skysight-inc/HackerNews huggingface dataset:
This is a good summary, but I'd clarify it by saying that Google isn't being subjective about Symantec's process failures. The CA industry self-regulates. Its regulatory organization is the CA/B Forum, and their principal regulation is the Baseline Requirements (the BRs). Google claims Symantec violated multiple BRs.

If you want to dig a little deeper, here's the last version of the BRs:

https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-...
Encrypt all the things.
I believe it is actually a matter of political campaigning in South Korea to get rid of ancient IE ActiveX requirements for government websites.
> Everywhere has culture. You just didn't like the one you were in.

I remember reading a conservative/neocon author who tore into this relativizing of culture, insisting on the old definition that "culture" didn't just mean "whatever junk's growing in a petri dish", but I can't remember who it was -- Barzun, Goldman ("Spengler"), or Dalrymple.

The point's valid regardless. "Culture" means "culture", not just "whatever the local savages are doing" -- and it's particularly silly to use cultural relativism to defend Republicans.
Few people would willingly sign up for that kind of torture.
This is the issue I face in the area where I grew up and still reside in rural New York. If you read the newspaper editorials it's a constant string of racist and homophobic garbage. I'm approaching 30 and it's very hard to find like minded people here, much less single women with ambitions and who aren't just looking for a baby daddy.

So why haven't I moved? Frankly I'm scared that I can't cut it elsewhere. My job is secure and pays very well for the area (as a single person I make about 160% of the median family income). I could move and work remotely for the same amount which would result in a drastic decrease in quality of life, or try to get another job that I'm probably not qualified for. I've been trying to figure it out for the better part of a decade now.
Was looking at setting up a PiHole to kill ads on my home network anyway - maybe it's time to just get a better router that I can do that on and hook up to my VPN provider in one box. Anyone got any suggestions?
As I said in a previous post, technology doesn't change, but empower us. Unfortunately that power doesn't usually reside in the hands of people who would use it best, but the people who want it most and have the least regard to the consequences of attaining that power.

Your misgivings about the future strike me as wise, given the power of the technology in play, and quality of the people using it.
I backed it as well. I've found the body fat analyzer applet to be highly inaccurate and variable compared to other methods (resistive, calipers etc).
Indeed, there was a set of roots IE 5.01/NT4 SP6/Win2000 and later trusted, and at that time only XP did automatic root cert update making them very valuable. Just before then, I think IE/SChannel only trusted VeriSign/Thawte/CyberTrust, and VeriSign bought Thawte just after IE 5.01 and NT4 SP6 was released.
- If I have to choose a Ruby tech, I would go for Rails, no Sinatra, no Padrino, nop. Whatever you think is simple now it will change in the future. So start with what you know well and has everything you might need, even if you're not using it now. I've seen many "small" services being rewritten in Rails for this reason and that's painful and a waste of resources.

- Nowadays I have several reasons not to use Rails for new projects (https://blog.jaredfriedman.com/2015/09/15/why-i-wouldnt-use-...). But I actually I have more reasons to use Elixir instead (https://medium.com/@kenmazaika/why-im-betting-on-elixir-7c8f...) (http://blog.carbonfive.com/2016/04/19/elixir-and-phoenix-the...). And yes, it's fun, incredibly robust and scalable. :D
A  blessed generation
I don't see the link with LetsEncrypt here. Symantec doesn't give away free certs, and LetsEncrypt doesn't do EV.
I'm a mod of that sub. Next time just send us a modmail so we can look into such behavior and hopefully tackle it.
>How could anyone in good conscience think this is good for the people?

You assume these people care about "what is good for the people." Like CNN and MSNBC, claiming "R's say this, D's say this, I can't tell what the truth is!"

There is the record, there is history. One party is aligned with their corporate donors more than the other. While both have issues, on issues involving corporate power and influence, R's are clearly on the side of corporations and wealthy donors who keep them in power.

EDIT: there is no need for being fair because everyone else does this, but many times, D's end up being "republican-lite" because they believe it will appeal to R's and also appeal to their (the D's) donors; but there is no question as to which side the R's lie on.
I need a tutorial on setting up privacy protections against an ISP. Any recommendations?
Nit pick: Billing address and physical location can easily be different.

I'd expect the ISP to know where their wires go though. Unless they're wireless.
Here's my thoughts as someone who has worked on rockets, and even seen a few of them blow up (but not my fault). It is amazingly depressing. It happens so fast, and there's a feeling of sheer helplessness. You can't do anything, and it's just gone. I imagine it's exactly how you would feel it you were watching your house burn down, or get ripped up by a natural disaster.

That being said, being reproducible is key. Both in terms of production of vehicles, and scientific experiments and equipment. Some of these things are very expensive, but it's always a good idea to have at least two copies going around, and probably more. You'll want to do testing and comparison experiments if the space flown one comes back.

