skysight-inc/HackerNews huggingface dataset:
I figured interesting words would probably start to trickle out about HPKP after the last month or so of talks. Opinions are split on how much damage RansomPKP and other hostile pinning attacks can do. I'm inclined to believe that it's a big enough risk to warrant some action (such as more diligence by free certificate authorities -- the crux of the talk was rekeying at up to 20x per week enabling the attack). Others, notably Mozilla, are taking the wait-and-see approach. Google and Let's Encrypt were the most resistant to changing anything at all.

Anyway, Scott Helme's writeup did a quick and solid job of summarizing a lot of it. It's linked from the Qualys piece, but here it is if you'd rather get to it directly: https://scotthelme.co.uk/using-security-features-to-do-bad-t...

Full Disclosure: I and buu700 (https://news.ycombinator.com/user?id=buu700) did the AppSec Glory talk at Black Hat / DEF CON and developed the RansomPKP attack pattern.

Edit for Fuller Disclosure plus added thoughts: I'd rather not see HPKP die because we've done some cool stuff with it over at Cyph. I'd rather see HPKP be refined with extra requirements, possibly some sort of tie-in with CAA (that little-known standard for enforcing which CAs can issue certs for your domain).

Speaking of CAA, we did a show of hands in both the BlackHat and DEF CON versions of the AppSec Glory talk. Five hands across thousands of attendees. That's it.
Yes and no. Stockholm grows by a relatively large percentage per year, and would grow even more if people could find housing there, but almost nothing is built. Whatever housing is available is condos, not rentals, so the low interest rates work to increase prices because with no rentals there's no other choice than to buy.
Depends on your goals, Java isn't the best if your aim is to learn FP.
> it would leave us reliant (correct me if I'm wrong here) on a lighter weight version of VS.NET so

No, you can just use the normal Visual Studio, with ReSharper support.
Sheesh, you could have made that joke without the unnecessary jab at political correctness, you know. Why drag PC into it?

(surprisingly necessary edit: /s)
No, it would not need to write off the $17 billion, it would simply spin Altera back out again. It was a successful stand-alone company and FPGAs have plenty of applications that have nothing to do with machine learning to make it a viable segment of the market for a long long time to come.

McAfee is a different matter and the mobile market could have been won but not in the way that Intel hoped.
I know it's anecdote and not data but I for one became much more active in agitating against such cases after having been inappropriately dismissed after raising a complaint with HR about a colleague being discriminated against.

I rationalize it as becoming more active in human rights issues after realizing their importance first hand but based on my externally observable behaviour the PTSD explanation could be considered just as valid... and to at least some degree also rings true to me.

So I would say that there is indeed a good chance that a lot of these are caused by PTSD related to previous 'similar' workplace incidents and that indeed preventing those original events will go a long way towards calming the current storm of outrage. Not that I have the slightest clue as to how to do that though...
Another problem is that Google is still caching the "hates design" from his Twitter feed: https://www.google.com/#q=mathieu+passenaud
It probably is? Unless of course it's a smaller, local conference. In which case it would be representative of the local population. So expect a lot of Mormons in a Utah based conference.

OTOH, I bet numbers are probably higher than you might think. Not every Christian is outspoken, and religion seems to be pretty openly hated on - I could see a large % of religious people just being quiet to avoid contention OR because they aren't really practicing.
> very clear that you almost certainly shouldn't be exposing Kestrel to the internet without going through something like nginx or IIS.

Why is that? Will you still have the performance benefit of Kestrel if you use IIS in front of it? How would that work?
>you don't teach students how Euler or Aristotle came up with the idea that they would understand, instead you force an abstraction on them right from the start without them grasping any connection to any part of reality they are immersed in //

Surely because that's history, we don't teach it that way because then you lose the links that have [much] later been found with other areas of maths -- isn't it the linking in to different areas that provides all the power? We want current students to understand a far wider curriculum and realise the links that come out of those abstraction, no?

