skysight-inc/HackerNews huggingface dataset:
"The DNSSEC master key securing DNS is about to change. Should we be worried?"

No. Why should we be worried about anything in a protocol which has a deployment status close to zero on the client side?
There's a subfield called soft robotics, which Baymax from the film Big Hero 6 was inspired by: http://www.cmu.edu/news/stories/archives/2014/october/octobe....
Can't talk for Pythran devs and others, but in the case of shedskin, one of the issues is the removal of the “compiler” module in Python 3, on which shedskin relies to, well, parse the Python code. This, plus some syntax changes, that are not really bigger that some that were introduced between, say, 2.6 and 2.7, but that are mandatory and breaking backward compatibility.

So, nothing “hard”, really, you just have to do the work again (and prepare to support two versions for a long time, instead of virtually only one).
How C++14 and C++17 help to write faster (and better) code. Real world examples
Well talking to Americans (actually quite a lot people) helped tremendously.
No, this is exactly what manufacturing engineers sound like when talking about thier trade.

It's a fascinating article full of details about the ways coloring plastics can go horribly wrong.
Ofcourse you are not a pirate :)

But the article ends with a note on piracy, which is irrelevant in this context. Also most people think that torrent means piracy, which is wrong.
"If you are getting paid consistently - through invoicing or whatever means, this is a good signal."

But that's not what happened, because they were late, enough so that people were filing their rent late. How about -- "Startup or not, don't take your employees for 'free credit'"?

Or, more brief: "Fake it till you make it, but don't break the flippin' law".
Please don't! As someone who has unfollowed people and then been confronted (sometimes in person!) over my reasons for unfollowing, this would be very frustrating. It'd be a cool technical exercise perhaps, but socially a bad idea.
Part one is linked, though not clearly, from the article.[0]

Checking the category under which this was posted, Rants, gets you to number two in a single page where a good old Mark I eyeball grep is enough to get you there with some brief scrolling.[1]

(I was curious, too.)

[0] https://asylum.madhouse-project.org/blog/2011/12/13/google-f...

[1] https://asylum.madhouse-project.org/blog/2012/08/21/recruitm...
China: the new space superpower
Ironically tho' delays between keypresses is an excellent source of entropy! So there is a circular dependency here which could be unravelled.

http://www.securiteam.com/securitynews/5UP0D2AAUK.html

Because of this, it is possible to measure keypress AND key release timings _very precisely_, for any console user of a machine we have an unprivileged account on.
For the vehicles I've been looking at recently (minivans, light trucks), buying a 2-3 year old vehicle with ~35k-50k miles doesn't make sense-- I was seeing savings of at most $2k-$3k, and over the (minimum) 10-year lifespan of the vehicle for me, having a warranty and complete service records was much more appealing.
My understanding is that heat is generated by tapping into the battery. There's no coolant to tap into and the electric motor is fan or passively cooled. Because they're so efficient there's no waste heat for the cabin.
Needed: The Opposing View Reader (2011)
The redirection is not a valid way to test ownership as an attacker can easily redirect.
Just curious - what networking/clustering solution you're using?

(I'm asking, so the next time I'll have to make a choice between stacks I would be more aware about the finer details.)

Thanks!
Email mastery
Not really. I made a github thing for it but I don't push often and a lot of my changes have hard coded hacks for things I like but prolly wouldn't apply to others (like I use an xrandr setup but rarely actually use the second monitor except for youtubes etc., so I hacked "full screen" and "switch monitor" to use those coordinates based on my setup.)
thanks for the details, though my rant is more about this behavior in general, and not so much about this specific instance :)
Population growth in the US is approaching 0.7% annually and has been declining for 2 decades. Not sure what scaling needs you foresee.
I believe the issue is with the distribution of bandwidth between many TCP connections. The problem is that each TCP connection is treated with equal priority, meaning that a web page loading through a single TCP connection competes on equal footing with each of your 100 BitTorrent TCP connections, all running at a relatively low speed per connection. If this activity saturates your Internet connection, and you then try to load a web page, the web page TCP connection attempt will be placed in the back of the large queue that has accumulated in your router, and will take 20 seconds to load.

