skysight-inc/HackerNews huggingface dataset:
The problem is if you dull HPKP, you potentially weaken the benefit that the really high-profile targets gain and therefore make it less useful for them.

Perhaps the answer is only a small number of websites actually need/want this functionality - and that's okay? Simply dulling it to broaden take-up may have a net negative affect.
Agreed, the secondary characteristics feel somewhat circumstantial to me.

I'm lonely, but sleep a solid 8 hours (except if bothered by other factors such as mismanagement of heat etc which will wake me up). I don't get sick, eat a normal amount and don't feel colder than usual.
Improv-da: How Palantir has made corporate orthodoxy out of experimental theater
Movidus is an Irish company not Scottish.
My first reaction was to ask: 'Why would not these technologies (acquired from Intel-Phi, Altera, Nervana, Movidius) not be successful in their own niches?'

Now I understand that it is easier to coalesce around a champion technology and too hard to navigate around optimising multiple methods. But I'd expect that the differences between them are so large that they would have their own niche implementations.
In my opinion, it is wrong to believe in the two extremes: That there were no revolutionary innovators or to ignore previous work in some areas.

When Wright brothers did their test, planes were already flying thanks to the innovation of lots of other people.

But planes could fly without control and crashed. A solution was needed and the Wright brothers provided it expending very little money: flexing the wings.

The fact that they could come with the first valid solution provides a lot of value for society, in the same way of solving the nuclear problem by slowing the neutrons with heavy water(a crazy idea from a single guy) gave America an advance over the Germans.

The same could be said about the problems yet to solve: who will make the first viable fusion nuclear reactor?

It has to be noted that while the Wright brothers invented flexing the wings, they did not invented ailerons, but a twisting mechanism that was not practical, but they were awarded a patent anyway on them for several reasons ( American protectionism being one of them).

Those patents make America aviation industry lag behind other nations and forced the Government to act.
DANE certificate pinning seems to like it solves most issues HPKP does, without the imminent danger.

It won't stop a dedicated attacker from MITMing a connection if they can block DNSSEC. However, if someone uses false BGP route to hijack your IP, they can't reach your DNS queries.

You'd still be fucked if you connect to a local wifi connection though.
There's a strong movement for Codes of Conduct at conferences. It's a very good idea.

How about a CoC for conference organisers? Some minimal level of professionally? The official statement:

> This conference was started by a group of friends to gather around the love of a shared language and community.

> We are in over our heads.

http://nodevember.org/statement.html

Is zero excuse. Don't organise a conference if you can't organise a conference.

If Codes of Conduct are meant to protect attendees from incumbent inequalities and prejudices, what hope do we have if the organisers behave like an old boys club who keep out people that aren't like them?
NoFAQ – A tool that corrects your console commands
I know that MicroPython was ported to the ESP8266, so presumably it will eventually come to ESP32.

I suppose that's probably going to be easiest way to get things done with it... or at least a really popular way.
8 Benefits of Automated Performance Management
I think the wording kind of gives it away. I don't think cars or other vehicles would be described as "horseless carriages", but rather "gas-powered carriages" or something that suggests what replaces the horse.
I think bi-directional WiFi is out when running on harvested energy, the best you could probably do is to send out a single UDP packet.

That's why IoT applications tend to use other, simpler and lower power radios and protocols.

https://en.wikipedia.org/wiki/IEEE_802.11ah

Is very interesting but I'm not aware of any SOC that supports it.

> It would be really sweet to run something which speaks wifi even for short durations, if it recieves its energy from ephemeral radio.

One interesting source of power is a simple coil-and-diode to harvest radio waves, do this for a while until you have enough power to boot your device, take a reading and send off a sample.

A few mW for a few seconds every couple of hours or so would be a good target. 100's to 1000's of mWs would take so long to harvest that you'd likely never get there because of leakage.

