skysight-inc/HackerNews huggingface dataset:
Digital Ocean – Block Storage Overview
Soon: http://www.bloomberg.com/news/articles/2016-05-16/twitter-to...
There's no such thing as a SNI certificate. SNI is a TLS extension allowing clients to send the hostname as part of the Client Hello, which allows the server to pick the right certificate for the hostname being requested. Without SNI, you're essentially limited to one certificate per IP address (which is what makes things expensive for CDNs if you need to support clients without SNI).

CloudFlare's free plan uses SNI.
This is a super great tool.

If any of y'all are looking for a more modern cron replacement for running periodic tasks with a nice web uis here are a few other options:

* Rundeck http://rundeck.org/
* Stackstorm https://docs.stackstorm.com
* ndscheduler https://github.com/Nextdoor/ndscheduler
I'd argue that a lot of Chinese food is well-suited to American tastes. Certainly not the Guangdong stuff and the cheap animal parts (looking at you, pig and chicken feet), but almost everything else. At very least, everything about Sichuan and Hunan food seems to translate well except for the very spicy fish stew.
What do you mean? Do you want to use peanut butter to save endangered Oklahomans, or persecute Kansans with an aerial food assault? Or do you want to increase the ferret population of Nebraska? Do you want to trick Michiganders into consuming vaccines?
It's not just S3 though. Lots of not-quite fully-featured services like App Engine, GitHub pages, and Heroku benefit from Cloudflare's SSL and other configuration options. For many use cases security is a tradeoff, and trusting one more US-based company can be worthwhile for both users and site owners.
If you care about security, you need to bypass the CDN for login pages or pages that accept credit cards. All images, CSS, and Javascript should have subresource integrity hashes. Then content tampering is likely to be noticed by somebody.
Understood. The exciting thing about sandstorm to me was (and is) that it promised a lay-person easy server and cloud data management. To make this viable, the user would only need to pay for compute and storage.

However, compute and storage providers must not be able to hold user data hostage. Yes, the ideal is hard to acheive, but, for example, nntp had shown decades ago that data storage federation is possible. It's about coming up with the right protocol.

To ensure low latencies, I'm OK with the protocol allowing a server to cache and render recent data, while a
background service syncs to the de-centralized store.
As a non english native, the man page of cron is far more complete and easy to read than many other pages (find, tar, bash, ...)
Completely agree.

For context: wince the foundation of the Turkish Republic in 1923, there have been periodic military coups, notably in 1960, 1980, and 1997. The army's stated purpose has always been to 'preserve the constitution and democracy', as it is this time. While I'm not in favor of the use of violent force to unseat a democratically elected government, the current government in Turkey is anything but. Recep Tayyip Erdogan, the Prime Minister from 2003 to 2014 and President since, has taken many pages out of the Putin playbook, turning the liberal, cosmopolitan Turkey (my former home) into an oppressive, corrupt dictatorship. He has jailed opponents, waged war on minorities, funneled money and arms to extremist groups in Iraq and Syria, built himself a palace worthy of a Sultan, changed the constitution, and vowed to keep himself in power until at least 2023 if not longer.

His party, the AKP, lost its majority in the democratic elections of June 2015, which were largely seen as a referendum on Erdogan's constitutional changes, designed to create an 'executive presidency' that would consolidate Erdogan's power (the Presidency had largely been a ceremonial role, as it is in most parliamentary democracies). The natural outcome of such an election should have been a coalition government and no executive presidency - but Erdogan refused to let his party compromise with any other, and instead called snap elections for November. He spent the ensuing months destabilizing the country by attacking the Kurdish minority in the southeast and stirring up trouble in Syria, provoking retaliatory attacks in Ankara and Istanbul. The elections in November delivered the AKP their majority again, in results that were widely considered suspicious if not outright rigged. In May of this year, Prime Minister Ahmet Davutoglu refused to rubber stamp Erdogan's increasingly dictatorial demands and was forced to resign. His replacement is an Erdogan lackey.

