skysight-inc/HackerNews huggingface dataset:
Let's Encrypt is great, but completely useless for... Actually every single website I host. No wildcard certs, the rapid rotation that requires software to renew it regularly, etc. The cost of implementing HTTPS for dozens of sites with no sensitive data is simply not worth it.

When companies like Google and Mozilla decided how to handle HTTPS, they decided based on their needs and their perception of everyone else's needs, like banks and major corporations. This led, IMHO, to a complete failure to recognize a lot of other uses for the Internet, and so their solutions fail to adequately account for them.
>the high nutrient requirements needed to grow the biochar

We seem to have forgotten that natural forests are incredibly productive, and don't need artificial fertilizer. So we have a proof-of-concept. How do they do it, and how can we emulate those processes?

Spoiler alert: soil (along with the root action of plants) is essentially a flat biological nanomachine that breaks down solid rock and fixes nitrogen, manufacturing fertilizer in-situ. https://www.youtube.com/watch?v=x2H60ritjag

Of course the logical way to do this is not to create some vast new land use category ("carbon forests" or similar), but to transition our largest current land use category -- agriculture -- from a carbon-releasing to a carbon-sequestering mode. It also helps to increase biomass per hectare in suburbs, by transitioning our current low-carbon-density lawns over to a biome that buffers substantial amounts of carbon.

This is the fundamental insight behind Permaculture btw, which has been working on figuring out exactly what this looks like. It's a hard problem yes, but one with existential importance for humanity.

>Biochar is basically coal, which could be burned and converted into CO2 again.

...so don't do that. :) It's it obvious that burning coal also needs to stop for effective climate mitigation?

In this application, density matters. Biochar is extremely low density, and high in surface area, which makes it an ideal soil amendment which buffers rainwater and provides microbial habitat (not to mention raw carbon for building into soil biomass). By contrast actual coal is nearly worthless in this application.
More broadly: a text input box is in fact a small but surprisingly comprehensive text editor. It supports a cursor with insert, delete, and overstrike; highlighting, undo/redo, cut/copy/paste; and shortcut keys for all that. It supports every keyboard layout and every input method. It obeys standardized focus rules. It's even got word wrap and spell checkers these days.

So, you want to go your own way? How much of that do you need to reimplement? And how confident are you that the subset you choose doesn't completely ignore some vital use case you forgot about?

You certainly can't get away with just wiring keystrokes to a field.
Exactly, all this guff about overriding elected governments is rubbish. Each government is still sovereign and free to withdraw from the treaty, negotiate changes to it or change its laws as it sees fit. As it happens the US is doing exactly that by withdrawing from the treaty, which they could hVe done after ratifying it just as well as before. So has TPP restricted the sovereignty of the US? Er, no. Could it have? Same answer.
I understood the lesson a completely different one: that those whose jobs are destroyed by some larger event, should be supported?
What if the <form> submits to an https page but the page is served up on an http page? The form submission will be secure, correct? Will Chrome still mark as insecure?
I see that makes sense. I wonder if at some point we should go back to the drawing board on whether the names "lvalue" and "rvalue" make sense. I keep on going back to the mathematical LHS and RHS semantics to figure it out but I can see why other programmers and myself get confused on these sorts of specifics.

Giving the compiler the ability to move implicitly surprises me since moves can have side-effects as you've said.
In my opinion as someone who works towards inclusion for those with intellectual and developmental disabilities...

Why not both?
> taking the same stance when the alternative for the immigrants is potentially far more catastrophic

refugees also tend to be better off economically in coming to the US. There are a lot of people in the world that can be saved from death by granting them asylum, but who don't get it. To what extent can, and should, the US help the world outside its borders?
To illustrate how ridiculous and self serving this is, replace the word "data" with "cancer." You cannot become a "scientst" by watching ted videos. At a minimum, it requires a credentialed degree. Otherwise, I'm a data scientist too.
Yes, this is the very practical definition of "tacky" design. It's when something visually promises something that it isn't in performance. Form and function are very much tied together and a car that looks like a Ferrari but feels like a civic would cause a negative cognitive dissonance
I've noticed a lot of sites default to "show password" with a toggle so it wouldn't be insane to think they'd opt for plaintext the whole way.
Many Americans voted for a candidate who has catered racist supporters and put forth a variety of xenophobic policies and made even more statements in that regard.

