stores would create a substantial disincentive for CAs to be bad actors.
Time offset by itself isn't sufficient to know if the rules for calculating that time offset have changed. You need to know the rules themselves, and the easiest way to record that is with a time zone.
> They issued a long series of rulings making it difficult to prosecute cases, without worrying about the consequences.

Um, so? Then we need to allocate more resources to prosecute cases.

If I am falsely accused, I want my day in court. And I want it to be fair. The current system has problems on both fronts.
> How might you imagine that management would find this out if the person is unwilling to speak up

The entire management structure in place was the problem. Are you seriously suggesting I should have attempted to contact my manager's boss in the USA, instead of joining a union?
I first thought this was for alleviating shock waves in supersonic flight, but I guess they've been doing these kind of things for a long time
Is there any way to detect that you're being MITM'd?
On the other hand, if nobody's ever leaving Google, Google will sure keep its access to almost everybody's mail. And I don't agree with the time argument. I ordered a VPS a few weeks ago (mainly to host my websites) and it didn't take me more than ten minutes to create an email account through a web interface. And with Roundcube, I don't have to deal with Google deciding it suddenly wants to organize my mail in "tabs" or revamp the UI to the latest design trend.
I'm sick and tired of everyone saying STEM degrees don't value anything but technical understanding.

I'm also tired of posting the same rant all over the place! ;)

TL;DR of my previous HN comment on this is that my CS degree included history, writing, music, painting, philosophy, and many other fields of study, just like a degree with the letters "B.A." in it would.

But on top of that I also had to take science and math, courses which used to be considered part of a proper "liberal arts" degree!
Trade is good, secrets are bad.

Worst part of secret trade agreements is that it is isn't fair to the future of workers affected by agreements.

If your business or career is going to be affected, knowing about this as it happens is good to prepare and make a change. No doubt there is no changing what capital, corporations and wealth want to do but at least give the little guy a heads up.

In secret, all you are doing is harming people and then when it affects them in the end it will be too late or put them in a bind.

In an age of information and being smart about careers and futures, a secret trade agreement is feudal in nature and only for the kings.
To quote:

> When you rent a cable modem/router combo from Comcast (as one of my nearby neighbors apparently does)
I get that math if it explicitly said that this is a 1 year loan - but it doesn't. How do you know this wasn't a 4 year loan? and you pay $103 per month for 4 years?

or how do you know that this wasn't an "interest only loan" and you pay $103 in interest every month... and if you want to pay down any principle, then that would be anything that you pay above $103/month.
Why don't you? From the article:

When you rent a cable modem/router combo from Comcast (as one of my nearby neighbors apparently does)

The article definitely implies that he's connecting to his neighbour's Comcast router.
I don't understand how anyone can wholeheartedly support a system that could help do so much damage to the world.

There are many who, whenever they pay taxes or vote in the US, ask themselves the same question.
Preferably (from the point of view of the owners) in an unregulated monopoly.
Great! But then it is basically a Q&A forum. May be a mix of HN + SE can be built. Thanks for the suggestion :)
It's probably more accurate to say that they're hiring people who are willing to use MS tech to pull a salary, regardless of their personal preferences.
This is sad. And it reminds me of the terrible almost absolute power we give "doctors" over people we deem "insane"
"Viral" is like sex. (Gettig laid.) It's something which is very desirable, so much so that the target of the marketing/proposal often wonders if the virality is the actual point of the interaction as opposed to real utility. There are so many parallels that come to mind, I wonder if there is a general game-theoretic dynamic at work?

One parallel: it's better to be casual about being viral. It's not good to seem over-anxious.
It's true that stored procedures can be injectable, but it's extremely rare, and you can find the 0.1% of them that might be with a simple grep regex, unlike ORMs.
To put that in perspective: Current global oil use, 75e6 barrels per day, at current price of $75/barrel = 2 trillion US dollars per year.

