skysight-inc/HackerNews huggingface dataset:
You want know what my biggest gripe about the LIBOR scandal is? The fact that the fed chose the LIBOR as the market rate in the first place, effectively ceding a huge amount of monetary control to a set of private bankers, but not only that, ceding that control to the private bankers of another country, and not only that, but they knew the rate was being manipulated no later than 2007, and stuck with it and said nothing anyway!

I think the fed needs to be audited and the Federal Reserve Act should be gotten rid of and the power they have should rest with congress as the constitution states it should!.

Also, I think this is the most important part of this article: "who in turn were acting on instructions from the Bank of England." So the two top guys in the bank are secretly being prosecuted, and we don't know their names, but what about the Bank of England? Any prosecution against anyone there?
> Wouldn't you still have to at least redeploy the app to the phone if you change the JS?

No, that's the beauty of it. All you need to do is shake your phone and tap the "Reload JS" option. Those JS files are served by some sort of a server that starts up on your dev machine when you first deploy the app. See https://facebook.github.io/react-native/docs/tutorial.html#d... (search for "reload js").
the iSRG root is not in FF[1][2]...you're visiting the http version of that URL.

1 http://idzr.org/y1pg

2 http://idzr.org/ee91
they didn’t mind linking out to International Herald Tribune, though
Obviously people still buy them, otherwise they wouldn't continue to sell them.
Most web developers do not, which I believe is the target for these frameworks.
Perhaps this speaks to the weakness of the government's case.

I don't know how long these gag orders should remain in force, but they clearly need to expire at some point, and 11 years is clearly long enough.

I hope other NSL recipients are emboldened by this outcome to file similar suits.
Actually mine asks for it on every occasion almost. I know it sounds silly, but I type my master password with lightening speed now so. :D
The Sustainability Solution to the Fermi Paradox (2009)
That's fair - i just make the distinction because there's a difference, imo.

In the case of `go get`, there is no preconfigured package, it's akin to a pull and make. Because of that, `go get` tends to be targeted at Go developers. Unlike Python/Ruby/etc, typically only Go developers have the Go compiler at hand.

I mean, i'm in a similar camp with the OP (that you replied to), i don't like installing a runtime just for a specific package. But i typically look at projects that use Ruby as targeted for Ruby developers - not me.

Go is slightly different though, because the compiler is mainly for developers. You don't have to know what Go is to run a "Go binary". So, it's worth an asterisk. That's all i meant :)
Similar: https://whatsonmyblackboard.wordpress.com
wow, we can expect whole lot of mobile apps then? There must be 10x web developers as mobile developers, at least?
Ah, that is a bit misleading. When it says "just click the link," it's referring to the process for installing the root certificate.

It should read "specifics will depend on your browser. In Firefox, just click the link [to the .der file, and you will see a prompt allowing you to trust it.]" It looks like this: http://imgur.com/dzC89xI

Without importing the root, Firefox absolutely distrusts https://helloworld.letsencrypt.org/, and will do so until Bug 1204656 is marked RESOLVED FIXED. :)
I had the same reaction -- what's the practical value here that makes it news?

One possible clue is in this quote: "[Cannabidiol] production from plants is a bit complicated." This might turn out to be by far the best way to obtain pure cannabidiol (and other cannabinoids).

I suspect that the long-term goal is to demonstrate new chemical synthesis techniques of interest to the pharmaceutical industry. The choice of THC (& hydrocodone) as an endpoint might have been somewhat arbitrary.
That ship has sailed years ago. And now we have EV certificates to deal with that problem.
It’s a concept — and in the automotive world a concept might as well be vaporware because most of the time the final product is nothing like the concept — and won’t be coming out until “early 2018.” By then, if things go smoothly for Tesla (they’ve had to delay both the Model S and Model X by several months), the Model 3, which should be much more affordable than this concept, would’ve been on sale for a few months.

