skysight-inc/HackerNews huggingface dataset:
tldr: Let's Encrypt is achieving its original mission: help people use TLS on domains that were previously insecure, and make the internet a safer place.

> In the first quarter of its' operation then, Let's Encrypt has far and away been used more to secure previously-unsecured (or at least untrusted) websites than simply as a cost-savings measure.
I'm just stating facts. No idea why these terrible people decided to join Scala in the first place. Maybe the Haskell community ejected them and they just picked their next community to harass?
Brave browser is insecure by using an outdated version of Chromium
be _very_ careful about copy-pasting an enormous hosts file with one found on the internet, especially one served over http. such a thing is ripe for phishing injection.

it takes one malicious entry in the list of 10k which doesnt loop back to your own machine for me to present you with a legit-looking and secure "capitolone.com" home page.
FBI assumed them to be empty, or wanted the owner to believe that they had assumed them empty...
1. Hitting authoritative servers for every DNS query and refusing to cache results will make the operators of those servers hate you. You will probably find that some sites (or even potentially entire TLDs!) will end up blocking your requests entirely after a while, as this is an incredibly "unfriendly" behavior.

2. Supporting TCP queries is not optional. Some DNS servers will refuse to answer certain types of queries over UDP. In particular, ANY queries are often TCP-only, as they are a potential vector for DNS amplification attacks.
Learn How To Get Your Hands On "INSANE" Training To Discover
How To Make $10,000 Per Month (Step-by-Step)!!!
http://www.clkmg.com/ClickVE/180m8g
I'm not asserting that. Wired implicitly is with the "future of food" headline, and by running the story in a technology magazine. Also, whoever posted it here is implying that it's somehow interesting to hackers or as a startup. (Otherwise it would make more sense to post it to some other community devoted to gourmet dining.)
VPN solutions are a pain in the *ss
The software would only disable those features on that specific device, which would be hard coded. Even if you moved the software to another device, it wouldn't work. Even if you had the source code, and modified to work on a different device or all devices, you wouldn't be able to do it unless Apple signed the modified software as well.
Just for you, I went through my logs for my current irc server and checked how often irc messages occured on the same millisecond. I found on the order of a few thousand such events out of millions of lines total.

In addition, that's just based on my perception; IRC is NOT an ordered protocol, so if multiple people ran this same logger, they'd end up with different stream and different duplicate keys (same thing as events lost I might add).

My log, also, conveniently contains joins, parts, notices, ctcps, and all that other jazz because I used a mature logging library.
LibriVox: free public domain audiobooks
I think most people just don’t care about the personal life of a creator when evaluating its content. Even deplorable people can have good ideas. Why reject the ideas because of the source.
In the mid-90s I had several encounters with the FBI while running an ISP in Oklahoma City. They asked me to write code to pull out specific entries in our massive amount of dialup logs and when I told them they had to pay me, they refused based on budget constraints.

I can well imagine jedberg has had to deal with them just being a systems admin for such large deployments as reddit and paypal.
Maybe we should appoint public defenders for the conveniently dead.
Maybe at some point we should stop doing jobs that don't pay us enough to survive...?
I find it difficult to understand exactly what type of a social contract you are suggesting as 'making sense'.

You seem to be suggesting that people shouldn't have to be 'forced' to be employed (i.e. trade their personal skills for $$) but instead should receive an income from the government for simply existing. They could then do whatever they wanted in their free time.

This clearly doesn't work for everyone unless you are working under the assumption that the 'government' can just print money and everything will just work out.

So you seem to be suggesting that there should be two groups of people. Those who simply live on income given to them no strings attached by the government and another group of people who are doing something bad by being employed and are forced to give up some of their income/wealth to the government to be given to the group of people who opt out of that system.

This seems to be what you are advocating but I must be missing something.

