skysight-inc/HackerNews huggingface dataset:
Two points about HPKP bypass:

First, keep in mind the alternative. AVs, security suites, legitimate corporate monitoring tools (and malware) will hook the browser function calls to remove any warning/block, causing crashes and vulnerabilities. If they can plant a root, they can do that. (Unless you give them a easy flag to toggle, but then how is it different from just trusting the certificate?)

Consider that most AVs are doing exactly what Dell did, but "correctly". There are more than you probably think. And they will keep doing it (now via horrible binary hooking), because an AV that "protects your HTTPS traffic" sells more than one that doesn't. THAT will increase the attack surface exposed to the outside world (see Tavis Ormandy's work), only to reduce the "attack surface" exposed to your own manufacturer or system.

Second, please consider with skepticism any proposal that solves any concern by adding more UI. Users can barely understand the green lock (as anyone following the excellent work of Adrienne Porter Felt knows), how is the user supposed to react to "hey, this site has a HPKP pin that is being overridden by a local root, are you sure it's the IT Dept or the AV vendor but not your manufacturer screwing up?".

We settled the "should you defend from root" discussion in Linux years ago, do we have to start again from scratch with Windows?
> I like the fact that I live in a country where I can be punished for breaking actual laws not one where laws are vague or can be applied whimsically based on a notion of "spirit" or the intension of the drafter of the law instead of what the words of the law state.

Leave or do something to change the status quo. Those are your options.
I've had to do this a couple of times with some sites having 10s of thousands of records in their wp_options. Most records are prefixed with a plug-in name, you can just search %pluginname_% and in my experience it's only a handful of plugins that write such a volume of records to wp_options.
In another comment I proposed tying a financial payout to those who have been wrongfully arrested. Such a payout would (or should) be enough of a financial burden that prosecutors get rewarded for avoiding large payouts — or punished for incurring large payouts.

The fact of the matter is there is no real downside for a prosecutor right now to put away the wrong person. Prosecutors have every incentive to put away anyone that they think they can. These payouts would also be a very good metric for judging the relative size of the problems, and which areas have the worst issues.
Isn't Science all about letting data shine the light. Why would we have a hard time accepting?
Journal Impact Factor Shapes Scientists’ Reward Signal
Agreed. Not all uses of certs allow for easy automation. For example, ddwrt or a NAS. I would like to use proper certs but don't want to screw around in the firmware which might potentially break updates.
Everybody here in the comments seem to take the story on face value. Meanwhile, the only video attached to the post is pixelated to the highest degree, and you certainly can't see facial features on it.

Am I missing something here?
My simple (and beautiful) meal tracking app that won't sell your personal data
While I support your "keep your head" message, I think it would be more helpful to say something like, "here are some stats about the US criminal justice system". Otherwise it just feels like you're throwing a wet blanket on people's legitimate reactions to something heinous (if a private citizen locked me up for 4 months, we'd view that crime as psychopathic), which sets off my "this person has an agenda" detector.
They presumably have a support agreement for the CMS. They simply need to call up and say "delete all comments prior to this date"

If it's anything like most small town newspapers, there are probably about a dozen people with nothing better to do, who argue and snipe at each other in the comments section of every story, and rarely add any insight or additional newsworthy information. Just deleting them would be the safest way forward and cause no loss of anything really important.
It's just as reasonable as defending someone who says "I don't like pumpkin pie", "I don't like racists" or "I don't like project managers". Nobody's obligated to like anyone or anything else, and you're not a bad person for not doing so.
You can also ignore the foldable hooks on the charger entirely, and wind both the low voltage cable and the power cord (if you have it attached) together in a comfortably-sized coil. This way the low voltage side doesn't have to take any sharp turns (and the other end with the power cord seems to have a stronger strain relief, which should be able to handle a light bend).
Hi. I'm Brian, the cofounder and CEO of Seed.

While we have strong opinions about regulatory and legislative changes that would enable innovation, it's impractical to attempt systemic disruption as a seed stage company.

Our mission is not to change banking just for the sake of it. We are focused on providing a better service for our members.

There's a lot of room for improvement, even within the current system, and by focusing on things we can do rather than things we wish we could do, we'll be able to make positive progress.

Many well meaning startups have pursued immediate disruption and have failed. Our view is that if we are successful within the current environment, we'll have a better chance of being able to help move things in a positive direction.
You know, I'm perfectly capable of explaining why I do things.

Look at what you've done here: you've taken away my agency. Instead of letting me engage in a conversation, you've pronounced some over-arching reason for my comment, thereby not only eliminating anything I might have to offer, but wiping aside any category of comment that is similar to mine.

Gotta watch that. It's perfect fine for an internal dialog. After all, we can't take a year to figure out what everybody we run into is thinking, but in an open conversation, well, the important thing is to converse. Who knows, each of us might learn something.

