skysight-inc/HackerNews huggingface dataset:
Whole text (but this is just the start of the thread, click through to read a handful of replies on the OSS-SEC list):

Announcing https://github.com/RedHatProductSecurity
/Certificates-Shipped/ From: Kurt Seifried
<kseifried () redhat com>
Date: Tue, 24 Nov 2015 21:38:35 -0700

[1] https://github.com/RedHatProductSecurity/
Certificates-Shipped/

The idea is to create a comprehensive list of
shipped certs/keys/etc by open source
vendors/distributions/projects so that:

1) we have a list of secrets maintained by
external parties that we rely upon
2) we can audit them and make sure we
should be trusting them
3) also spot changes more easily (since the
existing corpus is available)

I'm guessing there are some surprises
waiting for us.

--
Kurt Seifried -- Red Hat -- Product Security
(...)

[1] Split to avoid long unbreakable line in pre-text-box on hn:

https://github.com/RedHatProductSecurity/Certificates-Shippe...
I think truly autonomous self driving cars are 20-50 years away.
How about producing a charger with more robust wiring? The power brick for my Thinkpad X200 is now more than 6 years old. It has been treated very roughly, but has thicker wires, robust strain relief, and has never failed. In the same amount of time, I've gone through three Apple chargers. It's a little silly.
Doubtful, I'd 86 this feature as a PM. Way too much complexity for too little benefit.
Make Noise released a Eurorack module[1] this year that was inspired by the Telharmonium. If the Harmonic oscillator is anything like the Telharmonium, the timbres would have been super interesting.

1. http://www.makenoisemusic.com/telharmonic.html
Why will manual typewriters and carbon paper be the must-have technology of 2016?
One great experimental demonstration is these chain letters going around with all the letters in each word but the first and the last scrambled up - you can still read it at a good fraction of normal speed.

What's interesting to me is that this high-level processing can make it into conscious awareness before the lower-level features involved (not letters, but at least shapes and colors - which came after reading in this case).
I loaded the page, started reading and the ENTIRE PAGE scrolled away as a giant "Lessons In Startups" mail-signup-modal rolled in from above. GO AWAY YOU SCOURGE OF THE INTERNET.
You need to practice as much as possible.

View the source code of open source projects - is also a good way to learn different approaches.

There is also a huge number of lessons and training screencasts on youtube.

By the way, I just found an interesting project http://exercism.io/

It is also a good way of learning. Experienced developers will point out your mistakes and advise what approach is more preferable in a given situation.
I understand there were plenty of non-standard features, but keeping to standard features should have been possible, and JS didn't change that much between browser versions (and where it did fixed could be implemented, as your detection script would have helped with).

It took quite a while for some standard JS features to be added[1], but a mostly stable subset was possible (as evidenced by the sites that worked in all the major browsers of the time). The real problem was companies not wanting to devote the time to doing this and taking the shortcut of using the non-standard IE features MS had included at the expense of browser interoperability (which would have provided some protection against using features that would be dropped).

1: https://msdn.microsoft.com/en-us/library/s4esdbwz(v=vs.94).a...
You seem awfully invested in a discussion that you don't care about.

>https://shihho.wordpress.com/2012/11/27/pvalue_distribution/

This treatment commits the same error as the other poster (evanpw; I believe nonbel commits the same). The image at the bottom is only showing p-values for single observations. That is near useless (as the chart shows). An actual experiment requires repeated observation and analysis, not one-off observations.

npval <- pnorm( rnorm(nSim, mean, std.dev), mean, std.dev )
hist(npval, breaks=40, xlab=xlabel, main=title, col='gray')

R is probably the worst choice of language here, but my understanding of `pnorm` is that, when passed a list of numbers as the first argument (as `rnorm` returns), it will return a list of p-values (assuming normal distribution with given parameters), where the index in the list corresponds to the p-value, taking into account only that single observation (ie. it ignores all other observations in the list [ie. not how p-value hypothesis testing works {at least, in theory; real world practices may differ}]).

Your second link appears to be the same argument (at least, they appear to use the same equations).

The charts are a nice visualization of how you can get a uniform distribution from a normal one (or vice versa) though.
> nor should Google be being informed every time I obtain or renew a certificate.

Let's Encrypt actually log all certificates they issue to a number of public logs, including those operated by Google. See the "Certificate Transparency" section of their site which explains this, and provides a link to a tool where you can examine all such certificates: https://letsencrypt.org/certificates/
His work on the photoelectric effect is definitely the work of a lone genius. Is it not fair to say though, that for the theory of relativity, he had to collaborate with others? This article seems pretty exhaustive to me.
The foundational principles are usually logically inconsistent with each other.

