skysight-inc/HackerNews huggingface dataset:
World Uyghur Congress which allegedly represents the "collective interests of the Uyghur peoples" is funded by the National Endowment for Democracy and it's president is living in the US.

https://en.wikipedia.org/wiki/World_Uyghur_Congress

So please don't tell me there is no interest. If the US government was impartial then they would at least refrain from funding this group as it is not their business to interfere in internal conflicts of foreign countries without UN resolution.

> it's pretty insulting to their culture to imagine they'd be freely and happily assimilating Han Chinese culture

China has pretty strong minority rights and the Uyghurs even have their own autonomous region.

But aside from that: No one will happily assimilate. The strong will always crush the weak. Did the native Americans happily assimilate? I heard there were 100 million of them before the settlers came. Where have they gone?

Edit: Nowhere did I insinuate that they would happily assimilate. Aside from that, this is not only a thing that authoritarian regimes do.

In the EU it currently seems as if every politician is thinking about how to assimilate the Muslims. Trust me, no one is going to ask them if they want to assimilate.

They will be forced. And this in a full fledged democracy.
Certificates are already being pushed to CT log servers.
Have you considered using the Backblaze pods?
I am glad that I am out of the service now.
"When the return value is needed, the Swift += operator cannot be used in-line, since (unlike C) it returns Void."

Why was this decision made?
The Dell DSS7000 chassis without the computer nodes on the back (which are a requirement (45 drives per compute node)) is cheaper than the 90 disk JBOD from SuperMicro. I can't disclose pricing, but it may be worth reaching out to Dell for what they can offer there.

You might be able to get better density for similar pricing. Just a suggestion :-)
scala has no ++ or -- operators. It's a-okay.
Swift is shaping up to look a lot like scala actually.
The biggest problem with ++ and -- operators is that they hide a side-effect in another unrelated operation. In a language that supports more functional approaches at the outset, it makes sense to just omit these operators I think.
The most interesting part of this article is actually the last few paragraphs, where the ornithologist explains that wild parrot actually "speak" different types of "parrot-languages".
The criticism on this thread is just incredible!

How about the Christmas tree lectures folks? Any anecdotes or your favorites? :)

Discussion on previous lecture
https://news.ycombinator.com/item?id=8718875
There's been some efforts to support IIS, including a client for use with powershell.

[1] https://github.com/ebekker/ACMESharp
Yes this would be one way of doing it. I think we should try a range of different funding models to see which one works best. What we have learned over the last 25 years is the traditional laissez faire model has failed us when it comes to antibiotics.

One thing I should mention is we don’t have to keep developing totally new antibiotics we can develop antibiotics that are tweaks of existing antibiotics. Antibiotic resistance is an arms race that we can never win, but we can stay ahead with continued investment.
If typing is the bottleneck in your development you're not solving difficult problems and could probably make more money solving difficult problems at a different job.
By Hipster you must mean "intelligent business owner not throwing money away".

Storage is cheap when you own it vs renting it: https://i.imgur.com/WZriUP5.jpg
No, the whole point of LE is that you wouldn't need one because you'd automatically get a named certificate for each one of your sites.
Which type of keyboard do you use? I know English-International has a similar issue with `'`, `"`, and `'`. I think QWERTZ or a German keyboard do as well? Can try changing it to English - US to get around that if you run Windows. Not sure about Mac/Linux.

I swapped the US out for international because it was important to me to type Pokémon properly. It is an annoyance to have to type ` followed by a space because it is waiting for a vowel to let me type ù. Same with ' which let's me type ç or " which lets me type ü... etc. I disable it when programming for the reason you cited. It can be annoying to deal with. Especially when my IDE tries to autocomplete " and I typed "" instead of " (followed by a space) and I get """".
Anything that grabs HN attention (and being on index page means so) is appropriate. HN isn't a tech-and-startups-only site, it's perfectly fine to post other stuff. Especially if that's a cute kitties.
10 Percent
iboss Cybersecurity|San Diego & San Francisco |ONSITE| Full-Time|
Sr. Software Engineer

iboss Cybersecurity has been dedicated to arming organizations with the technology they need to defend against today’s most advanced and complex threats. This is the cutting edge of security with focuses on mobile technologies, cloud innovation, data protection and behavioral defense technologies. We are experiencing rapid growth and are backed by Goldman Sachs. Along the way we’ve achieved over 65+ technology patents and a customer retention rate consistently above 98.5%.

