skysight-inc/HackerNews huggingface dataset:
Is the lure of letsencrypt that

1 it's accepted without warning in browsers or

2 it lets users ignore learning how to use the openssl binary (or writing their own tools with libssl, polarssl, etc.) to generate ca and site keys, certs, csr's, crl's, etc., or

3 both?

Here, the author appears to benefit mainly from 1.

Assuming letsencrypt does not do any sort of commercial CA-type "verification" then why do they need to be a CA? Why does one need an account?

Answer: browsers clinging to CA system.

Why not just get browsers to drop the warnings for self-signed certs?

The goal here, I thought, is to facilitate encrypted traffic, not to give a false sense of "authentication", correct?

Encryption and authentication are two different things.

Every user should understand that.
You didn't even cite the entire sentence... Feel free to elaborate as to what is false as I don't see it, unlike your earlier statements.

And no, it's not facetious at all. It's a theoretical example of how one can make completely honest and truthful statements, that are misleading and insignificant, an example you can obviously agree with because it is indeed a silly and insignificant statement, yet completely truthful that our bookkeeping system could indeed register the change of ownership of a $1 bill by processing trillions of money transfer orders in a given day, generating a volume of transactions that exceeds GDP. There's nothing false about this.

The statements by you that express mpesa transaction volume as a percentage of gdp are as meaningless without further data. And if you do add the further data, as I have in my post (conveniently ignored by you), you'll find mpesa is much less significant than your statement would lead people to assume. That's why I called your statement misleading and called you out on making the statement, despite the fact your corrected statement is 100% truthful.

I won't require you to agree with any of my points, that's up to you. But you can hardly call me facetious when I called you out on an error in your statement which you corrected, in my first post, and did the homework you should've done by adding context to your empty statements, in my second post. If anything, I'm taking this much more seriously than you, facetiousness then is quite an ironic accusation coming from you.
I would change how the trailer docks.

Right now the weight is still on the wheels and each additional load strains the suspension. Most trailers have pneumatic load balancing, so the bed drops with the load and then slowly pumps back up. Because of this a free-floating hydraulic ramp is needed. These interfaces are finicky and an unnecessary bottleneck. I've managed to get a 5 ton lift stuck on the ramp before.

I would put anchor points akin to trailer hitches on the back corners of the bed. The driver backs up to the bay, aligns the posts over the hitch, and hydraulics lift the hitches until they mate with the posts. Next they would lift up the truck bed, pull the truck back towards the bay, and set it down in a grove so the bed and warehouse floor are perfectly aligned. It would be similar to how a u-haul ramp mates with the truck bed (https://youtu.be/Ch7ukPPtZOI?t=46s), except you would be mating the truck bed with a building.

You could also have a giant drawbridge style ramp that lowers down and anchors to the back of the truck bed. It could double as the bay door. You could also add in outriggers that hold the bed at one height during loading. Alignment would be tough. Possibly the outriggers could sink into divots in the ground and shift the bed into position.

Both of these would also add a full width mating, which would allow for multiple bots to load at the same time.

Heck, I like the idea of having 4 hydraulic lifts, one for each corner of the bed, and have them lift the trailer up until it is flush with the warehouse. This would allow for the added perk of making taller, 2 story trailer beds and loading in two sets of shelves.

There are infinite possibilities, but I would be many of them are cheap enough to be worth the investment. One this is for sure, operating a lift is boring and I have way to much time to think on the job.
Maybe the help is owed to you, not the other way around.
> The site was built by a team of mathematicians who traveled to more than 100 countries ...

