skysight-inc/HackerNews huggingface dataset:
If Let's Encrypt's chain is compromised, everyone is screwed, not just your site. If _any_ trusted CA is compromised, everyone is screwed, even if they haven't issued a certificate for your site.

There is no way to induce a vulnerability by using an incompetent or malicious CA, provided you generate your own, strong private key. Even issuing an MD5 or SHA-1 certificate cannot actively harm your visitors unless a second preimage attack is developed against the algorithm (in which case, again, everyone is screwed, not just you).
One of the most annoying things about PuTTY is that the black default background is too dark to see. For example, I always have to change it to light background because I can't see my VIM buffer very easily. It also handle the alt arrow keys.
I can't get over the fact that americans apparently pay $5k-10k for an engagement ring. As if this decides the success of the marriage.
HP fight about $11B takeover sees former Autonomy executive indicted
I clicked the link half-expecting to find an article about pink-collar jobs, but nope, just another badly named technical concept.
Wouldn't the diamond be the same price since they are valued by the CCC's? Is it the setting and diamond combo that costs less?
The article you're citing is wrong. (I know because I fixed the bug.)
I'm also seeing the full page now. I do use an adblocker in Firefox but not in Chrome and the page looked the same in both browsers.

Thank you!
Overcoming Functional Programming’s Cognitive Dissonance Issues
And now Trump says he's going to bring back the banned techniques. Great.
Damn that is really scary. I used to work in Miramar (Wellington suburbs), which is built on reclaimed sea, if I recall, and everyone was freaked out that a major earthquake would liquify the entire area.
Oh and its made with django. Nice. Going to give this a test drive.
This is remarkably stupid, at best descriptive of convergent evolution in generically authoritarian regimes. It's not too far from describing the current Chinese government, which to put it mildly has no connection to the thought of Benito Mussolini.

"Fascism" is a word that actually means something, it's not a signifier of generic BadGov. It was a specific historical movement driven by WWI veterans with socialist backgrounds, whose core idea was using militarism & nationalism as a way to suppress class conflict. It's related to but distinct from Nazism; Franco, Mussolini, Gömbös, etc. didn't have any elaborate racial theories.

It's really not always 1934. Pick a different historical analogy, it's as ridiculous as seeing everything in light of the Russo-Japanese war or continually worrying that we're seeing the rise of Orléanist governments.
The DeanBeat: The game industry reacts to Trump’s triumph
I question how truly limiting that is. I mean, if you have a framework or library that has the restriction that it won't work well on mobile -- unless there is a really good reason for that restriction -- it seems to me that that framework/library probably isn't ready for prime time and will either gain mobile support, or will soon disappear.
Not sure why you're getting downvoted. This seems like a legitimate opinion to me.
> There are potential security concerns. Suppose Let's Encrypt has a vulnerability other certs don't, or their chain is compromised somehow, this could put people at risk without them knowing it.

Could you describe what kind of concerns you're thinking about that would be Let's Encrypt-specific and that would only affect you if you actively use a Let's Encrypt-issued certificate? Generally speaking, a CA key being compromised would affect everyone (unless they use key pinning mechanisms like HPKP, which doesn't get a whole lot of real-world use at the moment, and probably close to zero usage from customers using a shared web hosting plan unless the provider takes care of it). You don't need to actively use a CA to be affected.

> It could also complicate matters when renewing certs. If I forget to renew my SSL, it gets replaced with Let's Encrypt, and then I go to renew it and the system gets confused because it looks like I already have a cert from another provider.

CAs typically don't care about whether you already have a certificate from a different provider (I mean, why would they?), or were you thinking about possible limitations in OVH's system? In that case, this only seems like an issue if they indeed have no way to replace the certificate once it's been enrolled with Let's Encrypt.
Re:Alternatives - was just talking about this with Billionaire founder of MoonExpress which just the first private company to receive FAA clearance to harvest some the moon (Moon Express). Sounds like he plans on bringing some back for rings and making it a thing to not just have a honeymoon but to give your honey the moon.

https://soundcloud.com/user-925097294/billionaire-breaking-i...
Uhm, well, because I'm having a conversation about cultural differences between the midwest and the north-east. I think it's appropriate to segway into another topic that way.