We are looking for a passionate Senior Software Engineer, who is ready to work on the cutting edge of Cyber Security Software solutions. This is an excellent opportunity to become a core member of a rapidly growing software development team. You’ll engineer solutions to challenging and meaningful problems, with the ultimate goal of expanding and enhancing the iboss security solutions suite.

Required Qualifications:
•5+ years of experience using Java technology stack and servlet containers
•3+ years of experience with frontend technologies (Javascript, HTML, CSS)
•Working knowledge of database technologies and SQL, especially PostgreSQL
•In-depth experience with OO design and proven design patterns
•Comfortable working on a Unix environment
•Experience working in an Agile environment
•Team player with excellent interpersonal skills and the ability to work in a fast-paced environment
•Strong analytical capability, independent thinking and good decision making skills
•Must have a good sense of engineering tradeoffs, with an ability to understand the impact of software changes on extendibility, scalability, performance, and maintainability
•Demonstrate excellent oral and written communication skills with the ability to listen, articulate, facilitate and advocate

Preferred Qualifications:
•Experience with Tomcat and Spring
•Experience with single-page applications using frameworks such as AngularJS
•Knowledge of security, networking and handling of large datasets
•Ability to identify and resolve performance problems in code
•Experience building RESTful JSON APIs

Please submit resumes to: e.kim@iboss.com
http://www.iboss.com/careers
It's fine if you believe that, and it's reasonable to point out the huge class distinction between a doctor and a greeter at Walmart, but I just want to point out that your sentence pretty much reduces to "Yes, being a doctor makes you wealthy".

Which, again, fine, but I can't be the only one who thinks we'd be better off if we had more doctors in Congress.
You realize that Uber loses even more money per year, right?
Users should be able to safely ignore certificate changes. No one should need to install Certificate Patrol to have a safe experience.

Of course, if the certificate changes to an untrusted one, the browser should flag it -- and if the server specifies HSTS, then the browser should block the user from clicking through anyway (increasing the pressure to make sure the cert is always trusted and unexpired).
Actually, Ubuntu snappy does that.
The business model of CoreOS is more focused on large clusters & cie.
YC-backed cannabis tech company hiring developers in the Bay Area
This has nothing to do with the OP / what library books were read. The library certainly does know what you read. Likewise, Google and even real people at Google may know what you watched. But that's not surprising. It's to be expected.

The real comparison is if Google gave that information, de-anonymized, to advertisers. Then there would be an issue.
I'm really impressed by the attentiveness of the Swift compiler team. Found this in the repo: https://github.com/apple/swift/commit/666646fee95bc75ca81e1d...

One tweet and the bug is fixed within a couple of hours. Wow!

Found that issue while working on the Pythonic.swift project: https://github.com/practicalswift/Pythonic.swift (btw, contributors welcome! Know Python? If so, a very good way to jump into Swift programming is by contributing to Pythonic.swift: a Swift implementation of selected parts of Python standard library)
So.. get rid of 'x += 1' as well?
It's appropriate as long as it is of interest to the audience is the policy, is it not? And this here member of the audience has just upvoted it, finding it more interesting then the rising inequality between Edward Snowden and Brendan Eich, which has nothing to do with "hacking" and is perennially trending on HN because, well, every freaking thing is appropriate if upvoted!
Some companies also have entire application suites based on a patchset based on a particular version, so before you can even do your whole regression suite, you first have to re-write your entire patchset to work with the upgrade.

