skysight-inc/HackerNews huggingface dataset:
> not everyone has the drive and inclination to do anything but bolt turning

I think one of your implications is that some people are just too lazy to work at a skilled job.

I'd guess that this problem is much rarer than people suppose. Financial stability is a very strong motivation to work hard. It's also true that low-paying jobs almost never allow people to be lazy! It's absolutely exhausting and miserable to work in restaurants, production lines, cleaning, etc.

The key is mobility. Some of those bored, disengaged bolt turners might make enthusiastic, happy electricians. But transitioning from bolt turner to electrician is expensive, and usually turning bolts won't pay for that.

That's where society comes in: governments, nonprofits, and perhaps some corporations lubricate the labor market by making it easier for workers to switch into positions that suit them better. That lubrication comes in the form of subsidized education and/or temporary living expenses.
We'll not support Mercurial like we support Git, doing both would limit us to the features that are supported in both.
Thanks! I created an issue here [0], I'd love it if you could clarify it a bit there.

I think we can do better in our comparisons with competitors. I created an issue [1]. I haven't heard someone asking before about a comparison with Gitblit. Please feel free to email me at job at companyname dotcom if you'd like me to discuss it with your clients.

[0]: https://gitlab.com/gitlab-org/gitlab-ce/issues/10860

[1]: https://gitlab.com/gitlab-com/www-gitlab-com/issues/514
This is a new concept to me. Do have any good references for this I could read up on?
Don’t get in your own way
For AWS users, KMS's GenerateDataKey is a simple way to store secrets locally in a way that reuses your IAM policies. You can also use grants and EncryptionContext to restrict the ability to decrypt secrets in a very fine-grained manner. As a bonus, all decrypts are logged in CloudTrail. The KMS docs are awful but if you're on AWS then it is worth checking out!
I don't think you understand how the CA system or Let's Encrypt works.

IdenTrust signed Let's Encrypt's intermediate certificate[1] using their trusted root certificate. This intermediate certificate has the CA flag set, so other certificates signed by it are to be trusted too. Intermediate certificates are used by all CAs.

When you run the client on your server, the client submits a CSR to Let's Encrypt's CA server. Let's Encrypt will then verify domain ownership (via HTTP, TLS or DNS[2]). This is done in accordance with CA/B Baseline Requirements, and their practice doesn't differ from other CAs who also offer HTTP[3] or DNS verification. If ownership can be verified, Let's Encrypt will then sign your certificate using their trusted intermediate certificate and send it back to you. It is thus not self-signed, but signed by a trusted CA key.

[1]: https://crt.sh/?caid=7395

[2]: soon!

[3]: At least one other CA (WoSign) does this, there are probably others I'm not aware of.
TrumpScript is language based upon the illustrious Donald Trump
I don't like defining "success" as some kind of bare minimum. Success is, at least, being better than average.
How does one write that many words about radioactive waste without mentioning MSR's?

https://www.youtube.com/watch?v=i1fqB6p9pgM

https://www.youtube.com/watch?v=oAVCaUonrbE

https://www.youtube.com/watch?v=D3rL08J7fDA
The core difference with AI is that it is adaptable. Sure, flailing around and happening to do something useful isn't clever, but if we can reinforce useful behaviours something more closely resembling intelligence can emerge.
> Moving metadata (e.g. issues, milestones, PRs, etc.) is more difficult but mostly possible.

I'm curious as to how people tend to go about doing this. Any recommendations?
I wrote a library to enable secure communications over insecure channels for IoT, maybe it'll be useful to you: https://stringphone.readthedocs.org/en/latest/
I didn't down vote you, but my guess it is the tone of your comment. You are of course 100% right that for a general social network there can only be one. Until Facebook messes up it won't be possible to build a new general social network - maybe News Corp will buy Facebook and an opening will arise.
> Not so long ago, it was revolutionary to be able to send messages to someone even when they were offline.