If it's the sarcasm you find inappropriate, I respectfully disagree. If our new president fulfills his promises, friends of mine will be cataloged, deported. My own hopes of US citizenship and the life me and my wife had planned for ourselves is now uncertain. I find it all very stressful, and humor is an outlet for that stress.

If it's the particular apology you find inappropriate, that was not a joke. As a progressive in the midwest, I did not do enough to campaign to the large group of Trump-voters in my immediate family, friend group and neighborhood.
I'm surprised no one in this thread has mentioned decades of cultural conditioning to fear "Stranger Danger". That makes us both less likely to approach others and more likely to perceive others as creepy or dangerous if they approach us (and vice-versa, of course). Friends mostly come from acquaintance pools.

When we were kids, we were forced into a casual recurring social situation surrounded by acquaintances that we saw every day at school. Some of those became our friends for the long evenings and summer vacations of just hanging out. They were the ones that we could relax and be ourselves with.

But as adults, the only regular acquaintances that we have are our coworkers. If we ever even have time to hang out then we have to maintain our work personas, which is stressful and feels like work even when talking shop is forbidden. The relaxing, hang out and be yourself friendships are less likely to form.

Unlike our childhood, we have no one forcing us into a regular ongoing situation with acquaintances. We have to come up with some kind of pretext (hobby or whatever), approach a bunch of strangers (something that we're culturally conditioned against), and set up that ongoing regular time together ourselves. And unlike school, we can't do it during work hours so there is far less time for it, as others have mentioned.

There are some third places left, like churches and bars, that provide a ready context for acquaintances. But if you're not into whatever their focus is, religion, drinking, sports, or whatever, they don't really seem appropriate.
Are you saying that makes it okay, or that you are not surprised, or ... I guess, what is the point of saying that Trump is a continuation of existing trends? Is there anything that we could do differently because of that to not move towards fascism?
How about the discussion around the post? Like this comment section. That's a masssively different value proposition that you only access by linking to HN rather than the article itself.
There was an interesting article in the Washington Post today about these covert-op and nuclear briefings for the president-elect:

https://www.washingtonpost.com/world/national-security/presi...

Some quotes that kind of confirm what you inferred about Obama:

After one of the briefings in 2008, Obama told a close adviser that it was perhaps one of the most sobering experiences of his life. He said, “I’m inheriting a world that could blow up any minute in half a dozen ways, and I will have some powerful but limited and perhaps even dubious tools to keep it from happening.”

“Events are messy out there,” he said. “At any given moment of the day, there are explosive, tragic, heinous, hazardous things taking place.” He acknowledged that as president it was his responsibility to deal with all these problems. “People are saying, ‘You’re the most powerful person in the world. Why aren’t you doing something about it?’ ”

The following made my hair raise a bit:

Trump will receive a book of options benignly called the “Presidential Decision Handbook.” This top secret/code-word book, known as the “Black Book,” of about 75 pages has separate contingency plans for using nuclear weapons against potential adversaries such as Russia and China. ... Two officials said that the “Black Book” also includes estimates on the number of casualties for each of the main options that run into the millions, and in some cases over 100 million.

A man who habitually gets into 3am Twitter fights will command choices that can result in the near-instant death of 100+ million people. That's way more than Hitler, Stalin and Mao managed to kill all together. It's a strange world.
Out of the box, all you need to do is drop the default code onto your web page and it will call the 'PageView' event. Pretty much the same deal as Google Analytics (and Twitter also have their own version). @palmdeezy has taken it a little further to include extra metadata in order to segment website visitors.