In short: Ouch.
A dumb question: Shouldn't they be able to setup drainage into the ocean?
The Pill versus the Bomb
Title should be > OpenSSL Security Advisory [3 Dec 2015]
Mexico city is one of those places where you wouldn't want to dare to get a normal cab, such a bad reputation they have
You always have free action under all circumstances. You may not have freedom from the consequences of your actions, but usually you will, unless you take a few specific verboten actions. To determine beyond a doubt what you have the right (as the laws are capricious, enforced by hard and jealous men), do something, then observe the consequences. This may seem rudimentary, but it matters, as many new rights are enshrined explicitly or intuitively via actions without precedent. This is how the legal system works also.

You can get a tattoo without repercussions from the law; you can amputate your arm without repercussions from the law. In special situations where you are pregnant, the law may cause repercussions to you under certain circumstances. From this, you can assume that you have an unlimited right to self-modification, though you do not have an unlimited right to modify fetuses, which law does not understand as being a part of your self. This right is not explicitly codified anywhere, though we implicitly understand it to be the case, even in extreme cases such as heavily pierced or tattooed people. I am not equating cosmetic actions with genetic modification, but the fundamental right of self modification is the same for both.
AYFKM?

If you kill all the rich people and take their money, who is going to be left to organize businesses or produce the kinds of inventions that benefit society? The "next-richest" people?

A society that demonizes its most successful members is a doomed one.
Bad people are shooting good people in gun free zones.

And here's the solution: Good people, turn in your guns.

Yeah, sure, we'll get right on that: "[2015] Black Friday saw most federal gun background checks ever in a single day": https://www.washingtonpost.com/news/morning-mix/wp/2015/12/0...
Android Audio Latency
My grandparents were generals in the Chinese military. When my parents and their siblings came to the US for grad school, they were all approached by the CIA.
Difficult but not impossible. Client side encryption on such data can fix this, but can be difficult to implement in a good way that is transparent to users. You can even still submit/keep anonymized information about videos viewed.

In almost every current business case it probably isn't worth it to bother.
> Keep both x++ and ++x in the language, even though they do the same thing.

?
So in other words, like that Avatar movie James Cameron directed, except with robots replacing the Na'vi. Or if you're a Doctor Who fan, like the episodes with the Gangers.

Either way, it'd definitely make remote working a lot more interesting. And a lot of other things too, with the military potential being near endless...
Yep. The option is called 'webroot' and using letsencrypt-auto (the offical client) I deployed this on a few servers and setup cron to renew automatically. It's not very well documented (at least wasn't when I last checked).
TSA security lines getting worse
Oscar slashes commissions amid turmoil in health insurance market
> Adorable and fascinating

The second adjective covers why it's HN-appropriate.
I think these are gonna be too little too late for the platter drive market, especially with SSD capacities skyrocketing recently (thank you 3D NAND). Toshiba and Samsung both have announced plans for 128TB SSDs within the next 3 years - I can't really see platter drives competing with that.
> yeah, very self consistent, pretend you care about the GPL, then decide it is the vendor you really care about.

No, I'd be saying that about any other vendor who released code under a proprietary open source license, too.

> Who cares that Apple controls GPL software installed on almost every GNU/Linux machine?

How exactly do you think they do that?
Same day, in fact: https://git.cyrus.foundation/diffusion/I/browse/master/lib/c...
I read more about the slice-by-N algorithms because they sounded really interesting. The way they work is by using a set of lookup tables that are 4k to 16k in size (larger lookup table for larger N). The reason they are fast is because the lookup tables fit within the L1 cache on modern CPUs. So when you do 100M rounds of CRC32 it is super fast because the table is always cache hot, but I don't think this result is informative if you just want to occasionally do a CRC in between doing other types of work (especially for small buffer sizes). You will have to wait as the lookup tables are brought up through the cache heirarchy _and_ you are potentially evicting other useful data from the cache at the same time. Presumably PCLMULQDQ does not have this drawback.
C++ is not even a good increment of C. Yes it had a lot of inspiration from C, but in all seriousness, it should not have been called C++ since it is not backwards compatible with C without some serious work. Honestly longest running ironic language name.
Swift 3.0 Upcoming Changes
Back in the 90s Fetch FTP was a charming and ergonomic FTP client for the Mac. (And it still exists.) It's fascinating how back then there were so many software products I felt affection toward. BBEdit Lite too, Aldus PageMaker, FileMaker. I don't know what software I feel that for nowadays. Bash, vim, Postgres, Ruby, but no commercial GUI apps. Oh and scp is really great, you should check it out. ;-)
Losing weight is easy. Diet and Exercise is all it really does take (Yes, I've done it.) I'm now a personal trainer and powerlifter.

