skysight-inc/HackerNews huggingface dataset:
Ah, so because I use addons I might not be seeing these benefits for some time? Good to know.

Chrome is right now way faster for me, but I prefer using FF so I am in the Mozilla camp right now. Eager to see this rolled out. Early versions of e10s were very fragile and not so usable for me, so I switched it off.
I'm not a Firefox user, but considering that 95% of the time about half my RAM is going unused (well, Windows uses it for pre-caching random stuff it thinks I might need), I don't mind high memory usage as long as I get a benefit for it.

If it's just inefficient, that's a different story.
I find it amusing that a product focused on privacy choose to advertise on Facebook. I bet that being on the front page of HN is well worth those 20k though, but maybe that was the plan from the beginning.
Redlog – Redis style logger for Go
Thousands of South African websites suspended by registry
Income inequality will continue to grow as technology lets us produce tremendous amounts of value with comparably small amounts of employees. Said value is often not accounted for in graphs like these so we can't really know if people are better off today than 20 years ago. I mean, would you rather live today with cheap internet, awesome computer and more free content on the internet than you can ever consume or would you want to live without those things with 10% higher inflation adjusted wage 20 years ago? I know what I would choose, hence I would say that the middle class has gained a lot.

The nice things about those things is that they are wealth agnostic as well. Bill Gates doesn't have better internet than me, nor does he have a better personal computer, better youtube, better facebook, better internet search etc. All of those are extremely valuable and are spread evenly between almost everyone in the west.
And how do you actually interview for these things? What is the quantifiable test you use to determine it? Cause if you don't have one of those, then yes, "culture fit" is a fool's errand at best, and a tool for discrimination at worst.
Those are yet more graceful -- for when the shell is responsive. Use ~. in cases where for some reason you cannot get access to the terminal anymore but remote sshd is responsive.
We could have pulled this off on other platforms as well

I have to ask: why didn't you?
I believe Amazon compensates with equity, so, if you were a co-worker of his, it would be your business if he stayed on payroll.
It's not voiding the cryptographic doom principle, that's one thing. The HMAC is dealt by OpenSSL it seems and is the hash of the timestamp, destination and encrypted payload. It's appended outside of the encrypted payload.
https://moxie.org/blog/the-cryptographic-doom-principle/
https://github.com/shadowproject/shadow/blob/master/src/smes...

On the other hand I agree to switching over to a different mode to eliminate padding oracle attacks.

The IV are 16 random bytes generated by OpenSSL's RAND_bytes.
https://github.com/shadowproject/shadow/blob/master/src/smes...
Nintendo is also known for distributing "pirate dumps" of their NES games as Virtual Console titles. http://forums.nesdev.com/viewtopic.php?t=4412
I did not care much for Hardys opinion about how innocent pure math was. Since it was later proved wrong by nukes. But the novella was a real glimpse into the austere life of a curmudgeon and some of the oxford culture. In addition to the culture of the elite as well, which unsurprisingly respect science and math much more than proles.
The wage share in the United States has been consistently falling from ~64% to about 57% now. (as a % of GDP)

It's quite easy to see that even if GDP grew 12% as someone else mentioned, the change from 64% to 57% would keep incomes at approximately the same level (and perhaps even slightly lower).
Be careful what you wish for. This would basically kill liberal arts programs and the idea of a well-rounded post-secondary education. The incentive would be to transform universities into job-training programs.

I know there is an ongoing debate about the worth of a liberal arts education in the modern economy, but there's something to be said about the traditional notion of education for education's sake, rather than as a mechanism to improve lifetime earnings.

Something should be done about the high cost of post-secondary education and the untenable burden it places on many students, but I disagree that the solution should be tied to job prospects.
FF mobile does this and it drives me nuts. I'll be on 4chan, watch a YT clip, then tab back and FF reloads the original HTML. Apart from being slow (takes a few seconds to rerender it all), it also loses AJAX-loaded data.

