skysight-inc/HackerNews huggingface dataset:
It's victim blaming in the sense that an ISP which should have taken the correct steps to number their endpoints (BCP 38) is not being harassed by companies like cloudflare for DDoSes while DNS server operators are.

"Yeah, this guy stole your car by asking nicely for an extra set of keys from the manufacturer. Even though the manufacturer shouldn't have allowed him to do get a key, we're holding you responsible since you technically could have kept your car in a locked garage."

Also, the gp was taking about cache poisoning, but it was only exploitable in the presence of spoofed IPs.
Why exclude faith? For PC sake?
Well, I tend to shrug at the "Just Starting" philosophy.
In building software there may not be much cost to having a ton of half finished projects (you always learn something, even if you didn't finish it).

But for more general things in life, "Just Starting" can just add anxiety and clutter to your life.

My wife is the chronic example of this. She is a "chronic hyperactive starter", she starts multiple house chores and tasks and leaves them all half done. Over her life she has started multiple courses she didn't finish. Our house is packed with little half finished handy-craft projects tucked inside bag after bag. In the kitchen there are often half washed dishes, in the bathroom half washed clothes lying around. She is not untidy at all, she prizes cleanliness and method like a lot other people do, but she just cannot manage the anxiety of a "to-do" list.

In order to feel active she must start all that is not done yet, but somehow then abandons the task to start another.

Mainly my house work is going around the house picking up her half finished tasks and finishing them.

Just to give an alternative view... the habit of just starting is only at best 50% of getting things done, and many times it's not even the hardest part, the hardest is finishing things.
There seems to be lots of confusion of what EME is because people bring up images, text and games. First of all, EME is targeted to video and, to less extent, music streaming.
Streaming video content to web browsers is, currently, a mess. There are many DRM schemes and each does its own crazy shit to try and make it work on everyone's browser. It's also expensive. So expensive that only big companies will target big platforms.

Also, EME doesn't affect only web browsers, it also affects SmartTVs which are limited to a few DRM products.

What EME and CENC try to achieve is to add simplicity to this process and for open source products to be able to compete with closed source ones. Even small DRM products are moving on this direction because it's impossible for them to target all platforms. On this regard, even an open source DRM scheme could be achieved and compete.

DRM, EME and CENC will happen, and this only hurts open source products like Linux and Firefox. But it will happen.
It's 22/7, and zeno's paradox aside, pi has an infinite component to it, if you look at it the wrong way.

That the horn's tail (or mouth piece, as it were) extends into an infinitely small value approaching zero, is as fair as the never-ending irrational fraction pi represents.

Otherwise, the horn's volume is undefined. Where does the tip of the horn cross zero?

It doesn't??? Hmmm, that sounds like a non-finite value to me.

Discussions like this often wax political more than analytical. There are four lights.
C60 isn't toxic, in fact it is an anti-oxidant, a very strong one. Oxidative stress is sometimes desirable, though, for instance C60 is exceptional at neutralizing Nitric Oxide. You know what is one of NO's functions in the body? Erections.

After cessation, the anti-boner effects seem to disappear, though. Such a shame it even had that effect to begin with because it really made me feel more energetic and happier while allowing me to (consistently and basically within a day or two of starting to take it) do twice the reps during my workouts.
In scuba diving, using the thumb and index finger circle to indicate OK/understood while under water is used worldwide. Communication is contextual and it's more important that there is a shared and understood convention than universal cultural awareness.
The post is about suggesting more fermi estimates problems, see for example http://lesswrong.com/lw/h5e/fermi_estimates/

Fermi estimates require you to look for relations in the real world, construct a model of the situation and then iterate improving the model by adding more information. You don't use that process just to give an example of using a rule or solving an equation, instead you emphasize how the problem could be tackle mathematically. So there are more room for open questions, incentives for exploring and suggesting new approaches, in a more relaxed atmosphere creativity can flourish, perhaps maths is more than a single equation written in an old book.
Yeah, I think that a key point here is that it is a way of keeping meetings on track with larger groups. Once you have a bunch of people who have strong opinions about the current topic of discussion, then you will get times when multiple people want to express themselves at the same time.