I want that job. Maybe I should do a startup that rates the world's vegetarian restaurants. VCs, are you listening?
Is This the Best SaaS App Builder for the Regular Joe?
Ownership and who is in charge are orthogonal in this regard. Even if everyone has equal shares in a factory, they are going to vote for what's best for the factory and it's going to piss the workers off that have the worst jobs.
​Before the Web: Online services of yesteryear
It does unfortunately cure them of having an autistic child.
To see how Sicilian is far away, and considered a separated idiom, the Sicilian translation is illuminating:

"Dov'e` andato il ragazzo" -> "Unna sinni ji' lu carusu?"
You're joking right? The site could just use cookies like every flash game ever made. The site could generate a registration for the user. The site could take manual registration from the user. This trend of linking accounts between sites is completely inappropriate from people who are well aware of the privacy and security issues the internet faces today.
Python: Generators, Coroutines, Native Coroutines and Async/Await
I've used it at 5+ companies (incl. Fortune 500) so far for real, production work. The code bases were sometimes well over 100k LOC.

It may not be a hugely popular choice, but it is used lots in the wild.
I feel so old, my first website run on a DEC Alpha.
As a mechanism for chronic toxicity? Sure. As a mechanism for acute toxicity? Not a chance.

The "slap on some calgonate and rush to the hospital" protocol (of which you were quick to remind us) was justified by way of the acute toxicity (to me, anyway), not prevention of chronic toxicity, so my remark stands.
All of these tables relate to one another

Where all this gets particularly interesting is wherever,
by traversing the relations between table...

These are the merits of the “relational” database.

That's not what "relational" in "relational databases" means.

He even links to Codd's paper which defines a "relation" explicitly:

The term relation is used here in its accepted mathematical sense.
Given sets X1 , S, , . . . , S, (not necessarily distinct), R is
a relation on these n sets if it is a set of n-tuples each of which
has its first element from S1, its second element from Sz, and so on.
...
I think I'm more impressed that LiveJournal is still around 10 years after it first came out.
Given that everyone gets a different 'input' string for every problem to prevent the simplest form of cheating and to enable such a thing as a leaderboard, I think this is a very reasonable measure, better than having yet another e-mail login for a service that is by definition seasonal.
Also, when you connect it to GitHub, it does only ask for a very limited amount of data. What solution would you have proposed?
> Are you suggesting some other consequence of this case, leading to stagnation of IE development? I can't see any...

I can't directly see any either because I don't know anyone at Microsoft, least of all on the IE team. But I think the coincident pause in IE's evolution is undeniable. As for a cause and effect link, that's just conjecture. To me, it seems likely that there were either formal business decisions that reduced the effort expended on IE or at least a psychological block that had much the same effect.

Look, I am a Mozilla partisan through and through. I've been using Netscape, then Mozilla, then Firefox for years. So in many ways, I applauded the outcome of the United States vs Microsoft case. But to consider the case as one of only upsides and no downsides seems a bit narrow minded.
A reply I made to another user in this thread:
"You're joking right? The site could just use cookies like every flash game ever made. The site could generate a registration for the user. The site could take manual registration from the user. This trend of linking accounts between sites is completely inappropriate from people who are well aware of the privacy and security issues the internet faces today."
I appreciate the update you posted, I'll definitely read it. The paper mentioned just stuck in my head and it didn't occur to me to research it in-depth before posting.

> I wish I could understand why so many programmers are eager to assume their skills are due to something 'innate'.

I'm not eager to assume that but it lines up with my experience over the years learning how to program and helping others do the same. It seems like it comes easily to some and harder or not at all to others. When I first read summaries of that study, it sounded correct based on my experience.

Going a little further ... I will say there's something enticing about thinking that you have a special skill that others do not and that you've found purpose for that skill. It's a bit like "finding your soulmate" in a way. I think a lot of us, myself absolutely, want to find that thing that we're good at and were made to do.

Might also be good old fashioned ego :)
Why build v8 when SpiderMonkey existed? Why build Chrome when Firefox existed? Ad infinitum
How did Stalin get away with murder?
The Greatest Echo Chamber Ever Created
The real problem Mozilla has is eroding trust. They're not the first (Windows 10 practically auto-installing itself is another example, or heck, AMBER Alerts on my phone) but it's the same idea: power has to be used wisely.

