skysight-inc/HackerNews huggingface dataset:
WoSign is one of the other CAs offering this option.

It is unclear to me how TXT verification would have prevent this. The article indicates that the attackers created the subdomain and pointed it at a server they controlled; this means DNS was compromised and creating a TXT record wouldn't have been a problem.

Domain owners which are worried about Let's Encrypt can opt to create a CAA DNS record that limits CAs allowed to issue certificates to ones they trust.

CA/B BR can be found here[1].

[1]: https://cabforum.org/wp-content/uploads/Baseline_Requirement...
Hi Steve, always love your posts but I have a question, are working on this full-time? Do you have major features planned? Have you ever thought about focusing on maintenance on i.e. weekends while working a "regular" job?
I wrote go-like because I think of C#/.NET and go as somewhat comparable and I'm not aware of any other language in a similar class that produces statically-linked binaries. However I'm pretty ignorant, so would not be surprised if there are many ... examples?
Exactly. This false notion of security was perpetuated by CAs for marketing purposes. It's their fault if users now mistakenly think HTTPS == trustworthy.

They basically sold certs as something they're not and now complain that people may realize they don't actually serve that purpose now that they're made widely available without the false pretences.
As Farley Mowat, the Canadian novelist, said: "I never let the facts get in the way of the truth!"

Also relevant: Lee McIntyre's book on willful ignorance in the Internet age. With so many facts readily at hand, the flip side of agnotology is an audience who decides to stay ignorant in the face of contrary facts.

http://www.amazon.com/Respecting-Truth-Willful-Ignorance-Int...
Well, the whole concept of "morals" depends on free will, so if you don't really believe in free will, you shouldn't be saying that something should or should not be viewed as moral or not. In your worldview, being "moral" or "immoral" should just be words without a correct definition behind them.
That's why I think Gravity, Interstellar and The Martian are the best things that happened for space popularization since 1987 (Star Trek: The Next Generation). They cleared out tons of misconceptions people have about space, while introducing very little of their own (Gravity being the biggest offender) - and they did it in a way that captured the interest of general population. I like the trend of making realistic science fiction, and I hope it continues.

> Maybe all scientists and researchers should take classes in creative writing, fiction, and speech.

There's a risk with going too far with that though. A scientist who makes their writing too creative can do more harm than good to the domain, and to public perception of science. The risk increases exponentially if the work is being managed by a creative director - they'll likely take liberties with accuracy in order to make the work more general-population-friendly. Science is a hard thing to explain right. Yes, quite a lot of even the most advanced concepts can be presented simply, but it's a very delicate and precise work, if you want the simplification to be right, and not misleading.

--

As for space education, Kerbal Space Program is absolutely the best thing ever. It's hard to even count the number of people 12 y.o. and less who are proficient in basic orbital mechanics, math included, thanks to this game. Seeing kids talking about Δv budgets and orbital transfers really warms my heart. The game's realism, combined with fun setting and identifiable characters, makes it a perfect vehicle for teaching physics intuition that is hard to acquire even for professionals. And the best thing? It even teaches hard math the right way!

You don't have to know or learn any math to play KSP and have fun. You can literally eyeball your Mun mission. But as you play you quickly discover the benefits of learning a bit of theory. It makes your rockets more efficient. It makes your maneuvers better. It helps you understand why your ship seems to go away from your space station when you accelerate towards it. Soon, your game turns from this[0] to this[1] (via mods, and yes, all those numbers and plots mean something to you).

[0] - http://i.imgur.com/72XNY9q.jpg

[1] - http://i.imgur.com/AcpcCqS.png
This is already possible using CAA DNS records, which can be used to define which CAs should be permitted to issue certificates for a domain.
Wired had an article about this:

http://www.wired.com/2015/09/my-life-as-a-robot-double-robot...
I sincerely hope not. If you bought a book but were told you could get an extra chapter of storyline added in for extra money, you'd wonder "Does it contribute to the story in any way?"
Ultimately, no.
Or "will the story make sense if I do not buy this extra chapter?". Hopefully yes; hopefully the story makes sense without this extra chapter.

