skysight-inc/HackerNews huggingface dataset:
Is there an API for certificate transparency logs? I'd love to have a monitoring system that checks if unauthorized certificates are detected for my domains.
Slow dowwwwwnnnn!
It reads like an "ELI5 V8"
They basically hate each other.
> Small parties with friends who are verifiably not loud and obnoxious are good, and so are dinner parties.

Seems reasonable. I'm all about being as committed to my personal life as my work and I make those dating apps WORK for me. I am talking 1-2 dates a week when I'm in search mode.

But I met my current SO after I went climbing with my friend and he invited his housemate along. Within a day I knew I was at least somewhat interested, but there was another man partially in my friend group I was interested in. Within three weeks the other man had done something that killed my interest and the climbing man had consistently impressed me.

So I made a move. Tada, two years later we're living together and happy as clams.

There's something to be said for the pre-filter of friends that I find can't be matched yet with online algorithms.
I am. But I came across this thread and wanted to share my experience and what has been shared with me by women in several focus groups.

I don't have the experience of being a man on Tinder, but I can tell you from my experience that most men don't market themselves well. My approach is for guys to show what makes them unique, via text and pictures.

As for the arguments above, 1) about how girls say they don't like muscle selfies, and then do like them, or 2) about how girls don't like guys with dogs--honestly, its each to their own. I think its better to display things that are reflective of your personality than to show pictures designed to impress girls. So if you and your dog are inseparable, show that--they girls who like cats will find someone else, and you'll find your dog-lover.
Is there 6.0 in the works also somewhere? Given the language's importance in a future universally-connected world, it would not surprise me.
My only complaint is that these feel really unstable at above walking speeds.

Is there a way to make the steering less sensitive at hi speeds or even lock the two sides together?
Or public transit or riding a bike, etc.
You can go back in time and turn on public key pinning.

Alternatively, you could turn it on now and protect yourself from reliance on future discovery of safe time travel.

https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning
It would be nice if people claiming to support web standards (Mozilla) would actually implement HTML5 already (new HTML5 input types).
My point is it's immoral to turn people out of their dwellings unless you've provided them a place to go. It's all well and good to say they should have public housing, but until they do have public housing "slumlords" are providing them a place to live.
Show HN: Nifty.works – Untangle Knowledge – Edit and Share Knowledge Graphs
Robinhood Wants You to Trade for Free
The pilot says he noticed he doesn't have a wing after already landing... so he most likely didn't feel the difference at all!

Perhaps it shows the flaw in design... that no wings are needed at all /joke
Director Brennan: CIA Won't Waterboard Again–Even If Ordered by Future President
Gartner: Global PC shipments fell 9.6% in Q1 2016 – below 2007
Power from wireless signals [video]
It's probably a crap hand rolled key derivation function instead of a proper hash.
Not at all. Malmö is one of my favorite cities in the world... I've visited there every year for the last 3 years, and it's still very Swedish. Granted, I haven't been since the Syrian refugee situation began, so it may have changed somewhat this year.

Worth pointing out there is something of a rivalry between Copenhagen (Denmark) & Malmö (Sweden), which are just 14km apart via bridge. The difference between the cultures is explored in an excellent crime drama called Brön/Brøn (The Bridge)... imagine a Swedish female Sheldon Cooper solving murders with her Danish counterpart. Worth watching if you can ever find it.
This might be a cool gimmick to have at high end luxury hotels eg.) the Conrad, Ritz, four seasons that when your room key RFID is tapped instead of having to manually open your door it opens for you.

