skysight-inc/HackerNews huggingface dataset:
ACMs roots are cross-signed by Starfield (GoDaddy iirc), while they wait for their inclusion in the browser roots... so I can't see a difference with LetsEncrypt? AFAIK either you have the processes/tech in place to secure your CA and issue certificates, or you don't.

https://mozillacaprogram.secure.force.com/CA/PendingCACertif... shows Mozilla's in-progress certifications -- including LetsEncrypt, Amazon, DocuSign, VISA, a bunch of governments, telcos, existing CAs, and others I don't recognise. Cross-signing is a pragmatic solution for older client devices (eg. abandonware Android phones) for _any_ CA root, new or otherwise.
My first thought too. The platform seems ripe for its first worm.
But how is that different than what we have today? Windows for instance already does this for system files, and could be expanded to user installed files as well.

You still need a debugging build, otherwise compiler optimizations will obscure the executeable to the point where debuggers cannot reliably debug it.
It certainly reached the UK. I recall salt manufacturers being up in arms when the government started pushing for lower salt intake a good few years ago.

A few brave scientists even appeared onscreen to say that sugar not salt was the real problem. At the time though there was less hostility to sugar so the salt restrictions went into force and I believe the sugar lobby even were able to squash a few reports condemning excessive sugar intake.
> When is the last time you needed a feature that could only be provided by your kernel?

Generally these are "unseen" features such as adding multicore support or adding support for a power saving feature on your graphics card.

> How are they going to try things out if your OS doesn't support any of the techniques they're interested in (i.e. novel ways of getting at hardware, novel ways of doing virtual memory, etc)

They are interested in a lot more than that. Check the 3L references page for a few examples. [0] Plus you can do many of those things with 3L.

> You realize that this sort of thing is a huge area of current research, right? Because it's a really, really hard problem?

Yes. But it is certainly possible and has already been done to some degree. Genera, for example, did it and a number of other real-world and research OSes have done it. Of course the real challenge is making it as real-time as possible but getting it most of the way there isn't actually that difficult.

[0] http://3lproject.org/references
I agree here. I'm often attracted to new stuff, so working with something new (like Rust) would be a plus in a job description, but I also think is the wrong tool for this kind of task - which would yield a minus for the job description.

This is the classic domain of scripting languages (PHP, Ruby, node, ...), where a huge ecosystem exactly for this kind of tasks exists. But yes, type safety and error handling is not the best there.

If a good type system and a good ecosytem is desired then F# or a JVM language (Scala with Play Framework, Kotlin, ...) could be used, which would from my perspective give a more productive setup for this task.

I don't want to say that Rust is not good, but (just like C++) I think it's best use cases are other applications then webservers, e.g. high performance audio and video processing or bare metal software.
> - it's not unknown for kids to have relatively poor reasoning and decision-making skills

Agreed. And one way to get better at decision making (if you're a kid) is having the opportunity to try and fail at it. So this isn't a good reason to track your kids after all, IMHO.
In a way it's broken for the same reason than the banking system was: too big to fail. So many websites rely on a few CA that we can't allow to fail, otherwise we break the internet.

I wonder if we shouldn't adopt a solution similar to what was adopted for banks: a plan for orderly failure. Having a protocole, at least for DV certificates, to easily switch all your website to another CA. All CA would have to implement the same API, and all web servers would be able to consume that API. The same API would be used for auto-renewing certificates. Effectively generalising let's encrypt for commercial certificates.
How APIs Fulfill the Original Promise of Service-Oriented Architecture
Self hosted blogs miss the social graph, which drives traffic. That's why Tumblr took off, and I suspect it is also what is driving Medium.
just one example out of many - F22/F35 program costs (is it still 1.5 trillion USD?), which cover just one tiny (albeit important) piece of US military offensive power (calling it defense is just a bad joke).

plenty of nasty diseases could be put out of existence with just a fraction of that, for example
The New England Journal of Medicine on Data Sharing
> The problem is when an object legitimately might or might not be present, but the type doesn't encode that fact, so some code mistakenly assumes that the object is always present when it isn't.