I was skeptical about Tesla when the Roadster was announced and I never though they’d be able to pull it off. I should probably curb my skepticism about this announcement as well but judging by the previous such announcements from the automotive world, I remain cautions.
I think adding "Limit: One rental per day" would have solved this problem.
We need to demonstrate proper issuance under our root and gain confidence in our live systems before getting cross-signed. Issuing without a cross-signature for a bit is how we do this.
Your land didn't depend on any other land in order to be created, for one thing. If you want perpetual copyright, go live on a deserted island and work without any outside influence.
I think you're right. I'll just do this.
Apple Leaves 'Rootpipe' Backdoors in 3 per Cent of All PCs on the Planet
Apixio, Inc. (San Mateo, CA.) Is in Search for Front End Developer
Job Description
Front End Developer

Passion for creating great web application software a must
Primarily a browser side developer though back end experience a plus
Demonstrable experience and ability to work within an engineering team that values great code and awesome tests
User Experience design ability and common sense is valued
Flexible and able to adopt our frameworks (we use Angular)
This position will be creating production level code but willingness & ability to quickly prototype a plus

Culture
Fast growing and fast moving startup culture
Values great teamwork
Values and celebrates great work
Values fun always
Values learning and sharing of experiences

Standard stuff: snacks, catered lunches, weekending wind down, company outings

Musts
Browser mastery
Knowledge and experience in recent browser frameworks (we use Angular)
Solid product development and engineering skills
Awesome personality

Nice to have
wicked good github account
can school us in how Javascript can change the world
spectacular backend skills

Interested in this position? Please submit your resume to careers@apixio.com
Because if people are required to type in a complex password every time they use LP, then people will choose short simple passwords. It's a tradeoff between security and ease-of-use.
Why Cant Commercial Airplanes Go Faster? (2012)
> JMAP server implementations probably will require a good database, not just a dumb FS like in remoteStorage.

To do JMAP well you need to be able to calculate change sets, which does mean a database, though a fairly light one. I think you could do a server without delta updates by always returning a cannotCalculateChanges error in response to getUpdates calls, but it would be very inefficient on both the client and the wire.

> However, I would like to collaborate wherever possible.

Sure! Best place to start is probably the jmap-discuss list:

https://groups.google.com/forum/#!forum/jmap-discuss
Because the iPhone is sold worldwide, and this makes it more affordable for the middle class of India, China, and other developing nations
The danger is not that the Chinese might actually starve to death in the near future, any more than Germans would have during the 1930s. The risk is that a developed country able to project military power could, like Hitler’s Germany, fall into ecological panic, and take drastic steps to protect its existing standard of living.

Silly, obvious military-industrial-complex-sponsored scaremongering is silly and obvious.
This is the feature to store the master password, so you don't have to type it in each time; you can just log into Lastpass automatically on that device. (Not a great feature for security!)
Zip ties still wind up with wires running across my desk, and they have the unfortunate side effect of nailing everything in place with railroad spikes.

I have a similar problem with my stereo. Once you've got all those random pieces of equipment hooked up (Roku, Blu-ray, cable box, VCR, turntable, iPod, preamp) you've got a snarl of epic proportions.

Heck, just the turntable needs 4 cables. It's madness.
It's amazing that it takes a free provider to make things simple:

https://letsencrypt.org/howitworks/

I'd actually pay more than I do now for SSL certs to get that kind of simplicity.
I am my IT department, and the only other individuals in my building are my family. ;) But in general I agree: local-only exploits are still a significant concern. (Just not as bad as remote ones.)
Never underestimate the power of creative lawyering.
The major problem with this is that the IETF validation working group hasn't come up with a definite procedure for deciding what the apex of a domain is, and how to validate control over all subdomains above it yet.
> YouTube's process is not actually DMCA, it's a separate but similar entity following YouTube's own rules and policies

This hasn't been true for three years now[1]. First stage of ContentID is within the ContentID system. After that it's just normal DMCA takedowns.

[1] http://arstechnica.com/tech-policy/2012/10/youtube-finally-o...
I am no longer able to do dev work on a laptop, because I am used to having a BFM 9000 4k2k monitor which I dearly love :-)
They won't support those on launch?

