skysight-inc/HackerNews huggingface dataset:
> Chrome stored my client cert from Startcom in a file in my home directory.

I gather that you don't have a smart card attached to your system? This [0] indicates that Chrome uses Mozilla's NSS to store certificates. The documentation for NSS indicates that it's happy to work with certs stored on (or to store certs on) a smart card. :) Granted, the UI "sucks" for this, but that's part of my point.

> I got the point about client certs being more convenient at the point of authentication.

That's not what I was saying. Client certs are unguessable, the authenticating partner has no need to store any significant information about the cert, and certs typically rest in the most secure storage the OS can provide. [1] Certs are leaps and bounds safer than passwords.

Right now, certs are typically harder to use than than passwords.

> For client certs to have any hope of wide usage, the non authentication issues need to be solved...

I'm not trying to be confrontational, but didn't you see that this was exactly what I was saying in my previous two comments?

No need to write four 'graphs that largely restate what I already said. :)

Thing is, if noone uses a thing, the UI for that thing will never get better. You frequently have to offer the thing as an option so that people will start using it before UI design teams will deign to make the UI for that thing better.

> A trivial number of the people who get them right, also don't bother with PGP for email because that is even more painful.

This is kind of a tangent, but: I guess those people don't use email clients that have adequate support for PGP. Enigmail makes key management, selection, and use trivial.

[0] https://chromium.googlesource.com/chromium/src/+/master/docs...

[1] User mishandling notwithstanding.
Still reading books in the 21st Century?
Will this be a replay of Soros "Breaking the Bank of England"?

http://dealbook.nytimes.com/2010/06/04/when-soros-decided-to...
Thanks. I'll investigate. I have used ColdFusion for 10+ years and as such am comfortable enough in it, and support 50-100 sites built with it. But sometimes it's hard to find tools/tips out there as the community isn't very strong.
Hey Panjaro,

Aussie who runs a dev shop in SF here. Speaking directly about "how to go about finding clients", here's some things to think about when starting out:

* Portfolio: Everyone is going to ask you for your portfolio, so have that organized before you start doing outreach as this will increase your success rate when doing outbound "marketing". You'll be including this in all first touch correspondence.

* Activate Your Network: Most of the freelancers I speak to find work within their network. It's a nice inbound flow, although a little unpredictable, but the key here is to make sure that everyone who knows you can code (I'm assuming you're a programmer here) knows you're available for work. When you first start, make sure to go out of your way to message your friends, start a conversation, and make sure they know you're in the marketplace. It can be strange marketing to your friends, but getting over that feeling will increase your work pipeline.

* Positioning: We have found that while we can do a whole bunch of stuff (Ruby, Rails, Node, Python, Angular, React, Backbone, etc, etc.), this doesn't position ourself as the first point of call when a friend-of-a-friend is asking for freelancers. More effective for us is to position as specialists in a certain skill (React/Node) so that way we're the go-to for whenever someone is asking for around that skill set. (Note: I have anecdotal evidence to support this, but others may have a different experience)

* Outbound: While effectively all our pipeline is inbound now, in the early days I emailed effectively every design and dev shop in the bay and this generated some contracts. Effort to reward ratio was quite high. Just make sure you have your portfolio included in the email to minimize the back-and-forth. If you have boxes of business cards lying around, put them to work!

Overall, I have found consulting to be a well-paid, mostly unfulfilling line of employment that allows our team to maximize their time not working.

Good luck!
Kroppzeug – Helps you to manage your server kindergarten
If it's money, how to you plan to monetize? Do you plan to sell your users data? etc.

From the webpage:

Skadi is free for projects with less than 3 users, public projects hosted on our servers, and non-profit organizations. For everyone else it's only $1/month per user.
GNU Make.
>The purpose of terrorism is to elicit this exact response.