It's too soon to tell who is behind the coup, and how likely it is to succeed. If it doesn't, I fear for the country as it will be mean further curtailment of freedoms, more violence, and economic destabilization. Like with the Reichstag fire, I doubt there will be enough proof to show it's a false flag operation for Erdogan to consolidate power, but I certainly wouldn't put it past him.
The law says you can't do what, exactly?
Every time I go to a German restaurant that people rave about (but more on the family-style dining side of things,) I'm shocked by how similar it is to the stuff my grandparents (on both sides) used to cook.

Meanwhile, when I cook my staples are tacos, chili, coconut curry, and chicken salad.
Because it's not nearly as bad as people describe, it's extremely powerful, it's quite clever, and there's really not even a language to learn -- it's just regex/grep for timestamps.

Cron ticks every minute and checks to see if any crontab entries match the current time, if so it runs the job. But standard regular expressions aren't well suited to the types of patterns people normally try to express which is why they use their own syntax.
Anyone know why Netflix outsourced this?
One reason I know CloudFlare is increasingly used is that I am too often welcomed with a CloudFlare page when I expected to see the site. I am not convinced this is good UX.
To your aside, MITM seems more likely to happen to the end-user, but it is possible to happen at the Cloudflare-->Website side. We already know that the NSA logs all traffic going over certain backbone routers[1], and that some ISPs are modifying non-HTTPS connections[2]. So if your traffic bounces through certain "bad" networks between Cloudflare and your site, who knows what happens.

Relatedly, Tor recommends all users use HTTPS[3], as otherwise the connection from the exit node to the target site is vulnerable to MITM. Given that there are malicious exit nodes[4], seems like a good idea. But, as the article brings to light, that still doesn't make any guarantees of safety.

[1] https://en.wikipedia.org/wiki/Room_641A
[2] e.g. http://www.infoworld.com/article/2925839/net-neutrality/code...
[3] https://www.torproject.org/docs/faq.html.en#CanExitNodesEave...
[4] e.g. http://www.cs.kau.se/philwint/spoiled_onions/ but plenty of other sources
Fair enough, in my case I really couldn't skim and parse it.
Cdist 4.2.0 has been released
Copying from a sister comment on this thread:

> To ensure low latency, I'm OK with the protocol allowing a server to cache and render recent data, while a background service syncs to the de-centralized store.

This would be a help for the UI from the protocol, but the ideal IMO should be something that normal SaaS companies/products hold you on for -- they have your data hostage.

I understand that for sandstorm above many not be possible as you'd have to re-write a lot, and this feature does not hold sufficient priority for the relevant code re-write to happen.

That's too bad though -- I was expecting this need of mine to be provided by the project. Still I wish you the best of luck as you're head and shoulders the better option above any of the current SaaS apps for a personal clouds.
5 4 W * *

Really gave Chrome some grief.
You can - and should - archive your FB data. There's a built-in feature for that and I periodically archive everything for the same sentimental reasons.
If CloudFlare pins the certificates then fine, but if it doesn't, you might as well leave the traffic unencrypted.
V Funny, cheered me up a bit, following so much depressing news recently - Brexit, Nice - Thanks
I don't believe built in federation would be a good idea. There should be a reasonable business in hosting sandstorm. I would like a german or european Sandstorm hoster for example. This would mean my data stays within my jurisdiction and my privacy rights can be enforced. Any data which escapes to the US is open since Privacy Shield is a political joke.
Gil Scott-Heron's message wasn't that you wouldn't see pictures on pages, or screens, from a revolution. The events he witnessed and lived through in the 1960s certainly were broadcast.

It's that you cannot see into the minds of those who are doing what it is they're doing, think what they're thinking, or feel what they're feeling. Pictures capture only the barest essence of the full reality.

