skysight-inc/HackerNews huggingface dataset:
There's no "better TLS" out there for shipping a tool that connects to millions of different servers. There are many better options than JWT.

Unlike JWT, hundreds of the world's best security engineers at various browser companies are working on mitigating the situation as well as possible.
To be fair, you inherited Eno's world. This is a recent article but it reflects his thoughts from the 1970s and if you look at music and the charts back then you'd see a lot of very structured 'top-down' approaches and that's how I imagine music was taught back then. Even 'freewheeling' folk, rock, and psychedelic music followed pretty simple patterns.

The problem is when guys like Eno talk, we dismiss it as a little obvious and perhaps a little old fashioned, only because we're so much past that and largely due to guys like him. A bit like reading about what computer geeks were excited about in the 80s and chuckling a little how simplistic or ordinary it seems now. Back then, it was cutting edge thinking.
The static types system is great, however, having used elm: elm unloads much of the work react does onto you. React automatically (with keys) manages state creation for lists and child components, but with elm you have to manage that manually.

Using a component isn't simply matter of importing and using, you have to integrate its state into your component, send all it's events back to its reducer, and then map each child state to the corresponding view. You end up with lots of boilerplate.
The point of decentralization in case of BitTorrent is offloading files hosting to users. That is how Debian and Blizzard use it. It is better to advertise BitTorrent as such but then use it to avoid control.

Same point was raised about Tor changing its mission (https://twitter.com/torproject/status/635856569201246208), because it makes it vulnerable to states where "human rights", democracy etc. is associated with US propaganda.

It is better to advertise IPFS, GNUNet and FreeNet as a cache layer instead of censorship resistance. CDNs are used usually used due to domain fronting application. Censorship has hard time trying to convince CDNs to block particular sites and services (Signal) and it can't block just like 30% of the internet because of one "violation". But any CDN that advertises itself as VPN or some sort of censorship resistance service is easy to block.
The Crack-Up (1936)
Several times a month.
James Comey and the 2016 Election
Uber Hires an AI Superstar in the Quest to Rehab Its Future
I was born into wine making family (with history going back few centuries). The land I am farming on was purchased by myself, using money from my software development days, and it is separate entity with very different approach to rest of my family. They like to play it safe, I am trying to farm organically, I am focusing more on premium side, they are more into bulk wine and so forth.

It is tough business, the investment required is huge and you should expect that your money will be returned in decades (if ever). I didn't have huge pile of money, so the winery is build in very tiny steps and it will take a lot of time to actually make it work, but I feel like this is something I should do and writing software on side will keep me safe financially.
He was recommended by Mitch McConnell - its customary to appoint the Republican recommendation.
"symmetric cryptography" is not mentioned in your article. And I specifically asked for example implementations, which is something Auth0 gives me for just about every platform. If your goal is to have programmers act on this information, the alternative(s) should to be as easy as the implementation you are moaning about. Especially when the claim is that JWT is overly complicated. Show us the simpler alternative, spelled out as well as the Auth0 team spell it out, and maybe us non-crypto experts will bite.
Just in the autonomous vehicle space there's Levandowski's Otto, Ottomatika (acquired by Delphi), and Otto Motors, which is working on autonomous vehicles for warehouses. It's confusing.

https://www.ottomotors.com/
http://www.ottomatika.com/
In IPFS the user's computer connects to whatever node has the content, popular or not. This means that even if the the 100 most popular nodes in the world have enough pressure put on them that they refuse to host a file, I can still host the file on my laptop and everyone with an internet connection will be able to access it.
From https://news.ycombinator.com/item?id=14292223

> * Flaws in crypto protocols aren't exclusive to, but tend to occur mostly in, the joinery of the protocol. So crypto protocol designers are moving away from algorithm and "cipher suite" negotiation towards other mechanisms. Trevor Perrin's Noise framework is a great example: rather than negotiating, it defines a family of protocols and applications can adopt one or the other without committing themselves to supporting different ones dynamically. Not only does JWT do a form of negotiation, but it actually allows implementations to negotiate NO cryptography. That's a disqualifying own-goal.

