skysight-inc/HackerNews huggingface dataset:
The relevant thing here is that the main weakness in MD5 requires both the "good" and "evil" versions of the message (or file) to be produced by the same party. It doesn't allow J. Random Attacker to swoop in and alter things that already exist. However, it would allow a hypothetical Evil Maintainer to pre-cook "good" and "evil" versions and swap between them without changing the MD5.
If the US changed the law so it could collect that tax money, couldn't you equally say that it's the US's short term greed that hurts everyone in the long run? Afterall, it would hurt Google's profits and perhaps how much they can invest in useful new technologies. How do you decided that it's only greedy for Google to get money but not the government? What's the government going to do with it? Fight more wars? House more prison inmates? Pay more social welfare? Are you sure it's going to do something better with the money than Google is?
> Hope the judge recognizes the apparent level of incompetence demonstrated by this case.

I don't think competence is particularly relevant to the laws in this case....
Yes. I use list view most of the time because it hides images and lets me see thousands of items as quickly as possible with a minimum of scrolling. I use feedly, but still miss Reader, which had some features that feedly is missing.
Just curious what you appreciate about C++ over C#.
Certainly agree that leasing won't be cheaper in the long run in most cases. But in the short run it will get you a lower monthly payment, and that's all many care about.

Also agree that leasing helps fix the cost. Besides reliability issues, you win if depreciation is higher then was estimated up front (the one time I leased, the car ended up worth several thousand less then the final balloon payment so I simply turned it back in).
Build upon an existing or your very own idea but don't make it a one-off. explore at least a dozen different ways to make it better.

Artist Winslow Homer would do sketch after sketch, study after study, before he did his final "one-off" masterpiece. Keep improving the idea. It is astonishing what serendipity that can occur.

Here is a visual example: Andy Warhol's skulls:

https://www.google.com/search?q=warhol+skull+collection&tbm=...
Move over, git. Here comes Git gay
Been there, done that. (As a student) I wanted to more experience so I did what you're doing for a while.

Here are some pieces of advice I can give you:

- Shared hosting is always a good option (cheap, auto-updates, no hassle, and everything via a web-panel (typically c-panel)

- Make sure all the hosting and domain names are always in their name. (You don't want to be bothered a year later to renew something)

- WordPress is the way to go.

- Make sure you have an exit strategy for every project (When do you get off) most NGOs will try to get you working as long as possible as IT support, it can take a lot of your time.

To take you up on your offer, just one question : Do they have to be US based or anywhere in the world ?
I agree with you.
The addition of the meta tag actually allows you to see the traffic is coming from HN, even if you are a HTTP site, which was not the case when the story was written.
HN also specify only to send the "origin".
This could be considered a small privacy optimization though is likely of little impact.
Dunno if I want to be called "famous". Tried my best to do what i could for the Sun / hardware rescue communities, but I'm still a relative nobody in the grand scheme of things.

What's really weird is being called a "peer" by people who I looked up to when learning and just getting started. Massive case of impostor syndrome...

There are a ton of people out there, who are better talented and have contributed more to UNIX / Linux, open source, and the hobbyist/maker community in general that deserve recognition and fame.

I'm just a fat old fart sysadmin who's had a good run and was lucky to be able to enjoy most of it. The best I can hope for is to be thought well of by others.
3D selfies, you say?

https://sketchfab.com/models?q=selfie&sort_by=-likeCount
No, not when it comes to subdomains and domain-level cookies.

https://shrikantadhikarla.wordpress.com/2013/02/18/anatomy-o...
This is REALLY cool stuff. There's currently a gap between CSS and JS that currently forces us to abuse HTML as an intermediary to get JS and CSS to communicate with each other.

I've been doing some experiments with closing the gap between JS and CSS from the opposite perspective of Descartes: writing JS from within CSS using a CSS-like syntax..

My take is that Descartes is the inversion of my plugin - Descartes lets you easily write CSS from JS and JS-style syntax.