Please explain how you proceed logically from the position that eating from the tree of knowledge is sin?
Read "The New Jim Crow" by Michelle Alexander. I'd suggest starting with chapter 2 since the introduction as well as the first chapter are more of a manifesto, the data which thoroughly demonstrate the point are in chapters 2-5.

One particularly damning statistic: black people pulled over and searched for drugs are significantly less likely to have drugs than white people.

http://www.nytimes.com/2015/10/25/us/racial-disparity-traffi...

This is a pretty good digest of the figures, but really read The New Jim Crow:

http://www.naacp.org/pages/criminal-justice-fact-sheet
Thinking with Links
"Apology is a sign of weakness"

I don't know if/when this culture will ever change.

One measuring stick will be when we see baseball pitchers apologizing to the batters they hit (intentionally or not).
> Us software people ..

Hardware folk have been way ahead of this curve, actually. MESI was big news in H/W cliques long (long) before it started bubbling up in pop software space around a few years ago.

Also, us software people haven't really solved the problem of high performance consensus, either. (Cue in for Aphyr link.)
The academic would certainly be writing in Google's favor, but the question is, is there any evidence that this academic's writing convinces anyone on the FTC? That is not offered in the article.
China Tech Force: JD Technology Going Cloud
This reminds me of a recent comment that mentioned this issue with syncthing: https://github.com/syncthing/syncthing/issues/1272

Nothing directly to do with psutil, but related to cross-platform handling of differences between Linux, and various * BSDs (also, a reminder that while vendoring dependencies a la "best practice" go, it's good to keep an eye on upstream - or risk missing fixes).
China Tech Force: 17 Years of Tencent Technology
How about "I'm sorry I offended you"?

It's the same basic statement, except it places you as the active party, rather than putting the onus on the person you're apologizing to.
If only one brand seems to suffer from the problem, it's likely a product issue, not a user one. This is a cable, not a UI - care procedures and durability should be roughly equivalent.
KnightOS – an open-source operating system for TI calculators
If you want to know which parts of science are real, look to the engineers.
IE 10 supports flexbox with the 2012 syntax. There is some wonky behavior, but prefixes will work
Short story? No. Adam Langely has extensively written about the subject and difficulties at Google and in Chrome. In chronological order:

https://www.imperialviolet.org/2011/03/18/revocation.html

https://www.imperialviolet.org/2012/02/05/crlsets.html

https://www.imperialviolet.org/2014/04/19/revchecking.html

https://www.imperialviolet.org/2014/04/29/revocationagain.ht...

There hasn't been a lot of progress there but Certificate Transparency is of course a new player that might change how revocation works for different systems as well.
Calling something or someone "disappointing" or "problematic" is how these people evade enumerating arguments while still attempting to establish themselves as intellectually superior to those they are criticizing. They assume to have the correct position and condescend to anyone who demurs.
Lost Grid: A powerful grid system built in PostCSS fractional grid system
The tooling is fine for that kind of stuff. In fact there's an almost embarrassing number of different ways to do what you want (you can use your own local build/test/release, probably scripted with tox and other tools, or you can have Travis CI do it for you automatically, or...).

I personally take a sort of halfway approach: I use Travis heavily for public documentation of the fact that my packages are fully tested and passing, but stop short of having it automatically release to PyPI for me when I tag a new version.

But in general, the tools can't fix the fact that PyPI is not heavily curated. Any non-curated package repository will have the issues you're complaining about, even if the tools default to doing what you want them to do.
Except, under those circumstances, I'm probably not losing any sleep over the fact that I offended you. So that statement means I'm shouldering the blame at some level but it's also typically dishonest. I'm not actually sorry I offended you because I think you're being an oversensitive idiot.
Does anyone know what is being displayed in the background of the picture of Seaborg in the article?

See [1]. It looks like variations of the periodic table but arranged along something other than atomic weight. I suppose if they were still discovering/creating elements, they would align their table differently than one where there have been no changes in years.

[1] http://phenomena.nationalgeographic.com/files/2015/11/GettyI...
Docker is a stepping-stone

When language-specific unikernels become the norm; the OS/kernel, platform, and application will all be released/shipped as a single immutable package.

Stripping the underlying OS to the bare minimum will minimize the effective surface area for security vulnerabilities. The components and dependent modules will be tested and versioned separately. Automated builds of an entire system will be quick. Start up times will be nearly instant. Resource usage will be optimized. etc...
> In May 2012, the law school at George Mason University hosted a forum billed as a “vibrant discussion” about Internet search competition. Many of the major players in the field were there — regulators from the Federal Trade Commission, federal and state prosecutors, top congressional staffers.

> What the guests had not been told was that the day-long academic conference was in large part the work of Google, which maneuvered behind the scenes with GMU’s Law & Economics Center to put on the event. At the time, the company was under FTC investigation over concerns about the dominance of its famed search engine, a case that threatened Google’s core business.
A different Thanksgiving
A university that describes itself in the language of a polictical "think tank", conducting research in support of pre-announced conclusions, is a bit fishy.
8 startups from Australia that you should know about
A cloning factory is private property, a bridge is public access.