I wouldn't want to watch a film with extra fluff that added nothing to the story, just for a cash-grab by the maker of the film.

Extra add-on features are always pointless: look at the Dreamcast and the add-on packs you could put into the controller. As it was entirely optional, none of the games could depend on it being there so had to cater for controllers without it, so this little LCD on your controller just ended up showing Rayman walking or dancing, and contributed nothing to the game.

The same is happening with Macbooks and iPhones, where developers cannot rely on the user having a "force touch" touchpad or iPhone 6nnnn (whatever it is), so cannot rely on that hardware feature being available; because of this, they cannot say "feature X is done by using force touch" because if you have a Macbook without that hardware, you can't use that feature. So it must get ignored to cater to everyone.

In the case of stories and films, the story must still make sense without the extra scenes. This makes the extra scenes pointless.
iTunes?
Ucloud has 85% share in korean market.
https://en.ucloudbiz.olleh.com/
US isn't even threatening VW officers of jail time (They've recently announced that it will be a civil lawsuit, not penal). US isn't even threatening HSBC officers of jail time, after 30 years of so-called "war on drugs"...
My take on how it's going to happen is that it allready has.

Most technologies we build, and use, surpass humans in some capacity. Thinking is no exceptions and we allready have machines far better than humans at some thnking tasks, such as arithmetic.

We are now working on systems surpassing humans in various recognition and prediction tasks.

I suspect the catalog of tasks far better done by machines will continue to expand to finally encompass all tasks required to form a general intelligence. Only, the trick to assemble them, into a complete system could very well prove tricky.

The result, though, is that there will never exist such a thing as human level artificial intelligence because, if and when, a system of general intelligence is created all its components will far surpass human equivalent capabilities.

So "smarter" simply means far superior to any human in any task requiring thinking, in the same sense that computers are far superior to any human at arithmetic.

Even some odd genius savant of today cannot compete with computers at number crunching. More interestingly it's not even interesting to compare, the difference in potential performance is just at different scales all together.
Vim Galore: everything you need to know about Vim
Because this happened:

> Website owners should ensure that they secure their own website control panels, to ensure that new subdomains beyond their control are not created without their knowledge.

You're a bank and haven't secured your DNS control panel correctly. Someone comes along, and using your vulnerable DNS, registers logon.bank.com (instead of login.bank.com). Now it is the bank's fault to begin with, but end-users are going to see that green padlock and will get pwned. You can point fingers all you want at the bank but that situation could (and should) have been avoided.

Let's Encrypt could be seen as a "vulnerability amplifier." With the previous PKI, even if you gained authority over logon.bank.com you wouldn't be able to get that green padlock in the title bar. There is a very good chance that someone at the CA would have made a phone call to someone at bank.com. With the current Let's Encrypt approach this scenario becomes plausible because no check is made with the parent domain to find out exactly how paranoid it is about subdomains.

Nobody is blaming Let's Encrypt, but they can help.
You might also want to check out Boxcar.
As a science I find nutrition grossly deficient, despite food being so obviously important and occupying so much of humanity's attention.

It seems that something like this would be at least as good as food diaries:
http://www.digitaltrends.com/photography/google-calorie-coun...

EDIT: Can't find any trace of it since that one press release in June 2015. Looks like it isn't being developed.
Yep, you hit the nail on the head. It's likely that this product will always have a highish churn rate because of that.

But with low running costs, and a large enough supply of new users, it could still be a good business. Also, there are hard-core users who really do use it all the time, for whom the churn rate will be much lower.
A bit like using an old cassette walkman then!

Wobbling CDs into top-loading CD players was never as satisfying (and you were likely to scratch the underside of it as you slid it into the caddy).

