skysight-inc/HackerNews huggingface dataset:
> These customers include many of the largest financial services, critical infrastructure, retail and healthcare organizations in the world, as well as many government agencies. This cohort is an important constituency that we believe has been under-represented to date in the public commentary that has been posted to the Google and Mozilla boards since large organizations rarely authorize employees to engage in such public discussions, particularly in an area related to security.

... well that's their problem, right?

You can't simultaneously say "These are some of the most important organizations in the world and you'll cause worldwide chaos" and "Won't someone listen to these poor companies, I am the Symantorax, I speak for the cohort, for the cohort has no tongues."
This arises from a mixture of two things:

A strong agrarian tradition where no piece of human waste is going to be left festering in the sun - somebody is going to pick it up and make good use of it. In all seriousness this has been the case until chemical fertilisers became cheap enough, before then every town had organised dung-gatherer guilds who organised daily cleanup of faeces in the street and sold the product to the farmers in rural areas. Even urine-soaked earth dug up in alleys can be sold as a source of nitrates.

A second and more ingrained reason is that young children are regarded to only have the intelligence of animals because you cannot reason with them like how pre-Christianity Romans thought, thus they are to be treated with the same level of respect that animals deserve: if kids want to relieve themselves, then it might as well happen on the spot because self-control is beyond their facilities.

Shanghai is also unusual among major Chinese cities that many households in the old town are not serviced by sewage lines. Instead everybody bought their nightly waste to public septic tanks and pour it down a chute before a vacumm truck takes the load away every few weeks. Thus the residents are typically less fazed at the sight of faecal matter than their compatriots.
Symantec is just going through the 5 stages of CA grief. First they were oblivious to it, then they were angry about it and called Google irresponsible. They're now at the proposal stage. Next will be depression and finally acceptance for their incompetence.
The mustard sauce over pulled pork is definitely producing plenty of fighting words at the moment: http://www.newyorker.com/magazine/2017/04/24/americas-most-p...
There's an argument that it's good for end user security to force mobile apps to be updated, even if there weren't a specific reason to distrust Symantec's roots, because who knows when the next Heartbleed will come out.
In Go, strings are internally a header that contains a length and a pointer. The bytes of the string itself are heap allocated.
Certificate pinning means it's a hell of a lot more than just "buying a new cert".
There's a massive logical leap between having an API and having certificates on public FTP servers.

An API is required for you to have proper infrastructure as code and leaving any bit to human input other than another validation step in the automated process is waiting for errors to happen (invalid or incorrectly spelled cert info, missing cert chains, wrong cert chains, etc.).

Symantec even calls out how much work these companies will have to do because so few of them have a proper certificate management system in place that's come back to bite them.
It doesn't always work, because sting operations often involve paid informants who are not police, but assist by luring offenders to a location that's under surveillance.

In such a situation, you might ask a similar question, receive an honest answer, and still get busted, because you participated in a transaction that was recorded by observers.

Plain clothes officers operating undercover aren't always placed in direct contact with targets at the moment of a bust. Sometimes they just need to gather enough information needed to orchestrate a bust, and then they just disappear, as if completely unconnected.

It's not like this is 1971.
>recoded, recompiled and redistributed.

I suppose that's true for mobile apps with embedded certs. Bet there's an app store / play store approval logjam for Symantec customers that miss this news, and all come crashing in after the expiry.
The article talks about various people contributing to the regular cleaning. I think one solution to the developing job/motivation crisis is some sort of Civilian Conservation Corps providing a base wage to people in exchange for a few hours each week of easy, non-essential work contributing to the general decency of a locale. Pruning, sweeping an area, weeding a verge, removing litter from a roadside. The sort of work you see gardeners doing at dawn throughout Asia, especially in resorts.

There could be many older men for example keen to have a sense of purpose, doing a task they're capable of and staying active, rather than putting in 40+ hours/week at a desk.
Two years in jail for reporting news without a license
Why should they have? Native is a great, if not arguably, the best option.
Why do people like Kevin Kelly? Everything i've ever seen him say is consistently misinformed and poorly thought out. I tried to read one of his books recently, because I heard a number of people recommend it, and I couldn't even finish it (highly unusual for me).

Basically every point he makes in this post is just fundamentally wrong in one way or another. He clearly has no understanding whatsoever of what he's talking about, on the technical, biological, or psychological sides. He's just saying things that seem true to him, with zero context or understanding of any of the issues involved.

> Intelligence is not a single dimension, so “smarter than humans” is a meaningless concept.

Multi-dimensional vectors have magnitudes just like scalars do. When will people get over this whole "intelligence is not one thing, therefore you can't say anything at all about it" nonsense?

> Humans do not have general purpose minds, and neither will AIs.