It's the same cost as 25 years of oil production, at current prices. Even if you think oil price won't go up and solar panel price won't come down, that doesn't seem economically crazy. 25 years is probably about the lifetime of the solar installations.

Infrastructure is a big cost, but the only difference is that the infrastructure cost for oil has already been sunk. It's a one-time changeover cost and eventually there will be no oil.
Wait, what? Twenty years of wondering and controversy and you didn’t even test it? It seems to me that you are rather interested in a good argument than a good answer :)

If I were to test this I would look at two things:

1. Can you teach chickens anything at all? (You want to explore the teachability of chickens first – if chickens drown in the second step and you find out that you can’t actually teach chickens anything meaningful you can already be pretty confident that teaching chickens to swim is impossible.)

2. How do “default” chickens behave when thrown into water?

2b. (If chickens drown when thrown into water:) How would you have to change their behavior if you wanted them to keep afloat? Is such a change within the scope of chickens’ teachability?

Seems like perfectly reasonable, straightforward testing to me. Something the Mythbusters could (should, actually!) do.
AES-GCM is in NSA Suite B and AES-CCM and AES-EAX aren't. IIRC, EAX isn't even NIST approved. GCM is parallelizable, and CCM and EAX aren't. New Intel processors have special support for GCM, which should makes GCM notably faster.

http://www.cryptopp.com/wiki/EAX_Mode has a very brief but good summary of the advantages of GCM over CCM and EAX. Also see this slide (warning: PPT): http://www.cryptopp.com/w/images/c/ce/AtE-Comparison.ppt
But if the manager's highly constrained by higher-ups and policy, you don't have a real negotiation.

Negotiation begins with shopping around. Any particular company may be unwilling to negotiate with you. That doesn't mean you can't negotiate, it just means you need to move on.

Incidentally, big companies do respond to these issues. When people start leaving in droves, hiring policies are reviewed, and changes are made (or the company dies).
A professional association that includes legal assistance in the event that a programmer is sued for patent infringement would be a great thing.

There is something similar in the home school community: An organization that in addition to providing general support, coordination, recommendations, etc., also has professional attorneys specializing in that field, and who will defend their members in court when necessary.
Humans did fine with tippex and typewriters years ago. The delete key is a modern luxury. People were much better at typing accurately back then.
Think there might be a typo in your first example.

"#element{.boxRadius(radius);}" and the box below it references ".borderRadius(radius)"; is it both?
kiba, do you think there's some kind of limit to how many bitcoin articles you can reasonably submit?
> wherever god put the poison, he also put the anitdote

This should be taken as a tendency, not an absolute rule.

The tendency is, of course, caused by the fact that if it's plausible for any species to have evolved digestive mechanisms that allow them to make good use of a food source that's significantly available over a long period of time, then it probably happened, and become widespread.

But you have to consider implementation complexity (why aren't we immune to ALL poisons and disease that have been around for long enough? why don't we all have lifelong 20/5 vision?) vs. time vs. benefit. That, and a lot of things that could have evolved, haven't yet.
What was the lynchpin of their actual defense? I've found almost no laymans-descriptions of it.
Can you elaborate? Is the game in the app store? Github? What dev environment did you use?
As a counterpoint, I’ve heard of individuals building entire careers by making obvious and incremental improvements to current methods; each increment is at least one paper and they add up fast. Then the methods and all its improvements are discarded once a more ambitious (and therefore risky) line of research yields entirely new methods with orders of magnitude improvement over the old ones.