As a simple example, our current president campaigned on a wall to keep out "rapist" Mexicans and to prevent anyone who was Muslim from entering the country because they were terrorists. Those are both explicitly xenophobic statements. They "showing a dislike of or prejudice against people from other countries". Still, about 60 million people voted for him, which means that to those 60 million, either his statements were a good thing, or they were minor enough downsides as to be ignored.
Why are all the names profanities? Serious questions.. Some are pretty.. Racist. Why people use this service, because of transparency and anonymity?
"If you’ve seen the low level parts of RSA keys, you’ll immediately recognise this. Otherwise, convert it to an unsigned integer and you get 65537 – a common RSA modulus. RSA public keys require two pieces: the modulus and the public exponent. Let’s take a guess that the next piece is going to be the public exponent."

That's backwards - 65537 is a common public exponent. The modulus is the 2048-bit long thing.

Also, the writer says "2048-byte" RSA key when it's really 2048-bits.
Why use modbus, a protocol that is nothing more than remote access to a bitfield, when you can have OPC UA, a semantic object-database with an (encrypted) meta-object protocol for remote access and real-time notifications.

If you look at the offerings of GE, Siemens, and the like, all signs point towards OPC UA as the TCP based protocol for industry that everybody agrees to use.
... which also disincentivizes work more than UBI, because why work a low-wage job for that minimum income when you can get it for nothing instead? whereas with UBI it's always in addition.
They might also have assumed that I approve of states interfering with municipalities this way. No way: I'm for complete decentralization. Of course that means I'm also against municipalities decreeing that one type of power will be available rather than another, but I figure people can work at a local level or vote with their feet rather than enlisting state or federal interference.
I watched my mom take night classes and work a day job while raising three kids (with my dad) under 6.

We literally packed up and moved back to the US (we're all citizens) because where we lived was bombed by US forces. We came back to the states with 3 kids, no jobs, and a lot of what we had was actually blown up.

Don't tell me you can't retrain. It's a matter of deciding to do it and figuring out a way to make it work. It's not EASY, you don't want to do it if you don't have to. There's simply nothing keeping you from doing it other than the fear and anguish associated with upheaving your life.
Well I certainly don't approve.
Or withdraw from the agreement. This is no different from any other treaty with an arbitration or oversight element, which itself is a law once ratified by a nations legislature. You agree not to do certain things and do others. One of these things in this case is not to pass certain other kinds of laws. So it's simple. Either don't pass those kinds of laws, or withdraw from the treaty. No loss of sovereignty involved.
Roughly how long do I need to run this for to be sure that I'm safe?
I can understand why they would want to convince everyone to use HTTPS to restrict access of your data from their competitors, but it limits the data they can collect as well. HTTPS has stricter cross domain policies so their ads would gather less information and their Fiber ISP would no longer be able to collect data by tapping connections. But on average, I think you're right that HTTPS would restrict more of your data to Verizon etc than to Google.
> So you're saying that everyone who's promoting UBI is actually just doing it to incentivise poor people to work?

What I'm saying is that is a primary difference between a UBI and the status quo. Giving money (or less efficient money-equivalent things) to poor people is not, because we already do that.
I agree that was the strategy. I am just saying that when they move on to the next stage, it is going to fail terribly and get business and the majority of the public mad at them. And that in turn could help lead to their losing the presidency and maybe the congress in 2020.
It would really interested in seeing a heat map of the "counts of autism by zip code" overlaid with another heat map showing "counts of autism by zip code as a percentage of the population" - since it might show areas that are over and under reporting.
mind linking the paper?
Snapchat now lets you beta new features
This squishy robot squeezes pig hearts to keep them pumping
The correct answer is always "IE doesn't support it"
Why not go and research that for yourself? I don't wish to be uncivil but I've heard this question so often for the last 20 years that I now regard it as little more than concern trolling. I get it, it's hard to make meaningful quantitative statements about a behavioral disease whose clinical parameters are hard to define.

