skysight-inc/HackerNews huggingface dataset:
Alamo Drafthouse showed me a cached page from CloudFlare one time, an error page another time, and a Star Wars specific site another time but part of it ("ticket droid") was still loading.
Huge win for them - will help push SSL/TLS on everything. Can't overstate how important this is for the web. Now to get the word out to everyone!

edit: initially said SSH. I blame the plane wifi
> and we’re excited to be one big step closer to bringing secure connections to every corner of the Web.

What steps are left now? :-)
"This website does not supply ownership information."
Since debugging is over a TCP connection, you only have to start the nodejs process with the debug flag, and then plug the address and port into whatever debugger you're trying to use.
I was unable to connect using a vendor-specific browser on an old Android 4 device. Is this a limitation of the LE cert, or a cipher suite issue with older browsers, or something else?

Really looking forward to spreading HTTPS far and wide.
This is one of the reasons I'm pushing Go at work.
I've had to maintain our current apps which have received very little maintenance work during the years and I wish Go would have been present when they were made.
http://orgmode.org/
Bank’s severance deal requires IT workers to be on call for two years
An Introduction to Morphic: The Squeak User Interface Framework (2000) [pdf]
From what I can tell, they're polishing their CA software (Boulder), and getting the rest of their infrastructure and policies ready for GA.
If you haven't tried our Sublime plugin recently, all I can do is urge you to give it another shot. My primary editor is Sublime Text 3, so I know how bad it used to be. If you do find issues, please report them! We can't fix bugs we don't know about.

When compared to screen sharing, Floobits has significant advantages. The biggest is that you don't have to use the same editor. Atom users can pair with users of Sublime Text, Vim, Emacs, etc. Since everyone gets to use their favorite, highly-customized tools, it makes switching "drivers" much more pleasant. Another benefit is that you don't have to stare at the same code in lock-step. People can "fork off" and look at separate files. I find it useful even when pairing in person. I can use my own themes, my tiny fonts, my Dvorak keyboard layout... all without bothering anyone else. Likewise, anyone pairing with me can use their own esoteric dev environment without bothering me. In short, it eliminates many of the compromises that pairing typically forces on devs.
Tech Startups Feel an IPO Chill
> > I don't see Bitcoin dying unless (until?) it's discovered to have an incurable security flaw.

> AFAIK, that's not possible.

That's an incredibly stupid thing to say. Please don't comment on topics you're ignorant on; you're spreading misinformation.

Obviously the hashing algorithm is one of the stronger points in bitcoin's implementation; that's completely irrelevant.
We only issue DV (Domain Validation) certs. DV certs don't include ownership information.
"We’re pleased to announce that we’ve received cross-signatures from IdenTrust"

How is this beneficial for IdenTrust?
You can already configure OpenSSL to delegate the engine to CAPI which means that OpenSSL mostly works as a "shim".

[engine_section]
capi = capi_config

[capi_config]
engine_id = capi
dynamic_path = c:\\openssl-win32\\bin\\capi.dll
init=1
> lots of young people were coming back from 'Nam strung out.

It's quite possible that we saw a bunch of boys coming back "strung out" from the most psychologically damaging war in the country's history, not smoking pot.
RushCard Locking People Out of Accounts, Putting People on Hold
True, but there are other factors in who eats fried chicken than taste. While I don't have statistical evidence, I'd be surprised if black people didn't eat more fried chicken than white people (in the US). As I pointed out, this is likely a function of poverty, not skin color, but poverty and skin color are correlated.
Checked with a sysadmin. I'm pretty sure it's a ciper suite mismatch. The helloworld site is configured with "modern" settings from this page:

https://mozilla.github.io/server-side-tls/ssl-config-generat...
The article makes it sound like all company revenue comes from tubes sites. The company also owns hundreds of pay-to-access original content sites (ever hear of Brazzers?). This company was not the first to do tubes; they had to adopt the format because competitors did so first and their revenue suffered. Once again, a large part of the problem is users opting to not pay if someone else will illegally put it up for free. You want free tubes to go away? Stop watching tubes and go pay for a monthly Brazzers subscription.
" when I hear college students complain that a teacher "isn't a clear lecturer" or "didn't answer my question well," my tendency is to say "there's a book and an Internet out there, suck it up and get to studying, buddy,""

I get that and mostly agree with it. Exception being the people who learn best with the help of others (esp face-to-face). They don't learn the hard stuff well with text but they're valuable once they learn it. The other exception would be the topics where having a pro at hand can greatly simplify the learning process mostly due to nature of topic itself.