Results based funding (and tenure granting) promotes these more conservative and obvious projects. Proposals for more risky, and therefore potentially more rewarding projects aren’t submitted as no one wants to gamble with their own career.
Now I like the idea of a moon base and space research as much as the next engineer (and we here at HN seem pretty friendly to it) but I have the general impression that without commensurate investment, this is on par with saying "NASA is directed to clone unicorns"
So they make it $10k, and the post is about the $10k book instead.
It takes a security-through-obscurity approach, using random url's. The pro version, if enough demand, would include a private namespace with individual password protection for each file.
If you consider a 10x multiple, revenues would have been in $3-4 MM range. Wufoo sets a great example for exits where VCs are not involved but are awesome for founders + employees.
Dammit, Kevin, I was planning on stopping in Tampa to see you guys in a few weeks, as I'm on my way to Georgia and North Carolina, and you guys are gonna be in California where I won't be visiting again until at least next spring. Did you consider my feelings in this decision, at all?

But, I guess I'm happy for you. Congratulations.

I'm not at all surprised, though. I never had any doubt Wufoo would be a big success and make a lot of money.
Does anyone have evidence to back this up? I didn't look too hard, but the Wikipedia citation links to a page which links to pages that don't have any actual information on them.
There have been a few of these made — I remember ethercodes, which probably came closest to replicating what this is doing.

Right now, as a collaborative editing tool, it doesn't really work, since you can't have two people focused on different lines at once (I just experienced fighting over the focus with a co-worker).

Curious to see how this develops out.
Under PPP, the Chinese economy will expand from $11.2 trillion this year to $19 trillion in 2016. Meanwhile the size of the U.S. economy will rise from $15.2 trillion to $18.8 trillion. That would take America’s share of the world output down to 17.7%, the lowest in modern times. China’s would reach 18%, and rising.

So we won't be the top any longer, but we'll still be enormously dominant. So? Competition drives innovation.

All the "America is doomed" folks act as if America is going to crumble to pieces simply because we are no longer the only gorilla in the room.
Nah, that one already exists: http://fivesecondtest.com/

( I may be making assumptions about the user base, but I think "bored developer" is a reasonably safe bet...)
One point I would make is... I've heard it said many times. "Fear and Greed are the 2 things that drive the markets". So I guess I would point out that when you try to suppress one or the other too much this is when the market can swing too wildly. My guess is it's probably healthy to have the conversation because if it's truly a bubble then it will be less of a bubble when it bursts. If it's truly not a bubble, then those who are invested will be fine and have nothing to worry about.
Of course, nobody needs more than 640K of memory either.

Seriously, though, although I'm sure 4K will become somewhat commonplace in 10 years, the rate of progress for desktop screens is ridiculous compared to the mobile world. I still don't quite understand what stops us from making cheap, large arrays, when we can make the tiniest, most colourful pixels to keep in our pockets. Is it just the general market being completely ignorant/indifferent to good monitors?
Remember, within a generation these chips are almost all made from the same set of masks. None of these disabled features save any transistors or die area

I think it might be true for CPUID/stepping, but not for what are usually considered to be the generations.

For example, there look to be at least 5 dies sizes for Sandy Bridge: http://en.wikipedia.org/wiki/Sandy_Bridge#Models_and_steppin...

I haven't tried to match up the supported ISA's with the different die sizes, but I presume they'd correlate. Do they not?
"Bye bye mainstream, hello ghetto."

Yes, because your use of deprecated software is no longer supported is TOTALLY the same thing as being relocated into the Ghetto in Warsaw.
This looks really great. I don't have an iPhone, but when they launch on the web I will check it out!

update: Although a little turned off by the idea of "automatic updates thought the day".
It's kind of silly to argue from first principles when you can ask the people who study this stuff, epidemiologists. 90% detection and 95% specificity would be horrible numbers if you asked any of them.
As soon as you say the word "proper" you mean "What -I- think you should do"
Oh, I thank Your Highness for only whipping me 40 times instead of 50! Truly Your Highness is wise and merciful!
This is much more basic but also considerably smaller.

https://github.com/andlabs/ui

I really wish libui had more support and momentum. It's literally the only sane cross platform UI project in existence. Everything else is not native (html5 guis), has no accessibility support (all the immediate mode ones), is ancient and ugly (wxwidgets), or is bloated (qt).
I use expressvpn. I haven't tried a bunch of others but their sales jargon looked nice and the price was right. I'm happy using it and have had no issues. I travel around the world and has worked in every country I've been in to get around blocks.
You know I think the thing is with some billionaires, they don't have to be useful for society to become a billionaire, they don't have to be moral, that don't even have to be smart.