A brief interview, late in his life, and much the worse for several drug addictions, explaining that point: https://m.youtube.com/watch?v=PJ4_JYI7_e8

More backstory on GSH: https://medium.com/cuepoint/why-gil-scott-heron-wrote-the-re...
But shouldn't satire be pointed at powerful and not powerless?
Because if I am capable of training a fancy pants deep learning model to do something helpgul, obviously I need a service to host my model so badly giving someone my model is a better idea than paying $10 a month for an EC2 instance.
Sure. Spend a focused 10 minutes to really try and understand them and you'll realize that a cron line is a perfectly concise and flexible syntax for creating scheduled time events. It even handles that crazy case where you want to run on a specific day of the week. Cron lines may seem arcane at first, but then again have you ever tried to write code that was timezone aware? Welcome to a special kind of hell. What I'm trying to say is there's complexity there and you'll be a better programmer if you embrace it.

Unix programmers aren't in the habit of throwing out a working system because it's hard to grok, nor building something more complex then it needs to be. I took a look at your systemd timers link and it is a more complex syntax to create the same effect. From their own caveats section:

> Complexity: to set up a timed job with systemd you create two files and run a couple systemctl commands. Compare that to adding a single line to a crontab.
Learn How Unsecured Loans Bring Optimum Solution for People with Bad Credit
A lot of people who are familiar with cron already, but not with systemd.

But, to be honest, writing crontab is easier task, systemd timers are not more intuitive than cron when you write them, i.e. I personally still look in documentation for various systemd options, but are IMHO much easier to read and more powerful, and have great "systemctl list-timers" view, but unfortunately not superset of crontab options. That's probably the second reason to still use crontab.
Amateur hour. They didn't capture or eliminate Erdogan in the first place. Then they failed to cut off internet and television within the country, so Erdogan was able to rally his supporters to the streets, and the soldiers were obviously (and rightfully) not willing to mow down mobs of civilians.

If you ever hoped to see Erdogan removed from power, this is the worst possible outcome. He will now use this as a pretext to solidify his strangehold on civil society, carry out a purge of disloyal elements of the army, and do whatever else he must to solidify his place as dictator for life.
This whole post is ridiculous and comes off as some personal attack without much technical merit:

- Every big network company is at the mercy of government. Not sure what the point is here... so we should ban all big companies? Everyone from the ISP to the website host to the network equipment manufacturer can and might be compromised.

- Every CDN today is a reverse proxy and MITM is what they do. That's just how it fundamentally works. No magical way around this.

- CF supports websockets now in addition to HTTP(S) for every plan. If you need more protocol support than use a service specialized for that, CF clearly states that they don't focus on mail or game servers.

- Who cares if they do mitigation? What I want is my origin to be protected, that's it. If they soak it up with network capacity or have advanced processes doesn't matter to me.

- Free plans are free, so they have every right to kick you off if you consume too many resources and are getting DDOS'ed all the time. Pro plans also get plenty of protection, you have to be seriously under attack to have them contact you about it. And in that case, 200/month is probably one of the cheapest options considering most other hosts (like AWS) will be happy to bill you like crazy or just cant even handle it.

- The "under attack" option is supposed to pose problems, because you're under attack. It's pretty clear that it's not the normal mode of operation. Don't turn this on unless you really need it.

- Not sure what the issue is with having to whitelist bots with them. A whitelist approach is far better than trying to maintain an infinite blacklist. Also they are more advanced than simple IP filters, that approach stopped working a decade ago.

- Connectivity is not good, even in much of the western world, and varies widely between location, device, capacity, etc. Latency is a real physical limitation that can only be overcome by being closer to users. Try browsing a site in another continent that's not using a CDN and see what happens. Also CF is a CDN, not sure how "use a CDN" was an answer to this.

The only real criticism is their Flexible SSL option that doesn't encrypt the connection to the origin and this has been debated endlessly. I think their recent announcement of free origin certs are a way to improve this but ultimately it's a potential security risk and up to the website operator to understand.

