skysight-inc/HackerNews huggingface dataset:
Here's a huge report about the activities of the people you are wanting to buy minerals from: https://www.globalwitness.org/sites/default/files/pdfs/repor...

"In the course of plundering these minerals, rebel groups and the Congolese army have used forced labour (often in extremely harsh and dangerous conditions), carried out systematic extortion and imposed illegal “taxes” on the civilian population. They have also used violence and intimidation against civilians who attempt to resist working for them or handing over the minerals they produce."

Are you aware of the situation in the Democratic Republic of the Congo? There has been a civil war going on for 20 years. Control of mineral resources is an important source of funding for both sides in the conflict. Buying minerals from the Congo means dealing with violent armed militias who have been engaged in an appalling decades long war. You may as well be arguing about the morality of buying oil from ISIS on the basis that their drills are being operated by civilians who need the pay to survive. Current US foreign policy is to blow those people to bits, not buy oil from them to preserve their "jobs".

You seem to be under the assumption that buying minerals from the Congo means the miners actually got paid. This is by no means certain at all. Some of it is just extorted from civilians at roadblocks as a "tax". Buying those minerals hasn't helped the miners at all, it has just further funded the militias/armies that are terrorising the civilian population (murder, rape, extortion, kidnapping).
It could lower fees for them, increase security, and they could do away with SWIFT, making transfers last minutes rather than days. It won't be public and won't have much to do with consensus or "P2P".
Consumers are one in the several actors taking part in this.

Like many other social problems, other actors are governments putting regulations (both in the consuming and the producing ones), organizations pushing information (both cultural and products-related), and I guess others.

Ultimately, changes start from the "lower" level, either in the form of consumer choice, or individuals who turn into organizations, who pushes for regulations/informations/etc.

In real-world, of course, there are other facts.
Oh man, my Nokia 8910 (the one with the titanium casing) was damn near indestructible. I'd dropped it more times than I can count (once off a 2nd story in a nightclub into a dance floor where it was promptly trampled), backed over it accidentally because it fell out of my pocket as I got into the car and left it in my pocket and washed it 3 times (it stayed on the whole time). The 4th washing was the one that finally killed it.
> a minimum hourly rate of about five dollars after tax

US federal minimum wage is $7.25 (and higher in many states), with income tax being functionally negative at low incomes. You could adjust downward by 10% to account for the five weeks of paid leave but that still gets you $6.50/hr.
We already have a much simpler model for an immutable database with distributed data entry: it's a DVCS. With GPG signatures (like git tag -s), it's also signed, tamper-resistant and accountable.

Blockchains are a solution to a much harder problem, where consensual order is crucial and nodes are not fully trusted.
It actually brings them closer together. I don't see how it fosters hostility. Care to elaborate on that point?
Why are you asking some random people on an internet forum? Why not phone up Apple and ask the source?
Can you cite the mass starvations that existed before sweatshops and militia groups profited from child labor?
Far be it from me to contradict Bruce Schneier, but he doesn't actually give a good reason why the XKCD or diceware scheme is bad. He seems to be saying that it's not as good as a 25 character random string, which is true, but that's not what is claimed. Even if the attacker knows your word list, and knows that you've chosen four of them, if you've chosen them randomly then there's still easily enough entropy to make it unrealistic for them to crack it.
Haha, okay, now I see what you mean :)
Google’s AMP Poised to Take the Lead from Facebook’s and Apple’s Walled Gardens
"industrial nations are generally over-regulated today"

That very much depends on your political ideology.
Open Innovation Design Platform – Desall.com
>Skype used to be great (this predates the MS switchover).

It predates being bought by ebay too.
Mother Nature has provided us with plenty of foods to fight depression. The key is to have a balanced diet and a rigorous exercise routine, to keep you on track.
That's just basic economy. And it was also adequately explained in the post you just responded to.

The more you already have of something the less it's worth to you, that goes for almost everything including money in this case.
She is important, otherwise the executive wouldn't keep her even by blocking her from promotion. Six figure salary is very decent. I suggest she ask for a pay rise, if she isn't happy, but she is important.
> Only 19% of tech employees said they were happy in their jobs and only 17% said they felt valued in their work.

This seems low beyond reason. I would have expected more like half (at least).
The main problem is the size of the French market alone, and the reluctance of French entrepreneurs to engage directly in the European market, not the banking sector. BTW this applies to all EU/EEA countries just as equally.
Oh yes. Like people here echo Rich Hickey's or Dijkstra's words on Simple Made Easy. (Rather than trap themselves in hairball codebases, gradually unable to move forward.)

Like people who reject the complexity of epicycles, that desperate theological attempt to preserve Earth at the center of the solar system. (https://upload.wikimedia.org/wikipedia/commons/0/0e/Cassini_...)

