skysight-inc/HackerNews huggingface dataset:
"Whoops!" is meaningless. And you can still have sex when pregnancy is possible, simply use an alternative entrance, or use a short term contraceptive option like a condom.

According to actual studies rather than people trying to push an agenda, failure rate is comparable to condoms: https://en.wikipedia.org/wiki/Comparison_of_birth_control_me...
Thank goodness for Europe.
This in particular caught my attention:

"In addition, the HKMA will also introduce a ‘regulatory sandbox’ that will enable banks and fintech startups to test cutting edge technology and services without needing to adhere to the full regulations in the country."

Is anyone aware of a similar "sandbox" program in the US?
Good point. However, at some point publishers are going to up their charges, e.g. because of inflation. How will the cost increases be negotiated? Between the funding bodies and publishers behind closed doors? Or will they be imposed unilaterally by publishers, forcing academics to limit their submissions to pay-for open-access journals? This will bring into conflict the need for academics to publish in top venues to ensure career progression and the budget limitations posed by finding bodies. I suppose this could give momentum to the move towards completely free open access journals, but I'm sceptical given the risks for academics in not publishing at top venues. And although they get a hard time, I do believe there are some costs involved in running a journal despite all the free work they currently get from scientists, so I'm not sure completely free journals are realistic either anyway.

I'm not sure if there are any more details available yet, but I would worry about this turning into even more of a gravy train for publishers. I can't see for example the Dutch government being in any hurry to introduce any legislation that will threaten Elsevier's viability.

Nonetheless it is still a positive step that scientific findings look like becoming more readily accessible for the general public.
We use other applications besides the web browser! Those which run in the terminal (vim, emacs, nodejs, ruby, ...) and also full desktop applications (Photoshop, Sketch and whatnot).
How does one get evicted due to a computer error? Wouldn't a rather simple court case be able to determine that X amount was being paid to be bank every month?
It also means that researchers have to think about the cost of publishing which they before haven't. This should create a downward pressure on prize/upward pressure on quality by the publishers.
A counter to the author's "webserver in 1 line of code" - https://gist.github.com/denji/12b3a568f092ab951456#simple-go...

I prefer proxying of SSL (and automatic generations of LetsEncrypt certificates) using containers so that my web servers don't have to worry about that aspect of configuration.
Simply making the cross section of the iPhone rectangular again would go a long way toward stiffening it up. The curved edges are beautiful to see and great to hold, but they're quite a bit weaker as beams.
There's interesting material at then end of the link chains. Rather than linking to a blog that links to the relevant material, it might be better to share a single blog post with direct links...or maybe a Github repository with direct links in the Readme file.

Good luck.
Regarding your first point: no, they can't. See what happens if they try to exploit the DNS to get a Google certificate. (Notice the last several years of Google punishing CAs).

It is very important to DNSSEC advocates to convince people that our security can't be any better than the security of the .COM zone, which is controlled by the US Government through Verisign. But nobody accepts that level of security today. Arguments that we can escrow all our security with Verisign are DOA, post Snowden. Move on.

Regarding the rest: you can't persuasively rebut arguments by conceding they're correct.
Trying to project the future is hard. That is why we have index funds. Invest in a bunch of different assets to reduce risk. The main issue is there is some correlation between the companies which screws up the math.
Little Flocker for Mac: Protection Through File Access Enforcement
Rails Machine | Site Reliability Engineer | Full-Time | Remote | Hiring Junior to Senior Levels
http://railsmachine.com

As a Site Reliability Engineer at Rails Machine, your primary goals will be to ensure our customer’s applications are available, fast, and secure. Our customers need the best service, support, and products, and we need you to help us deliver.

We offer two main products: managed infrastructure and managed operations. Through managed infrastructure, we provide automation, infrastructure, and scalability in our own data center on our own hardware. We provide both bare-metal and virtualized hosting options for our customers, and you’ll work directly with them to ensure their goals are met through automation, analysis, and hardware. And via managed operations, we provide custom, consulting-based solutions on top of any cloud vendor, as best meets the customer’s needs.

