skysight-inc/HackerNews huggingface dataset:
People always miss the point that the extremely vile debauchers represent the upper society: the aristocracy, church, the rich, and whatever was the fourth main character.

Then, they do all the horible things to the poor in their isolated castle with the help of hired gunmen.

The style is absolutely fantastic (I do not know about English translation)!
This is a very interesting allegation. Do you have a link to any such backdated or whitelisted certificates? Where is the whitelist, and how does it work? Does all major SSL libraries, browsers, http clients (openssl, libressl, polarssl, gnutls, microsoft, apple, java, etc etc) implement the same whitelist?
> I don't really understand why people treat de Sade's writing as different than any other run-of-the-mill elaborate fetish fiction.

I'm pretty sure the general public ("people") would burn him at the stake today, too. His writings are pushed by a tiny subset of "people".

I also question the characterization of his work as "fetish fiction". It remains to be determined if his imaginal musings were prompted by his clear hatred of nature or whether his frustrated lust ultimately dressed up in a pseudo intellectual garb to cover its rather banal impulses.
I don't love Skype, but Slack voice calls are so terrible, drop so often, are so laggy that they do need to be replaced with something that works consistently. And with all the NSA transcription services Microsoft is running, maybe we'll get an automated meeting note taker if this takeover were to actually go through.
But it is not fetish fiction at all! Sorry for copy/pasting my other comment, but anyway:
"
People always miss the point that the extremely vile debauchers represent the upper society: the aristocracy, church, the rich, and whatever was the fourth main character.
Then, they do all the horible things to the poor in their isolated castle with the help of hired gunmen.
The style is absolutely fantastic (I do not know about English translation)!
"
That seems about as logical as putting desks in alphabetical order.
It’s Time to Move to HTTPS
Jim Tcl sounds really awesome. I use tcl quite a bit as the embedded scripting language in a CAE app. Things like OO with garbage collection and closures/functional primitives are probably what I miss the most from Tcl.
Friggin 'A.

I'm 27 with 2 years experience and nowhere close to that pay in my company.
FML.
I always thought PowerPoint was going to evolve into a hybrid video-presentation platform. Something which would include narration, more fluid and complex transitions / animations along with the ability to jump to specific points in the presentation. Maybe Stream can bring such features to PowerPoint in Office 365
Any plans to fix the issues with Steam Controller?

These guys - for some unknown reason - resist using the proper API for Steam Controller (although they market the game specifically as supporting it) so it keeps giving lots of problems with it patch after patch.
> FWIW, I agree. They should have gotten (i.e. paid) someone to write a coherent document for this important communication.

Seriously you'll be hard press to find a paid translator that can translate technical documents.

Also the document is actually reasonable coherent. Picking on the language level of the document over the technical content of the document seems kind petty.
Fed Governor: Blockchain Is a ‘Significant Development’ for Finance
It's not about what companies financial incentives are, but what type of behavior they reward their staff for.

"Noone ever got fired for buying IBM"
Ask HN: Category structure for a directory of side projects
I am thinking of creating a web directory of side projects (as a weekend side project of my own).

TL;DR: Inviting category structure suggestions for a web directory of side projects

All will be able to submit their side projects to this directory (and the listings will go live immediately upon submission).

I'm sure it would make (a lot of) sense to have a category structure on the directory so that projects can be listed/browsed under relevant categories.

I'm currently setting up the basic directory (site, using the WordPress CMS and some suitable plug-ins) but I am not able to think up a category structure. While I am configuring the project submission form so that users can suggest categories, I would prefer to seed the directory with (at least) a decent category structure ab initio.