In most situations, you're totally right. People just aren't putting in effort. I think the stuff with lots of historical baggage of unknown usefulness seems like unjustifiable effort to many in IT. So, I don't throw them into that category if it's such a thing rather than their own skill set. Now, if they didn't know essential networking skills and griped that nobody told them, I might link to your comment followed by a back hand.
Related discussion: https://community.letsencrypt.org/t/what-is-the-business-mod...

It establishes IdenTrust as a more influential leader of SSL certificates on the Web. There are other ways CAs can make money, and this extra publicity will probably serve them well.
Never, really. When you've got ten to the forty something atoms jiggling up against each other on picosecond timescales, the difference between a rare event happening every million years and one that happens every billion years is pretty small.
I'm pretty sure it's a bad idea.
Can you consume heroin without getting addicted and without necessarily wanting to up your doses?
Taking a guess from the SSL Labs report[1], that site appears to be using the modern config from Mozilla's toolkit[2], which limits it to browsers from the last few years.

1: https://www.ssllabs.com/ssltest/analyze.html?d=helloworld.le...
2: https://mozilla.github.io/server-side-tls/ssl-config-generat...
Neither does https://news.ycombinator.com. That's the kind of certificate most websites have now.
Scoot Quad – San Francisco’s New Way to Ride Around the City
I don't see how that would destroy the clipboard any more than having a permission dialog when an app wants to access my camera? Every social app out there wants to access my contact list in the name of "cooperation and interoperability." I like having the choice of whether or not they get to access that data.

I wouldn't mind if I opened an app and got a one-time dialog "This app is trying to access your clipboard. Do you want to allow it?"
I think 2009 FD is the worrying one. It's incredibly dark, with a surface albedo of just 0.01. That means optical surveys would struggle to find it in deep space, even when it's half a kilometer wide, even with [0] the LSST telescope in the 2020's.

This is why some people want space-based infrared telescopes for NEO surveys [1].

[0] http://arxiv.org/abs/astro-ph/0701506

[1] http://neocam.ipac.caltech.edu/page/whyinfrared
That seems like a distinct possibility. If Mindgeek can aggregate the majority of adult entertainment eyeballs on the internet, then studios basically become Mindgeek MCNs. In some ways that may be an easier transition than it would be for Hollywood studios, in so far as production costs are probably cheaper by several orders of magnitude.
My objection is that Wiz Khalifa's bid for attention worked, despite the fact that he had nothing of value to say. I'd hope that if someone wrote something of no value it wouldn't make it onto the front page of HN.
I think you meant SSL/TLS
Eventually, yes.

Unfortunately current vision systems don't cope well with obscured roads, or even precipitation.

My guess is that'll take changes to infrastructure. With snow packed roads you simply can't see lines on the road and so need some other type of telemetry.
The reality is that 70% is marketing and 20% is customer service and 10% is product. We could argue the actual percentages, but the majority is getting the word out, the next part is taking care of people and the least part is the actual product.

I have been part of products that were in all ways were superior to others but failed miserably either from a lack of marketing or a lack of taking care of the clients. But I have never been part of a product that had superior marketing and customer service that failed. Not that I think it is impossible, it is just that you get so much opportunity to succeed that it would take a serious effort to fail IMO.
The Very Short Tale of Unix's Tee Command
Can anyone who knows more than me say - is this the beginning of the end of the SSL cert selling business? Is there still value to buying an expensive cert from another vendor?
Insurance if something happens, beyond that nothing.
Rackspace Forges First “Barreleye” OpenPower Servers
But, you did leave.