How long ago was that exactly? From what I remember, ICQ had offline messaging around 1997.
"The most important thing for humanity to do right now is to invent true artificial intelligence"

Maybe the article makes some valid scientific points, but I simply cannot go past this unscientific opening claim to a purportedly scientific article. Not just me, no peer-review journal will accept such frivolity. Passing on the article and hoping for better scientific writing in the future!
Poverty is a fun issue because (typically) solving poverty has resulted in greater population and thus trends towards poverty.

Less true in modern nations, but its still generally true.
The problem is that if it's free, the standards for admission will need to be much higher. Free and open to anyone won't work.
Except it doesn't "just work". Some new service comes out, it's desktop first. No Amazon Prime on Apple TV. FF/REV on streaming sucks (true of all streaming devices). Searching sucks. Marking as favorites or adding things to playlists (for remembering) sucks

Every time I try any Apple TV or competitor it's never has useful and something is always missing. Kind of like mobile apps/web vs desktop web. Something is always missing.
First off most startups fail because they don't have a working business plan or they don't have a good target market because they developed a niche that has very few people in it. Work on fixing your business plan and find a new market to target your product at.

a) In the USA the software contracting market suffers because everyone has to go through brokers to get a contract. Most brokers don't understand the technology they are placing people for and just read resumes for key words to place people. Software contractors lost their tax status in the 1970s and never got it back, so they pay a lot in taxes. If you ever heard of Joe Stack he flew his plane into the IRS building because he was a software contractor screwed over by brokers that keep part of the money and the IRS that takes a lot of taxes from software contractors. It is because the system is so messed up that some software contractors go without work for long periods of time and some end up homeless as a result. If you are going to make a new Freelancer web site, forget it, most are in favor of the client and the client always goes to the lowest bidder which is usually a foreign worker. There are no freelance websites for favor of the contractors. There is no shortage on talent, just that people with talent need more money to work and clients don't want to pay their rates so they seek to train young people to work for a cheaper labor. It is a corrupt system you are getting into.

b) Where are you going to get the money to pay people to work on open source projects? They don't bring in any revenue and crowdfunding doesn't always work. You'd be better off training people to work on open source projects in part a to gain the talent so they can be marketable and list the project on their resume.

c) It almost sounds like some kind of spam system that uses social networks to target gamers and then pays off some random lottery.

I don't really see a, b, and c working out.

I myself have been trying to write ebooks, but I recently found out I earn more money via Adsense on Youtube videos. Have you tried making Youtube videos on training people to program or something and put Adsense on it and see how much money it earns?

You really need better product ideas, like look for problems that need solving and see what market is looking for a solution and make a solution or hire people to make a solution and then market it at those people using advertising on places they visit on the Internet.
Agreed! Everyone should enjoy success, and success is being better than average.
Complete aside: I tried changing the text size and the site dynamically restored the text size to their preference.

Highly annoying!
@pfg:

I know exactly how CAs work. I've built several.

Wosign does not issue a cert without an email verification.

You can look on their website. There's a nice big box to enter an email address to verify your domain and get the free cert.

Sorry -- "Let's Encrypt" with file verification is not DV.

It's just not DV. Simple really...

And it's gonna break the web. Like netlify up there a few post... using rackspace and "Let's Encrypt". ehh. The first few months will probably be fine and then everything is gonna tank.

Until the smart realize that ACME is fine -- as long as you remove the "or file verification" text.
Interesting. I actually run a web-server, and I only control my stuff through a web-API's, but that could also be useful....

Thanks
I think the problem with Google+ was that they couldn't decide what they wanted it to be. It was a social network, but it was also supposed to extend across the Google empire. It was difficult to get your head around it. Reminded me of an old Saturday Night Live fake ad - "it's a floor wax, it's a desert topping."

Now that they've split up the product and made Photos a standalone app, they've got something. It's not a social network, but rather a simple concept that people can easily understand. Now if they could make the relationship between Drive and Photos a little clearer, they'd really have something. :)
I agree with you mostly, but I do want that divide to be crossed, by software that I the user control, not by software that $smart_company controls. It's my data!

