skysight-inc/HackerNews huggingface dataset:
Ask HN: How secure is smartcard technology with securing laptops or any device?
I work at a large corporation who just spent a ton of money upgrading everybody's laptop to new HP models that allow the use of smartcard technology.

I'm wondering how secure this method is of securing your laptop or any device that uses this technology.
If you just want a free cert, you can use my letsencrypt-nosudo client[1], which doesn't ask for your private key or sudo access or have to be run on your server (except for one copy-paste line you can inspect). The official letsencrypt client is geared much more towards someone who doesn't understand how TLS certs work. For people who know what they're doing, you can use lightweight clients like mine to just get your free cert.

[1]: https://github.com/diafygi/letsencrypt-nosudo
That only applies to the people in the USA (and/or US citizens). Non-US people living in the rest of the world aren't counted.
Seems to me that Prison Architect is closer to Dwarf Fortress than those games.
I doubt it's about overstating the conclusions' complexity. It's usually more that "I have neither the time nor space to fit a thesis in this space".
I don't have a reference for this, but when it's come up in the past they've said size is not a primary goal for the project. A lot of the size comes from their internal event system that normalizes events cross-browser along with the extra abstraction for pluggable renderers (i.e. support React Native) and the component-local state handling. None of these are necessary to get the virutal dom model working. Finally, 132k minified is 40k after gzip. It's not THAT large but it's not a lightweight framework either.
Europe Is Spying on You
Cats do public good - they are killing your vermin, entertaining your children.

And when they 'do their stuff' on your property, they do it discreetly and bury it. One dog makes a more public mess than a week of 10 cats.

I guess the polarization depends upon the individual perception of the value/weight of those activities.
day job: front-end and full-stack developer for various clients

side projects: http://lcd.al/, http://realkana.com/, and iOS game development
I'm not sure that will work, at least in Canada. In Canada, if you have sizable assets, you will still be considered resident even if you leave the country for many years. To be considered non resident in Canada, you need to sell everything. Even having a storage locker could trigger you as a resident because it means you are not leaving for real.
Feisty bulldog is extremely suspicious of his birthday cupcake
Importing amd.js/umd/es6 modules would be preferred, but you could also include your .js files using the preamble option.
How to prevent employee poaching, with startup focus
This is very slick.

Not to nitpick, but did anyone else find that some (important) keyboard shortcuts were missing? Ctrl/Alt-Backspace in particular didn't work for me. Though I guess vim doesn't have support for that either.
People who use emoji generally aren't using CSS remote fonts, so that isn't your problem. Emoji is part of the Unicode standard, so most modern system fonts support it by default. If you can't see the emoji then the problem is your system has out of date fonts, not that remote fonts are turned off.
Yes! Like dillinger (and others) but with proper inline html support (that is: I can have documents with data tables without having to inline images for it).
I teach high school math and science.

I've been writing in the mornings and late at night, and I just finished an intro Python book: http://nostarchpress.com/pythoncrashcourse It will be out next month, and I'm very happy to focus on supporting the book now that the writing is finished. I love writing at the introductory level, where the focus is half on technical issues and half on helping people learn to think as a developer.

Writing a book has significantly increased the degree of professionalism I bring to my side projects. My school district just adopted a new learning management system, but there's no functionality included for generating report cards, so I'm working on a project that automates the process of generating report cards. The software is relatively easy and enjoyable to write, but the politics involved in making sure this work is implemented correctly into the overall district processes is challenging. Having worked through all the details involved in publishing a book helps me identify and work through the many non-technical issues involved in fully implementing a side project.
Using the most popular JavaScript libraries is absolutely not a problem. However integrating random React components in a ClojureScript build is a work in progress (you could also just pre-build your React bits first and avoid this issue entirely). Maria Geller and others in the community have pushed the CommonJS integration forward an incredible distance, we're at the point now where the devil is in the details. I suspect in 6 months or so using a random React component in the ClojureScript build process will not be so challenging.
A great way to make money has recently been "introducing VIP services to the middle class".