The problem is a few things:

1) We encourage people to be overweight. You see all the time on facebook and advertising "Fat is beautiful" or "You're perfect the way you are". Sure be happy with yourself but that doesn't mean you're healthy.

2) The food we eat with out even thinking are full of empty calories. Snack food, soda, etc. All lead to over eating, filling unsatisfied which leads to more eating.

3) Everyone is so "busy" with everything in their lives that can't imagine spending 30 minutes to an hour at the gym every other day. Cut out an hour of TV, Leave work a little earlier (you're probably over working) and do some good for yourself.

4) These fad diets, fake pills and other bullshit don't work. People want something that works instantly. Doesn't work, you need to put in the effort.

You can blame genetics or whatever you want, but unless you really try and give it 100% you won't see results. Yes, it will take longer than a couple days.
I'm not trying to say anything about original owners or inhabitants. My only point is that its nonsensical to say that you can mine an asteroid and cast off the slag without saying you haven't laid claim to it. Having the right to control use of or destroy an object is as good a definition of ownership as any I know of, and that's precisely what you're claiming when you mine an asteroid. I guess I should have just said that, instead...
Yeah I went by most people I know (some from Ohio too! btw, but they use Uber when traveling only to other cities) and extrapolated to "most" just by them being average Americans -- non techies, various ages,...

Most tech people I know have both apps installed and use both, like you do. But I don't think that's representative of the general population.
Which is actually quite common. Unicode is ASCII compatible and on Windows you still have to do carriage return before a line feed, although there are no teleprinters involved.
Google Developers Blog: Google Cast Remote Display Plugin for Unity
I thought that was the problem with helium, it's hard to store because it leaks through everything so easily
Device Packaging and Thermal Control Optimization
>"China has pretty strong minority rights and the Uyghurs even have their own autonomous region."
No, China is demographically trying to wipe out both the Tibetans and the Uighurs. The latter being one of the last conquests of Imperial China.
What Would $100M Dollars Do for You?
Is this some kind of troll/satire on aesthetics?
Haha very cool! Reminds me of "Serge HouseBot" from Caprica.

http://www.geek.com/wp-content/uploads/2013/06/serge-housebo...
There is a long, long distance between what Tesla has today and a car with no driver.
Best Web Hosting Choice and Why It Is
This is among the most exciting things going on in the web world, for me. It's a pretty dramatic change that now every website can be encrypted, by default, and in a secure(ish) fashion (it doesn't really do much for proving identity, but SSL has been broken for that for years anyway).

I suspect integrating this has been the most requested feature for Virtualmin for the past several months (and we're about to roll it out, probably next week). For whatever reason, SSL is just always intimidating for people...even when it's been almost entirely automated, the back and forth between the CA and the server and dealing with private keys is a deal-breaker for a lot of non-technical users, so many of our users who are new to web server management have problems with SSL. It follows close behind DNS in terms of how much confusion it causes.

Anyway, I love that Mozilla and others took the initiative to pull this together, and used their not insignificant clout to push it to completion.
At least you should not. StartSSL (and probably other CAs) has a prominent feature to create your key pair for you, which you need to skip to use a signing request. Always use the latter!
This is amazing.

I do some work around suicide prevention.