And I agree that these snippets have been around for a while but how else could you facilitate passing data back to ad exchanges? JavaScript seems to be the perfect tool to get the scale required to handle these types of interactions.
My wife wanted a diamond ring, but one that included stones that have been in her family for a 6 generations. We designed the ring together (with the help of Rhino3D and a local gem shop in Chicago). We melted down the old platinum ring and used the money for a new setting. It's the only ring she has; no separate engagement and wedding rings.

My opinion is that people who insist on the two-months' salary-marketing ploy are chumps and I don't respect that lack of real thought for such a major decision. I told her afterwards that if she would have insisted on a new diamond ring, we wouldn't have gotten married. Currently at seven years and two kids.
That is their policy, but they don't appear to punish people who violate the "spirit" of it and many of these sites don't literally violate the rule.

In the case of pinterest (and quora), for example, the whole page you are looking for is there, it just gets obscured by an obnoxious overlay that makes it impossible for you to see/interact with it all from a browser unless you register.

I'm sure what the googlebot gets at the html/css/js level is the same thing the user gets. The difference being the bot doesn't care about the semi-transparent blocking overlay because the bot is just parsing text/images/links individually and not trying to interact with the page the way a human does.
I have known people that spent $18k-30k. If I was on the other side it would scare me that my partner was willing to blow that much money on a novelty. It's a sign that they are bad with money.
That's fascinating. You've essentially kept the social infrastructure of Quicklisp (quicklisp-projects, repos exposed to Quicklisp) but replaced the technical infrastructure.
He has a history of refusing to pay people who've done work for him. I haven't heard a single story of good will or charity.

All his charitable claims were investigated and the solitary solid lead turned out to be a possible accounting error:

https://twitter.com/i/web/status/795749306242310144
I'm not sure whether you are trolling so this is my last attempt at having a meaningful conversation with you:

> Your chances of being maimed in that cardboard box even in a minor city crash are high, it literally is a deathtrap.

I would still argue, when on a bicycle, your survival chances when crashing into a bicycle are higher than when crashing into a car. Same goes for Trabant vs Trabant. Do you have some concrete evidence that Trabant does worse here (i.e. design issues that prevented people from getting out or that turn some parts into lethal weapons when involved in a "minor city crash")?

> Those cars are constantly broken. They leak everything everywhere.

At least not my family's Trabant or those of our friends. Do you have any actual numbers on failure rates?

> Serviceability by amateurs goes directly against low emissions. You can't make a clean, 4-stroke engine without high fuel pressure. Modern engines require unimaginable tolerances.

That is a very bold statement only backed by a comparison that does not even apply (a modern 4-stroke engine design vs the used 2-stroke engine). But since 2-stroke engines benefit greatly from direct injection I'll let that pass and just notice that I was not talking about the engine specifically but the overall design and that I even pointed out that the engine they used was "antiquated".

> Recycled material is almost always more expensive than non-recycled one

Do you have any numbers to back that up? And here I'd like to have a breakdown to see where the costs are coming from. In a planned economy it is much easier and cheaper to source recycled or scrapped material (i.e: You know you need 10ton of cotton wool to make X goods in a factory and you also know that you have to scrap 0.5tons. Therefore you just plan on having 0.5tons for further use and collect that with a truck once a month.)

> Eastern Germany had shortages of materials so they literally used anything they could. Do you really think it was inert and harmless? For e.g. soviet bloc used heavily carcinogenic cleaning agent in preschools, hospitals etc.

You won. I'm completely traumatized by ~"carcinogens in preschools and hospitals". Well, maybe not, because that was not the topic at all (but I can give you many more great examples of what was utterly wrong if you need them for further "arguments" - after all, I grew up there).
I don't care why we use resources as efficient as possible as long as we do it. Now people carry proper fabric shopping bags "because of the environment1!!!1!". Before there was this joke in Western Germany: "How do you spot someone from Eastern Germany? He is carrying a fabric shopping bag!".

> why do you think recycling needs to be forced by law?

