skysight-inc/HackerNews huggingface dataset:
I think we should just pull the rug out. Site operators need to be more aware of which CAs they're using, and need to feel some of the pain from the failure if they're going to shop for CAs based on anything except price.

The behavior of consumers in the certificate marketplace is part of the systemic problem: nobody cares very much about their CA, as long as it causes the little padlock to display correctly (and, more importantly, for warnings to not display) in users' browsers. That's it; beyond that it's a race to the bottom on price.

If a few CAs went down in flames and in doing so created a nasty firedrill for all their customers (which, on the scale of firedrills, getting new certs issued really shouldn't be that big of a deal, compared to a zero-day vulnerability in some piece of the server stack, which happens fairly regularly), suddenly there might be an interest in acquiring certificates from somewhere other than the cheapest-possible source.
Their business model has always been MITM, sniffing and modifying content. They do not just blindly pass traffic. Cloudflare and end-to-end encryption are incompatible. They need access to the traffic. What is troubling is how easily they can fool customers or end users into believing that they are offering satisfactory encryption when in truth they are not.

Stepping on to soapbox... TLS needs to be replaced with something simpler, with fewer "buttons, dials and knobs". TLS pontificators need to separate authentication from encryption. They are two different problems, and it's possible we may only have a satisfactory solution for one of them. If that's the case, and it's the former problem that remains unsolved, then it could be worthwhile to reconsider the relative value of encrypted "channels" versus per packet encryption.
When i noticed the posting mentioning CoreOS and Red Hat i found myself thinking that both of them would not mind seeing Docker go belly up. This because both are in deep with Systemd, and it is at this point offering a straight up competitor to Docker.
Never mind YouTubers. I regularly see undisclosed advertisements on national broadcast television shows, like Good Morning America, to name a particularly egregious obfuscating advertiser. It is completely obvious to me when something is a (likely paid, somehow) promotional advertising rather than informational reporting.

It is obvious to me when ABC constantly promotes content owned by its parent company, Disney. But I often have to say to my spouse, "You know that's an ad, right?" and hear the response, "Whaaaaaat? No way, really? Now that you mention it..."

There is still a cohort of journalists hanging on to their last shred of professional ethics that will always disclose both paid consideration and corporate relationships between the subject of a story and their employer, but they seem to be slowly dying out.

YouTubers are the least of our problems. Native advertising is already firmly entrenched in mass media.
I take a center position that people generally mean what they say, and that other people can't make you say racist things. I also judge people badly (let's be honest, as cowards) who choose to attack the weak when they get frustrated or angry.
> Unlike the WMDs that were never found in Iraq

They were found: http://www.military.com/daily-news/2015/04/03/army-seeks-to-...
Apple should pay what is due, not what you or Apple think is fair.

The core of the issue is that the EC has deemed the tax rate applied by Ireland to Apple is in conflict with the Agreements that Ireland has with the EU, and that has been so for a long time. The agreements that Ireland has have to be, in these matters, according to EU rules - as Ireland has accepted when joining the EU. That is the point of the EU: a set of rules that your partners will impose on you whenever you try to abuse them, exactly as you will impose those rules whenever they try to abuse you. It's a legal framework for collaboration, which OF COURSE means sometimes you will be forced to do things you would rather not to.

After the ruling, the EU is requesting repayments of the taxes not paid since the investigation started. Is not retroactive legislation.
I checked out Brave yesterday for the first time and I think it does most of those things.
Wow, those numbers really put all this into perspective.
Ask HN: Do you read a Golang's package source before you import it?
I just asked myself how secure a Golang package is. Isn't it possible, that i.e. a database driver package gets compromised, and all my credentials are pushed through net/http to some external server?
ContainerX is now a part of Cisco
https://curl.haxx.se/dev/source.html
There was that twitter chatbot that learned some pretty awful things pretty quickly:

http://www.theverge.com/2016/3/24/11297050/tay-microsoft-cha...
Well, these customers are extreme in the other direction... JBoss 4 on Windows 2003? What could possibly go wrong, it has been working fine for years...
The above list is a good start. I'd add: 2a) make clicking on links work, and 3a) display images. Those two features will make it much more fun.