What used to be exclusive due to scarcity, labour costs and lack of relevant technology is being made more an more accessible.

To apply this process to "news" as a means of getting relevant information (as opposed to such journalism which is at least equal part entertainment), you need to look at executive briefings, the news delivered to the president, a congressman's morning file prepped by assistants.

Summly and Circa have tried, but picking 5-10 of THE things you need to see out of a ~million stories or even ~100 main news stories is very difficult.

But I bet Facebook, Google and Apple are very well positioned to solve this, eventually making media an ever-lower margin business.
Thanks for the feedback!

Excel with multiple worksheets is on the roadmap. Wanted to get the leanest solution out first to better gauge interest.

There is a link to a live API on the homepage, and a playground on the API's page which you can use by hitting "Free Token" up top.

The copy and placement of those buttons needs to be cleaned up to be conveyed better.
Software bug killed 6 people
Let me see, Russia have nuclear weapons, its army is in the top 5 of the conventional forces and "American military and intelligence officials" worry about internet cables "in times of tension or conflict" ?

What is this, scare mongering addressed at geeks ?

The western propaganda became so ridiculous, it's no wonder the Russian one wins every time.
In my experience, headaches are mostly due to dehydration.

You can avoid the worst of that if you drink a lot of water at the end of the night.
Apple's management at the time may not have been great, but they were leagues ahead of what Commodore had (after Thomas Rattigan anyway).
What do you propose as the alternative? Should the first person who wants to use the domain get it? What if their project isn't used much or they stop maintaining it? What if it really sucks? What if they have plans to use it but they haven't done anything for years?

There isn't a good alternative to the way it currently works. Allowing domain owners to sell their domains results in domains going to those companies that are successful enough to afford them.
Wow, have been using computers since age 6 and been a professional dev for 15 years, never even heard of ctrl+backspace :D Thanks.
(I tend to use ctrl+shift+left/right to highlight, then delete. That tends to always work)
Day job: Build Engineer in games
Side project: browser based snail simulation.
What stack do you use for your projects?
It's more like a professor of obscure language that helped the suspect write the document in question.
"We obtain a pseudo-purge resulting from weakness of character and anxiety in the victim. In addition we violate one of democracy's basic tenets -- respect for the strength of man's character. We have always believed that it is better to let ten guilty men go free than to hang one innocent -- in direct opposition to the totalitarian concept that it is better to hang ten innocent men than to let one guilty man go free. We may punish the guilty with this strategy of compelling a man to speak when his conscience urges him to be silent, but just as surely we break down the innocent by destroying their conscience."

"The Right to Be Silent" , The Rape of the Mind: The Psychology of Thought Control, Menticide, and Brainwashing by Joost A. M. Meerloo, 1956
You're conflating wuite a bit things here. Nothing, except tax avoidance of course, prevents the doctor from forming a company and taking money out as salary instead of dividends, thus paying his "fair" (which, obviously, is debatable) share of tax.
My Google Search History Visualized
Should almost certainly depend on the type of beer, the ingredients, and its manufacture.

Some types of beer (specifically some types of bottle fermented) tend to lead towards leaving unfermented sugars in the bottle. Sugar can cause hangovers on its own, so combined with alcohol and fusel oils, could contribute extra towards a hangover beyond just the general dehydration.

I had a friend of mine complaining once that Belgian-style beers tended to cause more powerful hangovers, and halfway through telling him it was all in his head, I was interrupted by a more experienced craft brewer who interjected that it may well not be.

The science of it is pretty interesting.
http://www.chemistryviews.org/details/ezine/1080019/Chemistr...
As others in this discussion point out, the submitted article conflates the two (tortured syntax; jargon). The other explanation for tortured syntax in all domains is simpler: most people are bad writers.
Oh yes, I used to love drinking kvass as a kid in Moscow. (I have no idea what the alcohol percentage was.)

