skysight-inc/HackerNews huggingface dataset:
Text-only browser shows the IDN, not the phished domain.

</sarcasm>I guess I need to "upgrade to a modern browser" for websites to work correctly?</sarcasm>

As an aside, I still do not understand how "modern" browsers evolved to hiding portions of the URL or using a phony address bar i.e. "omnibox" to the right of the real address bar.

In the first case, it seems to offer no benefit other than to hide important details.

In the second case, it seems so overtly deceptive for newcomers to the www that I am surprised they could pull it off.

Maybe these things have changed recently as these monster programs are constantly changing. If so, pardon my ignorance.

Is it not true that users who do not understand the basics of www usage e.g., what is a domain, a URL, etc. are always going to be at risk of manipulation?
MBP Linux killer from System76? I'm not optimistic about them being able to pull it off, but I'll certainly root for them.
I'm also a dev, and I'm pretty sure I'd get fired really fast if I only did 2 hours of work a day.
Why do we keep equating OSS to "unsupported"? Some of the OSS I use is far better supported than licensed software. Drop an issue on GitHub and it gets fixed in a few weeks.

- a CIO
Yes, your last point is astute. Sandwich shop owners, for instance, benefit from the presence of more people here to buy sandwiches but who are prohibited by visa restrictions from entering the sandwich shop business.

In theory, we all benefit from more immigration. Yes, some of the immigrants will compete directly with us for jobs and customers, but others will provide us with services and be clients and customers. Again, in theory, the increased economies of scale leave everyone better off.

The thing is, job-specific immigration restrictions don't allow the market to work properly. If immigration forces people to be programmers, then homegrown programmers will be disproportionally affected by immigration. Sorry for no cite, but I did read a study suggesting that programmers are one of the few educated groups in the US whose wages may have diminished because of immigration. I don't think this would have happened had immigration been "free", because immigrants would be able to respond to market signals and spread into the general workforce in the way I described above. So I don't "blame" immigration per se, I blame the highly coercive nature of the program.

As to high vs low skill... yes, this would impact high skill workers more, but I think the distortions would would be manageable as long as we kept the definition of "high skill" very general. I think the H1B visa is too narrowly defined, and too dominated by high tech, to qualify as the more general "high skill" approach that would avoid these kinds of market distortions.

[1] I find some merit to this, but I do believe there are costs associated with very high levels of immigration that are often left out of this kind of analysis.
I, Pencil: The Movie [video]
This is bad, and I'm not letting Microsoft off the hook here. But, there's an easy workaround for this particular case: Use an alias, such as myrealemail+msft@example.com, for the new account.
WATCH Live: Manchester United – Anderlecht
The restriction is because commercial activities are prohibited over amateur radio, and encrypted traffic would prevent that rule from being enforced.

I believe there's an exception for controlling remote devices when you need to make sure some rando doesn't brick your pricy gear.
Can you elaborate on what they are not mentioning?
Not the kind of article I typically read, but I thought that was incredibly well-written.
The Story of Getting SSH Port 22
"there is no reason to use force even when people don't cooperate"

This is utter nonsense.
>Chrome had search integrated in the address bar from version 1, every time I opened Firefox year after year and I saw that little separate input for searching I felt like using grandma's browser.

As did Firefox, kinda, and they keep flip flopping on it. It used to be that if you type any string, it does a "I'm Feeling Lucky" search. Now, on my FF, it does a Google search. So it still works...

>From a technological point of view, it took them years to implement sandboxing, and they're still not done. If a tab misbehaves in Firefox it can take down the whole thing. Chrome had it right away.

I keep hearing this. Yet, Chrome still crashes for me. And at this point, FF is very stable.

I know every time I looked, FF + extensions still had much that I could not do in Chrome (including extensions). But it's been a few years - I wonder if Chrome has caught up in functionality?
It was an eye-opener for me when I was a teen and bought a gallon of soft drink syrup from a McDonald's for use at a party. It worked out to about 5 cents a cup for the drink in a soft drink, which sold for 75 cents (if I remember correctly). McDonald's doesn't make money selling burgers, they make money selling the soft drinks and the fries.

