skysight-inc/HackerNews huggingface dataset:
It's completely unclear whether what you're saying is factually correct. If the attacker controls the bank's DNS, which seems likely given that they're able to create an A record for a subdomain, they can likely also add TXT records for bank.com, which is what traditional CAs often use to verify ownership. They could probably also modify MX records to redirect confirmation emails to a server under their control.

Other CAs don't have a magic solution that automatically detects malicious domains. Issuance of DV certs is completely automated at any major CA. There is no manual review unless the domain is on some kind of grey- or blacklist, and I highly doubt that they have a list of every domain used by a bank. There have been numerous counts of unauthorized certificates being issued by almost all CAs, what makes you think they're somehow that much more smarter than Let's Encrypt on this topic?
More likely, pure socialism will not take over. While not an annihilation scenario, I can very much see a decimation scenario unfolding as a war between the elite and those no longer useful...

Edit: In support of this scenario. Consider the refugee crisis and the response from the various countries. Even Sweden, ostensibly one of the most welcoming (and socialistic) countries, started to close its borders as soon as the situation started to get uncomfortable.
5 Mistakes you should avoid while facilitating a retrospective
Netgear Aircard 790s LTE CAT6 MiFi
Thanks! I really appreciate it :)
Putting jenkins in a docker container
Looks like they have compiler support for only C# (csc), and F# (fsc) right now.

https://github.com/dotnet/cli/tree/master/src/Microsoft.DotN...

https://github.com/dotnet/cli/tree/master/src/Microsoft.DotN...
A cool IoT product that I'd like to see is maybe a decent dedicated dashboard (this may exist but I don't know about it).

I want a simple dashboard for viewing (optionally interacting) with IoT devices, SOAP, REST, MQTT, uPnP..

It could also have features like maps, graphs, and charts for data that are simple to integrate (expl. provide a ressource URI, or drag-and-drop,...)
Yes, it didn't do anything particularly unsafe did it? And they didn't claim it was unbreakable, did they?
Deep Learning, and why William Binney could be wrong on the “Snooper's Charter”
After Breakup by MOSAM
The difference is that if you choose to go to any URL, you can (not considering device capability and support; flash etc) from any of your devices. And what you pay to go to one website is the same amount that you pay to go to a different website as long as you use the same amount of data. Data rates being different across networks is a different issue.
I believe Ohio (3 AZs, IIRC) is supposed to come online in 2016 also, but I could be mistaken.
New Video Shows Hyperloop Tubes Sitting in the Nevada Desert
IoT Event Startup Showcase Application
Evernote's killer feature for me was searchable OCR of photos, and the ease of sync between phone and laptop. But it's been displaced for me by more specific apps.

I used to keep tax numbers, the occasional bank account number, passport details and so on in it. They're now all in 1Password.

I used to keep credit card bills in it (searchable images!), but now I just download transactions in to MoneyDance.

I used to keep business receipts in it, now they just go straight in to ReceiptBank, and a human processes them, and I can import it in to my accounts.

I used to keep documents I thought I might need "on the run" in it, but now there's Dropbox.

I used to keep a diary in it, then I started using DayOne.

I used to have a shared notebook I'd clip interesting articles for my wife in, but actually Instapaper is better.

I used to take pictures of events I'd see flyers for, now I just say "Siri, remind me to research event x" and I don't even have to type - it just shows up in Things.app.

I used to write occasional notes to myself while on the go, but iCloud sync + Notes.app is better for that.

I still have a few recipes in it, but I have few enough that I'm not looking for anything specific to handle those. I tried to see what I'd uploaded recently, and it turns out I haven't installed Evernote on this machine, nor logged in to it since I got a new phone, which is a bit damning. The cost of having many specialized apps is very small, and I wonder if there's still room for generalist platforms like Evernote.
> Cartoons? Cycling? DIY?

