skysight-inc/HackerNews huggingface dataset:
1. Certificate pinning is not a solution to the problem. Certificates change without warning anyhow, because they may be compromised and revoked at any time.

2. Let's Encrypt certificates are indeed the lowest grade of SSL certificate. That's not a criticism of Let's Encrypt, it's just the nature of the situation. There are legitimate reasons to consider it too low a level of assurance. I have no idea whether your parties have that level of need or not. But I can point out that if you want a better grade of cert than Let's Encrypt, you do need to go for the fairly expensive ones that require a lot of real, human validation. There's not much point in just getting another cheap-but-not-free cert that has roughly the same level of validation.

3. There's another solution to this problem entirely, if you're communicating between two parties and that's all this cert is doing (i.e., you're not speaking to the general public with this cert). Make your own certificate authority, sign your own certs, have the public key of that CA inserted into the Java cert authority.

Creating your own certificate authority is very simple. To give you a sense of how simple, here's some scripts I bashed together to set up nodes that speak to each other over SSL: Set up the CA [1] Build a new cert signed by that CA for the node [2].

I am NOT saying you can just use those or that you should even crib from them. These are generally intended for quick reference and testing only even in the context of this project ("real" users are expected to do their own cert management with real certs), and the needs of this project are significantly different from an HTTPS website. My intent in linking those is merely to demonstrate the rough complexity of setting up a CA is only a few lines in bash, not a monstrous impossibly-large undertaking, and you can Google this stuff up in a day or two, tops. The hard part is all around how careful you are with the private keys and revocation, and the fact you must set up and implement your own security policies around the certs. (My suggested revocation policy would be "we'll call you", and that if a cert is ever compromised, just re-roll the whole process from start to finish and create a new CA. "Real" revocation is somewhat complicated, and somewhat unsatisfactory anyhow. Take advantage of the smallness of the problem and the pre-existing personal connections. A lot of the at-scale SSL issues arise because we don't have those.)

[1]: https://github.com/thejerf/reign/blob/master/create_signing_...

[2]: https://github.com/thejerf/reign/blob/master/create_node_cer...
On the average, you're right. People with Fitbits still lost weight, but less than the "control" group. So if the presence of a Fitbit is the only variable, then Fitbits have a negative impact. The study wasn't set up to test that one variable, so I'd be wary drawing such strong conclusions.

Your point is that the title is misleading. It's not that fitness devices don't make you more fit. It's that they make you less fit. And that's a big difference.

Individual "enablement" could be an outlier. I'd love to see a distribution of weight loss results in this study.
Ah, never mind - I was reading the bandwidth allowance as available storage! So the prices aren't anything special afterall.
Show HN: Python API for Xgboost, LightGBM, Neural Networks, RGF, Random Forest
The perfect sales pitch
Based on a quick skim she seems more credible than, say, Mehmet Oz (okay, low bar, but bear with me). She seems to have an academic background relevant to the stuff she talks about, and I don't see any obvious sign that she's shilling the usual crap like proprietary supplements, weird exercise equipment/programs, homeopathy, etc..
serious question: what's an example of an inherently viral product?
We were having some deliveribilty issues with Office365 just putting everything in the Junk Mail no matter what we were trying. I found a write up on the issue from someone else who had the same issue and the solution (for them) was basically, pay Mailgun for a dedicated IP. It was going to be a tough pill to swallow because we send, MAYBE, 200 emails a month (they're basically for password resets and such, not mailing list blasts).

Their support basically refused to take my money and switched us to a different sending server that day and our emails were no longer hitting the junk folder within possibly less than two hours of first contact with their support.

As a developer it's incredibly easy to integrate with, the dashboards are very helpful for debugging, and the one time in at least a few years I've reached out to their support they were informative and expedient.

I've found their competitors to be harder to integrate with and focused more on mass mailing for marketing, wanting to funnel everything through their UI.

I hope Mailgun can keep up all the good work they're doing, it's a breath of fresh air to know sending emails from our web applications will take all of five minutes to integrate.
All of the Republican nominees this time around were opposed to gay marriage. So it doesn't seem to be that unfair to generalize to the conclusion that Republicans aren't very concerned about LGBT rights. They're certainly willing to vote for candidates who don't support LGBT rights.
The Secret U.S. Army Study That Targets Moscow
The government asserts its authority over you whether you like it or not. Any association with a private company is voluntary in nature. You can choose not to use that company and take your business to a competitor. It's not that it is necessarily "fine for a private company to do so," just that you have the ability to opt out.
UPS Used a Drone to Deliver a Package in Florida
> Some recruiter can now see that you work a lot - probably also on weekends and so on.

