skysight-inc/HackerNews huggingface dataset:
> If that's the case you are putting your users at risk, by pretending there is a TLS connection to your server when really it's only to CloudFlare. The connection from CloudFlare to your server is completely unprotected and is routed over the public internet.

How much of a risk is this in practice, assuming that when I do illegal things I'm very careful to only use sites that I know are end-to-end encrypted, and so for sites going through CloudFlare I'm only worried about criminals snooping for identity theft or credit card theft or similar purposes? [1]

I'd guess that criminals are overwhelmingly more likely to manage to intercept things near the browser side of things than near the server side of things. Probably most likely would be by taking over a public facing wifi router. I'd expect that getting in between CloudFlare and the server would take resources beyond most non-government actors.

[1] Note: I am NOT making an "if you aren't doing anything illegal, you don't need to worry about government snooping" argument. However, there is plenty of information that I consider confidential in the sense that I do not want it generally known, but where the government already knows that information. So, if some site asked me for such information and I needed to decide if they are providing adequate security I would only need to consider non-government snoopers because government snoopers already have the information.
True, Altium has done a great job with bringing in the modern features but we weren't comfortable shipping a product with "borrowed" software. We've found some tools that help with the others. For example, SnapEDA has a great component library of footprints and symbols.
We looked at CircuitMaker but it appears that you can't have private designs - they are all public. So fine for open source but difficult to use for product dev.
Drop some generators then too! I live in Cambodia, and spend a lot of time out in the provinces where everyone meets up daily to charge their phones and other electronic devices around the single generator in a village.

And need I mention that massive bombing campaigns don't exactly facilitate having a reliable power grid.

Everything I'm saying would cost peanuts compared to what the US spends on weapons and war.
That turned out to be a lie from Erdogan.
Teardrop Attack: What Is It and How Does It Work
Having written a number of shells, I can confidentally say that the actual heart of one is the ability to execute a series of commands.

Doing this in a very high level language like Ruby is trivial; it does all the work for you.

Doing this in C, as Bash does, requires learning some systems programming. Under Unix/Linux that means using fork() to create a child process and then having that child call exec() to run some specified command.

If not run "in the background", then the parent process needs to call some variant of wait() to idle until the child is done.

If it is desired to have input and/or output different than the parent, say for redirection of stdin/stdout/stderr, then one has to fiddle with variants of dup() to arrange this.

In some sense, all of the features mentioned in the other comments are optional, and the number of features in a sophisticated shell like Bash is mindboggling, so it would be a good idea to figure out a "minimum viable product" so that you can get your minimal desired feature set working before the end of time.
CloudFlare is basically making much of the web unusable over Tor. That's my main beef against them.
All plans have protection, free has lower limits but still substantial. Pro has higher limits and Business is unlimited. Given the pricing, that's very fair.

They won't automatically unproxy you without notice. If you're getting attacked, you need to pay for the level of protection you need.
They're trying to fix this: https://blog.cloudflare.com/the-trouble-with-tor/
> There have been some discussions about the ethics of self-driving cars if it should sacrifice the lives of the people in the cars to save more lives. In a right to repair/modify wouldn't a lot of people pay to have the algorithm changed for their car to always favor the people in the car no matter what?

How does this differ from those people making the same choice behind the wheel?

To me, the issue isn't the trolley problem: we haven't come up with a definitive answer for that since it was proposed in 1967 and I doubt we will before self-driving cars are commonplace. The question for me is: when my car is confronted with the trolley problem (and many others), is the decision made by me or by a corporation?
Netflix Flixtape – Like a Mixtape. But for Netflix
That's funny (but they don't mention Turkey). For some actual predictions, they link to the blog of one of the people being interviewed:

https://dartthrowingchimp.wordpress.com/2014/01/25/coup-fore...