I don't know if it's possible to get an equivalent here in the United States - I've tried bottled and other varieties, and they all tasted like crap-flavored soda. Went back to Moscow last summer, and got the good stuff - just like I remember.
The Illustrated Guide to Product Development (Part 2: Design)
It would be misleading to say that only a majority of academic writing has unnecessary use of long words because this is almost universally true. I would guess that it's north of 90%.

You talk about making no assumptions. I agree that this is excessive, but why can't an MSc within the relevant area be enough? Yes, you save some space by using a lot of jargon, but if you use a word only once in your article, would it kill to spell it out instead? And while jargon occasionally saves space, snobbish language never does.
I hate the term "space vector modulation"
https://www.google.com/#q=space+vector+modulation

The way it's described is always overly complex. The signals produced when using it are no longer sine waves and people have even done papers doing spectral analysis on the output. There's matrix math and all sorts of academic blah. But in the end you can do it in 4 lines of code:

s = (min(a,b,c)+max(a,b,c))/2;

A = a-s;

B = b-s;

C = c-s;

In EE terms, we add a common mode signal to all 3 in order to avoid hitting voltage limits for as long as possible. The load can't see it.

Anyway, the amount of analysis and math around this concept always seemed like a whole lot of intellectual self gratification, so I prefer to substitute a different M word for modulation.
Apple TV is a rethinking of users’ relationship with hardware and games
What types of stats are you looking for? "Different types" meaning different CAs?

The warranty is odd. Its required to provide a warranty in certain situations by the CA/B Forum (industry standards body). This is partially because some countries laws require they be provided for the class of products/services that SSL falls under, so requiring it from everyone sort of levels the playing field.

But the large CAs (Symantec, Comodo, etc) are big fans regardless. They can advertise this preposterous "warranty" which protects you, and usually the customer does not ask too much about it and just likes the sound of it or assumes it will cover them if they are hacked (which is not what its for). It actually just covers some very small situations where the CA mis-issues your certificate.

Some lawyers and experts at TrendMicro and Firefox found that due to how the terms are written there is basically no way the end-user would ever actually see that money. Those insurance warranties have never been used.
>Anyone here have experience with old-country low-alcohol everyday beverages like sima, kotikalja, kvass, etc? Europe used to have a grand tradition of these low-alcohol "near-beers" or "malt beverages" that people would drink on the farm. They were hydrating and had a lot of the health benefits of above, but since the ethanol was low I'm not sure what effect they had on cardiovascular health.

When I was in high school my dad came back from a trip with a taste for traditional kefir, and brought with him some of the yeast 'grains' that are used to make it. He stuck with it for a few months, enjoying a couple of glasses a day, a jug continuously fermenting in the pantry.

After a while he began to realize that he was more tired than usual in the afternoons and felt like taking a nap almost every day. As it turns out, the fermented kefir contains a small amount of alcohol–seemingly just enough to make him a bit drowsy. Maybe not even enough to be noticeable if you're doing something physical, but only if you're focused and working at a desk.
Had the author used the official tool, the chain would be automatically downloaded. [0] Additionally the author is over-weary of the official tool complaining it modifies server conf files. In fact the default option recommended to beta users, './letsencrypt-auto auth', simply downloads the certificates and doesn't touch conf files at all.

[0] https://letsencrypt.readthedocs.org/en/latest/using.html#whe...
You're welcome. I found it after watching this documentary:

Taxodus - Playing The Global Tax Avoidance Game

https://www.youtube.com/watch?v=tvlLO_pTmeY
"teaching to the test" depends on the instrument they are using - I cannot find it in the study.

We used LAP and ELAP (8 domain assessments) because we started much earlier (6 weeks). It is structured so you do teach the test but when the test says "stack 3 blocks on top of each other" (obvious early LAP skill), you are pretty much going to teach the test.