My phone reports it has 600MB of RAM free, so I dunno what's causing FF's behaviour here nor how to disable it. I can't always reproduce it, but it happens enough that every browsing session has some sort of frustration.
You can get all the same benefits by firing people who don't work out. Optimizing for zero false positives mean you miss a lot of people who would have been great but were rejected in the name of zero false-positives. Startups can't handle having someone bad be hired early on, because even if they're fired later they've still done a lot of damage. Big companies don't have to worry about that.
Yep, as mentioned, I twice had DMT (HCl) in an enteric capsule within a capsule of synthetic MAOI (Moclobemide) – it was a similar experience to Ayahuasca but there was much more of a mechanical feel to the CEVs, similar to the visuals produced by the Ketamine hole, there was also more anxiety, the plants combined with DMT in Ayahuasca are synergistic, the mechanical feeling could be a subjective effect in the brain caused by knowing the source of the material before consumption.
How about: have a really cheesy wallpapers in the pre-release builds which conveys the message (perhaps with explicit text right in the wallpaper image) that this is not a released build. Also, how about making not-released builds simply expire. The build should know that nobody ought to run it past a certain date. (If such operation is needed internally, it can be rigged with an extension mechanism built into the expiry.)
You are like the 9th person on this thread to make the same banal point about the relationship between DV certificates and the DNS. It's not accurate. See: rest of thread.

I don't so much mind people making the same arguments over and over again on different threads, but when you can read the thread and see the clever point you're about to make has already been litigated, I'm less sanguine.
Do you have any sources for your statistical statement in the beginning of your comment?
You seem to assume that people end up fulfilling their full earning aptitude and, if they are at the 'level' of a nurse, they are obviously not cut out for something more rarefied.

I'm not assuming this at all. I'm just trying to illustrate that implicit costs are real, you just can't necessarily see what they are without delving into very concrete programs. E.g., running your gigantic screening program, the training program for folks with high aptitude who pass the screening, the ones who flunk out of the training program, etc.

If you recall, tptacek and patio11 recently started a startup (starfighter) trying to do something along those lines. They've now moved on to something else.

Now I don't think every single person with aptitude is already there - Zoho University demonstrates this pretty well. But I think exploiting the high hanging fruit is a lot harder than you think.

If we assume that $20M/year traders are the ones skewing the data on the right side of the graph, the question is what is keeping others from entering that field and competing?

Nothing. Trading is one of the most open, meritocratic and low barrier to entry fields out there. Just google how easy it is to get a Robin Hood or Interactive Brokers account [1]. In terms of barrier to entry, it's far lower than something like building a SAAS app.

The only thing that prevents more people from doing it is the fact that predicting the future is hard.

[1] I have an IB account, it took a couple of weeks to set everything up. I'm good at predicting the future, e.g. here's me publicly talking up my book (currently up 15%): https://twitter.com/stucchio/status/747493530277294082 But I'm not $20M/year good.
That was exactly our approach, for the old HTTP API, we kept the same contracts (URIs, response body, etc.) For the EJB one, as only one remaining client was using it, we deprioritized that, but we were going to pick the features they were using, and make the Java client point to the new API implementation, also keeping the same contract.
And who protects the researchers?

The same people who demand this open access also advocate research evaluation criteria that mostly count the number of publications in top journals owned by Springer, Elsevier, etc.
> Well aware, but not having to pay for it makes it more widely accessible. Any nation-state attacker or attacker with the will to also compromise an identity or two will have no problems either compromising a CA or swiping an owned credit card respectively, but will either of these actors really go out of their way to ransom a site for up to a five figure sum? The former has no incentive to make money, and the latter makes money through identity theft as-is.

These CAs have resellers that sell certs anonymously, accepting Bitcoin as payment. If the upside is a five-figure sum, $15 is nothing.

> For what it's worth, we're aware of rapid rekeying with other CAs because Cyph uses rapid key rotation with DigiCert right now and has since before Let's Encrypt entered open beta.

Odd then that you mentioned Let's Encrypt 5 times in your Chrome security report (and reported this to the Let's Encrypt security team, as if it's their problem), but didn't mention DigiCert once: https://bugs.chromium.org/p/chromium/issues/detail?id=620776
Show HN: Nomad Projects
While there are many factors, I'm convinced that our most popular social media platforms, Facebook in particular, cause depression.

It's anecdotal, but when I stay off FB I feel better about life. When I compulsively browse for hours, I feel terrible about myself, my friends, and the state of the world.

Intriguingly, Facebook has started doing sentiment analysis, putting them at risk of discovering with statistical rigor that their product causes depression. If so, their position right now is no different from the tobacco companies, in that they know that they're making their users sick.
This is pretty much exactly why I stopped entertaining offers in the Bay Area. I was flown out once for an interview, but a few hours of driving afterwards around areas I had been looking to live basically made me swear off the whole area. What is the appeal, especially with the cost of living? I can see SF maybe, but the cost of living there is even higher, and I'd rather be in NYC if I am paying NYC prices.
I've worked remotely for 3 years, for 2 different companies, and as with most things in life, there are positives and there are negatives.