And 'speaking' is the right term, I don't seen an easy way for such comms to be bi-directional without a lot more power to be consumed.
afterthought: I wouldn't actually call HPKP dead. It's a prerequisite if you want to do any PKI related functions on your site. E.g. <keygen> support was dropped by most browsers and the industry is heading towards native clients. Nevertheless WebCrypto[0] is supposed to offer the same type of quality and you need both HSTS/HPKP if you want to secure your implementation in any meaningful way.

[0] https://www.w3.org/TR/WebCryptoAPI/
> Are GitHub gists actual git repositories?

Yes

https://help.github.com/articles/about-gists/
I'm tracking the dependencies of libraries at: https://anclafs.com (ASP.NET Core Library and Framework Support)

Prefix is on there so I'll update it to support .NET Core in addition to the ASP.NET Core it already supported (on .NET 4.5).

Migrating anything big is probably a bad idea but for new projects Core might be a good option.
It says it was spent on the auditor, that's why I asked.
Topos
Wow. This is absolutely sickening. Police should not have the power to create fake crimes and lure people into them.

This is horrific abuse towards the victims, and gross waste of policing resources that could be used to solve real crimes instead.
Another win for the SJWs.
> Do you contend that you still need PCI Certification even if you're only using Stripe?

Yes, if you have BOP or other form of liability insurance, one of the questions is frequently, "Are you PCI DSS Compliant?" If your legal team feels comfortable with your self-assessment for certification... sure, go with that. When it comes to your business, I think 3rd Party Audits can be quite helpful.

Here's an example question I pulled from an RFP just yesterday:

http://i.imgur.com/R2WCOvY.png

Here's an example I pulled from another client's liability insurance questionnaire:

http://i.imgur.com/1s7zBkd.png

What do you think sounds better, A or B?

A) "Yes, we are compliant, and verified through self-assessment..."

B) "Yes, we are compliant and verified annually with XYZ Certification Company..."

But look, my main point was that with all of this there are non-technical considerations that play in. One team doesn't have all the answers, it takes a variety of disciplines working together to make a company run. Dismissing people who say PCI compliance is not just a technical issue shouldn't be the automatic response.

EDIT:

Let me follow up with another example... let's say you're the developer of an eCommerce system. You set it up to use Stripe and you've done everything correctly in terms of selecting a PCI Compliant hosting partner, etc.

What happens when customer support decides to, after processing a refund, help the customer re-order something? They take the customer's credit card over the phone, and create a new order for the user using the admin tools of the site... they're being helpful and accelerating the re-order process. But... presto you are no longer just a shop that just uses Stripe. How do we ensure that data is being handled correctly, that our staff haven't written down CCs or haven't stored them somewhere?

3rd Party audits can help a company uncover issues like this. And you, as the developer, don't want the liability of saying, "Yes we filled out the self-assessment and everything was great!" because you don't have visibility into how the tools you built get used after you hand them over to the client.

It's worth reading the actual guidelines for self-assessment if you have time, then you know for yourself if something is BS or not. Note that if you don't fall nicely into one of these categories, you don't qualify for self-assessment. (Check out A-EP for stores that exclusively use Stripe.)

* https://www.pcisecuritystandards.org/documents/SAQ_InstrGuid...
Are you sure about that derivation?

I believe the polari version is more appropriate

https://en.wikipedia.org/wiki/Troll_(gay_slang)
With using static, or import static, I guess it's not that big a pain point to actually change.
The point was the double-standard (that shouldn't exist)
That's roughly the context of the case at hand here.

The initial shots were fired over twitter and included a threat of a boycott unless the 'offending' party was removed from the roster.
I'm gluten free. Am I to believe there are no gluten free options available at the conference?!
Just one example of many: Otto Lilienthal - see https://en.wikipedia.org/wiki/Otto_Lilienthal

Under "Legacy":

[quote]

Of all the men who attacked the flying problem in the 19th century, Otto Lilienthal was easily the most important. ... It is true that attempts at gliding had been made hundreds of years before him, and that in the nineteenth century, Cayley, Spencer, Wenham, Mouillard, and many others were reported to have made feeble attempts to glide, but their failures were so complete that nothing of value resulted.