I guess it's like whether you teach grammar to language students or hope that through language use they'll derive their own abstractions that allow them to understand the grammar sufficient to say things that they've never heard before.

From a history perspective we probably don't know how they came up with the idea, even if their journals (!) had a specific derivation of a proof then that wouldn't mean that was their initial direction of travel necessarily.
I'm not saying they're better but there are alternatives to Google that address specific concerns. For example, DuckDuckgo seems to be getting some traction with their promise to give you privacy.

That pitch resonates with a lot of people. I hope they don't do something that would degrade our trust in that. I think they have a future.

Whether their seach measures up to Google's I don't know. I'm guessing they're not there yet as Google is good but they'll get there and if they stay true to their vision, they'll win over a lot of people. I worry because there are a lot of temptations that could throw a company off it's core promise, especially a solemn promise to protect your privacy, while others offer money to go different directions.
What would be more impressive to me and practical would be spending time contributing to the Linux kernel. That is something that companies would more likely be interested in.
You can actually flash a Meizu and continue to get OTA updates now.
Big telco Telefonica to help users block Facebook and Google to use their data
So Pornhub and every other tube site that allows user submissions?
Perfect fit then: you wouldn't hire him and he wouldn't work for you.
> If you believe in individual freedom at all, then it should be held that the collective force (government) can have no more power than that of an individual, and the government does not have the legitimate authority to grant powers and privileges to one individual (police, fire etc) that are not granted to all individuals.

That does not follow.

What you're basically saying is that you're an anarchist. That's a perfectly legitimate position to take - hell, I'm all in favor of anarchism as a personal philosophy - but it's not a terribly practical method of organizing and running a large society, and if you don't believe in the social contract you're not going to have much common ground with most people.
A useful step. It's worth carefully parsing this section:

"(5)In proceedings for an offence under subsection (1), A has a defence if the following matter is established—

(a)B was in the intimate situation shown in the photograph or film,

(b)B was not in the intimate situation as a result of a deliberate act of another person to which B did not agree, and

(c)when B was in the intimate situation—

(i)B was in a place to which members of the public had access (whether or not on payment of a fee), and

(ii)members of the public were present."

.. which is kind of clunkily worded, but seems to be there to provide a defence for people taking photos of those voluntarily exposing themselves in public. I'm not quite sure how this will be applied to tabloid telescopic voyeurism. A sufficiently aggressive prosecutor could either kill the Daily Mail overnight or force them to admit that most of their "snaps" are in fact staged publicity.
Did you? No? Then you don't have any more information than I do.

Nobody visits a darknet site called "The Playpen" to trade pics of consenting 17-year-olds. For all you or I know, the site never existed in the first place and the FBI set up the entire thing as a cover to silence dissidents. But that would be a problem with government corruption, not with the definition of child porn.
There are workarounds (e.g. the key is also the dongle, like with many cars) but for the sake of this argument, yes, you'd need to carry both.

The car analogy is a good one, actually, because keyless entry has become commonplace in that arena. It's less secure, but so darned convenient. These days, it has become nearly impossible to get a mid-tier, or better, automobile without keyless entry; though it won't happen as quickly, we can expect the same trend with our home door locks. After that, we'll be replacing our locks every 4-6 years, or at around 150,000 miles. Yey, more stuff to go obsolete and throw away!