False absolutism. Human minds are certainly more general purpose than an AI. When an AI has a mind that is more general purpose than ours, I think its fair to call it a general purpose AI.

> Emulation of human thinking in other media will be constrained by cost.

According to who? The only person that could answer that would be someone who already knew how to emulate the human brain. Although, come to think of it, some 50% of the human population are able to create new brains, at quite little cost. So it is empirically possible to synthesize new brains extremely cheaply.

> Dimensions of intelligence are not infinite.

Lol, according to who? What does this even mean?

> Intelligences are only one factor in progress

Sure. So what?

There are plenty of perfectly legitimate, well thought out, informed critiques of AI fear mongering. This, however, is not one of them. This is garbage.
Well, it wouldn't be entirely unprecedented.

See: "Indigenous Australian storytelling accurately records sea level rises 7,000 years ago"

https://www.theguardian.com/australia-news/2015/sep/16/indig...
I imagine prayer is quite common in the military, as one example.
I'm curious if people other than LE have tried deploying Boulder in production, now that it exists. It seems like probably close to what a public CA wants.

Ideally you'd have some way of tying it into some internal authorization database instead of relying on HTTP challenges, but HTTP challenges would work too.

https://github.com/letsencrypt/boulder
Right, what I mean is that your average legal practice, notary public, journalist doesn't actually have this problem like you said. Cloud services cover them just fine.

Somewhat unrelated, your comment gave me the idea to look up the MX records of the last few law firms I've interacted with: mostly cloud, as expected. The biggest and fanciest likely probably has their own servers. Their terminating MX is some middling cheapo hosting company. Disturbing.
I don't think it's quite fair to suggest people use their flexibility to commit crimes rather than avoid them. I'd rather assume that people don't have the foresight to analyze risks properly (especially in the face of the unknown.)

Because at the end of the day, you know you can probably get away with institutional crime quite easily, but not with petty theft. And most people know what the consequences of the latter are, but not so for the former.
The technique is known as Amalgamation and was first introduced in the SQLite2 source tree. In my company were we do embedded software[1], this shown to be a powerful technique. Not only, the compilation is extremely fast (A 1.3 megabytes of C code, took 9 seconds to compile on a core I3), but a modern compiler will be able to do additional optimizations on code when it is contained with in a single translation unit.

[1]: https://unqlite.org, http://ph7.symisc.net
Fast forward to 9:53
As I was reading your post, a nurse from a local hospital called and told me that my brother was in the ER after crashing his bicycle. He was biking to the National Institute of Health where he is in a traumatic brain injury study. He was hit by a car while riding his bike (without a helmet or health insurance)in 2013. Today he has insurance and was wearing a helmet:)
Why would a Dialysis machine even need an internet connection?
Was that the case before Ryzen? I know their new CPUs support ECC, but I'm not sure for earlier generations.
Are you referring​ to a channel? Or the client itself? I believe the channel startups on freenode has catered to the HN community (and was where I heard about it initially), however I'm not sure how many users it has online typically.
> Embedded devices that are pinned to certificates issued by a Symantec public root to communicate to resources over the Internet or Intranet. Replacing these certificates would result in immediate failures and the need to recode and reimage the firmware for these devices.

> Mobile applications that have pinned certificates. Replacing server certificates would require these applications to be recoded, recompiled and redistributed.

Are either of these relevant? Isn't google's proposal to eventually have Chrome stop trusting the Symantec CA system? That change seems like it would have no effect on 1) embedded devices that aren't running Chrome 2) things that already are in place that trust the CA.
It's definitely a lot of engineers. But we cram a lot of features into the app. I expect that most people will only experience 10% of them. Consider:
1) We exist in a tonne of countries. And different counties often require different product optimizations and payment methods
2) We have our own map provider
3) We experiment with everything
4) We support countries that have terrible networking. That creates lots of challenges.
Ello.co stealing their metaphorical lunch
Try India. According to the WHO, traffic fatalities is the #4 health problem there.
What ‘personal space’ looks like around the world
Does anyone else get a blocking "Symantec Connect" and "Loading your community experience" for a good 10 seconds before it loads? Could just be my mobile connection but man is that lame.
Well, it depends whether the time spent copying the bytes for the function invocation is less than the time spent garbage-collecting objects that are passed as pointers, and then following those pointers. So as you can imagine, it's highly variable depending on the lifecycle of those objects, how frequently the function is being called, and probably a bunch of other factors like how big your CPU cache is. And then there is the cost of pointer indirection, which can cause cache misses.