Yes reworded slightly, types encode value invariants, nullable types can't encode one of their invariants.
What kind of reforms would be possible? My concern is the impact on SMEs and also competitiveness, but looking at what goes on in the USA vs. Europe it's clear that there is gigantic room for manoeuvre
A Look at Amazon Certificate Manager
Amazon bought one of the Starfield roots from GoDaddy. See their roots here: https://www.amazontrust.com/repository/
I've read somewhere before that the issue may be K vs. Na balance.

Take that with a grain of ... nevermind.
> In March, a Florida woman traveled to Lancaster, Pennsylvania where she stayed at her boss’s home

> Jeannine Risley told police she’d been sleeping and that she was woken up around midnight and sexually assaulted by a “man in his 30s, wearing boots.”

> Risley’s boss, who is unnamed in news reports, offered what police considered further incriminating evidence, telling police that Risley was about to lose her position with the company

Who thought a boss-employee sleepover right before (as?) the employee got fired was a good idea?
You're breaking the HN guidelines by submitting stories this way. Please read and follow them:

https://news.ycombinator.com/newsguidelines.html
Endurance mini DIY laser engraving and cutting machine
Thanks! It's a good idea, but I can see why it was hard getting funding - it's a difficult market to enter: a lot of people are trying to do this, including large well entrenched competitors, there's a high regulatory burden, and you're selling to a conservative customer base (doctors who need to change their working habits + hospital admin who need to make a significant investment).

(I'm sure you know all of that, by the way, just reflecting on how difficult it would be to convince an investor).
I'm currently trying to do this for my own side project, my current plan was analyse each photo using one of the many color analyser algos out there (color-thief seems to be popular/efficient), but the problem is, color is a very complicated thing to compare. I think euclidean distance for two LaB colors is the best for complexity to result ratio (and RBG to LaB is an easy/well-solved problem).
AKA No good deed goes unpunished.
Hey, I was at that same school. What I also liked about F* is the ACL2 feel. Compared to Coq for instance, F* feels more like "my program proves itself" than "I'm writing a proof of my program".
Some Xbox 360 games run better on Xbox One, but some are 'nearly unplayable'
See the info repo provided by amazon: https://www.amazontrust.com/repository/
>However, I don't agree with the apparently widespread conclusion that it follows, from this sentiment, that not publishing is better than publishing using a less-than-lovely platform.

After having had to deal with the aftermath of a hacked Wordpress site that was sending out massive amounts of spam, I would respectfully disagree. I consider Wordpress (and Wordpress plugins, especially) as essentially a security hole that allows malicious actors to gain free access to relatively powerful hardware on fat datacenter pipes, making the Internet worse for everyone around them.

By all means, publish. But don't publish using a platform that allows unauthorized users to misuse your hardware and turn it into a spam zombie/DDOS box/staging box for hacks, etc.
Here's what I did: Flew into Yangon via Bangkok and got my bearings. Then I took an overnight bus (~11 hours I believe) to Bagan and stayed there motor biking around the temples for a few days. From there I took day-bus to Inle Lake (~8 hours). If I would have had more time I would have stopped at Kalau to do the popular 3-day trek to Inle Lake instead. I stayed there for a couple of days (boat rides, bike rides, enjoying the scenery). And then from there I went to Mandalay (not much to see in the town proper but lots of good day trips). And flew back to Bangkok from Mandalay.

It's more expensive than a lot of the rest of Southeast Asia but I still managed on less than $50/day (staying in hostel dorms).
Even if there is no "diff", this is an extra backup. Any of those sites can go down I guess, then where are all those pictures?
Very true. When it comes to the resource intensive development features in 3L they can actually be disabled. But also this is partially a bet on the future, a bet that hardware resources will continue to become less constrained at all levels. Of course that is not for sure when it comes to that but it seems more likely than not that we will continue to advance in some ways. It's important though to start work now so that we are ready when the time comes.

