skysight-inc/HackerNews huggingface dataset:
I think something to understand here is that SSL Labs wants you to aim for A+, not for 100%. The numeric score is probably just to visualize what areas need improvement, and obviously 256 scores more than 128, but that's not an indictment of 128.

This article in a nice exercise, but not a guide you should follow in production. The HTTP/2 ciphersuites recommendations are great, and there's no security reason to disregard them.
In terms of obsolescence, it's dog eat dog within the tech world too. On Friday, our new COO told the dev team (we were not consulted, just the CEO) of his plans to move the back office to the cloud (salesforce). Nobody but the coo knows salesforce. The guy beside me was devops (the guy who deals with AWS, docker and the server) he was basically made obsolete for the company. I have the weekend to decide if I want to learn salesforce (some shitty version of Java ( which is shitty already) called apex) or start looking for a job. So I have a lot of empathy for the workers who have these automation obsolescence dropped on them. It will hit us all.
it's a threat to its people.
Neither should they. Both guides haves different goals.

SSLLabs evaluates the highest possible security, while Mozilla's levels compromise to implement the best possible TLS for a given population of users. "best" isn't always determined by security: speed and compatibility are taken into account as well.

That said, Mozilla's modern level ranks A+ in SSLLabs: https://www.ssllabs.com/ssltest/analyze.html?d=jve.linuxwall...
Coursera use it (plus a webcam shot) to try to verify that every coursework submission is from the same person.
The short run and the long run
And if so, get lower rates by running a script which lies to Uber and says the battery is plugged in and at 100%.
These are all highly specialized tasks. Useful, but not general enough to replace a conscious human being.

> It won't be long before you can have a robot that will understand "fold the laundry"

Who the hell wants to spend their life folding laundry anyway? Some people do only because that is what their circumstances dictate. There's no reason they should if we have the means to alleviate them of such trivial "work."

It's my understanding that we already have these devices. They're slow as molasses but the efficiency of not having a human do it is great. Good. We're all better off.
Well they are trying to justify their certificates are legitimate, of course they use every cheater-catching trick they can. This is not just logging into a random site anymore, this is trying to do fraud detection for exams while not physically present.

(Also, one example doesn't make something true.)
In an ideal world we wouldn't have blackhat hackers.

A more practical solution is to simply generate a public/private key pair on registration.
Has the patent system really weakend ? or it's simply that today, the options to build something are so varied, and people have more knowledge of that, so you cannot patent them all ?
Then I would set up a proxy through my home server to change the battery-status based on my need
In 2012 I had to set up a password for BankID with DNB, (The Norwegian Bank), and used the automatically generated password "P0Q1u-A(Va,?mO?nIrBl" from KeePass. Their entropy estimate showed this password as very weak and did not accept it, even though much simpler passwords were shown as "strong". I sent them an email asking them about their entropy estimation, and complained about their implementation disallowing pasting of passwords.

They quickly replied that their entropy estimation was flawed in handling some characters and that they would fix this. They also said that copy/pasting was disallowed as this password should not be stored in any form. I sent them an email back arguing that this policy forces people to use weaker passwords, to which they replied that this would be taken to their product manager.

Now in 2016 they've updated their implementation which allows pasting passwords, making life easier.
This is so outlandish that I'd love to be able to dismiss you as a troll, but it's also so wrong it makes me angry, so I want to make sure no one nods reading your comment.

Google has SINGLEHANDEDLY improved the security of the TLS ecosystem by light-years:

* They ship the most modern client (Chrome), and started the auto-update trend.

* They forced the move from SHA1 and RC4 by leveraging that client power (with the degraded UI messages) even if it costed them popularity.

* They are leading CT, the single next best thing to happen to the ecosystem.

* They are keeping CAs accountable like no one did before.

* They have amazing people working on security UX and even shared the messages they use for anyone else to use.

* Finally, Chrome is by far the most secure browser you can use thanks to its state-of-the-art sandbox.

