skysight-inc/HackerNews huggingface dataset:
"Culture fit" in this case appears to mean "don't say or do anything, no matter how minor or symbolic, that might be construed as a challenge to my authority over you".

i.e. it's a big fat euphemism.

Just say "no prima donnas" on your list of requirements. Most people will be able to read between the lines and know that you're looking for servility, fealty and obedience in your employees. I, for one, would be happy to screen you out based upon those words. I'm pretty sure you wouldn't like me, I wouldn't like you and I wouldn't want to waste your time or mine interviewing with you. Those three words would save us both a lot of trouble.
One of them is not like the other, and that's CloudFlare's free SSL, which is more like "half-SSL". You only get free encryption between Cloudflare and the user, but not between your site and Cloudflare.
Dutch police chief nominated for expert price because of 'Predictive Policing'
Well, we knew Let's Encrypt's rough roadmap for at least half a year now.
The Big Bang Theory (Perspiration Implementation) Summary and Review (Summareview)
CS183c Assignment #2: Tribal Stage
Here's a Google translate: https://translate.google.com/translate?sl=auto&tl=en&js=y&pr...

[..] To do this kind of predictions, the police need an enormous amount of data. Gathering information is an end in itself. The police is even working on a nationwide network of sensors "to forecast events in the near future" and "proactively act". If a citizen is different from the norm, he is suspect and classified as a risk-citizen, says criminologist Schuilenburg of VU University Amsterdam. [..]
So, Let's Encrypt doesn't support Certificate Transparency?! If there's one place where CT should be adopted, it's probably here.
That overview description lacks the security details that is in place to mitigate that specific attack. They described 3 tactics against MITM attacks in the last debconf.

#1 letsencrypt blocks any request for domains which SSLObservatory (https://www.eff.org/observatory) reports as having observed a certificate, and additionally require that you show proof of possession of the private key. Every domain letsencrypt has served will also be treated with this requirement.

#2 letsencrypt will use multiple paths through the Internet. They have not given the exact details yet (I would guess that they will take different path by AS numbers).

#3 There is a block list. I don't remember the exact method used here, but I think it was simply based on Alexa rank.
Interesting results. Thanks, I'll have to take a deeper look through the paper.

Cuckoo hashing seems to be the standard, but I still haven't seen concrete numbers comparing different variations or other schemes like hopscotch particularly for latency and throughput. Hopscotch seems like it might give better latency. For simple stuff, I've found that a good hash and linear probe generally outperforms other simple schemes up to roughly 50% load, but I honestly haven't really had a need to dig further into other schemes so far.
For the situations where a drone is flying autonomously or out of range of a transmitter; You could still use ADS-B type transponders to track it and avoid it.
Just a Brown Hand
general availability means a certificate, that is accepted by all browsers, can be requested and fulfilled. Right now the closest thing we have is a waiting list + very few https servers answering with such certs.
Or Python (http://norvig.com/python-lisp.html).
Pretty cool! Not something I thought would work so snappy on a mobile browser. I made a killing on Enron!
I just amended the blog post with a cradle to grave example of creating _oasis, .merlin and opam directory for any OCaml project.
Workflowy :) https://workflowy.com/

You can use either the app or the web version. Best TODO list I've seen so far (simplicity, ux,
etc)
>> big services companies in India have a lot of incompetent senior programmers who simply hate any kind of opposition to their authority, and you simply have to blow them to survive. I am fortunate to have never worked at one of these companies.

You seem to have strong opinion about senior programmers in big IT services company in India but you never worked in any of those. I served a stint in one of these and was surprised how talented some of the older technical folks were who also possessed domain expertise. Of course you won't find many but generalization without first hand experience is not fair IMO.
I truly appreciate the hard work Let's Encrypt is doing.

However, this is not free.

In return for getting an SSL certificate, your users will need to trust an organization to protect the secrets they share with you and vice versa. This organization has no economic incentive to do good for you or to do harm to you.