Any of those works. You don't need to be that good at programming if you can figure out a piece of software that one or other of those really needs, and the size of the thing you have to make can be surprisingly small - I mean patio11 got rich off a bingo card creator, just by figuring out a small thing that a certain class of people really needed, making it, and marketing it well.
The Javelin Programming Language
Rubinius stores the bytecode either in $PWD/.rbx or $HOME/.rbx depending on which of the two exists. By default $HOME/.rbx is used.

EDIT: I meant the default being $HOME/.rbx, not $PWD/.rbx
Is there a name for the effect, or at least percieved effect, that people are becoming less "teachable" because we're so used to just googling stuff that we sometimes percieve ourselves as a fount of knowledge because we mistakenly attribute all the answers to ourselves and not the little gadget in our pocket?

I don't think the Flynn effect is applicable.
Heatmap of searches for public transport per nationality
This is actually most of the reason I'm being driven away from Python to Clojure. Sure I can write highly performant Python, but it stops being pythonic.

I'd be so happy if we just gave up on CPython and everyone put their effort into getting PyPy up to 3.5. That's just me though.
Do you have a source for this performance that's not the release notes? In day to day work I don't see much more than a 10% gains.
I'm not sure I was waiting for bob, I probably have other tasks too.

I don't know of a better alternative that maintains the face to face element.
Yes, because the story is that good. Look at how many Sherlock Holmes stories are going on right now, and movies are being made.
In generally there aren't a ton of "shoddily made movies" surrounding public domain. We don't have lots of John Carters or Wizard of Oz or Sense and Sensibility.
Consumer habits change. I'm sure some people who have driven all their life won't give up control voluntarily, but you know all those articles in The Atlantic, etc. about "millennials" that don't care for cars and driving anymore? This could be the automobile industry's chance to recapture their interest (and money).

OTOH incremental changes, some of which (like speed regulators) only add restrictions but don't save work for the driver, are not comparable to the concept of the car driving itself and the rider sitting back and relaxing.

If there were a true self-driving car in the market (and the legal hurdles were cleared) I don't see how it wouldn't sell like hotcakes.
Are there species that can adapt in time to survive asteroid impact, volcanic eruptions or other catastrophic events?
I would guess that the group aggregate input would be very much farther from random than the individual input. Let's see.
Personally I hate weekly meetings as, unless you have strong leadership (rare) they turn into long, boring gripe-fests.
No, it's deeper than that.

For instance: the fact is that 32,727 people died from terrorist attacks worldwide in 2014.

The truth is that this is number is insignificant. Over 55 million people died in 2014.

The truth is also that we fear what we feel is random more than what we feel is the result of our actions. We are disproportionately afraid of black swan events. This is why terrorism is so effective despite being an irrelevant statistical blimp.

Facts are just facts. Truth is the interpretation of facts.
Maybe it's just me but the lead image makes it look like the dog is chasing the robot and it's scared. Which is an odd choice for a lead image.
Meh, I was trying to find an actual usage of this robot. I guess even Segway has no idea what to do with it.
Exactly, perhaps it sacrifices itself in order to not hurt/damage other things (hence being 'safe').
Hey AWS, fix the issue of accepting Unionpay debit cards (not just credit) and I'll start using you again.
Sounds like Stallman's web program. [1]

> I usually fetch web pages from other sites by sending mail to a program (see git://git.gnu.org/womb/hacks.git) that fetches them, much like wget, and then mails them back to me. Then I look at them using a web browser, unless it is easy to see the text in the HTML page directly.

[1] https://stallman.org/stallman-computing.html
It is not Mickey Mouse that Disney is protecting (he is protected by trademark), it in Winnie the poo. The copyright on Winnie supports billion of dollars of revenue in licensing deals - basically millions of kids lunch boxes and backpacks.
I think the poor architecture is a direct result of there being too many features.

Evernote has shoved so many features into the product that they haven't been able to sufficiently hone individual features. This leaves them open to competitors who focus on a subset of features but do a much better job of implementing those features.

Apple and Google get around this in different ways. While Apple has a broad set of products and features, they're pretty conservative in their pace of releasing new features. So they have plenty of time to hone and integrate new ones.