In my experience (90s research program), this is basically in line with what Harvard found about Head Start. Starting earlier has the effect of finding learning defects (not sure the current term) earlier like hearing problems and allows time for correction during the critical 0-3 years.

Point 2 rings true, but I would doubt your #3.
It probably helps that beer tends to have a higher water content than liquor.
Yes, but EV is not the same as identity validation. That's another variant of certificates that was only introduced because identity validation alone is so bloody useless.
> showcase the best of Indian creativity and ingenuity in product development.

I genuinely don't understand above. You want to showcase the "best creativity" by showing that you yourself describe as "the Hacker News of India". I think you may have a different understanding of what creativity is than what I have. Also, about this concept of "best of India" and such things, the line that Peter Thiel loves to use comes to mind. The something of somewhere is the nothing of nowhere.
We're updating our legal documents
Maybe people ought to think about how willing they are to abridge commercial speech?
Crowdsourcing and Machine Learning at Pinterest
I'm not disagreeing, but when I hear "..., but React has taken us into the future." - is it just me or does this sound a bit too pompous?
A+Formula+to+Measuring+Employee+Productivity+for+Service+Industries
Depends entirely on your queries/mutations and app requirements. Om does produce regular React components, and due to immutable by default collections and data, Om can even beat React when it comes to rendering performance. At the very least, you should expect React-like performance. Then again, I've written a couple of frontend applications, and React/Reagent/Om has never been a problem for me from a performance standpoint. If it was, ClojureScript makes it easy to write code that uses regular js-objects and arrays, so it's always possible to optimize with "low-level" code when necessary. Like I said though, it has never been necessary.
This is how you hack old objects into amazing lamps
Intel x86 considered harmful [pdf]
This made me think of an analogy: the idea that academic writing should be simple and jargon free is a lot like the idea that programming should be accessible to non-programmers.

There are lots of ways that we've tried to hide the essential complexity of programming. Some of them are higher level languages like Python, some of them are domain specific languages (like SQL), and other ideas are more radical (graphical programming languages and so on).

The obvious things to point out are that

1) The most successful of the alternatives aren't wholly jargon free.

2) They've certainly helped make parts of programming more accessible to people, but haven't lead to the "programming for all" dream that has been expressed before.

3) They aren't full replacements--people still are using programming languages with pointer arithmetic and manual memory management for some purposes.

4) In the cases where new languages are general purpose (as opposed to DSLs), there's no agreement that they're desirable. A Haskell enthusiast doesn't think Python is right to try and reduce "jargon", they just think it should be a different kind of jargon.

Analogies are always imprecise, but I think this is a helpful one. In programming, it's not always clear what is incidental complexity vs. essential complexity. In writing, it's the same thing. We can (mostly) agree that goto should be minimized, and comefrom entirely avoided, but past that point, we get a lot of disagreement.
> Since she cut out gluten this has only ever happened "blind" btw, i.e. waking up with symptoms then figuring "ah that piece of XYZ must have had gluten" after the fact.

Or she's allergic to something else.
After a seamless upgrade it's already generates pages 20% faster. Eager to try the incremental mode. Good job! :)

On an unrelated note: nice to see that more and more projects adopt a code of conduct! That's a thing that most of open-source project communities should have by default.
I'm a Software Engineer at my company. I used to work on a large Rails project, but now I am on a team where we are building out a smaller product with a React/Flux frontend. I work mainly on frontend stuff right now.

I have a small side project for a family member. He's a commercial beekeeper and needed a way to track information about his hives, so I am making him a mobile app (built with Ionic) that lets him put QR codes on the hives and track everything he needs about them.