Loading MP3s isn't satisfying at all.
> There is a difference between "I can serve content under this domain (currently)" and "I control this domain (and can decide where it points)".

Agreed. However, I have a hard time believing that it's a net win to make it impossible for people who are permitted to control the machines that a DNS record points to, but are not permitted to alter that DNS record and/or anything under it [0] to get a cert from Let's Encypt.

[0] Or are -perhaps- using a DNS hosting provider that doesn't let you add TXT or CNAME records. (I've used such a sorry provider in the past. :/ )
Next thing to books that do not exist are nanobooks the length of a twitter post:

> The android led him to the cliff. At 8:43pm, it removed his blindfold. The indigo sky filled his vision. "Make my eyes that color," it said.

https://twitter.com/QuietPineTrees/status/579719337210044417

> He unzipped the man's chest, revealing the leaden typebars and silver antennas inside. "See? Every journalist is an engine of revolution."

https://twitter.com/QuietPineTrees/status/684740664425340928

They speak of larger stories, but that's all there is. @QuietPineTrees says they are inspired by @ThePatanoiac, @BrassApothecary and @TheCityofNames.
Microsoft provided something that didn't exist at its time (the most user friendly productivity software on the largest OS platform). If you provide something that's immediately useful and there's not really much of an alternative, people will use it no matter how complex it is. Coming back to Evernote, it doesn't have a single competitive advantage and it doesn't own any platform. There are tons of simpler alternatives for each of its features. It's a different story.
This is inspiring Steve.

Did you try different price points? Do you have data to share about this?

Did you have a full-time job while you were building it?
It also coincides with the end of a 6 month ban on selling shares from top holders as well as with growing concerns that China, despite the official numbers, is actually in a recession.

There is no lack of theories, but look at the insane market valuation growth last year and maybe calling it the burst of a speculative bubble is the simplest explanation.
I remember bookmarking Lifehacker posts on how use Everntoe better.

That tells you a lot about Evernote's feature bloat. A note taking app shouldn't require reading a 1500 word article to use
So a agnotologist is basically a evil troll ?

I propose a new word: "agnotroll"

"He is a well know agnotroll, you should just ignore his agitprop."
Not the OP, but I do this more frequently than I should - probably just to think 'ah, noobs, they didn't minify their JS'. :)
Netflix accounts leak
I'd like to think of it as general population operating under a different definition of the word "truth".
Of course people benefit from "old" works (otherwise we really be having this conversation) Just look at classical music. Or shoot even look at Disney and its repurposing old tales.
I think it is also true a lot of people create things BECAUSE there is a copyright and people can make money of it.
The question is, how long do we let them have a copyright? Where would music be today if we couldn't build on Beethoven? So obviously infinity isn't the answer.
And while some people would create, just because, some people wouldn't if the copyright term is too short.
The US Constitution says "a limited time" but what does that mean? I think that any term that is longer than the average lifetime, may as well be infinite.
I can't find the article now but there was some research shown that Amazon doesn't have many books over 25 years old that are still in copyright. I don't know what the right length is, but 25 seems a decent length. It should be 25 years long, no matter if it is for hire or not.
Probably one run by KT (https://en.wikipedia.org/wiki/KT_Corporation). English website here: https://en.ucloudbiz.olleh.com/
I'm a bit annoyed about this contemporary mentality that if an idea can't be explained in five seconds or doesn't fit in a tweet, there is something wrong with the idea. There are, and have been, lots of companies that have succeeded selling very complex products where people only use a subset of features (Oracle, Microsoft, Autodesk, MathWorks, Native Instruments, to name a few in the computing world). Of course the business model of do one simple thing and do it well can also succeed, we all know that, but it's not the One True Way as many people seem to think nowadays.