People will tie themselves in complex masochistic knots, to justify the absurd conclusions of their religious beliefs ("the invisible hand!"). As we see here in this discussion of child fucking slavery.
I wonder what do you find so simplifying in futures and promises? I use them heavily in one of the projects and compared to old-school mutexes and condition variables they seem to be just at the same abstraction level. They can cause very similar problems like deadlocks or race conditions, with the additional "bonus" of callback hell if you don't use any higher-level libraries.
Looks like it does not work anymore.

By looking at network inspector, calls to google image api return:

/* callback */google.search.ImageSearch.RawCompletion('1', null, 403, 'This API is no longer available.', 200)

also breakpoint in setSearchCompleteCallback shows that imageResults array is always empty.
Terrorism Act incompatible with human rights, court rules in David Miranda case
Well, you and me for starters. And then add almost all of the people that have enough money in their pockets and are not slaved/working 3 different jobs to put food on their table.

We, everyone of us reading this, know the reality, if not just look around and see that lady cleaning floors or that guy in the fast food joint working their asses off for a menial pay.

You could say they are a step above slavery, but hey, no problem, you and me have good jobs and money enough so we can buy anything we want to eat and a shiny gadgets every year.

Ignoring this reality about slaves in those countries and almost slaves in our land is easy, but don't forget that this is a conscious decision.
صور سكس بنات عارية اجمل صور سكس 2016
Berkeley AI Materials
> > an entirely blank page

> That's only true if you use 'view source'. If you open up
> dev tools, all of the elements are rendered in full and
> live updated as they change.

If one attempts to view the demo with client side javascript turned off - one gets a completely blank page. The very point to a static site generator is the word "static" which is generally taken to mean that the actual rendering of the content requires only HTML rendering (no javascript (or php or ??) code execution, server side or client side).
Completely off-topic, but whenever I see these amounts I feel like either I don't understand how U.S. economy works or I've been living in poverty my whole life. I'm recently graduated B.Sc in compsci and I'm doing software testing and to me 30k/year is plenty. Like I have money to buy all kind of unnecessary stuff for my hobbies. Is 30k/year really low salary in U.S.? Or am I just being under paid? I always though my family was above middle class, but I guess we've been under it or something...
The world's most powerful tennis coach. On your wrist
Which phones are made by children? Sources?
http://www.heligrid.com/
It's anything but static — in fact we just had someone complaining bitterly on the mailing list that the syntax and API was changing too quickly! It's a fast-moving, responsive project, and tends towards that "user beware" end of the spectrum. Nicolas Goaziou is obviously trying to make things as easy as he can for people, but he's not holding back on changes to structure and syntax.
What saddens me about the rise of cars is the loss of freedom. No longer can you travel where you want when you want on your horse, subject to the availability of grass and no cliffs. Now you will be limited the ares around gas stations, to the roads and the laws of government on those roads.
Who will look out for our freedom that the demise of the horse represents?
I agree that it's a very hard problem and the change of the whole industry is required to fix it. But I believe, with enough resources and will it would be possible. The problem is, that nobody actually cares -- it's all about PR now only. For example, let's take food industry where regulations are enforced on all levels and restaurant, after poisoning their clients, can't simply say: "Sorry, we didn't mean that, we had no idea these mushrooms came from Chernobyl, but rest assured we won't deal with this supplier again".
yeah Google does but what about the 1000s other robots ?

sure Google is the bigger one and you have to be referenced on it, but there are also other indexes where you want to be referenced, and those are maybe not using robots as advanced as google.

So, as I said, for your normal robot crawler visiting the page, the page is empty, no content.

That Google have already solved the problem does not mean that everyone else did.

Why do you think prerender.io exists ? to solve that very same problem

From a SEO point of view, which was the question I was answering, it is ridiculous to serve a page without content to an indexing robot crawler.

-4 ? go all educate (F) yourself :)

I mean here a list of active robots crawler
https://udger.com/resources/ua-list/crawlers

here an example of how people apply that in practice
https://gist.github.com/Stanback/7028309

also last but not least, yeah GoogleBot parse/read JS, but do read their guidelines
https://googlewebmastercentral.blogspot.fr/2014/10/updating-...

"Make sure your web design adheres to the principles of progressive enhancement"

serving a blank page, that you then fill with content using pushState is not what I call progressive enhancement
I'm sceptical, because some people in (what was presumed to be) a vegetative state also showed those "signs of awareness". Not read the paper yet, though.
The Mac Pro would be a good case study since more of that was manufactured and assembled in the USA than (most?) other machines.
SUPERAntiSpyware Pro 6 Serial Key, Crack Keygen Download
And that seems to be an ongoing issue with -sec debates. That the people "inside" are so focused on "perfect" protection, that they see anything else as worthless.

There was someone here on HN just the other day that basically decried a scheme for using multiple user accounts to "sandbox" programs as useless because it would be ineffective against "state actors" (aka NSA and their equivalent).