Google seems to have solved this through radical decentralization. They don't really require that different products form an integrated whole. This allows individual teams to focus on delivering high-quality products without the architectural overhead of bundling everything into one product.
Genius! If not for practicality this wins for its metaphysical perspective and adds the Eternity salsa to the mundane task of storing data.
A good hack would be to find some virtually free computational resources and leverage those for the infinity insight.
So mainly thinking of Varnish as the CDN -- paying a 3rd party CDN is pricey.
> killer use case.

I'm scared.
OAuth Bearer Tokens Are a Terrible Idea
'Chaum is also building into PrivaTegrity .. a carefully controlled backdoor that allows anyone .. to have their anonymity and privacy stripped altogether.'
Can you recommend any books or articles in particular on how to scale operations from solo to a small group? I've been thinking about this for a while and I can't get my head around it in seeing a way to do it without forgoing pay in order to pay the new employee and hoping to acquire more clients to give us both work and repeat with another employee and so on. This just doesn't seem efficient though.
Check Out These Seven Social Media Trends Rocking Small Businesses
I suspect this is because the popular media is a limited number of conglomerates who generate enormous profits from retrospective copyright extensions. Funny that stories that don't benefit these conglomerates aren't published.
How current loops and solenoids curve space-time
> Furthermore absolutely no viable public purpose can be served today by backdating new rules to past works.

I disagree. Although you are correct for rules that extend the duration of the exclusive right of the copyright holder, a rule that reduces that duration would allow greater access to these works sooner.
the --native already exists, it's not a dotnet cli thing

dotnet is a wrapper ( like git command ) for multiple executable, to replace msbuild as project file + build tool and add some new functionalities ( restore nuget packages, etc )

i think the real news is having a dumb project.json (nuget deps,source files,etc) and a xplat tool ( dotnet ) who read this project.json, and can restore packages, compile ( --native too ), publish, packages as another nuget package, etc.

All that xplat and multiple language. c# works, F# got merged last week, other coming next.

Some example commands:

- `dotnet new` scaffold a new project ( really simple atm )

- `dotnet restore` read dependencies from the project.json and download nuget packages

- `dotnet compile` call the csc compiler ( with a wrapper `dotnet-compile-csc` ) with source files, defines, references from project.json, etc

There is a good split of responsabilities, you can call dotnet-compile-csc if you want. dotnet cli bundle the roslyn compiler ( c#, vb ) and f# compiler, so ready to go

for example `dotnet compile`.

dotnet compile read project.json and call ( for c# ) the `dotnet-compile-csc` passing source list, defines, references, etc. dotnet-compile-csc doenst know about project.json, and call csc ( the c# compiler ).
if --native, the `dotnet compile` then call a compiler from .net bytecode to native code

It's more like a replacement for msbuild, with a really good command line story, and a common project file ( project.json ) who can be used from visual studio or vs code, or others ide ( it's a json file, dumb )
we can just unplug the machine

A look at the history of managing downsides of industrial technology tells us that we can't or won't "unplug" it if it's still profitable or an integral part of a vital system. Carbon dioxide changing the climate and acidifying the oceans? Unplug the coal-fired power stations! Overuse of antibiotics, especially in animals, leading to deaths in humans? How about we don't do that!

The first "hostile" AI will only be selectively hostile. Perhaps something like automated "redlining" racial discrimination. Some sort of system where the benefits accrue to investors while the disadvantages are spread around. AI "pollution".
Belgrave House in London is really nice...
It's always very easy to criticize when we are looking in the rearview, so I can do it too.

Adding too many features is very common on tech. I don't know what happens in the dark meeting rooms of these companies, I can just imagine they are trying to keep growing and not satisfied with what they are.

Too many features makes things complicated, the first thing you learn when are trying to open a business is to be the best solution for just a persona, and not to be a swiss knife. Swiss knife does many things but doesn't do none very well.

I like iPod shuffle, they just play music, but does so well. Apple has other versions with more features, but not killed the shuffle. Tech companies usually kill the software you like to replace with another with more and more features.

