jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
What's the term for a program that's deliberately crippled to prevent you from doing what you want? Defective by design?
Yeah, read the article. Considering new house rule of UTC for present and past, wall time (?) for future.

Person I was responding to gave bad reasoning ("Pick the timezone that matters most") instead of echoing what the article said.
> These attacks might be "detectable" after they've happened, but so what? So was this one. Damage will have been done.

Well, in this particular case, there was presumably an intention to conduct the MITM long term. Buying a Palo Alto Networks device, paying for a (fairly expensive!) unconstrained intermediate, and being able to MITM a connection for a few hours is not very useful.

There are certainly attackers who want to MITM a specific site for a specific user for a short period of time, and CT may not solve that. It may be the case that no certificate-based system can solve that, because those attackers will prefer spear-phishing the user into downloading malware to reconfigure their browser. But this particular attack was not such a case.

What went (somewhat) wrong here is that the attacker believed that they could get away with it for quite some time, because the mechanism by which Chrome tattles on illegitimate certificates is proprietary and not well-understood as a part of the system. I suspect that if the attacker knew that this would not work for more than, say, a day, then they would have chosen a different, less-attacky route to solve their actual problem.

(Besides, the Palo Alto device would not have actually sent certs to a log. The attacker would have had to write their own MITM proxy, which is a tricky business. That rules out some but not all actual attacks, and if our metric is what actual attacks are prevented, then that counts for something.)

> All the attacker has to do is send the cert to a log, and all CA-signed certs are accepted, so they would have gotten their SCT without any trouble at all.

I concede that that is true; I implied otherwise because I didn't think hard about that part. Thanks.

> After some time, Google might query the log that it was sent to and discover the SCT and raise the alarm

I don't see why the CA wouldn't immediately query logs for all certificates that chain off of their intermediates, to verify that intermediates are only used in the way that people said they'd be used. (Remember that in this case, the customer lied to the CA and said it would only be used for sites the customer had control over.) I could easily imagine that, in a SCTs-are-mandatory world, it's also mandatory for CAs to run this little shell script if they want to be allowed to sell intermediates. It's just a technical formalization of something that's already in the Baseline Requirements.

> it's even possible that the MITM will prevent any fixes from making their way to the victims.

That's certainly an interesting problem and I haven't seen much discussion of it.

Is it possible to configure the browser to fail closed if it hasn't reached its update server within some period of time? Is this something that CT can/should do? Can we standardize something like Chrome's CRLsets, and make the browsers require they be able to reach CRLsets somehow, either through the vendor or through a CT log?

What's DNSChain's solution here? Can a MITM pretend that the blockchain hasn't moved in a few weeks?
fencing ... relates to a master/slave cluster as in how?

Because when you promote a slave, you also need to fence writes to the old master, otherwise you can end up in a "split-brain" scenario, where the old and new masters are both accepting writes, and nobody's replicating.

Have fun cleaning that up.

(them not being relational is irrelevant to replication)

I disagree. Their being relational imposes extra constraints upon replication. ACID?

So how do you monitor e.g. the replication lag?

Icinga invokes this: https://bucardo.org/check_postgres/check_postgres.pl.html#re...

Look, I'm rapidly losing interest in going back and forth like this. You don't seem very interested in the validity of another perspective, but rather just keep finding fault in things that don't do it your preferred way. If you want to have a discussion, I'll play. If not, let's just walk away.
I feel this, 32M with kids. FB usage by actual friends that I cared about fell to zero and my feed was full of shallow experiential grandstanding.

Deleted my FB account but copped a hiding from the silent majority for being 'hard to get in touch with' and feel a bit guilty about this but overall life is better without FB or any other form of social media.

True experientialism is being there in the moment, not standing outside carefully curating the moment for others to gawk at.

Edit: *experientialism not experimentalism
Here's a sketchy description for a possible solution.