My proposal replaces the joinery with "select a version". You don't get to mix-and-match primitives. You won't fall into the trap of Reasoning By Lego.

> Centralizing implementations of cryptographic code into a few, well-vetted implementations is better than just throwing our hands up and telling the community to fend for themselves.

I'm not throwing my hands up and saying "fend for yourselves". I've outlined what needs to be changed to make it secure, and said I'll write a formal spec when I have the time, as keeping a roof over my family's head takes precedence over doing a lot of thankless unpaid work.
Uber is likely keeping a low profile with its autonomous initiatives until the Waymo lawsuit blows overs.

I'm sure we can expect big things from them as soon as that lawsuit ends.
Dont take away the internet and fuck you all for trying. The internet is a place for all people on just so place you greedy asshole can control and take away.
> I think it's perfectly possible that, within my lifetime, significant or indefinite life extension could become possible.

We know so little about the human body that I find this claim very difficult to substantiate. We're only up to the task of extending 25% of mice lifespans, with no end in sight to resolving the adverse side effects of aging in humans so life extension doesn't become a horrid, protracted end of life grinding agony.

If our entire economic system was switched from the banking system having the first crack at newly-issued capital to the healthcare industry with special emphasis upon gerontology-oriented sectors (with the near-infinite demand for healthcare, the inflation could be impressive), then I would grant a possible doubling (which counts as significant when stacking up against "indefinite") breakthrough in the next 2-3 decades. But I would really like to see the pro-SENS argument we're really that close to such a magnitude breakthrough of extension with intact, restored vitality to 20's range.
In what sense are you using inappropriate?

Also, should Elon Musk participate in puff pieces that promote Tesla? Or is that inappropriate?
Too many products with conflicting names.
I thought this was about the email client at first.

http://www.instinct.org/elm/
You really think a civilization advanced enough to cure aging can't stop a pathogen? Evolution sure isn't going to save us. Evolution happens on a timescale of tens of thousands to hundreds of thousands of years. The plague will come and go long before evolution can do anything interesting.
What he's saying is, IPFS will never be useful if it gets blocked before it has a chance to spread.

If IPFS is blocked and the people that need anti-censorship tools can't use it then they might as well not have bothered.
I agree that Made in China used to be a great indicator of poor quality, but that being said, it's gotten a lot harder to make that case. Chinese manufacturing is moving forward by leaps and bounds. There's still a language barrier that will come up with anything with an interface that wasn't made in the States, but in terms of actual functions, I own a lot of Shenzhen stuff that works totally fine.

And yes I understand for those on the poverty line it doesn't really apply, just saying the buying power of everyone in general has gone up with the introduction of low cost labor. Even that is temporary though, already workers in these areas are demanding better conditions and wages.
It's interesting how much could have changed if ~175k or fewer people in the Great Lakes region had voted differently..
"The A10 processor inside my iPhone is no less powerful than the Intel processor inside my MacBook"

[citation needed]
This fear is overblown.

You can do everything you mentioned already.

Just put up a barrier on a road to stop the truck, and then shoot the driver.

Police aren't going to be able to protect drivers in the middle of nowhere.

Now ask yourself, why does this not happen right now?
If we can control our population growth that isn't inevitable. If we can't we'll get that with or without aging.
I still don't really understand what you're suggesting, but the hint I'm getting is that you're suggesting something interesting, but whatever it is, it's really not Mastodon.

Local instances are like Twitter - you toot, everyone on the instance can see what you say. You can follow someone, and their tots turn up in your specific timeline. The flow of control is that you control what you see.

You seem to be suggesting that people should somehow control who can see what they say. In a sense you can semi-do that. You can set all your toots to private, and then confirm "by hand" anyone who wants to follow you. In this way only those you have specifically confirmed can see what you say.

Fair enough, that may be what you want. But in what sense would that ever be "social media"? You may as well have a mailing list.

