skysight-inc/HackerNews huggingface dataset:
i dont think you understand how this works. they install a root certicicate on your machine and do mitm "attack" so they can scan the urls, and block some attacks (i remember when some forum had embeded a pdf, that had some attack and antivirus blocked it )

also you have installed an application that has a root acces to the pc, if it was mallicius it could do allot more damage. it is ultimately a question of trust.

i created and installed my own root certificate because i dont want clicking on the exception if i open a new incognito window, its especialy anoying for websocket connections.
Tangential, but could anybody recommend a proof-heavy first-principles book for probability/statistics?

I know stats etc. from an applications perspective (excel/sas/r), but 100% sure of the theoretical underpinnings behind much of it.
You Searched for Newegg – Money Quick Fix
At no point did I state that any of the foods you mentioned were nutrient poor -- I just said that some plants are among the most nutrient dense foods available. This can be true without dismissing other foods as nutrient poor. That even fits in with Pollan's maxim, which simply states most of the food you eat should be plants.

Since you asked, here are some nutrient rich plants from memory: kale, spinach, blueberries, garlic, lead, raspberries, asparagus, lentils.

All of these make great additions to any diet, aren't loaded with toxic levels of sugar and starch. They go great with liver, eggs, fish, or meat. I don't really understand where your hostility comes from, or why you simultaneously try to downplay the nutrients available in plants as some kind of conspiracy against other forms of food.
TechCrunch Disrupt Returns to Berlin in December
"The government confirmed this week that German-born billionaire Thiel was granted citizenship in June 2011, just two months after donating NZ$1.0 million (US$730,000) to an official Christchurch quake disaster fund. English acknowledged Thiel did not meet the usual requirements -- living at least 70 percent of the previous five years in New Zealand -- but said he was granted citizenship due to exceptional circumstances."

New Zealanders are not stupid. There will be a backlash of sorts against, 'cash for citizenship', especially if the ^special deal^ is US favouritism of sorts.
Retrieval of objects in space and bringing them back to Earth is about the only mission where the Space Shuttle was superior to capsule designs. This was also used in a handful of science missions for studying long-term exposure of various materials.

But the vast majority of the Shuttle's 130 flights would have been better served by an Apollo or Gemini derived design.
Ancient sysadmin cannot upvote this enough.
That's amusing in that the LA basin had an infamous "smog cap" for a good stretch of the XX century. Helped a lot getting those seminal strict emission laws in California, I believe.
Cisco to acquire AppDynamics for $3.7bn
Orchestrate Sales Departments
Google Vision vs. Amazon Rekognition: A Vendor-Neutral Comparison
The literal syntax is going to look more like JSON, like Python and JavaScript have. I don't see what's better about association lists (assoc (k v) (k2 v2)) vs. {k:v, k2: v2}.

I mentioned in that blog post that Clojure introduced meanings for [] and {} in a Lisp, and I generally view that as a good thing.

Also if that syntax is only used for data literals, and not code, then it loses the whole Lisp paradigm and I wonder why you would want that syntax.
I'm not sure we should make it a competition!
When there's a very strong aurora I think folks even see it as far south as the border. That's pretty uncommon though. I'm located right near Dunnet, the most northerly point of the mainland. Aside from summer when it's light most of the day, you may be able to see the aurora a few times a month. It's up to chance though, as the conditions need to come together. Strong auroras are less common. There are a couple of good Facebook groups if you search "aurora" and "scotland" or "uk". The Shetland webcams are pretty good too: http://www.shetland.org/60n/webcams/aurora-archive
Double the ram, twice as fast, gigabit ethernet. 4k. Still usb 2.0 though. Much riskier on OS and software support/community though. If starting out I would go Rpi. But this is defo a very well specced little board.
I'm reminded of something I read by people who were in the cultural revolution. They always convinced themselves that Mao had bad advisers and they'd get purged soon. Took decades to twig that the problem was Mao himself.
If you are on an Ubuntu system you can do the same thing with a native utility, try:

ssh-import-id-gh <username>

It also works with launchpad (of course):

ssh-import-id-lp <username>

(It does exactly the same but is shorter to type)

EDIT: typo
Not to mention how hard is to have a standardization. Doesn't do any good if the data is not guaranteed to have been measured in somewhat similar conditions. Thinking about my cholesterol. I've seen so much fluctuation on my own blood results between labs. They blame it on the "bad chemical reactives". And that is even a somewhat standardized numerical values, but what about subjective symptom:
"I have a sand in eye sensation". For ML this must be translated to a numerical value. Does it feel like a 1 or a 1,5 sensation out of 10, how can we make sure we have the same understanding?
"Walker has hinted that what NASA loses in earth science research could be shifted over to NOAA."
read "New Zealand passport row after PayPal's Thiel given citizenship" http://www.france24.com/en/20170126-new-zealand-passport-row... and https://news.ycombinator.com/item?id=13489901
This should do it:

https://www.microsoft.com/en-us/software-download/windows10s...