This even though it would likely foil, or at least reduce the impact of "drive by" attacks aimed at accessing personal information for identity theft etc.
In many of those countries, children are sold by their parents into slavery or are taken by force because the market demands goods produced by child labor.

This same argument can be used to justify slave labor and it is, right here. At least they aren't starving.

Yet, we've eradicated slavery in much of the world and on paper.
Let's say the tree lobster on Lord Howe is replaced by rats and cats. Then Lord Howe lost one specie and gained 2, for a net gain of one specie. So local biodiversity increased. The planet lost one specie, so global biodiversity decreased.
^ Not sure if serious or just creating a sentence out of buzz words.
The problem is that having a counter doesn't really work, because you can't force the client to take the updated JWT. (And the previous JWT is still valid as it's checked based on signature.)

The way to go is pretty simple - issue a long-term refresh token, and a very short-term JWT to the client (as little as 5 mins or so). The app can then make requests directly to the services, which can independently verify the validity of the JWT.

The services then also check for tokens which have been revoked - using a very fast mechanism, like holding them in-memory or querying a Redis store. The token's JTI only needs to be held in the revocation list for a short period of time - until the JWT expiry time - using a TTL in Redis, or similar.

The app uses the refresh token to get replacement JWTs. It goes with the refresh token directly to the auth service, which can then check whether the user should be able to get new tokens or not.
If they want to convince shareholders they can share the information with them. What they don't need is a separate public body.
Also shareholders in general don't direct strategy. If profits are coming in they are happy and if it's a tech company if users are coming in and there are no profits they still seem to be happy.
Also there's more to shows than just direct viewer numbers. Being known as the home of quality shows does amazing things for your brand even if people don't watch them as much as some reality tv.
Panto: Discover, create and share videos with secrets
Well most attacks just use such a "server" for the initial attack, afterwards they set up something that make outbound connections to a "command center" or similar.
Here's the real problem: " Congo’s 2002 Mining Code stipulates that ... mining can only take place in designated zones by registered miners. The failure of the government to assign sufficient areas has led to an increase in illegal mining at unauthorized sites, Amnesty said."
> I was under the impression this was a technical limitation

It was, but one that is becoming less and less relevant finally.

The problem comes from not knowing the host name until after the SSL/TLS channel has been negotiated, so the server doesn't know which certificate to hand out unless there is only one that is relevant for a given address.

SNI has been widely supported server-side and on up-to-date client applications for a long time, this is essentially a change to the protocol whereby the client tells the server which site it is looking for as part of the SSL/TLS negotiation so there is no problem providing the right certificate during that process. It has been supported by cPanel since the beginning of 2014, and presumable the competing shared host control panels too, so if your host is up-to-date then SNI should be available (if your host is running a 2014-or-before build of the control panel, move host now as they are likely vulnerable to a variety of security issues).

Unfortunately "up-to-date client applications" has been the sticking point: no version of Internet Explorer running on XP supports SNI, nor do older mobile browsers. Your site would still work on those older browsers but the user would get a security warning on each visit which is not desirable. Browsers that old are getting less common, and are getting locked out already because of protocol/cypher changes intended to mitigate recently discovered attacks against SSL/TLS, so SNI is an increasingly practical option (how practical is your decision: can you afford to potentially scare off that remaining small percentage of potential users? Personally I say "definitely yes, people that out-of-date are a nightmare to support anyway so my competitors can have them").

Of course IPv6 also fixes the issue too, but adoption of that lags behind the adoption of SNI compatible browsers by a long way.
Also Heroku's price for serving https with your own domain is absurdly high.

I basically means there is not free version of Heroku for serious projects, which is ok. But taken in isolation, the price tag looks pretty bad..
How do they propose to rid Howe Island of rats?
the legacy runtime before the `non-fragile` one?
That doesn't really address the XKCD. The XKCD was comparing schemes where the attacker has perfect information about the password scheme each user is using. Password crackers therefore cannot be "on to this trick" as it is assumed they already know in the initial calculations of entropy.

Given that Bruce Schneier is Bruce Schneier, it seems likely that I am wrong somehow, but at present I cannot see in what way.
HTTPS (in the current form) adds a dependency on external authority. This breaks the very fundamental principle of the web.
I think currently Netflix has other priorities than spending money efficiently. They want growth first.

Years from now when they're a monopoly provider like cable is they'll concentrate on spending their money wisely and we'll all be bitching about the subscription fees.
Creating Banner Images Using HTML – The Zammu Blog
A good password could be created by using a sentences with > 14 words. And than you should use the first letters in their plain form i.e. This is a sunny day will be: Tias, now you should change any s/S to a $ and any a/A to a @ after that you should add the last two bits of your birth year in fron of the sentences and the first two bits at the end of your sentences.