So with Mastodon you can follow people, and then only ever look at your timeline. That means you'll only ever see things by people you have specifically asked to see. And you can set all your toots to "Private", so only people you have specifically permitted to follow you will see what you say.

So, what was it you wanted?
Because node and all of the CLIs dependencies are bundled within.
Classical composer and performer here. You just hit upon the one aspect of my chosen genre that drives me batshit insane.

I've had countless arguments with other performers about how rigid one has to be when performing any given classical composition. I'm told over and over again that, for example, Glenn Gould's unorthodox interpretations "aren't musical", but when I press my interlocutors for a justification of that statement, all they can offer is "it's not what the composer intended", which only begs the question. Composers aren't infallible, and they definitely don't always see or hear all the possibilities inherent in their own music.

The whole division-of-labor between composer and performer is, I think, both a strength and a weakness in classical music. It's a strength because it's allowed composers to concentrate on exploring the possibilities of musical ideas and working out something marvelously and intricately crafted in advance. It's a weakness because it encourages this hard-set absolute-textual-fidelity mentality among performers, and discourages them from really leaving their individual mark on a performance (unlike in jazz). The great classical composers are among my heroes, but they weren't gods, and performers shouldn't treat them as such.
You may need to refresh the page after you disable it for this particular site; this was the case for me.
Harman Invoke – powered by Cortana
>local bakeries, produce markets, butcher shops, etc.

That's probably where I would go to shop. Waiting for my local farm stand to open for the summer. And there's a nice local butcher down the road. But these are not cheap alternatives to my local grocery store (which actually has fairly decent produce, meat, bread from in-house bakery, etc.) I enjoy going to farmers' markets but they're not cheap places to buy food for the most part.
It is both easier, AND has a lot of money in it, if you can do it.
It's not a known issue, but GLIBCPP_FORCE_NEW has had no effect on libstdc++ code for more than a decade, so I wonder which prehistoric version you're using. Even the modern GLIBCXX_FORCE_NEW doesn't do anything for the default std::allocator implementation, which always uses new/delete unconditionally (since 2005).
Startup School 10: Live Office Hours
Apple just pulled a self fulfilling prophecy.

By ignoring the pro market demand for faster turnaround and bleeding edge performance they pushed everyone jumping ship faster; now that the market for the mac pro shrunk to a point the line is unprofitable the circle is complete.

meanwhile the trillion dollar render/graphics/cad industry is gonna need something to keep up with the always increasing demand, and will simply look elsewhere.
Somewhat common in (or near) poorer communities, due to bad maintenance. Of course, that is only one thing that can make a loud bang that sounds somewhat similar to a gun going off.
Islam has never kept it's holy texts locked away where only the elite can read or interpret them, a huge part of the religion is an oral reading so everyone can hear it. And there never was a pope-like figure, the Reformation made Christianity more like Islam where either the monarch is the head of the church or the two branches are separate.

This is usually the rhetoric of the "Islam is an inherently evil religion" crowd, who tend to forget just how terrible the Protestants were.
Everyone hopes they do well but that project its going to crash and burn big time or stay as another patreon, because what makes YouTube great is the huge device compatibility it already has with several platforms, i can't be the only one watching YouTube on my TV rather than my smartphone, tablet or PC.
It's not exactly news that the Otto team went straight to work on cars after the acquisition.

Nor is it news that Levandowski and Kalanick hatched this scheme while Levandowski was still with Google. (read the second from top comment): https://news.ycombinator.com/item?id=12315205
The largest life expectancy increase is in New York county, which has a population of 1.6 million, comparable to whole smallish countries - no, this is not explained by high variance in small counties.
> I think they will be sorely disappointed. Apart from vim/emacs hackers and sysops that can get by with just a shell and keyboard

Hell what? Not even that works. Apart from the curios* I've seen no live use of anyone using an iPad instead of a MacBook. From custom window management to the simple fact that a hinge between the screen and the keyboard is just the perfect HID with a TUI.

