skysight-inc/HackerNews huggingface dataset:
The top comment was a hit piece, not an attempt at honest conversation.

It's whataboutism, to distract from the actual conversation. "Oh, Google is doing a good thing, but what about all the bad things they do"

If you feed it, you talk about what they want you to talk about, which is inherently negative about Google in this case. It's a standard tactic of state-sponsored propaganda machines (not that I think it is in this case).
> Kinda undermines the idea of having a standards group if Google is going to strongarm the industry by doing their own thing anyways

In any industry where a single actor has a clear majority of the market share, you either vote with your feet (and implore all your friends to do so as well) to bring the powers back into equilibrium, or you cross your fingers and pray that Goliath is (and remains) benevolent.
Yes! Highly recommend Carl Safina's Beyond Words.
Yeah I kind of thought that, but "discovered" gave pause to that thought, since it's not "invented."
"Constructive criticism" has as it's prerequisite an understanding, respect and emphasis of the creator's goals, and an active deemphasis of your personal goals. This criticism had the opposite.
From the Google link on Symantec root certs:

http://pastebin.com/raw/nUEq5cFP

Not sure if all of them issue EV.
Twitter is being unbundled before our eyes
What about Webpack 2 or Vue.JS 2 with it's breaking changes?
Senate votes to let US ISPs sell Web browsing history to advertisers
A Lisp might be a better language choice for that use case than Python. Nothing against Lisps or Python.
Out of curiosity, do you keep 1-1 mapping among users/groups/roles(/resources?) across different accounts? Because that's another possible source of complexity.
User: why don't I just run an open source adblocker that doesn't serve me ads?

Publisher: you are extorting me into using your platform by blocking my partners' ads.

Advertiser: you are extorting me into using your platform by blocking my ads.
The reason we even have HBCs in the first place because most universities did not accept black people. So HBCs were created by black people and their allies.

Many HBCs pre-date the civil right changes and school integration prior to the 1960. Many of them go back to the Civil war and some event pre-dated the war.

There's also HSI, short for Hispanic Serving Institutions. This concept was create in the mid-1960s. Unlike HBCs, institutions could be designated HSI as a result of a federal law. And the law didn't require that these were primarily representing hispanics. Instead the law allowed general institutions to be labeled HSI if they enrolled a certain percentage of latina/latino students along with some additional socio/economic pre-conditions.

As you can see HBCs / HSIs are somewhat different concepts and have a different history. Additionally, in recent years there's been an iflux of hispanic students to HBCs as well.

I hope that other large organizations like Google have more partnerships with HBCs/HSI/Native/Tribal educational organizations. This seams like a start, no real to not cheer it on.

There's no reason to pit groups against one another... it's much better to work together. There's a great datapoint in the history of the VRA (Voting Rights Acts) the people who became enfranchised with the first passing of it fought for expanding the VRA via the 1975 amendment to expand the VRA to other groups including Hispanic/Native/Tribal & Asian minorities. Prior to that states and manipulates in Texas, New Mexico, Arizona, south California were actively working to suppers the Hispanic (such as the Chicanos) vote.
The Windows 1.0 clock (1988) had a 1Hz second sweep hand that ran on a 4.77MHz 8088. It's really just a couple clipped line segments each second.

http://variableghz.com/wp-content/uploads/2012/12/windows-1....
If this is free speech then the idea seems to have undergone something of a scope creep in recent years. To me that implies an individual without fear of reprisal for stating their opinions, not mobilising significant financial resources to organise voter harassment and help the spread of politically-motivated mistruths.

We already see similar problems kept in check by the existence of advertising standards and anti-corruption practices; I suspect that we can at least begin to tackle this particular one legislatively with the same sort of thinking.
Sure, but it's also more likely to make my laptop with 16 gigs of RAM, 8 simultaneous threads and SSD feel more sluggish than the one I had 10 years ago.