— Wilbur Wright [21]

In September 1909, Orville Wright was in Germany making demonstration flights at Tempelhof aerodrome. He paid a call to Lilienthal's widow and, on behalf of himself and Wilbur, paid tribute to Lilienthal for his influence on aviation and on their own initial experiments in 1899.

[/quote]

You should also read about airfoil history: http://adg.stanford.edu/aa241/airfoils/airfoilhistory.html

Incidentally - I was not really intending on pointing to Lilienthal again, there are too many others, and the design later changed because it wasn't actually the best:

> Airfoils used by the Wright Brothers closely resembled Lilienthal's
> sections: thin and highly cambered.
Bit disappointing to see another Irish tech company sell out early instead of pushing for a flotation. Can anyone more familiar with the industry comment as to whether there was a realistic chance for them to succeed on their own?
Because it is what caused this issue?
>embedding (or welding on) some sort of RFID chip in the frame //

Why not just a low tech BIN (Bicycle version of a Vehicle ID Number (VIN)) stamped in the frame on the upright. You could also have a QR version printed. A traffic warden then could scan a rack of bikes and find any "reported stolen" ones.

Bikes with no QR would look suspicious and you could check the BIN (as would QR-BIN not matching bike style, colour, location). The BIN could be changed, but then so could an RFID chip (or a tracker); ground off frames would also look suspicious and warrant additional investigation.

?

You'd have to convince bike manufacturers to add BINs to bikes, which is likely against their financial interests as they probably sell more new bikes if bikes are more often stolen.
Show HN: Style – AI powered filters for both images and video that runs locally
Apple’s New iPhones Arrive as Glow Fades
Researcher hacks CEO wire transfer scammers, sends their Win 10 creds to cops
This has been posted to HN many times before, this was the most active thread:

https://news.ycombinator.com/item?id=8746883
Only roughly half the world believes in SP's. The other half (like me) believes that writing even the barest of hints of logic into SP's is a serious crime.
Yeah, ten times more, which is great, but I didn't practically run into limitations of the ESP8266 either. Then again, I'm not representative, but I'm saying that even 40K is plenty for most things.
Actually, the v7 and v12 (the most common ones recently) have a single ADC pin.
Perhaps a stupid question, but why not just use something like NodeJS to test your REST APIs? To me this seems more flexible, and more powerful, and simpler to manage (because the scripts are just files on your local computer). And by writing a handful of library routines you can make it even more smooth.
This seems to be very odd. May be someone wanted to make access easy and fucked it up. Then they left it and defined it as feature.

The original feature is may be, that data access is byte wise, but as it is 32-bit CPU the instruction access is double-word wise. As it is also little endian someone may wanted to make the access easy.
It's already on the ESP32, kind of. This device:

https://www.pycom.io/solutions/py-boards/lopy/

is based on ESP32 and is running Micropython; I don't know if their port will be fully open source, though. They've said that they want to contribute as much as possible back to the micropython project, I think?

Edit: here's some info on their contributions to Micropython: https://www.pycom.io/qa-micropython-multi-threading-garbage-...
One of the bullies is actually a 'developer evangelist' at salesforce... I find that ironic.
Sorry to hijack your comment, but Columbus was actually a clown. People in his day already knew that the world was spherical, and that if you traveled west long enough, you would get to India. However, their (accurate) calculations showed that the distance you would have to travel in order to get to India from the west, were so long, that such an expedition was bound to fail.

Columbus on the other hand, came up with his own calculations showing that the distance needed to get to India was actually manageable and that he could do it. His calculations were a joke, and off by an order of magnitude. Luckily for him, there happened to be an entirely unanticipated continent in between Europe and Asia, which he was able to land on. If not for that fortuitous stroke of luck, Columbus would have died on his expedition as a nobody, exactly as everyone has predicted.
It's (speculated to be) flexing PCBs under BGA chips again.

This is a serious problem when making devices thinner: they become more flexible, but the joints are not flexible, so after a while you get a crack all the way across a joint and it either becomes intermittent or capacitively coupled.