* yes it does work and some people seem to like it (to each his own) but every attempt I've seen just ends up turning an iPad into a frankenlaptop just to end up claiming "hey I work on an iPad, iPads are fine!", which they are, but I'd rather jack a car up with a jack rather than with a beam and a log.
JOSE/JWT is a standard for a wire protocol encoding and format.

NaCl/libsodium are single libraries with FFI wrappers in various languages.

Comparing the two is like trying to decide on the quality of the DirectX vs. OpenGL APIs, by the quality of their implementations. If you've only got one library (DirectX, libsodium), and you're throwing a lot of users at it, it's probably going to be pretty solid whether or not its API is designed well. If you've got a lot of implementations (OpenGL, JOSE/JWT), you'll probably get some crap implementations, just by the fact that there will be "core implementations" that get used+tested in production, and then "edge implementations" that were just written to scratch one guy's itch and have no battle-hardening.

You can argue, separately, that anything with crypto elements like JOSE/JWT has should be absorbed into some high-level crypto abstraction framework like NaCl/libsodium, so that it can also benefit from there just being one high-level implementation of it.

But JOSE/JWT is a lot more than crypto; for one thing, it's also JSON. Do you want there to be a JSON parser in libsodium, the way there's an ASN.1 parser in OpenSSL? This is the path that lead OpenSSL to its current "everyone uses it for everything but it's so bloated that you can flip over any random rock and find a bug" state.
What? It's very easy to get use-after-invalidation in Rust. Destructors called during unwinding see stuff in an invalid state. You can probably make a language that prevents use-after-invalidation in safe code (e.g. mark all accessible mutable references as "dirty" during unwinding, and require unsafe code to "clean" them) but Rust isn't trying to do that AFAIK.
> Update 06th Jan 2000: elm 2.4 is not Y2K compliant.

I'd be really surprised if it were.
Good point. Wahhabism is Islam's stricter branch, of course. It's in the opposite direction from Luther.
What fraud are you referring to? The type where ads are reported as clicked, but advertisers don't see the user come to their site, or the type where influencers don't tag when they've been paid to promote a product?
> Look at GCC's attitude to plugins or good error messages.

Which is?

A patch isn't necessary for it to be fixed, but a bug report generally is. A blog post linking to unofficial copies of documentation from 2004 doesn't count.
The internet is for all people not so place for you greedy ass holes to control and fuck you all for trying
> contrary to forbidding circumcision

That's the part when you introduce your values and your judgement and try to make it sound as if everybody agrees.
There's also a reason why we've got a president who blatantly lies and yet half the country can't be bothered to do a simple fact check.

So no, don't get off your high horse. Encourage everyone you know to spend more time educating themselves for entertainment and less time wasting away watching pointless drivel - whether it's on YouTube or broadcast tv.
So your argument against "better privacy tech" is that existing privacy tech have problems?

Your VPN complaint is bunk when each person can have their own VPN in any region for ~$5/month. And no, blacklisting IPs is not cost effective for any ISP--either there are too few people that it's not worth the effort or you blacklist a huge swath of IPs and their owners just cycle the address of their VPN (leaving the ISP with a huge blacklist of non-VPNs).
Yup, and this is the fundamental challenge Youtube has yet to overcome. Why is it worth $40,000 for a company to run a commercial on a TV show with half a million viewers but only $1,000 to spend on rolling their add before a Youtube video with half a million views?

There is the temporal bit, a TV show ad hits all viewers at the same time and on a particular date so you can put time specific information in it. And there is a diffusion bit, you can spend $40,000 for your ad across all videos that are rolling with > 1M subscribers so your ad money hits a bunch of different people rather than one person.

If Google could convince advertisers to pay more for advertising, they could compensate their content creators more. But they can't so they don't.
Ironically that might be China, at least it would be with Bitcoin.
Not about mathematics, but Heidegger subscribed to the dumb notion that philosophy could only be done in Greek and German: https://philosophy.stackexchange.com/questions/37972/what-is...
YouTube creators are highly undervalued.