Altough because of SNI (https://en.wikipedia.org/wiki/Server_Name_Indication) the need for wildcard certificates has greatly diminished.
The only thing not quintessentially conspiratorial about it is that everybody knows about it and believes that it is actually happening.

It is not like currency minted by the private sector. That would be more akin to futures contracts settled by physical delivery or prepaid service contracts. The private sector has to back up its currency with actual goods or services. If you issue hemp futures, you had damned well better be a hemp farmer and insure your crop, and if you issue hemp scrip, you'd better have some actual reserves of hemp in your warehouse.

All that is backed by something, even if it is little more than a believable promise.

The promise that backs fractional reserve is that you can have your cake and eat it, too. If you make a deposit, you can withdraw 100% of it at any time, even though they will immediately lend 90% of it to someone else. That someone else will then bid against you for the same goods and services, using exactly the same money you are bidding with.

Lets say you deposit $100. You want a doodad from Jack Handy. Joe Blow also wants that doodad, and he has $0. But the bank manager is his brother-in-law, so he can qualify for a loan of any size. Ordinarily, you could get the doodad for $50. But Mr. Blow starts a bidding war with you, using your own money, and the final price is $60. If you win, you write a check for $60, and Jack Handy deposits $60. The bank has the same amount in reserves, and can issue the same amount in loans. If Joe wins, the bank lends him $60 of your money, writes a check for $60, and Jack Handy deposits it. The bank still has the same money in reserves, but has promised to pay the same $60 to both you and Jack. Thanks to the trick, you effectively lost $37.50 (100x60/160) for the doodad you didn't get, Jack effectively lost $12.50 ($50-37.50)--surprise! $60 of lender-inflated bank credit is worth less than the $50 in cash--and Joe is now paying the bank rent on the doodad.

| before deposit || after deposit || after Joe buys |
| Cash | Credit | Debt || Cash | Credit | Debt || Cash | Credit | Debt |
----+------+--------+------||------+--------+------||------+--------+------|
You | $100 | $0 | $0 || $0 | $100 | $0 || $0 | $100 | $0 |
Jack| $0 | $0 | $0 || $0 | $0 | $0 || $0 | $60 | $0 |
Joe | $0 | $0 | $0 || $0 | $0 | $0 || $0 | $0 | $60 |
Bank| $0 | $0 | $0 || $100 | $90 | $100 || $100 | $30 | $160 |

The are not creating money out of nothing. They are creating credit out of their own debts, and screwing everyone else over hard in the process. They are literally the only winner in the above scenario.
My understanding is that Mozilla is primarily just a sponsor of ISRG, the non-profit behind Let's Encrypt. Some of their sponsorship includes dedicated engineering time, but LetsEncrypt still has to pass all the same audits and requirements as any other CA, as defined in the Mozilla CA Certificate Policy at https://www.mozilla.org/en-US/about/governance/policies/secu....

Mozilla's not a nepotist with regard to its root store. :-)
Makers' Schedule
As I also posted above, you're correct and Youtube falls back to the usual DMCA takedown procedure[1]

[1] http://arstechnica.com/tech-policy/2012/10/youtube-finally-o...
I agree, zero substance in this text, as expected from a newspaper article. The problem of newspapers is that they have to churn out articles regardless of what's happening or if anything is happening, which is in stark contrast to post-mortems and compilations of knowledge that were produced based on information being there that is then followed by a need to be expressed, rather than the other way around.
Yeah I got that reading the full post by the researchers. I am surprised it's even offered.
Win a free new car – just show Intel how you'd hack your existing one
Hey Hacker News,
I am the original author of this article on the Cimation website.

A few months ago I published a more detailed Whitepaper in the SANS reading room that provides a working data diode (using off the shelf parts) and PowerShell code that will transfer files unidirectionally as a proof of concept.
https://www.sans.org/reading-room/whitepapers/firewalls/tact...
It talks through the challenges of implementing a data diode on an OSI layer basis.
I hope you enjoy it and I would love to hear your thoughts.
I agree. It doesn't sound so much like an actual vulnerability in Lastpass as much as it is a reminder of how crypto works.
Sure, when the qualifications have anything to do with the job. When you apply a test to applicants, if it happens to have a bias that touches protected groups you had better have a very good argument that it relates directly to core job requirements or you are leaving yourself open to a massive lawsuit. Which might happen anyway.