"...Thinking about this stuff is hard...." -- It hurts, but somehow I'll manage.
I get that, but still no access to params and the ability to change them is still a boon for me. I often will use stand to store some basic state for deep linking certain views. For example a data grid and the sort or filter options. I was able to very elegantly execute this with redux-router and its full exposure of the entire route object and API pairity to pushState and replaceState
It's an incredibly racist way for the world to work, but in practice it does. Fixing that requires noticing it, acknowledging it, and finding the reasons for it.
Following on, it would be far more effective to just radically reduce the obscene rates of arrest and incarceration in this country, make sure bail is fair so unaffordable bail isn't used to force guilty pleas, make sure we have sufficient public defenders (easy to do if we could lighten their case load by 80% or so), and in general radically reduce the chances of someone getting arrested/charged in the first place.

Another interesting attack front would be modern riot control techiques like "kettling". Kettling is the practice of herding protesters with chemicals and force into a road blocked at both ends by police walls, ordering everyone to disperse, then arresting everyone and charging them with failure to disperse. Usually, the charges are simply dropped just before habeus corpus issues set in - after people sit for three days in jail without even a hearing. Kettling is an affront to the ideals of the Constitution and it'd be wonderful to see it either legally abolished, or made unaffordable with successful lawsuits.
Doesn't sound right wing to me. It sounds libertarian, but that doesn't mean they practice what they preach.
I just went through this with a new Dell XPS for my dad.

I performed a wipe/reinstall (with media created directly from a Microsoft download) and Windows 10 never asked me for a key after reinstalling it, and it reports as being activated.

Seems like they've moved away from requiring an OEM key in addition to the SLIC BIOS signature.
> Instead of yanking the cable at a 90-degree angle and winding as tightly as possible

But Apple's design just suggests you do exactly that :/
A) I haven't blamed apple of sworn off of apple products.

B) I have several dell charging cables and they're just slightly more substantial and don't feel bulky at all. In fact if anything the cord from the charger to the wall is slight overkill.

C) There is a solution well inbetween that steelseries uses for their mice:

http://www.hardwareheaven.com/reviewimages/steelseries-kinzu...

I'm not sure exactly what it's made from, but cat has not even gotten close to damaging it yet. Not saying it needs to be on every cable, but for a $75 cable it would be nice.
I'm Brian, the cofounder and CEO of Seed. I'm happy to answer any questions anyone has.

I'll be on a flight for the next few hours, but I'll check in when I land.
Suppose that everyone in the world (except Jews perhaps) believed that it WERE OK for them not to have property rights, then what would protect their property rights?

The truth is that what is right is decided by how well the arguments for it can convince people.

If you look back far enough, the arguments were: my army is stronger than you. As you get closer to the present, we tend to like using better arguments (the veil of ignorance for example https://en.wikipedia.org/wiki/Veil_of_ignorance).

It's based on notions like the veil of ignorance that we can say maybe every human should have property rights lest the group we're part of today lose it when the balance of power shifts.

That's why I believe that jews should have property rights, but don't believe that advocating against what I believe should be stifled. I am confident enough that my argument is better than theirs to not need to prevent their speech if you prefer. I also don't believe that we should stifle: climate change denial, flat earthers, religious people, pro-life people and a host of other people that I believe are wrong.
I love the financial payout idea. The system is broken structurally -- it's not just a few bad people. The best answer for something like that is not to go after individuals, but make the bad behavior more expensive for all involved. At some cost, it'll work itself out.
better than that. let's you sign software as written by Microsoft
A doctor trying to make medical devices more secure
It depends on whether you don't take that idea seriously because you have thought seriously about whether women should stay in the kitchen and have concluded that they shouldn't, or whether it's just because that's what Common Joe thinks.
Using Factories and Promises in Angular to Decouple Directives
> I am not aware of any video or USB driver vulnerability
> which led to security concerns on a typical server setup
> in the last decade.

CVE-2015-3456 was raised in April which had a privilege escalation due to a floppy driver controller, and caused widespread reboots and replacements of images in the Amazon cloud:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456
An update on the Infocom Cabinet, with a side order of ethical debate
That's fair. "Wrongfully jailed" would probably be a better terminology. I wouldn't apply this to someone who sat overnight in the drunk-tank, but I would apply it to someone who spent a month or more in jail awaiting a trial.

"Not Guilty" — in a society with a presumption of innocence — is the same as innocent. If we find you Not Guilty, and you spent 3 months in jail, the State should repair you for that harm.

"Charges Dropped" after a brief-arrest is not something I would punish. "Charges Dropped" after someone sat in jail for 2 months awaiting a trial? Pay up.
Why is this being downvoted? The 34s video they released has 3 offenders, and you can't see any of their faces.