How far away are we from direct micropayments to creators, as envisioned by Scott McCloud?

http://www.scottmccloud.com/3-home/essays/2003-09-micros/mic...

Right now, YouTube has to deal with advertisers on behalf of its creators, which means the perverse incentives of advertisers leak through and affect YouTube's relationship with its creators. YouTube could seek to outsource the advertiser relationship to the "Networks" that aggregate YouTube creators. There could be a model where you have independent creators that thrive off of micropayments, while larger channels could be aggregated by networks which deal with the advertisers.

Right now, Patreon is great, but the friction is still a bit too high.
Women are by "default" considered more trustworthy and less dangerous than men.

The perfect qualities for an assistant role.

Unless you somehow think that's sexist, that's your real answer.
That might well be accurate. Class and income are not the same thing. A college professor is upper class even if they don't make millions, because of connections and authority. Likewise, "a single-digit millionaire doesn't have effective access to the legal system."
You're missing the distinction between algorithms, which rarely have flaws, and protocol constructions, which often do.

Algorithm negotiation within an otherwise static protocol incurs complexity, which has a security cost. Just as importantly, it doesn't address the real origin of cryptographic protocol flaws. Note how, in order to correct cryptographic flaws in TLS, we had to push people first from SSL3 to TLS 1.0, and then later to TLS 1.1.
TSLA isn't "just" a car company any more though are they? Didn't they complete the acquisition of Solar City in Q4'16?
Gitlab Down?
Keycloak (http://www.keycloak.org/) is quite easy to deploy.

For our usage, even that was overkill and we are using Ipsilon (https://ipsilon-project.org/), with IPA backend. It is more quirky, docs are scarce, but it works for us.

On app side, it is mod_auth_mellon.
MongoDB -- NYC, Palo Alto, OR Remote | Lead Technical Writer | Full-Time | Base + Pre-IPO Stock Options

We're growing our industry leading documentation team (https://docs.mongodb.com/). Our Writers are Engineers. They're hands-on with source code, write their own code examples or sample applications, test documents, and develop and maintain their own build system. Candidates should have experience with one or more of the following: RDBMS or NoSQL databases, distributed systems, networking, or programming.

Any interest? Please reach out to me at Matt.Leva@MongoDB.com, or apply directly at http://grnh.se/e2yopw1.
I agree with this statement. Whereas previously composers had to conceptualize layering in their minds prior to hiring the orchestra to play it, composers these days can select from an unlimited supply of synthesizer presets for instant timbre and mood.

On one hand I think it contributes the diversity and range of modern music, but at the other end it definitely enables some lazy music making.
Is there any evidence that this is the principle problem for ISPs? I looked into it several years ago, and everything seemed to suggest that the barrier to entry was arcane local regulation or absurdly inflated charges for access to use public rights of way.
3 companies that want to help you commute in a flying car
I think they mean invest rather than spend?
I found a few studies by googling 'dairy estrogen'.

To be honest I don't think it's that big of a deal in either case (soy or dairy), for occasional consumption, I eat both on occasion. But if we are talking about replacing meals with a dairy shake, or GOMAD (gallon of milk per day, a 'traditional' recipe for fast weight gain), I might be a little bit concerned.
Ask HN: How to find audience for FOSS project?
I have a not-for-profit project, that I enjoy and use extensively.
However, it doesn't seem to attract a natural flow of new users.
I tried to post about it on Twitter, Google Plus, Reddit, Hacker News.
Each post brings tens to hundreds of visits to a landing page, few stars, occasional PRs.
I'm sure there are people, who will like the project as much as I do, but how do I find them?
Uber Plays Psychological Tricks on its Drivers: What should you learn from that?
> In short, content on IPFS is harder to attack and easier to distribute because it’s peer-to-peer and decentralized.

> port 4001 is what swarm port IPFS uses to communicate with other nodes

uhm.