And take your client side certificates grudge somewhere else.
HTML progresses without using version numbers. Perhaps, in general, we don't need them..

https://blog.whatwg.org/html-is-the-new-html5
Another equally irritating problem are sites that use just keyup/down events for validation and when you paste a value (or if password manager fills it for you), they don't let you submit the form until you actually type something in that field.
https://twitter.com/koistya/status/734356345370071040
Don't read so much into so little.
Plenty of people don't even type their email correctly. Ask anybody that runs a service and sends email, then you'll see. E.g. "myname@domain.com" vs the typo missing the final 'm' "myname@domain.co"

But I do agree it's rather annoying and not allowing paste is even worse.

I actually trust my copy-and-paste more than me not making a typo because I am human. By not allowing paste, websites are asking me to potentially make mistakes.

Perhaps a better solution is for the browser to have a button on <input type="email"> fields to allow me to select from a list of emails I have. The browser needs to protect this data from being website accessible until I give permission for privacy reasons, but that would have been a way better UX.
Yes it is. The recommended approach these days for password resets is to email you a single-use, time-limited link to a page where you can choose a new password.
My bank does this - no idea why. I use a bookmarklet to re-enable paste.
As an avid password manager user, thank you for taking up this fight
> The reality is passwords need to die.

For a different approach, consider the distributed trust authorities of Apache Milagro (incubating):

http://milagro.incubator.apache.org/
Not too long ago Ticketmaster had a minimum length of _4_.
At least one of the reasons is that Windows often picks up rich formatting characters if you cut/copy.
SWIFT documentation is available.
There are tons of IT workers familiar with SWIFT, I've tested SWIFT GW implementations at at least 10 institutions,

Registering for SWIFT training is easy enough, especially in developing countries where verification can be harder achieve.
https://www.swift.com/our-solutions/services/training?AKredi...

Gaining access to swift.com through either "proper" registration or phising will get you access to the SWIFT SDK as well as tons of other material.
So no sorry but to me and to anyone else who's even remotely familiar with how shitty SWIFT and usual banking internal security is, it doesn't sound like an inside job, just a job well done.
Stop.Just stop.You guys always begrudge success when Africans do good things.It is pathetic and low.You ought to learn to appreciate and celebrate people when they work hard to achieve success rather looking for ways to belittle their achievements.
BigData frameworks, libraries, and toolsets weekly roundup – May 22, 2016
In this case $46m were converted to casino chips which were punted at a casino in Manila http://www.asianews.network/content/46m-bangladesh-bank%E2%8...

Probably someone knew the withdrawals were iffy but got paid off - Manila's a fairly corrupt place. They are arguing about who's fault that was http://newsinfo.inquirer.net/772643/rcbc-branch-head-rogue-o...
That's really nice. I wish that more organisations responded in that kind of way; I certainly know that if someone wrote to us to complain about password or other security issues we'd certainly take it on board.

What are the reasons that such inquiries often get stonewalled - is it simple organisational complexity, and the difficulty of actually contacting the right individual?
There should at least be a bias against the officer's word from the judge and the jury if he intentionally stopped the camera from filming before a police action.

As it is, cops already get the benefit of the doubt almost all the time and when they don't deserve it.
$1M will buy 122 acres in part of U.S. National Radio Quiet Zone
What would be the downsides of forcing companies that are engaging people in tasks that require operating a vehicle to offer reimbursement for that operation?

A big upside is that it simplifies evaluating the position for the person doing the work.

A downside is that the company would have to monitor for fraud (but this is pretty easy for Uber which is premised on tracking the distance the vehicle travels).

(contractors and employees, either arrangement)
My thought was that this stems from the idea that while the clipboard may be a legitimate and secure way to transfer across programs from a password manager to the password field, it is also an OS-wide shared space. After you tab away to the next app, it will have access to that password that remains in the clipboard. Browsers couldn't clear it (and apps aren't supposed to touch the user's clipboard anyway) so they discouraged it.

You could also alt-tab over to your IRC client (IRC because this was state of the art probably about when this practice started) and forget what is in your clipboard and paste+enter quickly.