Either way - being able write your responsive styles all in one place (whether entirely in JS, or entirely in CSS) is a lot better than cobbling together responsive support using a bunch of custom CSS + JS carefully duct-taped together.

I believe this plugin will help build modular (atomic design) elements that can be re-used on different templates/sites without much re-tooling once they're built the first time.
Use CRM and Helpdesk bundle and build a better customer relationship
Since most workers in San Francisco don't work in tech, that's not true. At least not if you want to live in San Francisco. The choice is a tent or a 2 hour commute, which may cost to much given service worker's pay.

The only solution is way more housing.
This is the WSJ's email parser: https://github.com/wsjdata/clinton-email-cruncher
Writing styles in javascript is a very natural consequence of web applications becoming more and more dynamic. It is unfortunate that they are not more mainstream.

We have pushed CSS pre-processors to the extent that they now have variables, loops, modules, interpolation, conditions etc. which have always been present in javascript.

It makes a lot more sense to just fully embrace all these features from standard javascript instead of building entire ecosystems of css pre-processors with superficial syntactical differences.
I would be curious to hear experiences with Vultr.
How about the security issue with WebRTC where the browser leaks the IP address? It's part of the way WebRTC works so I can't see how that can be fixed. It's both a security issue and a key enabling feature.

Update:

It looks like Google Chrome (desktop) team has published a plugin that alleviates the problem but can cause performance degradations with apps that use WebRTC. They seem to suggest that a decent fix won't be possible until UDP proxies are in wide use and Chrome adds support for that.
If Apple did write the firmware that the FBI wants and then signed it, would changing the device UUID hard coded into the firmware not invalidate the signature? Is the concern that there are somehow other signing keys in the chain of trust that exist outside of Apple that would make it a general exploit or is the concern that they would be a much lower threshold for getting this sort of thing? Apple might have a point if it is the latter, but if it is the former, the security of the iPhone is already compromised.
This proposal (run an auction for the H1-B slots) would likely make it even harder for startups to offer H1-B visas compared to say Microsoft.

For arguments sake, lets consider an average potential hire. Lots of startups are willing to pay ballpark $130k in San Francisco right now (low end $70k, upper end $180k). Since the company most likely don't have funding lasting more than 18 months, this means they're budgeting just about $200k plus taxes and benefits for this person over that duration.

You might be willing to pay 10, 20 or even 30% as a fee for the right candidate (just like headhunter fees) but that translates into either that many fewer employees or that much less runway. Taking 18 months of capital and turning it into 12 is a quick way to end up dead. By contrast, large companies are paying much more in total compensation and can easily afford to spread this cost over multiple years (assuming the candidate doesn't nearly immediately utilize his ability to transfer his visa).

If anything this proposal seems like it would lend itself towards ensuring only large companies apply for H1-Bs and that smaller ones just have to hope people will transfer, despite not being able to promise that they'll be in business long enough to sponsor a green card.
I've been very happy with Bottle. http://bottlepy.org Pretty similar, but lighter.
Safari is so far behind every other browser, it's not even funny.
Maybe we should blame the medium rather than the messenger?
Ah yes, the "subversion" method of using git.

...

I also do this. :|
Introducing SMS Recovery to Secure Your Account
Ah, ok...so modify the statement to "Every non-nuclear state that has attempted to gain nuclear capabilities has declared that they are doing so to protect against aggression by <fill-in-nuclear-state-here>."

The bottom line is that the behavior of states with nuclear weapons has, thus far, been categorically counter to the goal of reducing the proliferation of nuclear states.
Let's worry about that when it happens. My point is that it's premature to talk about introducing a UBI when there's so many needs out there.

Also, caring for children/elderly is not something that is necessarily desirable to automate...
A place where you can sell photographs clicked by you and earn money
Yelp CEO and his HR can bla-blah-blah all they want but reality is this: the company and its executives are making millions while some of their lowest paid coworkers are literally starving. This is f..d up.