WTF how is this a good thing?
Last year in the U.S. market alone Chevrolet collected 4,220 terabytes of data from customer's cars. McKinsey forecasts that this could grow into a $450 to 750 billion market by 2030

Is there any data these big companies will not collect?
Improving the Performance of Real-Time Streaming by Auto-Tuning the JVM
>It's harder to really know how good/passionate you are.

Sorry, but I have to really object to this idea that programming every waking hour with great passion is a positive job qualification. Sounds more like a recipe for burnout.
As others mentioned, this is plain wrong. I live in Uruguay and the best routes to Asia are from Santiago de Chile with LATAM, no need to go to the U.S.

If you mean direct flights to Tokyo, yes there are no Santiago to Tokyo flights.
technical solution: "clean personal data images as a service" wherein you start an app which creates a new partition, encrypts your old partition, then hides it until you explicitly decide to unhide it. the new partition is populated with apps from the cloud and contains already-logged in fake/clean social media profiles, which are set up automatically for you when you sign up for the service. the clean profiles are connected to other profiles from the same service, allowing for a randomized network of people to stand in for your friends. because you may be questioned about your friends, you're given a secret code (a picture, color, or symbol in the fake friend's picture) and a secret narrative based off of that code (how you know them, what they are like, etc). the software arranges your networks ahead of time so that someone else's profile will corroborate your narrative about them.

you act compliant and give your passwords to the new partition and the fake social media accounts to the pigs, who are easily fooled by the appearance of reality and your ability to explain the people in your network. the pigs feel good, and you're out the door. once you're out, reactivate the old partition and wipe the fake one. the premium edition makes fake social media posts for you every once in a while so it's even less suspicious.

social solution: don't visit the US, and tell other people not to visit.

political solution: destroy the surveillance state / police state by enshrining new rights for the digital age. this won't happen.
Out of curiousity (either I missed it or I forgot) what was the Mandrill incident?
I think the Array.includes makes the language better as it standardizes how to check for array membership. I've encountered more than one bug as a result of the "!== -1" check not working correctly/as expected.
Is That How You Center in CSS?
I was mostly talking about stuff that runs on much smaller CPUs that have from a few hundred bytes to a few tens of kilobytes of memory. Those kinds of devices are important for applications where you have extremely tight power constraints (like powering stuff off a coin-cell battery for two years etc).
The new Google Voice is betterworse
You should research the results of the theory in practice..
Tens of millions, hundreds of millions, or billions of dollars, maybe, but I can tell you from experience that single digit millions of dollars runs with "fingers crossed" all the time in underwater robotics. Either your threshold for human indiscretion is just set in the wrong place or there's something else going on.
On a bit of a side note; is anyone aware of anyone or themselves thought about the social and political ramifications of humans establishing themselves on Mars?

For example, will it just be the billionaires that get to leave earth behind once the colony is established? How will the connection between Mars and Earth be maintained over generations and as evolution and cultural divergence starts taking hold? Will the elite that leave for Mars even care any about Earth, where they don't have to deal with the consequences of actions or policies and externalize costs very much like how immigration is used by the elite to lower wages, increase inflation and value of real assets, "liven up a stagnant society with the energy of new immigrants", etc., without having to pay the costs of personal and individual enrichment and empowerment at the cost of wider society. It allows them to not have to deal with improving education if they simply can import and outsource their needs, it allows them to avoid taking on the cost of social ills and poverty by shoving the cost of welfare onto the middle class while again externalizing the cost of training and elevating the poor working and black communities when they can just import people and outsource production to even poorer people.

Those are age old methods the powerful and wealthy have always used and the naive affected types have always been fooled to support. There is nothing that would indicate that would be any different if humans were to go to Mars. The fact that that dynamic and relationship hasn't even widely been identified, let alone acknowledged actually provides every indication that the current, age old issues, would simply perpetuate into the future. I don't see any reason why billionaires wouldn't simply essentially decouple themselves from society, aka, Earth, as they sit on a mother planet, served by robot "slaves" that create ever more lavish lives that may even be endless like gods, while the masses of infinite population growth on Earth clamor for ever more scarce resources as the Earth's biosphere cannot sustain the ballooning population and societies crumble as common and shared identity is eviscerated by pollution through outside, incompatible cultures, ideals, and values.
"...The source characterized the issue as one stemming from relatively benign information technology missteps and a failure to ensure network redundancy. There was no evidence of foul play..."

Yeah, right! That's just what they want you to believe! Come on everyone, adjust your tinfoil hats now!

lol ;-)
The only ones these people are hurting are the travel and airline industry. That means less jobs all the way around.
Probably. I imagine it's on the same level as having the right combination of buzzwords on your resume - you're unlikely to make it to the brain teaser round without it.
I tend to stick to her YouTube channel, podcasts, and Twitter feed. You're right, her website is not doing her any favors. But she's a biologist, not a web developer. Hence, going directly to her content sources seems to be the best option.
Telomeres are protective regions of DNA at the end of chromosomes. They get shorter when a cell divides and that shortening is believed to be responsible for some of the symptoms of aging.