My wife and I just had our first baby, and I'm starting Georgia Tech's OMSCS program in the Spring, so I don't have much spare time right now. But off and on I have been learning Clojure/ClojureScript, Haskell, and more about React and its ecosystem. I also am teaching an introductory JavaScript class for a local tech "bootcamp" company, and enjoying it a lot.
I feed my kid Sprinkled Donut Capn Crunch because it improves his cognitive performance in just 5 minutes. Usually after finishing the bowl he jumps up from his chair and screams "I LOVE IT!!!" and gives me a big high five and does a "victory lap" around the living room. No, we are not considering treatment for ADHD
He didn't have a stable enough income to always maintain a gym membership. I doubt a daily commute and rent would be cheaper.
Intel x86 considered harmful – survey of attacks against x86 over last 10 years
Apparently, "pipefail" is a bashism, you can't use it on portable scripts.
Full stack developer by day, Full stack hacker by night :)

My most recent side projects are http://whenactive.com and http://creatorslog.com
https://github.com/diafygi/letsencrypt-nosudo

If you don't trust the official letsencrypt client, you can use this script to get your free certs. It doesn't install things or ask for sudo access or your private keys or have to be run on your server (except for one challenge response one-liner you can inspect). I wrote it specifically so people who didn't trust the letsencrypt client could still get free certs.
No that is not the entire point of a CA. The insurance that the big commercial CAs offer now is a farce. No end user has actually received the money for two reasons:

1. breaches that qualify are often written off by the underwriter as "gross negligence" or other such behavior which basically allows them to nullify the contracts and pay nothing

2. situations where the breach could be covered by the terms of the insurance are incredibly rare. Most situations where SSL compromise is at risk would not be covered. The insurance only helps you if the CA causes you damages through their own actions. In one of the most famous cases, the breach of the CA DigiNotar, the underwriter said that DigiNotar misrepresented themselves and invalidated all their policies.
"My cat's food has a gluten-free label, no joke."

Pet homeopathy also makes me laugh.
Customer Friendship as a Service
Online Education Going Mainstream?
Software developer for Canadian government; Currently trying to finish reading Infinite Jest by David Foster Wallace

https://en.wikipedia.org/wiki/David_Foster_Wallace
Responding to D3.js events in TypeScript
You don’t understand how startup investing works
European Parliament Delivers Neither Net Neutrality nor an End to Roaming
Secrecy isn't necessarily an indicator that there is law-breaking involved. Sometimes secrecy is desired for someone who has had negative attention focused on them by the general public for no other reason than they present a fat, juicy target for lawsuits.

Many people I know who have significant assets bemoan the challenges that present themselves when trying to engage in anything resembling a negotiation involving finance. If one side KNOWS you have the capability to pay more, then you're at a disadvantage.

And don't get me started with the lawsuits. People who have money seem to attract lawsuits the same way that children catch colds from kindergarten. As they say: "You know you're rich when you're finally sued frivolously."
Using the udrp system is expensive, it's less expensive to just give in and lease example.bike and example.sexy and example.ninja, rather than let someone else get it and fight them over it when it happens.
Bravo. Good example.

Regarding the M, I once jokingly considered replacing "time" with "temporal dimension main anthropoperceptive vector" in a report to meet my academese quota. I didn't. I did, however, rewrite all active-voice sentences to passive-voice. A little bit of soul lost to academia.
From the summary at the end:

>by the spring of the first grade year, teachers rated the TN‐VPK children as less well prepared for school, having poorer work skills, and feeling more negative about school. This was a reversal of the ratings provided by the kindergarten teachers at the beginning of kindergarten. It is notable that these ratings precede the downward achievement trend for TN‐VPK children that appeared in the second and third grades.
Relevant: Hemingway app grades Hemingway very poorly. I suppose that is not a knock-down argument that it is bad, but it does make you wonder how carefully they calibrated it...
I just want to watch good shows, not get into a "relationship" with my TV.
FBI’s Advice on Ransomware? Just Pay the Ransom
I've often considered creating a realistic city building game. Where instead of just clicking to build a bridge or a hospital, you click where you would kind of like to have a bridge or hospital, then wait 1-15 years, pay 1.5-15x the initial price estimate, have a X% chance of the project being canceled on you and a Y% chance that the bridge or hospital shows up in a completely different place with completely different specifications.