A decade ago I had a white plastic-bodied Macbook which developed a similar fault in the graphics. But it's not just Apple, the famous "red ring of death" was a similar problem induced by thermal cycling rather than physical bending.
But it is totally missing from the Espressif website and from the technical documentation (except some interrupts that hint to it).
So innovative! Nobody else ever came up with this, Apple again at the cutting edge! (Typing this on a 2014 Samsung S5. Guess what: IP67 certified, just as the Completely Groundbreaking iPhone that is yet to launch now, two years later)
I never heard of this password manager but finds it promosing
Yeah, IPv6 is pretty important. I only have a few ESP8266 around the house and my DHCP pool is getting rapidly depleted...
Punctuated Equilibrium in Software
I think this approach is wrong. While it may make their library more accessible, Torch installation can be conditioned to use different libraries at least during the compile time. There is no need to package it like this.

I think proper approach would be making their library accessible separately and explain how it should be used with Torch.
The company is under investigation, the auditor has already been fired.
The features of usable API documentation
I wouldn't have a clue where to start. Far easier just to grab a pre-made framework like this.
Does this have flash? I only see it mentioned ambiguously.
Sympy can help get over the fear of following scary looking equations or just speed you up.

http://minireference.com/static/tutorials/sympy_tutorial.pdf
Apache Pirk (incub.): Framework for Scalable Private Information Retrieval (PIR)
I don't see the problem here. If they so desperately want the content removed, then Google should happily kill all of those links right away!
In response to your concerns we took a closer look at our speakers' dietary preferences.. I have good news..

In addition to adding 3 new gluten-free keynote speakers (To be announced) we removed a speaker that does not align with our mission of equally representing gluten-free.

This a community conference to support collaboration among developers with different dietary preferences and we want ALL developers to feel comfortable with the dietary preferences of all our speakers particularly our keynoters.

I apologise this action took 4.1 minutes to cement.We had to formulate the tweets first..
Got it thanks. Interesting. So do the usual router suspects (Cisco, Juniper etc) own this market? Does Google/AWS roll their own solutions? Any interesting startups taking them on?
Integration Tests with Maven (Part 1): Failsafe Plugin
Miami Beach wary of spraying Zika chemical that can “essentially kill anything”
My back-of-the-envelope calculations suggest that solar cells might be usable with something like the ESP32, depending on the environment.

For example, under typical indoor lighting conditions, you ought to be able to get something like a hundred microwatts per square inch. That sounds tiny, but 3 in^2 would be enough for a 0.1% duty cycle, which would let you wake up for a fraction of a second every few minutes and transmit a sensor reading.

Of course, that depends on having a very low sleep current, and on being able to transition between sleep and active WiFi connectivity very, very fast.
Brazzers porn account holders exposed by hackers
Location: Hungary
Remote: yes
Willing to relocate: no
Technologies: Ansible, bash, a bit of python, Jenkins, Maven, Nexus, Linux
Résumé/CV: https://www.linkedin.com/today/influencer?authorId=184353719
Email: gabezzz@gmail.com
Other: devops guy...and very much interested in security
I can think of two:

* Connecting an extra unpowered set of headphones will drop the overall impedance and depending on your source (e.g. a smart phone), you may not be able to get a reasonable volume.

* Related to above, if you have to turn up the volume too high when using two headphones, you can easily damage your hearing when going back to one without lowering the volume.

I have personally been bit by both.
Probably awhile.

I can't reply to parasitius, because his comment is dead, but it's also nonsense.

> Just because you get to zone out all the while doesn't mean your day isn't deprived of an immense amount of time.

I'm glad that Austin is working out for him, but we can't shrink all cities, nor should we. 45 minutes of free time is still 45 minutes of free time.
Very good write-up. From the linked paper, looks like variation matters far more at lower service times than longer ones. Definitely like the data-flow modality, not really sure how the really big-data data-flow packages embody actual data-flow semantics. Seems like most of the backing stores used for redundancy negate some of the benefits (but net you redundancy)
It's weirder than that: within a word the bytes are in order, it appears that "top" and "bottom" of memory have been exchanged. It's as if one address bus is being fed through an inverter.
At the top of every page is the following: "This information is provided for intelligence purposes in an effort to develop potential leads. It cannot be used in affidavits, court proceedings or subpoenas, or for other legal or judicial purposes".