I don't think this is a _good_ reason to do it, but that was why I thought it was done. I have no idea if that's the real reason it got started though.
Google will often ban the account that's getting false clicks...so you can use it as a weapon as well.
The requirement of a public API seems weird to me. What is the point of that; why should my versioning scheme meddle with whether I want to release an API?

Also a small note on the name, I don't see how `4.7944+beta7` is "MonoVer/MVer/MoVer" since it's not quite... mono (http://www.dictionary.com/browse/mono-). It has between two and three components.
Ten programmers working together can get almost twice as much done as one programmer.
> And the solution is going to be at least 10x slower than the java one.

Even if that was true (there are many ways to make ruby/python faster), who cares? Hardware is like 1/100 of the cost of an engineer. Use more/better hardware, and problem solved. Optimize for your most expensive resource. Sure maybe 20 years ago that was processing time, but now in days your end user can't tell the difference. I mean does 10ms really feel any different from 100ms? Not really.

(OK, there are some times when processing time DOES matter, but that's the exception, not the rule. No premature optimization please)
Amateur hour.

If you want to rob a bunch of ATMs and get away with it, try keeping your vulnerable window longer than 2 hours...

I mean, it's going to be pretty straightforward to gather a bunch of footage and see what happened those 2 hours. These guys will get busted within the next few days basically guaranteed.
Hydrogen: Jupyter-style inline code in Atom
Hide Data in Hidden Partitions
Make Your Own Programming Language (2015)
Back in the day (2001) I worked on the PalmOS version of Scrabble. One thing that surprised me when I was tuning the AI was that it played better when all words of seven or more letters were removed from its vocabulary. Apparently searching through the longer words was a worse use of time than searching for other placements of shorter words (except on the highest difficulty, where it was given a larger time budget).

We ended up giving the lower difficulty levels a restricted dictionary anyway, but this was to affect players' perception of the difficulty rather than the actual difficulty (the AI on "beginner" mode shouldn't be playing a lot of words you've never heard of). We adjusted time budgets so that difficulty still ramped up as the dictionary expanded at higher levels.
> Anyone want schematics and parts lists for anything they make? There's an email address you can send a message to that will respond with them. All plain-text, no validation.

This seems like an odd complaint. I can do this with my car and dishwasher, too. Unless BAE makes classified military stuff they're exposing in this manner it seems less like a security hole and more like a useful thing for people maintaining the stuff they manufacture.
I want to print this out and frame it for my office
Show HN: Browser based app in PHP that makes it easy to learn PHP/HTML/CSS/JS
It really depends on your market. I see around 20% of my traffic coming from below 1.2. Measure twice and cut once.
In Stockholm there's a 40kr (~$5) base fee for UberX: https://www.uber.com/cities/stockholm

For UberBLACK that's 50kr (~$6), and UberLUX starts out at 100kr (~$12).
I dont know. I'm not an expert in Theoretical C.S.. But from what I can understand is that we need a pretty big break through in C.S to get to that point.

Sure some jobs will be replaced but new jobs will be created. Thinking on the spot now. A manager and a whole team of people that oversee the job that the A.I does. Jobs that focus on applying A.I to certain field, (A.I consultants)

People value human interaction and when there is value in something, there is money to be made.
Where i live, we're not used to tipping, is that really a big thing considered by taxi drivers when picking someone? Because we don't have tipping and the racist drivers acts the same.
I agree, I'm using Elixir in a number of production systems and I haven't come across a show-stopper yet, database packages, SOAP, documentation has improved quite a lot, even on Erlang.
It's called a TripTik[1] and it still exists. I remember them well. My grandmother and I took a trip across the US in the 1960's. They were invaluable.

[1] http://www.aaa.com/travelinfo/maps-directions.htm
Will Big Data Open a Pandora’s Box of Injustice?
Author here. This is exactly right.

I even go as far to say:

> You should probably stop here. Continuing to attempt to achieve a perfect score will result in reduced client compatibility. This means that many users will not be able to access your site.