I'm surprised to see Germany predicted at higher risk than the rest of Europe, and this was before signficant numbers of refugees entered Europe.
> Open Standard

> behind paywall
FOR INVESTORS, Receive now by email best Silicon Valley startups KPI data
Just as an aside, there's a much better way of doing metaballs in 2D but that can't be expanded to 3D: http://nullcandy.com/2d-metaballs-in-xna/

The basic idea is you draw a gaussian falloff sprite for each blob into a render target with additive blending, such that you get a density field from the sum of the falloffs. After that you do a simple threshold operation in the pixel shader and bam, very cheap unlimited metaballs. This is also the principle behind Smoothed Particle Hydrodynamics.
It isn't 'fake money' at all. It's every bit as 'money' as Euros, the only difference is the size & scope of the respective issuers.
Thanks for the links it was interesting to watch as a former Emacs fan.

In the old days, Emacs alongside DDD was the only way for me to get some of the Borland IDE comfort in UNIX land.
Well, in Smalltalk everything everywhere is an execution environment; anywhere you can type, you can highlight and execute code. But it seems we have different definitions of REPL, to me a REPL is a command line; a textbox isn't a REPL, it's a workspace. Sure they're both code executions environments, but working with them is vastly different.
Nope, it's all money. The latter has a promise of convertibility by the issuer, but this promise can fail.

The only promise that can't fail is the promise to redeem for an alternate form of the same currency (fiat-backed bonds from the issuer, like treasuries e.g.).
Spent a couple minutes figuring out how to spell "butts":

[[]+{}][+[]][++[[]][+[]]+[++[[]][+[]]][+[]]]+[!![]+[]][+[]][++[[]][+[]]+[++[[]][+[]]][+[]]]+[!![]+[]][+[]][+[]]+[!![]+[]][+[]][+[]]+[![]+[]][+[]][++[[]][+[]]+[++[[]][+[]]][+[]]+[++[[]][+[]]][+[]]]
I think those EU applications are mostly a front for Nato expansionism...
> put their constituents in harms way.

Such is the way of leaders throughout history. For instance, Rev. Dr. King deliberately had teenagers get assaulted with dogs, water cannon, and truncheons as a tactic for getting media attention.
Alternatively, there is the iCalendar recurrence rule syntax [0]. It shows how complex recurrency rules can get.

Cron could be considered as a good mix between complexity and brevity (readability).

Shameless plug: I tried to create a format in-between both in a JS project [1]. It is based on the ISO 8601 duration format [2], but it's better to stick to iCalendar.

[0] https://tools.ietf.org/html/rfc2445#section-4.3.10

[1] https://github.com/smhg/date-frequency-js

[2] https://en.wikipedia.org/wiki/ISO_8601#Durations
And they still keep a very tiny bit of it on the "Java Browser" perspective, which is basically the standard way Smalltalk presents the code navigation.
It's a good idea to sell organic weed and sell for a superior price!
Corel Painter 2016 Crack Patch and Keygen Download
I think you're responding to a comment that advocates US foreign policy... I haven't ever made one.

I'm just saying that Facebook and Google can't throw some balloons and gliders in the sky supplying Internet access and call it a day. There are many more barriers to increasing the penetration of technology in the third world.

I also have a hard time believing that the former Cambodian regime would have allowed generators and other supplies from the US to be used by the populace.
You can strap on multiple low end yet cheap VPS servers with Redis. It can deliver decent performance but harder to keep security and reliability together, or if you want SQL go for Mongo.
Normally hydroponics is used instead of aquaponics, but hydros being the Greek word for aqua, being the Latin word for water, they mean the same thing.
I only knew the one from Lucid Energize C++ after they moved out of Lisp Machines business.

IBM also had a version of C Set++ that used a Smalltalk like image database for C++ code, but they hardly managed to sell it as it was very resource hungry for hardware at the time.

It is very hard to find online references to it though, I think I read about it on Dr. Dobbs, back in the day.

A video from Energize C++ for those that never saw it

https://www.youtube.com/watch?v=pQQTScuApWk
Isn't it interesting how React has changed the whole paradigm of "keep html out of javascript"?
Here's a fun game for the family:
Search for "cheesecake" in your search engine of choice and then count how many links you have to check before you find a webpage which does not connect to one of: Google, CloudFlare, Akamai, Amazon, Facebook, Twitter

For me, it was 34 links. And that 34th link was the Wikipedia-article for cheesecake...
You're very right! This is precisely why they
must avoid a situation where civilians think they have a chance.