Evernote is doing badly because the product isn't that good, not due to this postmodern babble.
Reminds me of RancherOS that also have Docker running as PID 1: https://github.com/rancher/os#how-this-works
I really don't think the activists have any such motive.
I was required to use LinkedIn by a previous employer. I set up an IFTTT recipe so that twice a week 'interesting' stories from Buzzfeed get published to my timeline automatically. Once every 2 months I confirm any incoming friend requests, or whatever LinkedIn calls them.

My employer was very satisfied with my LinkedIn usage. Other than this, I don't use it at all. It's a pain to use and I get nothing but recruiter spam.
might be since it's 2 am but their interpretation sounds both correct and compatible with yours. limited spots = limited number of offers, you want to give those to the best students you think will enroll in your program.
The OP might have done like me : copy/paste the link in Slack and that's the preview text that is appearing
How about positive feedback loops? Could we not employ ai-technology as an aid in designing, and implementing, benevolent ai?
It is safer to use a credit card because if you get scammed on a debit card, you can kiss goodbye to your money. If you get scammed on a credit card, it is the lender's responsibility.
>"If women want to avoid catcalling then why don't they just move? I moved to improve my life."

Perhaps pointing out the hypocrisy of those actually using that rhetorical construct? Being someone that advocates a society without a state, and often criticizes it, I get that comment thrown at me many times. And people find it a perfectly acceptable and valid retort to what I'm advocating. Maybe putting it in the context of "women" (with gender issues currently being a prominent theme/topic in society), perhaps he can make the users of that construct look at it critically as a bad argument against anything.

Note, haven't actually read Adam's articles about women being mentioned here.
I don't know what the right length should be. And what data do you need to back up a particular date range?
The only thing I've found (and I can't find the article now) was a discussion of books on Amazon, and there was a steep drop off of copyrighted books older than 25 years (I think it was they weren't even offered for sale, not that they weren't being purchased)
Why not? For some of us it's a decades-old habit, from back when the Web was more friendly.
thanks, but what's CTA?
FossFish are looking to support more Open Source projects – get help for yours
So you sit on its head if you use it as a 'hoverboard', that's curious.

But what could be the use cases for a robot like this? Its head is too low for telepresence like Double Robotics. The arms-extension looks nice, but it can't grasp anything with it because it seems to stiff, Lego-like hands. Plus the hands can't reach up a table or kitchen to grab anything. Holding anything with weight would also shift the center of gravity and mess with the balancing.

On the other hand, mixing this robot with a thing that is useful otherwise can get the technology out the door and get sales going to add functional arms later on.
F# support is in progress, next beta i think.
pull requests got merged last week
State of Play: Iran’s Startup Ecosystem in 2015
I second this one about hiring, you may be helping their dream happen too :)
Amazing work - This is a very inspiring story, and I hope things continue to look up for you.

Just my $.02 as a user who came to your site: The landing page is still unfortunately very confusing - what I wanted to do most is to just try it out really quickly to see how it looked.

But, it took me a while (after I had scrolled through to the bottom of the site) to understand that I had to click the start learning. Then, thre was the sign-up modal that showed up on the other page; From how it came up, it felt to me like I had no option but to sign-up, and I would've turned away at that point. BUT, because I had read a couple of your posts, I knew it was possible. So I tried clicking outside of it and then it worked. Then, I picked a language and then I had this list of items which were not clear to me what they were, exactly (from the blogs I knew this was the library). So, I clicked on one.

And then it was beautiful. Like, no joke, the actual reading experience was... perfect. It worked... flawlessly.

Your core product is very, very good! It is definitely your strongest asset. Don't hide it behind the splash page, then sign-up-modal-you-have-to-dismiss, then the library UI... get users to experience your core product as quickly as possible... that'll get 'em hooked!!!
That's a hilariously clever use of telephony APIs. I have no use for the product myself right now but it's an interesting, novel idea.
I think Rubinius used to do it the python way (.rbc files in the same directory) but I think it stopped (not the authority on that so may be wrong).