I should probably have also said that it is unlikely to be their intentions. An A+ is more than good enough.

This was just an exercise to better understand how to influence the score with a Go server as I've read a few in the past for NGINX, Apache etc.

Aiming for 100% in all ares was just a fun, but mostly pointless metric. It did, however uncover a couple of interesting things along the way.
> (Also, one example doesn't make something true.)

Neither does "I've never seen it being used".
The Southern Poverty Law Center performs a variety of good works. They are not spinning, the page linked to with listing ~1,000 anti-government groups says "Listing here [d]oes not imply that the groups themselves advocate or engage in violence or other criminal activities, or are racist." [0]

These people are already on the margins, this article is trying to inform the public that the Bundys and their cohort seen in the headlines are at the more extreme end of a continuum that's larger than most Americans might think.

I understand a discomfort with list-making and it plays into these groups' persecution complex (and apparently yours) but it's a good idea like it's a good idea to pay attention to houses on a sandy cliff; when a big storm comes they're the ones most likely to fall.

[0] https://www.splcenter.org/active-antigovernment-groups-unite...
We seem to be ignoring the current theoretical limitations of A.I. I'm not an C.S or A.I expert. But what I can remember from university is that we need a pretty big breakthrough in computer science to get to that stage. I'm not saying it won't happen. But who knows.
Bideo.js – Easy Background HTML5 Videos
Architecture document @ Github: https://github.com/agermanidis/Antipersona/blob/master/ARCHI...
I was asked to get onboard with a startup. How should I structure payment?
I will be getting paid and I have the opportunity to get equity depending on the extent of involvement. I am a college student and will be working remotely and the ball is in my court as to how I get paid. What is the best way to structure this so I can keep the most money e.g. freelance, employee, under the table, etc.? Also, it is a corporation if that matters. Thank you!
They have a good argument for doing so...

http://thenextweb.com/insider/2016/05/20/uber-riders-will-pa...

A similar article was posted here a few days ago.
Turkey refuses EU travel to highly skilled Syrian refugees
Ask HN: Privacy focused CDN
Hey there,
We search a CDN which is focused on the privacy of our visitors and dont keep logs. Have you any idea?

-Thank you!
Ugh.. Then it's not "unlimited". Unlimited means "without limits", not "with a limit we won't tell you".

I can't wait for people doing this to get sued for false advertising.
Google claims they detect and filter bot traffic, but it's very difficult to determine how good they are at it from the outside.
>>Shhh, don't tell Uber/Lyft, but I would gladly pay more than taxi rates to use their service.

Pretty sure they are aware, and just waiting until they have enough market share to make good on that.
Not anymore.

>The age-old assumption that I/O is slow and computation is fast is no longer true: this invalidates decades of design decisions that are deeply embedded in today’s systems

https://blog.acolyer.org/2016/01/15/non-volatile-storage/
Analyzing IMDB Data: Step 1 – Cleaning and QA
Tonny Vilhena tersedia
> potential partners... Carriers, tech companies, fashion brands

Aka the people whose weird priorities got us to this position (needing/wanting Ara) to begin with?
Microsoft outlines new policies for dealing with terrorist content
Structure your time first.
For a larger scale case of exactly this I recommend people read about Subversion[1] from Introversion. Regardless of the game being a failure, the tech behind it was incredibly cool, and you can understand how obsession with the technical side of things can distract from gameplay.

[1]: http://www.introversion.co.uk/subversion/
NimES – NES Emulator Written in Nim
I would add SQL to your examples of subject specific languages. Great language in a very specific application that lots of developers know and are familiar with but would never write a web server with it even though it is arguably turning complete[1]. In my experience using SQL as an example also sidesteps a few flame wars around languages that are nearer and dearer to people's hearts.