But it's a naive point and this subject has been a topic of public debate for a long time now, so the skeptical signalling gets really tedious after a while. It's about as enjoyable as if I described your work as a computational scientist as 'pushing buttons all day' or made some crack about it being an excuse to play video games, as a way of signaling a lack of regard for nerdy pursuits.
These Alix boards are my normal go-to for exactly this sort of stuff. Note I say Alix, but they have a few different platforms with a few key differences. You can also get small enclosures, Wifi cards and antennas, etc.

http://www.pcengines.ch/alix.htm
I'd suggest the key difference is that one is a conscious decision, often taken with prior thought, and often some proactive mental preparation - that could be as simple as reading scripture.

The other is typically unconscious, often exacerbated by anti-social behaviour.
Yeah! So lets pull from everyone basic, guaranteed health insurance, because every 1 in 68 persons should be able to generate a buck, somehow. And the other 27% of US population that has an existing condition too. Double good if a child, let's bill their parents for decades under a high risk pool until they too are broke and wards of the state. Let the downvotes rip, myopic people who can't understand a dollar is an imaginary thing, subject to whatever society says it is worth - not the other way around.
Sweet! Another compelling option for sub-$100 SBCs. I've been keeping track of them in a Google Sheet at https://docs.google.com/spreadsheets/d/1TCugLk0GSukeWjhsLu73....
The best way to reduce emissions of CO2, is to develop sources of energy that are more economical than fossil fuels. If we had the huge surpluses of carbon emissions free energy implied by fusion, we'd be able to slash energy-related carbon emissions to a small fraction of the current level, while also drastically reducing the need to extract hydrocarbons as a chemical feedstocks. Fusion is probably even capable of providing enough energy to sequester excess carbon, beyond emissions.
Looks well done. Congrats on shipping!
Absolutely. Which is what makes They are, have always been so blatantly false.
I think it's about how much newness you have to handle at the same time. I can happily take a project using a framework or two I've never touched before. Or something in a new language but similar domain. But when you have the perfect storm of new language, tools and framework (and maybe OS) that's when it hurts. I'm not saying I totally couldn't switch, but it made me change me attitude a bit from '2 weeks and I'll be back at full productivity' to something more like '2 to the power of number of new things'. The more newness that has to be handled at the same time, the longer it takes to pick up all the interconnections.
Yeah isn't the whole point of a spectrum that everyone is on it?
You're comparing CdA for the Golf with Cd for the Ferrari. According to that table, the '03 Golf has a Cd of 0.32, actually lower than 0.33 Cd of the Ferrari. Without knowing the frontal area of the Ferrari, I don't know if its CdA is higher too.
I think the difference might lie in the income level in USA vs EU, but a middle class car in EU is about 25K-35K euros after all taxes.
> A substantial portion of web traffic has transitioned to HTTPS so far, and HTTPS usage is consistently increasing. We recently hit a milestone with more than half of Chrome desktop page loads now served over HTTPS

Well OBVIOUSLY when the traffic is increasingly going to the same top ten sites like Faceboo, Twitter and Co.
This has been coming for a long time. First, AT&T spun off their less profitable stuff into Lucent, and then Lucent spun off their dog investments into Avaya. It's all part of the plan.
Xy Problem
Do you need a degree to become a computer scientist / programmer?
If the only thing you host is a small blog without ads on a server that you have complete control over and spun up last month or something, sure it's 5 minutes.