Because the elected representatives think that the majority wants to protect the environment. Or in other words: Because we have arrived at a point where people think it is important to use resources as efficiently as possible. I don't see the importance of why people want to save resources as long as they do it.
Also, when the tournament interface says Stockfish is working at a depth of 41 plies, does that mean it's performed an exhaustive search to that depth (!?!!) or just that it's examined some line of play to that depth?
Diamonds as parts of cutting tools are now above abrasive size. Look at the site linked. There are sizable diamonds as cutting edges in tools.
There were zero comments before mine. (and it's why I explicitly stated "new" threads)
Show HN: Pluri(Alpha) – An Experimental Language Made on Top of JavaScript
Of course, all other software is bug free...

Honestly this is a complex problem area and I think the Celery developers have done an excellent job of making it pretty trivial to get up and running while providing lots of flexibility for more advanced users! Not an easy feat.

Are there bugs? Of course - but I've never come up against one that I can't work around. Is that annoying? Sometimes but that's software development.
That attitude speaks volumes about their character and lack of critical thinking skills.
It's really smooth, I checked to see if it was built in React given the speed.

On the same lines as the comment above, London and London Borough of Camden are listed separately too.

Edit: And you're printing some arrays into the browser console.
It sounds more to my like it's telling me how to feel. "Should feel" and "are" are not synonymous.
I had a Larrabee A0 spin I tried to mount on a copper wire for my wife---that's like 30 grand in, uh, engineered jewelry. Didn't fly.
Seems like the perfect kind of app to build on sandstorm.io, since it's something you'd probably want to own on your own servers.
200+ Million Keywords in a Semantic Keyword Tool
If you have connections in Embarcadero/Idera Software, now is the time to convince them to release Delphi 1 as freeware.
Exploring the universe of processes
Make the website button open in a new tab, or at least use an <a> element instead of a <button> (you can still use the .btn classes from Bootstrap in <a> elements if you didn't know)
Prototype for the Canceled Project ARA Modular Smartphone Revealed
Looks like an Adventure. How long did it take you each way? 3 days? 12h/day (and something like 500Mi per day?)
that's truely a good question
This is great, I can see myself using this.

However, this suffers from being a SPA:

- URLs are not persistent, meaning if I cannot bookmark searches I care about.

- Outbound links are buttons for some reason instead of anchor tags. This means that ctrl-click does not work and will bring directly to the website.

Other things:

- I don't think it's easy to filter conferences which are within an acceptable distance. A map-based search a'la yelp would go a long way here.
No.

Most games won't be written.
FAR and KIDS are semi-standard for KSP realism. I don't know if they play nicely with Principia, though.
That would be the fix with the comment "This patch is a temporary fix and disables the shuffling of input
and output notes"?[1]

[1] https://github.com/zcash/zcash/pull/1790
WTF with the auto playing video on mobile when you scroll down? I guess I'll be avoiding smithsonianmag links...
Only the good lines of play. The secret to modern chess engines us that they are able to not evaluate most most moves.
Reading this apparently biased article in favor of DataStax, it seems like no one is coming out of this situation looking good. I personally believe that DataStax may have overplayed their hand here since several of the high-powered Silicon Valley companies use Cassandra. If DS' commercial offerings aren't up to snuff, one of them will undoubtedly step in to help steer development of the source in a direction that benefits them.

Cassandra is one of the better big datastore offerings out there, and the doom and gloom narrative played by the article seems a bit disingenuous to say the least.
I appreciate your careful reply here. You have pointed out a lot of useful historical background, in particular, the fear the German industrialists had for the Communist party, and the fact that the Nazi party never had great success at the ballot box.

Certainly the US situation is different (no potent workers' movement to fear).

But elements of the wealthy Right are fearful of national health care, environmental regulation, the costs that might come from climate change. They see great advantages in changing tax rates. These fears and forces could play a similar role to fear of a workers' movement.
Can I use this to overlay everything on the screen? Similar to what Humanized Enso does: http://zapp3.staticworld.net/downloads/graphics/screenshots/...
how about a :obnoxious selector for links?

autoplay video, please register, and messing with history would be lovely.

I guess it's because there's no good way to populate the selector without visiting the link target.
There is also Mikrotik's RouterOS (commercial) with great command line and scriptability.