Edit: I'll add, I frequently see people say that Windows XP was the best OS ever made. Why the rose-tinted glasses? It was the tail end of the era when hardware was getting faster, faster than software was getting slower.
Minorities are the most exposed and I perfectly agree,
but with the new capabilities (big data analysis in particular) I believe that ANYONE can be a target, not only minorities.

Edit: the book seems great, I'm gonna buy it, thank you for the hint.
Look, I have no skin in the game but Uber doesn't charge for cancelled rides if the driver honestly cancels it. It looks like the driver in OP's link marked the passenger as 'not arrived when at pickup,' which defaulted to the app charging the OP.

I had someone cancel on me this morning. It shows up as cancelled and as a $0.00 ride on my ride history.
I just noted that my lastpass extension was updated by Firefox. Is this fixed?
Silicon Valley is basically one giant hackathon. Half the fun is being there.
I've billed 10-20k in rare weeks. It's because it's a one-off project that they want you to work 40-60 hours on that week: so you can't do anything else with your business.

Rates drop a lot for maintenance and service plans where they'd like to have you on retainer month over month for years (hopefully).

This is just web development.
Keepass has lots of red flags for me:

- No https on site

- Update file hosted via http (not https)

- Downloads via sourceforge which has injected adware in downloads before

- FAQ downplays lack of constant time comparison instead of using constant time comparisons and being extra safe

- You have to cobble together multiple apps from multiple developers to get a full working solution; means you have to trust lots of individual entities

That being said I can hardly defend staying on Lastpass anymore.

I just wish 1Pass was crossplatform so there was a clear universal winner!
Simple ES6 class based mongoDB ODM(object document mapper)
I've struggled with this too.

I love how I can share passwords with a team using LastPass (share just access, share ability to view, share ability to edit). For me... it's more about getting the team using the right tool than individuals. There are probably better individual solutions than LastPass, but I don't know of any that are better for teams. I know that having a tool that lets you share passwords is inherently risky... but I still think LastPass is less risky than people sharing via PostIt, or sharing via emails... or less risky than not sharing passwords in that "hit by a bus" scenario we always talk about.

I tried Enpass, 1Password, and KeePass for individual use... none of them were horrible (I liked 1Password the most). Enpass let you sync your vault with the storage option of your choice... so you could sort of do team passwords that way. Typically I don't want to share all my passwords, just a few... and like I would want to share different subsets with different people... so that "share your vault" option wasn't ideal for me.

Usability-wise, I love how LastPass fills in my credit card info and address on forms I tell it to. And how LastPass can automatically update passwords for many common sites. And gives me a report of passwords that are weak, old, and duplicate -- the "global rank" on LastPass is a game and I want to get a high score. Ha. (Full disclosure, I tried each casually for less than a week... there may have been things I missed.)

Been on LastPass for a long time, generally happy with them and haven't found anything that better fit my needs, but clearly these reports that they aren't taking security as seriously as they should be are troubling.

EDIT: Going to look at https://1password.com/teams/ in the next week or so. I don't think this option existed last time I looked at 1Password.
According to the this survey I'm ruthlessly stealing from another comment, they have the biggest market share right now: https://w3techs.com/technologies/history_overview/ssl_certif...
In Boston I've had cabbies at South Station try to get me to agree to pay 25 dollars for a ride that is 11 dollars on the meter. I don't really have a problem paying a bit more for taxis over Uber because as far as I know the cabs aren't using VC money to artificially lower their price, but I do have a problem when the cabbies try to blatantly fleece me in violation of their regulations
yeah, visualizing lets us move the argument to a more focused context. we could examine and say, lets figure out if "more profit" really does lead to "more tax" money, etc
I am almost ready to file a lawsuit.

Context:

What I am after is a password manager that has the option to NOT store anything in the cloud at all. I want encrypted storage to be stored locally. No exposure outside my network. Inter-device synchronization done manually or automatically within the confines of said private network.