Imagine you're one of 20 soldiers guarding a bridge.

4 people come to cross. They look at you, see that you're 20 and don't like those odds, they won't even attempt to cross. But even if they get funny ideas, you can scare them more easily. But even if they're determined, the number of civilians each one of you has to shoot is small: 1 civilian for every 5 soldiers. You can manage. You can direct your shots to be non lethal. You have time to aim and all.

Now imagine it's a thousand people. The civilians look at you, size you up, and they like those odds. They know some of them are going to die overrunning you, but almost no one thinks they will be the one. This makes them go for it.

What's your perspective? You're in a dilemma: you don't want to betray the mission to interdict that bridge, that's for sure. But let's say you're willing to shoot, the deal is the following: if you start shooting, you better not be overrun because once you go that path there's no turning back. This puts you in a corner into thinking "What if they still don't stop" and the number of people each one of you has to shoot on average is huge: 50. 50 civilians for each one of you. In a very limited time frame. You're not in a war zone, most of them are unarmed, and you could know or be related to some of them.

So, do you go on with the mission? Do you shoot everyone? Do you start shooting but then stop shooting? But when you do, you'll be captured, and you'll be captured after killing many civilians..so you failed to interdict the bridge and failed not to kill citizens. It's not like you dropped your weapons before there were any civilian casualties.. Which you can't do either because you have a mission.

This is one of the situations where anything half-assed becomes a blood bath and a "victory" à la Pyrrhus..

Contrast that with a military presence strong enough that sends a signal loud and clear to the civilians they'd better not mess with you because there's no chance they could succeed. Dissuasion to avoid a bloodshed.
Product Feedback
Hydroponics is cultivating plants in water. Aquaculture is raising water-living animals. Aquaponics is the combination of the two in one system.

https://en.wikipedia.org/wiki/Aquaponics
Observatoires des loyers: les données sur le loyer pourraient être simplifiées
I thought it was humor, and not a bad attempt at that.
They've got a very compelling free tier to get you roped in. Works great as a CDN, integrated SSL, great interface, DDoS protection / firewall, page rules - there are just a few of the useful features.

Is there a more comprehensive free tier anywhere else ?

P.S. I'm not saying they are the best choice. They are simply too convenient & comprehensive to get started. With a single click your site can "claim" to be HTTPS even though the upstream connection "may not" be encrypted.
[Satire] The Unlucky Billionare
Write a bash script to manage your cron and you can do the same thing in a terminal. Use http://freecode.com/projects/zenity or something similar for your new awesome GUI tool. I think for most people cron is simple enough to just google when they need the syntax. Although this crontab.guru site is 1000 time nicer than most google searches for help.

I don't think a database would offer anything unless it was managing 1000's of cron servers. Flat text is fine and easier to parse than querying a database and adding a dependency. A database is a huge requirement to ask for to manage a few simple files.
Let's have a "registry".
Current status as reported by government of Turkey:

- Coup attempt claimed to be unsuccessful.

- About 1500 members of military arrested so far. Two senior generals will be tried for treason.

- About 90 dead reported so far.

- Heavy damage at parliament building and presidential palace.

- Airports supposedly reopening soon. (Airport departure list shows "Delayed" for everything except one flight to Odessa.) [1]

- If Erdoğan hadn't been able to make a speech via FaceTime, which was relayed by a TV station, the coup might have succeeded. He also sent a text to his entire contacts list. The amusing thing is that Erdoğan is against social media.

[1] http://www.ataturkairport.com/en-EN/flightinfo/Pages/Departu...
Cloudflare has multiple uses. You may want it for their dos protection for example. In that case it doesn't matter if it's small WordPress site or something else.
Ask HN: How many of you are effectively using CI
All the hardcore hackers out there, how many of you has got a proper CI pipeline set?

I am also looking into quite a few CI tools like drone, jenkins and travis. Drone is pretty good actually. Would you like it plugged into to a existing automation platform?