I don't buy this argument. Sure, you defeat your enemy in war by either destroying his legions or sapping his will to fight, but the last thing that you want him to do is take defensive positions that will hamper your attacks while being minimally invasive to his productivity and happiness.

Now, if fear causes your opponent to take self-defeating measures, like ones that severely hamper economic activity or suppress individual freedom, that's a different story. It comes down to what the specific measures are.
>Imagine what kind of perspectives are possible when thousands or millions of input sources are your senses.

Doesn't this exactly describe human sensory input? Though our brain is efficient by throwing out most of the data early on in the signal chain (as research has revealed in vision and auditory input). Will future AI also need to be as efficient?
> I just know the next laptop I buy will be whatever the highest end liberated Chromebook at the time is, preferably without cancerous firmware blobs that control everything, but that seems unlikely considering how anti-freedom Intel is.

Yep, I don't think you'll find x86 Chromebooks without blobs. Nowadays the only way Intel provides to boot their hardware is "here, take this binary and put it at the beginning of your BIOS".

Same thing with AMD, btw.
Some additional advice for anybody doing so regardless of where they live or the market they service:

- Contract a legitimate 3rd party ID verification service like bitstamp does. You get API access where the entire verification process can be automated on your end, and it's out of your hands, so you have some kind of legal protection offloading the KYC risk to that party.

- Encrypt all internal employee messages, regardless if they are totally innocent looking a prosecutor will find some way to twist the emails and chats into a crime. Have a written data deletion policy for internal messaging so they are not saved forever, as deleting them to satisfy a business operations policy will prevent possible future obstruction or evidence tampering nonsense charges.

- Avoid any and all political ideology, don't call your service DownWithTheFedCoin. Notice how the prosecutors made a point about Liberty Reserve's name.

- If you create an asset pegged to a currency don't use USD.

Finally have clear, concise instructions to resolve disputes, and some kind of phone number escalation procedure for users to actually talk to somebody. Better yet have a disinterested 3rd party to help moderate customer disputes in a totally transparent way instead of merely freezing accounts and ignoring their emails. As soon as somebody has their funds seized or delayed they run to regulators and lawyers to complain which in turn spawns government attention on your little cryptocurrency related service.
That makes it different. Not complicated.

It's many, many times simpler than the syntax and semantics than any of thos e three that you listed.

The only language that I can think of that's simpler is Lisp.
Kubrick's ‘Barry Lyndon,’ a masterclass in bringing a filmmaker's vision to life
You have to register an account and use a discount code to download it for free. It looks like it has been migrated to open source and used to be commercial at one time. https://en.wikipedia.org/wiki/Blitz_BASIC

Here is a Wikibooks entry on it:
https://en.wikibooks.org/wiki/BlitzMax
You should probably post a license with the project (as really, you always should with any source code you post).

The closest thing you have is:

> I hope that someone else willl pick it up and eventually transform it in a startup. I however do hope that once this happens I will get to see credits towards me for the initial idea.

http://choosealicense.com/ is a good starting point, if you're unsure.
Git integrity
I've been freelancing in Melbourne almost full time since 2002.

As others have said, the first year or two is very tough and I nearly went bankrupt. But once you get past that, assuming your work is good, you'll find enough repeat customers to keep you comfortable.

If you can get some kind of cushy project (say some work from your previous employer) to help transition then that's a big win.

I would be earning significantly more in a traditional position, but I live a good life. If I were more business savvy maybe I would be making more than a normal job.

The quality of life is exceptional. Being your own boss, being in control of your daily schedule, being able to nip out any time to solve life stuff, that's all a huge win. I'm 15 years in and very happy, have a strong customer base, and looking at kids soon it will let me be a stay at home dad.

If you're ever over Hawthorn way I'd be happy to have a coffee with you and discuss.
The day I almost died
With automation, already, a lot of these jobs have disappeared and will do so more. Not all accountants & lawyers disappear; there are just a lot less of them needed aka one person can do the work of many already and certainly in the future.