I would also like to store data beyond uid's and pwd's. For example: secret questions and their answers, account and pin numbers, company tax id's, bank account numbers, passport numbers, etc. In other words, data you might need handy that should be encrypted.

I've been using a program for a number of years. The program started exactly as I described above: Network only synchronization.

Over the years they have mutated the program to cloud based storage. And, over the years, they have done this without warning to users or seeking any kind of authorization.

Imagine if you are using software that only stores data locally and syncs over your network only to wake up one day to discover that the latest update uploaded all of your secret data to their cloud-based system WITHOUT your permission. And, to make things even worst, they progressively eliminated the network sync option.

The current version doesn't even ask, the minute you edit a record or create a new one it shoots it up to the cloud. Unbelievable.

Years ago I asked about this. I have an email from the support assuring me the data would never be stored on the cloud. Time to file a lawsuit?

Anyhow. Is there a tool fitting my description above? I don't care if it's free or paid. I simply want my data to never move outside my network unless I want it to.
These recommendations are great, and for us the direction is definitely everything on roles. I was curious to see what others do concretely.
You're talking about this phenomenon? https://en.m.wikipedia.org/wiki/Stereotype_threat#Failures_t...
I'm mostly interested in "modern" mathematical logic then. I'm very interested in learning category theory and its connections to programming language theory. I already know a little bit of category theory, but am open to any good beginner sources. I'm also interested in classic recursion theory and a bit of proof theory with its connections to CS. I don't know many people doing any of this and it doesn't seem that popular in math departments.
8 Boards? How about turn one FPGA board into a logic analyzer. For example, get the $25 MachXo3LF starter kit:

http://www.latticesemi.com/Products/DevelopmentBoardsAndKits...

And that's pretty much it- Lattice includes "Reveal" a logic analyzer which can run on the FPGA in their tools. It's intended to debug designs, but there is nothing stopping you from capturing data from pins. Pretty sure it would capture signals up to ~200 MHz.

http://media.latticesemi.com/~/media/LatticeSemi/Images/Prod...

(it would be a lot better if it had a superspeed USB connection- they should make a version with Cypress FX3)
Greenspun's Tenth Rule: https://en.wikipedia.org/wiki/Greenspun%27s_tenth_rule
Very interesting read. I wonder if Bloomberg will comment on being caught intentionally posting a "fake news" attack piece. Irrespectively of what people think of Trump, this blog post does demonstrate quite clearly the problem with today's media.
I've often wondered: why is trust in CAs an all-or-nothing proposition (aside from EV certs), and why should my particular browser vendor have all the authority over who I should trust?

For the vast majority of users that's probably just fine, but I would have thought that there'd be a browser or extension or something that allows security-conscious power users more fine-grained control over this by now.

For example, I could subscribe to changes in CA trust levels from every major browser vendor, and if they don't agree my browser could show me a warning with an explanation.

Or I could subscribe to feeds from other entities I trust, like the EFF. Or my security-conscious friends.

Or if I decide I have lower trust in certificates issued by governmental CAs, or CAs in certain regions, I could mark them as lower trust.

Basically a web of trust for CAs.
Like Lily Allen's The Fear, could be taken as a satirical bash against a consumerism she is disgusted with, or it could be interpreted as autobiographical, blaming society for her being the way she is as if to remove herself from being at fault.

https://www.youtube.com/watch?v=P191zutE1D0

I guess it would depend on the mindset of the listener as to which interpretation they choose.
sorry but i don't understand your comment. its a advice or what you need?
I have heard lots of good things about Digicert, FWIW. No personal experience as my use case can be covered by LetsEncrypt.
In Visual Studio you go from 0 to "Hello world" in about as much time it takes to download and install the behemoth. And if you're having trouble with some part of the toolchain you'll know that everybody using the same version of VS will have the same tools so there's a very clear way to find help: "Visual Studio {$version} {$description_problem}".

While ASP.Net used to be (pre MVC) the shitty enterprise sloth that was holding you back to any serious quick development now a full web stack looks like more work to maintain than using VS. I think that should alarm some people.