I have a simple software with some paying users, and a lot of times appeared the opportunity to add more features to get more users, this happens all the time, and I didn't do it because this would change the core idea of my software. If I want to add more features to get a new niche, I plan to create a new product based on it.
I hadn't heard of Evernote untill my android phone replaced their native notebook app with Evernote. Since then I just figured it's a notebook app.

So this 5% problem definitely applies to me, and with me probably many other users who had their simple notebook app (unsolicitedly) replaced with Evernote.
> There's no reason we have to just accept our fate and do nothing, or just hope everything works out when the time comes.

And there's the religion.
Not exactly the same, but I'm very worried about security and data privacy when it comes to home devices. A third party knowing what photos I publish on the web is one thing, but a third party actively being able to control my thermostat, kitchen or being able to see what's happening in my home at any time, unknown to me, is what really scares me.

Regarding the security aspect, I wrote a secure communications library[1] as a proof of concept in Python, with the aim to make it much easier to write authentication and encryption into an app. About privacy, though, we need to make sure that the only devices that run in your house give you access to the code and the ability to verify what's running on the device.

Otherwise, we can stop worrying about whether we're in Brave New World, where people were numbed by all the entertainment, or 1984, where people were under an all-seeing tyrant, and be sure that we're in both those things, numbed by all the entertainment which incidentally required that we voluntarily sign away all control to the all-seeing eye in exchange.

[1]: https://stringphone.readthedocs.org/en/latest/
The command line compiler didn't include dependency management, project creation etc.?
You could just as easily register a separate domain and use HTTPS on that if your goal is to inject scripts in the background. The "problem" being reported here is that the user may think the site is not going to send them malware because it has a green padlock in the address bar
Of course it's technically trivial. But that didn't stop PHB's from inserting such language in consumer contracts, so why should we assume that the same PHB's would happily embrace IPv6, since "with IPv6, we must provide every one of our customers with 2^80 addresses"?
> unstoppable AI is the purest manifestation of intelligence-as-power

Brilliant observation.
Why Structure Is the Best Friend of Creativity
Top 100 Interview Questions on E-Commerce Part-5 – InfoTech Site
The new gTLD info of the day (Thursday)
React.js pure render performance anti-pattern
I will try to be more clear. Say the size is actually unknown until runtime, for instance a vector is read from a file.

You cannot apply directly any of the size-aware functions, because it will not typecheck. I only see two avenues:

Either you assert statically that the vector has some concrete size, in which case the size is known statically and the code generation will work as well;

Or you use some other size-unaware function, in which case it is false that Idris can use runtime values as type parameters.

If I understand correctly, you are saying that there is a third possibility, but I am missing it
Wow, $43 (or even $23) is crazy. I just checked, in my city (in Germany) Star Wars costs 13€ (AU$20), and that's the English version in 3D with shutter glasses. "Normal" movies (no 3D, no excess length) are 7-8€ (AU$11-12.50). That's like... half of what you pay. Is Australia generally that expensive? :O
Especially because they laud and welcome steps like Aircel's free Internet, Airtel's cashback scheme, Google'e free wi-fi, Project Loon, Gigato, and even facebook's own cheap wi-fi installations.
At Google (Zürich) there is for sure some frontend work; if you're unlucky it is GWT, if you're lucky it is Typescript.
As a science I find nutrition grossly deficient

Imo it's not really the science itself, but rather the results which are deficient and the article lays out pretty well why that is. That, combined with the huge amounts of pseudo-science and almost-religious takes on what and how to eat (esp. by people who read a popular food book and think it is The Sole Truth) definitely creates an image that the whole of food science is utter BS.

It seems that something like this would be at least as good as food diaries

It would be relatively easy to test properly how correct the calory estimate is. Which wouldn't be bad maybe, I know a bunch of people who sort of swear by it for estimating clary intake. (not sure if it's the same app, but they definitely use something like it. And also tend to think everything it says is 100% correct..)
Yes, and you even can put your whole-block optimizations between the statements being glued (that's the magic of the custom composition primitives, monads).
Thanks for sharing this and keep trying !