They've had similar tools since at least Windows 7 IIRC, if not XP - you've just always had to download them separately, and they've never been advertised with much enthusiasm. Probably trying to strike a balance between pleasing power-users and keeping the bundled-bloatware ecosystem happy, seeing as MS benefit financially from both.
Most computer users are not competent enough to use their machine properly (and need stronger AV to protect them). What makes you think they have the technical capability to "vet their AV vendor"?
Don't forget that if their software is changing the certificates for every HTTPS site you visit they're probably doing it on the fly. This means that the private key is on your computer. Assuming they generate a per install private key that won't be a big issue but if it's the same private key for all their installs it could get pretty bad once someone gets the key
Four Bitcoin Miners Arrested in Venezuela
Postman has a standalone desktop app nowadays, just so you know.
Gigabit Ethernet is interesting to me, I've ended up using rather more expensive devices than raspberry Pis because their network performance is poor (particularly on the Pi as the Ethernet is attached via USB).
When making an appointment, my GP's assistant explicitly asks whether you've got multiple complaints, and if so, to list them; before explaining that in that case, they can reserve more time.

Then again, my previous GP said he had 7 minutes per consultation.

(FWIW, I’m in the Netherlands).
The specific problem is difficult to quantify: he's clearly anti-science and a loose cannon, and he's in control. Where a normal handover may include a brief news blackout during transition, this is all a bit Arbitrary Diktats Of Dear Leader and people are jumpy as heck.

Data resilience in the case of a rogue executive is an unusual thing to come across, but it can't be unique. Executives change, and organization data needs to persist beyond the current board.
I was recommended Zinsser from a writer whose own writing is very wordy.

Personally, I prefer Strunk and White and the AP Style Guide.

But I was looking for good guides for technical documentation, web copy, and B2B high tech marketing material (case studies, data sheets, etc.).

Not how to write a non-fiction book.
D-Wave sells first $15M quantum computer to cyber security firm
SAP shows the world how digital transformation is done
There are lots of attack vectors, not just pirated software, and viable ones depending on desired outcome can range from email, browser, and direct software spread (pirate games). MacOS isn't safe, and neither is Linux though the attack vectors will vary.

If all you want is a DDoS, a fake advertising account can often deliver the desired effect without actually infecting anyone. It really depends on what the cost/benefit vs desired outcome is. Not everything requires root, and very few people actually check checksums for things they download.
All software has vulnerabilities but not all software has the egregious blunders that Travis Ormandy finds --- so many, in such a short period of time.

Furthermore, most software provides value that offsets security risks. Since the entire value of AV products is to improve security, when they fail to do that, they're worse than useless.

The homogeneous market argument is weak. If a determined attacker wants to compromise as many machines as possible with a single attack, they'll come up with an exploit that passes all AV products.
KVM for ARM doesn't parse instructions -- you can just use the register info the hardware gives you in the syndrome register, which covers everything except oddball cases like trying load-multiple to a device, which doesn't happen in practice and so we don't support it.
I can see that my comment could be interpreted as questioning whether the P320 has a manual safety, which was not what I intended. I was asking for a reference that supports that Glock was dismissed for not having a manual safety. The fact that Sig apparently added one is circumstantial.
As far as not having to read things twice, draft and final, I'd have to lean towards @sqldba's position.
My pet gripe: Warning me about cookies as if they are malware.
How Agile Performance Management Can Increase Employee Engagement
Might be a use case for https://datproject.org.
I've fit this pattern for most of the things I build, though I'd replace "days" with "weeks" above.

The things I have finished are nearly all things I have put a price tag on.

They may have been done before I shipped them, but most weren't. But once there's the threat of real users sending you money and expecting things to work, that's incentive enough to actually wrap up loose ends and polish what's there.

Notice that what actually happened was a slight redefinition of "finished" to include all the features that currently work, with non-working features hidden and no pointy bits sticking out the sides. As distinct from "all the things I wanted to include are now working to my satisfaction."

Eventually you can work toward including all those other things, but step one is to polish what's there. Then it's just a matter of polishing each additional feature after they're built and before they're exposed to users.
This is being exacerbated by the increasing factionalism within the US itself. I'm starting to understand better and better why Washington warned us of political parties in his farwell address

"Without looking forward to an extremity of this kind (which nevertheless ought not to be entirely out of sight) the common and continual mischiefs of the spirit of party are sufficient to make it the interest and the duty of a wise people to discourage and restrain it.