What happens when this organization is compelled by the TLA to give up the lucky charms, and there is no team of attorneys to fight back, and no billions at stake, and there is a gag order? And, given the rate at which a "free" SSL certificate will proliferate, these will be some valuable lucky charms.

This is not FUD. This is simply recognizing that "free" SSL certificates don't really address the issues that arise from centralized authority in a decentralized economy.
Multiple privilege levels
Not sure if the game lets you be reported to the SEC. Maybe you're a member of congress?
Hard Drive Inspector Pro 4.35 Crack with Serial Key Full Free
Most Popular Communities in Dubai
Quarq power meters help cyclists track their performance
Trademark Registration for Dummies
for plain time tracking im rather happy with https://toggl.com/
Point noted. Thanks.
Liberals form Majority Government
Promises:

* $200M per year to support clean technology.

* $2B for emissions-reducing Low Carbon Economy Trust.

* Unmuzzle Canadian scientists.

* $40M reinstated to Fisheries and Oceans.

* Repeal certain elements of Bill C-51.

* Electoral reform: no more first-past-the-post.

The last item is something that might never have happened under a Conservative government. The result of this election appears to be a forward step for Canada.
I don't think he was saying they acted poorly by announcing on HN, but that he would prefer to grant someone trust rather than have it forced on him before he even knew about it. Not an easy task for a functional web, but it would obviously be better if possible.
They are a separate legal entity, with multiple independent sources of funding and a diverse range of board members[1]. I'm not sure about degrees of independence, but I would say this satisfies my criteria. Are you arguing they aren't really independent of their sponsors?

[1] https://letsencrypt.org/isrg/
Indeed, here is a post which elaborates the connection :
https://news.ycombinator.com/item?id=8904182
The source for the client is here: https://github.com/letsencrypt/letsencrypt

However, their release schedule dictates when the service (yes, the client is part of this) is ready for use.

Until then you are waiting for the service to be available.
Implementing the classic Hammurabi game with AngularJS
Ethics are not subjective. People merely disagree on what the right ones are.

There is some optimal set of ethics which, if consistently followed, will lead to an optimal set of outcomes. We're not clever enough to figure them out, though, and so people will quite happily come up with their own, inevitably self-serving ethical systems in which "the things I want to do are right, the things you want to do are wrong".

Getting everyone to behave perfectly ethically is impossible, but telling everyone that their own self-serving ethical systems are perfectly valid is one of the worst things you can do.
This is not a spur of the moment announcement. Their timeline has been publicized all over the place
New wannabe CA Entity B can approach an established CA entity A, convince A to sign B's root or intermediate cert, and then B can forge browser-trusted certs for every SSL website on the net that's not pinned.

In this case, B is LetsEncrypt and is (hopefully) pretty solid, but that isn't always the case. Earlier this year, it became known that CNNIC had issued a CA cert to MCS Holdings (of Egypt), which then did bad things.[1]

The news that everyone is suddenly trusting a new entity B, whether it's some Egyptian IT firm, or LetsEncrypt, comes out of nowhere. Neither cooperation nor even awareness is needed of the major browsers' dev teams.

[1] https://googleonlinesecurity.blogspot.com/2015/03/maintainin...
Can the team leave the employer for another one, or is this another case of indentured servitude with a funny name?
A browser that fills a similar niche: NetSurf.

http://www.netsurf-browser.org/
http://www.netsurf-browser.org/about/screenshots/
> I need to learn more about those other systems, I might revise some of my opinions

I really recommend looking at Switzerland; U.S. on state level also has lot of direct democracy and similar tradition.

> the cost is higher but not limiting, so the result is that more of society's resources are redirected towards that

It's not a failure of democracy, it's absence of it. Some people have more power due to economic inequality.

> basic assumption is that of a population well-educated in the issues to be decided

This is not really an issue. Switzerland and places in U.S. (not to mention Iceland) have more than 100 year tradition in direct democracy, do you think back then the population was better educated? And the sky didn't fall, in fact these places are some of the most advanced in the world.