Often they just have to be "charismatic", better at lying, better at cheating, less moral, etc.

WeWork was never a good business, seems like he was just a massive narcissist who managed to trick the SoftBank guy (notorious for investing from the gut) into giving him billions.

So if we have a system that rewards ruthlessness, dishonesty, cheating, stealing etc, that's what we get at the top.
Interestingly this is very similar to how I implemented passing closures into JavaScriptCore as hooks for JS class invocations ("function calls"). [0]

Essentially it's taking advantage of the fact that closures are static methods with "implicit" data pointers. It should be fairly obvious that this is a massive violation of safety and undefined behavior, and most likely to break when debugging symbols etc. are inserted.

The safest way to do this until Rust has figured out a stable-enough-ABI for closure passing would be a thread-local trampoline, I guess. Not very nice..

[0] https://github.com/psychonautwiki/rust-ul/blob/master/src/he...
If you cede all your decisions to someone else who presumably knows your best interests, you become what's called a slave.
I'm not using it on this pc - I get the error after clicking on the link on the bottom left hand side of the page.
Unless I'm misreading this, there's a slight semantic difference between the two cases: with the GADT-based interpreter, an if expression's two branches must both evaluate to integers:

| GIf : bool expr' * int expr' * int expr' -> int expr'

...whereas in the original both branches could evaluate to bools (or even totally separate types). Do you need a separate case for each type, or could one write something like the following?

| GIf : bool expr' * a expr' * a expr' -> a expr'
I can't speak to the statistic about households, because I don't understand enough about how that's measured or where the correlation would be significant.

However:

> According to a separate study cited by the Journal, only 22.7 percent of new entrepreneurs in 2013 were aged 20–34, compared to 26.4 percent the year before.

This statistic doesn't necessarily support what you're claiming, since it doesn't control for an increase across the board, primarily from other groups.

It's possible that this statistic could be true even while the percentage of people those age who join is rising, because another group rose faster, reshaping the cohort statistics even while there was a gain for everyone.

Example with made up numbers:

20% of young adults; 30% of older adults in 2013.

25% of young adults; 50% of older adults in 2014.

Young adults fell as a percentage of the new cohort from 40% to 33%, year over year, even as the likelihood that a young adult would become an entrepreneur rose.

That is, without controlling for other factors, the statistic about the relative population of young adults in the latest cohort doesn't tell us anything about young adults' behaviors.
It's great when companies find someone who solves their exact problem, it sucks when you're the guy who can only solve one problem though.

Especially when someone finds a way to automate a solution.

I think Valve described the 'T' employee: know one area very deeply and a broad range of others reasonably well. Seems to be a good approach :)

Maybe another way of looking at what your friend said is to just be specific about your skills/experience when job seeking?
They said that for the mainframe and mini people at the end of the 90s and yet all the people who I know who worked in those areas are still employed, still making good money, and will still be doing so for the foreseeable future.

Technology lasts a surprisingly long time and not everybody needs to keep jumping on the new hotness.
It is called preservation.
That would arguably be better, the smaller distortion would be less likely to break things and the frequency would make it much more likely that things were tested against it.

(Of course best would be to have none at all, and accept that several thousand years from now people-- if people still exist then-- may choose to slip the timezones by one hour to correct the drift.)
In the broader benchmarks it still looks like Firefox or Chrome is the winner:

http://www.winbuzzer.com/benchmark-deep-dive-microsoft-windo...
About 22x longer than your elevator pitch but this is a fun video about how Machiavelli was a brilliant and misunderstood researcher... and cosplayer

https://www.youtube.com/watch?v=ZRIxkLhMpa0
Starlark is an extremely limited dialect of Python. It is intentionally not Turing complete, to prevent unbounded computation.