When I see something as arbitrary as Pocket just show up as one of a handful of toolbar items, my reaction is no longer "oh good, a Firefox update"; it switches to "great, what crap have they auto-installed and enabled-by-default this time!?", to finally "turn off auto-updates".

Same with AMBER Alerts. In theory, a good idea. In practice, every single one of them has occurred at an odd time of day, presenting itself as important but turning out to be the vaguest, most unhelpful text message I could have come up with. Solution? I had to turn them off. A good idea, ruined, by a stupid application of that power.
Well, maybe I won't read it ... requires a login
Womansplaining?
Agreed. Pretty much a fail as a visualization without that.
Unless my memory is playing tricks on me, a couple of months back, Mark Russinovich (of SysInternals fame) gave a talk somewhere and mentioned that they were looking into that.

Sounds kind of strange to say it out loud, though. ;-)
California Farmers Will Intentionally Flood Their Fields This Winter
Telling the browser to accept all self-signed certificates is a bad idea, because it's no more difficult for an attacker to create one of those than the legitimate domain owner. Let's Encrypt has at least two huge immediate benefits:

1) It does challenge-response domain validation from an external server. It's not enough for an attacker to intercept and modify traffic between the client and server -- they also have to control the route between the server and LE. This isn't an infallible check but it dramatically raises the difficulty of an attack, especially if the check is done from multiple independent locations.

2) LE supports Certificate Transparency, which means they verifiably log all certificates that they issue to multiple third-party observatories. Even if an attacker can bypass domain validation, they can't actually get a certificate without immediately making it obvious that they've done so, giving the server operator the chance to revoke the certificate and investigate (if they're paying attention).
A challenge - I'm sure you know - is that a study found that doctors seldom apply Bayes theorem more accurately than they'd do by rolling dice.

http://slatestarcodex.com/2013/12/17/statistical-literacy-am...
It authenticates the same thing most ssl certs do. That you have control over the domain. Self-signed certs don't do that, so a letsencrypt cert is actually more secure then a self-signed cert.
That precisely illustrates my point. See also, Agile as it is currently practiced in many companies. Politics, in any form, is a very rough game.
The founders were interviewed on a recent A16Z podcast: http://a16z.com/2015/12/03/nootropics/
HN visitors should boycott links from Forbes rather than encourage their idiotic interstitial ads.
if you can make them believe anything, you can make them DO anything.
London AR/VR Showcase Day Recap Video - 1 Dec 2015
It's totally acceptable to a lot of people. In fact I wouldn't be surprised if adding email registration reduced the conversion rate.

This adventofcode is a gem, you are really missing out if you let the registration system deter you.
This is what I end up using the GitHub online editor for.
DroneCop: The Future of Police in the Sky
You would love this novel. http://www.amazon.com/Independent-People-Halldor-Laxness/dp/...
New England Journal of Medicine write up of this case:

http://www.nejm.org/doi/full/10.1056/NEJM199806043382305
Email registration is the same thing. There's no reason that anyone should be forced to connect an account from another site to this one. However, at least with email addresses, it's trivial to use a temporary one.
Source, please?
Killing unarmed people with a firearm should be emasculating. Just like in western flicks.

If you have accepted for some reason that you are evil scumbag, then that's it. Now you choose whether you are man scumbag or boy scumbag. School shooters are usually already somewhat isolated and they usually end up dead. They don't care getting isolated. They seem to care about posthumous fame.

I don't mind if masculine is not good. What I'm trying to say is that seemingly only surefire way to get the status of a man is violence. Inventing some other certain and positive way to get the status of a man would be great. But in the meantime it would seem like a good idea to make the "madman" status less certain.

>You won't appreciably reduce mass shootings by verbally stripping mass murderers of their manhood, rather than just calling them evil. Sorry.