Maybe it's different in Switzerland, which I doubt, but in other countries in the EU you don't 'go broke' if you just follow the rules blindly. Many people actually do that with their companies and they do fine. It is true you could be making more with creative accounting but at a risk; going broke if you don't is a bit too strong imho.
It's the biggest challenge!
Reinvention without purpose often appears to take credit for fixing "old==bad" and dodging blame for churn, usually ortogonal of understanding of users' needs: enterprise, industrial embedded, IoT, desktop, mobile, etc. and the actual pain and cost of change at large scale (beyond people one knows and non developers).
> As a human being, I don't chuckle at other people's pain, nor do I brag about it.

I guess Germans aren't human beings? [0] :/

[0] https://en.wikipedia.org/wiki/Schadenfreude
Not sure I'd put professional data into a site that requires you to request an a beta invite.
Effects of a Year in Ketosis [video]
ExtJS is wicked heavy, though. We used it for a while (they have a really slick table component) but it was such a world unto itself, plus being like 10MB with all the required themeing and images, that we bailed and went to a jQuery-based component instead.
ESP8266 Witty Cloud Board Demo
SPOILER WARNING!

Nice read at the end of the article:

"[...] Naturally, this does not qualify as "seeing" in any human sense, and from a scientific perspective it certainly doesn't mean that we somehow solved computer vision at this point. Don't believe the hype; we are merely standing on the first step of a very tall ladder.

Some say that the hierarchical-modular decomposition of visual space learned by a convnet is analogous to what the human visual cortex does. It may or may not be true, but there is no strong evidence to believe so. Of course, one would expect the visual cortex to learn something similar, to the extent that this constitutes a "natural" decomposition of our visual world (in much the same way that the Fourier decomposition would be a "natural" decomposition of a periodic audio signal). But the exact nature of the filters and hierarchy, and the process through which they are learned, has most likely little in common with our puny convnets. The visual cortex is not convolutional to begin with, and while it is structured in layers, the layers are themselves structured into cortical columns whose exact purpose is still not well understood --a feature not found in our artificial networks (although Geoff Hinton is working on it). Besides, there is so much more to visual perception than the classification of static pictures --human perception is fundamentally sequential and active, not static and passive, and is tightly intricated with motor control (e.g. eye saccades).

Think about this next time your hear some VC or big-name CEO appear in the news to warn you against the existential threat posed by our recent advances in deep learning. Today we have better tools to map complex information spaces than we ever did before, which is awesome, but at the end of the day they are tools, not creatures, and none of what they do could reasonably qualify as "thinking". Drawing a smiley face on a rock doesn't make it "happy", even if your primate neocortex tells you so.

That said, visualizing what convnets learn is quite fascinating --who would have guessed that simple gradient descent with a reasonable loss function over a sufficiently large dataset would be enough to learn this beautiful hierarchical-modular network of patterns that manages to explain a complex visual space surprisingly well. Deep learning may not be intelligence is any real sense, but it's still working considerably better than anybody could have anticipated just a few years ago. Now, if only we understood why... ;-)"
PostScript is a Turing-complete programming language after all.
> How do they get away with this?

They have a unique offering and they are a trusted brand. If you have neither, you are relying on blind faith. For the vast majority of business to consumer products, this isn't a problem. However, in your case, you have a product that requires the installer to be somewhat knowledgeable, hence the scrutiny.

The easiest way to gain credibility is to have an incumbent vouch for you. For example, if Trello were to say, if you want to host your own Trello like solution, there is no better option than X, then most people wouldn't really care about installing a binary.

Since your solution isn't novel enough for people to take that leap of faith, you really have no other choice but to make the source available or try to align yourself with an established incumbent.