I think the rationale for making it syntactically similar to Python was: we want to add a macro processing language to our build system, and we want to support common features like integers, strings, arithmetic expressions, if-statements, for-loops, lists, tuples and dictionaries, so why not base our DSL off of Python that has all that stuff, so that people familiar with Python will have an easy time reading and writing it?

Then they implemented a very limited but very fast interpreter that supports just the non-Turing-complete DSL.
> IMO autonomous vehicles that can really replace car ownership are a long way away but mass transit planning is a long time horizon as well. And if/when they do arrive it's almost inevitable that they'll make driving more attractive, not less.

The problem is that you can approach self driving cars in an incremental way, while light rail is extremely expensive upfront.

I don't have time at the moment to go into detail, but look at the Greenlight Proposal in Pinellas County (Florida). It was advertised as a light rail/bus transportation network overhaul, and it was downvoted due to being too expensive (while adding extremely minimal taxes to cover it).

http://www.psta.net/plansandreports.php
No Mention of the Bard?

That time of year thou may'st in me behold
When yellow leaves, or none, or few, do hang
Upon those boughs which shake against the cold,
Bare ruin'd choirs, where late the sweet birds sang.
In me thou see'st the twilight of such day,
As after sunset fadeth in the west,
Which by-and-by black night doth take away,
Death's second self, that seals up all in rest.
In me thou see'st the glowing of such fire
That on the ashes of his youth doth lie,
As the death-bed whereon it must expire
Consum'd with that which it was nourish'd by.
This thou perceivest, which makes thy love more strong,
To love that well which thou must leave ere long.
That is a common misconception, a raise will never cost you more in that way. Sometimes a raise will send you out of an income range that qualifies for State assistance though, like the GP said, with the assistance being worth more than the raise.
William Butler Yeats:

Turning and turning in the widening gyre
The falcon cannot hear the falconer;
Things fall apart; the centre cannot hold;
It is stronger than the 512-bit RSA factored in the FREAK attack but is still factorable with clusters. I wonder how fast a FPGA would be able to do it.
Interesting. The idea that mushrooms could purify pollutants seems reminiscent of this movie: http://www.imdb.com/title/tt0087544/
Those big Performance dyno sound great but I sincerely hope they don't get rid of the free plan, you're right about today's software being out of sync with their pricing - with NodeJS I was able to get 1000+ requests/dyno/second before they even had 2x dynos.
This is irresponsible disclosure. You should have contacted the information commissioners office. They would have used legal powers to force Moonpig to rectify this. There are very steep penalties for not protecting customer data.

Now that you've publicly disclosed this, opportunists (people one level above script kiddies) will probably grab a data dump and compromise every customer.

Dealing with this via legal channels would have ensured a resolution whilst protecting customer data from any opportunistic bad actor.

Shame on you. I can't wait for myself and my wife to get doxxed now. Thanks.

Also, FYI; the whole card number isn't returned because they are probably tokenising the full card number with their payment gateway.... Or at least, I hope.

DOWNVOTING because you don't agree with me? How rude. I believe I'm a making a valid point, there are legal channels in place to help with this sort of thing.

EDIT. someone people think I do no hold moonpig responsible for this. I do! I am not blaming the security researcher. What I am saying is that some countries (like the one where moonpig is incorporated and operates) have agencies that deal with issues like these. Getting these agencies involved before public disclosure is a much nicer way to deal with these sorts of issues.

I'm aware that this exploit may already have been used but that doesn't mean that we should tell everyone about it until it is resolved. Getting the ICO involved may have resolved this issue a long time ago.

My disclosure - I have a friend that works at the ICO and she tells me that these issues usually take them (on average) 2 months to sort out. COmpanies get very anxious when the ICO contact them.