While this could be not the only surveillance video in this case it doesn't really collaborates anything said in the post.
In both of the cases you mention (someone was found guilty or charges were dropped) it seems pretty obvious that the arrest was wrongful, and a jailed person should be compensated. Can you come up with non-trivial example?
I can't find it now but yes there was a study done a few years ago that had one group of elderly people play and act like children, and another do some "serious" adult activity for some period of time, and afterwards they took some markers of aging, and found it significantly diminished in the play group.

But I wonder what the aging effect of our obsession with control is. In other words, would playful thoughts motivated by a desire for control still net those results? (if indeed you can even be playful and controlling at the same time)

Based on what I know about psychology, I doubt it. Motivations matter, and letting go and accepting things as they are is one of the most psychologically healthy things we are capable of doing. I doubt if any of those yogis who achieved long life (if indeed they did) did so intentionally for the purpose of achieving a long life. Instead, it was likely a by-product - as so many of the best things are.
Are you suggesting that the majority of convicted murderers are wrongfully convicted? And if you are what is the basis of that premise?
That's interesting. I'm inclined to agree, but on the downside, doesn't it put everyone publicly on a scale, which shows really how good/bad you are in respect to people around you? That must kind of suck for those surrounded by people with higher scores.

Scoring systems are never perfect for everyone, or adjust to everyone contributions, so someone's always going to feel treated unfairly.

Also, unless you bend the scoring rules (which is opposed to the spirit of the system), you have probably reduced capacity of negotiation to attract talent (can't really pay a higher salary just because you got someone that is prospectively good), and also probably reduces your capacity for retention (increasing someone's salary when they hold a key position for the company and/or they progress faster than normal before someone offers a higher retribution somewhere else).

So in the end, while solving many things which are fucked up with secret salary calculations, it probably also brings in some problems? I'd appreciate if you can give some more details on these aspects...
Not OP, but I bought one because of the HighDPI screen. Looking at the Air's low-res screen makes me feel like there's something wrong with my eyes. With that said, it's far from a perfect laptop.
I use pushtokindle[•] to do just this and it's fabulous. If falls over on a few article types, but works for most things.

[•] http://fivefilters.org/kindle-it/
And then you get people who promote the Duluth Model, which declares men guilty until proven innocent. No, feminism has turned into an anti-male movement. Prominent exceptions aside, feminism is the excuse the current illiberal generation is using to curtail the rights of men. "Bitch" is profane, but the word "mansplain" is apparently respectable vocabulary.

Tell me all you want that feminism isn't a harmful force in society today. That idea is not consistent with my experience. When modern feminists hear that boys are doing worse in school than they used to, they just say "good; it's about time". These days, every time I hear someone arguing against equal treatment, against free speech, against due process, and again diversity of opinion, that person is a self-proclaimed feminist.

Modern feminists really believe that today's men, especially white men, should suffer for imagined crimes of our ancestors. It's perfectly fine to have women-only conferences and events, but if we even think of a men-only club, that's backwards and sexist. Feminism is about double standards and about setting the genders against each other. The idea that feminism benefits men too is a lie.
Yes I wondered whether this complexity is a factor of enterprise design: Each engineer is responsible for a subsystem, ending up with x^n pieces, whereas the counterfeit one took 1 or 2 engineers.
Recognizing that, in practice, racial identity in the US has a significant correlation to various differences in life experience is not racism.
Here's a link: https://en.wikipedia.org/wiki/Hong%E2%80%93Ou%E2%80%93Mandel...
> If I were a decision-maker at Dell faced with the decision of “how do I quickly get my support team the model number of a computer?”, I would not even consider the idea of doing what Dell did. It is simply unnecessary to install a root cert into Google Chrome’s local trust store to solve that problem.

It's unnecessary, but it's a clever hack. The browser will send any server that cert if they ask for it. Thus, any browser consulting the Windows trust store will give Dell the number it wants.

Is it a massively flawed approach? Absolutely, but the explanation does make sense, at least to me.
Free market libertarianism is right wing.
I see you being downvoted, but I'm not sure why.

Anyway, in the UK, YOU are invoiced for board and lodging upon release[1] [2]. The UK Home Office use it as a method of effectively diminishing any compensation payment to negligible sums (but oddly, only for male prisoners - female ones are not invoiced, apparently). 27 years wrongly imprisoned gets you total of around 46 pounds (around $80). [3]

[1] http://www.dailymail.co.uk/news/article-458006/Man-wrongly-j...
[2] http://www.rense.com/general50/25yt.htm
[3] http://www.theguardian.com/uk/2009/mar/22/sean-hodgson-compe...
"Libertarianism" is often a straw-man ideological justification for right-wing policy.
These numbers need to be tied directly to the prosecutor who put them in jail. I am not willing to go so far as to say the prosecutor needs to pay for the cost, but it should absolutely be a part of their record. I think it would be acceptable to come out of the prosecuting office's budget. They are a part of a prosecutors performance evaluation.