I also believe the asynchronous configuration, eg. 10/2 mbit rather than 5/5 mbit, of most residential Internet connections exacerbates the problem. One thing would be getting a connection attempt out on a 5/5 mbit connection, but you're constantly sending out huge amounts of ACKs of very small TCP packets already (due to BitTorrent), and your outgoing bandwidth is much smaller than your incoming.
> For some reason, the BBC has decided that either adding a login system or monitoring IP addresses that connect to iPlayer is not the way to go and their official line is that they will continue to monitor usage in the same way as they currently do.

Because it is completely impractical.

TV licenses are per property, not per person, so all that would happen is that people would register accounts at a friend's property and keep streaming.

IPs aren't tied to specific subscribers, and giving out a database of IPs to subscriber addresses would be a huge breach of privacy (as advertisers can use it also).

Plus, frankly, the majority of people pay for their TV licenses and this system would just frustrate legal owners. You'd be deploying a system that may impact less than 5% of viewers, doubt it would even pay for itself.
> The only reason you wouldn't is if you don't actually give a shit and you're just working through a list of candidates and trying to get your conversion rate up.

Conversion rate is $number_hires / $number_prospects_contacted.

It seems that indiscriminate spamming would pretty much tank the conversion rate.
Many – including myself – would rather then go and work in a supermarket or even work with the garbage disposal men than working with Google.

Many people just have strict morals and refuse to work for multinationals that try to use their market power and might to influence local laws, or think they’re above the law.

Again others dislike the corporate culture.
Basic Income is a utopian fantasy. It will never have the support of the working class.
The actual package management system for PowerShell modules is PowerShellGet. AIUI, PackageManagement really is just a convenience for providing a consistent set of PowerShell commands for driving arbitrary package management systems, and has no package management capabilities at all itself. It's not Windows-specific, and seems to have been made cross-platform with PowerShell itself.

On Mac, PowerShell Core includes PackageManagement, and two "providers" - an adapter for PowerShellGet and one for NuGet, so you appear to be able to do either:

Find-Module AWSPowerShell.NetCore

(to use PowerShellGet directly)

Or:

Find-Package AWSPowerShell.NetCore

(to go through PackageManagement)

I didn't know most of this until I started poking around, so thanks for asking!
> I don't believe there's reason to be worried;

The only thing I see as a potential concern is that many DNS implementations build the root public key into the server, either at installation or at compile time.

The processes for rotating that key will be tested in the wild for the first time. I can only assume that some set of build/installation processes will have an undiscovered bug during this procedure.

Is it a big deal? Not really, I bet it would be fixed within a few hours.
Fluidics [1] has a long history. For better or worse, it has had a very limited use so far. With the advent of 3-D printing, I am hoping to see more interesting projects based on it. On the other hand, fluidics may not be able to stand on its own as a viable technology; it is possible that the most promising ideas will come from combining fluidics, micro-mechanics, electromagnetics, electronics, and optics.

[1] https://en.wikipedia.org/wiki/Fluidics
I agree. People have no incentive to change unless we name names.
The Climate Protection and Justice Act is stuck in the Senate Finance Committee [1]. If your Senator is listed on its membership page [2], call them.

[1] https://www.govtrack.us/congress/bills/114/s2399

[2] http://www.finance.senate.gov/about/membership
Kim Dotcom calls for livestream of extradition appeal
> You're not cool if you smoke, and you're not cool if you don't drive a Tesla.

PM has been trading for more in the last 5 months than it has in the last 8 years.

Cool to who? Tesla ownership is a sign that you have money to spend but are not informed enough to purchase a vehicle that's worth the money. You might be cool in tech circles, but people that know cars will roll their eyes.
As a Canadian entrepreneur I worry that mincome/basic income will serve to knock the wind out of the sails of many innovators and entrepreneurs who, like me, are currently DRIVEN to work hard, research, push the industry along and crank up competition.