Presumably you think the technology in a cloning factory is more expensive than bridge making equipment, but maybe you're not taking into consideration the various codes and legal requirements that are necessary to build a bridge.
Everyone knows Microsoft does not always play nice. Also funding a group is nowhere the same as manipulating academia slyly (fixing academic conference speakers). Yikes. Did not expect this from Google.

> Google played an unusually active role in the George Mason conferences. The Washington Post has previously published emails showing Google public policy representatives giving LEC officials detailed information on what regulatory, law enforcement and Congressional staff to invite to the conference.

https://www.washingtonpost.com/news/politics/wp/2014/04/12/h...

I am from academia. Nowhere do sponsors actively set the agenda for an academic conference.
>Otherwise, Apple makes ridiculously durable products

No they dont. Keyboards are another example of design for fail, not to mention they are unfixable (40? rivets, glued together?).

The way they design laptop pcbs encourages common failures, like fragile thin critical connections (charging/one wire circuit) near the open edge of the case resulting in very common water damage destroying ONE trace/via and killing whole laptop. apple will charge you $750 for new logic board at this point.

Apple thermal design was abysmal until very recently, situation got better only thanks to Intel delivering cooler parts, not by Apple improving own products. Core2 macbook with Nvidia? 99% cooked to death. Vent holes are sacrilege, just like first Mac 128K had no fan.

You want to know how bad apple designs laptops? visit https://www.youtube.com/user/rossmanngroup
That's actually two lessons. The second one is that if you write something online you should assume that it is tied to your real identity.
Then don't apologize. If you're not actually sorry, don't say you are.

Edit: it occurs to me that this hooks straight back in to the article's question. Why are most public apologies so bad? Because most of them are made by people who aren't actually sorry.
Turn your OS X laptop into an awesome web development machine
Doesn't work with JS off. Renders as a blank page.
Seems like they should start with something less risky like self-driving lawnmowers, self-walking dog walker, self-fishing fishing rod, self-flying kite. Every see those robot soccer matches?
I personally agree with and admire the methodology behind Redux, but I'm cautious about using it because it's right at the bleeding edge of web technologies (which we all know are rapidly changing).
This might get a negative response, but let me present a contrarian view: apologies aren't always wise, even when you screw up and feel bad about it.

To explain with an example: I learned to dance salsa a few years ago. I wasn't advanced, but I was pretty good. I was a favorite for many - I could dance with a beginner and make it smooth and fun.

At first, I apologized for a mistake even if it was the girls' fault. But if I apologized, the girl stopped following my lead and it would go pretty bad and there was nothing I could do to fix it.

I learned not to apologize until the partner had danced with me a couple times and learned to trust me. I suspect with public leaders, it's much worse because most of their interactions are with people who don't know them well.
I've been using lost for a few months now. Even if you don't use it it's worth taking a look. (built with PostCSS)
This post was strictly intended for current users of redux and react-router. That could be included yes, but I have limited time and I'd rather publish blog posts rather than languish in my "drafts" folder. I can add a few things to this though.
I first parsed the title as [Jessica Livingston ... Accident...] and was briefly worried.
There is no shift. The question of whether individuals are primary influence on events or whether things are "in the air" and thus almost bound to happen (albeit caused by some individual or other) has been kicked around for at least a couple centuries. Napoleon was one of early examples often used. Was he a unique individual who exerted enormous influence on course of world events? Certainly. Were conditions in the world ripe for an individual to exert forces like Napoleon did, and would someone like Napoleon have arisen if Napoleon had never been born? Also, perhaps, yes.

Evidence for the "in the air" version clearly exists in science and mathematics, where progress leads a certain direction, then a particular individual is the one who makes big advance or discovery. Often more than one person is independently making the same advance at the same time. Think of Newton and Leibniz, who independently and at same time developed calculus. Or Darwin and Alfred Russel Wallace, same thing with theory of evolution. All of these guys did extremely impressive things. But do you really think nobody else would have developed calculus or discovered evolution if these guys had all died in childbirth?

I'm not saying all advancements are 100% "in the air" and that individuals basically do nothing. But, certainly, for many of these individuals -- who we (rightfully) revere -- the same advancements (or discoveries, or destruction, or whatever) would have been accomplished by someone else if they had never been born.
An interesting take on this is the concept of "ghosts" in Zen and the Art of Motorcycle Maintenance.
The article highlights a great apology made by Amtrak CEO Joe Boardman after the train accident that killed and injured multiple people. Do you feel that he should have resigned following that?