I think the issue that Talia Jane is raising here is that the company (Yelp) can easily fix this problem for their own low pay employees by raising wages or subsidizing housing but instead the company decides to turn a blind eye on this issue.

What will it cost Yelp to raise standard of living for their lowest paid co-workers? a few million a year perhaps?
Will it really make a huge difference in profits for the company in the long run?

Is it all about making money for the corporations in America today? Is this the world we want our kids to live in?
MyBrowserPage.com – Bookmarks
Linux Mint site hacked, ISO backdoored and forum dumped
Wait, I'm really curious about your plugin. Do you have a public repo somewhere? Writing JS in CSS, on the face of it, sounds, well, kinda perverse. I'm picturing something where you apply "float": "left" to a JS function, and every line where that function is called is moved to the top of its containing block.

I'm joking. I actually think the idea of incorporating a simple subset of JS functionality into CSS could be super powerful. There are lots of times when you want a little JS to help with styling, or maybe even basic data fetching and binding. It would be a lot simpler to just keep it in your CSS files. I'd love to hear more about what you're working on.
100% agreed. And this goes back to the argument between an algorithmic feed and a simple time based feed.

I tweet some things that get 0 engagement, but maybe if they were shown to my close friends when they checked Twitter 5 hours later they would get engagement, but alas I am reminded that content creation is futile unless I am a Twitter celebrity.
I use Webpack's Hot Module Replacement [0] along with Redux [1] and React. It's extremely useful for iterating on user interfaces. You just save and your styles and markup update without having to reload.

Furthermore, Redux has a devtools library [2] (you can view a gif of it in action in the repo) that lets you do time-travel for debugging purposes. I don't use it much, but it can be occasionally useful.

[0] http://webpack.github.io/docs/hot-module-replacement-with-we...

[1] http://redux.js.org/

[2] https://github.com/gaearon/redux-devtools
Is there documentation I'm missing? Based just on the readme I don't think I understand how this works. For instance, the section on the Request object omits HTTP headers, then the Async section shows sending response headers manually. But they're sent asynchronously for some reason? There's a .Hash method that apparently does SHA-1 hashing, though I don't know why. At the point I stopped reading because I didn't understand what the examples were telling me.

I don't mean to be negative or try to poke holes in your hard work. I'd just like to know how to use it. "Insanely fast, beautiful syntax, type safe" are super alluring features! But let me know how I can build a real application with it.
Furthermore, their free certificates cannot be used for commercial purposes.
Tax avoidance is legal.
Sorry, that page makes no sense to me. Beside not addressing my original question at all (which was about accessing non-https content from an https context):

1) I don't understand how an attacker would manage to "register" a sub-domain within a domain I control. AFAIK this would require a DNS MITM.

2) How can the attacker's HTTP server present a TLS certificate? Presumably the author missed a step in there; a redirect?

3) Why is an intermediate HTTP request even necessary in this scenario? If a browser is pointed at the false sub-domain via https and the user clicks through the TLS cert, won't it give up the domain cookie regardless?

4) Given #3, the only benefit I see includeSubdomains providing is that it changes the TLS cert warning into an error. Is this a correct analysis?

A much more realistic scenario would be that an attacker MITMs an existing HTTP-only subdomain and upgrades it to HTTPS with a false cert. Or that an attacker MITMs DNS to serve a false HTTPS subdomain. (I think the author conflated these two scenarios.) In these cases I see the safety includeSubdomains would provide, albeit one that DNSSEC would also provide.
IIUC they didn't have re-runs, a bit sad about that too.
The UoW course did emphasize the Module system quite a bit.

Random question, how hard would it be to port OCaml libraries to [s]ml ?
Apple products are assembled in China. Manufacturing comes from all over the world.
Yea, this project fixes all the problems nobody ever has.

"See the value of some binary logic in real time"

"You can't make syntax errors"

All of this and more, and it works on a small subset of a language that nobody uses!