For example, create your product so it has tight integration with an Atlassian product and sell your solution through Atlasisan's marketplace. Or create a tight integration with GitHub and try to get it listed as an integration partner. And so forth.
RT from BestPractical https://www.bestpractical.com/rt/. Extremely extensible and robust, can be used for all kinds of things beyond just ticket tracking (change control approval workflows, knowledge bases, asset tracking, CRM and automation plugins). The king of ticket trackers, could be at the heart of any organisation.

Prosody https://prosody.im/. Open source XMPP server with support for MUCs and all the usual XMPP stuff. Best way for teams to communicate. Extend it with plugins for your NMS and so on to get alerts in realtime.

Nagios https://www.nagios.org/. Solid (if a little fiddly) monitoring / alerting solution. Works best if you write your own plugins and use check_by_ssh instead of NRPE.

bcfg2 http://bcfg2.org/. Configuration management that makes sense. Tidy and well defined "model" for how configuration should be managed, sensible defaults and a bunch of useful powerful features.

I could go on but there are some of my all-time favourites.
I agree. Microsoft, Apple, and Google have the ability to modify user behavior without much downside. The rest of us are better off making the user experience as fast, efficient, and simple as possible.

By coincidence, I just put a 301 redirect on my personal site to go from www.xpda.com to xpda.com two days ago. If I could only get ctrl-enter to submit https://domain.com instead of http://www.domain.com in Firefox, I'd be happy. (There was a bug that prevented this last time I checked.)
John Dee painting originally had circle of human skulls, x-ray imaging reveals
I was told this site may enjoy a news aggregation web app I created
War and terrorism are different things.

If I am amassing political power by putting people in fear of say, the United States, I ought to depict the US as a bunch of people to be feared.

So I show the political leaders saying that they want to kill us and I get more power. I show all the repressive state tactics of the Americans on their own people, I get more power. "Look", I say "Even at their sports games, the evil Americans treat their own citizens like they are in a prison!"

Make no mistake, much of this is puppetry in the same way that the cold war, or terrorism, or the reds etc was used as a mechanism to gain political power in the US.

Extreme things like this give an assist to facilitate a foreign orchestration of political attacks on the other (in this case, the US) and help them consolidate power. It's geopolitically and intrapolitically counter-productive --- well that is unless you are trying to control people through the forced-hand of FUD and not their actual consent.

If this is still hard, think of WW2. It was justified historically because of how Germans treated the Jews. Everyone is on board with the presumed necessary large scale destruction of Europe because of the holocaust. It was the internal horrific politics of the Nazis on people they considered foreigners which justify this.

If you want your people on board to what they think is a good, justifiable moral war, depicting your enemy as horrific and anti-freedom is a great effective way to do this. This only has to be true in the minds of the people you need to persuade - not objectively true in any sense.

These tactics enfold hawkism and make a mockery of diplomacy and civility. What kind of world do you want?

One where terrorism campaigns are a smashing success for winning local support or one where they don't actually work so people stop doing them?
Working around ACPI bugs has been a big part of platform support pretty much from the inception of ACPI. It's already been a fact of life that systems ship with firmware that only just barely manages to not completely break with the intended OS (Windows du jour, or OS X for Macs) while Linux needs piles of workarounds. But UEFI significantly expands the exposure surface of bad firmware and the situation truly is moving toward being untenable.

The computer industry really needs to overhaul how system firmware is developed, tested, and deployed. Linux devs and users aren't the only ones feeling the pain; they're just the ones who are both skilled enough to trace the problem back to firmware, and inclined to rant about it publicly.
Dangerous tasks should have the most safety interlocks, but not require manual, needy attention that makes it harder to automate deployments. This edge-case functionality may still be useful for self-destructing / remote bricking sensitive embedded devices.

efidestructivecmd opts... --really-brick-myself-and-catch-fire # fire optional
> Or, you make libraries that conform to the spec and have some "dirty" handling to work around holes left by crappy UEFI implementations.

It's a long-standing tradition to have workarounds in kernel modules for broken hardware.