So, when a prosecutor says: "I put away 300 people, with a 97% conviction rate" their supervisor can say: "Yes, but you also cost this office $250,000 with your 2 wrongful convictions. We're passing on you and giving the promotion to Janice who put away 260 people on a 95% conviction rate, but only cost the office $10,000."
Stupid has degrees. I'm a lot more confident in the ability to secure Magsafe than something that has to support such functionally open things as Alternate Mode.
I agree, if Google decides to blacklist your domain you basically own a pile of bitter bitter ashes. Is there an effective appeals process if this happens?

I looked into it when LetsEncrypt announced their plans to use Google's backlists. Here's what I found for myself, copied from there [https://community.letsencrypt.org/t/the-cas-role-in-fighting...]:

Google's Safe Browsing FAQ [https://developers.google.com/safe-browsing/safebrowsing_faq] lists three types of sites which receive advisories: Phishing, Malware, and Unwanted Software. Two of the three types provide an appeals/delisting process, but "Unwanted Software" does not. However, it may be that LE's proposed use of the Safe Browsing API is only looking at the first two types.
No jail time for non violent crime? I presume you've never been defrauded, burgled, etc.
>the same people are silent

I'm pretty sure that's some sort of fallacy.
It is when it ignores class and takes people of different ethnic and economic groups and treats them as homogeneous based on skin color alone.
they are at the step of brining in Mckinsley consultants, never a terribly good sign

So Mckinsley consultants are the nursing home cats of the corporate world?

http://nypost.com/2010/01/31/nursing-home-cat-can-predict-im...
Erlang is 29 years old
We would welcome any new entrants that sought to provide a better customer experience. All of the companies you mentioned have already entertained the idea of entering banking, but they haven't yet jumped in.

As for your other comment, apps and ATMs are already being used as an advertising channel. I wouldn't be surprised if we see (much) more of this.
Replying to myself, because I've found that my comment ended up supporting the original article, at least in part, which I didn't particularly like or find myself nodding along to.

I guess where I find that I agree with the author is that we could all use to do a better job of really listening to different opinions. But where the author was targeting that advice at the "victims" who shouldn't shout down their "oppressors", in my experience it is more often the case that people with brash opinions that tend to offend people are the ones who "know they are right" and are unlikely to really hear the other side.

But I suppose there is plenty of closed-mindedness, lack of charity, and stubbornness to go around!
This dude seems to be able to prove "Superhuman" abilities in scientific environments based solely on mental fortitude and control http://www.icemanwimhof.com/innerfire
I absolutely agree with the reforms that you've proposed. I think these are another important reform that can bend the curve on prosecutorial misconduct.

Prosecutorial misconduct and irresponsibility is a big reason why we have obscene rates of incarceration. I totally agree that we should radically reduce the rates of incarceration, but how do you do that? Do you tell prosecutors to incarcerate fewer people? Do you give each one a maximum quota? Do you apply a penalty for each case that they get wrong?
The general prison population is subject to less post-conviction scrutiny. However, it's subject to more pre-conviction scrutiny; that is to say, the people tried for capital crimes were likely charged under a lot of pressure from the public to charge someone so as to show that Something Is Being Done. People charged with petty drug possession get more vetting before being charged.
Thanks to the author for highlighting the insidious effect of soft lobbying.

I'm also interested in difference between American and European approaches to anti-trust law. From what I understand, US regulators generally look for harm to the consumer, whereas their European counterparts try to detect harm done to competitors.

It seems that the European approach might insulate European firms from healthy competition, while leading to dead-weight loss of consumer surplus.

For example, if Google offers Yelp's reviews up on a Google.com domain, that might be more convenient for the consumer, who doesn't have to bounce around to different websites to find an answer. And it also might spur Yelp to find a way to add unique value to the consumer's experience instead of providing superfluous services.
> The attempted murderer after 10 years may be incredibly vindictive and immediately seek revenge, possibly mass murder in retaliation for his incarceration.

I'll take that chance. For every how many people that just spent a decade in jail do you think there will be one that manages to squeak by observation and hearings for a decade?

How many people would you be prepared to jail to save one life of an innocent person?
I would argue that it less adds cognitive load than it shifts that load from other portions of the language. Dealing with references makes some operations (such as telling if two variables contain the same data in memory) very easy, while making others (such as top level access to hash/array items) harder. I think that it makes some advanced operations easier to understand at a glance and reason about at the expense of those unfamiliar with the language (or references in general).
3D Printed Revolver