I invite and welcome any/all category structure suggestions from all here. (All other suggestions welcomed too.) TIA :-)

(Those willing to take a sneak peek, here is the [barely] working URL - nothing listed yet, but you should be able to submit/list projects: http://sideprojects.tk/)

Edit: When fully done, I'll do a Show HN thread here.
A basic introduction to the Actor Model
On the state of cryptography in Haskell
It certainly worked, whether or not it worked "well" is up for debate.
I enjoy coding at airports. Headphones jacked in, sitting on a bench with people around is surprisingly good for focused work.
Limited resources and means, you know, promote creativity. Programming a modern standard computer nowadays is quite available to average Joe and Jane. That's why we have tons of crapware. But, forcing them to program a less common, sophisticated, complicated or limited architecture forces them to adapt and into being more creative. This serious game is quite a good example, and, I suppose that was also the intention behind it.
Think about it as a closed loop system. There's a desired state, a process/plant that produces an output given the desired state, a feedback loop that brings information about the output, and a comparator between the output and the desired state.

This fellow had big dreams (desired state) and has a process (his actions) to produce his current situation (output). He compares between his desired and current states and the error is huge. What does that cause? The process works to bring the error down. It might overshoot, slowly converge, diverge, or oscillate around the desired state.

A lot can go wrong in this simple example. As you suggested, his life might be not bad at all but his transducer might be faulty and sending defective information. His feedback might be screwed so what he sees of the current situation is altered. He might also have one transducer giving a good reading on one quantity, but missing the other output's quantities because he doesn't have transducers for them.

His plant can also be at fault. The actions he's taking and how he conducts life might not be bringing the error down. In other words, he's not getting closer to his desired state.

His desired state might be changing. Which would be normal for many to evolve but this fellow might not have the satisfaction of accomplishment because the system doesn't register it has ever reached a desired state. The sense of accomplishment is never there.

His comparator might be at fault, too. His desired state might be beyond the plant's capabilities and it's impossible for it to reach it.

The communication lines might also be the cause because someone hastily crimped the connectors and did a poor job.
I think the work done in VS Code, .Net Core, F#, TypeScript, azure tooling, container support, sql server enhancements etc would counter your assumptions on a lack of innovation... Windows may have stagnated, but ms is still pretty relevant.

While I don't do much these days in the MS sphere (other than using VS Code), I think they're far more in touch than most large software companies.
Blacklists and attribution do not hold that much value.

Blacklists are only useful to stop only a few DDoS attacks mainly amplified ones like the ones that abuse open DNS resolvers which should be cleaned up on their own, in which case you want to be blacklisting the resolvers not the machines that use IP spoofing since they do not attack you directly.

Many (heck most) DDoS attacks do not use IP spoofing, the recent and largest recorded in history just used 145,000 IP enabled cameras, and this isn't even remotely the largest botnet out there, blacklisting an entire botnet is effectively DDoSing yourself since many of those machines can be on a network with 100's or 1000's of other computers behind the same IP which many of them would be legitimate users of your service.

Notifying ISP's also doesn't help, some ISP's can do some preventative measures but what often they do is simply kill routes to your service, again it would work if you are dealing with some ISP in Slovakia if you aren't serving any customers there (granted they actually respond to you in due time) but if you are dealing with large ISP's there is little they could do and cutting them off isn't an option.

And as for as cleaning and isolating these machines this is laughable, you aren't going to be tracking down customers, even the ISP won't do that for you, and even if it did what would it do send and email that would likely be ignored? Even if you identify customer the IP belongs to it doesn't tell you anything about the device, not to mention that the customer would likely have no capability of cleaning up their machines to begin with.

IP spoofing is a problem because there are currently ways to abuse IP spoofing to amplify the attacks, if you aren't amplifying your attack using UDP protocols you will usually not going to be using IP spoofing in the first place, and automatically banning IP addresses might sound like a good tactic until you are hit with DDoS from a big botnet within your market region at which point you can't use that any more, you might ban a few IP's that seem to have access to excessive bandwidth but even that might be problematic since it can affect legitimate users.
There are other examples where the Nobel prize has been given to someone who previously intensified the conflict, but then worked for peace. Menachem Begin and Anwar Sadat in 1978, for instance.
Writing drivers for the Linux Crypto subsystem: http://events.linuxfoundation.org/sites/events/files/slides/...