> And yet we accept this from companies and politicians, and we even turned it into a respectable occupation choice

I agree.

> people may be "pretty positive towards solving these problems" as long as it doesn't require any sacrifices from them

In practice, not always true. There have been some examples in direct democracies where people voted for e.g. higher taxes. As long as it is fair, people can actually accept it quite well. But it requires lot of trust in the society, which Eastern Europe countries, for instance, may not have. Good democracy actually produces this trust.

> At this point we really need someone to force some solutions on people

The problem is once you start forcing solutions onto people, you have opened a really bad can of worms. Lot of dictators had good intentions in the beginning, but somehow their "forcing of solutions" got a little out of hands.
2 life sentences to be correct
Whats with the anger? I found it to be an engaging experience. The animations must be minor as I did not even noticed them.
Yeah, the UK cannot deny entry to EU citizens, no matter how unskilled, so to make the number of immigrants more politically palatable, they're cracking down on non-EU citizens, no matter how skilled.

Easiest way into the UK is probably to naturalize in some other EU country first. I wonder where is easiest? Germany, Belgium, Ireland?
Definitely no foreign keys according to another post in this thread. Which is not something I want to go back to, however much I'd like this level of compression.
https://en.wikipedia.org/wiki/Forward_declaration
You protect your secrets with your private key. That organization is only assures that this particular key belongs to your site. They don't have access to your key. Users don't need to trust anything they don't trust yet.
Yeah, same.

My Nan looked at me in horror when I suggested giving up Sharepoint; she said it reminded her of Terence (her old cat, RIP)... and she thought I was joking when I suggested trying Slack. "But that's just Yammer" she told me when I described it. "Microsoft have got all the things I need, I don't need to use Dougal like you kids, besides, I like that Satya Nadella, he's such a nice boy"

My respect goes to the guy who manages to sell these Microsoft Enterprise Agreements to the elderly. That's some hussle.
Which is the whole value proposition of a CA. Without this, a website and its clients are vulnerable to MitM attacks.
Got stable release from Ubuntu repositories with apt-get.

Most of the websites work, but are visually broken. Google seems to be working okay.

But the speed is super. It is like Firefox, Chrome and IE are these big slow monsters and Dillo is the little hero running around them.

Dillo shows pages, other process them.
Wallybit: browser-based Bitcoin wallet keyring
Choosing a Build Tool – Babel, Browserify, Webpack, Grunt and Gulp
Regarding System User: https://github.com/PowerShell/Win32-OpenSSH/issues/2, it needs that right to generate user tokens
Can Team Time Tracking Improve the Way You Collaborate?
I personally argued with the W3C TAG against an HTTPS-only web for this reason. Tim Berners Lee, who heads the TAG, ceremonially speaking, argued against it, too, but on different ground. The browser vendor 'experts' on the TAG totally dismissed any and all argument against forcing everyone to use HTTPS. They were basically told by their employers (the big browser vendors and CDNs like Akamai) to make it happen. HTTPS is a rather costly false sense of security. Now anyone who wants to setup a website, for whatever reason, has to go thru some central authority in the name of "securing the web" (LOL) but it's just another way to control free speech and what people do with the web.
Create your own game with Intel Edison
> I'm not even aware of go compiling most of the time (it's typically under 1 second).

That's besides the point, codegen from extra on-disk files can only be slower than codegen without extra on-disk files, so "generics are slow to compile" and "go has generate" don't make sense together, yet they are used together to assert that generics are bad and anyway go has a replacement.

> go's build system handles these sort of things without a more complex workflow.

No they don't. If you're using go generate you have to run go generate. That's a strictly more complex workflow than not having to run it.
Sometimes teaching won't focus on failure modes that much.

They might teach you intrisnics of some outdated technology as if it was alive and give no hints on why you no longer see any of it around. Pure waste of time.