I personally see it as a Luxury Gimmick but im sure there are other more essential markets for it

Make sure you get some kind of Patent as the patent is where the value will be
Because if it wasn't written in C (or an even lower level language) cars wouldn't be fast enough and you might as well walk everywhere.
You should resubmit this as Apply HN:
Maybe the omission from the warrant application was a plausible deniability arrangement between the judge and Seattle PD..
IMHO there is also a look of good material in Part II of http://the-cloud-book.com/
The general consensus is that certificate revocation is essentially broken right now. CRL updates can be blocked (some browsers don't even check) and OCSP defaults to soft-fail in most scenarios, so that's not going to do much against a state actor. IIRC some browsers push their own blacklists for high-profile compromises, but I'm not sure how reliable that is - it could probably be blocked as well.

There's a number of mitigations you can put in place right now. Many of them are not widely supported yet, but will eventually prevent most of the damage an attack could cause. Not all of them apply directly to misissuance, but could be relevant in case of a key compromise or something similar:

- Use HPKP. This allows you to pin your domains to a list of public keys. Most deployments pin to the public key of their CA, as well as a backup CA in case the primary is compromised. It's also possible to pin to your site's public key (along with at least one backup key), although that can go seriously wrong if your key is compromised or lost. HPKP is a trust-on-first-use mechanism, so it will only help protect returning visitors.

- Use a CAA DNS record to forbid any CA other than the ones you're using from issuing certificates for your sites. Some CAs have started supporting CAA, but it's not mandatory yet - hopefully, that'll change! This won't protect you in all scenarios, but depending on how the CA is compromised, a CAA record might be a roadblock. (It would have been in Facebook's case!)

- Use the Must-Staple TLS extension in your certificate. Browsers with Must-Staple support (just Firefox for now) won't accept HTTPS connections unless the web server sends a valid OCSP response as well. This won't help with misissued certificates, but is a good mitigation in case your private key is compromised, essentially fixing the revocation system.

- Future versions of Chrome will support the "Expect-CT" header, which will send a report to an URI if a site fails to deliver CT information. This will ensure that an attack is, at the very least, detectable, even if it doesn't help prevent it.
Principles of Mobile App Design
I'd just as easily assume that it is -- progress in physics tends to unify piecemeal complicated theories as different aspects of simpler rules.
“There is a theory which states that if ever anyone discovers exactly what the Universe is for and why it is here, it will instantly disappear and be replaced by something even more bizarre and inexplicable.

There is another theory which states that this has already happened.”

- Douglas Adams
Hacker culture personified. Programming / Hacking is art and with songs and logos for each release it makes this more creative.
That's not terribly different from a rocket in concept, is it?
I'm a freelancer who always winds up as "the ops person", and I'm just waiting for my copy of this book to come from Amazon. I watched a video of a talk about this book---sadly I can't find it on Youtube anymore. A HN comment linked to it last week. It was interesting but I'm hoping the book will have a lot more meat.

A few thoughts:

> Google places a 50% cap on the amount of “ops” work for SREs: Upper bound. Actual amount of ops work is expected to be much lower

I didn't catch the "upper bound" part from the talk. Good to know! I really enjoy being a developer-who-does-ops. I wouldn't want to be a sysadmin, and 50% ops is probably my limit for happiness.

> I don’t really understand how this is an example of circumventing the dev/ops split

I felt the same way from the Youtube talk. I think there must be a lot behind the SRE role that makes it successful or not: culture, policies, who you hire, how you train, etc. Also I feel like the best sysadmins have been encouraging coding and automation for a long time, e.g. Thomas Limoncelli. But I've certainly been on the "dev" side of the dev-vs-sysadmin fight before, and it makes sense to be seeking ways to improve things.

> Error budget. 100% is the wrong reliability target for basically everything

I think I saw just this month that Google Apps uptime is 99.95%? Some major Google service. I remember in the early 2000s everyone cared about "5 9s", and I feel like for most of us that is just not worth the effort.

> Chubby was so reliable that teams were incorrectly assuming that it would never be down

This reminds me of Nygard's point in Release It! that your theoretical best SLA is the product of your dependencies' SLAs, e.g. 0.999 * 0.999 = 0.998. But in the world of microservices, this logic seems likely to make you underestimate your uptime.