These are the sorts of things that would be really interesting to a student in their first programming class. I can't imagine anyone with any experience needing or even wanting this.
Erlang supports hot module loading as an in-the-field deployment concern. This is more like development tool. Similar mechanisms with completely different experiences.
And it also allows you to directly access the camera from webpages and take photos from a JS API vs having to use a camera app and upload.
So, it looks like at the moment Descartes is basically SASS or LESS, but in JavaScript. My reaction to that is, 'uh, okay, sure, why not.'

However, where Descartes starts to get really interesting, is if it began to provide a substantially higher abstraction layer over CSS. I'm probably not the only person who finds CSS pretty annoying. I would love to be able to do layout styling at a level closer to the way that I think about page design. That's not necessarily an easy thing to implement, but a little bit of functionality in that direction would go a long way.
> F# lacks higher kinds and implicit parameters, meaning you can't really use the type class pattern. This hurt our productivity.

Genuinely curious, but what are you doing that the lack of type classes hurts productivity so much?
> our Betta gets as excited as a puppy every morning when we show up to feed him

I don't think that really supports the theory of fish having feelings. I'm not sure it requires feelings to respond to repeated stimuli in a way to generates a more advantageous outcome. That's not to say fish don't have feelings, just that I'm not sure this is necessarily good evidence.

> Each one we have had over the years has had a distinct personality

That seems more likely to be indicative of feelings/consciousness in my eyes. Personality, specifically different personalities in the same type of organism, would indicate to me complex learned behavior (what else is personality but that?).
Apple isn't known for welcoming competition. How many patent suits in how many countries has Apple brought?
Washington Should Prepare for Saudi Arabia's Collapse
Bislaverobpeters – Profile page – XVIDEOS.COM
Woah... Yeah, artifacts like these are critically vulnerable.. Please keep this up.
Killer Business use of Wine: when you have a linux farm, and you really need that one Windows accounting/enterprise/billing app, and you don't want to manage/license a Windows Server.
It's trying to get their twitter profile (which contains a link to their site) ranked by using links from HN posts which contains links to other sites even though the context of the links differ It would have been smarter to repost links and RSS feeds of medical blogs...
Exponent – React Native IDE
I don't know too much about vehicle side of things but my understanding is the following:

MISRA is not on the same level as DO-178. DO-178 covers a lot of ground, from testing, documentation, requirements, that sort of thing, and it's made by a government agency which enforces it during certification, where every single hardware and software component in the aircraft related to flight operations is certified individually. So you will actually have engineers from the FAA sit down and look at code coverage, how requirements are written, how they map to tests, see if the tests cover a lot of cases in your requirements, see if the code implements the requirements, that sort of thing.

MISRA on the other hand are treated like guidelines that car manufacturers generally want you to meet when you deliver them a vehicle component.

There is the Federal Motor Vehicle Safety Standards you have to meet on a vehicle as a whole, but I do not know if they have to prove that they meet the following during a formal certification process.
http://www.nhtsa.gov/cars/rules/import/FMVSS/

So as far as I know, there's big approval process at the end for vehicles, while there's a formal certification process for all components in an aircraft, as well as a big approval process at the end for aircraft.

Someone please correct and fill in the blanks for the vehicle side of things.
I came here to talk about this. I deal with data management for a bunch of physics and astronomy experiments it's quite typical to have many millions of files for any given experiment (say, 1PB of storage for a medium size experiment, 10 million 100MB files). CERN's experiments would easily have billions of files, so I was thinking 64 bits would be a minimal truncation, but 96 is probably more reasonable.
Your rant is the very definition of bigotry. People tend to be more nuanced than your B/W view of them.
As far as I gather, the canonical reference on Sakura trees is: http://keccak.noekeon.org/sakura.html (?).
> As a recovering C# programmer

As someone who knows C# and C++ and has worked with both professionally; C# is a much better designed language than ANY version of C++. C/C++ isn't going anywhere, but you could do much worse than to have developed in C#.

I think these types of remarks are reminiscent of the 1980-1990s where people declared one language or framework more "1337" than another, however the ironic thing is that they often poked fun at C++ for being less "serious" than ASM or C.

