skysight-inc/HackerNews huggingface dataset:
Cloudflare et al don't terminate TLS using their own root certificates installed on the client, which means that doesn't expose you to KCI of all servers.

And they don't MITM the TLS connection, they terminate it. The difference being that the performance is better rather than worse (so more people use TLS instead of fewer), the server is aware of this happening so it isn't fooled into thinking the connection is using more secure ciphers than it actually is, there is no third party forcing lowest common denominator security between the three, etc.
> fling raw pointers around with abandon.

Jitters in seat
You are right, some instructions are not suitable for userspace due to their performance implications and have to stay in the kernel. We identified a small set of them, for example, some parts of IOAPIC support have to stay put.
HN is one of the few sites I even bother with the comments.
Honestly, back in '92 the language seemed easy, but the practice was hideously complex and error prone. Most people still couldn't even figure out how to do exceptions properly. I would argue that today, the language is more complex, but the practice is comparatively simpler (still complex as a ll get out, but compared to '92...).
Why Repealing the Affordable Care Act Is Bad for Entrepreneurs
Hundreds. No.
The Doomsday Clock is a symbolic clock face that represents a countdown to possible global catastrophe. It has been maintained since 1947 by the members of The Bulletin of the Atomic Scientists' Science and Security Board, who are in turn advised by the Governing Board and the Board of Sponsors, including 18 Nobel Laureates. The closer they set the Clock to midnight, the more vulnerable the scientists believe the world is to global disaster.

https://en.wikipedia.org/wiki/Doomsday_Clock

These are sharp people. They're fully aware it's not a clock in the strict sense you're pedantically ascribing. It's a useful analogy.
5 Things Engineers Should Know About Working with Fabric
I literally clicked into the comments here to mention how awesome Home Assistant is at things exactly like this. Glad to see I am not the only happy user / occasional contributor!
"Almost certain" seems like an exaggeration. At my college (Yale), the "student government" was basically just a committee to plan Spring Fling. You can see their budget online:

https://www.ycc.yale.edu/budget/
After looking at NC, I was astonished to realize that a congressman makes $50k more than the state's governor.
I eagerly await you building the society of self-reliance of which you speak. It sounds like there's nothing stopping you!
it's a metaphor
That exists as one (of many) installation options:

https://home-assistant.io/getting-started/installation-raspb...
How dare these "scientists", what gives these people the right to do this? To strike fear and panic in the markets and the world because a man was elected that doesn't share your political views? They can take their imaginary clock and shove it where the sun doesn't shine.

Life has never been better. It's been proven time and time again that statistically speaking the human race has never been happier or healthier. Let's move on past Donald Trump and all get back to business, this is getting ridiculous.
Yeah, I agree with you - there a many many reasons why we should get off fossil fuels and reduce our energy consumption beyond climate change. I was just giving an example of about the most reasonable sounding excuse for inaction in this area. Regardless of one's political views there are plenty of solutions that appeal to the full breadth of the political system but the primary thing that they can't address is oil and gas company's desire to protect quarterly growth, people's misplaced political reasoning (I'm against action because the left is for it type arguments) and the fact that some people just don't like change that may indicate the way they have previously been doing something is wrong.
> I would go as far as saying that C++ of the early '90s was at its Nadir of inelegance.

Yup. '92 C++ was what gave Java such a boost. If we'd somehow started with '98 C++, or better still C++11, Java might never have picked up so much momentum.
However, given that cancer cells do not evolve between individuals (as opposed to bacteria and virii), if we are to find a efficient immunological treatment it's going to stay efficient. If anything, we will evolve for our cancers to respond better to it.
One of the authors here. Happy to hear your feedback and/or questions.
The label does that though - the ingredients list. The title just doesn't.

The title on many foods isn't an accurate description of their contents though - wasabi is dyed horse raddish, crab meat is often mashed up and cleverly rebuilt pollock, most fruit juices aren't what they list, but still get to use the name juice because they're mostly apple or pear juice, most bacon bits aren't bacon at all - they're vegan even.