State of the Linux Kernel Security Subsystem:
https://events.linuxfoundation.org/images/stories/pdf/lcjp20...

dm-crypt: https://en.m.wikipedia.org/wiki/Dm-crypt

Linux Unified Key Setup: https://en.m.wikipedia.org/wiki/Linux_Unified_Key_Setup
Other JVM languages are technically allowed, but AFAIK they generate way too much scaffolding & reflection-based flow such that you end up burning your entire bytecode computation budget just in calling one or two functions.

So yes, you could probably use Jython or Jruby, but you wouldn't be competitive against the people writing straight Java.
that is why its better to use a fake name anyway. Anywhere. Its been a long time since Quora is dominated by Political Correctness. It seems like democracy is screwed, wherever leftists are allowed to vote, they vote against Science. See for example YouTube Be a Hero and Censor Free Speech.

Why dont more of us contribute to software immune to censorship ?
> and they'll probably very rarely have to use English.

The CA/Browser Forum Baseline Requirements and the mailing list discussions all happen in English. The major root programs all use English as their language of communication, to the best of my knowledge. The SSL/TLS and X.509 specifications are in English. The major browsers and TLS stacks have technical documentation, code comments, and code review in English. mozilla.dev.security.policy is in English. The international language of scientific research (including cryptographic research) is in English. The CVE program is in English. All of these are reasons not only to have people who are fluent in technical English, but to make hiring such people a priority.

In particular, the inability to communicate precise, subtle technical concepts was very relevant to some of the problems here, like "You may not issue SHA-1 certs after this date" meaning the actual, calendar date of issuance and not the recorded validity period in the certificate. (There was also an element of malice, but it could have gotten sorted faster if communication were easier.) Even if all the others were in some other language, the CA/Browser Forum alone would be enough to make anyone who wants to be a CA (or an HTTPS client implementor) must make fluency in technical English a priority.

It is, of course, highly unfortunate that people from non-Anglophone countries are at a disadvantage here. In an ideal world we wouldn't have that disadvantage. But there doesn't seem to be a way around picking a language to be the scientific lingua franca.
i suspect Assange is going to be enemy #1 of the Clinton administration...
Do you know what his explanation for that is?
> The charged 42 backdated certificates are an intentional activity that we try to help the desperate customers since there are more than 3M users still using Windows XP sp2 in China. We like to make things simple that don’t realize how serious this solution was.

I think this is all there really is to it. Some customers wanted to have backdated SHA1 certificates so they could continue supporting platforms that do not accept SHA256 certificates. WoSign decided to oblige them.
It's certainly easier to start with groups who only participate in activities which are uncomfortable to publicly defend.
Oh nvm, looks like link changed or i have clicked a different link I was reading the google groups thingie.
Memory Fragmentation in the Boehm-Demers-Weiser Garbage Collector
Companies may not want to do that but the individual "tail" functions will optimise for there needs and ignore the wider needs of the company.

Look Boss I saved 10% on office costs - ignoring the fact that productivity has gone down by 20%
Being good in business is the most fascinating kind of art
It might be procrastination masking as productivity. Starting greenfield is so much easier and more appealing than solving a real problem in the older project that has some cruft accumulated already...
Fellow embedded engineer here.

I think the ARM MbedTLS (former PolarSSL) isn't that shabby. WolfSSL is pretty ok too. And then there are things like TweetNaCl by Schwabe et al that works really well in embedded space.

HW acceleration for ECC is very rare in MCUs, but quite a few sports AES with a couple of modes, typically CTR and CBC. Bigger ones (based on Cortex-M4) may even support AEAD modes like GCM.
The protesters didn't have cell phones? Just correlating their locations would tell you something was up.
The comments from a year back seem relevant https://news.ycombinator.com/item?id=10431382
Just used it quickly, I like the idea but when adding new tasks you should inspect the last tasks finish time and add that as the new start time of the new task. I'd also provide a configurable amount for time blocks (or a picker panel of common amounts, 30mins,1 hour,2 hour etc).

