skysight-inc/HackerNews huggingface dataset:
The only clients I've had trouble with SNI is Amazon and Apple's Java clients, as well as python2. It's unfortunately still not possible to host a podcast feed with an SNI HTTPS URL in iTunes, nor can you use SNI for Alexa skills. Otherwise, I've been happily using SNI for years now.
"HTML & CSS IS HARD"

*ARE
Your "Foster parents always have the option to adopt" statement is absolutely not true.

Of the ~408,000 children in foster care in the United States,
only an estimated 107,000 are eligible for adoption[1].

At the same time, there are also about 600,000[2] women in the United States who are actively seeking to adopt.

Of course, the vast majority of those parents looking to adopt are looking for a newborn or infant, and only 6% of the children in the foster care system are under 1-year old[3].

The foster system is designed to get children back to their birth families, not adopted out. If it becomes clear that's not an option, then the system works to get the child adopted by a close relative.

Only after it becomes clear those two options aren't, in fact, options, does an unrelated foster-parent have the potential option to adopt. Even then, it's a challenging process fraught with bureaucracy and serious difficulties for the potential adoptive parents.

I'm not railing against the system, I'm just addressing your specific comment. We have several close friends and family members who have have tried, and failed to adopt a child through the foster care system in the United States.

[1] https://www.childwelfare.gov/pubPDFs/f_fospar.pdf

[2] https://adoption.com/the-challenges-of-adopting-a-foster-chi...

[3] http://childrensactionnetwork.org/resources.html
Meetup.com sends an email to (all?) members that says

"... after the recent executive order aimed to block people on the basis of nationality and religion, a line was crossed. At a time when core democratic ideals feel under attack, we feel a duty to spark more civic participation."

I had not thought of Meetup as a political company, but this reads as a very strong statement. It's successful advertising, because I've been thinking about them for several minutes straight. Will this impress everyone, or will they be sending an apology note tomorrow?
If we are to remember the truth, it's better to list the truth rather then the falsehoods.

Example: Partner says "Don't buy the red one", then a few days later you go and buy the red one, while you should have bought the blue one. It would be better if your partner had said "Buy the blue one".
Can you elaborate on this? I recently had my marketing team ask me to replace GA with Google Tag Manager, and I'm not all that familiar with either, as running the web site is just a minor thing I do on the side of my product work... but this sounds like something I should know more about.
Can I apply this on Heroku hosted app?
> Spiritual inquiry of this nature is not completely illogical.

Source? I cannot name a time when it has produced meaningful and repeatable results. Therefore I'd say it's illogical.
The Very Basics of Recommender Systems
Probably a udev problem, you need:

https://developers.yubico.com/libu2f-host/

or maybe even better:

https://github.com/amluto/u2f-hidraw-policy

On the Yubikey its also possible to deactivate individual modes. If somehow U2F mode was disabled, it should not work anywhere, but if you don't use the other modes, maybe deactivate them. In earlier version there were some problems.

Probably its the first one.
...and it's been flagged. HN working as intended!
and you can literally see every packet as it's
transmitted, because the page is rendered bit by bit.

Beg pardon?
>It's not like the JS community is anti-XML, most JS libs/frameworks still use HTML/XML markup for rendering.

Its pretty anti-XML outside of node. Pure-js solutions for xml are not as great as built in features other languages provide, while JS only natively does JSON.

>generalisations around 'clueless implementations, insane complexity' don't make a lot of sense.

When you are creating languages that compile to JS and adding entire markup ontop of it along with literally hundreds of dependencies in any average project, JS has plenty of insane complexity.
Not feasible in the San Francisco Bay Area. People are already commuting as far as Sacramento, because housing is more affordable out there. It's socio-economic repression.

The job growth is in knowledge, which benefits from being close by. For example, last week I walked from the office to Eventbrite to learn what they're doing. No way you're getting the same benefit from watching a video. To promote the best opportunities, we're going to have to reform our existing cities.

If you're trying to build a new community, it's going to require some other benefit. Like Peter Thiel and his seasteading.
A Complete Beginner's Guide to Blockchain
These keys will never be $5 but pure U2F only keys are almost already there. You can get U2F keys for 8-10$ already.
> So is GCC adding a toolchain similar to the one LLVM has around its bitcode?

Not as far as I can tell.

> In this instance, a way to write a text representation of an internal data structure that represents code, run a single optimization pass over that data structure, dump the result, compare the result with serialized text representation of "expected value"?