"How to make a browser" is something I've thought about for a while, ever since someone suggested it as an interview question. (I think it would be an awful question.) It really depends on what you're trying to do. If you want to understand how browsers work and build a toy browser, follow jbb555's list. If you want to display web pages, use WebKit. If you want to build a real, commercial-scale browser, I recommend a large team, since there are a lot of components, each of which is insanely complex. (Everything from CSS support to security to plugins to JavaScript to bookmarks to a debugger to all the new network protocols.)

One more thing to add to jbb555's list: 0) "telnet news.ycombinator.com 80, GET /" - playing around from the command line can give you a good introduction to what really happens when you access a web page. (Edit: HN returns an error page for a plain GET. google.com returns insane code. apple.com looks like a better place to start.)
I believe the saying is "Lies, damn lies and benchmarks".

That said, he does make a case that elm is competitive with other frameworks, which is all anyone should take from a language benchmark, in my opinion.
Because you must be a criminal if you believe in a constitutional right to privacy in your personal effects.
It is Ireland's "right" to tax companies however they want, just as it's the company's "right" to configure itself to minimize it's tax exposure.

Both of these are entirely ethical.

The EU sees dollar signs for its budgets when it imagines how to charge Apple a few billion in fees. Simple as that.
Consider, when describing an arbitrary and even perhaps notional human in the singular, using literally any pronoun other than 'it'. Neuter humans are very rare, and, at least in English, using grammatically neutral pronouns to refer to humans has a long and unlovely history.

Use the singular 'they' instead. If you find that too grammatically egregious to be borne (as I do), alternate masculine and feminine pronouns (as I do). Or default to the feminine pronoun except when speaking specifically of someone male. Or default to the grammatical, if presently unfashionable, collective use of masculine pronouns. Just, seriously, do something that doesn't entail referring to a human as 'it'.
By giving up? ;-)
Interesting, but very light on documentation.
Can the bots even find out how much gas they have available?
Apple Ordered to Pay Up to $14.5B in EU Tax Crackdown
As the proverb goes, "Choose, or someone will choose for you."

rkt is getting into Kubernetes as an alternative runtime engine:

http://thenewstack.io/kubernetes-chief-we-back-docker-althou... (2015)

http://blog.kubernetes.io/2016/07/rktnetes-brings-rkt-contai... (2016)

Back then it was, "It's sad to see so much drama; Docker engine has much more traction." Remember all of that?

The story is now, "hey, rkt lets us test out our framework for supporting alternative runtime engine".

There's a shifting attitude there. Goodwill from the community is eroding. I don't know how long this window will remain open, but it won't remain open indefinitely.
Yep, if you can prove those are 100k engaged followers. Similar rates in the email marketing industry for engaged subscribers.

It's not that high - consider the value. Linking your brand to a "trusted" celebrity, their endorsement of the product itself, and targeted exposure to specific markets (and this exposure is targeted by virtue of the celebrity - selling makeup? Use a Kardashian. selling shoes? use an NBA player). Those three things are quite valuable.
Well, this is what I could do in that (or almost any) case:

1) Setting features, key points, points to avoid, and goals of the project.

2) Choosing the toolchain to use, for resolving the points at 1)

3) Coding the features with that toolchain

Step 2, may involve: to read a lot (doc, rfc's, specifications, using search engines with keywords, search for "problems", etc) to look at other people's source code of similar programs, to try other people's tools and libraries and evaluate and compare them, to make integration tests, and to make Proofs Of Concept prototypes.

The toolchain (programing language, user GUI, etc) comes with an ecosystem (I hope you don't aim at rewriting also your $lang libraries for validate XML or interact with devices), so you have to choose looking at both.

