skysight-inc/HackerNews huggingface dataset:
This is an interesting situation where "public good" happened to align well with business goals of some deep pockets.

Particularly, Google and Akamai...two of the biggest LE sponsors. They both retain good visibility to user behavior (like specific urls visited) because of things like GA,MITM proxying, etc. But, ubiquitous availability of that is taken away from ISP operators.

Which is a good thing. Makes me curious if there's anything else like this that could be achieved. Are there other net public good projects that align well with deep pocket potential sponsors?
Payment request API with React
Sony Will Start Making Vinyl Records Again in Japan, After Nearly 30-Year Hiatus
Nah, only me scratching my pedantic itch :). I'm not in any way affiliated with anything mentioned in this article.
I watched premier computer bookshops die -- SoftPro's disappearance in the south Denver area was so sad for me. This was a somewhat long process; there was a period where we were wringing our hands about the physical computer book stores disappearing.

But there was O'Reilly, other smaller but equally good online vendors, and also rans.

I think now we're seeing the start of the same decline and disappearance of online outlets.

That smile on Amazon boxes is starting to look like a smirk.
Free Webinar: Turn your service desk into a hub of innovation
That was soo wrong. I understand why wants to be a YouTube star, you can monetise it. But a shortcut like this, a very dangerous one too, is just... I don't even have the word.

Sadly, laws almost everywhere will put the blame on the one who pulled the trigger even though it was clearly a prank gone wrong -- no ill intentions or anything.

I hope their children won't be left without their mother too, if the court decided to imprison her. :(
>wouldn't be the end of cyberattacks.

This is a strawman. No one knowledgeable is saying it would create 100% security, just that it would be a net increase in the security of our infrastructure.
I'm curious if the drop-off is that bad, since the passengers still have their phones.
For invasive data like electrophysiology, not for fMRI. In fact few months ago there was a similar study about reading human faces from human brains via fMRI: https://twitter.com/ccnlab/status/866548346751725568
Cities do have a "union", it's called the city government. Fans (aka people) bargain by electing people that agree with them. So far fans (aka people) are electing people who think the cost/benefit of paying for stadiums is a net positive. If so many cities wind up taking a loss on the matter then I suppose things will change.
When you need a law degree to understand law, the law has grown beyond the bounds of common reason. Maybe we're looking at this from the wrong end of the telescope?

The Justice System will say "ignorance is no excuse", but if you can't understand the law, how can you be bound by it? Maybe having someone in the position that is not a professional lawyer is a good thing.
Why is it relevant what meme came out from Tumblr? If we are doing meme based valuations, then 4chan is a trillion dollar company.
I saw a demo of an app using Microsoft's Computer Vision api that would figure out your demographics from facial recognition and show you ads targeted to your demographic.
Darwin award special mention?
Regardless... even though what the author discovered is common knowledge to those who've done some work with GA tracking (or perhaps simply researched interesting ways to add elements to the DOM). I applaud the curiosity that lead to this blog post.
It might be a nice language but not an especially nice Lisp. Lots of stuff from Lisp is missing: interpreter and compiler integrated, self hosting compiler written in Lisp, condition system with interactive error handling, nice object-system like CLOS, simpler numeric tower, good error messages, Lisp-like stack traces, image-based development with fast startup times, Tail Call Optimization, continuations, ... plus it has some strange design decisions with basic list data structures.

It's 'Lisp'-like where the basic primitive list processing has been replaced with a different higher-level data structure (persistent sequences) built on top of an alien infrastructure which leaks through everywhere and which was not developed for interactive programming (the JVM)... That was one of its original design decisions: being hosted on top of the JVM.
Author here.

> They are wrapping unverified C++ code (Eigen) for the primitive kernels anyway, such as gemm, so AFAIK it could be extended to launch kernels on GPUs without any modification to the part in Lean that they proved correct.

That is correct. Our Lean development assumes that we have primitive kernels that we trust, and it is otherwise agnostic about how they are implemented. It would be straightforward to have kernels run on GPUs.

> Since most ML users are happy to trust TensorFlow, one could also wrap (unverified) TensorFlow and then use their approach to prove properties about real TensorFlow programs, e.g. that various model-transformations are sound.

This is a great idea. There are a bunch of useful properties TensorFlow users could prove about their programs. For example, a user could prove that their TensorFlow program will never produce a NaN, or that a mutation operation is "safe" and won't corrupt the gradients (see https://groups.google.com/a/tensorflow.org/forum/#!topic/dis... for an example of unsafe usage). Moreover, since verifying specific properties of specific programs is much more routine than verifying algorithms, most of the proofs could be push-button.