The same goes for any restaurant, it's why they ply you for drinks.
It's more about that Facebook content is forever. Users know others can see their post years later, causing people to be less willing to use the network.
Interesting, thanks for sharing. Have you tried this out at all?

When not using JIRA I generally utilize Clubhouse.io (https://clubhouse.io) or Pivotal Tracker.

I've also checked out Taiga.io (https://taiga.io/) briefly, however, I've never utilized it for a project.

Thanks!
The problem with that approach is that you are going against the wishes of the person who produced the website. To my mind if someone creates something of value, the creator should have a say over how that something is consumed. To use something without the permission of the owner feels a bit dirty. If I don't agree to the terms of use for a website I simply won't use it.
> Without widespread adoption of a must-staple extension, OCSP is cosmetic. The decision to disable it didn't come from simplicity fascists; it came from people like Adam Langley. AGL isn't right about everything, but if you take the position that something he does with Chrome TLS is ludicrous, my default will be that you don't understand the issue as well as he does.

Well, please, do explain where I'm mistaken here - is OCSP required not the most secure option? And it was rejected simply due to usability reasons on Chrome?

And the option to do so anyways for power users doesn't exist because Chrome is a browser for ease of use?

I'm not saying it's entirely ludicrous - for a good chunk of the user base CRLs are at least decent - but having an option for power users who desire more security should be available. And it's mandatory for any browser that wants to be used by power users.

Stop with the appeals to authority and make an actual argument if you disagree.
Look, I'm a big fan of the original Dune series (not of the mess Frank Herbert's son did after his death in order to make money out of his father vision - those books actually ruined a bit of the originals for me, I actually suggest that you don't read those).

I tried to love the son's prequels but couldn't and therefore I second your comments. There were many mysteries within mysteries in Frank H's series that weren't present in the followons.
I make comics, put 'em on the web for free, and occasionally print books. I was gonna say I have pretty much the same problem as you do.

And hell, you and I are competing for the same resource: people's time and attention to give to our little package of artistic effort.

So far the solution in comics seems to be "oh i know i'll make another damn portal, or another damn hosting site", which I'm pretty meh on.
So you're saying I'm indentured to my society? This is sounding increasingly similar to slavery. Using force against someone else to get what you want isn't morally acceptable, and it certainly isn't altruistic; if you disagree with me on that, that's fine.
>The remains of the 1939 Worlds Fair are found in the Bronx.

Queens actually (Flushing Meadows) and what you see from the World's Fair today is almost certainly from the later 1964 fair.
If that's what you need then maybe ChatSecure is what you're looking for.
Messenger Platform Design Kit – Sketch File
Yeah. It boggles my mind how quickly and totally the amnesia has set in; where the same crowd who vilified IE and the web monoculture it created is perfectly fine with "Just use Chrome" as a solution. I've seen people seriously claim that every browser should use WebKit and all the other rendering engines should be thrown out, and that this would be "for the good of the web". What?!
> Also, isn't it kind of ironic that you built your company on OSS and then invited a well known destroyer of OSS onto your main stage?

I think I missed this; who are you referring to? I scrolled through the list and didn't recognize anyone that I would consider a "destroyer of OSS" so I'm not sure if I missed something, if you're just exaggerating or a little bit of both.
This isn't at all the same, but I think it's in general category of "transition easers": https://mastodon-bridge.herokuapp.com Basically, it shows you which of your Twitter friends have signed up for Mastodon and registered themselves.

It does nothing to share content between the two worlds, but that's probably for the best.
The pool of users is finite.
No, if I want to do my job correctly I'll encourage best practices and address careless deviations. I won't encourage bad behaviour by outsourcing simple workflow tooling to a third party that doesn't have any accountability if they drop the ball.

