skysight-inc/HackerNews huggingface dataset:
It's really easy to get an A+ on SSL labs as long as you follow standard modern recommended settings for your certificates and web server (nginx generally being the easiest to set correctly), having said that I see my own crappy blog has dropped from an A+ to an A in the last couple of weeks: https://www.ssllabs.com/ssltest/analyze.html?d=smcleod.net&s...

I highly recommend regularly reading Mozilla's various posts on recommended security settings, especially the TLS best practises for web servers and OpenSSH.

- https://wiki.mozilla.org/Security/Server_Side_TLS

- https://mozilla.github.io/server-side-tls/ssl-config-generat...

- https://wiki.mozilla.org/Security/Guidelines/OpenSSH
Hotmail is the worst though. I hate the engineers at Microsoft who designed their email filter.
Memories of unethical actions become obfuscated over time
Ask HN: Disabling paste in password boxes - why is it practiced?
I have the practice of disabling paste functionality into password fields. I don't understand why it is necessary - on the contrary - it discourages use of password managers - especially on mobile devices.

The justification by the app builders is that it "improves security". I dont buy it.

Is there a good reason to disable this functionality? What does it improve since automated hacking programs can always by pass it?
My sympathies for the guy, and I'm not blaming the victim, but there is a basic safety rule that every aspiring hacker needs to understand, right now, right up there with 'fasten your seatbelt' and 'don't feed the bears':

DON'T DISCLOSE SECURITY FLAWS TO UNWILLING OWNERS.

If you stumble across a security flaw in a proprietary system, check whether they have a bug bounty. If so, great. If not, keep your mouth shut and get on with your life. (Unless, of course, you've decided to sell it on the black market; if you're okay with the ethics of that, so be it. But my advice, that needs to become the standard advice to everyone, is to just keep your mouth shut.)

Don't bite the hand that feeds you - and don't feed the mouth that's going to bite you.
Fire-damaged Brazilian tortoise receives new 3D shell
I'm sure it's not a popular view here, but why would you want to? I moved mail, etc. to Google; gmail is by far the nicest mail client I've ever used. I use it for my business and private e-mails, I move other businesses to Google because it's just so convenient. Why would you want to do all that yourself for €4 a month? I really don't think anyone at Google would want to read my e-mails but even if someone would, do I really care? I'm all for a bit of privacy, but I've seen no evidence of data abuse at these large mail providers.
On the other hand he only compares nominal type systems (C++, Java). Which I found rather cumbersome too. Structural type systems (Go, TypeScript) felt a bit like dynamically typed languages with cheap safety features. Also there are algebraic type systems, which aren't mentioned. Elm seems to eliminate all runtime errors etc.
The world banking system runs on windows? Of all things in that article this was most surprising to me.
Self-hosting is dead unless you are massive business.
Trace the funds to where? an Internet cafe in an ex-Soviet nation where they were split up into smaller amounts to be put in cold storage? then what, when those smaller amounts start being used to buy gold 5 years later? Isn't the whole point of Bitcoin that any transfer is irreversible, and it's hard for authorities to interfere and regulate, unlike say USD?
I can recommend iredmail. It's been around for a long time and supports several major OS. There is also paid support should you need it.

http://iredmail.com/
it could also unleash a lot of currently stupidly-employed people to do what they'd actually excel at.
> What would be nice is if Haskell would allow any name collision so long as it could use the type system to disambiguate the function.

That would need very careful design to work well with type inference, I suppose?
It's not for the money, I can think of more effective ways I can spend my time to save money. My reason is that I don't like the feeling of having these very personal conversations being stored on the harddisks of google. I might trust google right now with my email but when I no longer do they will still have those files and there will be nothing I can do to completely make sure they delete them.
Looks like a nice enough interface but all my m2m devices use GSM & SIM cards. Besides being slightly cheaper this doesn't seem better than ting which supports both GSM and CDMA devices.
I've been playing Words with Friends more or less constantly for the past 5 years or so and I've come to pretty much the same conclusion. It's far more important to deny your opponent the opportunity to get valuable triple/double letter or work scores than it is to always grab them yourself.