We use CF because they provide DNS, CDN, SSL, free bandwidth, DDOS protection and better features than others for a single flat price. It works really well for us but it's about understanding how it really works and the trade-offs. If this doesn't work for you and your security or business needs, then use something else.
Thanks for the clarification, I didn't understand she belonged to the same party. It certainly puts her opinions in perspective.

I'm not appalled Sky News let her speak, however. As someone outside Turkey myself, I'm not sure how censoring the opinions of any of the sides involved would help or be in any way unbiased reporting. I'd understand if you said it would be even better if Sky News also interviewed someone who supported the coup.
This is what I use when logging in to the state run bookmaker/lottery company in Norway. Works great. I just type in my SSN and I will get a notification on my iPhone. The solution is delivered by Buypass[0].

[0] https://www.buypass.com/?_ga=1.237154944.1017563517.14669318...
That's the point though, if it's in a database you can have any number of awesome tools, text or GUI, to manipulate the state. And you don't need to reinvent the wheel to deal with atomic updates to the state, etc.
> 5 4 W * *

> Really gave Chrome some grief.

You are evil.

It also gave Firefox a lot of grief. CPU usage shot to 100%.
Starting out old: Where is the support for older writers?
Surprised no one has mentioned the northern California coast. There are lots of little towns on the coast, of varying sizes. If you want something a bit more populated, there's Eureka.

I haven't lived in any of these places -- though my wife and I have enjoyed vacationing in Mendocino a few times -- so I can't offer an unqualified recommendation, but it certainly seems like they would be worth looking into.
From an admin standpoint, the SSL/MITM security issue is just huge.

From a user perspective, I just don't visit sites anymore that force me to solve a stupid captcha.

And I also hate the fact that I am additionally forced to submit to being tracked by Google (via the captcha).
German police target hate crime in co-ordinated raids
Crontab generator [0] is a good alternative that doesn't feature broken JS [1]. Moreover, the example and configuration page on the wikipedia page [2] are clear enough.

[0] http://crontab-generator.org/

[1] https://news.ycombinator.com/item?id=12105516

[2] https://en.wikipedia.org/wiki/Cron
استانداردهای بین‌المللی گزارشگری مالی (IFRS)
All kinds of things are used as currency. Checks, traveller's cheques, green stamps, credit cards, food stamps, IOUs, frequent flyer miles, coupons, etc.

They'll often trade at a discount to their "cash value", depending on transaction costs and the risk that it'll be no good.
It's horrific UX.

I use a VPN and I constantly get hit with the cloudflare page and a lot of the sites I see it on are small, amateur sites or personal sites that just need a Wordpress page.

They don't need Cloudflare.

Getting bloody sick of this new centralization of the web. It's a worrying new trend that the very nature of how the Internet works is being reshaped and controlled by a handful of entities.
WebVR being pushed to become HTTPS only
NNTP didn't maintain any kind of privacy of data, though. Once you layer that in, the complexities are tenfold.

It's the issue that arose when I was working on Appleseed. People really wanted a fully decentralized social network, but they wanted to maintain the kind of lock & key access that silos provide.

Federation allows you to have a modicum of control over data, but you still have the "message passing" problem, where once you distribute the information across the network, you don't control what people do with it anymore. This exists, to a lesser extent, in a silo as it concerns the users, but with federation, it concerns the hosts as well.

So people want it fully decentralized, but also encrypted, but also available easily, but also secure, but also user friendly with a decent UX (discoverability, speed, etc).

That's a whole lot you have to balance. It is about coming up with the right protocol, but that's a much bigger problem than that sentence broadcasts.
But unlike Android you can easily install sandstorm.io on different linux distros, in fact I don't even think there is an installable OS image available.
> Spend a focused 10 minutes to really try and understand them

I've spent the past years doing that. I do understand cron. I also strongly dislike it. You could build a thriving city within the bounds of the room there is for improvement.

> It even handles that crazy case where you want to run on a specific day of the week.

So does systemd's cron. Supporting "crazy cases" doesn't mean the syntax has to suck.

