skysight-inc/HackerNews huggingface dataset:
> this feels wrong, though I can't quite pin point why.

It's unusual for a root CA to be run by a service that otherwise has nothing to do with CA issuance, for the primary purpose of issuing certificates for that service's first-party sites, and not for third-party sites. I can't think of a single other example of a single-purpose root CA like this.

(The announcement mentions that they might use this to operate as a CA for third-party sites as well, but right now it exists to certify first-party sites.)
San Francisco to Launch Pilot Basic Income Program
I often use the comments as a filter for whether or not the article is going to be worth reading, or if the discussion in the thread is enough. HN is much more useful than reddit in this regard, especially on technical articles and topics.
Oh, I follow now. I was going to mention that your site doesn't advertise PIM at all if that's a service offered! I really wish there were readily accessible data sources with pricing in the manufacturing field. Trying to estimate impact and cost savings is a mess without the data.

What kind of internal fill patterns are you using? What are some of the tests which get run in the machines? Do you have any numbers on how accurate the printers are compared to Joe Schmo who just bought his first $1,000 3d printer?
Yes, the US would prefer a stable Middle East, but only a stable Middle East that serves US interests sufficiently. And they'll destabilize states that don't play into this. Notice how Saudi Arabia, the example you pointed out, is a horrible place to live?

(Also, how is pointing out your ignorance of the subject at hand ad hominem?)

Your posts reek of libertarian sentiment, which is based on looking at issues as simply as possible. Terrorists commit terror because they chose to in that specific moment, ignoring the X years of history and events shaped that moment. Everyone is 100% responsible for their own situation, no matter what.

You obviously had no interest in looking seriously at the ME or approaching the subject in anything resembling good faith. I knew that when I first commented, but your first post hit a certain nerve. Only the powerful thrive in the simple, just-world position you're promoting, and it's becoming more apparent how bleak a future that is.
Certificate is more than just a key. Especially EV certs are pretty close to "this legal entity says". CAB forum could have made a policy that root CAs are non-transferable and should remain in complete independent control of the entity that created it.
For myself, I usually find that at some point (sometimes quite early) I find no gain in moving along the time-quality frontier.

Specifically, I find that an extra unit of time would seem to provide no change in quality. I think this might imply that I've "maxed out" and any need to move along the frontier would need to be met with a requisite increase in ability.
Hey Jason, I'm working on a platform where people can control other people's robots. We're leveraging crowd intelligence as opposed to artificial intelligence, but we'd like to incorporate artificial intelligence soon. Perhaps you'd have some interest to check it out. We're at http://runmyrobot.com.
> Could someone explain what the process for proving it would be in this case?

You can have a look at NICE who do the cost:benefit approvals for meds in England.

Here's what they said about Abraxane, a medication for pancreatic cancer. (TL:DR it's not good enough to replace current first treatment, and it has too many side effects to replace current second level treatment. I don't think cost, a bit over £5000 for the average patient, was a factor.)

https://www.nice.org.uk/guidance/ta360

If you walk through the complete document you can see what they think is important; what the manufacturers think is important, and what evidence is used.

It's written for a specific audience, and it's a bit medical, but it's (IMO) very readable.
The duration metric as recommended by the article, but not broken out by success/failure.
You have pristinely formatted commit messages when viewed in ~80 column monospace, but poorly formatted commit messages anywhere else.
well said, in addition, your boss could be fighting for you and still not be able to hire you due to other circumstances within the org.
Have the link to Mugsy? Sounds pretty cool.
Same! I've been trying to journal since middle school and never stuck with it. Now I also use a google form to record life experiences, track certain goals like weight, exercise, learning goals, etc. and this is finally working for me. At some point I want to upgrade to something where I can add photos, location, etc. Each evening I get a calendar reminder to fill out the form, and I have a "quarterly review" style assessment to see if my goals should be modified, or my lifestyle changed to accomplish what I set out to.
This method motivates me to accomplish much more over the course of the day than before I started journaling.
Simple, but extensible TODO list
Does it have to be a single piece, or is partitioning it into smaller chunks an option? There are a number of academic papers on cutting models to fit inside the build box constraint of 3d printers, though I'm not aware of any nice, automatic, commercial options right now.
I dont think I was being uncivil at all. It's rare that an older article becomes #1 on HN. You think that has nothing to do with the fact that an administration that many assume would have a problem with stem cell research took over less than a week ago? It seems very important to you that you win this argument, so I won't respond further, and I am certain you will get the last word in. But for the record, I think this entire thread of replies by you is nonsensical.
Has worked in Germany for years. Sponsored by Deutsche Bahn.
Most of the people in that 20% likely have a disability that keeps them from working or walking but not from using a computer in a normal fashion.