I understand that the NSA wants to hide their sources and methods, but it seems to me (as a non-lawyer), that this goes against the principles upon which courts are supposed to based. If they are going to charge someone with a crime (presumably the intended outcome of such an investigation, if it comes to anything), are they not supposed to provide all the evidence upon which those charges are based?
Subresource Integrity W3C Recommendation 23 June 2016
Show HN: Gulp-detect – support CommonJS, RequireJS and standard browser
I recently had an idea to make HTTPS more secure for the average user: What if Google were to check the certificates when crawling a site, ensuring that its keys did not change in a malicious way.

Now, sites could present a different cert to Google IPs and to users. To solve this problem, the html anchor element could be augmented with the certificates fingerprint. The users browser would make note of the fingerprint and alert the user if something is off.

I think embedding information about a certs finger print or its root CA in links makes a lot of sense, as it would allow a sort of "web of trust" between linked sites.
You can have either energy harvesting or Wifi, it seems. Wifi is quite demanding, hence things like Zigbee and 6LowPan.
Increment Push Notification Badges
Is this a USA, it sounds like they're most concerned that you pay for the lower level courses rather than that you get a properly warranted degree.

Do they accept credits from any other institutions? Isn't there a national agreement on accepting credits for certified degrees?
Researcher Finds Our Vaccines Are Contaminated with Glyphosate
A lot of clients want native PDF output for their reports. None of the PDF generating libraries I know of support running JS. So if you want the same charts in both, you need to generate the images server side.
@everyone

At the beginning, I was inspired by my new girlfriend, who is active and we like running together or play other sports ;) Like @reacweb says - it was about romance and freedom. So originally the product was supposed to be called just LOVE and be in the shape of the heart. I thought since Instagram is using heart instead of like, so what's the problem? I was stopped by my friends, who said it was not wise. Only girls would buy it. Just as a proof, I'm attaching first render we made:

http://velo.audio/img/Velo-heart.png

BTW VELO comes from VE and LO, which are just two syllables from LOVE but in a different order. It means that you can split the product and do whatever you want with this since you have freedom :)
What opened my eyes to where the true innovative roots of SV were planted was a lecture from the Computer History Museum in Mountain View (CA): https://www.youtube.com/watch?v=ZTC_RxWN_xo

TL;DW: It all harks back to WWII and unlimited government spending on electronics (and related) R&D - financed based mostly on never before seen amounts of government debt (https://en.wikipedia.org/wiki/History_of_the_United_States_p...).
Here's the article that the documents relate to, for context: https://theintercept.com/2016/08/14/nsa-gcsb-prism-surveilla...
A page that wide doesn't sound very practical unless you want lots and lots of columns. I was taught that an average 10 words per line is best for reading.
Self learning, being able to pick up a book and learn something new. My university had a trimester system, and everything was fast paced. My university really pushed this skill being on a trimester system.
So you're a respected member of this community, a highly intelligent and rational programmer dude with 16k karma.

And you want us to believe you sincerely think calling someone a fag constitutes a "hate crime", even though the term is nebulous enough to be meaningless?
I see a distinct lack of metadata.
"Your peer cannot accept remote crawls because you need senior or principal peer status for that!"

So the average user cannot contribute to building the crawl index?
Yeah, I've seen similar tricks on ARM microcontrollers that have 32-bit address spaces and tiny amounts of memory. e.g. https://spin.atomicobject.com/2013/02/08/bit-banding/ But the reverse ordering has me scratching my head.

I guess you could use it to support rudimentary multi-threading, with two different stacks growing in opposite directions...
Worth mentioning, BTW, that the original article is five years old. It's ready to go to primary school.
The ARM Cortex-based RTL8710 seems to sit halfway between the ESP8266 and the ESP32, and perhaps has more toolchain promise. Same library/documentation problems, of course.
FP in Java. HA HA HA OH WOW