So now you would have something like:
57Ti@$19
Software testing is not software engineering. Testing generally doesn't pay as well. Be careful: if you're doing an engineer's job, then you deserve an engineer's wage. 30k/year would certainly be very low for a software engineer with a degree. For a software tester, it still appears low. According to glassdoor[0], the median US wage for a software tester is $67k. If you're making $30k, then you're probably being underpaid.

Furthermore, having money to buy unnecessary stuff for your hobbies is not the metric to go by. The more important metric is about what you're able to save. Important questions are:

* Are you saving enough money to ensure a comfortable retirement?

* Are you saving enough money to buy your children (assuming you have/will have them) a decent education?

* Are you saving enough money to cover medical expenses later in life?

* Are you able to set aside an emergency fund?

If the answer to any of those questions is "no", then you should probably be concerned.

[0] https://www.glassdoor.com/Salaries/software-tester-salary-SR...
A Shodan Tutorial and Primer
The real problem is that there's a brutal civil war. The idea that the origin of the problem is government overregulation is laughable.
"The most important thing for humanity to do right now is to invent true artificial intelligence (AI)"

bollocks
make SA 8000 certification mandatory in supply chains

https://en.wikipedia.org/wiki/SA8000

or provide tax incentives for such certified companies
Well if i recall the whole demon thing correctly, it was about having a gate that would allow particles to travel only one way.

Basically unless we are operating at absolute zero (zero kelvin), all particles are moving around to a greater or lesser degree (aka heat).

Entropy, iirc, comes about in physics from having regions of greater or lesser "heat". With the understanding that over time, particles in hotter regions will travel to colder regions until there is a uniform distribution (heat death of the universe ultimately).

The demon was about filtering this movement to reverse the process, by blocking movement from hot to cold, but not from cold to hot.

But as the demon/filter can't operate without producing waste heat itself, and that heat will not be subject to the filter, it basically can't do its job.

That is at least the undestanding this layman has reached about the subject.
To Cloud or Not to Cloud?
It's really not that simple at all. Please read this report: https://www.globalwitness.org/sites/default/files/pdfs/repor...

Buying minerals from the wrong people in the DRC doesn't mean you buy from people who benevolently employ children to save them from starvation. It means you buy from the people that set up roadblocks and extort minerals from civilians in exchange for nothing (other than not shooting them). It means buying minerals from organisations that are gang raping women and kidnapping children. Buying from those people further funds their operations, making the situation for civilians worse.

The report makes recommendations, including a section "to companies and traders purchasing, handling or trading in minerals originating from eastern drc or neighbouring countries":

>Exercise stringent due diligence regarding their mineral supplies: find out exactly where the minerals were produced (not only the broad geographical area, but the precise location and mine), by whom they were produced and under what conditions (including use of forced labour, child labour, health and safety and other labour conditions).

>Refuse to buy minerals if the above information is not available or if there are indications that the minerals have passed through the hands of any of the warring parties, benefited them in other ways, or otherwise involved human rights abuses.

>Be able to demonstrate, with credible written evidence, the exact origin of their mineral supplies, the routes they have taken and the identity of those involved in the chain of custody, including intermediaries or third parties who have handled them.

>Do not accept oral or vague assurances from suppliers as to the origin of minerals and the identity of their own suppliers. Carry out spot checks to verify the sources and the accuracy of suppliers’ assurances. Require these measures in all circumstances, including in cases where minerals originate from areas which may be remote or difficult to access.

>Commission and publish regular independent third-party audits of their supply chain.

>Federations and associations of comptoirs and other trade bodies: adopt an explicit policy not to buy or handle minerals which benefit any of the warring parties in eastern DRC. Require their members to carry out the above due diligence steps systematically and to demonstrate precisely where all their supplies come from. Set up mechanisms for independently monitoring and checking whether their members are complying with these requirements.
I don't know, are we going to pay the children directly to not work in cobalt mines, or are we going to prevent them from accessing the 100% opportunity to make cash? It sounds like they have the same attitude as the people you are chastising. Reading this comment, it appears I'm one of them. What's an action you would suggest to improve things?
Chris Granger seems to be doing some awesome work with 'Eve': https://www.youtube.com/watch?v=5V1ynVyud4M
Don't think so, but i do not have a deep enough understanding of either to make a conclusive statement.
If there is a fraction of a $ to be made per instance by replacing references to (for example) Nutella with references and referral links to some other spread I'm sure it would happen somewhere, and might change the outcome of the recipe in terms of taste/texture or worse make people ill if a recipe avoiding particular allergens ends up with the wrong product being recommended.
what exactly ensures that the DV cert is a DV cert?

The fact that IdenTrust says it's a DV cert, and browsers trust its claims.
Will be interesting how the recent monitoring at work judgement will interact with this.
Airmail gets “Snooze” feature