That said, you are responding to my incredulity, and I take disabilities sufficiently at least sufficiently seriously that a blind person presents every year at the conference we have been running for our ecosystem and we get tons of praise for our support of their issues.

In some cases, I will even argue that supporting old browsers is related to accessibility: if you are making a product such as a communications tool, one where many if not most users don't directly pay you for their use as you make money from a subset of users, people on older browsers are often people with older computers, who have lower income and less ability to arbitrarily plunk down money to upgrade their technology.

Just as we legally mandate people consider the needs of the disabled, I personally think we might be in need of some regulation that demands we also consider the needs of the poor and disconnected: there are tons of users (by which I mean "entire percentage points, by number competitive with blind people as a group of users but with less sympathy from the public") using older versions of browsers because they were stranded by Apple on an older iPod or iPhone with an out-of-date version of MobileSafari, or who would have to pay for a new version of Windows to even be able to use Chrome, or whose only access to a computer is a shared facility where the computers run something they have no control over. When we build websites that don't let them use our service, we essentially are building an implicit class hierarchy.
Teaching efficient bash usage and teaching portable shell scripting seem related but distinct. This challenge specifically mentions that it uses bash.
I'd recommend to work out what field you're selling to, and consider if you can follow what the major vendors are using in that field.

Your customers' sysadmins are probably already dealing with a bunch of commercial software, more dominant than yours. Go with the flow and lower the workload for everyone.

Seems simple to implement your own; you also get security through some degree of being less mainstream. But don't underestimate the variety out in the field or the amount of hardening that existing solutions have had.

In our case, I've never experienced a vendor's 'home brew' solution actually work properly when faced with the load of a renderfarm or HPC cluster (normal for customers like us) without several revisions. Hardly unsolvable problems, but then a dialogue back and forth is needed to fix such issues; wasted time for both parties, unless you are in the business of developing licensing servers.

Obviously there's a balance here with how much it costs to bring in a tried and tested solution (flexlm and rlm are the ones I know of) vs cost of the other options.
> Ship isn't just another GitHub API client app. Ship's custom server code listens and watches for changes from GitHub, and pushes efficient delta updates to clients.

Looks like you connect to their servers for updates.
Please read it more carefuly:

"One of the problems with digital certificate management is that fraudulent certificates take a long time to be spotted, reported and revoked by the browser vendors. Certificate Transparency would help by making it impossible for a certificate to be issued for a domain without the domain owner knowing."
Very nice, but $9/month to use?
Life is what you make of it, you choose what you want to do in it. If college isn't for you, then just go get a software job somewhere. Lots of places will hire you without a degree, it just requires you to prove yourself a little more through past projects or past experience.

Why is finishing college such an important goal for you, and if it really was important to you, then you would find a way to finish it.

It sounds like you just need to figure out somethings and get your priorities straight. Put your mental and physical well being above everything else and get your shit together. :)

You have to think about what completing the task at hand will provide you in the future and use that to further your progress as you go. So if completing your degree brings you a job, or more money, think about how you will use that in the future.
They use libx264 for H.264 video encoding (and maybe libx265 for HEVC).

What do you think they use to split the video from the audio in the source file, decode the source video frames, resize and crop every frame, and then mux the resulting new video stream with the (possibly also recompressed) audio stream?
Trump’s Executive Order Eliminates Privacy Act Protections for Foreigners
I Am a Recruiter (a.k.a Spammer) at Amazon
Nothing is shared in fact every time you submit a command you get a new subshell in a new container. If it is reproducible I will track down the problem.
You mean the ones who made the bad loans and immediately turned around and sold them to be somebody else's problem?
Peer review and regular key rolling should be built into the system.

It should not be based on "root" certificates rather something more like blockchain for generating security keys and each roll /session generates a new key.

IANAEE but if building a currency is possible without it being possible to create fake money then it should be possible to protect websites in a similarly decentralised way.
Kinto Storage
Meanwhile, 9 years ago in China, people were already receiving this kind of therapy, but nobody believed them[1]. As Gibson has said, "The future is already here, it's just not evenly distributed."

[1]https://www.reddit.com/r/IAmA/comments/k1hts/i_am_a_28yr_old...
Is binding arbitration not binding? Why would a court take this case when Oracle is the one that brought the arbitration clause
All I can say is this - what if I don't trust Google one iota?
I sell two Mac Apps. For the Mac app store versions I have no copy protection at all.

For the version I sell on Fastspring, I use a library called Aquatic Prime, which uses public key cryptography to validate license files. It's integrated with Fastspring, so that's convenient.

