skysight-inc/HackerNews huggingface dataset:
> it can shitcan the CA, either evicting it from the trust store or placing onerous restrictions on it

None of which prevents it from happening again with another one of the 300 CAs whenever another government gets antsy.

> If the government-controlled super-CA that runs .COM misbehaves, we have no recourse.

As a westerner I trust the super-CA that runs .COM 1000x more than some random CA in China or Iran or whatever. But even that's beside the point. If they abused their trust (which would be caught by CT) the whole system would collapse because, like you said, you can't shitcan .COM. Everyone would move to keypinning and/or a decentralized blockchain-based DNS solution and we would gain real security.
> Hansler is pessimistic because he says that changing the amount of blue light will be like admitting that the screens are causing health problems, and lawsuits could ensue.

You don't need to talk of it as a health problem. Just say it makes it kinder on the eyes.
It will be legally hard for them to "reset the entire equity metrics" if they're using similar ideas and codebase to your company. But if they work on a separate idea not related to the old company, this seems much more possible as then it's the same as them quitting, and then deciding to do another startup.

Another issue you need to think about is how much actual drag you'll cause by holding onto your shares. You should give up half your equity if this doubles their chance of succeeding. This seems more likely if you own a large vested chunk like 30% and less likely if you have just vested 10%.

Morally, you've put in a certain amount of work already, and it's not like everyone forgot about vesting. The vesting schedule is supposed to be designed anticipating that if someone leaves before vesting is over, the vested amount is kept by the leaver. It seems to make vesting pointless if you know for sure beforehand you'll renegotiate a substantially different amount.
This is the fourth time in the last 30 days I have seen some blog post about DNSSEC on the front page. Three overtly pushing Cloudflare DNSSEC and one about email and DNSSEC written by a Cloudflare employee.

But still no discussion of cache poisoning.

So if a user runs their own personal cache bound to the loopback do they need DNSSEC?

What if they run their own root?

What if they have local copies of all the zones they need?

DNSSEC gives control to untrusted third parties to periodically determine what is and what is not a "valid" domain name.

What are the protections against abuse of this control?

I would not call DNSSEC "secure DNS". I would call it "validated DNS".

The question is who is doing the "validation"?

And why should we as users trust them more than the endpoint we're trying to reach?
I agree with your claim, but the post I was replying to seemed to imply a positive evolution, which is what I was responding to.
It reminds me of when I registered r33t.org in the 90s. We couldn't register .com at first because we weren't incorporated.
Yea I lost my focus there. Seriously In and Out is terrible and it just gets me every time that I see this SF chain pushed as good when it really is not.

On the topic I think the quality of food delivered is going to hurt the delivery businesses. Fries are the perfect example where you cannot stick them in a bag and delivery them 30 minutes later and have anything but a soggy mess.

I agree with others that these businesses are not going to scale but may survive in very small places where higher end food can be delivered and the fee is a smaller percentage of the total food bill. Delivering cheap fast food isn't a good business model.
reposting a comment:

What do you think would happen under a DNSSEC-DANE TLS world if that started being detected via key pinning/CT ?

There is just no way the NSA is going to risk it except in very very specific circumstances they can easily control, (exactly the same situation as HPKP) because, they too will be forever burned just like an ssl CA would, except now they cant just switch to one of hundreds of other CAs, they have burned the root keys to a tld. This will be obvious, this will be screamed about from the rooftops, the key will be rotated + a ton greater scrutiny applied to the process.

Its not like browsers and other people pinning certs are just going to shrug their shoulders and say "aw shucks, i guess we wont worry about it"
I have no desire to pull the conversation off track but comparing auto insurance requirements to the affordable care act is apples and oranges.

You don't have to own a car. (and in fact fewer and fewer people do) You also don't have to have auto insurance to own or drive a vehicle, just to drive it on public thoroughfares. Which, believe it or not, is not everyone's use case.
Some people learn the rules, but the best also learn the exceptions.

1. It only appears like everyone opposes Hamburger menus, but it's really just an obstacle for publishers (blogs, magazines, deals) who are entirely dependent on discovery to drive engagement. Apps with naturally motivated engagement (music players, deep social, stores) do better with the menu.

2. I agree icons should be clear. The best way to design an icon is to search Google images and look for a common icon, pattern, or symbol. This greatly reduces the need to label the icon.

3. Only use gestures that are standardized. Follow the example of major apps by Apple, Google, & Facebook to determine which gestures are most commonly used per platform (iOS, Android). Don't deviate from those patterns unless your app's entire position is to be a gesture-based app.

4. Onboarding should be optional (skip button), informative, and rediscoverable somewhere in the app. Coach marks are only essential for complex screens. Don't show more that one or two highlights else people will ignore everything. Include an obvious "OK" or "Got it!" button.