The person running the meeting may then have to step in and act as traffic cop, but they can only be reactive, after people start talking over each other or whatever. It can take a combination of a good chair and mutual goodwill to sort out the communication traffic jam. It's also rough on the people who aren't assertive, as the article says.
You stop peering with providers originating spoofed traffic. The whole point is that you don't know which host is doing it (the IP is spoofed!). All you know is that a provider is allowing spoofed packets (with a probe from participating endpoints in a measuring service). That provider should be dropped and everyone on that provider should suffer collateral damage because that's the only way to economically incentivize them.
Latex itself is still progressing, they've incorporated lua into Tex so that they can add new features. There are also alternatives to Latex such as ConText although I've never heard of anyone actually using it. But in general it's hard to know what's really going on without doing a lot of research.

I also once read about another alternative to Latex called Lout but it never seemed to go anywhere.

I just use Lyx now to write my articles. I've actually pretty much forgotten the Latex that I used to know.
A Javascript journey with only six characters
The Name Game (Plan 9 and Inferno, Dr Charles Forsyth)
I was personally in Western Tunisia (on the Algerian border) as the Tunisian uprising, the first of the Arab Spring, began. I was there a month. The protests were in full swing for weeks in every village in the west before anything hit western media. No travel warnings or any of that backdated pretend bureaucracy. I very much doubt the CIA had much of an idea what was going on outside the capital. The only western presence I saw during the whole period was a German diplomat taking his friends to see some ruins further east, which I doubt he would have been doing if he knew there was serious unrest. Internet is barely utilized there - how are they going to gather intelligence? It really gives you food for thought. Stay off the wires (including finance), and it's very hard for them to see much of anything.
Probably feed it with historical data and see if it can tell what has happened.
Most cases (this one included) are covered by a proper BGP setup (you advertise to each upstream) or an email conversation with the upstream ISP to get another IP allowed.
"Folks with ADHD"

ADHD symptoms are a matter of degree in most individuals so presenting it as a binary is a fallacy.
The vast majority of people can experience some benefits from some dose of stimulants (see the widespread use of coffee which has different effects but is analogous).
I believe the reason the idea that people with ADHD respond differently is popularized is to legitimize ADHD in the eyes of people who would be judgmental regarding medication that causes cognitive enhancement in "healthy" individuals as well. (Because using performance enhancing drugs is cheating or some such nonsense)

Edit:
See http://www.nature.com/nature/journal/v456/n7223/full/456702a...
http://www.nature.com/news/2008/080409/full/452674a.html
Most of their hand signals are similar to hand signals used by the Occupy movement [1]. However, the Occupy movement "agree" signal involves wiggling the fingers [2]. It seems to have come from the ASL sign for "applause" [3].

[1] https://en.wikipedia.org/wiki/Occupy_movement_hand_signals
[2] https://www.youtube.com/watch?v=HaqpAlvDKsI&feature=youtu.be...
[3] https://www.signingsavvy.com/sign/APPLAUSE/7950/1
Physicists just created the world's first time crystal
Of course the bigger challenge is logistics. How do you produce 150 billion of anything?

Nanotechnology. Molecular assemblers. Self replication. These things won't be handcrafted! They'll build themselves.

If it takes 1 second to produce 1 drone, that's over 4,700 years to get them all.

Not if millions are being produced simultaneously. You seem to be thinking about this in very conventional terms.

Do you make 3D printers to print other 3D printers to then print these drones? Even at a failure rate of 0.001%, that's 1.5 million drones failing at any given time.

Yes, failure rates would certainly be high as they'll be constantly attacked by the environment. But as long as the replication rate (birth) balances with failure (death), then they'll be ok.

What about costs? $1/drone?

Not even close. After amortization of R&D costs, they'll essentially be free if they can take materials from the environment and self-replicate.
Maybe it would be cheaper and more effective to just hire a graphic designer to hardcode solutions to the worst examples?