Another thing not mentioned in this article is the concept of launch insurance. It's the homeowners insurance for getting stuff to space. It is also very tricky in terms of wording, and what is covered when (for example, when AMOS blew up on the pad that's different for the insurance than blowing up en route).

Some of the biggest troubles come when you have a limited launch window, and might not see another one for years, or tens of years. You just can't get that time back.
Mathematical Imagery
When I'm looking at trace files to figure out why an error occurred, I'm happy when I only get a 100MB one to look at.
> For any Canucks, are there any other decent places with tech jobs, and somewhat affordable housing?

I'm not sure if Ottawa is a "decent place", but Kanata has lots of jobs and affordable housing (in walking distance).

Still want to move to the US, though.
I totally agree (not any kind of expert). Even babies don't talk for a couple of years, but they are very much alive and in fact some psychology says that most of personality is baked by about 7 years old. Then most of it is must be determined without words or language, rather by memories & connected emotional experiences. Not hard to imagine that animals might experience the world similarly to babies via instincts & emotions.
I have a friend who is a intelligent, die hard progressive who makes it a point to read the most extreme right wing news sites, just to glean how a person on the other side might view and construct the world.

Maybe that is a bit extreme, but I think Economists readers (I think the publication is center right?) can pick up a center left or far left publications from time to time.
> it's all "silicon valley white"

You don't consider the thousands of immigrants who grew up in completely different cultures with different primary languages in Asia and Europe as diversity?

Instead, you consider the American born Black person whose primary language is English and who grew up with American culture as "diversity"?
It ships with your operating system, which you physically obtain from another computer (with hardware like a USB drive or via internal network).
Hey HN - I'm one of the cofounders of Daptly. We launched preorders this morning, and we're really excited to share it with the community and hear any feedback that people are willing to share. Thanks!
The Fed should eliminate the objective of maximum employment from its mandate for monetary policy (automation will kill the notion of "maximum employment" anyways). They should also rethink their approach to inflation and raise the inflation target to 3%. Yields are likely to stay historically low due to the overwhelming demand for the ultimate safe haven asset, U.S. Treasury bonds.
Fair enough, I'll tone it down next time
It's interesting how the non-fixed font size makes the Ds look like they're more than the Rs.
List of journalists killed in Russia under Putin
Lets all hope they are only selling it to advertisers.

Oh, also, just today- fifty gambling addicted engineers at google, in need of fast money- get them while they are on the projects and exploitable.

First offer, gets a CEO with embarrassing fetish on top.
But they did port it. That's why CSS Grid exists…
I'm not a big fan of disclosing my specific location on the internet, so I'll just say South Florida. ;-)
If there was a time when web folks agreed on a tool set I missed it.

It's not really about agreeing on everything, though, is it? What matters is having enough standardisation and longevity that you can make intelligent decisions today and expect your code to work for a useful length of time and to play nicely with code written by others who also make intelligent decisions today.

You can run a CGI process written in whatever programming language you want under any of the popular web servers today, and it will work essentially the same way as it did 20 years ago.

Until browser developers decided that backwards compatibility was too much trouble to continue supporting, which is a relatively recent development, you could also run Flash or Java applets written many years ago with essentially the same results today.
I can't remember the stand-up routine, but the punchline applies:

"10secs! I was supposed to be at work 15 seconds ago!"
>in the space making a phone call, moving a pound of mucus from one sinus cavity to another, playing desk bongos along with their headphones, or any of the thousand other ways that normal humans can be distracting.

Most of this stuff is not "inconsiderate"; it's just how humans are. People need to make or take phone calls sometimes; how else are you supposed to schedule doctors' appointments and do other life tasks, unless you have a personal secretary (which these companies no longer provide us)? People get sick and need to blow their noses. People get bored and need music (the presence of music in all human cultures, from the dawn of civilization, shows it to be pretty close to a primal need).

The fundamental problem is that humans are not biologically designed to be packed into seated arrangements for hours on end, working quietly without distracting each other. We invented "rooms" for largely this reason, and having separate homes instead of living in one giant communal space, because when we pack ourselves into denser arrangements, we still value having some privacy from one another.
Just let me schedule it. Trying to "learn" the right time and amount probably won't work well with such small datasets, and has a high risk of annoying your customers.

At most, send me a reminder email asking if I want to repeat last year's order.
There is, literally, a part of the brain that if you shut it off, you lose language. Dennett would have you believe that it's that one part that makes us human.

That's an interesting position for him, considering (IIRC) his co-author Douglas Hofstadter (The Mind's I) has a sister who is a perfectly normal & functional adult except for her complete incapacity for language.
Yes, seriously. Next time you're in London take a detour to the British Museum if you remain confused on the subject.
I think what you're saying is a great way to describe what advantages accrue with wealth, even middle class wealth.