BTW, I'm actually interested in a basic income mechanism as a more efficient way of delivering a social safety net to those who need some assistance but in my mind that presupposes that only a fraction of the people need assistance. I can't see how that works if the basic income is an attempt to provide a minimal viable income for everyone!
User agent string is not an access control mechanism.
Perhaps they could have jobs helping alcoholics and drug addicts. Two birds ...
interesting. please email me at andreas@bugrex.com, as I would like to discuss that option with you.
I've used them a bunch. We host a lot of internal-facing utilities that are low-profile, but occasionally hosting sensitive data. In the past I couldn't convince managers to spend money on certs even if the cost of someone stumbling on these sites could be very high and certs are cheap. Now I don't even have to ask.
+1 for Apex. It's super simple, and keeps other language options open...
Actually, iOS devices do not automatically connect to wifi until they are unlocked for the first time after a reboot - I'm not sure about the cellular networks.
http://www.getlazarus.org/

They just had a release recently actually (which made it to HN front page!).

It's basically cross-platform open-source Delphi (FreePascal, technically). As someone who works in Embarcadero Delphi and C++Builder for a living, it's quite nice. My dream rapid GUI development environment would be something like it but with D.
It'd be easy for anyone to patch memory at runtime to skip over that `if` check on the phone's ID (or at least easier than hacking the phone without the backdoor code).

Once the backdoor/exploit is created and released, there's no securing it to where it will only be used on a single phone.
And now you want me to read the article too?!?

Dang kids!!! (shakes fist in air)

Apologies. I took what you said literally and did not read the article. Many thanks for coming back and explaining my error to me.
It could be leaked but if properly designed it just wouldn't work on other devices.

If you mean that Apple could leak it, that isn't a real risk. There is already a risk that Apple has it's key that it signs updates leak. If that leaks anyone can write the modified software.

Apple should just write the modified software to only work on that specific iphone (by serial number).

The software already exists. You just have to lightly modify the existing software to turn off security features. The problem is that we don't have apple's key.
Well, we're talking about a company that is ~15 years old but the legacy portion of this system is likely less than 10. (I've been there near 5 and it was old when I got there)

I never thought the arguments in favor of using RUBY to compile your C# held a lot of water.

"Visual studio is a slow and clunky resource hog" was one argument, which I don't feel has been true for a long while.

They were mostly preference based decisions. But (IMO) ones that optimized for the wrong result.

Dynamically loading .DLL means that if the DLL is in the bin folder you can use it anywhere in your code without requiring a using statement.

Let me tell you how many hours I've spent hunting down namespace conflicts.

Compiling .cs saves time & conflicts in managing CSPROJ files... But if you decide to leave the framework in 2005 & the tools keep moving forward for 10 years, you eventually either miss out on a lot of really important features, or spend time implementing things that are not your core business or competency.

We wound up getting locked in to dozens of horrifically limiting technologies because of the design choices.

I feel like it was a bit of a case of "programmer hubris" that lead to the shit-show.

Thinking "I personally can do it better" (than the billion dollar company dedicating more resources to this tool than the size of our entire company) can be a pretty bad decision.

I've had a few discussions about the choices and preferences with the original dev.

He still thinks VS is crap, MSBuild doesn't do anything that you can't get from CSC.exe, and docker is just a VM.

It's a difference of opinion.
Without me having to dig into code, what is this about shim to run Golang on Lambda?
I tend to agree with you. It is strange in the sense that the government is free to build such software itself, and subpoena Apple for such knowledge to do so, but instead is compelling Apple to act in a substantial way. For Scalia's reductio ad absurdum, could the govt use All Writs to force a safe maker out on the battlefield in Afghanistan to open a safe? If Apple had a working quantum computer, could they be compelled to use it to aid the govt? What's the limit on All Writs if this instance were upheld?
We fucked up the front door, but we totally won't fuck up the back door.
Yeah, two birds stoned at once.
There are lots of things you could do that aren't menial jobs. Arts, crafts, travel...heck, fishing or bowling -- the list of things that are more rewarding than flipping burgers could go on for quite a long time.
White House Release the President’s Budget in Open Data Format
Account backup and restore for diaspora* – Indiegogo
Funny, I just spent a couple of hours trying to get a game (that my girlfriend loves) working with Wine on Mac OS X. Wineskin proved to be very useful and after playing with some settings the game now works perfectly! Kudos to the Wine contributors :)
Nokogiri's problems are compounded in that a lot of major Ruby gems still use it, so sometimes you can't get around the long build time. A new parser is only one teeny tiny step towards fixing that problem.