You can't back that claim in any way. Sorry.
>In every culture in the world, a man putting his hand on another's shoulder is a gesture of dominance,

What an example of cultural confusion on display. Because this sounds absurd to me. Here, a hand on the shoulder, is a clear sign of friendship and would be relieve tension in a situation.
Do the same people who think there is a gun epidemic and guns need to be controlled more also think there is a drug epidemic and drugs need to be controlled more? It seems the same reasoning holds. Interestingly to me, conservatives and liberals seem to be inversely inconsistent on the underlying reasoning.
Ruby Deep Dive
When Formality Works
LiveJournal is older than that; it was launched in 1999.
But female suicide bombers and one of the San Bernardino murderers, in just the past week alone disprove his most emphatic hypothesis.

I mean, declaring that women don't become mass murderers is 100% wrong. So does anything he wrote stand up, then?

Also, Countess Erzsebet Bathory of Hungary, just for fun.
What are the privacy implications of having your github account provide an oath token to some rando site that you input a few numbers and strings into?

I guess they could collect wrong attempts and use them to try to shame people?
I can find no easily accessible references as to exactly what "retro" games/applications are actually supported. Pretty essential information I would have thought...
Anyone knows if this works with a BeagleBone Black? They mention the Raspberry Pi as supported hardware (http://www.lakka.tv/doc/Hardware-support/), so hopefully it should run on the BeagleBone as well.
It's the small accomplishments I appreciate.
There's a full list of consoles here: http://www.lakka.tv/doc/Hardware-support/
Data Elixir #64: Master Algorithm. Best of Viz. Deep Learning Frameworks
Ask HN: Giving an Hour of Code Talk at a Public High School, RFC
I've been asked to do a short introductory lesson to "coding" (god I hate that term) for a couple of public high schools.

A day later I'm doing the same thing at a local library.

As many of you have probably experienced, high school and college CS programs aren't always up to date on their content. For that reason, I want to be as real and up to date as I can about getting started in terms of languages, tooling, etc. Like, try and impart actual value.

What do you think of these slides so far - do you think I overstep in some areas or perhaps left something out that was important?

Slides are at: https://docs.google.com/presentation/d/1dKCMdE4Zz6WTAxXcodIURtnNEvNjh9NA4X2nx_GhCkQ/edit?usp=sharing
No one's suggesting that mistakes should be dealt with in the same way as predatory behavior. The article makes this explicit in its specimen code:

> [I]f the organizers feel a particular individual is the cause of more than one complaint, and does not self-correct, they may exclude that person from the event.

There's room here to deal with someone who's merely boorish or ignorant without throwing them out of the con; with such a person, a word on the subject of minimal standards of behavior will generally suffice. In cases where that doesn't suffice, and the harassment continues, I am much of the opinion that the host's responsibility to his blameless guest outweighs that to the misbehaving one; sure, it's a shame if someone gets booted out of a con because he genuinely isn't equipped to behave in a minimally decent fashion, but it's much more of a shame if people feel like they can't safely go to a convention at all because there's a significant chance they'll be harassed by fellow guests.
That is simply nonsense. Mass killers are not "men and only men." It takes barely no Google time at all to find many examples of female mass murderers.

Not many women make it to presidential or CEO levels of power, but those that do hardly have a perfect human rights record, or show a clear preference for "collective self-actualisation, in cooperation with man and woman."

The problem is unlikely to be down to competition. It may be due to stresses/abuses while growing up and/or in adulthood, but it's difficult to find a definitive map of cause and effect.