5. Agree - don't show users an empty screen! That being said, apps have unique needs. Google's collections app expects lots of engagement so it shows the user how to use the app. Lootsy needs users to start selling ASAP so it's motivation is reduce steps towards populating listings.
I think one issue is that buying a bundle of Cable/Internet only costs a little bit more than buying Internet alone. All these Cable/Internet providers have a vested interest in getting people to watch Cable, so they overcharge substantially for just buying [rather slow] Internet alone.
Show HN: TwLng 2.0 - Schedule and manage Twitter content that is 140 characters
One thing I love about DNSSEC threads is that I get to join the anti-NSA faction on HN. Unlike you, I do not trust the giant corporation that controls .COM under charter from the US Government.

The USG has repeatedly abused its trust, often directly with respect to .COM. The Internet has not fled .COM.

The idea that we would deploy a forklift upgrade of a core protocol, at immense expense (look at Cloudflare's own marketing material!), ostensibly to improve security but in reality to put ourselves in the position of "fleeing .COM IF the US Government abuses it trust", boggles my mind.

The problem DNSSEC purports to solve is not cryptographically hard. DNSSEC made it hard because it was designed in 1995, at a time when designers felt it would be implausible for DNS servers to sign records.

We are talking about deploying this fiasco of a protocol with all its compromises purely because of the momentum of a 21+ year long standardization effort. Once we deploy it, any notion of solving the problem correctly dies. That's a terrible, terrible mistake.
In this case, you don't. You can terminate SSL on your own machine, where you are actually running the service/site.
Yes, drivers here can quite literally get away with murder.
My friend told me about this demo. They had to smack the volunteer pretty hard to register the anger emotion.
Keep in mind that it is not always the government(s) using strategies like this. Political groups (left and right alike) do know about it, and use it, as well as the occasional 'troll for the lulz'. And there is the whole issue of corporate wikipedia-editing networks, if they exist, you can reasonably assume some shadowy businesses also do operations like that.
TwLng was originally designed to enable long Twitter content to be created and shared.

We've now updated this to enable:
- Save drafts
- Schedule content publishing using a calendar view
- Add content to one of five queues
- Add content to one of five 'circles'
- Generate content from an RSS feed
- Generate content from Google News keywords
Firefox for iOS now available
What basis? "Asians wise, Westerners dumb"
"...certainly not a magic invocation that casts the spell of Security +1 across the entire communication..."

I appreciate the whole post, but this is such a wonderfully geeky turn of phrase that I have to acknowledge it!
Why would we see people expecting to train children in tasks when even today you see adults who need only a fraction of the training a child would not being trained on the job as hiring managers look for already qualified candidates?

Even if this is what society would revert to once it ran out of already trained individuals, it would be cyclic and would cause entire generations to be lost as it would always be preferable to hire some adult who has basic training over a child who needs to be built from the ground up in basics.

Consider the simple case of a programmer. Who would hire a child who would take years to train (as they would need to learn not only programming, but math and reading and writing, among other fields of knowledge)? Even if the child would work for free for those years of training (which would be problematic for other reasons, but assuming they would anyways), it is still not worth it because the cost of training other than salary would make hiring no one a far better choice.

It costs a lot to train a child from scratch and they offer no benefits except in the longest of terms, so people would always hire from elsewhere, such as children who had parents rich enough to afford them basic education costs out of pocket.

Apprenticeship would work well in today's world if you start after the basic education has been completed before specialized education begins, so that it would be quick enough to turn apprentices into employees who could produce value. But this would be later high school or early college; maybe earlier for simpler trades. It will not (and historically did not) work well for younger children with more educationally demanding jobs.
> you start with one model of reality, then a piece of evidence comes that does not seem to fit the model

This is not emergence of a new phenomenon, this is an outlier[0]. There are always outliers. Claiming that a new phenomenon is emerging necessarily implies multiple data points to distinguish it from isolated statistical anomalies, which will otherwise be regarded as simple outliers caused by factors isolated to that incident.

There's an important difference between "brushing under the carpet evidence that does not seem to fit your model" and simply regarding such evidence, tentatively and in the short term, as an expected statistical anomaly until there is sufficient data to recognize a trend. There is no trend here, and until there is, it is completely reasonable to treat isolated incidents as outliers.

0: https://en.wikipedia.org/wiki/Outlier
When I signed up for FiOS a year ago, it was cheaper to get TV + Internet than only Internet.

I think it makes sense. Consumer attention is now more valuable than the content. There's so much content available that it's impossible for any one person to pay attention to all of it.

As a result, publishers should have to pay for the opportunity to use someone's scarce attention rather than consumers paying to get access to content.
Facebook also shows what should/could be the whole page, but I'm not sure we know what all they strip out in the name of making things faster or more pleasant. I'd wager the same is true for any built-in browser that overrides the default action of sending a web link to the actual mobile browser.