Also I think Feynman's remarks about the Challenger accident apply here: if you are building a new product with, say, 5 microservices, you don't know the reliability of any of them yet. It's dubious to estimate low-frequency events based on "it's hasn't happened yet."

Thanks for sharing your notes. I'm envious you've already got a copy. :-)
I mostly lurk here but I see far more comments like this, essentially baiting arguments about touchy subjects like race, gender, sexuality, and the like. I suppose it's more me inferring that it's from a "cis, white male" perspective more than you imply it by quoting Africa like it's not a real place...
Have you looked into the MGTOW community? You sound just like them. They are smart guys, but they get a lot of shit because they push back against those exact social expectations that you talk about.
There are leaders and followers. There are also people who just do their own thing and others that fluctuate from leading to following based on circumstance.

The "alpha"/"beta" wolf-pack dynamics were debunked a while ago. Packs are typically made up of parents (previously referred to as "alphas") and children (previously referred to as "betas").

Status is definitely important, but the alpha/beta/omega/gamma/delta/greek-anthropomorphism thing is a load of crap.
Seconded. I live in a housing cooperative in Germany (the biggest one in the state actually), and as far as I'm informed, the main reason for their low rents is that they fully own their buildings, whereas most private property owners need to pay off their property credits, and corporate property owners additionally need to generate profit for their shareholders.

This is not to say that the housing cooperative does not generate a modest profit, which is then used to build new affordable housing, or to modernize existing properties for modern energy efficiency laws.
And then there are jurisdictions that fund themselves primarily from offering incorporation services, instead of levying an income tax at all.

The state needs to make better rules, obviously passive taxation has pitiful compliance outcomes.
It annoys me that the questionnaire equates productivity with lots of lines of code.

Productivity is providing value. Functionality is an asset. Code is a liability.
Now figure this one out: https://www.youtube.com/watch?v=KEDrMriKsFM#t=30 (volume warning)

Best theory so far it is it just a quadcopter with some greenscreen video photoshopping

But if it is somehow real, wow. Imagine THOSE all over your city.

That is the same guy who make the water based one that attached to jetskis

I just cannot fathom any portable powersource that would produce that much energy for that much weight over 10 minutes. Even large scale RC engines have weight limits below a fully grown man.
I'm guessing the ransomware uses Salsa10 because it's fast?

According to https://www.cryptopp.com/benchmarks.html, Salta20 is 4x faster than AES - and if I understand it, Salsa10 is half the iterations.
He was +1 of their 5th friend.
No, but it might be a whole lot of them.
I think you're making a lot of assumptions. Traditionally? Tinder hasn't been around that long. I think of Tinder as a marketplace, just like a singles bar--some people are there to hook up and some people are there for a long term relationship.

I'll take the criticism on labeling females who are looking for long term relationships as "high quality." I'm not judging anyone's motives. But I will stand by the sentiment that people are sorting for matches that meet their goals, and many women have #relationshipgoals.

The women who complain about guys doing things in their photos don't have to match with those guys. They can match with non-dancers, non-surfers.
should be back up in next 10 mins!

Had overwhelming response today, sorry
Interesting but not surprising website. I visited Stockholm for the first time recently and I was impressed with the usage of tech to increase everyday efficiencies. Things like: app for the rail station tickets/yellow cabs/buses, electric/hybrid vehicles commonplace, free wifi in abundance...
You may be weird, but not for this reason. :)

Juno brings back lots of memories for me as well. I remember having a very hard time convincing everyone it was 'free'.
And a lifting body, of course.
As an engineer, my biggest disappointment is this:

I rarely get to work on any algorithms, my work (for 10 years now) mostly involves wiring different things together and controlling problem/code complexity.