Like, one platform that does your CI, cloud deployments etc. would developers prefer that? Especially a cloud automation platform like heroku which has got teams management w/ Ci all in place.
Damn, that one's good.
what about @reboot ?
Experience with Fabrik suggests that a successful visual programming kit requires only three things: Specification of an effective visual and computational interface for each component, interactive access to an interesting (network) library of existing components, and the ability to use and combine these components interactively to build new library components and finished applications.

To maybe get some discussion going: are there any programming kits today that have all three of these attributes?
Intellectual property is still intellectual property, even if a non-profit is using it. Your argument would allow any nonprofit to use the trademarks of any business in the United States, which is clearly neither good for entrepreneurs nor legal.
always wondered by such projects. you have the resources, and you have made analogues of paid services, and that's cool, but what's next? I think you can offer people more than just a free Slack. Do you have any plan to integrate it with commercial products?
Visualize cohorts to draw insights about user behavior
Thank you for your insight .. I did not know you are a part of the decentralization arena.

If I may ask, who or what project do you think is the closest to the fully-decentralized/encrypted/secure/available easily?

I think friendly UI only has to build on the above.
On the other hand, how often do pages that suddenly become popular get hugged to death, because they are just a small Wordpress page on a VPS or shared hosting somewhere? Throwing a CDN in front to catch these traffic spikes can do a lot.
Making immigration the issue at BBC. This is propaganda. Britain instead of trying to solve internal economical problems, caused by greed and incompetence, goes the easy way - demonisation of immigration.
IPv6 at LinkedIn – IPv4 disposal experts
This definitely depends on where you live. Most major cities seem to support at least a few "authentic" Chinese places (and some, like the West Coast cities, NYC, etc, are loaded to the gills with them).
Not everybody has systemd. The BSDs don't (iirc), and for example we are stuck with some Debian Wheezy host at $work, which don't come with systemd either.

Also, lots of operators have decades of experience with cron, and don't want to give up on that easily.

[Update] After reading https://wiki.archlinux.org/index.php/Systemd/Timers I see two more reasons

* You don't have to write a service file to use cron jobs, which makes ad-hoc tasks much easier

* Sending mails is the default for cron, which requires extra work with systemd.
The idea of the data staing once place is fine, but that can be where the key resides? The domain information acts as identity and perhaps also the location of the above key.

Businesses can be built on commodity storage/compute. But these cannot be given the keys to the kingdom, which you currently do with any saas service.
Free SSL.

Enough reasons for me.
>in terms of prototyping, minimal viable products, and avoiding premature optimization

Oh they would love to. The client has to pay for that, though.
NFC would mitigate the "close enough to trigger" attacker
Especially for Minneapolis...
That's a really poor argument.

You can't demand that the universe works in easily comprehensible ways and discard a theory on how easy it is to explain without using math.
Do you have some links I could read up on, or was this just the set up to a poor joke?
Will your tooling let me go offline?
Stealing a Nation – How the UK/US Stole the Diego Garcia Island
This is some terrible branding!
Well, you've reduced the risk of someone MITMing your users connections. So now your risk is of someone MITMing CloudFlare's connection.

My impression is that this will rule out most coffee shop owners from tampering with the connection through their router. Even if state actors can still get at your content, this is still better than "no SSL whatsoever".

Honestly, though, for anything beyond "static HTML on some server somewhere", basic SSL conf. is a 30 minute one-time job...
Probably because it would be impossible to prove that there was an animal there at that time.
"Book of Proof" is about basic objects in higher mathematics and writing proofs (as a human). There are only about 30 pages covering the basics of mathematical logic. So, I imagine Common Logic would not be very related to this book, since CL is much more advanced than the book's aims.

If you are referring to translating the book's theorems for an automated theorem prover, the book is not nearly pedantic enough to effectively do this from the ground up.
This is dependent on the level of fine dining and the locale. A high-end restaurant in an affluent, high density area like LA or NYC can support very high prices while still keeping packed day in day out. And that leads to a lot of money coming in (five figures a day easily). Which is why, incidentally, there tend to be more such restaurants in such places.
Declaring IPv6 an 'Internet Standard'
> why does at least 32 bits and unspecific representation not suffice?