That's already existed for ages. See the -fdump-tree-* family of functions. It also doesn't do anything llvm-like.
The Danger of Steve Bannon on the National Security Council
But what of the scientists working to improve lives? You dont have to do blue sky research in a shiny tower. Some scientists are in the trenches looking not to discover but to apply discoveries in the real world.
Can I get some further reading or a citation on that? That really runs counter to every thing I've been hearing. Insofar as I can tell, my prospects as a "millennial" are shit. I've definitely heard that expected lifetime is going down. I'm also not sure how "spending" is going up if "disposable income" is down. Especially when there was something posted the other day about how folks are earning less than their parents.
Yeah. Comparing the legal issues that Facebook faces to the legal issues that Uber faces is complete nonsense.
I think the challenge is to find a way to tranform the name so that it's still legible by a human.

Like transform "Mister" to "Mr"
(author here) I would have loved to have SNI work. I wrote this article in response to having profound struggles making it work. My iPhone 7's Safari was routinely failing to connect to sites other browsers claimed were fine, when relying on SNI.

The day i swapped over to IP-based connections, the problem resolved itself immediately. If there is something i am missing i would love to know what it is.
AT&T lights up gigabit fiber in five new metro areas
Why not just drink water? Why does your drink need flavors? And anyway, the sparkling water will still be better for teeth than the soda. Don't let perfect get in the way of good.
Anyone who is consistent won't believe anything different just because it applies to them. If I think my country is overburdening its natural resources and is overpopulated (and I do) then of course I'll understand that I'm part of the problem. Happily, along with all other sane people, I think that once born people have the right to a good life so I'm not likely to try and end my own because I'm a self acknowledged part of a surplus population.
What's more important than how you chose the book is how helpful the book is as opposed to other titles. (And in this case, the fact that the book is free and has supporting code and answers to exercises provided.)

Or, if you've found a repeatable process for choosing the best book in a given genre, that would be ideal to write about.
The questionnaire seems pretty fair, to be honest.

If someone has access to weapons, tried to travel to a terrorist training camp, has mental instability issues, supports use of violence as well as using religion as a justification for violence and follows all the ISIS social media accounts, I'd be pretty worried.

I didn't see any questions about "does the individual holds a significant distrust of government and institutions?" or "does the individual own multiple anarchism books?". All the questions are very specific and practical.
OpenVPN Server Deployer
(a) I’m talking about projects I host in my free time
(b) My server budget is fixed.

So, for me the choice was between "use cloud tools, and get performance worse than a raspberry pi", or "run dedicated, and get more performance and storage and traffic than I need, and actually the ability to run my stuff".

For less than the price of a Netflix subscription I’m able to run services that can handle tenthousands of concurrent users, and have terabytes of storage (and enough traffic that I never have to worry about that).

And the cost of setting it up was for me a few days.

For me it was a decision between being able to run services, or not being able to run them at all.
Which ones are ideological?
To spam an entire userbase to put forth your political beliefs is insane.
So is HN considered a terrorist site since it requires a password to submit stories and post comments?
Interesting that the executive order doesn't block anybody on the basis of religion, yet they continue to repeat this false claim.
>"There's every reason to pursue Self-realization or enlightenment as the only worthy goal of life. Such a goal never comes in one's way of being employed, raising a family etc."

What if the only way to understand it was to not pursue it?
Did Qualcomm Kill WiMAX?
The pivot to Airbnb and Uber is a strange one, that's for sure.

You can draw them all in as part of a more general narrative of technology companies trying to avoid regulations and liabilities faced by their legacy competition, but the article really doesn't do enough to draw any distinction or justify the mention of these companies.
Of course I'm going to get flamed for this but this guy has written a bunch of nonsense.

"Love and emptiness cannot abide together; when there is the feeling of loneliness, love is not. "

1. Emptiness is not the same thing as loneliness.

2. If you feel anything bad while you think you feel empty then that's not actual emptiness.

3. When you practice true love for others it makes you lonely because it makes everyone abandon you. How does he reconcile those? He can't.

"You will ask, then what is love? Love is a state of being in which thought is not; but the very definition of love is a process of thought, and so it is not love."

That's not a definition. That's coincident phenomena with an effect of true love. But other things can make you stop "thinking". Such as losing oneself. Or taking drugs habitually. QED.

Only a person who has lost his own self can say the sorts of things that Krishnamurti said. Please: Beware of everything. He did not have a real enlightenment. When you ask a real enlightened teacher what love is, they can tell you on the spot. Love is blessing. Blessings are that which enable or cause a good result for something or for it to change for the better. That's a wholly completely different quality of definition than spending hundreds of pages making up one's own words for the purpose of instilling his spirit into others. The only reason I can give the correct definition while Krishnamurti could not is that I learned it from someone who actually knew and could verify his answers.
This article has an incorrect premise. The author should learn about SNI: https://en.wikipedia.org/wiki/Server_Name_Indication
I specifically use it to store my gpg/ssh keys on it. The keys are generated on the device and have never been in any computer's memory. The key answers challenges from an SSH server with the appropriate response. I do not want to insert something dangling off my key every time I do git push.
Dear the creator of "Everything is Calm":