Plus all the circumstances where you must make reasonable accommodations even if it has some impact, as long as they can still do the job.
But Relay was already announced a few weeks ago, right? What's new with this blog post now,?
Why do you assume women aren't associated with criminal activity? It's not uncommon for women to get busted running drugs.
Doesn't ownership of domain.tld also imply ownership of *.domain.tld?
A really cool feature I love about 1Password is that you can open up the `agilekeychain` file in a web browser and unlock it to view your passwords right there without the application. [0]

One of the few unique passwords I remember myself is that of Dropbox, so I'm always able to access my passwords this way from anywhere that has a web browser.

I don't know if this would have helped your particular situation (not sure if you can export from this stripped down interface), but it gives me peace of mind that if the software itself ceased to function, my passwords would still be accessible.

[0] https://support.1password.com/guides/mac/1passwordanywhere.h...
Sure, creative works may be influenced by other creative works, but those are also protected by copyright and bought and paid for. I don't see how your argument justifies anyone else having rights to your creative works.
>Rose gold is not always the inevitable elemental precursor to populist revolution.

Rolls eyes.
yeah

> Facebook Ads Manager is built entirely using React Native.

https://code.facebook.com/posts/1014532261909640/react-nativ...
iMac?
10% of Americans over 12 has to be, what, 20-30 million?
For the time being, it's DNS registrars who define who is allowed particular domain names, and DV CAs just try to draw the connection between what the registrars have said and the server you're visiting at a particular moment.
Amazingly slow, all page movement lags, even closing the tab requires some patience.
It would have physically existed (just as the artistic creation would have had a platonic existence), but it would have no economic value unless people could use other land to get to it, so it seems the two are the same in this respect.
I have zero native development experience on any mobile platform and write apps abstracted away in Scheme https://github.com/part-cw/lambdanative/wiki/Getting-Started

After you write/run a lot of tests to make sure the app does what it's supposed to (there's paid services for this kind of testing too) http://googletesting.blogspot.ca/2013/08/how-google-team-tes...

This React abstraction can use Chrome Developer Tools for debugging though, that's pretty awesome.
EV validation will have a marginal cost because of the offline interactions. DV can be done at almost no marginal cost. That's why Let's Encrypt can exist at all.
What data or study do you have to backup your baseless generalizations?

It may be a generalisation, but it's pretty accurate generally. — [citation needed]

The rich won't envision a future with less (or more) poverty. — [citation needed]

White men are less likely to imagine a future with full gender equality and black liberation than black women are — [citation needed]

People living in the West will think less about the rise of the rest of the world. — [citation needed]
You keep saying the word "broken" when nothing is broken at all, just the certificates are only useful in limited contexts.
Dude I needed you when I was working through my Calc 2 stuff. I didn't ever see that definition as a route to use. Way nicer than memorizing the unit circle which eventually translated into "knowing" the answers to the derivatives and integrals.
You are pattern matching very loosely. None of the work suggests any quantum phenomena affecting behavior. The papers go out of their way to reject that idea in detail.
> I don't see how your argument justifies anyone else having rights to your creative works.

Considering that they are intangible, I think you'll have to justify your exclusive rights to your creative works and why the government should enforce them. Fortunately (in the US) the constitution has you covered, and notably does not root it in an abstract right of ownership but as a means toward "the progress of science and useful arts".
While I too would like to see wildcards, doesn't the fact that you can programmatically obtain a cert for a subdomain obviate most of the wildcard needs? Sure it's a bit more difficult but if your service has some form of sorts to make a subdomain work for a specific word, surely it can request the cert at that time. Having said that, obviously keeping track of only one cert and not having to build this into your apps is much more preferred.
Hi,

So do I, am a professional and have to study constantly. But it does not bother me to be called "ninja", as ninjas are more a compliment than anything else. What's your point then?