Why are algorithms popular in interviews, again?
steady improvement over 50 years is nothing to be scoffed at

But there hasn't been a steady improvement over 50 years. Here's what the OECD says [1]: "According to the OECD income distribution database, income inequality among total population in the United States has steady increased from 1974 to 2010."

And here's what the US Census Bureau says about poverty in the United States [2]: "In the late 1950s, the poverty rate was approximately 22 percent, with just shy of 40 million Americans living in poverty. The rate declined steadily, reaching a low of 11.1 percent in 1973 and rising to a high of nearly 15 percent three times – in 1983, 1993 and 2011. However, the 46.2 million Americans in poverty in 2011 is the most ever recorded."

[1] http://www.oecd.org/els/soc/OECDIncomeDistributionDataReview...

[2] https://www.debt.org/faqs/americans-in-debt/poverty-united-s...
They kinda do. Over time, the skills of a dev and SRE diverge a bit but at the core they are the same. I am a dev at Google but went through a program called Mission Control[1]. (It was a great learning experience and helped me do my job as a dev much better.)

As others have said, there is a pretty intensive training that you go through and obviously you learn a lot when you are handling things...

[1] http://googleresearch.blogspot.com/2012/07/site-reliability-...
What updates can we expect to see in Keras of the next year?
Silliness – Fiddler Blocks Malware
Ben's talk from SREcon 2014 is pretty good at giving the underlying philosophy behind SRE:

https://www.usenix.org/conference/srecon14/technical-session...
Sorry for long reply. No, I prefer Rust, but right now it's impossible to use Rust on frontend. I also know there are people who love Python, Scala, Nim, D, Ocaml and I don't think they are wrong - it's just languages with different flavours and there are people with other preferences, so it's awesome to have alternatives. They are not better or worse than me if they use other languages, I'm more than sure about it. But when we talk about PHP, Go, Perl - yes, I think people could make better choice.
I'm all for privacy technologies like Tor, but this is one of the risks you assume when you operate an exit node. The alternative would be to give all Tor exit node operators not only legal immunity, but immunity from investigation, for illegal activities originating from any IP address associated with them. Even if the judge and the police were aware of the exit node, it wouldn't have changed the way this was investigated.
I think the main purpose of the time to BUG list is demonstrating the value in file system fuzzing. That you can have things like NTFS, HFS+, XFS that have been around a long time, lots of money spent on their development, subject to massive piles of real world tests and yet in just a couple hours hit a BUG, says something good about the technique. Not bad about the filesystem.

Even in the Btrfs case, it may just be a function of the code having lots of awareness of where bodies are buried, so it hits BUG rather than continuing in a bad way and blowing up later. But as yet not enough testing to figure out all the path ways for hitting those bugs. It may explain the edge cases that still pop up with Btrfs, where I go "umm yeah I use this every day and never experience anything like that" but another user suddenly hits something that's a "wow" moment.
Any profile tips? Any discovered must-includes or avoid-mentioning-at-all-costs? Just downloaded again after reading this thread and curious as to what is working for some of you..
Not coincidentally co-written by a former Google SRE
I was feeling the exact same way about a year ago. The thing is, once you pick up a programming language, all of your other hard earned Ops skills are still very relevant and will become much more valuable.

Without learning some programming you will go the way of the dinosaur, but by learning a bit you can become significantly more effective than you were before.
See https://news.ycombinator.com/item?id=11474253.
From this Swede's point of view, IKEA is primarily a global distributor of fresh Lingonberry jam. (I hear they also sell furniture.)

(Seriously, I don't get why lingonberries don't get a wider, eh, distribution. It's brilliant in so many things. My favorite is just tossing lingonberry jam into cream-based sauces.)
I think a lot of people talk past each other in these discussions. One problem is that a lot of diet fads promise magic solutions, and then people get tired of magic and revert back to CICO only. Any discussion that does not start with CICO and clearly show which side of the CICO ledger is influenced, and by what mechanism is doomed.