These are libraries other businesses now rely upon. Should the maintainers of this library risk the stability of the gem (and thus the reputation of the project) by swapping out such an important dependency? It's incumbent on the designers of the replacement and the community behind it to make such a case.
It took almost a hundred years, and a lot of bloodshed for quality of life to return to where it was prior to the industrial revolution. I'm not particularly keen on seeing that happen in my life.
Only tangentially related, as this is about using AWS Lambda.
What people mean is "it's tough to live an upper-middle class life in SF on six figures".
It means that somebody who is angry about Ubuntu for some reason says that you can't use the word Ubuntu in your programs to test whether they are running on Ubuntu, or Canonical will sue you. There is no real evidence that this is the case.

I expect that tomorrow I will hear that Canonical will sue me if I publicly say Ubuntu.
> it's not actually creating a master key in this case.

The master key is the court order to make it happen, or the NSL that has been made worthwhile after the first existence proof.
In the image of the data being read it looks like the laser only hits the structures from one direction. I think the "orientation" parameter is actually the polarization angle for the ray, so only one dimension.
I think Opaleye will work well without TH.
> The EU simply did not exist in 1975. That's not just a technical comment: it really didn't exist until 1992 with the Maastricht Treaty

Under its current name, yes, but the European Union we know today is really the successor to the European Communities of yesteryear.

> Since 1975 there is a currency (and monetary policy),

Which the UK doesn't participate in, mostly.

> there is a proper and separate legal system,

This isn't new. There has been EU law since before the UK joined. The European Communities Act 1972 specifically provides for the conversion of EU law into UK law, and its supremacy over UK law.

> there a real political process with a parliament and an executive and many other changes.

The European Parliament existed long before the UK joined, and has been named that since 1962. But in fairness, it only started having elections in 1979 (it was previously appointed).

The European Commission, the executive, also existed before the UK joined. It has been a single body since 1967 (and there were three executives before that - their merger is sometimes considered the beginning of the modern EU).

> Trade is now only a part of a much bigger story.

It's always been part of a bigger story. The European Economic Community, after all, was only one of the three European Communities we joined.

> In 1975 there wasn't even a flag - the circle of yellow stars was a symbol used by different pan-national organisation (that still exists) with no relation at all to the EEC.

So? Lots of international organisations have flags. The Commonwealth of Nations has its own flag, and it's never considered a superstate.
>These can be seen as synonymous for certain definitions of "unemployed"

Semantic discussions are interesting among us mere mortals, but if you're proposing that the government start making judgements about who is "employed" in the abstract sense or merely "doing nothing with their life," especially when it comes to allowing or disallowing that person to receive the Basic Income, I'll leave my BI check uncashed. BI should be a way to increase liberty, not create a way for the government to tell people how to live their lives.
> Also, I still do not understand why TOR Browser Bundle allows scripts by default.

The best diet is the one you can actually stick to. The best birth control is the one comfortable enough to use. The best anonymity software must be usable enough for Joe Average.

If the situation is high-stakes, TBB comes with NoScript installed. And you should probably get a burner laptop, do all your web browsing off TAILS, and randomly change your physical location.
Apex is awesome if you just need AWS Lambda. Its not so great if you need integration with API Gateway. Because of AWS's quirky IAM roles and permissions, you really need a tool that links everything up properly during deployment.
Why you shouldn’t use Angular Material today
Caterpillar S60 – Built in Thermal Imaging Powered by FLIR (preview)
"and another group of people who are doing something bad by being employed"

Did you overlook the group of people that has huge capital resources from accruing it from generation to generation and can simply sit on this wealth as the robots it purchases bring in even more wealth? Or do you consider that "being employed"?