Essentially you had the system work in your favor and in turn knew how to work to system. You got a warm intro into an internship, this helped you get into college afterwards. These kinds of subtle boosts are mostly a function of being in the right place within the system and knowing how to pull the right levers, and if you don't know to look for those levers, you'll never know they're there and be disadvantaged as a result.

In your case, it was being in the right place and having the flexibility to take that internship. For someone else it might be knowing how to work the college financial aid system, or something else. I look back and see that throughout my academic career, if I didn't have people who knew how the system worked telling me, "you should do this, and this is how", I don't think I'd have gotten where I am.

Essentially, I got a better shot at things even though I was no more qualified on a purely intellectual basis.

AA is an imperfect tool to give people some of those same advantages, and I'm a little ambivalent about it. But I think it or something like it is probably necessary to give everyone an equal shot.
The way I see it is if your numbers for race as a whole don't match the underlying distribution you probably have a selection bias in there. I'm not sure affirmative action is the right move but I don't know how you can deny a selection bias against certain groups (racial or otherwise) and I think that we need some way to try to correct for it
Crazy! A third of SYMC's revenue might be going POOF! and the market is just shrugging?
Not all white people are as privileged as you.
> How should content creators protect against people who access their content without buying it?

This question got downvoted. What did you read into it, or which insinuation do you think it makes that you find offensive?
Which is a great idea: knowing which expressions can fail and which ones cannot. However, the way go encodes this idea isn't very ergonomic or elegant. I'd suggest that you take a look at ways other languages do this. For example, the `Either` type in Haskell or the disjunction type `scalaz.\/` in Scala.
Heterojunction cells are an approach to reducing recombination losses near contacts in single junction silicon cells. Sanyo (now Panasonic) developed them in the 1990s and has shipped gigawatts of them. It's the same Panasonic cell technology that SolarCity (now Tesla) is expected to use in their New York factory. The vanilla heterojunction cell design is actually one of the simplest high-efficiency cells in terms of process flow. The main drawbacks are patents (until recently) and the limited heat tolerance of a-Si layers; standard screen printed silver metallization, fired at high temperatures, does not work for these cells.

https://www.researchgate.net/profile/Stefaan_De_Wolf/publica...
A attacker would be more likely to attack the points in society with lowest perceived security and highest value. As such, if they had a single security check at entering the airport, then the train station before the airport would be the target. If they extended the check to the train station, the highest density area outside the train station. and so on, and so on. Thus the assertion that multiple checks don't help when dealing with perceived security, as long there is a easier target somewhere else.

And the assertions are not mine. Security researchers has published multiple articles on it, and finding commonalities between police and military is just public data. There is not a single security expect that claim that airport screening is cost effective form of security. Feel free to prove me wrong.
So basically you're pinning the server certificate chain into your signed client code? Actually that sounds like a good thing!

https://www.owasp.org/index.php/Certificate_and_Public_Key_P...
Now your teen can ride with Uber
Yes, that was the point I was making. This is something computationally trivial as long as the code is written appropriately.
If I'm reading the settings page right, Chrome trusts over 70 certificate issuers right now. Let's Encrypt is just one of those, and only issues a limited set of certificate types.
Humans are things. What's your point?
> The resolution also would bar the FCC from ever enacting similar consumer protections. It now heads to the House.

This is honestly the most frightening thing to me. Even if prevailing opinions change, they can't bring these regulations back in the future? This seems...majorly problematic.

Edit: The Ars article [1] expands on this a bit further:

> The Senate today used its power under the Congressional Review Act to ensure that the FCC rulemaking "shall have no force or effect" and to prevent the FCC from issuing similar regulations in the future.

I'm not well versed in the Congressional Review Act and what its invocation means here, but I've seen commentary to the effect of "The FCC won’t be able to try again, even if Congress gets back on board".

[1] https://arstechnica.com/tech-policy/2017/03/senate-votes-to-...
Because then you have the web of trust model, which absolutely sucks in practice for people to actually use.

So yes, you could do this. But outside of a few hundred people, nobody wants to actually undergo the constant effort this would actually require.
Zika mosquito genome mapped under $10,000
The point is that when you're a customer talking to someone who makes much of their living based on your tips, conducting a quick opinion survey about how much they like their job, just prior to the part where you decide if you're going to tip them, you may not be conducting scientifically sound research.
I think the better term analysis from my PoV:

* Republican prefers smaller government and prefers more conservative approach by eliminating regulations

* Democrats actually had all the major corporations' support during the 2016 election, but they try to appeal both sides, with more liberal agenda and mixing the corporation interest.

Don't forget each party is divided into:

* extreme conservative

* liberal

* conservative

of their own party's ideology.
No, even after that I'm pretty sure it's a net win in developer time.
You no longer have to deal with solution domain issues (memory leaks, crashes, deadlocks, type errors ...).