We give our customers the ability to reach out to us like they would an internal DevOps team!

You’ll work with virtualization and container technologies, and setup and automate high availability data clusters (MySQL Galera, PostgreSQL replication, Redis failover, ElasticSearch clustering, Memcached, MongoDB etc.). You'll manage application instances for technologies like Ruby-on-Rails, Django, Node, and Scala (to name a few), and layer on top of those management, orchestration, monitoring, and alerting for fleets of instances. If you’ve ever wanted to work at a scale that few companies do, you’ll find the right challenge here at Rails Machine!

Responsibilities:

* Manage availability and performance problems for customers; automate resolution to prevent reoccurrence

* Pair with other SRE/SAs, mentor junior staff

* Releases and maintains open-source software and projects

* Author blog posts and participate in the community by going to meetups, conferences, etc. as a Rails Machine representative

* Creates and maintain system architecture, design, and implementation

Minimum Qualifications :

* Proficient in Ruby with additional experience in C/C++, Python, Java, or JavaScript preferred

* Significant experience with config management or automation framework, like Chef, Puppet, Ansible, Capistrano

* 4 years maintaining production infrastructure on a Linux environment

* Intermediate Ubuntu system administration skills

* Strong DevOps experience and customer service skills

* Ability to participate in on-call/pager rotation

Interested? Tell us what you'll bring to the team by emailing hiring@railsmachine.com !
>I'm not the slightest bit interested in perfect use failure rates, because humans are rarely perfect

But what other people do is of no interest or consequence to me. I know what I do, thus I am interested in perfect use rates. Which are better than condoms.
Corporate profits aren't as high.
Maybe I just grew up round too many broke as fuck DJs on the dole always partying. There were always decks and vinyl around on the scene somewhere if you wanted to have a go.

Even just making a good mix tape got reputation.

But I guess you have to be near a scene
It hadn't occurred to me to look at CoC as cargo culting but the more I think about it, the more it seems to fit.
Sure, I am extrapolating a bit based on present trends, but this actually kind of happened with Spacemacs, which is an Emacs distribution. On the issue which was opened for including a CoC, the original maintainer was against adopting the Contributor Covenant as their CoC. This was misinterpreted by several package maintainers as being proof of his reluctance to include a CoC in the first place.

This lead to threats of boycott where the Flycheck maintainer said that he would actively discourage the contributors to his project from supporting Spacemacs because of this issue.
I'm the OP of this thread.

I add the example of Ruby's modules, that can be included in other modules and eventually classes. Combined with dynamic typing they provide a way to import very generic functions, even if they end up being methods (everything is an object in Ruby.)

Erlang and Elixir are a kind of trade off between functional and OO languages. Formally they are fully functional but their processes (a first class construct) are objects by all means. Processes receive messages (equivalent to method calls) and respond by sending other messages (the caller must pass its process id inside the original message.) We could say that OOP objects are castrated processes because they don't multitask.

What I noticed is that an Erlang/Elixir application has many function calls but far fewer processes/objects than objects in OOP programs. Processes usually encapsulate the main data structures. The equivalent of a Java ArrayList would be a process but its elements don't necessarily need to be processes. Pattern matching and some syntactical sugar help (example: http://culttt.com/2016/04/11/working-keyword-lists-maps-elix...).

Maybe those languages are a more equilibrate middle ground between the extremes of pure OO and pure functional, with the advantages of concurrency and all the external but mandatory infrastructure inside the language (deployment, supervisor trees, etc. - a part of devops.)
> Seems to me a bit like equipping everyone with armour to make shooting them more difficult. Solving the problem the wrong way?

I don't know, making humans immune to bullets would be an elegant solution to the gun control debate which doesn't involve disagreements over the second amendment, and would make everyone win.
> The technical reasons for this are boring and I really don’t care why; I just want to trust that my filesystem will do the right thing.