I would much, much rather work hard, earn more money, and feed my neighbour - than have no hope of digging myself out of my situation no matter hos hard I worked, being taxed, and then myself being supported by taxes I lost after they've been spread around.

Rigt now I see a need and want to help by helping to educate entrepreneurs on how to make more money, when I see somebody trying really hard to succeed that makes me WANT to invest anything I can in their success. But the moment people want to pillage my profits Im finding greener pastures. I dont think Im alone in this - if mincome is a big tent that relies on a few strong tentpoles to hold it up and cover everybody - those tentpoles are hard working entrepreneurs. If mincome ever becomes a reality those tentpoles will leave and what was a tent sheltering and protecting people will collapse and suffocate all left inside.
we sourced all our candidates through https://lispjobs.wordpress.com . Given hard requirement of relocation to Australia Adelaide that was very efficient and pleasant experience.

We also tried recruiters and stackoverflow. One recruiter was very good at selling himself to upper management and was pushing unqualified engineers into our throats. Stackoverflow was less targeted than lispjobs blog, but much better than typical recruitment company.

lispjobs was so good that another our practice of flying candidates in to spend a week of hacking together after brief phone screen wasn't that expensive at all.
Multiple vulnerabilities in RPM – and a rant
Can battery electrics disrupt the internal combustion engine? Part 1: “No”
The sarcastic passive aggressive personality in me wants to say "Man, that must have been really rough on you. I'm sorry you had to say no."
People that live near recently shuttered small coal plants have it a lot worse than people that live near nuclear and hydro.

A small community nearby has had some months where their rates have spiked to $1 per kw-h. There's a lot of last mile grid per person and I guess they don't have much of a collective agreement with the provider (the town here buys roughly the same power for ~$0.10 per kw-h). The people getting huge bills don't seem to be real big on cutting their use though.
Wow, I never knew about this API. Seems very ripe for exploitation; check the referrer for an incoming request and route the other tab to a mirrored version of the site, on a host you control, preferably with a "you've been logged out due to inactivity, enter your credentials" modal.
That is not really constructive.

If I were him, I would have replied with something really interesting for anyone at Google (I'm guessing actually recruiters would not care), for example, what would it take me take a job at Google?

Certainly I'm not so arrogant to say I would never accept a job at Google. You will never know the future, so you will never know if 3 years from now Google would be funding the side-project of your dreams...

But even then, there are some things about Google that bother me. And this is what I would have written in an email to a recruiter. Some examples below:

- Stop spending resources on developing bad languages such as Go. (Or at least, really improve it please by adding generics and removing ignoring-errors-by-default. And merge it with Dart, or just throw Dart down the toilet please...)

- Stop tracking everyone and be more like duckduckgo.

- Take down GooglePlus, it doesn't make any fucking point nowadays, it's just useless and shameful.

- Resurrect GoogleReader (I still sometimes begin to write "reader.goo" when I open a tab nowadays), or at least make the code opensource and publish it.

- Open source the software that brings automation to google cars. We need accountability and transparency here.

- Stop the inclusion of proprietary software in Android. And stop blackmailing smartphone manufacturers by forcing them to include these services.

- After you have fixed Go (and flushed Dart), stop pushing for Python so much. If I get hired I don't want to write code that is going to be broken 6 months down the road.

- Same thing as previous bullet, but Java. Move Android to be Swift or C# based.

- Deprecate the stupid GoogleWallet thing and just adopt bitcoin, for once.

- Don't ever stop organizing Google Summer Of Code please (not everything in this comment was going to be criticism).

If these items get fulfilled, I would be less annoyed about working for Google.
It's a really good metaphor for explaining public key cryptography.
Either I'm somehow missing some critical piece of this puzzle or your description is. The master could pick a square at random, leaving you with a board (and likelihood of success) that is still completely random.