To separate steps 2 and 3, use iterations, while you have resources.

If you find an opensource product that full-fills all your definitions of point 1), except a few of them, you can evaluate to start by a patch and a pull-request to them, or a fork :P
Is it still even doable for a single person to write a new rendering engine from scratch? I'm getting the impression that right now it's all about Webkit, Gecko and IE and given how complex things got, I imagine that it would cost an enormous sum of money to write something that, say, can display top 10 Alexa web pages. Things just got too complex.

Perhaps it would be better to have some effort in documenting Webkit code so that more hackers could actually read it and hack on it?
One could legitimately say that learning of patterns is the process of bias creation.
I’ve been thinking about this more for apps in the self-help category, such as meditation, yoga and fitness.

The popular ones are geared for you to rely on them indefinitely; many have "forever" memberships in addition to monthly and annual subscriptions. They perfectly fit the view of Iron Man vs Ultron apps, with the irony that, IMHO, apps in this category should strive to empower users with enough training and motivation for them to carry on their practice after a few months, not compel them to use them “forever”.

Do you have a link to the article? Google Gods did not favour me today.
Direct link to the book Linux Insides: https://0xax.gitbooks.io/linux-insides/content/index.html
Fundamentally if money changes hands for an endorsement to take place it is no longer an authentic endorsement.

The most authentic endorsement you can have is word of mouth. This is simply being the best product on the market. But this would put advertisers out of business, and force companies to make good long lasting durable products. Neither of these things are in advertisers, or product manufacturers best interest.

Ultimately planned obsolescence, and corporation funded advertisement driven product cargo cults are far more profitable. (I.E.: iPhone, 50's-70's auto manufacturing)

Your statement boils down to How can we make corporations care about something other then profit? The answer is you can't. You misunderstand the purpose of corporations.
Yes, the OP's economic analysis is amateurish at best. Also, only the interest part of mortgage payments are a 'cost' at all.
Yep. Linux offered a free unix that was not touched by the AT&T lawsuit and could run on commodity hardware.

Then we had the whole dot-com bust that freed up a whole lot of hardware to run LAMP stacks on, and things really got rolling.
No vue.js?
Not at all. Most companies will never need to write assembly, or anything at that level, so its not part of the stack.

If you want to be that pedantic, do you need to forge the metals you use in your computers since thats part of the stack as well?
> In many parts of the world it really isn't.

It is here, though. In Germany and Austria, a quarter to a third of the population are not part of a registered religion; and many more aren't practising their stated religion.
I'd say, if you have the opportunity and want to go wild skip the DOM and create an equivalent model using OpenGL. All the other Web platform features like the distribution model, resource streaming etc can still be used. It's just that the DOM is the great bottleneck and most of the hours devoted to improve the Web are being wasted on sorting quirks related to the DOM. Maybe yours will be the starting point towards a DOM-free Web! :)
I liked the 6 month writeup, I've seen a ton of these builds but always wondered how things went when reality set in. He did an honest job of stating the pros and cons (I've lived out of a van myself, 2 in fact, mostly in Sun's parking lot).

Hey van dude, if you read this and you get to the Bay Area I've got a guest house attached to a shop like your dads. Be fun to chat and we can fix up whatever needs fixing.
For the love of * (pick your preferred deity, I'm going with Flying Spaghetti Monster), stop benchmarking on ridiculously simple TodoMVC apps.

They are not at all representative of the complexity costs that emerge from real apps, which often mitigate differences between frameworks considerably.