I had a course on IBM SNA like that.
Why would this make people turn to DIY kits? DIY drones also have to be registered.
Where's the short option?
It's worth noting that Akamai is on the board of the parent organization of Let's Encrypt.
So nicely done, would love to see the code on github thought
NetSurf: Small, fast, free web browser
What secrets are shared? Your private key stays on your server, the CA's private key on theirs...

The main thing that you trust (every) CA to do is to not issue a certificate for your domain to somebody else.
> and much harder on car engines, even ones designed for it (unsourced, but so my gearhead friends have told me)

Bollocks. The energy content is slightly lower, but there is zero harm to automobile engines. Your unsourced "gearhead" friends share a common misconception and prejudice against ethanol. There is absolutely no issue with E10 fuel in cars with model years as far back as the '90s, or even earlier. Very old classic cars may have issues with some fuel line components, but even there E10 will not wreck the engine. As a fuel E10 is extensively tested on gasoline autos. Two-stroke engines are another matter.

And 2001 and newer autos can run E15.
This is absolutely FUD, even if you don't intend it to be. By what mechanism do you suppose the TLA boogeymen could compel ISRG to give up their private keys, and how would a team of lawyers make one exempt from such mechanisms?

Let's Encrypt is the effort of a benefit corp (ISRG) run by people who care about security and privacy enough to bake it into the foundations of the organization [1]. I think this makes them more trustworthy than for-profit CA's, which have a history of misunderstanding the fundamental roles they play in the security chain, e.g. [2].

1. https://en.wikipedia.org/wiki/Internet_Security_Research_Gro...

2. http://www.computerworld.com/article/2501291/internet/trustw...
Mechanical or flash storage? Compression could give advantage on mechanical disks due to the reduced time spent on seeking, but I'm curious to know how they perform on SSD for which seek time is reduced to a minimum if not 0.
Duktape – embeddable JavaScript engine with a focus on portability and compact footprint
But it's made with flash :(
From a purely survivalist approach slavery is without a doubt a better proposition because it is nigh impossible to break away from poverty.

But lack of free and targeted internet is not poverty. Internet is already extremely cheap in India - cheaper than USA for example - and is easily available via mobile phones that are more ubiquitous than toilets!

To say that Internet.org is an alternative to no internet is not only disingenuous it is basically a mockery of 'them 3rd worlders...' as if they will never get internet without Internet.org. And that too for India? A country that has achieved more feats in technology domain than many of the first world countries (and before solving the problem of toilet)? It is hard to sell product to a level-headed person.

Not to say that Indian government is squarely going to reject Internet.org - Indian government - specially judiciary - is mind bogglingly corrupt - but it should be rejected.
2. They made the trip to your home to see if you will work with them.
4. By following their directions and giving them information they send you out to obtain, even if you think you "don't know anyone." You do. You may not "know" your followers, but you have contact with them. The agency will explain how to target people.
5. Grow house bulbs are specialized light bulbs for the growing of marijuana indoors. Ephedrine is precursor to methamphetamine.
What's the plan for supporting OpenSSH in the long run? Or is this just a one off port that will become stale after a few years?
I wish all C was written with such care as well. I just wish they had less pointer arithmetic, less one-character variables and was commented, you know, at all...
You state "This is not FUD" yet that's exactly what it strikes me as since making a certificate $0 instead of $19 doesn't change anything at all about "the issues that arise from centralized authority in a decentralized economy".
When I lived closer to work I used to run every day both ways, 12km in total, so 60 km per week. (Nowadays I run with my child in a jogging stroller, so I don't need a backpack, and it's a hilly 8km one way so I don't do it every day.)

Now I always wore a backpack with a chest strap like you said, and I never had a harder time breathing than normally. It wasn't a giant pain. And I didn't have problems with getting the things inside the backpack sweaty. For reference, this is a 13 liter standard cheap daytrip backpack. If you want to get fancy, Salomon do a vest-like backpack that has a good rep in ultrarunner crowd, with literally no bounce whatsoever.