Are you supposed to be collaborating with the "master"?
We do something similar with Bohrium[1]. Bohrium intercepts your NumPy calls and compile a kernel for either CPU, Multicore CPU, or GPU and run that instead. It will also fuse together all NumPy calls until one has a side-effect, that the run-time needs.

We are currently building smart filters into it as well, so that we can do byte-code optimizations.

[1] https://github.com/bh107/bohrium
I think you're referring to this puzzle: http://datagenetics.com/blog/december12014/index.html

The version you gave is missing information and so can't be solved as stated.
Right, and you lose nearly all ability to change it later as there will be no basis for comparison.
NIST deprecates SMS as an OOB auth What should you do?
Yes, I guess the designers of the standard library envisioned that programmers can easily make mistakes with the lifetime of iterators, and this is their best way to safeguard against it. Rust enforces the constraints on iterator usage, so this is a clear example where Rust would be a superior language.
Well, what if we already opened the link on a 6.0 Android device? Can I check in some manner whether it's infected or do I just have to treat it as untrustworthy and trash it?
Beware, the return of the Clipper

http://arstechnica.co.uk/information-technology/2015/12/what...
Actually my last therapist starting working through some CBT exercises with me before suggesting we go to a neurofeedback approach. Unfortunately I moved and that provider was unavailable after that so I haven't had time to get back into it. I found CBT to bee mostly the same stuff as everything else in the "self actualization" category.
More potent than adderall?
Its just a modernized version of Platonism.
What is the security like in these meetings? Is any security agency taking part on these ceremonies? What is preventing a terrorist group to launch an attack against this people considering the importance of all of them? I am probably exaggerating because all this reminds me of the not-so-old movies about hacking a la "Mission: Impossible" film series. Do they say that the meeting is going to take place in one place — like in the article it says El Segundo, CA — but actually meet elsewhere? Do the key holders have security 24/7 in their respective countries to prevent stolen keys?

Again, I am misunderstanding the information here, but the keys are actually useless, even if you get your hands on all of them to attempt an incursion against the building where the KSK is, you would not be able to do anything because the security of that place is probably good enough to counter an attack like that, and supposing the attack takes place the other DNS servers would simply disconnect from the root and serve the information that they have until it gets outdated. So the only scenario that I can picture in my head is one where a terrorist attack goes against the building to disrupt the functionality of the whole system for anarchy reasons.
If all DNS went down what would you do?
If all of DNS was taken down or the root servers were taken offline in some coordinated attack, how would you manage to get back online? If a new sort of system was to be created in the absence of DNS, how would it be developed and pushed out? How would word spread?
You have mainly two options: do everything from scratch or reuse. Starting from scratch is almost impossible to do alone, just Chrome was developed by different teams with different expertises, some of them acquired from other companies.

The second option is reusing a web component or browser and modify it for your purposes. Building on top of Chrome or Firefox (or their variants) is a good choice. I think Chrome is better engineered than Firefox and the code is clear. Obviously this is just an opinion.

Now the question is what do you want to add to such browser? Is this something you can add via an extension or is something that requires a new direction?
The point is that you can have those without the fluff and layers of inefficiency that modern programming introduces.
This cat-and-mouse game has been going on for a long time, even outside of spycraft.

E.g. radar detectors are illegal in several states, so of course there have been devices sold to law enforcement to allow them to detect these illegal radar detectors. https://en.wikipedia.org/wiki/Radar_detector_detector

That's all probably moot now. I think law enforcement has moved mostly to using lasers, which are much more difficult to detect.
Oberon was used for writing a complete graphical workstation OS used during the mid-90 at the ETHZ in Switzerland.

It was a language and OS, following the same spirit of Xerox PARC OSes.
in embedded systems? If he is talking about using Python in microcontrollers, he does not know what is embedded system.
OTOH, you can generate paystubs through literally any halfway-decent bookkeeping software. I get running a lean shop, but once you expand from one employee to two, one of your first investments should be in some sort of accounting system in order to make sure every last goddamn penny is tracked with as long and complete a paper trail as possible.