That’s a pragmatic solution if you’re only designing static graphics, say to print on a leaflet. If you need something more dynamic, with various elements being selectively hidden as they show in the animation just before the article’s conclusion, then beyond a certain point there are too many combinations to prepare them all manually with a sensible amount of effort.
A few answers :)

1) as I mentioned elsewhere, the explicit coaching happens when you submit a photo that Keegan think is bad (say score < 5).

2) Mostly true, except that it's surprisingly good at capturing the notion of good timing, which I did not expect from ML ^^

3) well, as for the Mick Jagger picture, I can see why Keegan dislikes it: it's simply not that good technically. What makes it great is that it's Mick Jagger and that he has a very deep sight (imho), which the model indeed does not capture. For the other picture, yeah, the score is not that good, but the comment is spot on (in my humble and very biased opinion) :p

Thanks for the feedback, and yeah, definitely needs more love before it's a perfect predictor! Nicely enough, classification tasks with tons of supervision still make a lot of errors too ^^ (http://pbs.twimg.com/media/CdOxQRbWAAEUZM6.jpg)
That's only the minimum rebate for non-generic drugs. Companies have to pay more if the prices increase by more than inflation (Epipens did) or if they offer bigger discounts to others (may have done, I'm not sure).
We May Never Truly Fathom Other Cultures
Phusion co-founder here (creators of the Passenger app server); just wanted to chime in and say that this article resonated a lot with our experiences with VCs and our ventures in open source. Even down to the "lifestyle business" remark. Like OP, I'd encourage first-time founders to talk to VCs when starting out just to get an idea of how they perceive your business. Yes, even if you don't plan on raising. You may walk away learning a thing or two :-)

As for RethinkDB; we loved it, and even wrote an article about it a few weeks ago, outlining how it could be awesomely used with Rails 5 [1]. Having tried to bootstrap a company solely around an open source product ourselves as well[2], we can't help but share their pain here a bit. For instance, and I'm just going on what OP has shared about RethinkDBs business model, we tried to build our business solely on support contracts initially too. That didn't work out great for us.

And it kind of makes sense if you think about it: the support contract is available in case your software is failing during critical operations, yet your main efforts in product improvements are to minimize those chances. So you may have two conflicting interests, and I think you will find yourself having a hard time satisfying both. Through product improvements, you're basically minimizing the probability that such a support contract is needed. That might make it more enticing to only get the contract whenever you actually really need it, and that moment might never come. Especially if you consider how many hoops customers have to jump through to procure something within the enterprise. I can imagine something similar happening for RethinkDB.

This was an important realization for us though: rather than charge for the probability of problems, consider charging for the product's merits instead. As much as it pained us to introduce a closed source premium version of Passenger a few years ago to do this, I can confidently say that it was the best choice we could have made for our open source users as well; it allowed us to have a sustainable income and allowed us to rapidly improve Passenger's open source core alongside the closed source version as well. So even though I commend OPs determination into keeping things strictly open source, I'd encourage him to look into a hybrid option as well. We wouldn't be around here today as a company if we didn't.

Lastly, seeing as OP is a fellow bootstrapper and a fan of Basecamp as well, I think Jason Fried put it best when it comes to VC monies: "if you start out by raising money, you get good at spending money, but if you start without money, you get really good at making money", or something like that :-)

[1] https://blog.phusion.nl/2016/08/04/using-rails-5-actioncable...

[2] https://blog.phusion.nl/2015/10/30/bootstrapping-a-business-...
It's not trivial by any means other than preventing it from clogging up internal stuff. If they are targeting a specific IP and the traffic is indistinguishable from normal traffic in the l3/l4 headers, there is no way you are going to block the attack without taking down the service.

This is why solving spoofing is such an important problem. Once source IPs become sticky, we can actually block based on them to truly stop the attack without taking down the service.
Is the CEO stepping down because fraudulent certificates were signed, or is he stepping down because they got caught?
TLDR: SO, WILL IT ACTUALLY HAPPEN?