Please consider rebranding to "Gaslight"
CMS's are designed to be behind a caching layer like Varnish. a CMS takes in user input and renders to html, which should only change in-page on ajax requests. I really wish there were more public configs for Varnish, some things like Mediawiki are impossible to find well-written and documented configs for, and creating one yourself can have a lot of pitfalls. There's four versions of Varnish, so that too makes it a PITA.
Alternately https://github.com/JrCs/docker-letsencrypt-nginx-proxy-compa...
You might be able to get useful debugging information with tcpdump or wireshark because SNI itself is sent in the clear (prior to the TLS cryptographic key exchange). You could see if the server is doing something different from other servers, or the browser is doing something different from other browsers.
Shopify’s Breitbart Fight Proves It: These Days, Tech Has to Take a Side
Next headline: "Save the kid _and_ the dog from a 70m deep, 35cm wide hole"
Not that I could see but I didn't look very hard.
Im pretty impressed about the stupid Shell X)
this is really cool! do you have a writeup?
How is this bringing people together?

The email advertising this movement repeated false claims about the government banning people on the basis of religion. Spreading hysteria and fear and inaccurate facts is not the way to win the argument.
You're essentially restating the concept of Common Carrier status[1], which is the inspiration for what Sec230 erected on the internet for content providers, so YouTube couldn't be charged with Material Support just because someone uploaded ISIS videos.

1. https://en.wikipedia.org/wiki/Common_carrier
Because it tastes better that way? Anyway the relevant question isn't why my drink needs flavour, but what the majority of those who choose to consume less soda with this proposed sugar tax will switch to. And remember they are doing it for economic reasons, not for health.
I'm pretty sure the nano just needs a poke and then it'll spit out whatever you've configured it to do. I got one and used it for a little while to unlock my computer, by just having it spit out a static password on touch. The issue with this of course is that your password is now visible in clear text just by placing the key in a USB port, opening up a text input, and then touching the key. It was convenient, but very insecure obviously. Maybe it would be useful to you though.

In fact how about this, you can have mine – for free. I never use it anymore, and if there's a chance it'll help you I'm happy to just send it your way. It's just collecting dust at this point anyway.
Bradley Kuhn's Copyleft Keynote at FOSDEM
This is extremely good news, and I'm not surprised that Brazil is leading the way -- there's been a lot of research on native forest use in Brazil in recent years. (Our rediscovery of terra preta also originates with this work.)
> ...invasive and discriminatory border control I fear I might be subjected to on entry ...

This too. Who needs this kind of aggravation? Seriously the bureaucratic process around entering the US is extremely discouraging
Check out wireguard: https://www.wireguard.io/
Eh, could say the same about anything. Replace self with Love, God, Satan, etc.
The amount of time, effort, and brain cycles going towards talking about such an irrelevant "issue" as manspreading is mindboggling. It's enough energy to power a small country. That article reads like it was written by an insane person. Everyone takes up extra space on the train either by spreading out, putting their bags beside them, or being obese. You know what a sane person does instead of writing ridiculous articles? "Excuse me can I please sit there?"
> I do provide SHA-512 as an option.

Why? If the goal is compact, easier to deploy - why have choice at all?

[ed: I just saw this on the homepage:

Note the presence of SHA-512 in a separate compilation unit. It is meant to test ed25519 with the test vectors I got from the RFC. In production, most users will be expected to use Blake2b —the default setting.]

I also wonder a bit on the naming - using algorithm over intent (sha512 vs "hash") - I can see why transparent naming is good - on the other hand, wouldn't the easiest approach be: use some sort of framing (monochypher_v1) and pair that with primitives that "do the right thing"?

I suppose one could use monochypher as a provider and another "interface" library as a consumer - might make for easier auditing and development.

But now you need two header/c files, and they have to stay in sync in order to be reviewed in pairs (to avoid subtle bugs in key handling and such?).

Which brings us back to: in five years, when a developer needs to update their simple utility that uses monochypher - will that developer have to consider changing cryptographic primitives, moving users from one generation of ciphers to another - or will monochypher handle that?
Okay, what's a security test? How is it any different from a mere correctness test? Can you suggest some link to read up, or some tool to use?
I use SNI for my Apache Lets Encrypt script. This allows one IP (my home IP) to host many sites easily and monitors changes to sites-enabled to trigger creation of new SAN certificates based on contents of ServerName and ServerAlias. The script also will regenerate certs for sites-enabled every 30 days.