If you do extend to get a bonus tile, make sure the potential scoring opportunity is limited. Things like:

1. Don't leave a vowel next to a triple letter score in line with a triple word score - that leaves an opening for a valuable consonant to start a word and end on the triple word score.

2. If you pass parallel to a triple letter tile, beware of having a vowel adjacent to the tile and a consonant after it. Especially if the vowel is A, I, or O as these form two letter words with Z, Q, and J respectively. If they can get get for example JO going in two directions on a triple letter that's 60+ points.

3. Always be aware of whether the J, Q, Z, X have been played or not.

4. Sometimes it's better to play a less valuable word if it helps you get rid of difficult letters like too many vowels or consonants in hopes that the next draw will even out your hand and let you play a better word.

I think WWF is a little different because the tiles permit higher scoring possibilities than Scrabble, but I imagine the strategies are much the same.
If only Haskell would be more like OCaml in this regard, and would allow you to eg nest module, instead of saying "One File = One Module".
The only reason I can think of is to infuriate every user using a password manager and help move the world to a place where stickies with passwords on your screen are commonplace (again).

Annoyingly so Apple has taken to this practice in certain OS password fields, like when you need to enter a password to decrypt a FileVault encrypted disk.
So, the US government has Missiles, Tanks, Supersonic aircrafts and Nuclear weapons.
The best these patriots may have are rifles, hand grenades, commodity vehicles and aircrafts.

Good luck with that.
French Billionaire Wants to Disrupt Silicon Valley Education
Well this seems to be a dealbreaker, I can't have an email server that is likely to get blacklisted.
Exactly. Perfection means you exclude a large percentage of users who are not using a modern browser or who have older handsets. If you running a hobby site then it is fine, but if it is a business this sort of behaviour is insane.
How one man sold his blog for $100M dollar using this 6 steps
Add to that the fact a huge amount of email is/was transferred without encryption, and you would be foolish to assume any of your email is private.
The odds are that the other correspondent in your personal conversations is storing all their messages on Google's hard disks.
Also, I don't want to store personal data on servers of a US company.
Mostly run on IBM mainframes. Some run on Windows. Only thing that saves former is investment required to learn to hack it plus arcane controls/procedures encoded in it. It's why attacks are often inside jobs at least partly.
Serious question: what OS should it run on? I agree that Windows is a bad choice but other options are not much better as far as security (for this kind of attacks) is concerned... Are they?
Security is not only dealing with aftermath, although that is an important part of it. A security-first distro such as http://www.alpinelinux.org/ or OpenBSD, although harder to setup, would serve better long term.
Ah yes, the Go (and Rust type system, I might add) are interesting. They still feel a bit weird to me but it's something useful
He's right though. The idea that Jesus never even existed is very, very fringe. Vitually all reputable scholars (including many atheists and agnostics) accept that he existed. See e.g. https://m.youtube.com/watch?v=u9CC7qNZkOE
Do we really need more of them?
There are a number of things that can (and should) be done to prevent outgoing emails from your SMTP server not to be rejected or flagged as SPAM (or worse your IP address blocked).

A part from the obvious basics (IP reverse lookup working, TLS support, SMTP auth for your users..) you can also set up DKIM [1] and SPF [2] that help a lot and are well supported by big providers like gmail.

But more importantly not ending up in a blacklist is important, so if you have users using your service you should monitor the volume of outgoing emails to avoid someone using your server to spam.

There are a few tools that you can use to check your SMTP server MXToolbox and CheckTLS are the two I often use. [3]

I agree though that managing an SMTP server is challenging, I had a couple of issues I had to work on that I am sure would never have happened to a big provider.

[1] http://www.dkim.org

[2] http://www.openspf.org

[3] http://mxtoolbox.com http://www.checktls.com/testreceiver.html
> we’ve recently identified tools uploaded to online malware repositories

Why were they uploaded there, and where are said repositories?
It's not really ad hoc. Neural nets are well studied, but they have very limited memory. They attempted to solve this problem by giving a neural net an unlimited external tape memory, inspired by Turing machines.