Probably not in the lifetime of anyone old enough to read this article, but in the longer term, there’s cause for optimism.
Thanks, gotta investigate :)
Cross linking the earlier WoSign scandal reports:
https://news.ycombinator.com/item?id=12389573
https://news.ycombinator.com/item?id=12582534
https://news.ycombinator.com/item?id=12617659

So if I get it right, WoSign will cease to exist as a CA given the 1y probation proposed by Mozilla and the general distrust that will follow?
Different strokes for different folks.

I hate slacking at work. Actually don't count it towards my hours unless it is compile time or reading something useful (biggest trap for me).

Yet what helps me is just removing 1. the interruptions (noise is OK) and ideally 2. the risk of interruptions.

1. helps me concentrate eventually. 2. helps me concentrate almost immediately.

So, no, privacy won't make me slack of and browse HN, that is what I do when I cannot do anything else but want to be in front of my PC anyway.
Show HN: OneSite – Free, unlimited web hosting with cPanel and support. Yep
"god told me so" worked very well for thousands of years.
Mirror of the PDF version of the incident report if they take down the original or it goes down: http://clicky.strapr.com/3g1s1y1k0Y2J
Show HN: LiteApi Alternative ASP.NET Core WEB API Middleware
Highway Police Car Parking 3D
The latter. Otherwise he would have stepped down weeks ago.
This story is a bit of a mess to make sense of coming in cold and reading a Google Groups summary. Here's my read, which may help clarify the story for others.

Mozilla have an excellent explanation document covering the backdated certs in detail here: https://docs.google.com/document/d/1C6BlmbeQfn4a9zydVi2UvjBG...

(Thanks to @xnyhps for the link in a reply to this comment.)

WoSign, described elsewhere as China's largest certificates authority, are a CA who have been found to have backdated SHA1 ceritificates to work around browser restrictions on SHA1 cert issueances. SHA1 is no longer considered secure. Resolution of that issue is discussed in new mozilla.dev.security.policy Usenet group peered by Google Groups: https://groups.google.com/forum/#!msg/mozilla.dev.security.p...

A better source for WoSign's update to the story is in the PDF posted to the newsgroup, here: https://www.wosign.com/report/WoSign_Incident_Report_Update_...

Titled "WoSign Incidents Report Update". Which is even less descriptive than the title presently given on this HN post, though perhaps what HN posting guidelines prefer. I'll let @dang wrestle his conscience on that one.

In that document are several issues listed, the one relevant to this HN post appears to be:

"9. Issue S: Backdated SHA-1 Certs (January 2016)

"WoSign has issued certificates after January 1st 2016 but backdated the notBefore date to be in December 2015.
This has the effect of avoiding the blocks in browsers regarding SHA-1 certs issued after January 1st 2016. The
number of certs affected is probably 67, but may be a few more or less."

Following down from there, several corporate restructuring steps are mentioned, including:

360’s Corporate Development team has been notified to execute the process to legally separate Wosign and Startcom and to begin executing personnel reassignments. StartCom’s chairman will be Xiaosheng Tan (Chief Security Officer of Qihoo 360). StartCom’s CEO will be Inigo Barreira (formerly GM of StartCom Europe). Richard Wang will be relieved of his duties as CEO of WoSign.

There is background on the story from:

"WoSign Mis-Issued SHA-1 SSL Certificates [Updated]" (August 24, 2016)
https://www.thesslstore.com/blog/wosign-mis-issued-sha-1-ssl...

"Mozilla Ready to Ban WoSign Certificates for One Year After Shady Behavior" (September 26, 2016)

The second article details Mozilla's issues with WoSign, including purchase of an Israeli CA, StartCom
http://news.softpedia.com/news/mozilla-ready-to-ban-wosign-c...