Statements like this make me trust a developer significantly less. It's our job to care about "technical reasons."
haha

how about a google for "iphone repair shop" (with double quotes) gives 155k results. Eyeballing a few pages of results seems like the vast majority of results are for real iPhone repair shops. From this I would confidently estimate that there are > 15k and < 1.5m iPhone repair shows worldwide.
> Well, the real risk here is that it creates a new consequence for being hacked by a criminal, right.

No disagreement from me here, which was one reason we set out to talk about RansomPKP at BH/DC in the first place :) That said, I do think this can, and should, be reported to site owners. You're not going to see much innovation if people don't take time to futz around with technologies and see what they can do with them. HPKP has plenty of potential to hurt, but as you alluded to, it's generally just your own feet in harm's way.

> This particular risk though just wallops the owners of the site.

Yeah, that's what the (cough) team was going for.
Precisely - and just like that one line of code is enough to spawn a HTTP server, a different line of code could be enough to spawn a HTTPS server.

It's a matter of improving the tooling. No one is advocating to disable HTTP today, what browser vendors are trying to do is get the ecosystem to a point where that's possible without a significant increase in cost for site operators.

Similarly, HTTP/2 has been tuned specifically for (typically high-latency, low-bandwidth) mobile connections and is practically (at least) indistinguishable from the speed of (optimized) HTTP. This is only going to improve with things like Zero-RTT handshakes coming with TLS 1.3.
Also note that in the U.S., many credit card companies provide an extra year of warranty as part of their member benefits.
My understanding is that both Bell Labs and PARC were owned and operated solely by large corporations (AT&T and Xerox, respectively). Do you have a source on government funding of either?
I think you'd be amazed how small most of the scientific communities in certain areas of research are. If you have the names of a few well-known researchers on the editorial board or in the list of reviewers of an open-access/electronic journal, this will instanty establish its credentials and authority. After all, researchers care mostly about the quality of the work and the results, and not so much about the branding.
It uses Netcat, and it would be much more readable if it where more lines.

I suppose you could take some small web server, written in C, and just remove all newlines, but what's the point really.

The article seems to overlook on aspect of https. It's much easier for the site operator to just serve everything over https. We tried the whole "switch the user to https" when needed years ago. It was cumbersome and we often got it wrong and exposed traffic that was suppose to be encrypted.

The point is well made. We don't NEED https all the time. It's just easier and most of our connections and devices don't care about the overhead.
Russian startup released unlimited storage device which can never be hacked
Sorry, I was being snarky, because there's a secure messenger that apparently did commit PKP suicide.
They are really serious about providing good doc. Here is what sprite_tm (one of their engineers) said:

"Also, keep in mind that documentation is very much a work-in-progress! The techdoc as it is is basically the state of the art with regards to what we’ve finished writing, editing etc. There’s still way more coming up, and the basic idea is to document everything very well this time; apart from some sensitive stuff (mostly the WiFi and BT RF interface) we’re trying to not have any secrets."
Source: http://hackaday.com/2016/09/05/new-part-day-the-esp32-has-be...
Why? whats next? Free newspapers.. free travel.. let's close all businesses.
> It does however provide a limit on how much money each publisher can extract from a paper.

Why should we accept publishers to decide on what this limit should be? Currently it can be as high as $5000. For hosting a PDF. This is a total waste of (mostly public) money.

> It also makes free or cheaper services more competitive.

No because as long as we permit to those publishers to exists and exercise their copyrights on prestigious journal title, their is a big inertia that incentivize researchers to publish with the publishers that hold the prestigious journal.

That's why we also need to get rid of bibliometrics for evaluating researchers for their career. Bibliometrics is the game of the publishers, and coincidentally, the biggest bibliometrics tools are made and sold by… publishers.
'versus "mathematicians" in the sense that they can use advanced math.'