Generally speaking, the privacy and security concerns that industry continues to ignore are turning me into a Luddite, so I won't be in line for an off-the-shelf IoT device anytime soon, if ever.
I listened to the story of Chrissy. My takeaway is "Before drinking until blacking out make sure you are in the right company!" People may change so practically there is no such thing as "right company"...
Half the time the copyright will belong to the abusive ex partner who photographed them. You don't own your own image.
Nitro PDF Pro 8 Crack Keygen and Serial Key Free Download
exactly, this is what i meant, for simple projects, the cheap costs vs time to invest to get it running was not worth it
Exactly. We must fight back against this dangerous, oppressive trend of conferences giving into threats of boycotts by threatening to boycott any conference that doesn't do as we demand.
I love videos to learn... but as someone working for a company that don't allow any videos through the firewall... written posts are also useful.
That used to be the case, and it was terrible. Still is in Saudi Arabia.
We used to have plain PCI installed. Now, most of our servers have been upgraded to PCI Express. Shall I provide you a hardware report proving that PCI Express is installed and functioning?
You have never ridden a fixxie I guess? The back wheel can be locked to the pedal. Meaning if you stop pedaling you fly over the bars. Fastest stop ever.
Glad to hear. I hadn't seen them mention it anywhere, and since it was such an obvious dealbreaker, I would have expected it to be a major talking point.
No, that's also a hate crime. Just because it's endemic in certain parts of the internet and homophobic areas doesn't make it acceptable.
The Sun slams Corbyn for advocating ‘open source’ software
Languages that were actually designed to be functional-first, but multi-paradigm, like F# also support this.

Though to be honest, not allowing free functions in Java or C# is kind of silly. It seems like the compiler could pretty easily autogenerate a static class per namespace to actually stick them into, so that it would really just be a bit of syntax sugar.
http://www.legislation.gov.uk/asp/2016/22/enacted

The law relates to "a photograph or film which shows, or appears to show, another person (“B”) in an intimate situation,"

which is further defined:

"a person is in an “intimate situation” if—

(a)the person is engaging or participating in, or present during, an act which—

(i)a reasonable person would consider to be a sexual act, and

(ii)is not of a kind ordinarily done in public, or

(b)the person’s genitals, buttocks or breasts are exposed or covered only with underwear."
Domestic abuse may be the correct word here.
Some people were having trouble with guys on the corner smoking pot in the 80s. So we started the war in drugs. Lo And behold crime went down.... Oh wait..
Every time someone says PC you can see what they really mean by search-and-replacing it with "treating people with respect". Such hyperventilation.
Nice to see some competition for Postman. Even though Postman works quite well I never really liked it. Lot's of common actions are pretty tedious, like changing an environment variable and lot's of small annoyances like it automatically following redirects etc.

A while ago I took a stab at building my own Postman alternative, Pragma [1]. What I found was that getting the basic functionality going is obviously not that hard, but building a good and useful UI requires quite a bit of effort.

https://github.com/pascalw/pragma
Did you raise your complaint in a public forum and did you ask for the discriminators to be fired?
What chip would you recommend to do IoT which can run on harvested energy?

What would be the upper limit which harvested energy could deliver? Do you mean solar cells or harvesting microwaves from satellites, I could get about 1.5V or so from about a 60cm in diameter disk, have not measured the current available.

It would be really sweet to run something which speaks wifi even for short durations, if it recieves its energy from ephemeral radio.
Does anyone know if they actually support learning on the chip or does it just execute a pre-trained model efficiently?
the issue is that HPKP is as user friendly as GPG but without the same benefits. (learning-curve vs ROI) Also IMO the underlying problem is choosing a CA's in the first place. None of them have 'Skin in the Game'[0]. How do you actually decide on which CA is trustworthy?? Trust is measured by how long they have been in the business and how many trust related incidents[0] they had. And how is that confidence measured/created? (hint it isn't Math but whoever has the best marketing or lowest price - not the most trustworthy certs).

CAs are a business model impatiently waiting to be replaced (with something decentralized). It's a self-serving quasi-monopoly that all other vendors that want to implement trust must use.

[0] http://www.fooledbyrandomness.com/SITG.html

[1] https://www.schrauger.com/the-story-of-how-wosign-gave-me-an...
There's the key question. What could you do differently than google for a niche or even mass?

I think privacy is massive but that leads to how will search engines that focus on privacy make enough money? Google offers a good search engine and a heck of lot of cool free software, all payed for by ads. Frankly, I don't mind targeted ads as they're far less annoying than random ads. I'm into the outdoors and tech and even went so far as to go into my Google settings and adjust it. No, I don't like Tango. What was that about in my settings?