And I've gotta say, I'm really bothered by the way Facebook handles browsing. I have to copy the link, exit Facebook, open Safari, then paste and navigate to the link whenever I want to have a page I found on a Facebook post in my bookmarks, reading list, etc. Super frustrating.
>> The normal diet in China and Indonesia is plant based.

Speaking of a group of about 1.6 billion people as if they were a monolith is not particularly productive.

Just looking at China itself, there is huge variation in the "average" diets between different provinces (e.g., Shanghainese dishes tend to be sweeter, Sichuanese dryer and spicier, etc.). And even at that provincial level it's kind of silly to lump everyone into a single average.
Ban PowerPoint before it kills our creativity
Mac apps break due to security certificate lapse
Full-text search and analyze MongoDB profiler information (slow queries)
Okay, so this is what happens:

1. Evil NSA compromises CA in BFE

2. Evil NSA subverts DNSSEC for COM to publish a bad CA certificate

3. Some combination of Google Certificate Transparency + HPKP discovers this, the CA in BFE gets removed from browsers

If your point is "DNSSEC is pointless", OK. But it sounds like you're saying it makes us less secure. I'm just trying to figure out how that could even be.
You are looking at this from the perspective of someone living in a developed country with a fast broadband connection, but the global gaming market is much more diverse and complicated than that. Sony has been making attempts to push PlayStation Now on to consumers in North America with very mixed reviews. The idea of streaming games directly from the cloud to your Samsung smart TV sounds really appealing on paper, but broadband speeds just aren't there yet to push this out to a global audience. One must also take into account that most people in developing countries don't have access to a credit card required to pay a monthly subscription fee. That is why the "big game companies" will keep on shipping hardware until the remaining pieces of the puzzle are in place.
*Tor
I'm only pointing out that you don't need to host content to provide value.
All I can say is that is good. Ads (mostly) try to sell you something you really don't need. Additionally products which advertise can be 10-35% more expensive than products which don't.
Secret chamber discovered in the great Pyramid?
Illegal actions become a loophole when the means of enforcing the law is far too weak to catch most attempts at breaking them.

Imagine if the only punishment for theft was having to pay back 200% of what you stole. As long as you don't get caught half the time, it is profitable to steal. That would be both something which is illegal and also a loop hole in the law.
Take a look at where the Wikipedia page for "National Socialism" takes you.

https://en.wikipedia.org/wiki/National_Socialism
Thank you. I did not see any mention of the fact this is open source anywhere on their website.
That's why I use HTTPS and an independent DNS server with encryption. It's not exactly hard.
How Apple is giving design a bad name
And I noticed the other day that the Discovery channel logo is now animated. Its bad enough that it squats in the corner like a dog taking a shit, now your eyes are drawn to it because its moving. Fucking bastards!
Npm-stats – See how long you spend installing node_modules
I feel like I can't answer this without repeating this post:

http://sockpuppet.org/blog/2015/01/15/against-dnssec/

... or its FAQ.
> And I don't know about you, but most of my Steam games would work fine on state of the art hardware from the early 2000s.

Most of my games probably would, but the games I care most about right now would definitely not.
Self-censorship in the digital age: We won’t be able to recognize ourselves
Both US and USSR lost. Look at predictions, there was supposed to be lunar colony by now.
I don't need an ad-blocker. I need a like blocker. When I go on facebook I want to see personal things my friends share, not a bunch of shit they saw and clicked "like" on. And I'm guilty of "liking" crap too. Maybe they could prioritize personal plain text posts, since those are actually the most relevant to me. But that is least relevant to advertisers.

If they don't focus more on the users, a distributed replacement will eventually come out and there will be zero ad revenue to be had from that social platform. I've got some ideas in this space, but no time and no team.
The new query plan stabilization features in 12cEE really help with this. Hints are a pain when upgrading Oracle major versions as they can affect query correctness, as my boss found out painfully last week ;(
That's precisely why I like it ;) Tfd seems to aggregate many dictionaries. It's quite helpful with some specific fields like medicine.
Precision Is the Difference Between Good and Bad Design
Which libraries have you looked at? https://github.com/pquerna/ffjson and https://github.com/benbjohnson/megajson claim to be faster
The BBC did a report on this, and it got posted here (with some discussion) https://news.ycombinator.com/item?id=10200625
I was just picking at you as the uTorrent author and his work were among best at low-fat, GUI apps. Steve Gibson at GRC comes to mind, too. 5-6MB is better than many.