If you want to get an accurate picture of what's in a product, you always have to read the ingredients. The title is mostly just a vague description of its taste.
Why? The threat of global nuclear annihilation didn't disappear with the USSR.
I always read the comments, though sometimes I dread it. For certain subjects I'll know well in advance what most of the comments will be, and they can be surprisingly ignorant and negative.
Why is everyone trying to write everything in JS nowadays...?
1 dependency that's 34.6KB minified. That's a lot more than the two separate dependencies, and besides, once you've gone to the trouble of adding a package.json to add one dependency, adding one more is a very small step.
> Arguably the std::move stuff and the semantics around it have added uncomfortable complexity to the language, even if it might have been necessary.

I think the main pain with move semantics was that it had to be bolted on to the language later. Consider that factor, they did an amazing job with it.
If you're in debt, you need to pay off your highest-interest creditor first, and then on to the next one. When you have spare money, you can hedge bets on investing it.

But, Bitcoin is not an investment.

First, nothing you don't understand is ever an investment for you. If you don't know mining and I do, I'm investing by buying shares in a mine whereas you're gambling by doing it. (For instance, if you don't know, and really understand, why bitcoin tends to be used in a manner where you empty the balance from one address, sending some to the intended recipient, and the leftovers to yourself at a new address, then you're not ready to invest.)

Second, it functions as a store of wealth not capital. Its gains are partly from other currencies devaluing around it, not it being used to create more goods the way buying a piece of capital (shares in a manufacturing company) would.

That said, if you do any gambling (lottery tickets) you might as well put that into bitcoin, you at least might get something back.
Right right - I meant more at public universities. Presumably at Yale and other prestigious private schools, students (and student governments) have ways of exerting power other than the budget.

I'm not sure that's true, but I think that's a presumption that people make when thinking about education politics.
Laravel-Docker Dev Environment
One of the main reasons I got the GearVR was to watch movies in VR, but once I watched a couple I completely stopped. While the movies looked great in VR, almost as good as watching them on an IMAX screen in a real theater, the headset was just too bulky and uncomfortable to bother with.

I haven't tried the Vive or the Rift, but I expect them to be not that much better as far as comfort goes, and comfort is really the main thing that will determine whether it's worth the bother to wear a VR headset for hours on end, over and over again, once the novelty wears off.
Oddly I've found resistive touchscreens to be less reliable but anecdotes are not data so it could just be I'm unlucky.

One of the interesting things I also find is that using a touch screen on CalTrain while it bounces around is difficult, I can't imagine what it will be like to hit the correct control button on the touch screen of a rocket under boost.
I've taken vague note of the Doomsday Clock for a long time -- and it's a clever concept without a coherent calibration mechanism.

No quarrel with their directional moves ... now or at any other time. But they've ended up in the incongruous situation of saying that 2017 at this very moment is already more risky than the Cuban missile crisis of 1962, or Barry Goldwater's mutterings about nuclear options in Vietnam in 1964, or the China-Russia border war of 1969.

No. Simply no. They missed the chance in the early 1990s to move the clock back to about 3 p.m., giving themselves much more room to create carefully graduated increments of alarm as fresh stresses arose. The current state of play in the USA deserves much more than a 30-second adjustment, and somewhat less than a declaration that it's 2 1/2 minutes before midnight. I can think of at least a dozen ways things could get worse before we're at imminent risk of breathing radioactive isotopes for the (annoyingly short) rest of our lives. Some of those perils already popped up in the 1950s/1960s, and we made our way through them.

The current clock settings hardly do justice to the scientific method, or the rightful role of subject experts in public debate.
So digging around a bit on the page the 'Learn More' in the login approvals (https://www.facebook.com/help/148233965247823) claims that you can turn off SMS codes, but I no longer have the advantage of being able to walk over a few desks to get a real verification :) I may try to set up U2F later today and see if this actually works...

You would also need to turn off login notifications (section just above login approvals in the security settings page.)
> Higher wages drive prices up, and price out less productive workers. Sure, the people who remain employed are better off. But what about everyone who has to pay higher prices, and workers who are now unable to find a job?