> Cron lines may seem arcane at first, but then again have you ever tried to write code that was timezone aware?

Yes...

Re systemd: It's one example; it's not perfect, I wouldn't even call it good, but it's leagues ahead of cron in terms of UX already. Bonus: usage of the ini format means it's programmatically much easier to interact with the cronjob itself.
Mobile Networks all over the world
Why do this when letsencrypt.org provides free trusted SSL certs?
AI User Interfaces
I do realize that drones are not the optimum delivery method for something like this. A big C-130 would probably be better for most all cases.

You already argued why handing out big sums of cash is a bad idea. As you said, shrewd people will be quick to take it. Foreign aid is already little more than a bribe, usually entirely siphoned off by the country's elite. Centralizing the goods in a warehouse or truck makes them easier for a bad actor to steal as well. And as you said, you'd have to grease some palms to get anything happening at all.

As for the rest of what you said, I don't agree at all. A water purifier (or perhaps I should have said a water filter) can be the size of a straw, with no electrical component or moving pieces, and will last for decades[1]. The medical care to accompany the medicines will come with education, and foreign doctors will no longer fear their hospital being blown to pieces. Your cobbler example makes no sense -- as far as I know Afghanistan does not have a thriving computer manufacturing economy. Obviously seeds will be chosen appropriately for the climate of the region they are delivered to.

[1] https://trendguardian.files.wordpress.com/2011/11/lifestraw_...

So, I didn't necessarily mean my initial comment literally. The core of the idea is that direct aid is a much better solution than bombs and military occupation.
Relatively :-) Lobster meat in Maine still runs about $40 per pound. It may be about half that if you cook soft shells and pick your own meat but prices for live lobster are still $1 to $2 per pound higher this year at this time than they were the last few.
It's disturbing that leaders (political or religious) would put their constituents in harms way.

I keep reading that Erdogan is popular, but I also read that he was elected with only 13% of the vote.
https://news.ycombinator.com/item?id=12086034
Don't forget a reliable power grid. The scope just grows and grows... there are no easy solutions to poverty.
Why are Indian and American quizzing so different?
I think Brett Scott pretty clearly defined what he meant when he said "hacker", so there's not much point in arguing about what the word "hacker" means.

The author is insulting people who use the word "hacker" in ways he doesn't like. If the author is going to do that, he should at least use the common definition of the word....
Hydroponics setup might be fun?

Or some kind of robotics project?
X-Forwarded-For

https://support.cloudflare.com/hc/en-us/articles/200170706-H...
wrong direction. Reveals client IP to server, not server IP to client.
No, that's a false way to start with "if you care about security" - Everyone cares about security, not doing what you say doesn't mean I don't.

There are different risks and tolerances for every business and different ways to deal with this. Ultimately everyone can be compromised from the ISP, CDN, web host or even the network equipment maker.

The vast majority of time, these other vendors will be much more secure than doing it yourself. If you accept credit cards, the last thing you should be doing is storing those numbers yourself, this is why we have PCI compliance and other certifications so that trust and capability can be measured and relied on.
Cloudflare "make web properties faster and safer".

Such statements are amusing at best. Seems analogous to an advertisement of a chocolate drink claiming to turn morons into Einsteins.
That's funny. I've used the original ITS Emacs, Zmacs (the Lisp Machine editor), MINCE, Coral Common Lisp's FRED, GNU Emacs, XEmacs, and probably a couple more Emacs clones I've forgotten, and I don't recall any of them having that behavior when searching forward. (They do leave the cursor at the beginning of the match when searching backward.)

Anyway, you can get Aquamacs and customize its behavior to your liking.
Have been playing around with/using it since it became available. My personal braindump wiki is there and I always experiment with new / updated apps.

Huge fan. I also hope to create my own sandstorm apps when I get time.
If you are on free/pro (ddos protection starts on business+ iirc) they will just pass through your A record unproxied after attacked