And do you think that if someone cannot find employment because there are not enough jobs in the world that they should therefore have a shitty life in their one and only finite existence?
I guess if I only use it for 1 Game on Steam I will be fine. The game doesn't work in a VM.
It's not clear to me at least that the phone identifier they would be hard-coding into the build is actually designed to be a cryptographically secure and unalterable identifier protected by the secure enclave. Well the 5C has no secure enclave anyway so how is this ID secured?

If you can reprogram or electronically intercept and alter the ID as it is read by the firmware, the backdoor build could be run on any phone.

For example if it is tied to the UDID, the UDID = SHA1(serial + ECID + wifiMac + bluetoothMac). Here's an article where Apple says the ECID is alterable through the BPP (Baseband processor) [1] so perhaps exploitable by connecting to a BSE and hacking the BPP via LTE vulnerabilities. The serial number, WiFi and Bluetooth MACs can all be altered as well. So I'm not convinced UDID locked builds cannot be worked around by a motivated adversary.

Heck, finding a SHA1 hash collision by altering only the most easily set MAC addresses is computationally feasible and costs less than $1 million!

[1] - http://www.infoworld.com/article/2631100/mobile-security/app...
Nice. So how do you handle scaling this up? Working a full-time job, how would you expect to give this the man hours it needs, in order to determine if this is a viable business model?
This is the main issue facing my side projects.
One possible consideration is that while the main European human rights provisions are separate from EU legislation and organisations in principle, membership of the EU does require being a signatory to the ECHR under the Maastricht Treaty. Unless there is a very significant element of Cameron's deal that is getting remarkably little coverage so far, there doesn't seem to be any proposal to change this as a result of the recent negotiations.

This creates an interesting political minefield for the UK's current Conservative government, since their stated policy is to abolish the Human Rights Act (the current UK legal foundation for respecting the ECHR) in favour of a British Bill of Rights, yet as of today their stated policy as a government is also to campaign to remain in the EU. These policies seem to be incompatible under Maastricht, not to mention almost polar opposites in the underlying philosophy they represent.
I understand why one would avoid first class modules (I don't use them a lot either). However I fail to see why functors are too complicated, since they are basically just functions. Could you explain ?

Also, according to this[1], There are basically three main contributors, including you, so I fail to see how training would be an issue ...

[1]: https://github.com/libguestfs/libguestfs/graphs/contributors
I tried Let's Encrypt for the first time a week or two ago and was really impressed. This is the way to do it. Well done!
Keep in mind that Let's Encrypt publishes a searchable list of all domains issued.

https://crt.sh/?Identity=%25&iCAID=7395
I'm surprised no one's mentioned this novel: Alive in Necropolis, by Doug Dorst: https://www.goodreads.com/book/show/2439336.Alive_in_Necropo...
You're describing a rootkit.

What could possibly go wrong?

No way that would ever get released into the wild.

Once proven feasible, no way any one else would reverse engineer stuff and make their own.
Until wealthy people get sick of #feelingthebern and take over government with robotic force. I'm not sure you want to make the majority of people useless beggars.
check out payoneer prepaid debit cards. they are widely used by freelancers in south america, asia, eastern europe and the US clients are fine with them, given you get a virtual US bank account. verification is simple. all it takes is a scanned copy of your passport or ID. payoneer could be also used to verify a paypal account
Yep - this is something we plan to do as well, SSLize all the dev servers just because we can and then they better reflect live.
Could be true, but then those spatial dimensions should probably be 2 instead of 3 (laser coming from one direction means you lose that direction).
My father has a beautiful handwriting he is an engineer and he goes out of his way to write letters.