In the real world, for many commercial operations, and especially for legacy code, there can be significant hurdles. For example, it took the NY Times 2 years to move to HTTPS, significantly more than 5 minutes, and they haven't even migrated 100% yet. https://www.thesslstore.com/blog/new-york-times-moves-websit...

Troy Hunt, a security expert, wrote about this topic a year and a half ago, and explained why, at the time he wrote it, his site wasnt HTTPS. http://www.troyhunt.com/were-struggling-to-get-traction-with... (this was before let's Encryt)

>unless you’re reading this in the future, you’re reading it on my blog over an insecure connection. That wasn’t such a big deal in 2009 when I started it, but it is now and there’s nothing I can do about it without investing some serious effort and dollars. I run on Google’s Blogger service which ironically given their earlier mentioned push to SSL, does not support it. Whilst Google doesn’t give me a means of directly serving content over SSL, I could always follow my own advice and wrap CloudFlare’s free service around it, but that won’t work unless I update the source of every single image I’ve ever added to almost 400 existing blog posts… and there’s no find and replace feature. This is the joy of SaaS – it’s super easy to manage and good at what it’s specifically designed to do, but try and step outside of that and, well, you’re screwed.

Another real world example, that I've encountered - your software is an intraweb site running on your customer's server and you have to play by their rules and policies on what your customers can put on their servers and when. And it's on exactly nobody's priority list.
Oh of course, but it is easier to hide that.
Vaccines are life-saving and necessary. There is no evidence linking them to autism.

But, WHY do children in the US need nearly 4x as many doses by age two as compared with children in Germany and Finland? Since childhood diseases aren't problematic in those countries, you'd think we could get similar results with a streamlined schedule that looks more like Europe's.

Edit: thanks for the data. European schedules have changed since I knew them.
Can we just ban inputs being manipulated on input? It's really annoying for custom implemented types like phone numbers that do the '(___) ___-____'. Half the time it seems they break if you mess up.
> but we shouldn't expect any such improvement for citizens

Why shouldn't we? Does TPP prohibit that? No. Are you saying that countries with poor rule of law should not make any improvement to the Trent tho for the rule of law unless it does it all completely in one go? Are incremental improvements undesirable or actively bad? That's a pretty extreme absolutist position to take.
The form submission is only half the issue. If the http page gets compromised the malicious party could simply read the contents of the password input.
> but all of our family is on the east coast or in Germany

So I take either you or your wife is German. If your child doesn't spend enough time with the German parent, he or she will not know the German language, so please be careful with that.

Disclaimer: I don't speak the language of my father (Vietnamese), for the reason I mentioned, and as a French expat I try to make my two kids speak French when I can, but they don't have the same level as "normal" French kids, especially my older son who is 6.
Yes I agree but one hope is the Supreme Court who is hearing a case on disability rights in schools. It's pretty clear that schools are not meeting the standard of equal education for students with disabilities and hopefully that finding will trump a hostile administrator.
I always wondered why car companies like Mazda or Hyundai or Honda don't produce cars that may not have the performance capabilities of a Ferrari but resemble one in their shape?

Google the "Fiero".
possible to use gpu to parse json or http header?
oh, the hardcore pseudo-neurodiversity movement arrived. sorry for impoliteness but you guys need to stop looking only at yourselves as you're old-fashioned high-functioning intelligent people with certain emotional intelligence circuitry altered, perhaps, perhaps something else, doesn't really matter as long as you can talk and be understood.

now compare to this: https://www.youtube.com/watch?v=rvC5gzmwq_8 and please tell me with a straight face that this kid wouldn't greatly benefit from being able to communicate which treatment hopefully gives him or already has.

alternatively, some of you actually went through treatment and are in a i-am-fine-what's-the-problem state of thinking, which is obviously wrong in general.
> who is in a position to tap your connection such that this becomes a serious security concern?

When you use HTTP everything is sent in plain text. This means...

- Anyone on the same network as you can see all of your traffic. This includes company networks, coffee shop wifi, your house, the library; any place that has a WiFi network. Caveat: it's possible to use network isolation to hide your traffic but this is crazy rare to see and typically is done to isolate networks, not individual traffic.