Things should "just work" while I am getting things done. And if not there should be a reliable way to troubleshoot it.

PHP definitely got better while it still has a lot to improve. It just looks a lot less ugly when I see it, actually smart sometimes.

You should be able to use one IDE with full autocomplete (not autoguess) and a full stack going from project creation to project publishing. Otherwise your time is wasted.
When you install a package locally, executable files get added to node_modules/.bin. So you can run gulp using node_modules/.bin/gulp. Also, npm scripts automatically have that directory added to their path when they are run, which lets you use npm run to access things like gulp.
If I'm reading the post right, it's stricter than that:

> ...distrusting certificates whose validity period (the difference of notBefore to notAfter) exceeds the specified maximum.

I.e., a certificate valid from 1/2015..1/2019 is distrusted as of Chrome 59.

And the more lax restrictions only apply to certificates that have already been issued. Any one issued after Chrome 61 are held to the highest (9 mo) limit.

> In addition, we propose to require that all newly-issued certificates must have validity periods of no greater than 9 months (279 days) in order to be trusted in Google Chrome, effective Chrome 61.
> The law stripped municipalities of the ability to control private property.

I can only dream. As someone who must post a permit and involve the city in order to remove a tree in my own back yard

Our homes are micromanaged here. It's like the city has created a city-wide HOA.
DoubleAgent: Taking Full Control Over Your Antivirus
You wouldn't want a standards group that somehow mandates all clients must accept all valid certs, right?
MongoDB is Hiring Engineers
It's interesting I think having an understanding of the history of javascript concurrency is almost a prerequisite to using it correctly. I wonder how new people approaching the language for the first time find it.
I think you should read the OP more charitably.

They're not saying that Google is "out to get" poor people - they're saying that Google's advertising practices cause disproportionate harm to the poor. I don't think that Google's executives mean to diminish the welfare of the hardest off, but that they're (possibly willfully) ignorant of the broader consequences of their business model.

This collaboration with Howard, as well as the other humanitarian/public services you've mentioned, seem to support the latter.
>Large websites using Symantec certs start telling users Chrome is "broken"

I'm having a hard time thinking of a scenario where a large website concludes it's cheaper to convince web shoppers at ecommerce sites and web visitors at news sites to switch to Firefox/IE instead of the website just switching CA vendors.

If you're a website that wants to put up zero friction between buyers submitting their credit-card info and pay you money, why try to "educate" them? If you're a website that wants visitors to see your ads next to your journalists' stories, why make it more difficult than it has to be? Does Symantec as a CA offer up extra benefits that no other CA has such that it makes sense to "train" web visitors to switch browsers?

Of the millions of non-geeks that use Android phones, what % download and use Firefox instead of the default Chrome browser?
The price of gold has risen considerably over the years. There's no particular reason to suspect that this trend will stop, since it is tied in with rising levels of production.

It is quite possible to create an artificial scarcity of gold, and thus gold would be higher than it should be. But it would be ridiculous to claim "gold can't go up forever" and that to achieve affordable gold we only need to remove the artificial scarcity.

It may be desirable that we remove the artificial scarcity, but it is also a distraction from the core question at hand.

It is ignoring the natural scarcity and the general rising level of productivity. Prime locations are prime locations. A port, for instance, only becomes more desirable as total production levels increase.
For macos I feel like https://github.com/jdberry/tag is probably a better solution.
I've been using LastPass for a few months and have loved it, but maybe I'll consider switching to 1Password.

<rant>
However, can I just rant for a second about how these security assessments and blog posts fold out? The beginning of my career was spent thinking I was going to go into this field (one of my degrees is in Information Assurance) and the #1 thing that persuaded me to switch to building software instead was the attitude and approach of the security field.