I think maybe if we discussed CI and CO separately it would help:

CI:

Calories in are influenced by many things: eating habits, Macro content of food, access to good food, stress eating, satiety signals from blood sugar, leptin, ghrelin, etc.

CO:

Calories out are influenced by basal metabolic rate, exercise, enviromental temperature, fat storage (calories that do not get used up), etc.

I would love to see a series of articles that clearly articulates the two main headings, and then goes into each item underneath, in order of impact on health overall and weight specifically
So why bother discussing any theory that cannot outright be disproven, is what you're saying? Your comment could have been the reaction to any number of major scientific realizations throughout history. I'm not saying we are living in a simulation, but why rage against any discussion of it?
Hilary Putnam says that we aren't.

Basically, if we really were brains in vats, then "we are brains in vats" couldn't ever be true, because the referents of our discourse wouldn't have any causal connection to real brains and real vats, and so it wouldn't even be possible, if one were a brain in a vat, to think the thought or propound the proposition "I am a brain in a vat", and so, it's necessarily false that we are brains in vats.

ieas.unideb.hu/admin/file_2908.pdf
Except that the BC folks would never accept such responsibility, and the temp agencies require employers to waive the right to claim (limiting the damages to reputation).

So maybe that is the logic, but it's specious logic.
I use Fossil
http://fossil-scm.org/index.html/doc/trunk/www/index.wiki
I use the source control portion of it to check in documents and random code samples. I use the wiki portion for notes on things such as server configuration and general info that is not code.
Pedro Domingos ML course on Coursera is also very good. Regarding neural nets, there's no better intro than online book by Michael Nielsen: http://neuralnetworksanddeeplearning.com/

The best way to learn is to avoid any libraries, and try to code the fundamental algorithms (SVM, KNN, MLP, etc) from scratch. The language is not important, so I'd stick with Java if that's what you know best.
You're quite right. I'm an ex-Googler and SRE was the last thing I did at Google. As a first-and-foremost programmer I was bored out of my wits and frustrated by the fact that while I was writing repetitive monitoring rules actual development was happening somewhere else and I had little impact on the design of the system. Granted, a lot of folks over in SRE loved it but I would venture to say that most of them were much closer to being a sysadmin than programmer. Folks like myself tended to 1) move to SWE, 2) quit and 3) some endured and became managers over time.
Frankly, school is going to be such a small drop in the bucket of what your career will look like, that it shouldn't much matter whether you go or not. Your success will be determined by a continued habit of learning forever thereafter. This overemphasis on the importance of choices made in school devalues that.
Can you write up how you fixed the broken call stacks? I've used Brendan's tools (with java-perf-map, also an awesome tool) to generate flame graphs for Scala code and had no idea I could only see 127 frames.
I mentioned it above, but have you looked into the MGTOW community? They feel the same way.
Not sure speed is relevant here. Those inside the simulation would not notice the difference, would they?
> “You’re not going to get proof that we’re not in a simulation, because any evidence that we get could be simulated,” Chalmers said.

This is where the argument starts to sound like creationist claims that god put the bones of dinosaurs on Earth just to test our faith.
I disagree. Theres plenty of alternative services. If all Uber drivers left for lyft and Juno, then Uber would drastically be hurt in terms of drivers available, and users would have to migrate. As long as there is competition, theres no need for regulation in this market.
> All drivers there are licensed by the NYC Taxi and Limousine Commission (TLC), as required by law. Their vehicles must also be licensed with the TLC, and they have to carry commercial insurance.

This is going to negatively impact driver supply (making wait times higher, especially in the outer boroughs) and increase the cost of the service vs Uber.

> Juno’s drivers will provide better service because they’re happier, Marco said.

The only 'service' I want from a taxi driver is to show up, follow the GPS, and not double-swipe my credit card or claim the machine isn't working. Uber already has basically perfect service.

Unless they have some secret innovation I'm not seeing this is going to be a massive failure.