I think if you could do it transparently as a cache, and out of sight and synchronised properly it would be fine, but writing files everywhere is not ideal. Imagine two users running the same files but with different configurations in the same directory at the same time. It's just a mess waiting to happen.

Don't know if that's Rubinius' or Matz's problem with it though.
Sounds like your product is a poor fit for a subscription. If the majority of your revenue is from new customers, why not switch to a paid-up-front product? With a 20% churn rate, your average revenue per user should be around 25$, so why not just charge $25 up front?
I used Evernote for over three years but, recently stopped using it

1. Because it quite bulky now. Takes too much time to load on Mac and Android. Its a note taking app. I should be able to load it in seconds
2. Lost lot of data (untitled bug..)
3. Bugs and Syncing issues... I often see 5 version of the same note.

Nowadays, I occasionally load the web version, just to load my old notes. That itself looks crazy with the latest confusing UI
Let's just grab our wikipedia archive and get off the net; it has been going downhill for a while now.

Time to detach.
if you use evernote like a scrapbook (where you have pics, snippets copied off the internet, files etc), then keep doesn't not compare - it's just too bare bone. But if all you do is keep small notes like todo lists, or quick thoughts, with very little media, it's quite good imho. Sharing a keep list allows other people to edit it as well, so it's a poor man's collab/mindmapping tool
Can anyone clarify - does this support any .NET language (C#, F#, mixed language)? In the 'fabulous' example, I can't see where the source code for "Hello World" actually is.
Trusting AI with important decisions: capabilities and challenges
I can serve using HTTP on this domain should be enough to prove you can also serve HTTPS on this domain though.

It's on the domain owner to avoid giving away control of their (sub)domain to a malicious party. Exactly the same as with regular HTTP and anything else that uses DNS.
Maybe you need rational numbers instead of floating point numbers. Then .8 and 80/100 can be equal.
Do you like music? Most music today is influenced by classical music. In some cases the influence is more than copyright would allow.
Personally I've enjoyed a lot of Disney Classics that are repurposed tales.
A big issue we have today in the computer world is "abondonware" where the companies are no longer in business and no one knows who owns the copyright. Sometimes even when you know who the players in the original work, you can't get them to agree on who owns the IP.
> Evernote is doing badly because the product isn't that good

Neither is Evernote's self-desicrption:

Evernote transforms the way you work. We design products that fuel inspiration for your projects, from start to finish.

or another one:

For everything you’ll do, Evernote is the workspace to get it done.

I think Evernote and many similar companies could start by cutting their marketing BS and moving down to software BS. Too often the two go together hand in hand.
They are not directly comparable of course.

OVH currently has 15 DC, of those additional 12, most of them are in new region, Australia, Singapore, Germany, US, and I think Japan. That will make 27 DC.

This isn't say they are comparable by size. Not at all. But you make it sounds like OVH is a small player. Linode, Digital Ocean are medium size. According to Netcraft AWS being first, DO recently became second, and OVH being third. But with the lots of $5 - $20VM DO host, those are VM numbers, compared to the Server Size OVH host.
The Pocket Protector Was His Baby
Some people on HN must be to young to remember government owned telecom monopolies and trying to get services from them.
Py3 is a lot faster than py2, read the release notes. In general though I think the CPython team prefer a cleaner implementation than a confusing one that's a bit faster. Just use PyPy
I very much doubt this. Source?
Does it really take you fulltime to maintain it now that it's developed?

Couldn't you keep it alive by working a few hours a week, and take on contracting jobs in addition to get additional income?
A 2016 version of the 1914 isochronic travel times map by Rome2Rio
They mention this on their Github page (https://github.com/postspectacular/rnd.farm/blob/master/READ...):

Since this histogram is byte based and submitted values have a variable bit length, the "00" bin (grouping bytes between 0x00 - 0x0f) will likely be the most dominant
Nice pricing model. If I get the book now will I be able to read future chapters once they're released?