This study says exercise causes heart cells to produce more of certain proteins that protect the telomeres (in mice).

The study didn't actually measure telomere lengths or lifespan, but having more of these proteins might prevent telomere shortening and slow cardiac aging.
I doubt we have the signal fidelity for that. These are just electrodes that detect voltage changes. They can't see 'thoughtwaves' or somesuch. They see very basic information and with a little training you can set off a voltage threshold. These voltages are really aggregates and the tools used here just aren't granular enough to be very exacting. You can do this right now at home with the Neurosky headset or the Neurosky Jedi game. The former comes with a programmable API. The stuff in clinical labs isn't typically more complex than this. This team went with an implant which is going to provide a higher level of accuracy, but its not going to read thoughtforms directly.

I imagine there's a more efficient way to handle typing for these low bandwidth cases. Maybe chording of common syllables. The layout in the article looks inefficient. You can probably lose accuracy in text to have easier 'speaking.' If you wanted to say 'father' you'd have to hunt and peck six letters. With chording you could click on 'fa' and 'der' and it should be understandable via context. Toss in some predictive logic and you can chord words at once or even entire sentences. Probably easier said than done, of course.
Rackspace spun off both Cloud Sites team and Jungle Disk last year, along with shutting down a team or two. Seems they're focusing on slimming down.
A billion-dollar ride-hailing company comes to India hunting for 100 engineers
Could you explain a bit more? I often do this on Linux using "tc" (traffic control) to simulate all types of links. What tools does BSD have that are superior?
Y Combinator now lets anyone recommend startups
I really don't think their methods are the same here, are you suggesting Obama created distractions like the birthed movement? I think he just went for it. Trump certainly is creating distractions, actively fostering fatigue.
the technical aspect of this issue is a solvable problem.

the social and political aspects of it are not. there's no political traction against this stuff. the border patrol types are too stupid to understand simple and innocent explanations, and treating them as equals is a surefire way to incur their wrath.

the way to make privacy at the border work for everyone is for everyone to conspire to keep the border patrol in the dark. throw them a (fake) bone or a (true at first evidence check) lie, and keep moving on.
>Yes, please explain. Because you only took the first sentence of my argument. the second sentence was that those "many people" are going to do what it takes, even if it means taking 'stupid' tests, smuggy interviers, and some other large corp bureaucracy (which to me personally is more concerning, but is not specific to Google, rather to any large corp). And why ? My guess is that it's probably so cool,curious, challenging to work on something like Google Maps/Balloons/Self driving cars that they will be willing to make a lot of sacrifices and tradeoffs. THAT was my argument.

"Many people want to go to Heaven, and they are going to what it takes, even if it means answering stupid questions, pretending to feel bad about trivial things, and some other large org bureaucracy."

My guess is that it's probably so cool, curious, satisfying to be in Heaven that they will be willing to make a lot of sacrifices and trade-offs.

"Many people voted for Trump", my guess is that it's probably cool, curious, challenging to finally tackle real issues that they will be willing to make a lot of sacrifices and trade-offs.

That's stupid, right? But why?

>My guess is that it's probably so cool,curious, challenging to work on something like Google Maps/Balloons/Self driving cars that they will be willing to make a lot of sacrifices and tradeoffs.

Those people might believe that it's cool, curious, whatever. But then you should end up with "many people think X about Y", not "Y has a property X (because many people think it does)".

>This is why i asked for clarifications. the OP said 'Google is incapable of hiring the engineers I want to work with', which implies that the engineers he is looking to work with are NOT there. Google is incapable of hiring them, and since they are top quality devs, someone else (more capable) did.

He doesn't want to work with them because they are unpleasant to work with (or be around in general), not because there is an issue with their programming capabilities.
If it's not a dyson sphere i'm gonna be real pissed off.
Towards this end, is there a place that matches developers with small projects needing just a small amount of help? Say, a few small bug fixes or enhancements? I'd be happy to contribute but I don't want to commit too much of my time nor do I want to navigate the maze of a larger project.
I haven't heard that before, but that is a great quote.
Another possible output for this type of task is an opinion or interpretation and a justification of it. A machine might feasibly be considered "good" if it output an unpopular interpretation with a good justification.
I think this guy feels this will be true because that's the bubble he lives in (an open source bubble). His bubble is not reflective of the entire software development community, however.