The easy part is that we know that if x and y are the missing and duplicate indices form vector V then we have:

|x-y| = |sum(V) - (N*(N-1))/2|

So far - constant space and linear time. From here it's either cleverly (linearly!) scanning the vector or similarly concluding something else about the vector and crossing that info with what we have ;)
The bubble metaphor seems a bit overextended. Here it seems to mean any sort of trend. By this article's usage, we've also been trapped in a long term bubble of wearing pants, sitting in chairs, and drinking out of cups.
Think I may have downvoted you, sorry about that -- on iPhone.

But, anytime during May or June will run into final conflicts, not just early May. So, early May is as good a time as any.
What you are asking for is failures to no longer be regarded as failures. Maybe it's unfair, maybe it was just bad luck that conspired against you, but I can't really see a world in which failure is just as acceptable as success.

If the label of failure rubs you the wrong way, take it as an incentive- buck up, get back in the fray, and try again until you're a success.
http://future.rouli.net/?query=2042

The net predicts that 2042 is most likely to happen before 2041

Yeah.
wow, didn't realize tangential programming conversation was so frowned upon. maybe if they made breakout instead of a television gui the relevance would have been more clear.
Your length is off by three orders of magnitude. Fortunately, the surface area is off by four. In the most serious proposals, the space elevator "cable" is a flat tape with a cross-sectional area of a few square centimeters. Thus, we get:

2 cm^2 * 10^8 m = 20000 m^3. Yes, it's a lot of nanotubes, but the price of nanotubes per unit mass has dropped exponentially for a long while now, and the economies of scale involved in building a space elevator will lower the prices even more.
I'd be reluctant to invest more in an investment that has never paid off. They're searching for signs of life. Signs found so far = 0. Thats a pretty bad ROI.
overflow-y, although relatively stable, has only been officially proposed in CSS3. So I could (and might) use overflow-y, but the height:101%; is a hangover from when overflow-y was a non-standard bit of CSS.

I don't dislike the overflow-y method, I just used the one I've used for year. I might update inuit.css to use the more obvious overflow-y property soon though.

Good spot on the charset declaration though. Thank you very much. I'll update on my lunch break or something :)

Thanks,
H
It leaves white lines for me. the rectangle used to define the area ends up in the png!
"In other words you assume that those holes must be the evidence of a conspiracy. "

No, once again, I'll not allow you to corner me because of my examples with which I'm trying to explain that the events as they happened could be explained BY a conspiracy and they could JUST AS WELL be explained by it NOT being a conspiracy..

"But instead of being honest about it you simply hide behind vague insinuations."

I mentioned before that I don't claim to know what happened that day. Only that I have unanswered questions or things that are not explained sufficiently for /me/. If you're happy with your views on that day, good for you.

Is it now allowed to NOT have a position these days? Many people don't hold multiple theories/world views/models in their mind at the same time, keeping all of them open while gathering more information.

I can't help that most people directly follow either the mainstream/official approach OR the alternative approach.

Once again: the world is not black or white, 'not with us or against us', etc

"You have answered none of my arguments."

And apparently you just don't get that my points are examples.. not my opinions..

"Basically you think that most people are idiots being fooled by some clever evil leaders through the use of propaganda."

I'm not saying that. I'm just saying that propaganda nowadays would work just as well and insidiously as 60 years ago. And people don't have to be idiots for this to function, two words: human nature

And if you can't see how at least the whole situation was used to 'force through' all kinds of executive orders, laws and regulations and the creation of the Homeland security thing, I'm really sorry for you but then you've missed a few things that have changed in the world since that horrible day..

"Each and every of your posts illuminates that more than anything else."

I'm not a 'truther' and I'm not a 'mainstreamer'.
That day is still very open-ended because of it's complexity of events.

I don't have a position, deal with it. And most of all, don't try to push me into that 'elitist' corner stating that I'm calling people idiots, fools whatever.