I stopped caring about which language made me feel more hackery a long time ago, because it became apparent that I didn't envy people who could write better assembler than me, it is people who are more productive and produce really cool stuff.

Right now I'd happily give up everything I knew about C++ to become a AngularJS expert because that's where the money is, and that's somewhere I could be extremely productive. C++ is still in the royal family for high performance, but who is recruiting for that? Where is the exciting C++ development going on? When was the last time you ran across a C++ project that made you envious?

PS - In answer to your question: I always work in the version of C++ that the codebase is written in, or the latest for new projects. C++ has received too many incredible improvements to ignore later versions of the language.
stylus? LESS and SASS are definitely limited, but Stylus is what I've been using and it's been amazing. http://stylus-lang.com/

I'm not sure why you would want to go all the way and create fully dynamic styles. I think that's just the wrong way to think about styles... If we take a design software like InDesign, you have a style palette, in which you create styles, for example 'red fill; black stroke 2pt; drop-shadow black 2pt fade'. You can then asign this style to almost anything, be it text, or a shape, or something else. CSS is supposed to work like this. You create your classes in CSS that are styles in a style palette of sorts, and then you assign these classes to your HTML structure with your JS Views (if you really need dynamic styles). I really see no point in Descartes other than to avoid CSS alltogether for whatever reason.
How can one support the theory of people having feelings, except for assuming that people feel more or less what you feel yourself? Unless you can experience others' feelings yourself somehow, you can always call everyone else's behavior "responses to repeated stimuli in a way that generates a more advantageous outcome." Personality is no different (so different fish, or people, have a different strategy of generating advantageous outcomes - learned or innate, it indicates some degree of complexity, but not "feelings.")

The whole subject of "feelings" is kinda thorny as long as you either subscribe to a worldview where there's no real difference between inanimate and living objects (it's all just a bunch of atoms, it just so happens that some bunches move and some are stationary), or, alternatively, if you do believe in such a difference but have nothing but a gut feeling to rely on when defining the limit between "machines" and "feeling beings." Which means it's a thorny issue for, well, most of us.
Ah, I didn't think of non-HTTPS pages as a benefit. I think for HN sending the whole URL would be the better choice, but they probably erred on the side of caution.
Ask HN: What Is Google's Container Runtime?
We know Google internally uses Kubernetes, but what is the container runtime ? Is it Docker ? Perhaps not, LXC ? Or runc (which is again Docker)? Or a Homebrew solution ? Is there some documentation on this somewhere please ?

Thanks !
https://news.ycombinator.com/item?id=11142986
Well it is true that CSS preprocessers are getting all these JavaScript like features they are still compiled down to plain old CSS. The fact that users can disable js and ruin most if not all of your styles is just a little off putting to me. Seems like a cool idea though and I agree with most your points but I think pre processers fill a need for people who want just normal CSS on their sites.
My company is in Linz, Austria. I'm looking for an OS X developer, or for a web developer with experience in Ruby on Rails: https://eggerapps.at/jobs.html
It's just making me sick :(
Raffaello D'Andrea of ETH Zurich and Verity Studios Demos New Generation of UAVs
Sorry for the delay. It's turned out that parsing is hard, especially in the absence of a formal grammar for configuration file formats!

If you don't need the certs automatically installed, nginx users are generally doing well with the webroot plugin (which automatically creates files to perform the ACME challenge, regardless of what webserver is serving those files). This will also work for renewal, as long as you're able to do the initial configuration of your nginx to work with the certs you get.
while I agree with the importance of TLS and SSL for everyone , I do recommend buying a SSL straightup (about 8$ a year) and not going through the commandline setup unless you are comfortable. Most hosting services (especially the cpanel variety) just let you upload a certificate that you have bought.

It is probably more important that you do TLS/SSL than not do it because you are uncomfortable with Letsencrypt setup

here's the one I buy - https://www.ssls.com/ssl-certificates/geotrust-rapidssl