One of the biggest negatives for a remote employee, can occur if the entire company isn't remote: You're left out.

Regardless of how much code you produce, how well you communicate on slack, how attentive you are to emails, or how perfect you are at attending all the meetings... Bonds form in the office. If you're interested in forming relationships, making connections, and nurturing the social side of your career, be cautious of remote positions.

Either work for a company that is 100% remote, or, be aware that you may face a situation in which you don't feel entirely connected with the rest of your coworkers.
I think your comment contains more substance than the article, and I'm glad you made it. Silicon Valley is only moderately nice. Many other communities in California offer better architecture, larger lots, better managed traffic, and more access to nature. The rest of the U.S. wildly exceeds SV in terms of what owners get for their property value.

I think that the premium of living in Palo Alto is the access to opportunities. Being able to have a short commute to some of the highest-paying jobs in the world should carry a large cost. Even a "poor" family of a lawyer and an engineer can expose their children to fantastic opportunities. If the engineer's company goes under, she can transition to its competitor across the street. I'm exaggerating a little here, but opportunities are great for people already in the constellation of trendy tech companies & startups.
We saw about 20% overhead going from one process to two.
Show HN: Fluent Actions for ASP.NET Core MVC
One way was going to graduate school. You can get federal loans for grad school at up to the entire cost of attendence. For law school or medical school that's 80k a year.
Looks like! http://www.cultofmac.com/193769/purple-lens-flare-problem-oc...

Don't know how I missed that one, maybe because it's not as serious, but I'd say it still counts.

I like my iPhone too, but I am curious what other problems are out there. Seems like they've been pretty solid for the most part, but I say that out of potential cluelessness, not defensiveness.
I use quite a few add-ons and my e10 was disabled because of them. I force enabled e10 using Mozilla's guide https://wiki.mozilla.org/Electrolysis#Force_Enable and didn't notice anything breaking (yet).
> What exactly are western values, other than a not-so-subtle way of asserting hostility to Muslims?

For example that no death threats are spoken when a daughter defies her farther's will who she is supposed to spend time with. That caricaturists, satirists and atheists are safe. These are things that western cultures have established, and which could arguably be endangered by letting in refugees by the millions and by prohibiting cultural criticism at the same time. I am myself not convinced of the urgency of this threat, but I think these are some of the more convincing arguments against Merkel's refugee politics. Other arguments are for example second order effects or equilibrium effects, e.g. that conservatives, professionals and business folk amount to a counter-reaction that is worse than letting in refugees in a more controlled way (i.e. Brexit and brain drain).

> exactly the same people who hate gays and feminism in the first place.

I have no idea about the numbers, but I am pretty certain both groups exist. Those who use these arguments as pretense and those who are honestly concerned about the efficiency, safety and trust our culture has established (which e.g. allow us to focus on education, art and science).
I'm one of those people who hits multiple diversity/minority characteristics for various reasons, which means in any group where we are all minorities, I'm the minority of that group for one reason or another.

All groups of people selected for some characteristic - whether it's "works for this company" or "wants hillary elected to office" or "was persecuted historically by X" have their own reflexes that exclude "outsiders" or "anyone who is associated with X".

Often at contradictory directions to their stated intent. For example, gay people supporting a candidate who has spent their entire career opposing gay marriage, over candidates and a party that has supported gay marriage for their entire career (and back to the founding of the party.)
Our scenario looked a bit similar to yours mate!
AirbnB uses R to scale data science
Just like with everything else, if you have the time and skills to do it yourself, then no. Otherwise yes, get help. If you know exactly what needs to be done and how, then hire a freelance specialist. If you know something needs to be done but not sure what or how, then hire a consultant.
> Not all - only a subset of certs issued

I'm not sure I follow. My point is that if you're arguing that a DNS query is some kind of added complexity, then I have bad news for you, because DNS queries are already a part of all domain validation methods (whether it is email, HTTP, DNS, etc.)

> because the USER can't tell. The user is under the impression of increased security (because upgrading to browser version X.Y said it now supports CAA) yet the user doesn't know which cert was issued by a CA that checked CAA. And you can't add yet another indicator to the UI because the user is already numb from just the certificate itself.

This has nothing to do with browsers. It's a mechanism to improve the CA domain validation process. It can help mitigate certain vulnerabilities in the domain validation process. For example, WoSign recently mis-issued certificates for github.com due to a bug in their domain validation system. If they had used CAA, and github.com had a CAA record indicating WoSign is not permitted to issue certificates for that domain, it's quite possible that the certificate would not have been issued.