However, you might still need a huge bunch of english text to describe the problem domain.
If such a text isn't already available, you need to write it yourself (coding).

However, you might not write it in one shot, so you need to store it in text files that you can read and modify later.
Maybe you would team with other people to write it, and you would share and track your modifications (versioning).
Maybe, to make it easier to manage, you would split your description in multiple text files (modularizing).

And then, you'd need a way to ensure that your text actually unambiguously means what you want.
So you'd need ways to identify (testing) and correct (fixing) theses ambiguities.

And maybe, at some point you would change your mind on some behaviours ; and then you'd come back to your description and modify it so future behaviours changes might be easier to deal with (refactoring).

And also, maybe your intelligent system has inferred a correct way of doing things that is actually too slow. Maybe you could order "do it faster!", or maybe you would need to identify the source of slowness (profiling), and edit your description so a faster behaviour is inferred (optimizing).

At this point, you in an attempt to improve your efficiency, you might consider using a simplified notation, which would be less-ambiguous and less verbose (like did scientists, musicians, engineers, mathematicians ...).

See, nothing to do with programming!
let's replace the electoral college with non-fixed fonts!
One of the worst problems I see for the new JS developers is the tooling-overload. Being an experienced developer, I know why that tooling is required - but new devs are just overwhelmed with the information out there (and understandably so). And most of the todo-list projects tend to over-simplify the tooling. It takes time to learn the tooling and understand its importance

In a typical React app (+TypeScript), I have atleast 40 dependencies in package.json (frontend-only). I know exactly what each dependency is required for. And each time I have a new app, I create that package.json one line at a time - just to make sure I don't add unnecessary dependencies.

But for a JS newbie, knowing what dependency is what and why - is pretty overwhelming, tedious and uncomfortable. This is assuming they already spent time learning JS and the frameworks in the first place. Its easier to give up that important learning when you have to deliver "just a landing page in Angular" and answer to managers. After few iterations, the result is a disaster that is difficult to maintain, buggy and much more difficult to add features. Ultimately that adds to the development/maintenance cost.

I know why the JS tooling is complex, but sometimes I wish JS projects were as simple (and controlled) as creating C# windows apps using VS - where the tooling is mostly hidden
I've been using AirVPN for a couple years and love it. They allow you to use OpenVPN instead of a proprietary client, which is nice.
An ISP can still see the sites you browse, even if you use HTTPS everywhere and don't use their DNS.

For shared HTTPS hosting (1 IP serving multiple domains), SNI (the domain) is sent in cleartext so the server can pick which configuration to use (SSL cert, etc). For sites that don't use SNI, they can still see you browsed there because without SNI, 1 IP = 1 domain.
You see this way too much, apathetic cynics will reply to anything political with the lazy and ignorant: "Democrats = Republicans, we all lose"

They put 0 effort into their analysis, they're just rote repeating a cynics trope that makes them feel smart and superior to the process.

It's difficult, after all, to educate yourself on the issues and respect the differences between the parties. It's difficult and complicated and messy to dig into the details and realize the differences.

Why do the work? It's far easier to be a cool hipster cynic and rote repeat out the standard script: "Democrats and Republicans are two sides of the same party" "There's no differences"
Love how the pencil/mouse gestures translate to adding nodes and links! That feature alone, even separate from the simulation aspect, makes me want a diagramming tool that does that for a wide range of symbols.
Of course immigrants and different languages increase diversity. But it's also true that other people from within the US are critical to developing a balanced view of the world. A black person is going to have a very different experience that I will as a white dude, and we are all poorer for it when we don't know people with those experiences. The same goes for the white farmer who grew up on a ranch in Nebraska, I would love to know more of those people, they see the world differently than I do.
You'd get more consistency for sure, but nothing that approaches the 75MHz (13 nanoseconds!!) needed to capture data from the GPIO pins.

From my understanding of the Raspberry Pi, the GPIO pins simply weren't designed for that level of speed. Which is fine, the Raspberry Pi was designed for other stuff. Its all about tradeoffs.
Look idea, but I think it needs a better explanation, its a relatively complicated concept.
If it helps some SV exec donate, then sure, why not.
A friend of mine successfully started a routine of waking up at 5am to go to the gym before work. His success was largely around setting an alarm to get ready for bed. He'd set an alarm to start getting ready for bed, and then another alarm when it was time to turn off the lights. The last 30 min or so before he went to bed was time to read -- no screens since he'd get distracted browsing websites and find it harder to fall asleep.

While he was starting off he kept the schedule fairly strictly, with weekends and meetups included. After he got into a routine he started getting a bit more lax, but I'm pretty sure he still has an alert on his phone some 2 years later after starting this habit.