[1] http://stackoverflow.com/questions/900055/is-sql-or-even-tsq...
مشاهدة القناة السعودية الاخبارية بث مباشر اون لاين بدون تقطيع
Kling och Klang!
> At some point the cost of not doing it will exceed the cost of doing it

Will something like this really cost more than $900M?
I had a similar experience with Hover and DNSSEC. Also, as stated on their site now:
'OK, .cn domains are a bit tricky to transfer. Trust us, we've helped a lot of people through the process. We'd love to help you too: give us a ring at 1-866-731-6556 so that we can sort things out for you. At no charge of course.'
...which is very misleading. They do not offer .cn domain transfers at all. I reported this 3 months ago but they still have not changed the wording as they said they would.
Cheap shirts can be had for under 5 € in Germany, with minimum wage at 8.50 €. (The fine print: These cheap shirts likely contain more chemicals than cotton.)
Didn't Black and White do that?
Java is very verbose. Although many languages are moving towards the same constructs.

The BIG differentiator is how a framework handles the write-compile-run-debug cycle.

Rails is very nice in that respect.

When I was doing a lot of java I'd run the server in debug mode, so eclipse could hot-swap code. Cycle was instant compared to a few minutes

As for the "productivity" examples of 5% and 10%.. That's way too little.
Dan Pallotta: The way we think about charity is dead wrong (2013)
A few years ago at least, they were regarded as better-than-most which is definitely not to say perfect.

A lot of mid-sized ad networks and ad buyers actually have a negative incentive when it comes to detecting fraud -- those fraudulent clickthroughs look great on the aggregate metrics, so if you're the only person flagging them, you look like you're getting your customers a lower CTR than the competition, unless your customers are sufficiently educated.
How to Fall 35,000 Feet And Survive (2010)
Outside of Houston, Texas, this former private bunker (http://www.houstonbunker.com/about/) was turned into a secure data warehouse. I believe Continental Airlines used to use it for their data.
Perhaps you could record two minutes of ringing.
oclhashcat is weak against a properly chosen 7 word diceware phrase.
Their response to the entropy issue (which was a clear bug) was "we confirm that today's implementation yields a somewhat incorrect error message when using some special characters in passwords and that this will be fixed".

When there is a clear bug it is fairly easy internally for them, since they just need to confirm the issue and send it to the right people to get it fixed.

With the copy-pasting issue, their reply simply stated that disallowing this feature was intentional policy on their part and that their passwords should not be stored in any way. Changing policy and implementation would require a greater effort on their part, and admittance that a suggested change would improve their service.

I then wrote a longer reply, arguing that following their password recommendation for the ~150 online accounts I had at the time would be infeasible without a password manager, and insisted that I would like a reply which did not refer to existing policy. The response to this was that it would be taken to their product manager.

If the person handling the issue didn't care about the company doing the right thing or their job, or if they were convinced that their policy was correct, or if they believed escalating would certainly not lead to change in policy, the issue may not have been escalated. So the people handling issues must care enough to escalate unresolved issues, or the company policy must force escalation of unresolved issues, and at some point in the chain of escalation some person must believe that following the suggestion would result in an improvement.
Ask HN: Anyone know how to export raw data out of Google Analytics?
I want to export it to an excel or CSV file so I can run my own algorithms on it.
Anyone know an easy way to export the raw data??

Thanks!
I'm not aware of a startup specific formula (e.g. if startup then do XYZ,) we don't know all of your details and it really depends on what you're planning for your life/career.

If you are trying to build a career and a life, you should seek a documented form of payment, else you'll have a hard time convincing future employers, your government, and lenders/creditors that you're legit. In general, I've heard the advice "pay yourself first" which when pondering jobs I interpret as: make sure you are getting enough compensation every month to pay rent, groceries, health insurance, etc.

At that point hopefully you can start negotiating(/deciding) between more salary versus more equity. Only take equity if you're sure you won't need the cash any time soon, because lots of companies are staying private for a long time these days, so you may be waiting around for an acquisition/IPO.
Honestly I hardly heard anyone referring Venezuela or Cuba as the West either. In practice it's really down to Anglo-Saxon + European first world countries.
ESET NOD32 Antivirus 9 Username and Password 2016 Free Download