CAA is not a replacement for HPKP, and no one is arguing that. It's an useful defense-in-depth mechanism that could help prevent mis-issuance in many cases, but it's not (and never has been advertised as) a solution to the problem of a fully-compromised CA. In addition to that, as has been mentioned in this thread, it might be useful in mitigating RansomPKP to a certain degree in the future.

> and as I tried to point out to you, it's ineffective against the threat of an attacker gaining access

No, you have not pointed that out. I have pointed out that you need access to the DNS in order to change (and bypass) CAA records, whereas you only need control over the web server in order to obtain a certificate that can be used to ransom a domain.
If one of the project devs is reading this thread:

https://github.com/shadowproject/shadow/blob/f3fa333f8377688...

That's really hard to read.

Also, don't use OpenSSL: https://paragonie.com/blog/2016/05/how-generate-secure-rando...
Love the Chrome autotranslation of the linked Taobao store:

"Sorry, this baby has the shelf temporarily, you can browse other baby"
I pay ~7.5% for myself and my spouse. We have four children covered by the state's expanded Medicaid provision. State and federal taxes and budgeting make it impossible to estimate not only how much I am paying for that portion, but how much anyone is paying for it... Probably not another 10 percentage points, though.
Servo is "just" a new rendering engine, though, not a whole browser.
https://news.ycombinator.com/item?id=12219043

you can see this previous discussion. many people who own both claimed they shelved oculus.
Thank you for being charitable about my whinging comment, but I need to challenge you on the idea that parents moving to Palo Alto are exposing their children to fantastic opportunities. Palo Alto doesn't have the best public K-12 in the country, and it's not an especially nice place to grow up, is it?
I assume you guys (or gals) are single or DINKs :)

School districts are by far the biggest driver in South bay.

I'm personally not sure about SF.
HN prefers to use the titles from the original site.
Tesla’s Elon Musk: “I ran out of cash”
We sure can, if just IT professionals spent 500 a year on lobbying change it would dwarf all the existing lobbying efforts + election packs combined.
Needs a way to downvote bad data. Someone put in:

Command: ls -l .bla
Error: [ no output ]
Suggestion: ls -lah .bla

Is this real?

Which environments have a Unix-like ls which refuses, without -a, to list an explicitly named entry which exists, but starts with a dot?
I run an ayahuasca clinic in Upstate NY. I make all my own preparations and tend to the ritual aspects as well as guide people on trips. I've been doing this as my profession for several years now, feel free to ask any questions
Curious: What happens when, during a call, you lose signal and don't recover it? If the call doesn't drop, does it just stay connected, waiting for the signal to come back?
It's not just for profit schools. There are a ton of private non-profit schools that operate the same scam. Instead of paying off shareholders, they operate to keep the organization going for all the people who make their living off it. Even many public schools run programs that are scams or just deliver such a terrible education that they aren't worth operating.
Oddly enough, both of the points you bring up are handled perfectly by zsh's built-in correction. zsh will only suggest 'ls' for 'sl' if 'sl' isn't installed, and it'll catch 'fksc' and 'chomd'.
iirc, enter-~-. isn't anything to do with the remote sshd. Instead, it escapes to the local ssh client (enter-~) that it should close (.). Which is really useful for if the remote sshd blew up, or, more commonly, your connection was broken.
School districts are the biggest driver all around the country. If you stipulate that Palo Alto is part of a major metro area, and you can choose to work in any of the major metros in the US, you don't pick Palo Alto for the schools, do you?
You are kind of contradicting yourself: Nothing is really new! Except the theory of relativity, proving ideas are hard!
>Article doesn't mention any steps the organizers are making to fix it

That's because they are making none. The "steps" (rituals) of Hajj have been the same for over 1400 years, there's no reason for such accidents to happen when you:

Know where people are headed.

When people are headed there.

The number of those people.

And most importantly UNLIMITED fucking ressources!

Knowing that many people lost their lives because incompetent idiots can't manage shit infuriates me and especially when a royal Saudi clerk (can't find an English source) says that the Sub-Saharan victims were better off dying in the "holy lands" than in their messy countries.

I am so glad I've renounced my religion, people often poke fun at the materialism of christianity by mentioning Indulgence and not realize Hajj is the most exploitive religious act anyone can engage in.

In essence, fuck the Saudi Royal Family.