Whether you realize it or not, you're advocating for increasing surface area and risk. You're offering a service to people with bad opsec while simultaneously asking them to trust your opsec; none of which is a good solution to the actual problem.
Ideas are a dime a dozen. It's implementing them that matters.
Floppies are pretty much dead unless you use industrial computers that can't be upgraded.
So many people here are suggesting the XPS 13, but there is so much Dell BS to put up with.

There are many configurations and many redundant options, and silly coupons that work on some models and not others. The buying options are entirely unclear, I think intentionally so. Just like HP and some of the other major OEMs. Please don't read this wrong, I love options, but I dislike foolish inconsistency. When I build a desktop I can choose any CPU, any GPU, any Mobo... When I look at the 4 models (lines, tiers, whatever) of the XPS 13 they have redundant options, 4 different ways to get to the same configuration with no reason I can see for a $200 difference in price. When I spend my money I want to know what I am buying.

Beyond the normal BS is that part of buying System76 is not giving money to microsoft. I think microsoft is evil, not an exaggeration, legitimately evil. Not giving them money is a huge selling point for me. I think this is a discussion for another thread and will not defend this here and now, Just take that I (and at least a few others) won't willingly give money to microsoft. So where is the option for an XPS with Linux, any flavor (or even Freedos or no OS) pre-installed?

Because none of the XPS 13 systems say they support what I choose for my OS, what is my recourse if I do blow away the pre-installed OS and something doesn't work? They are free to change the hardware when they please and I have ordered two dells with identical model numbers and gotten 2 different things (even in their business class of machines). They are making it clear that I am not their intended customer and mine is not their intended use case.
Answers Mode Points System
The site is getting slow, so here you go : http://webcache.googleusercontent.com/search?q=cache:http://...
Can someone explain Google Preamble Instances vs Amazon Spot Instances?

The author says Sutherland was dissuaded by having to specify a spot price upfront on AWS but I don't see how that is any different than what Google is doing.
He's already given you a good alternative – fork and collaborate with other devs on a version that doesn't touch their server.

Seems sufficient.
If you're waking up with a backache, you need to be looking not just at the brands, but the firmness. I can actually sleep fantastically on concrete with a book for a pillow, but put me on a too soft mattress and I may sleep well but I will have to spend my first hour in the morning relearning how to stand up straight and stretch out my back.

My present mattress is a firm Tempur Pedic mattress. I probably could've gone with anything of similar firmness. I live in a one-bedroom apartment. I give up my bed for (most) company and sleep on the couch, I got a softer topper for it (can't remember the brand) that some people prefer to the firmness of my bed.
All jobs are basically pointless except for agricultural jobs, which is all we need to survive.
Aerospike CTO here. We did a lot of testing with this drive, and the interesting bit is that performance doesn't degrade under write pressure. With a NAND drive, when you push writes high ( usually needed in front-edge / microservice apps ), the read latencies take a real hit, and often get into millisecond-average at the device. Optane simply doesn't behave that way.

All of that means you have to code to it differently. It isn't DRAM, it's not Flash. We've done the work to integrate and test at Aerospike ( semi-plug sorry ), so the system works.

The XPoint tech gets really interesting later in the year, when three things happen: the higher density drives show up, Dell ships their high-NVMe chassis, and more clouds support it.

Regarding cloud - IBM's BlueMix has announced Optane, and the other providers have a wide variety of plans. I can't comment more.

Finally, Intel has been clear about putting this kind of tech on the memory bus, and that really opens the doors to some interesting choices, some data structure changes. That requires new coding, we're on it.

Here's an interesting ComputerWorld article about our experience with Optane:
http://www.computerworld.com/article/3188338/data-storage/wh...
I fully get that this feature just isn't surfaced very well ... But I don't understand why this isn't facebook's biggest priority, to make their extremely robust permissions system easier to use. As lame as it was in general, G+'s "Circle" feature was really well thought out. I should be able to put all my family in one group, my drinking buddies in another, and my coworkers in another ... and then I can freely share whatever I want with whomever I want.