In that case, I feel that although he was the right person to make the apology, it's not necessarily his own personal fault, nor would his resignation help make amends.
That's great! Keep using redux-router then. I think you'd find that there's another pattern that works too, but there are multiple ways to do it.
I remember this company from about 10 years ago. I don't remember the company name, but the logic was called Null Control Logic then.
I don't know but I used to have a kind of contrarian opinion on early einstein work and I just want to share it for the sake of the discussion.
When I was a child and the concept of relativity where explained to me I used to think of einstein has having done something unique in the history of mankind.
But the more I started to study and really get soaked in the spirit of the time of the evolution of maths, of physics of other brilliant ideas. the more I came to think of einstein as someone how had a "strategic" action managed to leverage that to the maximum effect.
Now in that light he still "qualify" as a genius but not of the lone genius kind. To draw a comparison, I 'll rather put einstein in a "zuckerberg" genius bucket than a "jeff dean" (of google) genius.
It's just a picture though, so take it with a grain of salt.
Okay, I didn't know that, but I don't know if it matters. Clearly he had to be well known and influential to be appointed as a commissioner.
This field has a well established name: asynchronous logic/circuit.

The author of the article failed to even mention once this term, instead repeating the term “clockless” as he was in some kind of branding spree.

Furthermore one of the article's tags was “apple”, despite AFAIK the content not being affiliated with apple in any way.
I have had 4 or 5 power supplies. Never had to replace any of them. Ended up giving the Macs and original adapters away, as I upgraded to new systems.
quite a few services for $75 inclusive of the DC jack
...
Apple's cheapest adapter with magsafe cable on it is $79.

That's an oranges-to-apples comparison. :)

It's not fair to compare 3rd party repair services to a new Apple product. There are also 3rd party repair services for Apple chargers. For example, I know these guys will repair them: http://madmacsoforegon.com/Mad_Macs_of_Oregon/Welcome.html
> you're going to be miserable if I hire you to do ASP.Net and Sharepoint development

That is probably true in general.
Ive read yhe whole article but I can't make heads or tails of what it is arguing (for lack of a better word). The article connects a lot of disparate facts about science as an industry (academia/grants, journals, etc) to how specific theories evolved to speculation about the nature of the scientific method without ever connecting how those are related or even placing them in the right chronological frame of reference. Renaissance "science" != 18th-19th century "science" != first half of 20th century "science" != post WWII modern "science" and I say "science" in scare quotes because the article entirely fails to separate the scientific mindset, which has arguably been in play from the beginning of human civilization as a logical extension of the natural selection of ideas, from the infrastructure meant to support science as a field, from funding to publication. The latter has changed drastically at least once a century since the Renaissance and you can't understand the former without knowing what that change looked like.

》One way or another, science really happens. The claim that basic research is valuable because it leads to applied technology may be true but perhaps is not at the heart of the social use of the enterprise. The way scientists do think makes us aware of how we can think. Samuel Johnson said that a performer riding on three horses may not accomplish anything, but he increases our respect for the faculties of man. The scientists who show that nature rides three horses at once—or even two horses, on opposite sides of the universe—also widen our respect for what we are capable of imagining, and it is this action, at its own spooky distance, that really entangles our minds.

What in the world does this even mean? Science is revered as much as it is today simply because it has proven over and over again that it is the only field and/or industry and/or intellectual pursuit that is capable of producing truth that is independent of race, religion, or socioeconomic status. THAT is the true utility of science: demonstrating that there is a frame of reference that the vast majority of human beings can participate in and get the exact same results as anyone else. Riding three horses at once is pointless but providing a common language for the epistemology of human civilization isnt just for the warm fuzzies.

I think I have very much misunderstood the author and am butchering his argument for the sake of a straw man, but I can't help but feel that every other paragraph has yet another assertion that is too vague to be wrong but too specific to be right, all without a central premise other than "science works" and "fallible humans do science so science is fallible."
Just a thought, but picking up trash along the highway is one option.
China's Ghost Cities Aren't Exactly Dead
This. In fact by supporting those browsers on your website, you're in effect complicit in allowing malware to hijack those users' logins.
In 1905 Einstein was not only working as a patent clerk, he was also finishing his PHD thesis. (He got it for his paper on Brownian motion.) The other two papers, special relativity, for which he is famous, and the photo electric effect, for which he got the Nobel, are actually using the same trick, just take the (already existing) equations seriously. Granted that is the closest to "one weird trick" you will ever see and it is perhaps even more important for modern physics than his tangible contributions, but it is simply not the case that he was working in a vacuum.
Pennsylvania company enlisted for power-grid cybersecurity project
You know what I think? It’s not our carelessness but the plastic they use for the cables: I own 2 chargers for my MacBook. I do the loop for the charger I carry around. The one I leave home on the floor never got wound up. It looks like this after about two years: https://twitter.com/Udo/status/667295383299579905