To TensorFlow users reading this: what are some common errors you make that are annoying to track down, that we may be able to catch (or prove the absence of) using formal methods? If there is enough demand perhaps we will work on this next.
I actually developed and deployed an instance of a new GOPHER server recently. I was surprised to see requests in its access logs.
The Scribe's Oath – Robert “Uncle Bob” Martin
It's an apples-to-oranges comparison though. These researchers generated 2000 faces. It sounds like from there they essentially did nearest neighbor search to find the predicted face. It's still impressive (and accomplished what they wanted), but it doesn't solve the problem of recreating the images from just the brainwaves.
Did the city council get re-elected when they went against citizens?
Not sure why this is on HN... but this is a pretty tragic story. Tragic for the 3-year old child and soon to be born son of this teenager.

I know these were two 19-year old parents, but why any parent would risk their lives in such a way for YouTube likes is beyond my understanding.
A better question: why was a licensing issue able to take down such an important piece of infrastructure?
Monalisa Perez, 19, was booked into a Minnesota jail
I can't think of anything less useful/productive/meaningful.
Websites Grabbing User-Form Data Before It's Submitted
Think there was an article on here earlier either about ESPN directly or about cable in general. Someone had a real good point... ESPN used to be actual sports news, analysis, and coverage. Now it's like TMZ for sports. It's terrible programming talking about serious issues like Tom Brady's haircut.
How does one protect themselves, or loved ones? I feel this may come across as a silly question, but if escalation continues, I believe I won't be the only one asking this question.
My dad attested to this as well.

He said it is absurd how cheap you can buy employee loyalty with free snacks and soda.

Even at a 100 person company, they were spending ~$600 / week on snacks but when you factored in that developers cost $30+ / hr alone, you are buying time for such a low price.

You are literally giving a developer $2 for $15+ of their time. That is even discounting the price of keeping them in the same brain space and some possible cross-team germination.
Seconded. This is buzzfeed stuff, or reddit at best. Don't see how it fits here.
Its governments that need scaring. Industry will never self-regulate.
Macron's tech visa is designed to make France better for startups than the US
I'm a big fan of looking at open data sets published by towns and cities, and then coming up with creative ways to make that information easily accessible online.

I've seen towns and cities that aren't big enough to have the budget to make a great website that makes all of the city's data easy discoverable. But many of them publish open data sets, and you can use the data to create an interesting project that is also useful to the city's residents.

Many large cities publish lots of open data, too. In general, there are already lots of apps built with the data sets from large cities, so I prefer to focus on the smaller ones because doing so offers a chance to create something that hasn't been done before. You might find that the data published by larger cities is more interesting, though.

Here are a few links to get started:

https://opendata.cityofnewyork.us/
https://data.boston.gov/
https://data.ny.gov/
http://data.ottawa.ca/
https://data.albanyny.gov/
http://www.a2gov.org/services/data/Pages/default.aspx
Basic income and the new universalism
Shouldn't the service not be ESPN but ABC (which includes ESPN)? I would think that Amazon is a better position because of their diversity of content. ABC can match it, but ESPN alone cannot.
make it work, make it secure, make it cheap.

Pick two.
Hm, that’s an interesting point. Maybe instead of focusing on problems I should practice identifying areas of opportunity.

I guess I feel as though moving beyond my comfort zone may help with both of those things...
Yes, I actually know of a couple on a sailboat living off the rent of their house in London.

I would like to retire in Europe. Thanks for your answer, it's nice to have a realistic ballpark figure.
Interesting how the HN comments are also dividing between "it's obvious that monorepos are better" and "it's obvious that multirepos are better".
Somebody could have done that right now as well, but nobody did make them so far (or used them in any significant way that people know of).

Instead of (ab)using somebody else's mistakes to your own advantage (and possibly have it backfire) you could also tell that person about their mistakes so the whole world could benefit and there would be 1 issue less in the world to worry about.
In effect that is sort of what they are doing, but simpler.

You claim to have domain x.com. LetsEncrypt sends you a token. Place it in a DNS record or in a pre-determined path on your domain and ask LetsEncrypt to read it back.

If it matches, it is verified that you own the domain.