I've also had plenty of people not trust the permissions. Like, posting pictures from a party, people will freak out when I tag them ... and even when I tell them that I've locked down the album permissions, they don't trust that some error down the line won't expose everything.
what do you mean? like one i recommend for a simple test? or a sample config?
https://www.reddit.com/r/sysadmin/comments/5jg8y6/fyi_crimin...

Reddit discusses hackers using weak Skype credentials to access other MS accounts and bypass 2FA
That's why I added "...and mailing lists". If each email server had a default "local-msgs@example.com" list that everyone was subscribed to, it'd look a lot like Mastodon.
You can use the software any way you want. The GPL doesn't stop you.
I've got at least three different Microsoft accounts with the same email address. Supposedly there's a way to link them, so that this becomes less of a clusterfuck, but I've never been able to make that work. So it's just this big mishmash of resources associated more or less at random between these different accounts.

It's russian roulette every time I try to login to something that's authenticated with Microsoft accounts, and trying to remember which login I need to use to access which resources is more than I can keep track of, across outlook, MSDN, forums, Azure, Active Directory, etc, etc.
While a lot of your points are valid, I'll say I haven't found anything better in the "dynamic" space. It's still better than MATLAB...

Also, do you use pandas, and why not?
Just tested, My office 365 account bounces for this type of address.
I cofounded a meetup a little over a year ago and so far we've seen a lot of success. When we started it we actually made a list of things similar to this article that we wanted to avoid. Here are a couple of ours:

1. We only allow 3 sponsors a year at a predefined cost. This covers our cost with a little buffer for unexpected expenses.

2. We promote our sponsors on our slides, website and a mention in each meetup. They also get one 5 minute promo during their sponsorship period. We also WILL NOT give them our email list.

3. We have it consistently on the same day of the month, time of day and location to avoid people wondering where we're going to be.

4. We have multiple backup presentations ready in case our speaker doesn't show. We NEVER cancel a meetup.

5. We always provide food and drinks and have designated people to handle it.

6. We solicit ideas for topics constantly and schedule them a couple of months in advance. We do not allow sales presentations and we vet all of our speakers beforehand.

7. We recently started a short lightning talk at the very begninning (5 minutes or less) to encourage members to break out of their shell and present a useful tip.

8. We offer 2 full day training events during the year. We generally do this during the work week as we found local companies are more than happy to give the devs the time off for free training. All of the content is created by devs for devs in order to make it as practical as possible.

These are a few things that we do. The biggest thing to remember is running a good meetup is not a couple of hours a month job. It's a big commitment.
> So many people spend a lot of time trying to maintain a lot of light friendships that they get sidetracked from really meaningful ones.

Completely agree. It's an easy trap to fall into because you need time to put these relationships in perspective.

Tangentially related:

10 Types of Odd Friendships You're Probably Part of (http://waitbutwhy.com/2014/12/10-types-odd-friendships-youre...)
From your previous comment, above, that I didn't respond to:

> that substantiates your earlier claim that "no one is ever forcibly removed by police and if they needed to be, it wouldn't require training".

Fortunately anyone can easily see what I wrote. Your style disgusts me.
* and Office 365 Business Accounts vs Microsoft Accounts and make all of it linkable.
Honestly when I was reading this post, I was thinking "Why don't they just use Nylas? Nylas has already done this" – it just seems like a perfect case of not-invented-here.

I really don't see the point of Thunderbird reinventing the wheel to essentially build another Nylas.
That doesn't seem to be what they're aiming for here. The goal is supposed to be a new UI that looks and functions very similar to today's.

That's too bad, in a way. One thing I'd really like that Thunderbird doesn't offer today is to separate the mail receive/store/send functionality from the reading/writing UI, so I could run the former on my own server and access it from any device on my network.