I've had a couple of customers where Aquatic Prime failed for hard to debug reasons -- I think the issue was that they had names with special characters that caused sorting issues. If I'd do it again, I'd probably do something simpler, since bugs in license validation code are really bad.

I wouldn't worry about piracy or cracked versions. Someone did crack my apps, but it doesn't seem to affect sales. The only people who care about cracked versions of my app are shady companies promising to get rid of cracked versions by sending takedown requests on my behalf. I wonder if those guys cracked my app in the first place...

EDIT:
You asked about missing features. It would be nice if business customers had a way to see how many licenses they are using, and they should be able to easily buy additional licenses. However, building such a system would probably be very complicated and not worth the effort.
Why does the KDE Slimbook have a Windows key?
http://kde.slimbook.es/images/xheader.png.pagespeed.ic.WfFJL...

Could they not get a Tux or even the KDE Gear icon printed on the keyboard?
More fake news from BBC.
Could you post a link to the relevant part of the spec or some article dealing with this feature?
> Compare this to languages like Python where there will need to be a major 2020 conversion to 3.x because many developers are dragging their feet.

That's not a very fair comparison. Python is 25 years old and this migration is being requested after 20 years in existence. There is no way a successful language can perform this kind of migration at that age without pain. Swift will be no exception if it's still around and popular in 20 years.
Moreover, this is a classic side effect of stimulants, at least anecdotally (not sure what the literature says). You can get hyper-focused on one task or sub-task and lose track of your overall priorities. Although I imagine regular stimulant users learn to compensate for this.
Metallic hydrogen, once theory, becomes reality – EurekAlert Science News
"Ok. Now deleting your appointments for this week."
How to Use an IVR Payment Solution in Insurance – IVR Technology Group
Yeah. I think the point I was addressing is that if you had government contacts, you wouldn't need bitcoin.

You'd be squeezing your contacts for hard currency, which is simultaneously more lucrative and easier than mining bitcoin. Bitcoin is for people who are locked out of official exchange rates.
Apple putting minimal effort into developer tools? Surely not! /s
It is very difficult, if not impossible, to protect against attackers who are in a position where they are able to install their root cert to your browser. If they can do that, then they can do a lot more also. At least in the current system such tampering is generally easily detectable.
PS. "See the demo here" links to https://www.youtube.com/watch?v=fEcx3hx-398 that says "private video."
> I can't think of a single other example of a single-purpose CA like this.

Department of Defense: http://www.disa.mil/enterprise-services/identity-and-access-...
As I see it, there are a number of issues that need to be cleared up before certs are anything more than snake-oil. Unfortunately, the economics of the current market-reality fight (tooth and nail) against doing so. (Note that I'm limiting this to browser certificate handling.)

- We need clients to authenticate servers as well as the reverse.

- Browsers need to allow better user control over certificates. I know the reasons why this isn't provided, and I don't care. Add a "reset to defaults" if you're worried about people breaking their browsers, but a sensible way for users to control whom they trust is important. See next point.

- As of now, we have a pile of registries with near-zero public view into the operations of people with whom we're literally entrusting our bank accounts. Some of these are overtly in the control of nation-states, and many more are assumed to be at least covertly "assisting". Those of us with a problem with that (which should be everyone - even if you trust your friendly neighborhood intelligence agency, what about all the others?) need much better visibility into the operations of the CAs. I'd argue that they shouldn't even be for-profit operations, but that's not a huge point to me - the important points are knowing which ones are incompetent or compromised by their masters (which are the same thing in once sense, not not in others), and there are various paths to get there.

To the browser apologists: is a balkanized web worse than one that cannot be trusted? And are your actions actively harming people by making them believe it is trustworthy when it is not?
Coworking Space for Entrepreneurs
This app installed webhooks on all of my repos with no automated way to remove them. Very annoying.
You see the dark side of that kind of nostalgia in movies like Strange Days and Minority Report. There's a real danger to continually reliving the memories that should ordinarily fade into the past. It's almost a sort of self inflicted PTSD.
Thats' a great point. We've actually done a handful of projects like that. Here's an example: http://blog.voodoomfg.com/2016/06/10/a-life-size-human-model...

In many cases, when you cut up a model like that you can actually print it faster and cheaper than on a large format machine.
Good heavens I hope not. Unless it's easy to toggle off - if FreeCiv goes all-3D to waste my processor and HDD, I'll be very happy with Civ2MGE
It's very important to understand what causes your issues. This will be the part of the answer. Seems that depression is the main problem here, while anxiety, isolation, panic attacks, lack of discipline and motivation are its side effects. Understand what causes your depression and what do you need to improve your state. Ask for help or go to a doctor if you can't figure it out by yourself. Work on removing things that make you depressed from your life. Anyway, health and happiness are more important assets than formal education, and there is no tragedy if you will not finish the college.
I see, GHO exemption. Yes that makes complete sense.