[1] http://www.mikrotik.com/
I've been out of the web game for a while - does the browser report what your keyboard layout is?
> Redis vs XML-RPC/JSON-RPC is a mismatch. It's more of a msgpack-RPC with Redis as broker vs XML-RPC or JSON-RPC:

I used it as a sort of mental shortcut. MessagePack is very similar in data
model to JSON or what XML-RPC allows, so I treat them as essentially the same.
I was comparing the architectures where the client connects directly to RPC
server, as opposed to connecting to a third party (broker, Redis in this
case), which is supposed to relay the communication.

> 1. Most brokerless RPC protocols make it difficult to inspect the message on the fly. With Redis, you can open up redis-cli and subscribe to the appropriate channels to extract the raw messages. For most users this might not mean anything, but for others this could mean easier debugging, measuring performance, and so on.

This sort of things is usually implemented using logging, but I agree that
while usually it's not an important feature, there are cases when it is
extremely useful.

> 2. msgpack's serialized format is small. [...]

Though this doesn't concern Redis, and could be a wire protocol over raw TCP.

> [...] the idea of introducing Redis into the equation to use as the broker didn't seem like additional complexity to me because a lot of other network messaging protocols rely on a broker anyway.

But we're not talking about messaging protocols, we're talking about RPC
protocols/systems. You introduce two services (Redis + RPC server) for a task
that usually was carried out by one. This is why I claim it's greater
complexity than usual.

> ZeroRPC, another popular RPC choice, uses ZMQ.

I'm not sure it is that popular. Thrift, Protocol Buffers, and gRPC seem much
more widely used, and XML-RPC is a little longer on the market, so it probably
got a fair share of RPC use.

And ZeroRPC doesn't seem use broker, just a ZeroMQ protocol. ZMQ is in this
setting more like a transport protocol than a separate service to dispatch
requests and responses.

> The client and server don't even have to know each other's address and port, they just have to know which Redis instance to connect to and assume that there exists one of the other to work with.

So instead of knowing an address and port of an RPC server, client needs to
know address and port of Redis. This doesn't seem to be much of a gain. At
best, Redis acts as something analogous to port mapper in this setting (though
it relays all the communication instead of telling the client where to connect
to).

> Redis also provides the channel buffer and the queue instead of me having to write those as part of the client/server code, which means anyone else looking to implement the protocol in another language wouldn't have to deal with those as well.

Job queueing is somewhat outside of the RPC protocol, though I agree it can be
useful. The RPC system I mentioned I wrote does have a queue and we use it.

Though I don't quite understand what you mean under "channel buffer" term.
I definitely experience it a lot with math. I think the way we learn and "write" math is somewhat different from how our brain does it. So you need to give it a bit of time to translate everything to its language and back to the formalism we use.

Sometimes I feel like a problem is way easier in unconscious space, like I'm sure solution is there, I can almost see it but it needs time to encode it in the much slower conscious form.
> That would be unthinkable today due to rent & food & healthcare costs.

3D printing won't help with any of those.
Accidentally downvoted. Replying to give it some karma back.
When visiting East Germany I always preferred the https://en.wikipedia.org/wiki/Wartburg_353 over the Trabant.
Most games quit windows to gain the extra RAM, AFAIK. It wasn't until Windows 95, DirectX, and Windoom that Windows gaming caught on.

Or am I wrong?
Find a documentary about blood diamonds. Find some excuse to watch it while she's around, and don't let her stop you. Swear and say that you aren't going to hurt people for a wedding ring! Say she can have any thing but a diamond! Etc. Good luck with the drama :)
I'm only half way through this article but it strikes me as kinda ... wait for it ... smug, no?
This Youtube channel, Aging Wheels, showcases the Trabant: https://www.youtube.com/watch?v=UhpIgM6TpwA
Incentive is less to rebel if he lost. It wouldn't have seemed more piling on rather than principled move. In same hypothetical I kinda feel like most people would have waited.