(Apart from the fact that creators benchmarking their own framework know how to optimize it best).
Back door penetration: Lessons learned
Crawling, Parsing, and Indexing Healthcare Data with Concord and Elasticsearch
It would be Net loss for EU.
What does Docker bring to this? This is basically the argument "use your production deployment mechanism to create your development environment". There are lots of ways other than Docker to do this, Vagrant being one of the most prominent.
We knew that WMD were in Iraq, prior to finding any, because the WMD came from outside Iraq.
While I am in favour of such a scheme in principle, it would mean that 95% of Africa and large parts of Asia would move to Europe, which would cause big problems.
Definitely agree with you on the development / R&D. Cork is more a logistical base that's more about the day to day workings of the company, as opposed to coming up with the next big thing.
Thank you my fellow apple fanbois and apple employees for flagging this thread. Has it been on the internal company slack?
> I still just don't see it as nefarious or even weak in terms of security if you set it up correctly.

Sure. With the correct settings it's fine. The problem is their "Flexible SSL" setting, which should be labelled something like "My site is not secure, but I want to lie to my users and pretend that it is." Yes, clients still have to choose the bad option, but CloudFlare should not be offering it to them.
W3C Web Platform Tests probably would be best starting point.

http://testthewebforward.org/
We nailed it with arrays (Jan Knepper’s idea), the
basic template design, compile-time function execution
(CTFE)

One of my favourite things about D is that it has a full compile-time D interpreter. You can do "template metaprogramming", so to speak, in the same language as D itself (it's probably a bit more fair to compare it to how lisp macros are "compile-time").

It's a bit sad that Rust is getting all of the attention in the spotlight, because D is a great, modern, safe language. If you've only heard about D 15 years ago and never tried it again, give it another look. The current D is really a new language, which was briefly called "D2" for a while.

Now, if Symantec could just fix the stupid licence of the reference compiler...

https://forum.dlang.org/thread/lodjbuvdhimrvrdngldy@forum.dl...
When Less Is More: The Costs of Corporate Control
Windows actually trusts 5 WoSign roots by default, regardless of the StartCom cross-signing.

Friendly names:
WoSign
- WoSign 1999
- WoSign ECC
- WoSign G2
- WoSign China
How Trigger Warnings Silence Religious Students
"it's nontrivial for a user to determine whether or not a site is hosted on Cloudflare"

It's easy to detect when Cloudflare is being used. There are multiple ways.
> We should heavily penalise this, as AAPL literally stole money from both US and EU people.

Apple's mechanism of theft: Create products that people want so badly they give Apple their money in exchange for products and services from Apple.

Don't conflate the US Government and the US People. The US people don't benefit from money given to the government.

Please see: Wars, bank bailouts, and "regulatory capture".
Unfortunately there is no way to justify a unicorn valuation if all that you have as an asset is an open source file format.

Consider Vagrant -- like Docker, it's essentially a wrapper around other people's facilities and libraries. Mitchell and co appear to be trying to escape the trap by moving into nearby areas of real value, but there's no meaningful way to monetize Vagrant no matter how popular it is.
Kotlin Koans – learn Kotlin by making all unit tests pass
Author here. True enough on documentation.
About the specific question - they can calculate it from their number of tiles and the bonus for each tile. THAT will require tracking it or scanning for it, which costs some gas too :-)
I'm not sure there is 'no correlation'. But I don't trust the credit industry to not do stupid things...

My credit report often has accounts that aren't mine listed. Balances can be wrong for months. Accounts occasionally show late payments that were on time. The dates are often wrong (sometimes by years) for items, and then little things that are used to verify my identity by many companies can be quite wrong, like past addresses.
I've done a lot of work on monoliths, and a fair amount with microservices. I've never observed the perceived simplicity of the former to bear out in practice; there's just as much complexity, but instead of being reasonably well contained and prevented from spilling across service boundaries, it's smeared all over the application, so being confident you've tracked down and addressed all of it is much more difficult than it has to be.

It sounds like you may be having problems not because the architecture is designed the way it is per se, but because it's poorly documented and hard to discover. There's nothing about the monolithic style which prevents that, or even makes it less likely to occur.
Yeah, it wasn't intended to be a well thought out list.
It was meant to be "just start and iterate" but a little more specific :)
Interesting! I never imagined someone from DoD would respond to my quick analysis.