Having access to this data means I can ask why so much co-proxamol (a medication that has no evidence of effectiveness, but which is also very dangerous) is being prescribed in Gloucestershire.
The biggest usability challenge for me is that each crypto tool uses its own key store. kgpg, ssh, yubikey, openvpn, etc. Do you foresee allowing your client to pick up the private key from a smartcard like a yubikey? My goal is to centralize all the certs in a place that I will always have access to - and not have a different passphrase for each cert (which I will forget) or 1 passphrase for all certs (even worse). 1 passphrase for my cert-store (the yubikey) but which contains all my certs.
I think it's fair to say you're commanding the interpreter to run some function. Particularly when it comes to builtins.
I would love to work for an outfit like Pivotal. Unfortunately I live in Maine and I know they don't do remote. :( I'm feeling seriously burnt out at my current position as the culture seems to be predominantly "throw something against the wall." There seems to be little thought towards maintainability, testing, etc. so feels like I'm pushing a rock up the hill continually trying to provide suggestions in PRs, etc.

If anyone knows of any well run consulting outfits that work with remote workers, practice pairing, TDD, and just all around "giving a shit" I'd welcome pointers.

Thanks!
Coincidentally, I've had a little discussion with a non-programmer friend of mine about this operator the other day. He does a little scripting in a game maker program sometimes, and told me that the ++ operator confused him way more than it ever helped him, because he keeps typing stuff like "x + 7" instead of "x = x + 7"
How does lets encrypt handle possible phising domains?

Even if there's zero mitigation I think the benefits will outweigh the downsides, but I wonder if there's anything that stops a criminal from registering a domain that is very similar to, say, that of a bank?

I know from experience (ethical hack) that the traditional authorities won't easily let you register 'suspicious' names like: <bank>-<name>.com where the original domain is <bankname>.com. Or something like that.
But its more complex than that- there are the prefix and postfix forms, which both leave the base incremented but return a different value (before or after the increment). That's the complexity that trips up novices.
First, Not many people buy expensive mechanical watches. If they do, they already know that the time may be inaccurate sometimes.
Second, Macbook Pro is not a great example since its primary purpose is not displaying time.
Personally, I would avoid changing SSL processes close to the expiry of your current certificate if uptime is a significant consideration[1]. If it's a toy or personal use server, then sure, learn a new experimental solution and save some money.

If you have problems with letencrypt.org, there are cheaper options for a domain validation certificate than $150. namecheap.com generally has competitive prices on various types of certs from various registrars. options and is pretty easy to use, startssl.com has free domain validation certs, but the experience can be a bit harrowing the first time around [make sure you keep a copy of everything in a safe place, you don't want to screw up the idiosyncratic process that startssl uses]).

On production servers, it's always better to use a tested process rather than winging it. This is doubly true when you have a hard deadline like a certificate expiration hanging over your head.

[1] in fact, I don't even like to let certs get close to expiry even when I'm not changing processes, since missing the deadline can cause so much unnecessary grief

edit: A bunch of little tweaks, nothing that changed the main thrust of the comment.
Windows no longer installs telnet.exe by default anymore
There are a few weird conflations in this article that I think could use a bit of cleaning up. Why is om/next being compared to Falcor and Relay? Om in general is a very React-oriented story; why not compare how working with the two feels like?

It also feels like the author is primarily interested in client-side ClojureScript, in which case the Leiningen start-up time should really only be a problem once per...day? week? I re-start my Clojure(Script) REPL process only when I change underlying dependencies, which isn't frequent enough for it to be a major issue.

The biggest issue for me that I agree with is the immature tooling thing, but that's been getting a lot better since I also blogged about being frustrated with ClojureScript (relevant link: blog.venanti.us/clojurescript-blues/). Vim and the CLJS REPL now work well together, and I've been really impressed by the direction and velocity of Figwheel as a project.
That is certainly the more moral thing to do. But if it is really the most long-term profitable business strategy, then do we suppose that Uber is not only greedy, but imprudent? And that these two mistakes are canceling one another out?

I admit that such a situation is possible, but I'm skeptical.
Is there a reason calibration isn't automatic? Say with some sort of genetic algorithm?

Do the simulations take too long?