Paying people more doesn't fix the culture clash issue.
> script SSH sessions

Using TCL?
Sorry I meant v2. I am using v1 but as I just use it for basic formatting I am not really keen on the high upgrade price. I do think they have done great work with the editor though. If the editor was important for my app then the price would be much less of an issue.

Pasting and image handling is probably the most important features for my clients. Thx for the info.
I would assume that registration would be free, but now that I think about it I wonder if it will be that way (or stay that way). It seems like this may be less about the "protection" of people and just another revenue source for the government.
It bothers me that you think people need to be protected against being misled by the title of a professional article that is not link-bait in context. It really lowers the bar for expectations of people's intellect.

> and by leaving that fact out the publication likely gets more exposure.

No, that's just how articles in professional journals get titled. This is not a buzzfeed article culled from secondary sources. There is not a single person interested in neurology (the journal's audience) who would be misled by that title. I haven't been in neurology for 11 years, and I knew as soon as I saw the title that the article would be a single-patient case study.

The last thing professionals need is to have to dumb down their communications on the off chance a layperson might stroll by.
I'm pretty sure a lot of companies would choose to deal with these sorts of internal matters without involving the law.

When the NYT times story came out I remember thinking it sounded a bit spinny. "Let's find an angle" is symptomatic of a desperate click-baity news media industry. NYT isn't as guilty of this as other outlets by a large margin, but the story had what I perceived as fabricated bite.

At the time, I wondered if any Amazon employees would come out defending their employer. Took me 5 seconds to find something...
https://www.tbray.org/ongoing/When/201x/2015/08/16/Working-a...

Are there others? Who knows, I don't care enough to search!

I'm not interested to take sides, but in big companies it's more likely there's pockets of problems, rather than company-wide problems.
https://news.ycombinator.com/item?id=10416141
Chrome says they don't supply Certificate Transparency information. Is this something they should be doing?
Running Go Applications on Azure App Service
Could somebody clarify: LetsEncrypt allows anybody to create certificate for any domain, so would not that allow anybody to create MITM certificate for any such domain?
Slow compilers waste developer time.
The US Civil War didn't fail due to a lack of equivalent armaments, just to make that very clear.
Let's Encrypt is also limited in that it issues Domain Validated certificates only. They aren't planning on issuing EV certificates (the "green address bar").
Why python for the client software if you obviously already have Go experience in-house? Using python means you have to run all this virtual-env crap in a bash script, apt-get install a bunch of crap for setup and not support Windows. Seems like using a (nearly) dependency-free Go application for the client as well would have been a no brainer. Was it just a case of having more access to python devs, or were there other technical reasons? Anyone know? I bet this has been asked before, but not I'm turning anything up with google.
That's a good engineering project. Lucky team working on it!
I am amazed that this hasn't been successfully challenged via the "poll tax" argument.
The more things change..., from:

https://github.com/PowerShell/Win32-OpenSSH/wiki/Deploy-Win3...

"If you need key-based authentication:

Install key-auth package

run setup-ssh-lsa.cmd

reboot"

Reboot?

And this gem: "SSH daemon needs to run as System to support key-based authentication".

Which means, either use weak authentication, or run the daemon as system. I don't even understand why, it's not like the public keys are particularly sensitive (certainly much less sensitive than being able to check passwords for validity)?
> I don't know where I was unclear.

I don't think you were unclear. As respectively as possible (and I really do like your perspective and many of your other posts) I think the problem is that you were clear and wrong[1].

> it's that the darned addressing is too slow or
> there's too much of it

Generally, no. Current processors have two dedicated address calculation ports that each calculate (ptr + index*size + const) in the same cycle that the request is issued. Separately, there are almost always unused arithmetic ports such that one could easily double the amount of other arithmetic without adding any additional latency. Address calculation is not a significant performance factor.