Those people are not "mathematicians", they have other useful names (most physicists, bio-statisticians, some engineers, etc.)

Mathematicians are people who create new mathematics, not people who use mathematics.
> The tweets go on to chastize the conference for being held at a “Christian university”. It is worth noting: I am a Christian. I would challenge that I am in the minority among most conference attendees.

> The acceptance of persons from all religions are part of diversity and inclusivity, as a whole. This is a postion I support and encourage.

> We, as organizers, were being publicly shamed because of our inclusion

> of a speaker, in which another speaker had a preference against.

> This is not tolerance. This is not acceptance. This is not inclusivity.

Wow seriously ? and that person who got Doug unvinvited talks about "inclusivity" while shitting on Christians and getting people kicked out ? I'm not going to that conference that's certain. The person who got Doug uninvited is just despicable. I'm christian myself.

How can one brag about "inclusivity" while saying this kind of crap? hypocrisy at its finest. I hope it backfires.

This conference needs to be cancelled for the sake of the tech community.
is there anything like this for windows?? (please dont hate me)
Why new venture capital regulation is essential to Europe’s startups and SMEs
Yep good catch, thanks
Little Flocker: File Access Enforcement for MacOS
Ask HN: What percentage of your salary are you paying to health insurance?
I pay 17.6% of my salary to health insurance. And that doesn't include my employers portion. Are there any start ups with solutions? Am I the only one?
And the use of Lead-free solder only makes the problem worse (which doesn't mean it was perfect in the first place)
GDP growth and income growth are not equivalent - for example, corporate profits that aren't distributed would count towards GDP but not towards individual incomes.
Did you know you can rewrite jQuery in just 4 lines of code?
https://code.jquery.com/jquery-2.2.4.min.js
>Any search engine is good enough

That's simply not true. Things we take for granted like true multi-query search and sub-second results speeds simply aren't seen in distributed search engines.
Square (www.squareup.com) in New York is growing several teams! We are hiring for Software Engineers and Software engineer managers for new initiatives, including a customized product for the restaurants industry (one of our biggest verticals) and Square Capital, our lending platform. If you are interested in learning more, please contact me at colette@squareup.com
GDP != quality of life or standard of living
Sure, you have that side of the story and then you have this side of the story: https://www.reddit.com/r/sysadmin/comments/4z25cb/hipaa_brea...

"Speaking of PCI, I remember having to tell the PRESIDENT of the company I used to work for that "No, I will not print out the customer database with full CC+3, including their name, address, and phone number. You could ruin the business." Took a while to really make him understand that."

Bad auditors are a problem. But so are Execs who don't give a damn about compliance. If Execs cared, if people cared, the compliance landscape would be a lot more honest.

I'm damn good, and you never reached out to me?
http://www.linkedin.com/in/akshatpradhan

See, people with my backgrounds are who you need to bring in as PCI Auditors. Unless you've felt the pain of a Nagios alert at 5 am, you'll never know how to properly audit an operations environment.

If you need help, check out these sources:

/r/PCICompliance

/r/HIPAA

There's also the ##CompSec IRC channel on Freenode.org

Edit: why the downvote?
That's a refreshing take on life, and so very true. Thanks for sharing!
A Git Workflow for Humans
I Wouldn't be surprised if the DOD was the biggest customer for both.. "subsidy" doesn't mean they were owned or directly financed.
> The gains are going massively onto the people who already own capital. That's the engine of inequality.

This is a main point in Capital in the 21st Century by Thomas Piketty. He explains the capital/income ratio and its effects on the economy. Decent write up here: http://www.robertdkirkby.com/blog/2015/summary-of-piketty-i/
Anything can be done in one line when using existing tools that are made of thousands of lines. This is also a one line web server: python -m SimpleHTTPServer 8080
The issue is that there are, and especially used to be, a lot of very scammy SEO companies. The issue was that a non-technical client couldn't tell it was a scam - Google et al used to be a lot quieter about good SEO practice.
Its scary how little the founder understands about proof of work, golang, or Ethereum. The geth issue that was patched 4 months ago had nothing to do with being 51% attacked.