I'm generating scenarios and examples and I'm being realistic with what we've seen in human history and human nature/psychology.

So just stop trying to label me and put me in one of those two convenient boxes you have in your mind: normal/mainstream or truther/kook.

I'm neither!
You explained your downvote not the downvotes. 5 down within 5 minutes happens, but if it was that egregious the comment should not have recovered.
This has been my biggest worry since Swift was announced. I am really happy with Foundation (much more than with AppKit or post-iOS 6 UIKit). But if 2014 Apple were to reinvent it, I am sure it would suck.

Has Apple recently released anything that they have dog-fed to themselves before, and that was not buggy? Swift itself is a good example of how Apple seems to work now: Let engineers build a toy, release it as v1.0, wait for the early adopters on Twitter to sing their praises, then maybe start using it internally. Maybe.

I wish Apple had instead designed better frameworks for UI and persistence and then built a language to make working with them easier.
All of the questions around "What can you bring to #startup?" or "What do you want from #startup" or "What #startup founder do you want to connect with" fell extremely flat with me - I abandoned the form.

I'm on the page because you posted it here, on HN, and I started the flow because the premise seemed interesting, and I have a startup. I don't have any goals, and frankly, the pitch made it sound like more value would be flowing from the community to me. I don't have goals I need met from #startup because I have no idea what it will be like.

Those questions made it seem like you guys are just in it for a PR grab or a pivot into an incubator, which I am absolutely not interested in at all.
And this is because there is nobody with authority to force the right solution.

Compare POSIX to the Java spec: without Sun forcing coherence, "write once, run anywhere" would have died very early on, and we'd be saying the same thing about Java as you've just said about POSIX.
I think let is supposed to replace var completely. There's a brief mention of this in a book I was reading the other day (Understanding ES6: https://leanpub.com/understandinges6/read/ ) but no citation of where that decision comes from.
The processor that interprets those AT commands run its own operating system, and it runs a huge codebase implementing at the very least the GSM layer 2/3 and the UMTS layer 2/3 protocols. (Here's(http://cgit.osmocom.org/vovida-gsml/tree/) partially leaks of such code for an old GSM only phone, ramping up at about near 200000 lines of C and C++ code)

It sounds like you don't really have access to that and can e.g. change the protocol messages being exchanged by the BTS/NodeB or the mobile switching center.
I have always used an external laptop cooler with my macbook.
Does Chrome OS have a solution to The Airplane Problem?

(Can't really use it as a mobile computer if you can't use it on an airplane.)
> hiding in plain sight.

Ah! I like that expression!
How can I make short-term investments in early stage startups?
Kickstarter seems to be getting some traction. Do you still think that's a bad model?
Do you have a PhD?
I think that is how the guy signed his email, hence "The Russian" moniker.
Why did I read this as Singles site for programmers? My next thought was of a certain Flight of the Conchords song.
And thank goodness. I have musical anhedonia (https://en.wikipedia.org/wiki/Musical_anhedonia), which basically means that music does nothing for me. I function just fine in today's society, where music is merely entertainment. I probably would've been screwed if I had been born thousands of years ago.
Sure, but that is an utopia that I hardly believe we will ever reach. No question hundreds of years in the future.

Lets allow people to get exploited because it might not be a problem in the distant future? Or, work from both ends. By restricting bad options at the same time as we add, best we can, the good options.
Any work you do to get hired by a company is billable work so invoice the company for your time.
I am a full stack web developer using a Linux environment as my development environment. I plan to start learning some ML related stuff and I just recently bought a Radeon 5700 XT, the current high end consumer GPU from AMD. Before this I had an RX 580.
The driver support on Linux is fine but not optimal, there are multiple issues regarding color ranges, dual monitor support and with Navi based hardware (5700/5700XT) plain hardware freezes/hangs. I did not personally experience the hangs but I installed the 5.4-rc8 kernel and compiled mesa 20 from the git just to avoid them in the first place.
There is no Navi support on ROCm and the prefered way to have OpenCL on older hardware like Polaris (RX 580 for example) is to just extract the relevant files from the closed source driver.
I still prefer something with open source drivers but AMD is far behind NVIDIA in terms of GPGPU software support, I cant't honestly understand what their strategy is and why they are allowing the majority of developers to tie themself and their careers to NVIDIA.
Great tool! Positioning things in diagrams is my #1 complain.