Regarding batteries, the real issue there is how often you wake up the hardware from low power states. An OS like 3L could actually control that better than what we have today and give us better battery life.
What about DANE? I would imagine it has potential to do away with CA...
Writing a web server from scratch in an unsafe language seems like an invitation to get hacked to me. So maybe in Rust this would make sense, but C++ is a dangerous proposition, I think.
Where the hell is Anonymous in all this? Shouldn't they be out there doxxing and haxxoring and whatever it is that they do to these kinds of people? I'd figure if someone stands up and says "Encryption should be illegal", they probably don't encrypt jack shit themselves, and they're probably easy targets. They might even take the hint and say "shit, I should have encrypted my internetz" and change their stance. Eh, doubtful.
It's an interesting article by a competent and well-known author, but that baity title is guaranteed to produce a flamewar, so (in accordance with the HN guidelines) we replaced it with more neutral language from the article. If someone suggests a better (i.e. more accurate and neutral) title, we can change it again.
Quite smoking please!
Good for your health and wallet
A protocol should definitely be in place for that, all the updates I do are handled just by using apt-get except for certificates. Like I don't want to handle myself anything related to certificates (including the list of ciphers, the generation of new certificates, the compromised CAs ...), the current certificate system feels like the equivalent of installing updates with .tar.gz archives.
Yes. Homeless people are encouraged to move there, and people working in charities rely on their existence for their livelihood.

http://www.city-journal.org/2010/20_4_san-francisco-homeless...
Many times it is less resource intensive to do manual memory management, it just depends. The sacrifice in performance comes more from runtime features like type checking.
You can pin a certificate higher in the chain, like the root cert of your CA. That way, you can still rotate your own cert, but an attacker couldn't just install a new root cert in the machine, they would have to get a cert from the same CA as your own.
Yeah, that's one part of it, but someone (I think Steve?) mentioned that some startups have realized that the process of learning Rust automatically teaches low level programming concepts, whereas with C++ it's less so. Or something like that;
> Some text inputs have a dark background and a dark font. Which makes things very difficult. I'm typing blind.

https://wiki.archlinux.org/index.php/firefox#Unreadable_inpu...

You can customise the colors according to your preference.

I also like the FT Deep Dark theme for firefox.
FYI you load resources (CSS? JS?) from a external URL which leads to a JS error which leads to a white site when uBlock Origin is active.
Google's J2ObjC 1.0 Release
If you want to play that dirty, rather than make statements about it, ask rhetorical questions about why the people proposing this wants to give the Chinese and Russian an easier way of stealing silicon your secrets, and ask what they've got to hide.
In my corner (Portugal), there have been noises to legislate lower salt in bread, etc. And the health professionals are definitely on board with that, they've been advising lower salt intake for blood pressure for many years.
Sign in box doesn't fit on my screen, and I can't scroll it.
I've hit a roadblock from the other side of things: I have a PHP/Smarty app including a marketing site that would love some new content. But I don't want to go editing stylesheets etc for web site updates.

To make the process not depend on me, I'm considering wordpress.

Hugo and static site generators are nice, but need a developer.
Redux and it's relation to CQRS (and other things)
What do you mean? 700 AU it's about 4 light days.
Health insurance in Suisse, based on permanent employment: employer is obliged to pay you accident insurance, which covers... accidents, full time. Employee is obliged to find health insurance (basically you get ill), otherwise state will find you one randomly. this is paid by employee from net income.

There are various models (GP, doctor on call, semi-private, private etc.), with different franchise, effectively you pay somewhere between 250-500 CHF monthly.
Franchise is amount 300-2500 CHF per year that you still pay from your pocket for treatment of illnesses, then insurance kicks in with 100% coverage. Of course the lower the threshold (ie 300), the more you pay per month. Dentists and eye care are almost never covered, only with most expensive ones. FYI CHF=~ USD.