It serves always to distract the public councils and enfeeble the public administration. It agitates the community with ill founded jealousies and false alarms, kindles the animosity of one part against another, foments occasionally riot and insurrection. It opens the door to foreign influence and corruption, which find a facilitated access to the government itself through the channels of party passions. Thus the policy and the will of one country are subjected to the policy and will of another."
In 80 years we're back to the 90s so relax.
Don't most browsers have hooks for AV (and other plugins) to get into web traffic without having to mess with TLS?
Except in France, May 68, De Gaulle (conservatist) wasn't ousted, he even came back in favourable position after 3 days off the grid: He threatened to use the État d'Urgence against the strikers, dissolved the Assembly and the new election yielded 353 of 486 seats in his favour. People, at the end, voted for security.
MIT scholars produce new method of harvesting correct answers from groups
People have been racist throughout history. The majority of people. When did the majority suddenly stop? There's no mental weakness involved in describing things as they are.

In practice, this isn't the case. Racism just became something to be ashamed of, so now we can't discuss racism openly for fear of offending racists. At least the "rednecks" are honest about it.

And I hate to tell you, they're not interested in dialogue. They've got enough numbers, districting advantages and voter suppression laws that they don't care what you think.
I wonder, have there been cases where viruses or trojans were spread via Steam?
There is also an interesting middleground named Evolving Publication where the author publishes section by section, and the RSS feed informs you whenever a new section/chapter is added to the article:

https://martinfowler.com/bliki/EvolvingPublication.html

So the RSS feed is not per article, but per article part.
What's the difference between your crawler and the botnet client as far as the AV concerned? You're the outlier among the AV customer segment.
Yeah, I don't understand why people actively demand some proprietary battery + charger solution when the universal solution of standard size rechargeable cells has been around for ages. Eneloops are particularly nice.
AdNauseam, Google, and the Myth of the “Acceptable Ad”
On the probability front I recommend:

- Probability and Random Processes by Grimmett

- Probability with Martingales by David Williams

Grimmett is probably a better bet to start with since it doesn't expect quite as much prior math knowledge and covers a lot more topics. The Williams book is shorter, denser and doesn't cover much in the way of applications, but gives a really good theoretical underpinning of how probability theorists think about probability (ie in terms of Lebesgue measures and Sigma algebras).

edit: There is also a companion book to Probability and Random Processes called One Thousand Exercises in Probability which contains an interesting selections of problems and solutions that will let you apply the theories taught in the main book.
How to Secure a Smartphone for the Tweeter-In-Chief
Wrong. Israel will stamp a separate piece of paper to leave in your passport during your visit for exactly this reason.
Aurelia E2E Testing with TestCafe
Just think - the time you spent writing that snarky response could just as easily have been spent writing, for example, "He worked at Google from 2008-13 and had various prominent positions relating to Android, then he took a role as VP at Xiaomi where he played a big role in turning that outfit into a company you've heard of".
My question was whether they could (e.g. if cash dries up).

Of course, there is always a question of whether people can readily access debit cards and bank accounts. I heard stories from the US where even opening bank accounts and having debit cards (with zero credit) was out of reach for poor people for some reason. If that's the case in India then the fact that groceries and rent can be paid with debit cards or bank transfer is of little use to a large fraction of the population.
Do you know any interview or documentary of talking to samples of these populations? I wonder very much what they think. The interviews so far for me personally were showing that they are "morally deaf", but I am sure that this is not all the story (I probably living in my bubble).
The future of inbound marketing – capturing sales-ready leads
I usually copy the variables/utils to my project (often just the variables)... when updating minor/point version updates, it's usually a quick diff against the framework version to see what's been added/changed. Major versions are usually close to a rewrite of the rendering templates/components, so that's the case regardless.

I have my own bootstrap.scss, with my own variables/utils... the rest point to the framework versions... It's pretty easy to do and works out really well imho. Of course, I often only change a few colors, and tweak some of the font defaults.
Perhaps it is counter-anecdotal evidence showing the futility of anecdotal evidence as a whole.
Be ready to pitch your business – at any time
Across multiple poll providers, his approval -7.2[1] (although this hasn't updated with the latest Rasmussen poll). Rasmussen is the only provider that has him in positive territory.

Interestingly, Fox gives him the second worst result (only ABC/WashPost gives him worse)

[1] http://www.realclearpolitics.com/epolls/other/trump_favorabl...
Publishing the public key that you use to push to github/gitlab is not a big issue... But Re-using your github key-pair, to connect to other unknown and uncontrolled places, _is_ a security issue.

Even re-using your daily system user, for this, is a security issue.

But if you never did read the sshd_config man page, or never did play with its options, maybe you're unaware of this.

Also the sshd could be modified at source level.
>I keep waiting for someone other than the Maryland PD to appreciate the Beretta PX4 Storm.