If it's not 100% secure and we all agree that it's the 100% best way to do something, it's the end of the world and anyone using LastPass is an idiot who will have all of their passwords hacked and their life ruined. (Remember when the draft for client side storage was announced? You would have thought armageddon was upon us based on the reaction of the security industry.)

Big picture here -- most people re-use a short, simple password on all of their sites. Using a password manager, even one with a few things that it can and should improve, is a HUGE step in consumer behavior. Bickering amongst ourselves and boasting for crapping on someone's company is not the right approach to increasing our entire society's security stance.

Want to actually help?

1. Create more resources to help consumers pick, use, and adopt a password manager with super simple setup process. Even the current methods that all password managers use of generating, saving, and autofilling passwords are too complex and cumbersome for the average consumer. Heck, even MFA is seen as a huge waste of time and barrier to logging into people's accounts by the majority of people right now.

2. Create more resource to educate developers of these services, helping them to see what they should do and how they should do it, not bragging about your ability to tear down a service they spent hours slaving over. Get over yourself and actually help society. (https://www.owasp.org/index.php/OWASP_Guide_Project is a great example of this)

Looking for an example? Apple's iTouch. Yes -- it's not the most secure option. People leave their fingerprints all over the place and they can be lifted and used to unlock a phone. But look at the other option -- using no passcode, or a 4 digit passcode that's easy to guess or look over a shoulder. Is it the most secure option? No. Does it raise the level of security for our society as a whole by providing a realistic security barrier that the average consumer can use? Yes.
</rant>
This reminds me of one of my favorite old tech stories.

A long while back (seems like this was the late 90s or early 2000s) I was working on a script that did some data processing on a remote machine. It had to loop through a bunch of text log data and generate some reports. Being as that I had no idea if the script was actually working until it completed awhile later, I decided to put in a neat little ASCII spinner in it when you ran it with verbose options.

At the time I was on a slow dialup connection as I was on break from school, and something weird would happen. Every time I ran the script to test it, my Internet connection would become nearly unusable. But as soon as the script finished, it would suddenly start working again.

As you can imagine, this was very confusing since the script was running entirely on a remote system. What the hell is going on?

This stumped me for an hour or so until I ran it without the verbose option ... and it didn't happen. Then I finally realized what was happening: I was refreshing the spinner on EACH ROW and remote machine was going through the rows so quickly that sending refreshes for the spinner saturated my tiny dial-up connection. Changing this to only update once a second fixed it entirely.

And that's how I DoS'd myself with a spinner.
I don't think Dennett is denying that animals have rich inner lives, or that they can express basic desires to us. He's saying that their conscious experience is somehow fundamentally incomprehensible to us.
If we had a DV cert and pinned the DV root then the barrier for an attacker is a lot lower. They just need to jack our DNS and get their own automated DV cert issued quick.
Announcing a java project for managing work schedules
US officials: Info suggests Trump associates may have coordinated with Russians
* The pricing page does not contain any info about the pricing. Could you briefly mention how your pricing works?

* Did you find that large companies are welcoming of Hivy or was there any resistance to adopting a third party service?

* What was your growth rate like between the start of YC and demo day?

Best of luck with Hivy!
China may not be ethnically diverse but certainly it is culturally -- so I don't get the hypothetical born in China example.
Manage your Ruby on Rails models, relations, and migrations from a simple UI
Quay: Introducing an Application Registry for Kubernetes with Helm
Why not keep `/etc/ssl` inside a volume mounted by each docker container and run letsencrypt outside of docker? Each docker container doesn't need its own instance of letsencrypt; it just needs access to your key.
Yep. Complete deal breaker. I think I want a FOSS self-hosted solution.
WPF is perfectly fine for high DPI apps and still beats all this web stuff by orders of magnitude.

CSS people still think a grid is a choice of "small" "medium" and "large" columns/rows. Haha.
Concepts Are Ready [pdf]
A few more winters like this one and it'll be hard to complain too much about the weather (although, in mid December, when I got back from Antarctica, it was much colder in Chicago than Antarctica).