How is the scheme you propose simpler, whilst retaining the same base guarantee (that the requester is the owner of the domain in question)?
UFC television rights. I believe Fox has them now.
The 5 rules of successful cooperation in IT projects
Their current TV deal with FOX expires early 2018.
Glad to hear you've enjoyed our stuff. We really do try to do a good job with it! :)
ACME doesn't require that the client requesting issuance has access to the private key of the certificate. Access to a CSR (which only includes the public key) would be sufficient. Most clients support a mode where they use existing CSRs rather than requiring a private key, e.g. certbot with --csr.
Music industry welcomes landmark ruling in Google delisting case
A few states of the US still have justices of the peace. A relative who is a lawyer says that the old joke was that "JP" stood for "judgment for the prosecution".
so you want to live in a world where both countries don't have any power? Sounds Utopian.

Defence is only card in this game worth playing especially when it comes to infrastructure attacks.
Choosing properties for property-based testing (2014)
because your private key never needs to be compromised, even if your server is breached, because it never needs to be on the server. That said, I agree that if the PK is only used for this single server, you have bigger problems than its loss if your server is breached.
I'm reading some comments here that are disappointed, but I'm impressed.

O'Reilly navigated itself through two major contractions in tech book publishing. Practically every other company would have packed it in or found some really horrendous way to screw customers.

The first contraction was the dot.com crash. During the boom, O'Reilly was so flush with cash that they did things like put Larry Wall (creator of Perl) on payroll, just because. And right before the crash they built two new office buildings and a warehouse. So they were screwed when business went away and somehow they wiggled their way out of that.

I joined the company right after the crash and stayed for 2.5 years. Every employee meeting included an update on our negotiations with the banks--literally the CFO was begging banks to be able to stay in business. She's now CEO of the company.

I get a constant reminder of how lean things were then when I check my 401k account from that time. There was one all hands meeting where O'Reilly announced they were going to match contributions. The execs were so happy--I think they thought it was a signal that the tide had turned after waves of layoffs. (Even though I'm pretty sure the money came from a one-time windfall from being investors in Blogger)

The thing though about that matching contribution is that it wasn't much. It definitely wasn't one to one. I can't remember the exact rules for how much they were going to match. But my current 401k statement breaks out my contributions vs. O'Reilly's. After twelve years of compounding interest, that employer contribution is now worth $128.24. (In other words, things were so bad that they were celebrating contributing about $40 to my retirement).

And then, there was the second contraction. Up until about 2005, every single programmer had a library of O'Reilly books on their desk. That time is gone. I haven't seen a programmer who worked that way at any company recently (I'm sure there are some).

Most companies would have just packed it in. Tim O'Reilly had a good run and cares about other things, like politics. Dale Dougherty could do anything and has by starting Make Magazine and Makerfaire.

But there are hundreds of people at O'Reilly and they kept plugging away and finding ways to be relevant. Those ways just aren't books anymore--at least not like they used to be.

The company found other ways than books to make a difference. The O'Reilly conferences are cutting edge because O'Reilly still picks cutting edge people as conference chairs. And OATV, in venture capital, is another great example, which continues to experiment with things like Indie.vc.

So, to take it full circle. I'm impressed that O'Reilly is still in business at all, and more so that they are relevant at all. And when I look at their print business, I think, well, they're doing the best they can with a format that has declining importance.

I think about the context above when I hear about things like removing some book features or letting print quality slip. Those seem like reasonable adjustments that are much better than the alternatives which I think were probably go out of business or sell to Pearson.
Because tax exempt municiple bonds are used to pay for stadia.
Why not? Automating it once will prevent you from scrambling in three years, which is exactly LetsEncrypt's point.
I think ESPN is being hit the hardest because their content costs the most. Look at this deal they signed. Can you imagine AMC or whatever other premium content channel having to spend 12 billion for a few shows a week?
NAT and pray still leaves you screwed under IPv4 these days - attackers know how to bypass NAT-without-filtering.

(I don't think firewalls are a good solution in general, but I would agree that they might be the least-bad way to handle crappy embedded/IOT-type devices).
Although a number of airlines have been moving toward streaming entertainment to user devices rather than having seat-back screens in economy. But those movies are supplied locally. I wouldn't expect in-flight WiFi to work with streaming video from external sources.