Anyway, I'm not sure what can be done with Boost: just too complicated. Maybe replacing what you use in it with lightweight alternative. However, you could see if you can replace OpenSSL with LibreSSL. OpenBSD team trimmed out hundreds of KB of fat and problematic code out of OpenSSL when building it. You get better security, too. :)

http://www.libressl.org/

Note: Mac OS X already uses it. So, it must work decent by now.
Personally, I downvote destructive comments and flag harmful ones. My impression is that others do the same. I've never seen anything to suggest that there is algorithm beyond those that affect community members under shadow bans. My understanding is that people wind up in that state by hand, but I have no direct knowledge.
Not my democracy and justice system, actually. I'm more concerned about TTIP in that respect.
They are not free, they still make money from commercials. Same as radio. In some countries, there are public broadcast channels that don't display commercials, those you pay through tax.

With cable and satellite they often put their own commercials on top of the channel's so public broadcasting channels make less money that way.
More than half.
Twitter is basically a commenting system for web links.

This is obvious if you look at tools such as http://svven.com or http://nuzzel.com.
But smells are almost exclusively described in that way. There is no spectrum; there is no map like touch. That's the whole point of the OP, right?
How is SMS too expensive? At least in the US all the common plans come with unlimited SMS/MMS

I use Whatsapp to connect with my brother-in-law in Costa Rica and his family and thats it.

Everyone else in the US I use group messages with. There are probly 6 or 7 group message groups I use on weekly basis and more I use less frequently.

There isnt really a reason to switch from group messages to whatsapp. Especially if all the participants have an iPhone it makes things easier. I have several Android friends as well and we use group messages together.
My neighborhood in farm country Pennsylvania, USA is entirely on whatsapp. There's a general group for the adults and a separate mom's group.

I was annoyed to have to have to install an app when I moved here ("Why can't we just use e-mail lists?" I asked) but whatsapp was so established that nobody was interested in giving it up.
> 1) see that envy and egoism is considered a primary motivator for advancement (if you like free market theories, e.g. Adam Smith and the "egoism of the butcher", etc.)

I agree it's a primary motivator for advancement, but if the government redistributes wealth it destroys that motivation and the benefits that come along with people having it (new businesses, higher productivity, increased education, etc).

> 2) accept that humanity should progress in tandem, not just let some people get the majority of the benefits of today, just because the vast majority is also "better off compared to people in the past" (if you prefer socialist theories).

I think at some point there's little point to everyone increasing their standard of living. We're already reaching a point here in the US where people are simply bored. Would we all be better off as a society if everyone had an extra 500 sq. ft. added to their homes, or a Tesla in their garage, or designer clothes? We are reaching the point of diminishing returns when it comes to material possessions, unless it's all about envy like I suggested in my previous reply.

> If they take away your internet access, will you be fine with that because people in 1850 lived in log cabins without internet, electricity or running water and you still have it so much better than them?

Well, I'm not being "given" my internet access, I pay for it. But yes, if I could no longer afford to pay for my internet access I would still thank my lucky stars I have electricity and running water. Duh?
Yeah, the self-censorship described in 1984 is effectively real. People are afraid to speak and write their minds because they the consequences.
Being a trust fund baby.
Heavy neural nets on a rasp-pi? How does that work out?
I have yet to see a TV that is actually smart. What passes for Smart TVs today are a joke. The menus suck and the remote controls are even more unwieldy than 'dumb' TV remotes.

Until we get a TV that boots to an Android home screen and comes with a tablet that mirrors the TV screen, TVs will remain dumb.
Another name for it is DAFSA (https://en.wikipedia.org/wiki/Deterministic_acyclic_finite_s...).
You consume way more content ON Facebook than you are aware of. Thats the big difference. And a lot of content is being written ON FB. The discussion is ON FB and they allow them to be long which keeps people there too.

Just the ability to do a preview of on article is such a big eyeball keeper that it leaves twitter in the dust. Or to write a comment to the article which make people then react to what someone wrote about the article without maybe even reading it.

It's like with checkins. People think FourSquare and Swarm is big but it's dwarfed by FBs checkins it's just not a major focus for them and so we don't think about it as a place a lot of people check in. But it's a numbers game.
I currently deal with a few disk failures every week, all on RAID6 (on Dell H7xx controllers) and a few RAID-1 on HP and Adaptec controllers. Mostly SAS drives, but a few older model SATA SSD drives (that are dropping like flies after lots of writes over a year). This is across about 32000 disks so the chances for some disk failure every week is high. The RAID controllers work as advertised almost always, file system intact. Sometimes there's a performance degradation during a disk rebuild, but only on arrays where disk i/o is near max ability. There has been, I think two, catastrophic failures, for example when there's an issue with the cable or backplane, causing corruption, then having more than two disks go corrupt before getting to the bottom of it and invalidating the entire array. That said we have very few issues with power, and the batteries have died on many of the controllers, so I'm not sure how it will pan out on dodgy data centre power flapping.
MATRIX is looking to reshape the IoT ecosystem!
Is this using the Safari view? It doesn't mention anything about using another renderer than the one Apple allows.