I don't think there's really a rule of thumb here. Writing benchmarks, and observing the results is about the best you can do.
This is roughly how I understand it (relating it to the OSI network model):

hub = OSI layer 1 (physical)

switch = OSI layer 2 (data link); but layer 3 switches exist

router = OSI layer 3 (network)

More details for each here: http://web4.uwindsor.ca/units/its/insight/insight.nsf/e273c4...
In your theoretical opinion, what would set your company apart from any other offering the same?
Avoid cloud & cloud-like/mostly-vps providers. While they will most likely not have entire IP blocks straight blacklisted there might be a rule that just brings you closer to the spam score threshold.

Oddly enough medium-large enterprise is more likely to include those rules - I've recently seen 20% bounce rate on a large mailing list spanning some 300 companies with most of the bounces being due to AWS IP blocks being blacklisted. That's why using Sparkpost for that kind of recipients is a bad idea (all their sending servers are on AWS).

Going back to hosting - pick a company that:
- lets you set PTR records for your IPs
- lets you get your own IP block and assign it however you want (even it is just a tiny one)
- offers primarily dedicated servers/collocation - even if their vps is going to be a bit more expensive
Consider the fact that every time you buy a house with a 10% downpayment mortgage, you're taking on 9x leverage. The fact that banks are willing to lend you ~$500k at a ~4% interest rate, on a piece of real estate that can produce >5% returns (including rent), is often what makes it such a fantastic investment.

The same principle can be applied as well to stock investments. Obviously a 9x leverage would be too risky for stocks, but a 1x leverage is reasonable and can easily lead to win-win outcomes for both lenders and investors.

If you're worried that unsophisticated investors can misuse this feature - there's nothing stopping such investors from putting all their money into a single penny stock either.
"The reality is that when you’re poor, if you make one mistake, you're done." - this was my experience.

I graduated with first-class honours from a top 10 UK university, paid for by my dad's job at CERN. No companies came offering jobs, except weapons manufacturers and oil companies. I refuse to support either of those industries.

I went off around the world on Working Holiday visas, doing a variety of jobs. Some of those were related to tech, some were not. My résumé grew dramatically, as each job only lasted for a few months.

I tried to start a Ph.D. programme at KAIST in Korea. I had to spend all my savings from 5 months in China to pay 6 months of rent up-front for on-campus accommodation.

Then the professor didn't pay my scholarship. I complained to the international office. They talked to the professor. The professor then talked to me, said I'd been gossiping bad things about him to people in the administration, and kicked me out of his lab.

No professor, no lab, no university, no student visa, no country. Everything fell apart.

A friend there told me to get a job with his brother in India, which I accepted. It was only paying 5000 rupees/month (78 USD/month), but accommodation was provided (food was not). I sent thousands of job applications to try to get out of there, and finally gave up and posted an emotional rant on Facebook. A previous colleague saw it, talked to my old boss in Taiwan, and somehow got me an invitation to work here. Even though my salary is much lower than it would be in a Western country, I'm terrified that if I leave, I won't be able to come back. Articles about homelessness and poverty often show up on Hacker News, and keep convincing me that I should just stay comfortable. I'll never be able to afford a house or learn to drive, and I probably can't afford to get married. But at least I have food and shelter, and that's the most I can hope for.
Absolutely, this is done on AWS with EIPs (elastic ip's). You can migrate an EIP between instances via the AWS API and the change takes effect nearly instantly.
Sounds like maybe you have some existing IP that could be utilized.

What level of capital commitment would you need to build a proof of concept?
Google is hardly a startup or a new entrant into the market. They had a huge operations revenue to cover the costs of deployment.

The fact that Google Fibre exists only reinforces the assessment that you must be this big to enter the ISP market in the USA.
Ah, yes. If you didn't have a backup cert from another provider and missed your 60 day window. But what was your plan for any other incident that required revocation? I assume anyone turning on pinning hand wrings over it for a while first.
"Silence on the Wire" is a strange and wonderful book: an intro to networking as well as an intro to passive surveillance techniques. Well worth your time.
That's totally besides the point.

The idea here is that no engineer would knowingly sign off on something bad.
you're not exactly wrong.

In my opinion this is a first amendment case. The supreme court created something called 'strict scrutiny' to analyze cases where other laws encroach on the first amendment. Under strict scrutiny, the government needs to prove a compelling state interest to restrict free speech.

Does the state of oregon have a compelling interest in preventing this person from informing a state agency, via private correspondence, of a safety-related calibration issue in their traffic light system?

If you think so, interested to hear your argument.
Can you explain the latter half of your statement please?
They know exactly what they've done.
Because the sales guy insisted it'd help sales.
I would but honestly, there are far more important things that need their effort. t61 requires a bit of work to actually get the music. youtube-dl supports it, but only one at a time.
Possibly of interest to HN due to all the recent discussions about fake news. So here's a way to squash it, as well as any other news governments don't like.