I don't know if you do or have ever owned a business (I do), and that is somehow clouding your judgement, but this is a very shortsighted view, and in no way universal truth. Sure, on day one you as a business owner have to pay more, but going forward, every other business has to as well, so your clientele if it's end consumers (employees of other companies) will be richer, and if your clients are businesses their clients (employees) are richer so your business in turn still increases. This is not a a long chain of logic.

> Why is it ok to tax profitable businesses/people for the sake of equality?

I don't understand the motivation behind your phrasing. Is your question literally; "Why is it ok to tax X?". Because the taxing would be on profitable businesses, unprofitable business, rich people, poor people. Taxes are about societal growth, upkeep and yes, to some extent equality, BECAUSE it promotes a healthier market.
Given that the spaceships are fake regardless, I don't think that would be the reason for this particular complaint.
True. But is anyone shipping laptop with a Voltage that low? I see them up around 10.8 - 11.1.
I don't see it as the author complaining about the danger to the companies but merely stating it. It's not only just OK, but also necessary to throw light on this.
For the specific project, the question is answered in the readme.
Modula-3. Bonus points are awarded to Modula-3 and Rust for safety.
I think this is a bad article. I was expecting a more technical piece, but it only gives a few high level reasons why it never got used widely. And wasn't legal requirements a big reason?

It mentions that backwards incompatibility was a big reason. Why would you design an obviously better media format, then ruin it by a burdensome needless requirement? Has any widely used media format been backwards compatible? (I can't think of any)
I began journaling in my 20's by quickly recapping the day's itinerary in a Sierra Club day calendar given to me on every birthday. (Sadly, those somehow went missing during a move years ago. I'm hoping they're just buried in the bottom of a box somewhere!)

Since 1999, I've been using DailyDiary [1] to journal and track specific topics such as my personal day-to-day activities, weight, exercise, health issues, kid's day-to-day, specific projects, etc. The key for me is to be consistent, and the email nature of DailyDiary tries to reduce that friction as much as possible.

Having so much (searchable) written history has proven immensely helpful on occasion. And it's fun to reminisce when reminded of an event in the past. The kids get a kick out of hearing stories of their past too.

[1] https://www.dailydiary.com/

Disclosure: I'm the founder.
Out of the box, an instance will come up with IPv4. If you then perform DHCP for IPv6, you should still be able to route to the per-region archive mirrors (which only serve over IPv4 because when they were deployed IPv6 wasn't available).

If you disable IPv4 entirely, then it's true that you won't be able to access the archive mirrors. However, this isn't exactly "out of the box". :)

If you do want to disable IPv4, then at the same time you'll also need to modify your /etc/apt/sources.list to point at archive.ubuntu.com (which does serve over IPv6).

We're looking at how we can best make the "no IPv4" case work with the in-cloud mirrors, and hope to have that resolved soon.
Give both the normal treatment and (new thing), and compare it to just the normal treatment and see which group has better outcomes. For serious issues you can stop the trial early and give it to everyone if it's shown to be a dramatic improvement.
This actually seems very logical and non-political. If the US president advocates nuclear proliferation, that clearly increases the risk of nuclear war, regardless of whether you like them or not. The only more obvious reason to move the clock toward midnight would be the start of an actual war between nuclear powers.
Elected by the people.
Very unfortunate that the Chromium team decided to go this route. At least the Firefox approach leaves it in the hands of whoever is serving the content. Chromium now just makes an assumption, and completely changes existing behavior.
This clock seems rather opinionated. What happens at midnight? Or better... what if nothing happens? And how would this work anyway... some country launches the first nuke, and someone goes running to update the clock to midnight?
True. I can relate.
> Yes, Mexicans are willing to do what it takes

Textbook case of: https://en.wikipedia.org/wiki/Survivorship_bias
We have all of the positions in the following counties, as well as all Federal, State, State legislative positions:

County	State	Population
Los Angeles County	CA	10,100,000
New York City	NY	8,400,000
Cook County	IL	5,200,000
Harris County	TX	4,300,000
Maricopa County	AZ	4,000,000
San Diego County	CA	3,200,000
Orange County	CA	3,100,000
Miami-Dade County	FL	2,600,000
Dallas County	TX	2,480,000
Riverside County	CA	2,290,000
San Bernardino County	CA	2,000,000
Clark County	NV	2,000,000
King County	WA	2,000,000
Tarrant County	TX	1,900,000
Broward County	FL	1,835,000
Bexar County	TX	1,818,000
Santa Clara County	CA	1,800,000
Wayne County	MI	1,775,000
Alameda County	CA	1,580,000
Philadelphia	PA	1,500,000
Sacramento County	CA	1,445,000
Palm Beach County	FL	1,370,000
Nassau County	NY	1,350,000
Cuyahoga County	OH	1,270,294
Hillsborough County	FL	1,267,775
Orange County	FL	1,169,107
Fairfax County	VA	1,130,000
Contra Costa County	CA	1,066,000
St. Louis County	MO	1,000,000
Honolulu County	HI	980,000
Bergen County	NJ	938,000
DuPage County	IL	917,000
Duval County	FL	886,000
Ventura County	CA	839,000
Pierce County	WA	819,700
Montgomery County	PA	812,000
San Francisco County	CA	800,000
Multnomah County	OR	766,100
Washington DC	658,000
Denver	CO	649,000
East Baton Rouge Parish	LA	445,200
St. Louis City	MO	318,400
Livingston Parish	LA	134,000
Ascension Parish	LA	114,000
Grand Forks County	ND	69,000
Lee County	IA	36,000

County populations covered:	85,127,576
Standard approach would likely be to choose a population of patients, randomize them between "chemo" and "chemo+immune" treatment groups, and then test for a significant difference in the metric of choice such as response rate or progression-free survival. The graphical analysis of these data is often done using Kaplan-Meier curves (https://en.wikipedia.org/wiki/Kaplan%E2%80%93Meier_estimator)
True, but House elections are hardly "local" -- I think they were implying city and county level offices.
Here's the deal, there are two DISTINCT classes of traditional AV software. One generally sucks, the other does not.

First: free AV, generally marketed to the individual or small business. If it's free, they are making money somehow; you are almost never getting it for free out of the goodness of the vendor's heart. Most of this stuff is crap, introduces ridiculous vulnerabilities in lots of instances, and can wreak havoc on totally clean machines. For this class of AV, I 100% agree with OP; kill it with fire (aside from maybe malwarebytes).

Second: paid AV products targeted towards large businesses and the enterprise. Some of them still suck, but a lot of them are pretty good, and responsible + low impact in general. We have ESET deployed to ~700 machines and have yet to have a SINGLE problem caused by the AV while I've been here. Some of those are workstations, but a huge number are servers (granted, they get a special kind of av, not the full suite of web protection and everything).

That said, traditional AV is becoming more and more useless every month and is starting to do very little aside from catch browser toolbars, random adware, and if you don't have a firewall it can sometimes help block known bad websites (at a cost). We have also had a fair number of instances where malicious crap made it past MULTIPLE layers of email security and was caught by AV on a workstation. Malware is not distributed such that every payload has consistent content/file-hash anymore, the alternative products out there that have a chance at pseudo-reliably catching real malicious stuff are neither free, cheap, or realistically going to be deployed outside of medium to large companies.
One step further towards my goal of having nothing installed on my laptop except Docker.

It doesn't quite work with everything – things like `parallel` and `watch` assume they can run commands in your PATH. Things that need to be really fast also don't work very well (booting a container takes a few hundreds milliseconds).

Any requests for packages?
Which is a problem. But I believe tptacek mean state, county town and city positions, and not necessarily in a legislative capacity.
> “We estimate the cost to manufacture a dose would be about $4,000,” she says. That’s compared to a cost of around $50,000 to alter a patient’s cells and return them.

> Either type of treatment is likely to cost insurers half a million dollars or more if they reach the market.