Do you have any plans to enable diagrams for things like network infrastructure? Custom icons maybe?
> While there are wealthy people in the US who simply inherited their wealth from the lucky chance of being born to the right family, it's not like the government actually pays them a salary. Queen Elizabeth gets over 80 million pounds a year from UK taxpayers.

Legally speaking it's not so much that the taxpayers pay her for existing, as much as they pay her for the right to land that she owns. The queen also funds a significant proportion of parliament. The only way to get rid of the monarchy is to also get rid of private property, otherwise you're taking land that has been given for the public use gratis, and putting it into private hands, since that's who legally owns them.

And if you think we should deal with the monarchy first, and not the big corporations and Russian oligarchs that not only own huge swathes of land, but have contributed significant amounts of funding to the Tory party, then I don't know what to say.
> My therapist says I’m emotionally immature.

find a different therapist :)
This is really not true, except maybe in localized situations which you don’t want to work for (and recruiters are not going to want to do work for those companies so the overlap is minuscule). It’s a one time capitalized expense that reduces time (money) spent by on-staff employees.

One thing you do have to look out for is that recruiters get paid after a period of employment (3-6 months in my experience). So that can create a perverse incentive to fire someone you’re on the fence about. This really shouldn’t happen unless you’re working for an extremely cash-strapped place though.
”unfortunately there's no competition to Search on the horizon”. What about duckduckgo? I’ve been using it roughly for a year and i’m happy with it.
>> In addition, what's changed between 2017 and now is that back then Google was still admired by the tech people.

That’s not quite right. There are plenty of tech people who stopped admiring google much earlier (shuttering of google reader was probably what keys me into where they were ultimately heading, and I’m sure many others saw things much earlier). On the other front, G$ is neither entirely evil or good. It is a very large company. There is still good, field advancing work and valuable contributions to the open source community coming from them. One the other front, there are absolutely perverse motivations and capabilities to break the open internet coming from them.

It’s a fine line to tread. They are like the Bell labs of our generation, for better or worse. Great tech came out of it, and breaking it up will kill that great tech R&D part. Then we will have to wait for the next disruption. I’m not in a position to say which is better, but this is how I see Google position currently.
They accepted AirBnB thinking it was a terrible idea, and the founders would find something better.
Wow. That was just a jokey comment about how angry I was about the Chinese govt.

As one of the billion people who live inside the Intranet "protected" by the GFW, I guess I can say I'm quite aware about how and why this happened. Let's start from the beginning.

For those who host things Chinese govt doesn't like, it usually just block the website altogether (Twitter, FB, and recently Google). But it had tried to block Github, twice. Each time there is a huge response from the Chinese webizens (mainly programmers) calling to unblock it.

Another way to block certain content from a website is to filter by keyword (like Wikipedia). But GH is encrypted so that's a no. The govt even tried to use some fake SSL certificates to MITM it. So some "smart" guys exploited this feature and created the repo greatfire/wiki and things like this.

Then some evil guys from GFW thought of this way, directing the attack at these user accounts, to warn GH to remove these accounts.

What I don't agree with you is the word "reasonable" (and the "no"). First, it's never "reasonable" to DDoS attack a website. Second, if you can't block the content, you have a choice to block the website and take the bitter from every single webizen against you. Finally, I believe it's the website owner's choice to choose who / what they want to use their website. Since GH is a U.S. company (I guess), it doesn't have to listen to a sh*t from the Chinese govt.
In contrast, from the HN-featured article about finding the Beagle2 probe on Mars:

MRO's data confirms that Beagle landed just 5km from the centre of its targeted touchdown zone.