> So, get to save on fetching and decoding all those
> instructions and much of the addressing arithmetic
> they would do

My argument is that these are almost never a bottleneck, and that removing them altogether will not produce a significant speed up.

> If electronically memory is still too slow, then have
> interleaved memory -- since the addressing is so simple
> and regular, the hardware implementation will know how
> to look ahead, much as in speculative execution now
> except there will be less or no speculating.

Recent generations have been 2-, 3-, or 4-way interleaved. 6-way is promised for a (I think) 2018. Hardware prefetchers are excellent at getting out ahead of just about any regular pattern. The issue is that most software is designed to require unpredictable access patterns, and thus is latency sensitive.

> And, in addition, might design the sending of read
> commands to main memory not just one at a time but
> as a list, boom, and with no more attention, waiting,
> synchronizing, hand shaking, the memory delivers all
> the data at all the addresses in the list.

This is essentially the 'gather' instruction that has been supported in the last 3 generations of Intel processors. It's a single instruction that sends out parallel requests for 8 addresses and returns 8 32-bit values with about the same latency as a single request would take. To an first approximation, it's never used[2] to advantage, because it's no faster than issuing 8 requests serially while being less flexible.

Mostly, I'm suggesting that hardware currently supports far more performance than we are getting, because modern software is still designed as it it was running on in-order processors with a flat memory hierarchy. I agree with you that C (and other) compilers could do a better job, but mostly I think the issue is with the mindset of the programmers who are making it.

[1] I find that clear and wrong however is almost always preferable to unclear and wrong. And I reiterate: I don't mean this as an attack.

[2] I love it in concept, and hope to show that it actually can speed things up on the latest Skylake generation, but until now it's been mostly a bust.
No, it allows site owners to create a certificate for any domain they can prove they own. Then, the certificate has to be installed on the server serving the site. Using it from any other server will cause browsers to reject the certificate.
This is something we entirely plan on doing, in fact we currently submit all issued certificates to a number of CT logs (which can be viewed here https://crt.sh/?Identity=%25&iCAID=7395).

Unfortunately the best candidate, at least for us, for supplying SCT receipts to end-users, via x509v3 extensions in OCSP responses, is currently not fully supported in Golang.
Let's Encrypt does validate that you own the domain, using certain "challenges" involving the web server, etc.

Their technical overview explains how it works: https://letsencrypt.org/howitworks/technology/
This is horrible. I'm wondering if they actually were hacked?
There is a decent chance your problem has been fixed by now - ggreer and I have used the Floobits plugin daily for the last couple of years.

On more than one occasion, a former Screenhero user has said exactly the opposite to us. Of course you are not the first to say Screenhero works better than Floobits, either. Both attempt to shoehorn collaboration into third party software. I have to laugh because neither side is lying. There are a huge number of corner cases for both products. If you are perfectly happy with Screenhero, keep using it.

Personally, I'm excited about our Atom plugin because it allows us nearly complete freedom over the UI - we can make the product that we have always wanted to make. Signing in or creating a new account can be accomplished without ever leaving the editor. Video chatting and terminal sharing don't require leaving the editor. We also get colorized highlights around remote editing specific to a given user and useful modal dialogs.
Why India's writers are returning their literary prizes
1) Unless you hold an FFL, this is unfortunately becoming illegal in some infringed-upon jurisdictions.
I can't speak for them obviously, but here's a Go ACME client if you're looking for one: https://github.com/xenolf/lego - we're using it in Caddy[1] to make HTTPS the default for websites.

[1]: https://github.com/mholt/caddy/commits/letsencrypt
As a condition of being trusted, LetsEncrypt has promised to do "domain validation" before creating such a certificate. Domain validation is usually done by sending an email to the technical contact in the domain's WHOIS records.
Turboprops are at the other end, where the turbine drives the propeller at much faster speeds than a regular 4-stroke engine would

You're mistaken. Prop speeds are comparable between piston and turbine engines. Bigger, slower moving props are preferable. When prop tip speeds approach the transonic region, on either turbine or piston power plants, efficiency goes south.
Look at the tech overview:

https://letsencrypt.org/howitworks/technology/

You can only obtain a certificate for a domain if you can validate that you control the domain. Their steps for that (place arbitrary content at an arbitrary URL they request, or create an arbitrary DNS record they request) are such that, if you weren't the legitimate controller of the domain but could do those things, you wouldn't need a fake cert -- you'd already have pwned it thoroughly enough to be able to MITM it in other ways.
> The body of research on caffeine's vitamin like health benefits is enormous.