I've been also working alone on a project for 3 years in my spare time (SaaS). I'll soon switch full time on it.

News are usually full of startup stories funded with millions. As readers we're blinded with only the tip of the iceberg when the real hard work and pain is rarely mentioned.

It's great to read a true story like this and for people like me it gives a invaluable point of comparison both in terms of personal experience and business success. It's also a source of encouragement.
I don't have any book recommendations but it really is just management skills, so look up some business books.

The main temptation you need to avoid is "micro managing", and instead you just need to have faith that people will do what you ask them to do, albeit via a different path than you may have taken.

In terms of justifying the cost of labour versus DIY - it's just an "opportunity cost" argument. If you can get better returns from your time by doing something else (eg not programming, and just dedicating a bit of time for coaching your people) then it will be worth employing others. If not, then stick with what you are doing.

Hope that helps :)
I see your point and I agree. I understood your wrongly. Thanks for the clarification.

So another example would be relative effects in medical and nutritional studies. That the red meat was correlated with 3-fold increase of cancer in some tests is absolutely meaningless. What matters is the absolute size, because the 3x increase from 0.0001% chance to 0.0003% is something not worth even pausing a breath about.
I wish they'd add functionality to specify key pem on command line.
I refer to this as the 'winzip' problem.

Where companies develop a good product to solve a simple problem, and because they already have developers and are gaining market acceptance that they just keep adding features way beyond the point of reasonableness.

Then inevitably the company tries to recover money from all of the extra effort they put in the product that nobody wanted and end up making their userbase hate them.
Facebook competitors like Google, Twitter, Telegram are all conspicuously absent from such a good opportunity. Could it be because the terms and conditions are actually prohibitive?
I simply see it as an additional (and unnecessary) attack vector.

If you are unable to hijack the DNS servers or poison/spoof the cache used by the CA, then you have the luxury of a whole new (and often WAY more insecure) attack surface. Then you have a cert for that domain which can be used for other, more targeted purposes.

EDIT: IGNORE BELOW, I WAS ASSUMING THAT LETS ENCRYPT LETS YOU VALIDATE SUBDOMAINS FROM THE TLD, BUT THIS DOEST SEEM TO BE THE CASE FROM THE DOCS.

e.g.

1) Wifi access point uses https://login.wifiprovider.com to authenticate users. This is clamped down as tight as possible. Theres no way i'm getting in to that beastie.

2) Their brochure site located at http://www.wifiprovider.com. It was made by some ad agency and probably allows you to log in with test/test or uses some crappy custom CMS that allows SQL injections or even allows you to log in with a "wildcard" password... (this is INSANELY common). Its just a brochure site, and its not linked to the super-secure login systems in any way.

3) By breaking into this crappy brochure site, I can get a cert from a valid CA for the subdomain https://login.wifiprovider.com that allows me to sit at an access point, spoofing DNS and capturing valid login details.

That doesn't seem right to me.
Swiss Alp Watch, a Not-So-Subtle Jab at the Apple Watch
To be, or not to be- that is the question:
Whether 'tis nobler in the mind to suffer RMS
The slings and arrows of outrageous Fortune 500
Or to take arms against a sea of troubles,
And by opposing GNU end them.
The future: AI, VR, robots, cloud servers. Apples weaknesses
While your point is absolutely true, the rule of thumb in those case is that the growing curve in file size is not linear; while the very minimal executable already brings lots of things it doesn't need, adding functionalities make it grow slowly (since a lot is already there).

Not saying this is not an issue (although it isn't really in most fields, except for things like embedded), but that the 656 KB for "Hello World" is because of the "upfront cost" in binary size.

I have spent sometime developing in Delphi years back, and this was even more true with it (simple hello world GUI app was over a megabyte [create new project and compile], complex GUI app was barely above it).
Konga: The Emergence of an African Technology Powerhouse
I know it's popular in certain circles to oppose, shame and attack Trump, but when you really think about it, all politicians do this, none of them is using facts in their campaign.