In order to train a neural net with backpropagation, every step has to be completely continuous and differentiable. So they made a continuous valued tape.
Would it be possible to set something of a webmail client up with Mailchimp/sendgrid APIs? Get the flexibility and control of how your email works without the flagged as spam issue?
Waffle House Index
It is not at all obvious which of AES-128 and AES-256 is more secure.

See for example this 2009 paper: https://www.schneier.com/blog/archives/2009/07/another_new_a...
Because most of the Chinese company work in this pattern, I don't think a very pervasive research can be done and there is none I know that exists.

I think it works when you are copying things with lots of entry level developers at low cost, like most companies do. You know, they will find something that's working great in America and Europe and copy the whole thing very fast and launch new ones. This is how you guys have Google, we have Baidu; you have Uber, we have Didi; you have Periscope, we have over 100 mobile video live apps, etc.. But if you are inventing things, this won't work at all. I think this is one of the major reason why we lack of innovative products all these years.

This is a very common practice throughout the industry since about 2-3 years ago, and it's a very sad story every time I tell it.
Sounds like you're disabling the voicemail service, not conditional call forwarding.

Try dialling ##004# - it's the GSM standard code to disable all conditional call forwarding rules. More codes at https://support.t-mobile.com/docs/DOC-4041
Added script example to the home page: http://www.json-script.com/
I run my mail server using docker, specifically the following images:

* mailserver: https://github.com/tomav/docker-mailserver
* webmail: https://github.com/jprjr/docker-rainloop

Combined in docker-compose:

version: '2'

services:
mail:
image: tvial/docker-mailserver:latest
hostname: your_hostname
domainname: your_domain
environment:
SSL_TYPE: letsencrypt
ports:
- "25:25"
- "587:587"
- "993:993"
volumes:
- ./data/mail:/var/mail
- ./data/config/:/tmp/docker-mailserver/
- /etc/letsencrypt/:/etc/letsencrypt
rainloop:
image: jprjr/rainloop
environment:
NGINX: 1
ports:
- 80:80
volumes:
- "./data/rainloop:/var/lib/rainloop/data"

The docker-compose.yml and postfix-accounts.cf files are the only configs you need for a basic setup.

See the projects on github, especially docker-mailserver for further info on complete features of this setup.
Just since no one has pointed it out, have you considered ProtonMail? Swiss based, fully encrypted, hosted email service. Should give it a look.
> You said I was touting government propaganda. If by that you mean exposing it and its influence. Then yeah.. I hereby tout all government propaganda and always will do.

Touting does not mean exposing. "Exposing" is used for facts.

It is your opinion that propaganda is an effective means of helping China gain international influence.
You serious? Have you never heard of XTS-400 and SAGE guard? XTS decends from first, secure system to be evaluated called SCOMP. They've dropped assurance a bit due to market demand for features over assurance but it still has more security than most OS's. Also, SCOMP had an IO MMU before that phrase was invented and fashionable. :)

Google SCOMP, XTS-400, or SAGE guard to know what kind of INFOSEC goes back to 80's in military before firewalls were invented or security went mainstream.
I find the interoperation problems of software alarming - you would think open source tools would grow in use at some point, even if just the basics (ie: postgres/postgis, or tools dumping csv out to other tools, or one or two REST apis).
I posted that in part hoping that someone would chime in with a workaround/solution figured out in the 6-7 months since that discussion.
The article goes beyond an A+ and also goes for 100% in all the ratings. The guides which you linked don't do that
It's something of a Veblen good for the wealthy[1]. They can say to their friends that little Johnny is studying 19th century basket-weaving at Harvard. Little Johnny can then go on to get a PhD and advise his parents and their friends on the most culturally significant baskets to purchase to properly signal that they have the requisite taste to accompany their money.