Because that doesn't help you. Static reasoning becomes harder. Dynamic checks (pretending the exact size is unknown) are possible but .. the exact size is statically known (just not to the programmer). It is a waste.

The sentiment is right, but the solution is metaprogramming, not unhelpfully underspecified types.
Yes and no. Ideally the main logic part should have none of the html-like part. Views should be dumb and do as little as possible.

Of course in practice ...

This is def a lot better than what I currently use in production: Handlebars hacked to the point of almost being JavaScript but not really. Then you both have views with too much logic and they're annoying to implement.

At least with React you get the full expressiveness of JS right in your views.
Updates will almost certainly arrive in the Fall to coincide with the new macOS. It's doubtful they'll change the Mac Pro's form, so don't expect a return to tower cases, but the specs will certainly align with more contemporary options.

I've heard that many pros in the pro video editing area are building Hackintoshes. They're annoying to update but they do work and you can keep using your original software. I'm guessing that if you post here then you know enough about how to build a Hackintosh.

Or you could consider a HP workstation alongside a current Mac Pro: http://www.mackungfu.org/MacPronotpowerfulenoughHPmighthavew...
Hopefully this will attract lots of cron experts.
systemd experts are fine too... I have a question for you all: https://news.ycombinator.com/item?id=12084455
With Sprint so bad, it makes me wonder why Google uses them for Fi?
I lost enthusiasm for hyperterm. Commando was awesome.
Update: Ok, yes, found it via Image Search: http://www.businessinsider.com/chart-how-to-execute-a-coup-2...
ADD Programmer here. I've been very productive offline. I would like to work offline more, but since I mostly do web development, thats is really hard.
^ My point exactly.

There are a handful of entities that now control the flow of the Internet's information and that worries me deeply.
It's ugly, simple and flexible. I can live with its ugliness (I don't change my crontab every day, after all) and simplicity and flexibility beat ini format/UX/etc. any time AFAIC.
Often, that description is exactly the kind of site that needs Cloudflare - the blog or brochureware site built by someone with no devops or Wordpress abilities in general - who ends up with a Wordpress site that maxes out at 0.5req/sec. Which then gets a Facebook advertising campaign.
.NET Core Roadmap
I think I smell a Fool's Mate:

http://blog.gardeviance.org/2014/11/fools-mate-in-business.h...
AWS do free SSL certificates via their certificate manager service now, it works via cloudfront their own CDN (as well as other services) which can use s3 as a back-end
> Views should be dumb and do as little as possible.

Yes, just like React advocates.
Honor Killing in Pakistan of Explicit Beauty Qandeel Baloch by Her Brother
To make money I'd assume.
your_server <--- no TLS ---> CloudFlare <--- TLS ---> Browser

So there's a MITM here -- Cloudflare.
If you are asking how they will pay their bills: They offer a hosted version.

If you are asking if commercial software will be available: it already was from the start; draw.io is not open source but could i tefrate right away anyway.
Chemistry in every cup (2011)
> The amusing thing is that Erdoğan is against social media.

It's not like the internet is a regulated place to have a thoughtful conversation. There are not that many countries where the government can risk itself using the internet for its benefit. Freedom of speech is important, but seen how Turkey is bordering Syria, I would not like to sit at Erdogan's place either.
Be nice to nerds
Cutting the cord
Google alerts and/or some kind of analytics service can also (to a certain degree) give you an opportunity to answer discussions while they are still active.
> * TypeScript is actually a good language, and gives pretty darn good correctness guarantees.

TypeScript's main focus is IDE tooling, not correctness. Here is an example on how generics are unsound in TypeScript: http://djcordhose.github.io/flow-vs-typescript/2016_hhjs.htm...

If you want to write JavaScript with a type system focused on soundness, you should give [flow](https://flowtype.org/) a try.
HackerClient: An small web application for my daily tech and sports news
Currently supports HackerNews front page, Reddit world news, Latest Cricket match scores and Latest football scores for the teams specified. Help me make it better. :D