So I'm not even 100% convinced that the trade offs in going to a completely private search experience are worth the costs. I don't know.

What are some other problems a search engine company could focus on? I'm not even sure what the top concerns are of users that would inspire them to migrate from something that is pretty damn good, frankly.
Home chores and to-dos for working adults done weekly
What I don't understand about the telegraph, is why it never evolved further. Surely a primitive machine could tap out morse code (or something like it), and decode it, much faster than a human operator? And surely there was demand for this, given the very high costs of sending telegraphs. So high they were inaccessible to the average person.

And then once you have a machine that can do this, well you can start to consider routing, and telegraphing straight into homes, and having telegraph services that store information that can be access remotely...

It took until the telephone to reach the average person's home. And telephones are much more sophisticated than just sending blips over a wire. They had much higher bandwidth. And there was much greater complexity involved in wiring up everyone's house, then a crude automated routing telegraph machine would require, I think.
It's correct only partially :) Recently I released support for host groups (custom entities with different thresholds): https://fastnetmon.com/2015/07/07/per-subnet-thresholds/

As next step I could offer custom rules for mitigation depending on host group name.
All ears on feedbacks! let me know what you guys think.
The startup is HQ in SG
"Trying to think a bit" would be on the side of having more information to think about, I'd imagine. Absolute relativism is a strawman you've brought into it, political tribalism is on the other hand a very real thing.
Btw, I recommend to use project's site, it's much times more informative than GitHub repository: https://fastnetmon.com
ESP8266 was awesome, but lacked many useful features:

- ADC (Analog to Digital converter)

- IPv6 (IoT-chip without IPv6, come on..)

- Bluetooth BLE

- Enough RAM to pull of talking many of the protocols you might want to use over the internet.

- etc.. etc..

ESP32 supports this.
It's not. Search works great. I think that's the wrong way to frame it as being "stuck." Better to say where's the opening? The main one that I see any action around is privacy. There must be other opportunities that nobody's seen and acted on yet but will. It'll be interesting.
Assuming the worst case scenario, the boycotts lead to two parallel conferences. Since when did open-source developers start worrying about forking? I personally would take parallel conferences over incessant conflict any day.
Best not do that anyway, even if it would be legal to.
I dunno, I managed to get it running within a day or two, and had zero experience in this kind of electronics before.

Used a raspberry pi to control it, with a button to switch it into programming mode. No soldering, just wires and breadboard.

But now I use a d1 mini since its more comfortable/less breakage from accidentally removing wires when cleaning.
>Each of these were most likely represented.

That's what this is all about. It's not about being diverse, it's about ticking off a list of checkboxes to make sure every group that some moral authority thinks needs to represented is properly represented.
ShimmerCat 1.5 has cat quips
this crockford business is even more stupid than the eggplant issue.

glad to see ordinary, decent people are fighting back.
Advanced Desktop Locker Pro 5.8.1 Crack and Keygen Download
> (multiple analogue inputs, huzzah!)

No, the Huzzah is based on the ESP8266, not the ESP32 ;)
What Does a Sound Look Like? Web Audio Art
It seems that there is wide agreement on this site on a lot of subjects. Often I just find it boring and hit "hide".

Your opinions on Microsoft. Your libertarian beliefs. Your insular and weird fixations on "perfect" technologies that were suppressed by larger forces often sound like the worst conspiracy theories ever. (I mean seriously, at least make the villain a lizard or something.)

But this has become really cultish. If you think that attempts to keep sexual language out of presentations* is some how on par with the actual intolerance that is being practiced in many states in the union these days, you need to get out more. It's just not.

I wonder how so many iconoclasts and independent thinking "disruptors" wind up thinking exactly alike? It's also funny how all of you think that you are being oppressed when you are part of one of the most privileged classes in a very privileged country.