If it's a choice between $smart_company or nobody though, I'll take nobody. Thanks to firewalls and blocking outbound connections from IoT devices, it's often not that black and white.
Seconding Urbit since I'm a giant fanboy. It's not a new programming languages as much as new computer, internet, everything. And it's a lot of fun to play with - Hoon isn't nearly as difficult as it looks :)

As insane as a lot of it seems, most of it are just logical conclusions from a few base ideas: what would computers look like if you owned your own data, if it was all built on top of a purely functional VM backed by bignum binary trees, if you could replace all the mistakes made over the years (nonversioned file systems, untyped shells, manually serializing data structures)
Quality in auto manufacturing is an iterative process. It took well over 20 years of Deming's iterative process improvement to bring Toyota's production quality up to the standards of GM in the 1970's...as pathetic as those standards were. It took 40 years of protectionist subsidies, tariffs, and hundreds of billions of dollars in Korean government investment to get Hyundai to the standard where they could actually export their cars without being laughed at.

Tesla has taken 13 years to ramp up production to 55k per year, and that was even after lucking out with a down-on-their-luck Toyota manufacturing division complete with experienced management and auto workers getting dropped from Toyota's production portfolio. You hold them up as a standard for progress, but they are literally a toy car company. Ford started producing cars in that quantity in 1911. 20 years from now, Tesla will still be paying high priced consultants with global manufacturing experience for their experience building cars at scale. Tesla will no doubt succeed if they can keep up that pace, but they have an extremely long road ahead before they can even compete with Nissan or Hyundai in the US in terms of production capacity, reliability, and production costs.

That legacy culture that you deride has another name: knowledge and experience. The same Tech-industry "we can do it better than you with no domain expertise" arrogance is exactly the reason why Silicon Valley hasn't made any dents in Health Care, Finance, or Energy, despite the untold billions that their VCs have dumped into those exact industries.
> What makes humans (specifically their brains and the brains of other species) so powerful is it doesn't need hundreds at attempts at playing pacman or Skyrim before it wins.

The average human is terrible at playing Skyrim, Pac-Man, and video games in general. Someone who has never even looked at a computer will have a hard time playing Skyrim or any other video game without many hours of practice. And, most video games draw upon stuff that humans already know, like moving around in a physical world, and a concept of self, which gives them a huge advantage over AI right from the start.
The third graph pretty much says it all; research, licensing fees, consulting and speaking engagements (mostly training pharma staff from what I understand) make up almost all of the payments.

Glad to see that the data is so boring.

https://plot.ly/~troyshu/14.embed
Education alone does tend to make people better neighbours.

There is true value in education, but unfortunately the only market demand is for people who are intelligent, conscientious and educated in certain fields. Hit all three and you are in demand otherwise a life of dead end jobs awaits you.
My dad (high energy physicist) was big on the idea of dumping the nasty stuff deep in abandoned salt mines where the Earth naturally squishes the barrels over long periods of time and essentially re-integrates it into the ground. Of course, human stupidity led to it's political downfall.
https://en.wikipedia.org/wiki/Waste_Isolation_Pilot_Plant
It's that kind of focus on general aptitude over specialized interests and passions that produced amazing wonders like Google+.
How to remove Cinavia protection on Blu-ray
"H/T" is this newspeak for "hat tip"
wonderful ! motivating to start off
The official Peach app uses SSL and they also do certificate pinning in the requests, that's not a problem. The problem is that Peach's server side authorisation token does not expire when you 'log out' and you can reuse the token.

The issue is mainly got to do with third party apps + this flaw in Peach's API. There is already one[0] which has reversed the Peach API, and the flaw is still present. What happens when another third-party Peach app comes out and does not use SSL, you can still use Peach's API without SSL and it does not default to HTTPS.

This sort of flaw would lead to a similar issue to the Snapsaved leak[1].

[0] http://techcrunch.com/2016/01/14/peach-gets-an-unofficial-we...