Overall nice and clean, tiny download like andrewvijay mentioned and zero silly permission stuff, good work!
I imagine it could be largely mitigated by compression
You know that multiple games can go in different directions with one concept, right?

Sometimes you just want to write asm for an architecture that's far to bizzare to possibly be real. Is that so wrong?
Can someone elaborate how pro-globalization speech can hurt her campaign?

As far as I can see the leaks are not corruption evidence of some sort.

Disclaimer I'm away from politics and US.
Well, you are right, there was other context that I left out and now added on a comment above.
Probably my favorite Zachtronics game. Although I haven't had a chance to play IF or SIO yet.
Of course! Don't we all?
The Mathematics of the Rubik’s Cube [pdf]
I prefer actual old hardware for that (60-70-80s), that way the results really give some strange satisfaction. Personal ofcourse.
And having been on steam since The Bad Old Days of Wine (not all that long ago, really), I can say that we used to have a penguin, and then it got replaced with the steam logo a few months after steamos and the steam machines went on the market.
Has any study been done on noise-profiles ?

The office I program in now is kinda quiet, but not quite. There's a someone who plays with something that makes a random clicking sound and another person who snorts their phlegm backwards up their nose and another who constantly snacks. This near-silence but with very annoying sounds at random intervals I find very difficult to filter.

On the other hand I can program just fine in a noisy cafe or a building site (which I have done).
We live a frugal life-style. There is one computer in the house for a family of 4 (couple + 6yo + 1yo).
It's a 5 year old laptop running Win7 and 4Gigs of ram (with a slow conventional Hard-drive).

We will not upgrade or change this. But thanks for the suggestion.
I can not predict social unrest 3-5 days before it happens but my google alert for "black man shot by police" can do the same reliably 24 hours before social unrest starts.

Suck this CIA.
"So other than that Lincoln, how did you like the play?"
Pardon my ignorance, but I cannot help myself understanding why WikiLeaks are pushing so much crap towards Clinton and not doing the same to Trump ?

Are they in-directly supporting Trump ?

I am far from USA and although who will be the next president most likely will affect everyone, I do not care that much for either one of them.

It is just strange for the russians to push so much for Trump and WikiLeaks are somehow assisting them.
LiVE~Tv  Millwall FC vs. Charlton Athletic Streaming Free
Donations more or less. Also such things scale down very well, you can start with a small server and a few users costing next to nothing.
Like it. Would rather use voice to plan, however. 'Remind me at 3 to program.' Android phones have pretty good voice control for reminders and are great for scheduling.

Now, if I didn't have a good way to set this stuff with voice, I would love this app.

I love how it is under 5mb and doesn't use unneeded permissions. I love how easy it is to enter things in. And I love how the notifications work and how you can have it export to google calendar.
I am saying that sex workers' agency is immaterial to whether or not their clients are committing human rights abuses.
Oh man they are rare but they are definitely still out there. Think printers from the 90's that came with chargen & usually telnet enabled by default, and for some reason are publicly accessible.
Any insights, blog post about this?
I read Pittman. The thing is, the Scheme community may not be able to share code directly, but we are able to, and often do, share ideas. In addition, many Schemers are active in the CL community and vice versa, like Pittman. Many of the same people were involved in the standardization effort, and the creation of both.

A language spectrum does indeed serve as a diverse commiunity. One us Schemers are a part of.

I know my history, I just disagree with you.
> “Unfortunately, you can’t just grind up a peacock feather,” said Robbins, a petite woman with a Ph.D. in organic chemistry and the empathic, wide-set blue eyes of a small-town bartender, with what sounded like genuine regret.

Sigh...
They are directly supporting Trump.
My wife has studied mathematics pedagogy, and one concept that really struck me from what she learned is compression. Put simply, you can't learn a new thing until you've compressed the old thing it builds on. If you have not compressed "addition" to the point that it requires little effort, you won't be able to learn "multiplication". Same holds for e.g. "derivatives" and "Taylor series", or "group theory" and "rings and fields".