In all fairness, JD-GUI wasn't exactly great at reversing the class file to Java code and missed quite a bit. I haven't had a chance to analyze it further.

Is there any chance the DoD could open source this application (e.g. on Github, or some other site)?
react fanboys are gonna be a little upset that you showed that angular is faster in your benchmarks. They spent months flooding internet saying react was faster and you're contradicting that.
Western Governors University is an NWCCU accredited school that has programs in healthcare, business, information technology, and teaching. They're different in some ways from ITT tech and the like in their competency-based method and business practices (~$3.5k per semester), but they generally seem to be well respected. The teaching model (or lack thereof) does lend to high dropout rates, but it can be a good model for working professionals. I have an undergraduate degree from WGU and have had (comparable to my peers) considerable career progression that I would attribute to my withdrawal from the traditional brick-and-mortar academic system. I finished my B.S. in 2 and a half years and spent the rest of my 4-year allotment in full-time corporate employment while most of my friends over a year left at their traditional school. I also graduated with less than 20k in student loans, with most of that balance coming from my stint at a brick-and-mortar.
Awesome read - Congrats to Polynome for a hack well done.

Here is Inversoft's account of the events leading up to the hack and the lessons learned.

HackedThat: Mind the backdoor https://news.ycombinator.com/item?id=12390936
This is not entirely true. Precedence works different, sure. But saying precedence has no impact is (at least in the German legal system I know) absolutely false. For example, the German criminal code is sparse on detail and enforcement in courts is largely based on earlier decisions by higher courts. The important difference is that judges are not legally bound by those decisions and they usually don't directly refer to those (except for high-profile decisions) but just re-use the same arguments. But if they don't follow earlier decisions and have no good reason their verdict is going to be thrown out (again, by re-using old arguments instead of directly referring to precedence.)

To bring this back to topic: Litigation one example to establish a known interpretation of the law and then going after similiar cases (which are then decided on a low level based on the work in another case already done) is absolutely common in Germany.

Courts don't want to flip-flop on very similiar cases with no reason - in fact they are not allowed to by the constitution.
As a former Cloudflare customer, I'm pretty sure they're getting plenty of onboarding if they take the time to really request it. I had one of the more pleasant vendor experiences with them, they happily invited us to their office, sat down and walked through the admin panel and all of the settings we could tune, describing them and providing recommended values or asking questions to figure out what the settings should be.

It's a matter of customers not bothering. You can only hold a customer's hand so closely.
That's a very interesting point you are making. Would seem true if one establishes that any off-the-personal-baseline analysis by a human-wetware cost more, the further off the analysed position is.

Your idea would to be to sneak in notions that are outside of a personal, or group, bubble. Do it gently and slowly. It would work if the positions would be presented with known and familiar analogies. In some setup that could work, we think in analogies.

One could argue, that that's what we do all the time - convincing ourselves and others of value of existing or new positions while ever-slightly changing our own positions. Do we want to dress that process up with machine learning, though?
The corporation tax rate in Ireland is 12.5%, and the rate applied to Apple was (eventually) 0.005%: it's the delta between Irish own tax rate and the one applied to Apple that is deemed illegal according to this EU ruling.

If Ireland want a 0% tax rate for all corporations, as far as I know they are allowed to do it. They just cannot afford it.
Laws apply to everyone, but are selectively enforced. This is why this story is about Apple, and not some no-name mom-and-pop shop that is in equal violation of the law.
something something... professional network... something... linkedin
Support for legacy OSes in newer releases would be wonderful but I don't know how hard that is... There's a lot of talk about how the older kernel makes it really difficult.

If you're using CentOS 6 you're stuck with Docker 1.7. There are a lot of enterprise companies out there (I'm looking at you big banking) that aren't ready to move to CentOS / RHEL 7 and trying to get stable usage out of Docker 1.7 doesn't "Just Work" in my experience.

Anyone here use rkt with CentOS 6??
Which state is bets for travel?