And btw, as far as I know, "ninja" is not a trademark by itself, so "law ninja" does not relate to "findmyninja" which does not relate to many other terms. Plus, its register is country based, not universal.

I'd love to hear your considerations, but please, with proper words, i.e., cutting off the bad words.

Thank you
You can't afford to pay for every creative influence you've ever had. Neither can J. K. Rowling or Stephen King.
It depends on where the item is posted. If it's your own video on your own bandwidth than possibly. But on Youtube, you still have to agree to the Youtube Terms of Service which probably includes a provision for takedown or re-monitization via automated means.
Does anybody know if there is any protection built in against MITM or DNS poisoning attacks?

It feels like this makes network hop security far more important. If I'm able to insert a MITM or DNS poisoning anywhere between where letsencrypt.org's servers are and where it thinks the requesting server should be then I can generate a false certificate.

For example, Amazon's DNS resolves for letsencrypt as 1.2.3.4 which routes along a set path - say 2.3.4.5 and 3.4.5.6. To verify that I control amazon.com, letsencrypt is going to try and fetch http://1.2.3.4/something (through DNS resolving). If I can get MITM access on 2.3.4.5 and pass back /something to the request, letsencrypt is going to generate a certificate for me that I can use to say I am amazon.com for the entire world.

Is there any protection against this built into letsencrypt for this? Maybe checking if amazon.com already has https:// ? Although I'm not sure if there is any way to get around a DNS poisoning attack...

In essence, this seems to mean that you can take a single successful MITM and turn it into a globally authorized MITM. Right?
That's what Domain Validation (DV) is for and what most less-expensive wildcards use.
> I guess I'll just stick to remoteStorage and some ics files in it.

Well that was all you needed to begin with, wasn't it? As far as I can tell your use-case could probably be satisfied by rsync alone... might be another option.
I was doing a medical examiner rotation in the early 1990s and a woman (not a pathologist, some kind of advocate) gave a presentation in which she asserted that this set of findings is always shaken baby. At the time it struck me, how could you possibly no that when it is impossible to test your conclusion against the facts in almost all cases. Pretty much every discussion of forensic science ignores that. It's pretty scary. Instead of scientific rigor you accept the expert who states her opinion most emphatically. Why did they never cross examine about sources and methodology? Is it not allowed?
Yes. But it also makes it easy to create components that do fit the platform, thus "the issue is the developer."
"Looking In
A passerby on the street peers into the galleries, providing a sense of scale. "

heh. even on that central street, i doubt there will be anyone on the side walk to look in. and the small holes make it impossible to look from the car, where all L.A. display windows are looked from.
The question isn't why should society have any rights to an artistic creation, but why should a producer of non-material products have the right to inflict government violence on a third party who is using that product.

The answer for material property is that the use of material goods is usually exclusionary: one person using it means another person not using it, and creating a protocol to govern use and enforced by a third party leads to less violence over it.

The same isn't true of intellectual property: as productivity growth took off in early modern societies, those societies that provided for intellectual property outcompeted those that didn't, as it provided an incentive to create a newly valuable good. But it's not trivial to say that "intellectual property forever!" is utility maximizing--there's a balance to be had between the public interest to incentivize the creation of new goods, and the public interest in lowering the cost of those goods.
Did anyone find a "Sponsored" label somewhere around the article, or is it not obligatory in the US?
Ask HN: Niche Markets Worth Targeting with a Job Board
Hi,

I'm building a Job Board, & was wondering whether I'd reach a larger market if it focussed on 'Remote' work. And I was wondering if people here could validate that & suggest pertinent subcategories for 'Remote' work. Programming comes to mind first, but I also thought about writing & editing work. What else could I focus on?

Thanks,

-c
Your ideas are intriguing to me and I wish to subscribe to your newsletter.
I recognized it immediately but each math teacher I had in college used different notation for the definite integral. I really did think it was common. I need to study more math.