I wrote a long comment yesterday in one of these Crockford posts where I tried to honestly explain why things might not be the way you think they are. Claiming to be purely meritocratic really ignores the power relationships in society. but you have to be willing to consider that you might be wrong on this or anything...and believe me, that's not something that this group is readily capable of.

I really need to write something that scrapes the links off of this and a couple of other sites and sticks them in a feed. Comments are really bringing me down and I can count on one hand the number of times that I've found something interesting. My weakness? Trying to convince people of something...I shouldn't even try anymore.

*"If you have the chicarrones you can learn monads in Haskell"...from the presentation "Monads and Gonads"
Think you mean OSB, MDF is made of dust and resin
Oh god, I remember how exciting it was when Google rolled out. Goodby Altavista and all the rest. Though I do have a place in my heart and gratitude for Altavista. That search engine found me whatever I wanted to find. It worked well. Google just came in and was better.
Double blind makes plenty of sense for determining merit of papers.

Does it also make sense when selecting a speaker? These are often people chosen because of their public reputation for something they've accomplished, often uniquely identified as "inventor of X," and each usually come with their own off-topic oddities that need to be overlooked if you want to hear their on-topic thoughts.

What's the right process here?
The toolchain is as good as for ARM, it is gcc no more no less.

You perhaps mean the original SDK which was based on proprietary blobs and sucked.

See it here, the good one, https://github.com/pfalcon/esp-open-sdk
I fail to see how this is relevant. Could you explain?
52-technologies-in-2016
I would bet that is limited to low-energy inference which is the most important impediment to deploy deep vision models in mobile devices.
Fifa 17 será lançado no dia 27 de setembro
Yep, Resharper is fine but NCrunch won't work for any projects targeting Core, however.
Strange how I only ever see this happening to topics that paint the social justice brigade in a particularly bad light, a group that has a particularly censorious bent to boot.

Either way, every time I've seen it happen, the thread is young and still rising, so this flagging mechanism cannot possibly represent a meaningful slice of the HN readership, who are prevented from finding out.

That sounds like plain old censorship and information control to me, and I'm pretty sure the moderators know it.
I was referring to technical developer documentation, but I don't think user facing info will be that much revealing until after 10.12 is released.

I say that I predict using macOS will be "natural", although that doesn't necessarily mean it'll be "technically correct" for older versions.
https://en.wikipedia.org/wiki/Hidden_champions#List_of_selec...
I don't think search needs to be made better. There are more important problems. That doesn't mean there aren't innovations to be had in search engines but it does not have to be better search algos.
For me the biggest advantage of FP languages is exactly not have to deal with `GenericConverter`s, `AbstractDTO`s, `BaseEntity`s and other overly-complex constructs that many OO languages inflict upon the programmer, but to create a small and simple sub-language that solves my problem without making it even more complex.
This kind of thing is an excellent answer to "I need to have a github to get hired, but all my work is copyrighted and NDA'd". Rather like a "masterwork" in the context of the old craft guilds. An overly-elaborate demonstration of skills as proof of credentials.

Some electronics hobbyists have various sorts of circuit board "business cards" that serve this purpose. I've been considering doing one of those myself.
Homeless guys aren't running the rings in Chicago where they steal 400 bikes, load a U-Haul, and drive them to the west coast to sell.
I would guess that the majority of it was spent on dev work making the company processes fit the insane requirements of their PCI auditor.
Turn Any Normal Speaker into a Voice Controlled Speaker
I was trying to find something that could send a small message via Wifi when a toilet door was locked/opened; and could be powered by the lock motion or harvested energy.

I failed.
Unless you have a strong reason to use Java, I'd stay far out of it in learning FP. Pick a language where FP model fits well into the language core (e.g., ocaml, Haskell; google for other options), not glommed on as an afterthought to a general purpose language.
Steam Survey Shows Windows 10 Touching 50% Mark, GTX 970 Tops GPU Category
Oil Jumps as Saudi Arabia