[1] https://en.wikipedia.org/wiki/Veblen_good
I'm not a utilitarian. If I'm not personally Alice or Bob, I don't care.
https://mako.cc/copyrighteous/google-has-most-of-my-email-be...
fair enough, but I'd rather not be one that is responsible for that
If you store your emails in a hosting provider then the hosting provider can read your emails. If you store your emails at your server at home then police can break your door plug in to your server and read your emails. Even if the disk is encripted they can read the encription key from the memory. Now I trust more Google than Microsoft, if you are non USA citizen of course. And I trust a foregn authority more than a local. This can change in for your case.
Also C++ still has atrocious cycle time with medium to large projects.

If you look at feedback times, PHP is the new Smalltalk. (Yuck.)
Every time a new tech emerges someone will always say, that the new tech will take away human jobs.

The new tech will take away human jobs. But the humans will just go do other newly created jobs.
I'd be bold and say it doesn't really matter. It's all security through obscurity.
Cling: An Interactive C++ interpreter
You can do all of these things and still a certain percentage of your emails will disappear into the ether. The game is rigged and the little guy has lost.
I'll add to disclose it anonymously tied to a pseudonym and/or public key. You can give them data and time to fix it with assurances it will be more public after a reasonable period of time. Thanks to anonymity, they're not going to do shit like in the article.
I'm talking about names of streets, not traffic signs.
Always worth linking to Marshall Brain's "Manna" with a title like that;

http://marshallbrain.com/manna1.htm
A Venture Fund with Plenty of Virtual Capital, but No Capitalist
Does OwnCloud support email too? I wasn't aware of this.
Decorating: A Plan of the Python Decorator API
In my younger years I played Scrabble quite obsessively, sometimes in 36 hour long sessions with a dozen of us playing. Against mere mortals (i.e. those that dn't know all 102 two letter words) I considered myself unbeatable.

However, several years after my 'peak Scrabble' days, I found myself in a rural pub with not a lot to do than play the game, against someone who really didn't have the wordplay for it. Much to my horror I lost!!! His 'strategy' was to play 2 or 3 letter words, nothing longer, ever... He just lacked the tiles and vocabulary for longer words. Consequently the whole top left of the board had no places to go, totally locked out by little words.

Amongst my normal Scrabble playing friends I always played an open game, in contrast my 2-3 letter competitor played a closed game, not that that was deliberate.

Therefore, if you are not playing against a pro, try 2-3 letters rather than five - you really could win against those far more experienced than you.
She made me laugh and I learned a thing or two (after 60 years on this earth). Can't ask for more.
I happened to post comments in GP's cited thread and also another email server thread. You can read both of them to get a deeper understanding that personal email servers are hampered by "trust" issues more so than technical challenges.

https://news.ycombinator.com/item?id=10405945

https://news.ycombinator.com/item?id=10498988

Basically, you could conceivably get past all the technical set up. There may even be Docker containers or virtual images to jumpstart most of the set up. Or you can follow some step-by-step instructions.[1]

However, the problem is that SMTP servers originating from residential IP addresses by default are treated as home computers that have been hijacked by a malware spam bot. Using Bayesian reasoning, this is a rational filter because the number of zombie home computers sending unwanted spam vastly outnumbers any tiny amount of "good" people setting up legitimate SMTP servers.

Given today's realities of distrust-by-default (unknown SMTP server is guilty until proven innocent), it looks like the best strategy for a "personal" SMTP server is to pay for a virtual machine at a hosting provider (Rackspace, etc) whose IP address ranges are not blacklisted. You could then run encrypted email storage there so Rackspace has no visibility into private emails.

[1]http://arstechnica.com/information-technology/2014/02/how-to...
If you ask me if gnomes exist, I will tell you I am a gnostic atheist

gnostic agnomist, I presume?

As for the rest, sorry, I don't subscribe to Smith's redefinitions as I'm not sure the distinctions make practical sense. More specifically, I don't support the definition of "agnostic theist" because in the context of religion, there is no distinction between "knowing" and "believing". An "agnostic theist" would be someone who still subscribes to the same religious identity and the distinction is therefore purely academic. Moreover, religions already have words to describe agnostics within their ranks: they're considered lost sheep, apostates or even heretics (depending on which religion and strength of its convictions).