Can someone more familiar with the pharmaceutical industry explain this?
RunForOffice.org should have a Twitter handle.
Memory safety in multi-threaded programs is not a hard problem once you have GC. Eiffel solved it decades ago. The JVM also has a weak form of memory safety; it does not preclude data races, but the VM cannot crash as the result of a data race.
Physicists unveil new form of matter–time crystals
Well, until you deal with super cancer.

https://en.wikipedia.org/wiki/Devil_facial_tumour_disease
The Reflect Interactions API: Build custom event logic into your Reflect views
I run a script that takes a picture with an old Kinnect and pushes to dropbox. It is a dirty solution but it worked...until I ran out of space...
You only speak for yourself when you say that "life has never been better". It's the same kind of numerical arrogance that made the left ignore the plight of rural America, because the unemployment rate is technically very low. There are many people under thread by the Trump administration, many of them are students that I personally know. And so is the environment. In what measure has the environment never been better? By any measure I have read it is the worst it has ever been, and we live in it.
You be honest and forthright: tell them the reasons for your concerns, and that ultimately you have to do what you think is right for your current situation.

If that "burns a bridge" then they're not very reasonable. They might not be happy about it, but that's a separate issue.
Firefox will be supported after they land support in release builds.
I wonder if this will bring back the "hard refresh".
It is now two and one-half minutes to midnight
>"Venezuela: We have calculated the price of diesel using the 2012 benchmark results from the German Development Agency. Then, we updated the data with up-to-date currency values and information on the change in international petroleum prices. Based on these estimates, the price of diesel is 0 U.S. Dollar. For comparison, the average price of diesel in the world for this period is 0.91 U.S. Dollar. "
http://www.globalpetrolprices.com/Venezuela/diesel_prices/

Wow.

Edit:
It looks like the price is so low scripts are breaking all over the place: "The price of diesel in Venezuela is 0 EUR per liter which is 100% lower than the average world price."
http://www.mytravelcost.com/Venezuela/gas-prices/
http://www.mytravelcost.com/Venezuela/gas-prices/
Uhm, no, that is not the reality we live in. Things like format=flowed exist, but I would not say that "all" clients support that. For example Apple Mail lately got an obsession for quoted printable encoding with very long lines.
Point taken, but the title doesn't actually say the universal immune cells cured the disease.
https://news.ycombinator.com/item?id=13493396
Ask HN: How would you secure your laptop against the NSA?
Hypothetical scenario of securing your laptop against a state-level actor. What are all the steps you would take? Is something like FileVault on OSX enough? Would you feel confident in your ability to keep your data private against such an adversary? Is it even possible?
> "panic in the markets"

Dow hits all time record high for second day in a row.
On the subject of all-time favorite commenters, I have a soft spot for graycat's ruminations on his time at FedEx[1].

[1] https://news.ycombinator.com/item?id=9281466 (sprinkled throughout the comments section)
> what gives these people the right to do this?

The first amendment.
I'm not sure if it is a big issue without passing in -A to allow forwarding of authentication to a second server beyond the one you're logging in to. In theory you should still be in control of your secret key and the session even if the first server attempts to proxy or steal your private key. Note that your console/tty or shell might be vulnerable to a malicious server in any case.

Stuff like:

https://m.theregister.co.uk/2016/01/14/openssh_is_wide_open_...

seem to indicate that a patched ssh client should (no longer) leak private keys without the -A parameter...
Agreed, but it's still the 3rd of 16 paragraphs. I think it's far the most relevant item.
There's no way they don't also give them chemo. Doing otherwise would be hugely unethical. Just need more data points before we would know more...
News: "Our initial plan was to acquire the intellectual property left over from the RethinkDB company, enabling us to relicense the code and use the name RethinkDB. After aggressively pursuing this plan since the company shut down in September, little progress has been made." Dang.
There's nothing "sharp" about these people. If they were sharp they'd be spending their free time solving hard problems (which include cancer, aids, Alzheimer's) rather than maintaining an imaginary clock. Absolute nonsense, these "scientist" should be ashamed of themselves and in my mind they've already lost all credibility.
Somehow it is strange that cancer cells do not try to propage to other organisms, given they try hard to invade their host? Is there any known reason for that (absence of) behavior?