5km, and it was considered a bulls-eye accurate landing.
Not as simple as that.

Though federal benefits cannot be denied to married same-sex couples, state benefits can be if same-sex marriage isn't recognised in the state.

This still presents some headaches for some people and even the most well-meaning of employers.

For instance, imagine if you have a same-sex couple living in a state that doesn't recognise SSM (say, Wyoming) but who married in a state that does (Washington State). One of the two is working for a company just across the border in Washington State, but the other doesn't. Now imagine that the state provides health coverage while a person is unemployed, but it doesn't cover people whose partner's employer provides healthcare. Is the employed partner's health insurance liable for treating his unemployed partner or is the state liable to provide coverage?

What about when a couple is travelling? Is a gay partner covered by their partner's health insurance when visiting a state that doesn't recognise SSM? What about states that have civil unions rather than full SSM?

In Britain, it has been discussed a fair bit this week that even though since 2004 we've had civil partnerships which are supposedly "marriage in all but name", gay people in civil partnerships are still not getting fair treatment regarding pensions. As an openly gay man who might as some point want to get married, I've followed the news and discussions around the legislation on same-sex marriage in Britain fairly closely and I still don't know what the situation with pensions is, but apparently it's still broken.

I think things will be in a bureaucratic mess for a while. It'd probably be easier if it could be legalised across the whole country in one fell swoop... but that might just be wishful thinking on my part.
Software developers sought to design and implement high-performance code for massively parallel special-purpose supercomputers. Our ANTON® supercomputers, which combine cutting-edge ASICs with proprietary software, speed up molecular dynamics simulations by orders of magnitude and are designed in part to fundamentally transform the process of drug discovery. Successful hires will join an interdisciplinary research group pursuing an ambitious, long-term project aimed at achieving major scientific advances in the fields of biochemistry and molecular biology.

Relevant areas of expertise might include parallel programming, embedded systems, multicore and GPU programming, machine learning, numerical analysis, optimization, the analysis of algorithms, high-performance distributed computing or architectural simulation, but specific knowledge of any of these areas is less critical than intellectual curiosity, versatility, and a track record of achievement.

We are looking to add innovative contributors who share our commitment to fostering a stimulating, positive, and collaborative work environment. In addition, we strive to support the personal and professional needs of our team members by offering generous benefits, opportunities for community engagement, and a variety of learning and development programs. We will consider candidates at all levels of experience.

To submit an application, please use the link provided below:

https://apply.deshawresearch.com/careers/Register?pipelineId...

D. E. Shaw Research is an equal opportunity employer, dedicated to the goal of building a diverse workforce. We embrace diversity along all dimensions, and respect and value the unique qualities, perspectives, and identities of every person in our group. We welcome inquiries from all exceptionally well-qualified applicants, regardless of race, color, nationality, national or ethnic origin, religion or religious belief, caste, gender identity, pregnancy, caregiver status, age, military service eligibility, veteran status, sexual orientation, marital or civil partner status, disability, or status in any other category protected in this regard by law in any jurisdiction in which we operate.
I just bought the set of 10 (5 of each) once I read that they/he donates a book to libraries/school/hospitals for each book purchased. I am really excited to give these to my nieces and nephews!
How does Android domination in China lead to domination in American and European markets? For that is what’s needed to “win,” otherwise here there will still be a split market.
Oh, well if they're equal, then that means this is a perfectly proportional and appropriate response.
You might benefit from considering the stoic position on awesomeness. The logical conclusion of cynicism IS an embrace of the "oceanic awesomeness" in that you learn to appreciate all that is now because it will end/leave/die/fail. To disengage or lose hope because of this fact rather than to embrace and engage is a mistake.