Obviously there are some relevant standards here and you could set something like this up with enough technical knowledge using other tools that already exist. However, that reduces the potential market by a few orders of magnitude to those who are sufficiently expert with those tools, and then probably by a few orders more for those who have the time to actually do it.
I would think the obvious thing is to stop shipping the product, isn't it?
Fair answer! I don't use either myself so your perspective on it sheds a lot of light. Thank you.
There's a light at the end of the tunnel. Once IE 11 is mostly gone, everyone will be on an 'evergreen' browser that auto updates. Once we're there, new features won't take 10 years to be usable.
I don't understand the questions you're asking here, but, no, OCSP wasn't disabled simply due to usability reasons, but rather because it did not work.
That is definitely a quote that only applies to racing. I agree that better fitness absolutely does make the easy stuff easier. But if you want to make going fast feel easy, you can't escape training for it.
By ways of some bad choices I wound up with 3 Microsoft accounts. I never knew which services were on each.

In addition to those 3 accounts, I had 2 Office accounts (one for work, one personal). Notwithstanding that the O365 sign in really can't handle two accounts on the same browser (by ways of automatic redirects) - I didn't know if services were on O365 or Live. MSDN and VSTS do not support O365 login, so I had to tell my Live account to claim my MSDN keys. It's nuts.

I eventually just forget about accounts. I stopped using O365 for personal email. Don't use O365 for anything personal, you will pay hell for it (for more reasons than merely sign in).
Hah, had my blinders on. I was trying to figure out how there was an argument for active investing in the stock market in the short term, not comparing against bonds and whatnot.
I would also like to know how you remember books better. Perhaps you can write up a blog spot since there seems to be enough people interested?
+1 on the movie. I thought it was going to be bad but it turned out to be really good.
The body can keep sweating for quite some time after exercise if it's still having to get rid of some excess heat, often I'll get home from a ride, shower and still feel like I'm (slightly) sweating after.
I'd like to know, too. Not intending to sound irreverent, but does any of that math matter? (I'm not rude, I'm ignorant:)
It works just fine if you require an OCSP response and hardfail. Soft-failing is for usability and it's the cause of the problem.

Yes, must-staple is the optimal solution, but OCSP required is the best available today.

Look at some of the numbers here: https://www.grc.com/revocation/crlsets.htm
Cameroon's President restores Internet access after 3 months of shutdown
Showering in the morning and wearing cotton are a lot of work? I cannot tell if you're being serious...i feel like i do these things by accident at least 1/2 the time [i probably bike 2x week at most] and could easily do it all the time if i put even the slightest amount of thought into my mornings.
I know how to change the oil in my car on my own, but I don't because it is more efficient to pay an expert to do it. I think the desktop situation is much the same. I agree with you that I do not see that as a large market, but perhaps System76 sees something we don't or knows the cost of this support better than us.

I agree with you on wanting decent ultrabooks. I have had too much trouble with Dell to risk more of my money on another.
> I've seen people seriously claim that every browser should use WebKit and all the other rendering engines should be thrown out, and that this would be "for the good of the web". What?!

This has been a meme for years now. I remember John Resig suggesting this in 2013—ironically, right before the Blink fork that ended mainline WebKit dominance.
s/mindreading/truthseeing/
You've basically got to commit to using different browsers for different accounts.
1. Yes, tagging is supported in-client only. Tags are not propagated outside of the client.

2. Search filtering options are all there, however the actual search algorithm is mediocre as fuck. You'll probably eventually find the email you are looking for.

3. Yes, virtual folders are supported.

Overall it's a great, however clunky piece of software. I didn't realize the code base was ~20 years old, so I fully support them doing a new implementation. Thunderbird has been a great client for me for 5+ years but imagining it powered with fresh, up-to-date tech excites me even more.
Skype accounts are fucked. Try signing in on Skype for Linux with two different accounts. If you're lucky, you'll experience the contact shuffle where some contacts are moved from one account to another and others randomly deleted from both accounts. I mostly stopped using Skype after that one.