Apart from that dental and eye care, probably the best model I've ever seen. Medical care is top notch, hospitals definitely don't lack proper (often expensive) equipment, rather the issue is there is not enough doctors/nurses.
Wordpress is often chosen because it provides the less technically inclined with a nice management interface. If there were rock-solid web interfaces to edit content on static websites, we'd begin to have a serious contender to Wordpress. In the meantime, static websites will unfortunately be reserved to us technically inclined people.
"This makes me skeptical. And based on what I see in the wild... lots of loading progress bars, etc, I don't see widespread use of this technique."

If you're looking for a "big" site that does this, then: Yelp. All of the content on yelp.com is statically rendered, with progressive enhancement. Turn off javascript, site still works. It looks nearly the same, in fact. So go inspect source to your heart's content.

There's really no magic to it, and nothing of which to be skeptical: you first generate static HTML and CSS, and you treat javascript as an enhancement to that content, rather than as as the content itself. This is the way things were done for years. It's only since 2013 or so that people have lost track of this "ancient" art.
All Amazon roots are cross-signed by other trusted roots, so they were already trusted by all systems, including Microsoft: https://www.amazontrust.com/repository/

They are also on their way to be added natively to the Firefox root store: https://bugzilla.mozilla.org/show_bug.cgi?id=1172401
Developers use the right tool for the job.

Java / JVM is the right tool for some jobs, and not the right tool for many others.

It's definitely not an essential for core services and web applications, but is a valid option.
Wow I really liked this article. It encapsulates my thoughts and validates some of my suspicions on private data trafficking quite well.

Thinking of Silicon Valley as the both the bad guy and the good in the fight for privacy is quite interesting. On the one hand these big companies fight for anti-surveillance measures and they fight against laws for weakening encryption. On the other hand, they fight against laws designed to curb dissemination of private information and general consumer protection. This dichotomy is really striking to me.
The OS has not been open sourced yet but will be soon. Personally there is https://github.com/ThomasHintz/ and https://bitbucket.org/thomashintz/ and even more on my personal website http://thintz.com

Technically it could support C. One of the reasons it is based on Scheme though is that there is a lot of code already, code written in Scheme. :)
>Almost every programming language can have a REPL, it is called an interpreter. Anyone with a CS background should know this.

That's the theory though. The practice is (was) that Lisp had an excellent REPL, and most languages didn't have one at all, or had a crappy one.

Some languages lend themselves to a REPL by making it much easier to program one. iPython is great, JS ones are decent. Go attempts at REPLs otoh are mostly BS. C++ REPLs (Cling) etc, are neither very handy nor very popular. Etc.

The truth is, some languages handle the REPL situation much better than others. And "scripting" languages are usually better than others at that.

And REPL is not really just an interpreter. You can have an interpreter without having a REPL, or without having the kind of full featured REPL we're talking about. Most BASICs run with an interpreter, but didn't have a REPL, for example.
We (The Ambassadors Lab) did a full 360 stereo live action short last year for Terre Des Hommes. Bought an Ultimaker 2, 14 GoPro Hero 4 Black cameras and made a pentagon style rig.

The stitching/vfx pipeline was mainly the two of us on nuke stitching, warping, projecting and painting. Using ocula for some stereo processing. It was a great experience and the result was fantastic. The feeling of presence was great. Especially when viewed using an Oculus Rift.

Youtube click drag version and google cardboard stereo versions can be found here: https://www.terredeshommes.nl/en/vr-experience

Making of here: https://vimeo.com/129114672

If you're in the neighbourhood of Amsterdam we'll gladly give you a propper oculus viewing.

Right now we're in the post production phase for a music video for the dutch band De Staat which we also shot in stereo.

Stereo, we think, is definitely the way to go.