I'm not claiming anything other than a 15 minute familiarity with the situation here. I may have heard earlier rumblings but really haven't followed this at all and wasn't consciously aware of particulars.
It wouldn't remove 3 crossing sections (see bottom right) and ir probably decided to cross on the top left as opposed on the bottom right
Maybe something to consider when then next "I am 28yo and a senior software developer. Is $170k salary enough or should I ask for more?" thread pops up.
I was recently reading about the blood / kidney salt balance too. Same for pH. Interesting how our body spends time in a balancing act.
> "Many customers in China find it important to use a domestic CA for purposes of security."

That's not how the CA system works. Your security is unaffected by what CA you choose; it is invariably the minimum of all trusted CAs.
Direct link to PDF report: https://www.wosign.com/report/WoSign_Incident_Report_Update_...
>I do not mean this to be offensive, but of course bayonets are still sharp when their edges are not ground by use.

It can't be offensive. I might have been unclear but we actively use one of them. The other is a French stabbing sword-bayonet unsuited for cutting.

>But let's not forget it's a story. I'm sure some people are better or worse at butchering sheep, but a genericism does not add anything.

I don't know where you're seeing a genericism because it's rather precise: you feel, as in tactile feeling, where there is a gap and you cut. I understand what you mean though by "not true but useful" and the practice of a "folk taxonomy" of sorts to create a new class called "useful but not true" to avoid polluting your "true" branch.

I remember I had detected a pattern that helped me in high school chemistry where I made up a rule based on the Carbon count. It held perfectly for the low carbon count stuff we were studying at the time but I knew it couldn't be generalized. I guess the scope of something, folk taxonomy, mnemonic devices, etc. are also examples of "useful but not true".
TIS-100 – Tessellated Intelligence System
It seems to me that in few years auto-suggestions in messaging apps will be smart enough for people to rely confidently on it. In those cases, don't you think even talking to human other side will be actually equivalent to talking to a bot.

So in the end, will there be any difference at all?

> Tech is however moving in a direction where these improvements may be getting out of hand. A simple example is Google's new Allo messenger.

> One of the features of the integrated AI is that it can suggest answers to messages that you receive. If a friend sends you a pic of his or her cat, you may get suggestions like "ah sweet cat" or similar.

> So, instead of having to type a reply, you simply tap on one of the suggestions to reply. You may still write your own reply if the suggestions don't match what you want to express though.

> Eventually, with improvements in AI, text and image recognition and in other fields, these replies may be automated. Imagine a world where two bots communicate with each other on behalf of actual human beings.

> The user takes a photo of a cat, the AI knows that cat pics are sent to some contacts and does so automatically. The bot on the other end recognizes the new cat picture, and replies stating that the picture is particularly good.

http://www.ghacks.net/2016/09/26/making-things-easier-tech-i...
So much money they are making and they can't hire anybody who can write English properly or write a PDF that is not composed of a handful of font faces and sizes.

I also find it funny they have fired the CEO (the PDF does not say he stepped down voluntarily) but he's the one sending that link to the mailing list. I call bs.
There's no need to invent popular mathematics. You just need a teacher that can show a student how beautiful mathematics is. It's an art. A way of thinking and creating.
The likely model initially is for trucks to run autonomously on highways for the long-haul part of the route, then have a human driver take over for the "last mile" of a delivery to an urban area.

The reason isn't so much security but rather that autonomous urban driving is a more difficult problem to solve.

The idea of roaming gangs holding up autonomous trucks might make a good plot for a sci-fi movie, but in the real world it probably isn't as big a problem as we imagine.

Most of these things are going to contain pretty mundane shipments. If you're shipping currency or gold bullion or iPhones then sure, maybe more security would be appropriate.
Why do newspapers even have to endorse candidates at all? Isn't the idea of newspapers telling people how to think - and how to vote - somewhat Orwellian?

I'd much rather that people vote for Clinton because they made up their own mind and decided she was the better candidate, not because "well everybody told me to so I guess I better do what they say". That's scary.
How Do Apps Go Viral? Best Practices for App Marketing
I recently got emails stating with "hello ::error::" and "dear /FirstName/"
I don't understand Real Names. If your parents give you a silly name, that's fine, but if you give yourself a silly name, that's not fine?