See: https://github.com/tzakrajs/cloud-fortress-lets-encrypt
'Extraordinary' Levels of Persistent Organic Pollutants Found in Mariana Trench
It must have been something else. Even Safari on iOS has supported SNI since iOS 4.0 (2010).
> not sure if more education on this is the solution

Security education is a never ending battle. Just like "use condoms", "floss your teeth", "wash your hands", etc. It also changes. Today "Use a password manager" is the new "change your password".
I've never had a single problem with hosting multiple https domains using Nginx and Let's Encrypt. This article is somewhat baffling, considering his example of clients that need this is "mobile browsers" but I've used iOS and Android and it works just fine.
Noticed there's nothing for New Zealand so I impulsively requested one. If anything positive could come out of 2016, it's renewed civic responsibility.
[Python-Dev] Heads-Up, I've Rejoined – Signed Eric S. Raymond
The goal is usually to reunite the child with their parent, but circumstances often intervene. Children have a larger network of caregivers (aunts, uncles, grandparents, cousins, even church members and family friends) that also play a large role.
"Better encryption" in the roadmap and then "curl ... | sh".

No. Thanks.
I thought the goal was fastest blog in the world ;)
From tptacek: https://twitter.com/tqbf/status/831242861848961029
That is compared to water, not sugary drinks. People aren't drinking diet drinks as a replacement to water, they are drinking them as a replacement for sugary drinks.
Is there a way to slow it down on fast connections and or a video of this? I have an academic interest and am curious how they did this, but don't have an easy way to demonstrate it to myself as I don't currently have a connection slow enough that it doesn't render instantaneously.
Ask HN: What would be ideal replacement for Twitter?
In the past several months I have been struggling with Twitter and looking for the value there. Even though I've tried to limit the number of followers and optimize the usage of the service, the value of using it has been tremendously declining.

On the other hand I feel very sorry to say goodbye to it, because Twitter was inseparable part of my online life for so many years. I think that the service introduced many good things and helped to change the World, but now, it just feel old, tired and not worthy anymore.

Do you guys have any alternative to it? Some service which is fresh as Twitter used to be 5 years ago? Do you know any emerging new platforms where I can possibly move? If not, what would be the ideal for "next gen" Twitter?
You can do both kinds of tests: check that a pass still optimizes some GIMPLE or RTL input the same way, and check that the C code is optimized the same way. In turn, the latter can either look at per-pass dumps, or at the final assembly code for one or more architectures.
I read this article when it was first published and was very moved. I was able to donate to him here, if you are interested: https://www.gofundme.com/bzeek/
Following the PBOC Exchange Shakeup China’s LocalBitcoins Volume Surges
Intel Xeon E7-8894 V4 Launched – New Top Dog
Not to totally sidetrack the discussion, but what are some of the things that you strongly disagree with on SSC? (The Moloch article is one of the most fascinating ones I have read.)

And, by the way, I had not considered the Moloch article as a direct re-framing of a problem until you put it as such. I must say thinking about it in that light I find humanizing `complex systemic forces` a rather novel transformation and quite useful. Even having read the article a few times, I hadn't thought to describe it as such. But morphing a problem from one fairly inscrutable set of phenomena to be a villain allows us to use a different set of mental tools to tackle understanding the problem.

Typically I had though more restrictively about such transformations, for example, viewing a sound's waveform graphically can be illuminating in a certain sense (transforming audio-temporal, to visual-spatial). The biggest issue with the toMoloch transform is that the conversion process is obviously going to be significantly more noisy and provide the author the ability copious amounts of wiggle-room to steer the reader towards their own conclusions. But just expressing the facets of the problem and making its existence more well known has a lot of value. Anyhow thanks for helping me see an article I have gotten quite a bit of insight out of in another way.
Presumably he's talking about incremental rendering[1], though I couldn't get it to work on Fefes Blog by manually throttling using the dev tools.

It's pure, unstyled HTML -- you could read the site by piping curl into less -- and it should easily render incrementally; I'm just not sure how well it works when you use gzip and TLS (and I couldn't not use TLS when I just tried).

[1] https://en.wikipedia.org/wiki/Incremental_rendering
You are right. To beginners, self-realization is pointed as a goal worthy of pursuit. As one treads along this path, one realizes that nothing new is to be pursued or attained. If the Self were attainable as an object with the passage of time (and some exertion), it is not a worthy goal since everything within the realm of time will perish. The Self is ever-realized. One only needs to forego incorrect notions and predilections for the Self to manifest in all its glory.
This is the method recommended by many teachers of non-duality to know the Self. In fact, there is nothing akin to knowing the Self, for it would then become an object and the division of seer-seen will again appear. To know the Self is to Be the Self.
Neither of those things are mentioned in the document.
Hugo was recommended to me as an alternative by a coworker, but with the caveat that he had to do some manual coding to get things the way he wanted. Hugo's written in Go, with which I have no experience, so I went with Pelican instead.
"curl ... | sh" is absolutely fine. If you want to complain about something, complain about the fact that the URL being used is an http URL instead of an https one.