So Malaria test is off table for now right? That can't fall under class 2.
Just a technical note: it shows that the "next election date" for several offices in my area is November 8, 2016.
Really? Religious people, under it all, just don't like unveiling mysteries with science? It couldn't be that they don't like treating human embryos as commodities?
See the end of the article:

> Oracle doesn't want to pursue the case in open court. Rather it's asking to have the case re-arbitrated, with a different arbitrator.
What's wrong with McDonald's asking you do something in exchange for a hamburger? Were you expecting they wouldn't ask for something in return for value they generated for you? I'd genuinely like to better understand this mindset.
The surest case against a capably Anarchist existence is it's lack of efficacy in the face of powerful organizations.

It's unfortunate because there is so much to love about Anarchism.
To actually demonstrate this, same-individual comparisons with and without the drug (on different days) should be made using IPRs.[1] I expect enhancement may be seen in novice players but not in players with a stable Elo rating.

[1] https://rjlipton.wordpress.com/2016/12/08/magnus-and-the-tur...
Nah, I'll stick with Avast & HitManPro, thanks.
The NSA
It was a bad cookie I think.
> I'm assuming you are using the actual end user's token for auth

Yes. 5000 requests seems like a lot, though the GitHub API requires us to be pretty chatty. To show reactions we have to request them for every issue and comment individually, for example. Even doing it on demand (which we do) still requires a lot of requests.

> What sort of security do you have in place to prevent data leaks or malicious access?

We take this really seriously, but it's hard to answer comprehensively in a comment. Short story: Principle of least privilege, encryption where appropriate, strong passwords and 2FA for everything, write-only logging, super strict firewall rules, and parameterized queries.

I've been interested in security for quite a while and even briefly did security consulting, so to the extent I'm able, I've been doing everything as "correctly" as I know how from the beginning.
Trump Plans 20% Tax on Mexican Imports to Pay for Border Wall
Ok, Here is what I have been thinking of:

a PI, many sensors and controls.
the pi to do the things the pi always does.
the sensors to sense room temp. in each room.
And this is the hardest one, flow control per radiator.

I want that I can set room temp schedules, and can go off schedule using the app (manual intervention)
When the current temp in any room is below the set temp for that room the heater system turns on
The rooms that are already above their set temp have the radiators turned down.

Why? Because I don't like to waste heat to a room I don't enter 90% of the day.
And when my living room has reached the target temp there is always a room that is either still stone cold or feels like sauna.

The hardest part about this is the controllable radiator valves, the rest already exists.
If the goal is simply to find "above average" beauty, I agree. After all, even 51st percentile is above average. The problem is that this guy is looking 2 standard deviations above the average, which eliminates something like 97% of the girls out there. And of the remaining 3%, he's eliminating another two-thirds based on his intelligence criteria.

It's true that people's aesthetic tastes may differ in some ways, but they do converge in most ways. There's a reason why supermodels are almost universally considered attractive. So not only is this guy ruling out 99% of the girls out there, he's competing with almost everyone for the remaining 1%.

But that's not even the main point of my comment. Even if he was only willing to date girls in the "top 1 percent", that might still be achievable if he used a filtering process that can semi-reliably identify girls in that group who are single and potentially interested in him. But that's not what he's doing. He's going on a blind date with a completely random girl, once per week. If you're extremely selective in what you're looking for, but are relying on a low-frequency completely-random-sampling strategy, of course that's never going to work.

That said, me analyzing the heck out of what is obviously a humorous post, is probably not helping me achieve any of my life goals either.
I really can't say enough about how great the transcode-video library is in terms of "set it and forget it".

When I cut the cord I started down the path of figuring out how to do all the optimizations myself, but quickly realized just how deep and technical that was. I stumbled upon Don Melton's library and have used it as a key piece of my batch processing pipeline ever since.

Definitely check it out if you are looking to convert arbitrary video files to be played back later on arbitrary devices:

https://github.com/donmelton/video_transcoding
Ah, I've misled. I mean that I have a lot of tabs in groups, and FF doesn't load them when you start it up, just when you visit them. So while I have a 'map' of perhaps a couple of hundred tabs in those tab groups, only the ones I've visited in that session are loaded.
Replace "doctors" with "US health insurance companies" and you have a true statement.
We have peer review in current CA system in two forms; Certificate transparency being the more visible one, CAB forum operating more in the background.