- Your ISP can see and log everything sent over HTTP.

- Anyone at the router level that your traffic passes through. Your traffic makes a lot of hopes over various routers on the internet before making it to your final destination.

Overall it's a terrible idea for anything that needs to be sent securely.
> In fact, I think you worked on it too.

Oh dear, what code of mine have you seen? :-) (email address is in my profile if it's not something publicly discussable)
Technically aren't 68 out of 68 children on the spectrum? The point of a spectrum is that it includes all values.
It's 10 times more painful to spend my time on anything I don't truly believe in. I tend to think the default state of existence is discontentness, and so we're always going to be upset over something at one point or another. In my experience, there is more piece of mind with struggling against important issues than trivial ones.
Simplifying the move from HTTP to HTTPS
I thought the rise of market economics would bring about better humans because its more efficient and just generally the best system for humans?
And let's not forget the Miata! The best compromise IMO is to have a dedicated sports car (2-seater, manual transmission, low, light, optionally with ridiculous power depending on budget) and a second vehicle for everything else, like a Honda Element (wish they still made those, compact but roomy, handles well for what it is, truck bed liner in the interior, many seats if you need them) or a quad-cab pickup if you need to e.g. tow heavier stuff. There are some ideas like fast station wagons (Volvo v40 Polestar for ~$60k, automatic only, WRX STI wagon that they don't make anymore, E63 AMG wagon at >$100k also automatic only), fast trucks (SVT Raptor, Chevy SSR, SRT10 RAM), or hot hatches (A45 AMG, M140i, Audi RS1, Megane Trophy-R, Astra VXR, Leon Cupra, Civic Type R, none of which are available in the US...we get the GLA45 which is higher and handles worse, and the M240i which is a coupe), sporty SUVs (Cayenne, Macan, X5M, etc who cares), but all make huge compromises and end up mostly being heavy and/or expensive. For ~$50k new, you could have a real sports car and a real truck or utility vehicle.
This is an earned income tax credit(https://www.irs.gov/credits-deductions/individuals/earned-in...).

Personally I could get behind the "lower federal minimum wages regulations" if it were met with a "but increase a EITC to help tweak the income of those who need help".
I'm going to guess that insider trading is that top 1%, then, or most of it. Some trading on insider knowledge (such as when you sell a stock, depending) is perfectly legal, or at least wholly unpreventable or unprosecutable, of course.

Those in the bottom 99% of investors may still be capturing at least some of the increase in world wealth over time. Then again, maybe not: or not much. I'd have to read the article to know if the answer to that question is there, and I can't afford the extra time, alas.
right. so i work, pay taxes and those get distributed to my neighbor's UBI. what i have passed on to someone else still has value.
Wyoming is already the only State to tax wind as far as I know.

edit, adding a reference:
http://www.hcn.org/articles/wyoming-considers-raising-an-alr...
Even if something is a majority choice, that doesn't automatically mean that it isn't silly. And silly choices absolutely deserve ridicule.

Have you ever heard the phrase "One million lemmings can't be wrong"?
Like every other person who started a forum some years ago or a wordpress blog you mean?

Do you think web hosts offer SSL by default?

NO they don't. Duh. That's what is annoying in these comments. Everyone seems to shrug like SSL is standard feature nowadays, except is isn't.
Your site's server is just one node in the chain of nodes between your server and the browser. Any one of these nodes could be malicious and tamper with the data in either direction. In other words, this isn't about just your node, it's about all nodes.
But you compile once, not everytime you run.
> a number of limitations in the practical application of generally applicable rights in the context of the border

That's one way to put it. https://www.aclu.org/other/constitution-100-mile-border-zone :

> Federal border agents are stopping, interrogating, and searching Americans on an everyday basis with absolutely no suspicion of wrongdoing, and often in ways that our Constitution does not permit.
holy shit i didn't see that.