Unfortunately, some people that have received his letters perceive it as if he is poor and doesn't own a computer.

My solution: give him beautiful and expensive letter head paper on which to write.
So that people don't make mistakes.

Beautiful handwriting is a dying art form.

PS: I'm sorry to say I didn't inherit that skill.
and I have other more urgent priorities to try to develop it now.

Right now I just want to touch type with high precision.
The CMOS version helps quite a bit when the 555 is configured for monostable or bistable mode.
I like game music

POP Warrior Within - https://www.youtube.com/watch?v=c1potMUPsJI

Assasin's Creed - https://www.youtube.com/watch?v=e-nrEl3NqX8

In Motion from The Social Network - https://www.youtube.com/watch?v=Yczul_609Gg
I think almost all non-lawyers want to export to Cuba. The problem is that until the US government stops the embargo, US-based companies are often loathe to contract with companies that offer services to Cuba.
So for Shepherd (https://github.com/bustlelabs/shepherd) we copy in an env.js file on deployment to lambda that has all the env variables. Stage Variables are good, but there is a gotcha. If you are using them to establish connections (external service, DB, etc) you only get access to them inside the function body. Might not be the biggest issue for some people but I like to have everything loaded and connections established when the lambda function is loaded by the AWS parent process rather than on actual function execution.
Hence I said "at least" :)
It is not immoral or unethical to visit North Korea. You have to realize that autocratic regimes thrive in isolation. The most effective tactic they have to remain in power is to keep the population ignorant of everything else around them. By visiting the country you may put a small amount of money in the regime's pockets, but you're doing the far nobler duty of bringing the outside world to the North Koreans.

Also spending money in North Korea is likely to put more money in the locals' pockets than in the regime's.
Cremation apparently requires much more energy than burial and has a large carbon footprint. Perhaps it's simply another kind of waste.
تداول الخيارات الثنائية
Redistribute the group of people's wealth and then what?
Are you sure that it will be understandable for donors?
> It seems that you have no idea what you're talking about.

This is a form of calling names, which the HN guidelines ask you not to do: https://news.ycombinator.com/newsguidelines.html.

Your comment would be much better with that sentence taken out.
I think the point being missed here is that those with high incomes or wealth essentially have their lifestyles subsidised by those who are forced to take the basic jobs in order to live. Their labour is cheaper than it would be if they were truly free. Essentially, they have little negotiating power.

I'm advocating for flipping that position and seeing where it leads us.

I don't think that people would suddenly stop working entirely. I think there would be a redistribution from rich to poor. I think that's reasonable.

If you feel that the world would fall apart and people would stop doing anything useful if they weren't coerced, then I would ask the question - why do the wealthy work? They already have a basic income. What proportion of people who could retire permanently at say, age 40, actually do? I think the picture being painted of a bunch of feckless, consuming meatballs, is wildly off base.
Make School (YC W12) Is Hiring for Customer Service
ParkOmator for Apple Watch is saving drivers from parking tickets
> Word is the only one where is no substitute for. Google Docs doesn't have paragraph

Have you tried LibreOffice? In terms of both stability and MSO interoperability has greatly improved over the OpenOffice days. It has every feature that you should expect a word processor to have.
Sure, taking the job wasn't a good decision. But I don't have any compassion for companies who pay full-time employees poorly enough that they are required to choose between getting outside funding (like family or a second job) and going into debt.
There would have to be some probabilistic model balancing the energy costs of continuing to circle vs. the risk x cost of a ticket vs. the possibility that a legit parking spot will open up.
It's complicated. Yes, tourism brings money and legitimacy. However, the citizens of every country are our brothers and sisters, and the more we get to know and understand each other the better.

Consider, "You're not allowed to know and talk to this person." Wait, what?
Your tax dollars at work...
neat, but I was kinda hoping for a hardware hack, or looking at the contents of the eeprom. Maybe I'll have to grab one myself.