Finally: the term "gnostic" has already been coined and does not mean the opposite of "agnostic". Gnosticism is a theist philosophy closely related to Christianity.
I thought so too.

Well, until you have done everything, — DKIM, SPF and checks are green… And gmail is continuing put your e-mail to spam every now and then :/
Comparative advantage isn't abolished just because the advantage is large.

Economic participation by a class of entities who have a lower capacity for production than every other class of entities is still useful to all involved.

A great many of the world's prejudices, fears, and passionate causes are driven by ignorance of basic economic principles, and this is another example.
There is no law of economics that says the value of labor has to be above survival, let alone minimum wage. When cars replaced horses, most horses didn't get new jobs. They literally became worth less than the cost of feeding them, and were slaughtered.

Near future AI will make the majority of humans basically worthless. There isn't much left that people can do, and computers can't. Sure maybe high intelligence jobs like engineers and programmers are safe (for now...), but most people can't become programmers or engineers.
PHP Extension for Method Calls on Primitive Types
That has been the general trend over time, but AI breaks this trend. The basic problem is there is minimum wage below which humans can't survive. No such lower limit exists with AI. At some point every job can be performed for less by an AI.
It's a vestige from the time where compilers were working from disk and laying out your program 'declarations first' would speed up the compilation process considerably.
So far we've automated physical tasks. It was possible to go into intellectual jobs as an alternative avenue, since automating that wasn't possible. However now we're automating mental work. Humans can currently go into jobs requiring higher education or creativity but 1) this won't work for everybody and 2) this is not a new avenue outside of the reach of automatization. The machines have a good chance of catching, especially since a lot of those humans moving into more specialized jobs will be tasked with making better machines, which in turn endangers more jobs.
Which takes time and pain, and brings Revolution and WAR.
Northern Ontario, spot on. But even in the cities I've seen plenty of it, just more clever variations.
Seems to me that a large section of the population is already at this point without AI. The other weakness of this argument is that in order to perform many of the human jobs, the AI will need a robotic body. Human labor will easily win on cost for many of those jobs.
Meet the Entrepreneur Who Launched a WhatsApp Rival from a Colombian Prison
http://www.subbrit.org.uk/rsg/sites/s/skendleby/ was turned into a datacentre now run by GCI but previously known as SmartBunker.

Circa 10 years ago I was involved in a project helping transition it from 80s phone exchange into a modern facility built to a good spec. Getting connectivity out there was painful and expensive; at one point it was backhauled wirelessly to Skegness!
I'd say go with the Play Framework with either Java or Scala.

The views are type checked as well, like in asp.net mvc.
In fact, it's inspired by the razor template engine, you won't miss the magical @.

There are a ton of templates available[0], auth, websockets, upload etc..

Over the last few years, the Play framework improved a lot, Java is not a second class citizen anymore, like many
people think.

> I am writing a new web application from scratch. It is not trivial - there will be a requirement to provide streaming video and also facilitate live video streams between users.

This is from the official docs:

Because of the way Play works, action code must be as fast as possible, i.e., non-blocking. So what should we return as result if we are not yet able to generate it? The response is a future result!

A Future[Result] will eventually be redeemed with a value of type Result. By giving a Future[Result] instead of a normal Result, we are able to quickly generate the result without blocking. Play will then serve the result as soon as the promise is redeemed.

The web client will be blocked while waiting for the response, but nothing will be blocked on the server, and server resources can be used to serve other clients.

Also make sure to checkout the streaming section of the docs[1].

If you are looking for a robust framework which embraces performance and developer productivity, Play is the way to go.
I've never found a framework that could satisfy all my needs, like Play.

I didn't even mention all the awesome features but if you are interested check out the Play Philosophy[2].

Why am I so convinced about Play ?
I have more than 5 apps in production, I couldn't be more happy about my decision to use Play.
I wrote applications in asp.net mvc, Spring MVC/Boot, Rails for many years, they all failed me.

[0] http://www.lightbend.com/activator/templates

[1] https://www.playframework.com/documentation/2.5.x/ScalaStrea...

[2] https://www.playframework.com/documentation/2.5.x/Philosophy