[1] http://techcrunch.com/2014/10/13/snapsaved-takes-responsibil...
So this 1000 page book you can read in a few hours are technical or fiction books? What about the 500 page book over a weekend?
Both sound extremely impressive. What type of technical books are these? Any technical/programming book I read usually has a lot of exercises to do, or is just non-trivial and requires more time from me. For example I can't imagine it being possible to speed-read something like 'Introduction to Algorithms', or anything technical really.
My android TV box might not be Apple "polished" but it is very good and way more powerful than the iTV and works for everything I want it for (mostly Kodi and youtube) and for a fraction of the price.
Mostly true, but I think there can be exceptions such as PressureNet and Waze.
Thanks for your comment. We're all certainly sensitive to customer service issues (if anything, frequent fliers even more so). I think a major change in service for your most frequently-used route is pretty significant, and I'd expect anyone to switch airlines for this. I was speaking more of small changes that would likely go unnoticed, eg if one airline offers upgrades to frequent fliers slightly more often than another; that might go unnoticed, and even if it didn't, likely would not trump loyalty due to existing miles, preferable routes, preferred lounges/service of one airline over another, etc.

Your suggestion of "upgrading" yourself is not realistic for 2 reasons. One, very few people will pay 5x as much for a slightly better experience. The price difference vastly exceeds the actual cost (except to the extent that premium seats subsidize coach seats, of course).

Secondly, my comment was about the customer goodwill the occasional upgrade would generate, as lowly infrequent fliers do not expect to be treated as anything but breathing, inconvenient cargo.

You say that people who spend as much time in the air as you DO care, but you also said you don't use upgrades, and you changed airlines over a major service change, not over a minor upgrade policy change. I'm not saying you DON'T care about upgrades, just that it's not really what you were addressing in your comment.
You seem to think that a certificate authority is obligated to verify ownership of a domain by email (for DV certs). You are mistaken, and that's not the case. The mechanisms supported by Let's Encrypt to authenticate domains are just as good as email verification.

If you've been involved in a CA, then you should be familiar with the CAB forum baseline requirements for Verification Practices. https://cabforum.org/wp-content/uploads/BRv1.2.3.pdf

> For each Fully-Qualified Domain Name listed in a Certificate, the CA SHALL confirm that[] the Applicant[] has control over the FQDN by: [...]

> 4. Communicating with the Domain’s administrator using an email address [...] ‘admin’,
‘administrator’, ‘webmaster’, ‘hostmaster’, or ‘postmaster’ [...] followed by the Domain Name[];

> 6. Having the Applicant demonstrate practical control over the FQDN by making an agreed-upon change to information found on an online Web page identified by a uniform resource identifier containing the FQDN

> 7. Using any other method of confirmation, provided that the CA maintains documented evidence that the method of confirmation establishes that the Applicant is the Domain Name Registrant or has control over the FQDN to at least the same level of assurance as those methods previously described.

The approach used by Let's Encrypt meets this standard (of which email is just one of several options), and the methods they use are just as secure as using email. They specifically offer approach 6. above, which they call Simple HTTP, as well as other approaches that comply with 7. as outlined in https://letsencrypt.github.io/acme-spec/#rfc.section.7 Involving email in the verification process makes certificate provisioning harder to automate and adds no additional security.
You can also read The snowball : Warren Buffett to get the view about the crisis from the top guy.
A bit off topic, but have you guys thought about breaking out into electronics classes? I bought a photography class and thought it was quite a nice learning platform. I'd love to learn an Arduino or Rasberry Pi project on it.
If success is being better than average, then not everyone could enjoy it, or else success would just be the average.
Well, the aggregate benefits are there... just not for the consumer. The company producing the product, who collects all that data on their customers, gets to pick trends, predict failures, and take preemptive action. ...Often whether their customers like it or not.
62 wealthiest people against half of the world population wealth
@crdb you must be too young to see these Jets. Back in the late 70's, as a kid I got to see the A4J Skyhawk shown in this article. It was aboard HMAS Melbourne as it docked in Melbourne at Station Pier #1 inbetween a deployment and refit. [0] On the flight deck you could climb up the stairs and peer into the cockpit [1] or move around look. The RAN had about 20 these A4Js in the fixed wing Air Fleet.