I'm certainly not a supporter of neoliberalism in any way at all. But I strongly prefer criticisms that aren't factually wrong.
That all time low is still 3 to 20 times higher than every other western nation.
So you're interested in what they have to say, but you can't spend 5 seconds to compensate them for their time invested in publishing the article?
Why Working from Home Is Both Awaresome and Horrible
God says...
bawl kindness Henderson's derivatives ovum celebrating scurry's hummingbirds lamented snacked Shaun's Daimler's glaze's chutzpa's epithet cupcake's mercerized palmistry's sloth fornication ciders practicable profiling settle lame's execs negotiates Glenda's maiming camel reclassifies partials surrendered telexing begonias disgustedly abomination Elanor jaw's yachtsmen hypothesized knuckle's desirability's dispelling schismatics darkness's flank strays megalith barkers prophecy's portage's felonious dumpster open cash Avery's Oppenheimer daredevil's Molly botulism diamond Patricia Scheherazade's occupations hijacked modulus geegaw gypped fuzzing difference matriarchy's Semitics Nettie Beerbohm gentlewoman grenadier's sleeping habitué's teardrop's scorch ewers impermanent Sanchez's Paraguayan Lynn Magdalene's Mosley's toolbox's brazened vaporize Sara's compiler finagles deliverance's Missourians B's styled Hegira newcomer
The problem with driverless cars is it incentivises behaviour that puts more vehicles on the road: you can call your (empty) car to come pick you up, and public transport no longer has the same advantages compared to driverless cars. I just don't see driverless cars helping congestion in the long run.
Is there something funny about this situation that makes this footnote true?

> If Makino's one-lot trades never executed against Fineline's big trades, they look like spoofing, which is illegal. If they did execute, though, they look like wash trades, which are also illegal. Either way, the actually important question is whether they were illegally tricking other market participants, not whether they were intended to execute.

Wash sales aren't illegal, you just don't get to deduct losses from taxes. My understanding is that intention to execute is the main determination in spoofing.
i agree with your original post, but i'm assuming the login with other services bit was to reduce effort expelled in making the project

having reddit on the list of options means the barrier to entry can be counted in keypresses

you can make as many reddit accounts as you want, much like hn, where the only requirements are username and password

make one and just treat it like an advent login
While I agree that having one account to rule them all is generally a pretty bad idea if you're talking about projects that deal with sensitive data, I still think it's not that big a deal here. A cookie would tie you to one device, and I really think it is preferable to have this site (which is not dealing with any sensitive information about me whatsoever) not handle an e-mail/password combination, but let GitHub etc handle security. From a UX standpoint, I think this is a good solution that doesn't add too much complexity. If the app dealt with more private data, I would be screaming for a manual login myself.
Other Fees to Look Out for When Buying Real Estate
10 years after it died, you mean.
Which, as a firearms enthusiast and pro-gun individual: I wish groups would attempt to make.

If you want to curb private firearm ownership: please, introduce a constitutional amendment instead of trying to throw shit against the wall and see what sticks.

Then, once said amendment fails to get even a fraction of the support necessary, we can go back to business as usual.
PNG is not cheap on the compression side, due to the lossless coder. It's a little better to decompress:

Some benchmarks on iPhone 6 are here:
https://browser.primatelabs.com/geekbench3/4423501

e.g., JPEG is 15x faster to compress and 2.5x faster to decompress.
There is no implication whatsoever. It's explicit. This website has no need for your irl identity (or even just your identity as a programmer).
MetroQQ – Ini 6 Faktor Tentukan Kepuasan Wanita
Stanford EE Computer Systems Colloquium: The Search Engine Manipulation Effect
Neat idea, but way too insecure for real life.

Slack's Magic Links are a very user friendly and much more secure approach to a similar problem.

http://louiiisechg.tumblr.com/post/130650909766/slack-magic-...
OK, but of course no-one is forcing anyone to anything. You are completely free to not partake in the silly programming exercises, as there are plenty of alternatives out there for your enjoyment. You could even buy a book, in cash, disconnect your computer from the Internet and satisfy your programming desires in absolute privacy and anonymity. I, for one, have no problem with the site's requirements, and find it quite enjoyable. Happy Holidays.
There is this joke that you need three, in case your second one is damaged,
because the first one will be damaged for sure.

I heard it in form about lighters in survival.
That's a fair point. I'll take your advice and use a reddit account. Thank you.
The big take-away:

In the end of the day, the watch battery is
there just to shuffle these .PNGs around. When
Apple realizes how to avoid that, the watch
will last for a week instead of hours.
Why do you do it, my guess is most people here would never knowingly hire someone who struggled with such a basic concept.
‘Bare Bears’ Bolster Kids Coding Tutorials