(I think this was from Piaget, or maybe Brissiaud.)
This Infographic Explains Why JavaScript Dev Seems So Complicated
And the other way round. I lived in Beijing at the time when Americans bombed the Chinese embassy in Belgrade (May 1999). CNN and other Western news channels were showing films of furious Chinese protesters shouting and throwing things at the U.S. embassy buildings in Beijing. This went on for days.

When I actually went to the Sanlitun embassy area, the closest thing to a riot was a stout Western woman walking her poodle outside the German embassy. Otherwise, it was too hot for anyone to bother go outside and everything was sleepy. The week's worth of rioting on CNN was shot during one day in a well-organized riot properly supervised by the local security officials.

There is no doubt the Chinese were genuinely offended, officials and public alike, but they wouldn't let such a thing cause disorder even though CNN etc. needed the drama.
I've only seen a few quotes from these leaked transcripts, but they've been in articles claiming very damaging statements. Instead, the quotes seem to be mostly benign comments and nothing shocking.
Maybe it is the actual point where the track splits hence it can't be moved?
Tragedy of the Commons.

Unfettered free speech is incredibly powerful as long as the preponderance of the community respects it and self-polices. But if such a community grows, over time some selfish actors appear who start gaming the system in a way that makes the community worse for everybody else.

That sets up an incentive to either join inthe gaming or leave, and left unchecked, the community devolves into a smaller core of people being awful and everyone else having decamped either to a newer community that hasn’t been spoiled yet, or to a community that has moderation a/k/a censorship.

Note that we are having this conversation on a platform that has, from the beginning, chosen to moderate speech.
FEMA Camps Locations – A Complete List for Alabama, Alaska, and Arizona
One could ask a similar question about most media vendors, replacing Trump with Clinton. WikiLeaks, whether deliberately or not, is simply doing its part to redress the balance in negative and scandalising news coverage.

It should be made clear that I am neither a US citizen nor a Trump supporter. Huge emphasis on the latter!
A common approach is to get SHA-1 certificates signed by roots that have been pulled from various root programs, but are still (likely) present on outdated devices that do not support SHA-2 (like XP <= SP2). I think CloudFlare is using one of Comodo's removed roots[1] for this purpose.

Once a root certificate has been pulled from a root program, they stop being in scope for the root program policies and the Baseline Requirements (at least that's the common interpretation), which would prohibit SHA-1 issuance from those roots. There's been some discussion about changing this.

[1]: https://bugzilla.mozilla.org/show_bug.cgi?id=1208461
There is a sizable chunk of the electorate for which globalization is as much a dirty word as populism is for another segment of it.

It's not quite the same faultlines as the classic Slatestarcodex Blue and Red tribes, but it's the same principle
I'm on the lookout for a product to plan only the current day. This is a nice first version, but I think for it to be really beneficial the UX needs to be on point - adding tasks as quick as possible (like Google Calendars quick add - "Clean Kitchen 1200-1215") and quick glance using a widget or permanent notification of next/current/prev task. Also, Reordering doesn't work for me.

Again, as I said I think this is a well executed first version, but the problem is I don't think I'll be able to keep using it without the mentioned features. I'll keep it on my phone in case it gets updated since it's small and requires almost no permissions.
Even if the manager's "skills" were good, he wouldn't be respected by the working parents. If he somehow hid his age, virginity, and not having a family (obviously difficult in practice), his reports would probably treat him differently.
Systemd vulnerability discovered
I think it is at least partially revenge based on Clinton's hard-line policy against WikiLeaks and Assange.
"Mrs Clinton told bankers that they were best-placed to help reform the US financial sector" - which is true, but she failed to mention that was also the problem.

Bankers are in the best position to reform, but the most unlikely to provide meaningful reform.

edit: formatting, emoticon removal