There's no hashing power dedicated to the altcoin so it got attacked, and this is something that's been happing to POW altcoins for 6 years now. Its not clear how she ever expected the POW consensus to survive a 51% attack, and has not described how the Ethereum protocol has anything to do with the failure of her consensus algorithm. If she was on a bitcoin-based POW chain she would have had the same issues.
I'm amazed at the failure of Facebook in this regard.

They were in a unique position to make it work, and then failed.

With make it work, I mean that everybody moves in different circles, family, work, friends, hobbies, etc. And you need to have easy control over who sees what.

And Facebook has most of it, except that last bit of UI to make it work.

(Not that I like Facebook)
Mike introduced me to a hacker demonteco@yahoo.com and he provided solutions to my problems and also answers to my curiousity. He can help you too be it school grades change, credit, criminal records, delete bad comments, pictures, videos from sites, transfer, emails and all sorts of...
Rewriting Economic Thought
You really need to grow up. Our community was founded on being different. It wasn't that long ago that nerd and geek were pejorative terms. Geeks didn't get the girls form a reason.

My entry to the tech industry was playing games. All of the work I have done online involved dealing with nicknames and aliases. Nobody cared if you were black, white, pink, gay, straight or female. All anyone ever cared about was that you contributed well.

Now everyone has to walk over eggshells to be 'inclusive'. I think its important that we enable all people who want to work in this industry to be able to and to support and mentor others. But this doesn't mean we have to lose ourselves in the process.

If someone finds a joke about floppy disks, or the terms promiscuous or slave/master so offensive that they can't be a member of the tech community. They really need to eat some concrete and harden up.

There are people who put down women and exclude others based upon certain characteristics within the tech community and frankly that is appalling and we should all be working to get rid of them. But incidents like this do nothing to help deal with those people and often make it harder.
~3V @ 90 mA.

https://www.seeedstudio.com/ESP3212-Wifi-Bluetooth-Combo-Mod...

Near the bottom, heading 'hardware parameters'.
> it is because a number of speakers said they would be uncomfortable with him speaking and would not speak and attend the conference

What are the facts? there are no facts, what did Doug do to make these people "inconfortable" ? we don't know. Some people are inconfortable with ,I quote, "white males around them", inconfortable doesn't mean anything, it's just a euphemism for bigotry these days. Just like "inclusivity".
I remember in the mid 90's I used to post all my Usenet messages with a signature containing all the wrong keywords (terrorism, nuclear, Bin Laden, etc) plus greetings to the NSA spies...
Nicotine is a lifesaver for people on the streets. The majority concern is over carcinogenic particulates that occur in certain delivery vehicles of nicotine (cigarettes). Getting cancer in the future is your least concern.

Mitigating the anxiety, fear, and lonliness by using nicotine? That's far far higher up. That's the bigger priority in the timeframe of "being fucking homeless".
Someone who looks at the Adria Richards story and decides "women are the problem", well, that's the actual problem right there.
Just going to write this here so I can come across it days from now as I go through my comments as a good reminder to myself.

Well said.
Hopefully the argument about back/forth traffic in SSL will soon be obsolete if Zero-RTT handshakes are implemented in TLS1.3. Surely this would then be comparable to standard HTTP requests?
Considered by you ... And you explanation is not that convincing.
> it's not for no reason that all cool stuff is made by americans

Damn straight - American TV's sure are the coolest of all!
The problem with this argument is that there are very high-security pages on the Internet --- things that protect people's bank accounts or most sensitive personal information --- and they're not going away. The junction, at the protocol level, between insecure web sites and secure ones is a major design weakness; we would have fewer attack vectors in the long run if we could count on uniform encryption across the web.
>I expect every community member’s voluntary contribution to help amend this theft and move forward.