Shameless plug: we are looking for frontend developers that don't mind getting involved in projects like this ;)
I have a "mifi" device sittin in my coat pocket right now. Even better than attaching to the back, and readily available - it takes a sim card and creates a wifi hotspot for all your devices, and can optionally export a media library or network drive to all connected devices.
4 R's of ASO
stemming will be baked in to a search engine, for example elasticsearch or solr dependent on the language analyzer you use and how you map your fields.
Would you find useful a cloud-based clipboard?
IoT Trends in 2016
That's why I use Slack's IRC gateway. Just use your favorite IRC client.
I'd argue that alcohol is a completely different beast.

Most people start smoking to be "cool" or because their friends smoke (or both). It's a fact that very few people start to smoke after their eighteenth birthday. If we remove the access to cigarettes and make it uncool to smoke, I firmly believe very few people would start. (I'd be ok with a period of cigarette prescriptions, so all those who smoke now and want to keep doing it could in non-public spaces.)

With alcohol it's different, most people start to drink to get wasted, of course some level of "coolness" is involved and to a large degree friends, but the lure of getting high is there. Alcohol seems to fill an almost universal need for intoxication (and if it's not alcohol it's some other drug).

> The latency times for tobacco effects in general make it a doozy of a thing to study

Sure, but given that the damaging effects of smoking has been proven, I for one would rather play it safe. I want to have my freedom to choose when to expose myself to something that may be damaging to my body and my body alone. I don't want that choice to be done for me by someone else just because they feel like lighting up while we wait for the bus or whatever.
It should be taken as a given that these networks are going to inflate their stats and really be more expensive than they look. The conflict of interest these platforms have in presenting an accurate analysis of clicks v. making money for clicks is just too intense to expect anything else.
Looking from this distance, developing Chrome and working hard to gain market share for it looks like a really smart move by Google.
I think that's one of the goals of Let's Encrypt, by developing the ACME protocol, which will be submitted as a standard RFC: https://ietf-wg-acme.github.io/acme/
That's because Kotlin puts the complexity in the language and Scala puts it in the libraries. A lot of things are just a rule of the language in Kotlin but they're implemented in ordinary code in Scala. E.g. extension methods. Which means you can "understand" them quicker in Kotlin, but you can't change how they work or use them to implement a new structure.
Good catch. Outcome (or error, which boils down to the same thing) can't just be anything either, though, e.g. a common pattern is that the variance in an outcome increases when the predictor increases (e.g. a machine behaves more erratically when it spins faster) and that can mess with estimates.
Hi, If you want you can contact me. I created a powerful algorithm to detect dominant colors in an image using K-means clustering and lab color space.

Examples: https://twitter.com/kamy22/status/479040852028051456
https://twitter.com/kamy22/status/472517258418606080

Have a good day!
Yep, tried to access ACM, and got "Certificate Manager is not available in EU (Ireland). Please select another region."

They probably are going to roll out this feature everywhere.
Check this afternoon project: https://github.com/wolfv/GtkOnline

That could be a future GTK browser :) dynamically downloads a glade ui file and python + CSS scripts to bring the web to GTK.
Isn't the $9B for all mobile advertising, not just mobile search advertising? According to a Glodman Sachs report for 2014, back then they estimated that iOS advertising accounted for 75% of Google's revenue on mobile. That would make the Android search ad space worth about $1B.
Have replied to sibling, hopefully that makes my views clearer.
I hacked this together using Parse while learning React. Idea is to build a weekly notification feed style app of different categories of news. No news in the site yet and the site itself is just barely functioning. Need to build a content management system too.
> I seem to remember that the (much more expensive) purchase of Motorola was considered as a defensive move specifically to counter Apple IP claims

Or more specifically, to counter the $4.5B Nortel IP that Apple, Microsoft et al outbid Google to get. In retrospect, the IP arms race was foolish and extravagant.
In a content-addressable network your computer seeds the content rather than serves it. You do not need a properly managed server for that. It does not matter whether the original node is accessible, information can be retrieved as long as it is available somewhere in the network.

In IPFS, if you need to immediately ensure availability of your content, you can request it via a public gateway to force it into the gateways cache. Then the gateway will continue to seed your data even if your node goes offline.