Vague not-really-scientific claims like this make me immediately suspicious. People who make claims like this usually fall into one of two categories:

1. They're trying to sell something.

2. They're crazy.

I looked back through your post history and found this:

> Cannabis is de facto legal throughout the USA. I repeat: marijuana is in practice legal in America, and all these people talking about drug charges ruining lives don't know what they're talking about.

Yep, you're crazy.
>The little magnifier glass icon that shows you which CSS class/selector in what CSS file that ultimately decides the styling for a specific element and CSS property.

FML. I hope this is a recent feature, I have wasted so much time missing something like this while trying to reskin a fairly large web app.

I suspect that Chrome devtools is so good because Google has access to a large number of web developers within the company to directly talk to. Chrome seems to have a solution for all the problems that developers face. My recent experiences with Firefox devtools has been bad. Specifically Firefox was not displaying js files loaded dynamically ( through require() ) in the debugger even though they were present in the page inspector.
You should do a regular youtube search concurrently and remove its results from yours.
RingID Provide Host of New Features
India Tries to Electrify Without Creating an Emissions Disaster
After many years of trying everything, a few conclusions have greatly helped: only PLAIN TEXT, cross platform and date stamp every line item (add to your dotvimrc or dotemacs or js bookmarklet)

mindmappers? - bought and tried them all
cloud subscription notetakers - yep pretty much all

Best to have data close at hand - Oh nooos, everything is locked in that proprietary app I bought in the 90's or cloud service I threw 3 yrs in.

After years with orgmode and vimwiki, I went back to Firefox http://tiddlywiki.com/ + vim as editor with https://github.com/docwhat/itsalltext/

if you live in emacs then stay in orgmode or deft.el for speed
if vim, vimwiki

rsync is my friend
https://en.wikipedia.org/wiki/Auxiliary_power_unit
If you are looking for job like that.

Yo are talking like a programmer, not sure if OP is one.
From a programmer point of view - your option is much better.
From newbie - absolutely not.
I am also ex-AWS and frankly your description of the environment is the opposite of my experience. My experience was one of driven, hardworking, high-octane people working with a collegiate respect for one another under thoughtful, nuanced leadership.

Was it hard work? Check. 10-12hr days were my norm. They still are, now I'm a startup.

Is it a polarising workplace? Check. That internal culture is a strong flavour. And like many strong flavours, you'll either love it or hate it.

If I wasn't building something I felt compelled to create, I'd go back there in a heartbeat.
Not yet, because Let's Encrypt doesn't provide wildcard certificates as of now. This may change in the near future, though.

Also note that free single domain certificates have been available from StartSSL for a very long time, but this didn't destroy the certificate industry.
Incremental compiles have existed for quite some time.

Go is only unique in that it can do a complete recompile in very attractive times. The only hitch, of course, is that you sacrifice features known and loved in other languages for over a decade.
So… we’re all still waiting for the client, right?
Parable of the Polygons[0] is another example of mathiness, where math is used to dress up a political message. The basic idea is simple and intuitive: people like diversity, but also don't like to be in the minority (e.g. they would like a 60/40 ratio of people of the same race to them vs people of different races). But when everyone applies this logic then you get completely homogenous regions.

The mathiness comes through the fact that the simulation is nothing like real life (e.g.people care about far more than their immediate neighbors) and yet the claim is that tweaking the parameters of this model gives some intuition about the quantitative real life effect.

[0] http://ncase.me/polygons/
Pintsize – A Sass front end template