I should mention that the Slovakian army is adopting the Grand Power K100; the action is very similar to the PX4 Storm (the barrel rotates).
"“Based on feedback from the local community we are reconsidering the quiet title process and discussing how to move forward,” Zuckerberg said in a statement. Hawaiians call Mark Zuckerberg 'the face of neocolonialism' over land lawsuits “We want to make sure we are following a process that protects the interests of property owners, respects the traditions of native Hawaiians and preserves the environment.”"

3 day reversal ~ https://www.theguardian.com/technology/2017/jan/26/mark-zuck...
I wonder what's fake about this story listed on quibbler:

http://www.dw.com/en/germany-slams-israel-over-latest-settle...
Laravel, Rails, Django, and a few others, are all pretty much interchangeable.

If you want the right framework for your productivity, choose the one that uses the language you have most experience with.

If you want the one that is fastest, re-evaluate your choices, none of these are "fast".

If you want the one that gives you the most maintainable code, I think that might be Django, but highly dependent on the first point, and I'm biased on this.

If you want the one where the code looks nicest, go for Rails, it's again subjective, but Ruby code is often very pretty (debatable whether thats useful).

If you want the one that is easiest to deploy, go for Laravel, you can stick a bunch of files in a webroot on shared hosting and it might work.

I don't prefer any one of these, each is better for different people, teams, requirements and restrictions, but none of these is a clear winner.
Maintaining several wineprefixes is trivial too. The wineprefix describes where wine installs the "drive_c" and other stuff. So essentially it's the "chroot" of wine. It's of course more secure to do so in a VM but I run several wineprefixes locally for convenience.
The homepage of the author confirms that it is a draft from April 2016: http://www.cis.upenn.edu/~jpaykin/
I do not think that Apple has the means to test this in the review, but maybe there should be a way to mark spam notifications somehow.

What I do now is that I complain to the developer/company twitter accounts. Most of the time I receive very hopeful and polite replies and ... nothing gets fixed.
∆⊢e:A

Can someone explain this (from p. 3) to me, or point me to an explanation? I am especially unsure about the usage of ∆ and : in this context.
Situational Assessment 2017: Trump Edition
Avira won the speed test? It reliably made every PC I installed it on 2-3 times slower and adds a few minutes to the boot time compared to MSE or whatever it is now called.
Thank you Ionic team!

I have already built tons of business apps with Ionic 2 (beta) and really like how easy it is and how well it scales. I also really like your ionic-app-scripts which make things like AOT a breeze.

I have developed native iOS since Apple introduced apps on the iPhone and I have created some very big macOS and also Android applications natively. I think there will always be use cases that you need to do natively. However for >90% of the apps I developed (and use) Ionic 2 is perfect and has saved me a lot of time.

The beta phase has been a bit though to keep up with because of how many changes where introduced by Angular and the build infrastructure, however since RC1 or so Ionic 2 is really really nice.

I came to the realization that native development is not feasible for many business contexts when I was tasked to build an application for iOS and Android simultaneously a few years ago. It was so much work and pain to keep both apps in sync that I have decided I never want to do this again. Luckily Ionic came to the rescue :-)
You will still find platform specific problems, but so far it has been relatively easy to resolve them.

Congrats!
Microsoft released a tool[0] that does exactly that

[0]: https://www.microsoft.com/en-us/software-download/windows10s...
I don't think you understand how HTTPS works.

> so they can scan the urls, and block some attacks

The purpose of HTTPS is to provide a guarantee that your connection to Google is direct, with no intermediaries, such that (1) only Google knows your search query and (2) you get a guarantee that the received content is from Google.

And you get this guarantee from certificate authorities that have a good reputation and that are in business because they've proven they can keep their shit secure. And when one of them violates that trust, the OS / browser vendors can start to invalidate their certificates. AV companies are bypassing it all.

The blocking of attacks reasoning is kind of bullshit, because Google's Safe Browsing service and browser extensions maintained by a community like uBlock Origin are doing a better job of warning against potentially malicious websites. There are always vulnerabilities to exploit of course, though it's getting harder for those to pop up due to the modern sandboxing of browsers.

However I have yet to see evidence that AV software is doing a better job of catching those, because it's a whack-a-mole game and it's more likely that browser vendors find and fix those vulnerabilities faster than AV companies, because bugs get reported to browser vendors first. And sure, if you have Adobe Reader or Oracle Java installed as plugins in your browser, that's a huge risk, but it's actually easier to uninstall those and browsers have started disallowing plugins. Safari for example is disabling everything by default.

The problem with installing their own root certificate is precisely one of trust. Yes, you allow a piece of software to run with root permissions, for as long as you don't see it do stupid shit, like installing a root certificate, at which point all of that trust should be gone.

And that is because a custom root certificate that doesn't belong to a competent certificate authority cannot be trusted and will increase the attack surface. This is security 101.
They're both high quality and pretty similar in terms of features. Use the one whose language you're most comfortable with.

Just kidding, rewrite everything in Go.