Hopefully there is a sufficently-well-funded testing lab out there to get a complete list of UEFI implementations that are broken in this way so that the next rev of the uefifs module can properly refuse to do whatever it is that's bricking these dangerously broken motherboards.
China's economic growth simply isn't sustainable, and that's even if it was true growth. There isn't a top economist alive who believes China's self-reported GDP numbers aren't fudged in one way or another (source: http://www.businessinsider.com/economist-reactions-to-chinas...). Either one of those situations (an economic slowdown, China fudging the numbers, or the more likely situation: a combination of both) makes hedging against the Yuan a pretty solid bet.

People and foolish investors think, "Well, China has more than a billion people so it will eventually have a robust and rich economy!" Only, it doesn't work like that (cue the "That's not how this works. That's not how any of this works" lady). Population size is only a tiny facet of a much larger picture. And it's not even a particularly important one, relatively speaking. There are some economists who are now starting to think that having a massive population size may have the opposite effect; it helps you reach a certain point but then your massive size begins to act as an anchor which keeps you from growing further.
Setup would just randomly hang in places, I'm afraid. The ISO booted fine, and I disabled VT-x, so that's not it either...

EDIT: Managed to get it running in the end, these two guides helped:

http://eduardprogramming.blogspot.gr/2014/01/20140120-window...

https://forums.virtualbox.org/viewtopic.php?t=9918
Re: DarkBASIC, its creators, The Game Creators, are now selling yet another BASIC dialect for cross-platform game development:

http://appgamekit.com/
Fair criticism that I might have started to be a dick. Sorry about that.

On the productive side, do you have any suggestions regarding a way to make a whistleblower law that increases the odds of "good whistleblowers" without just saying "we're done enforcing classification"? Our disagreement over whether or not Manning's dump does anything for democracy is actually a great illustration of why it's hard to make such laws/policies.

Criticizing me for not figuring out a better solution isn't suggesting a better solution. I honest to god want to hear one. Hell, I'll throw out something I can at least lie myself into seeming like a good idea:

A leaker, believing public disclosure of classified material to be necessary in order to uphold their oath to the constitution, is not subject to the Espionage Act if they immediately submit themselves to the authority of the Supreme Court where a [unanimous|8|7|6|5] vote decision is required to press charges of [insert relevant non-espionage act crimes here, stealing gov't property, clearance violations, etc], and if so which charges to press.
> These hardware vendors at all levels - storage controllers, chipsets, radios, and more all have absolutely no QA on their code

Hardware vendors do have QA, but it's mainly about ensuring that things work, not about trying to break them in every possible way. Safety and security seems to be notoriously hard for people who have been taught how to make things work, but not how to make them fail.
It's ridiculous and disgusting. Spending all this public money on a private event. Shoving the homeless problem under the rug to put on a pretty face for all the visitors.

Come protest with us. The city needs to invest in lasting solutions, not temporary ones.
https://www.facebook.com/events/955997417814447/
Reminds me of Cantrill, more so his story when they completely bricked a machine of a fellow worker once and then took a close look at the standard[1].

# rm -rf /

Among other things, it will delete the current directory. In the standard it does not say what to delete first, In their implementation it will try to remove the current directory first -> undefined behaviour -> it fails.

The logic behind it: When is it really your goal to delete your entire machine, mostly never, you don't type it out by accident, but shell scripts with unset variables might do it.

And regarding Poettering's response[2] (not trying to start a fight): It's Poettering, what do you expect? You can hate or love systemd, but part of why people hate it is his intellectual arrogance in everything he does.

[1] He tells the story somewhere in here https://www.youtube.com/watch?v=l6XQUciI-Sc (quite entertaining)

[2] https://github.com/systemd/systemd/issues/2402
Delphi have it close. Unfortunally the tool cost a lot:

http://www.embarcadero.com/products/rad-studio/firemonkey
just saying... ;)
who the hell is downvoting this??? have some common sense!