Sure, it'd be nice if everything I worked on was available open source, but let's just look at one example where that's not a good idea: video games.

Good luck getting the game industry to make their AAA games open source, especially before release, when hundreds of people are chomping at the bit to have a dirt easy time of cloning whatever game out there and tossing it on the app stores to make a few bucks off their broken, half-stolen mess of a game. It's a rampant problem right now (for example, 2048 and Flappy Bird both had open source versions, possibly unofficial... look how many clones of those games hit the app stores).

Not to mention, game development often is a creative one where features are tried and then have to be cut for time, while audiences assume that anything they see will be in the final game, and if not they were maliciously lied to. This leads to any information about the game being closely guarded except for planned waaay in advance marketing campaigns, for most games (indies is a little different, indies need whatever exposure they can get usually).

So no, not everyone is going to be working on open source software, and that's not going to change in the 2 year 'Mark my words!' timeline this guy has provided.
I wouldn't sweat it. Employers have been rejecting great tech candidates for dumb reasons for decades. I'd argue that if someone won't hire you because you don't have an account on some Internet service, you probably dodged a bullet and would not have wanted to work there in the first place.
It's only been suggested so far, but this is probably something that deserves more awareness?

Sponsor: Rep. Gaetz, Matt [R-FL-1]

Cosponsors:

- Rep. Massie, Thomas [R-KY-4]

- Rep. Palazzo, Steven M. [R-MS-4]

- Rep. Loudermilk, Barry [R-GA-11]
Plus, a lot of programmers just don't have/want to spend the time packaging things to be placed online, going through legal, or make blog posts about their code.
Thanks! I have been meaning to give terraform a try to replace some of our custom gcloud + gcloud deployment descriptors. Also so that we don't need a separate docker compose version for development (I'm assuming in theory you can run terraform to do what docker compose does?).
> Previously privileged developers will suddenly find their network disrupted.

Good god.... I love GitHub and what it allows for but let's not paint this as the "commoners" knocking down the walls that protect the "elites" in their ivory castles. Commiting to GitHub does not, on it's own, make you a better developer or a better person. In the same way that not committing to GitHub does not, on it's own, make you worse developer or a worse person.

I've met people who don't have single commit to a public GitHub repo that are FAR better developers (and people in some cases) than ones I've know that are deeply ingrained in a public project. In some, not all, cases there are different skillsets required for OS work vs working at a "closed source" company. And while we are on that subject I'm quite sick of some of the attitudes I see on HN sometimes around "closed source" like it's some evil thing. It's not, people have to eat, have to pay rent, have to support their families and anyone that thinks you can do easily that while working for a for-profit company are living in a dream world. How many times have we seen posts here about how little money is actually given to OS? Sure I'd love to be able to only work on OS or work for a company that is open but there are very few success stories in that area. The cognitive dissidence the HN crowd expels when they fawn over the SasS companies or various other SV unicorns (all closed source) here and then derides closed source is astounding.

All of this to say the message of "Your GitHub profile will mean everything for your career" is simply bullshit. CAN it give you a leg up? Of course, but experience working for a company and in that kind of setting is much more valuable to the vast majority of companies. Take a look at Linus Torvalds, undoubtedly a genius and a person who has done immense good for the OS community, however his temper/attitude are legendary with HN periodically posting links to his smack downs on mailing lists or the like. That said do you think many companies are looking for that kind of an employee? I think not (No disrespect meant to him at all, it works for him and I doubt he is looking for a job at those kind of places anyways).

Most of the companies I've worked for or interviewed with have either not cared at all about my GitHub profile or even if they say they do care they don't give it more than a passing glance at best. Focus on being good at what you do and if that happens in public on GitHub/GitLab/etc then all the better but don't bend over backwards to make your profile look good at the expense of actually knowing your shit.
Agreed - I said the same elsewhere on this thread
I disagree. Maybe people can influence policy in US, but this will still happen to journalists in China, women in Saudi Arabia, suspected drug users in the Philippines, and tomorrow's persecuted minority in tomorrow's undemocratic regime.

Technical self-defense measures are imperfect partial workarounds but the best we have to offer for people in these situations.
So, (is it safe to say?) using await/async will likely be slower for each given awaited operation since there is overhead in thread management and because when the awaited operation finishes it must wait for a thread to become available to continue onward.
I'm pretty sure the core XMonad doesn't, but the core XMonad doesn't do a lot of things, really. If you Google "xmonad tabs", I get http://xmonad.org/xmonad-docs/xmonad-contrib/XMonad-Layout-T... I have no idea if it will do what you want because I've never used it. That's in xmonad-contrib.

I don't know what you mean by "manual tiling", so I can't say if it's supported. I know I do some manual things but most of my manual things are out of the tiling context entirely.