Also of possible interest to HN because "reporting news" inclues apps that are used to report news. Presumably the platform hosting the app as well as the app developer (?, not sure) are at risk.
The "signalfd is useless" article comes up every so often. The title might be an exaggeration, but there are problems to be aware of: https://ldpreload.com/blog/signalfd-is-useless

In fact it looks like geofft is in this thread below :)
I remember thinking how amazing the Mormon culture was as a child growing up for a handful of years in Utah, until our next door neighbor went to Federal Prison for Fraud. Then my Parents explained to me the Mormons had a habit of exploiting social services and manipulation that would put the Gypsies to shame.

"Never invite just one Mormon over, they'll drink your liquor cabinet dry. Invite two, so they watch each other like Hawks, and neither will ever touch a drop."

Cults are a trip man.
The languages actually aren't really the big investment. It's really two things:

1) Learning new concepts in computer science. For example Swift uses a lot of modern concepts around type safety, closures, parallelism, synchronization, etc. These are a big learning curve but they are not specific to Swift and you'll notice other modern languages are adopting the same concepts.

2) The UI frameworks are fundamentally different. If you're an option expert at XCode constraints, storyboards, etc, none of the applies to android and vice versa.

I can tell you this, if you do bite the bullet and learn both very well you'll be surprised how much it helps you learn other systems more quickly because you've see all the concepts before.
No, there's a huge difference. The difference here is that the Manufacturers and the Carriers are gatekeepers to the customer's phones.

The manufacturer made customizations to Android for their phone. Android isn't a cleanly-separated stack where the manufacturer modifies only a certain part of the stack for their phone but Google could go and update another part without risk of breaking anything (is any software project?)

Then, the manufacturers sell the phones to carriers, who usually request extra customizations to (at best) add their logo, or replace default apps with the carrier's own version. This means that any updates to Android likely require updates to this customization.

But even if that customization was free (from a development perspective), Carriers still have maintenance/service contracts with the manufacturers such that any manufacturer's updates must go through the carrier's "quality control" procedure. You wouldn't want an update to make the, say, LTE radio misbehave and break the carrier's network would you? Oh no... (and you certainly wouldn't want to "forget" to replace the good default app with the Carrier's crappy one)

So there you go, a quick glimpse into the complex economic/contractual obligations that delays or blocks Android updates. FWIW, Google has been working both technically and contractually to untangle this mess, and is one reason for the existence of their "own" line of Nexus and now Pixel phones.
It pen testing necessarily expensive? I wonder if we could train QA to use something like kali (or even just some network tools) to find 99% of vulnerabilities.
> ...one just cuts the cables

Isn't this a problem with any centralised electrical power source? In fact I've always thought that terrorists could cause far more disruption by taking out a couple of transmission line towers than blowing people up. And it would only take a decent sized spanner in many cases.

The only solution to this (and to the massive resistive losses over power lines) is localising power production. And that's where solar, wind, small-scale hydro and local battery storage look very effective.
Alarm system with remote fire alarm capability. Those things are everywhere and if they don't work people could easily die.
Bitcoin mining has congregated around cheap sources of energy, In China at least, many are using surplus energy from the grid in cutprice deals with provincial govts.

Undoubtedly there is huge amounts of energy being pumped into Bitcoin daily, but it's environmental effects seem over-hyped compared to many other human endeavours.
Hadn't heard of it either. Sounds like a very greedy guy that just has to blog about his trials and tribulations, and explain just how his greed is actually "drive" and "working hard". This VC kowtowing is sickening.
Didn't a grey hat similarly flash a ton of old routers following heartbleed? Search isn't providing results atm, but I do recall an uptick in retail routers failing post HB news wave, with little mentioned as to the "why". If memory serves, it didn't "brick" them, it broke DHCP(no longer assigned dynamic addressing; WAN or LAN).
If I created a virus to punish people for failing to wash their hands regularly, and instead of giving them diarrhea it started killing people, I should absolutely get the blame for creating it. Even if it doesn't kill anyone I should still be held accountable.

Yes, this a rotten situation, and I sympathize with the motivation. No, I don't think we should blithely disregard the fact that the worm is likely causing genuine harm and that it was in fact created to cause harm.
Can you substantiate the last paragraph somehow with a source on this statement?
It's never just the language. The libraries are where the time goes and a language without libraries is fairly useless these days.
channel or area where people chat in a chatroom type deal. I'll take a look at startup, thanks!
Avoiding anchoring effects in marketing your product
> I don't think it's quite fair to suggest people use their flexibility to commit crimes rather than avoid them.

I'm not suggesting it, I'm saying it.
If you think Let's Encrypt is an acceptable solution for all the affected organizations, you know very little about the state of browser certificates.
Agriculture allows higher population density - a nice alternative to starvation, war, infanticide. But agriculture is less pleasant than hunter-gathering, so you avoid it til you have serious population problems.