My experience with headlamps is more limited, but have you tried the type with the battery pack not on your head? The key to reducing bounce is reducing sprung weight.
If I know Let's Encrypt's secrets, and I control your network, I can set up a valid certificate on my server and MitM you.
Wait, why is npm used for a zsh prompt installation? I thought it was javascript/node.js package manager.
Ask HN: Ethics of Social Hacking
For years, the Y Combinator application included the question, "Please tell us about the time you most successfully hacked some (non-computer) system to your advantage." I noticed that that question has recently been removed.

I'm in a situation that's making me wonder about the ethics of non-technical hacking. Tomorrow there's a conference very near where I live that costs thousands of dollars to attend. The CEO of my main competitor is giving a talk at that conference, and a number of people who it would be advantageous for me to network with will also be there. Sneaking in would be relatively trivial, as the conference is in a semi-public location. I may not be able to get into the talks without a badge, but if I dress the part I'd probably be able to network during lunch and breaks.

On one hand, sneaking into the conference would be a major opportunity for my startup, and it could really give us a leg-up. The startup community always stresses hustling and doing things that don't scale, and this would be the epitome of that. I checked with my state's legal code, and I could only be charged with trespassing if I damaged property or refused to leave.

On the other hand, sneaking in just feels wrong. The people there spent thousands to attend, and it's exclusive for a reason. I also have a relatively strong network, so it's not like going would be make-or-break for me (if it was, the moral transgression would arguably be more excusable). Finally, some really high-profile people are going to be there, so if I get caught chances are I could be arrested even if there's nothing I could be charged with.

My cofounder doesn't want me to go, so I'll probably listen to him, but I'd like to hear what HN's opinion on this is.
But not vulnerable to passive wholesale eavesdropping that the NSA and likely other worldwide spies agencies have been doing.
> it's just another way to control free speech and what people do with the web

How so? Do you expect browsers to stop serving content from sites using boring old HTTP? And the fact is that we've had to go through a central authority to put a website up for a long time, with DNS.
By EXACTLY the same means as last time[1].

Lavabit waa ordered to give up their private key, despite the fact that Lavabit wasn't, itself, under investigation. In other words, they were forced to give up their clients privacy and were given a gag orders.

Attorneys don't exempt anyone from anything, but your comment seems to suggest their existence is for entertainment. A team of attorneys might have found a way out of the mess for Lavabit.

1. https://en.m.wikipedia.org/wiki/Lavabit
It's Aaron Swartz and he in no way was facing "50+ years". The cumulative max sentence is in no way representative of what the potential or likely sentence will look like. He was likely facing ~6 months based on the charges against him. Here's a good article about why this is the case;

https://popehat.com/2015/10/08/bad-reporting-on-matthew-keys...
You can also use brackets editor to see the source of css styles for a particular element
> people often say similar things when it comes to art and literature, and even film and music. But those mediums have the kind of longevity that just isn’t afforded to modern digital apps.

This line stood out to me the most. Along with payment issues, one of the larger issues is bitrot. What if Windows phones gets a 99% market share next year? That's 99% of users who will never be able to play Hogarth's game because it was never ported. Even if we put aside proactive adaption, there's also an issue of the code stagnating in relation to its environment. Entire architectures might change such as Apple's move from PowerPC to Intel, or requirements might get tighter like sandboxing in the app store or the recent SPI mechanism that protects system files. Sure you might have emulators but that mostly relegates the software for later generations with more powerful hardware; to be played with nostalgia rather than in the moment.

I don't know what the solution is, but we definitely need to do something to preserve these kinds of things for the future, like how the Internet Archive is breathing new life into MS-DOS games using in-browser emulation. [0] For one thing we need to preserve the binaries of games like these in case they do go down, and related to that, the specific software versions they ran on. (I'm contradicting myself here because these are the only non-radical approaches I see right now as opposed to something like a reserve for source code to be released when it enters the public domain).

[0]: https://archive.org/details/softwarelibrary_msdos_games
... as could any other CA your browser trusts. What makes Let's Encrypt any worse?