Any good entrepreneur knows that if you don't know where every cent of your VC money is going, you're going to get eaten alive at your next investor meeting or VC round. On the other hand, if you can pull out a spreadsheet that says "We spent exactly xx% of our previous round on payroll, xx% on rent and utilities, xx% on chinese food, etc." you're going to have a much easier time convincing investors that you're a business that knows what the hell they're doing.

Not having decent bookkeeping can't be chalked up to "fast-moving startup woes", it's just irresponsible, and there's no excuse for not being on top of it.
Oh got it, thanks for the clarification!
People who compare oil and tobacco ignore the benefits side. For tobacco, the positive benefits are very small. The oil industry on the other hand powers our entire modern way of life.

* Ever fly in an airplane - thank oil

* Ever ride in a car or bus - thank oil

* Live in a cold climate and heat your home in winter - thank oil

* Ever use plastics - thank oil

* Ever buy something on Amazon and had it shipped to you - thank oil

* Ever buy something manufactured in another country - thank oil

* Ever use electricity on a still night - you should probably thank natural gas or coal

* Ever mail a letter - thank oil

If tobacco and tobacco products were suddenly unavailable tomorrow morning - the world would probably be a better place

If oil and oil products were suddenly unavailable tomorrow morning - it would probably result in the collapse of civilization as we know it and millions of deaths

Let's not pretend oil and tobacco have anywhere near the same pro/con trade offs.
Read Clean Code, keep code small and always have a few tests you can auto run.
Every prisoner assigns every box a random name from the list. Boxes cannot be modified in any way, so every prisoner has to do it on their own. The (unexplained) assumption here is that each prisoner can do that somehow, either in their head or on a piece of paper. It doesn't matter that every prisoner has their own unique assignment of names to boxes.

The crucial part here is that it's not guaranteed to work - but it gives prisoners 30% chance to survive, as opposed to some infinitesimally small number if each picks 50 boxes on random.
What of the arguments that it would encourage entrepreneur by giving them more of a safety net to try new ventures? Additionally most studies suggest Basic Income won't be that much more expense and will save heavily on administration costs, so the tax aspect is minimal.
And get tons of support requests and risk their brand name.
Jan takes a normal box and locks it. He declares the space enclosed by the box to be the "outside," and the world to be "inside."
Oberon was great in the mid-90, but it is stuck in time.

I loved the complete OS experience, but nowadays Swift, .NET Native,Rust among others would be better options.
Exactly. Does anyone know of any standard deployments that actually have the clients verify the DNS key chain?
Thanks for sharing this knowledge.

What can Tk not do, specifically? This thread believes Tk is as good as QT https://news.ycombinator.com/item?id=12380456
Could you enlighten me as to the mechanics?

If my contract says I'll be paid monthly on the 15th, when do I send in the invoice? Are the payment terms net-10, net-30, or longer?

Do I need to break out sick or vacation days as its own line item? What about the deductions?

Who is responsible for figuring out and paying the payroll tax? Because it sounds like asking for an invoice is a way for the company to avoid paying unemployment tax, social security, etc. That in itself would be a red flag.

If the invoice is not paid, can I file it as a wage claim or do I use some other mechanism?

These are the obvious questions. If as you say it a common and normal practice, there must be some place which describes the basic details.

If payroll is hard for a company, why is it any easier for the employee to figure out these payroll details?
Some ISPs do not count upload traffic towards the data caps. This encourages upload/seeding behaviour which results in higher % of local peers, reducing their cost and increasing user experience. From a networking perspective it makes sense as traffic is usually one way from DC towards user. If they can reshape it becomes efficient and cost effective.

Some universities had another way of doing something similar, torrents and similar services are for most part blocked within the network. However local file sharing services like DC++ thrived, the administration is well aware of this, but do not do anything. The few people who get content from outside share internally. Performance was great as sharing was effectively only WAN and the university saved on bandwidth