Four years later the Melbourne was decommissioned and sold off, the squadron disbanded and the former RAN A4Js were sold to the NZAF. [2] The Aeromachi were moved to the RAAF for jet training. [3]

[0] My Uncle served on this ancient Carrier, "If it moves, salute, otherwise paint it." http://a4skyhawk.org/content/ran-vc-724

[1] Much like this shot http://a4skyhawk.org/content/155051-vf-805-ran-official-4966 and http://a4skyhawk.org/content/155051-vf-805-photographer-unkn...

[2] The two nations both used A4Js, here's a RAN with a NZAF A4J. The Kiwi A4 can be recognised by the avionics hump and differing paint work http://a4skyhawk.org/content/buno-157908-rnzaf-nz6205-4

[3] Eight years later I'd watch these re-badged Aermacchi's, now in their training Orange and White (Fanta Cans) at a mates passing out parade at RAAF Wagga. The AVM himself, flew the 400 or so kilometers from RAAF Sale in his own personal jet to officiate. Before: http://a4skyhawk.org/content/4g-buno-154909-1 and After: https://en.wikipedia.org/wiki/Macchi_MB-326 and https://en.wikipedia.org/wiki/File:Royal_Australian_Air_Forc...
I don't know what qualifies as "large" but procuring food for my family is a tedious and time-consuming task so for me at least it is large and repetitive. I'm not sure how much that can be automated though.

The parent post mentioned tracking of airplanes. I wouldn't mind if a company monitored my home heating system or refrigerator and notified me if they were about to fail, as these failures can be expensive and a huge hassle if not anticipated. Also consumers already benefit from alarm systems and cameras they can monitor remotely. Heck, alarm systems have been centrally monitored for decades, just over proprietary networks rather than the Internet.
This seems more than a bit flawed. It presumes companies or anyone else think these launches in to new markets are low risk. They are generally seen as anything but. There is hope that leveraging existing strengths will improve the odds, but only the idiots think they are certain to win.
I don't know what their exact business plan is. Just like Twitter STILL doesn't have a real business plan.
Pharma is a drop in the bucket friends. The major source of healthcare cost escalation is hospitals. Then doctors, then devices. Pharma's a scapegoat down at the bottom of the barrel with a mere 10% of the pie, about the same as hospital non-physician staff.
GitLab has an importer for GitHub repo's, issues, pull requests and in 8.4 (out on Jan 22) wiki's.
I think that @sliverstorm was conveying that idea via sarcasm.
While the NUC is a fine machine (I own the previous gen) consider getting a workstation (I am on my second one in 8 years - https://h41360.www4.hp.com/pps-offers.php?prod_cat=workstati...) for below advantages -

1) You get ECC memory and can opt for a Xeon CPU which multi tasks way better than Core versions in my experience. (NUC is space constrained so less thermal headroom thus slower sustained performance and the need for a noisier fan.)

2) Substantially better build quality - for added benefit my tower z230 sounds much quieter than the NUC which I have to keep on the desk.

3)The prices are not that higher than the fully loaded NUC for the features you get - for example $787 for 256GB SSD, 16GB ECC RAM, 1TB disk latest Xeon E3 and GPU built in.

4) I am not sure if you want RAID for data protection but sounds like you are careful - so the workstation I mentioned above gets you 5 disk bays - one SSD and 4xRAID is great to have. Not an option with the NUC.

5) It comes with a Windows license unlike the NUC and you get a Enterprise grade warranty for a year which you can extend for very reasonable price.

I am constantly delighted by my Z230 - it is fast, reliable and allows me to multi task quite heavily without any slowdowns.
I agree. I'm just saying it's easier to make an expendable than a reusable one, because you don't have to allocate mass to return systems.