In any case, broader laptop/tablet bans seem to be off the table for now.
LE probably does that multiple times from a few places around the internet, to reduce the likelihood of something unexpected going on.
I always balked at the hoops I had to jump through until Let’s Encrypt came along. I now have two boxes, one Gentoo, one CentOS updating every three months pretty much pain-free. I know it's not a valid counter-argument but I'd say that 100M certs issued and the general tone of user feedback says you're wrong about it being overly complicated.
work towards no zero days.
Basic Security Guide | https://techsolidarity.org/resources/basic_security.htm

Basic security precautions for non-profits and journalists in the United States, mid-2017.

https://news.ycombinator.com/item?id=13622684

--

Security First | https://advocacyassembly.org/en/partners/securityfirst/

making it easier for human rights defenders to work safely

https://news.ycombinator.com/item?id=14544031

--

UCLA CS88S: Safety in the Cloud – Introduction to Cybersecurity | https://kfrankc.me/cs88s/

an preliminary introduction to the field of cybersecurity

https://news.ycombinator.com/item?id=14056893

--

bonus (Windows): https://decentsecurity.com/
Genuine question: Are the other smaller cert-issuing services going out of business? If not, what has been their response to LetsEncrypt?

Not that all of them should survive, there are a lot of crappy services that deserved this. But I'm just trying to place myself in their CEOs position and wondering how the game plan should be.
> Yes, you have to update it every three months

I don't have to update it at all. A cronjob does that for me now.
We (Manning) are in the process of diversifying our options :)
maybe if they had package dependencies sorted out. they didnt last time i checked.
In context, it reads more like ""It’s tough to [sell premium features/content] when your most active user base is too young to have a steady income."

While they don't provide any evidence to support this, I can kind of see that argument. Biggest example I can think of is YouTube Red.
They're offered all over the world, so the quality probably varies quite a bit (especially since it's a fairly decentralized organization). However, for the price tag, I'd say it's a steal—the networking value alone is worth more than that.

DevOpsDays has been around since the very beginning of the movement—in fact, the term was popularized at DevOpsDays Belgium in 2009.
Critical and Significant Dates (2013)
> It's 'Lisp'-like built on top of an alien infrastructure which leaks through everywhere...

Given it's Lisp (CL in particular) that's "built with alien technology"™, I'd say Clojure is built on top of terran architecture, with the usual human stuff leaking everewyhere... ;).
For a short-haul flight I agree. Wifi provides little benefit, and being disconnected can actually be a blessing.

A long-haul flight is so much more pleasant with wifi. There's only so many movies I can watch (for me, 1 or 2) before I get bored out of my mind.

It can get lonely on a plane if you are traveling alone. The people around you aren't always willing or able to talk (they may be asleep, don't speak English, or are preoccupied with a movie), so you may end up sitting for extended periods with nobody to talk to.

Being able to chat to friends while in the air makes the experience more comfortable than any seat ever could.
I wonder if this will have a material effect on the value of Google. An ad firm / search engine forced to comply with these kinds of rulings is a new development in my opinion.

Reading the details of the case makes me insist "If you're a tech person (indie developer?), put yourself in the shoes of the person being ripped off, and tell me how you'd justify letting the scam continue" because it's pretty clear-cut to me. At least in this case and it remains to be seen if there will be other reasonable cases in the future.
Original iPhone Keynote Is Still Amazing to Watch
An angel investor would want a diverse portfolio. A VC wouldn't. VCs make all of their money from the one startup that becomes a billion dollar company and lose or break even or make a little on the rest. So they're really only looking for huge swings with enormous returns.

If you're a seed stage VC you're where a larger fund has allocated a portion of its capital to play insanely high risk/high reward investments.
Well, it might acquaint you with the rules of the law. Or it might not--a lawyer friend long ago talked about a judge in his city whose weak grasp of the rules of evidence allowed counsel to use hearsay evidence, etc.
> When we strike back, does Russia then strike back again? What does it look like after four or five volleys? Will entire power grids be down for days or weeks? Will the stock market crash?

And at what point, after "cyber-damaging" some piece of critical infrastructure (and/or harming/killing people), does the the other side run out of exploits and just launch actual missiles instead?
So the significance here is that if you had remote access to a single wind turbine, you can control the others? Implying, if there were a vulnerability in the control system of one turbine, the rest of them are exposed? Rather than showing that you can stop wind turbines from spinning, if you had physical access to the turbines.

Their "hack", which requires physical access, is about as practical as throwing a physical spanner in the mechanics.

EDIT:
I'd like to point out, there are reasons why you might want to be able to access the SCADA system of other wind turbines, from the network access of one wind turbine, which would be to allow wind-yaw optimising wind lidar systems to optimise the yaw of other, local, turbines.
In the process you describe, there is no step where you confirm that you are actually the domain owner. Anyone could obtain a certificate for google.com.

Verifying domain ownership is what the challenges are responsible for.
Covering roadways with glass solar panels is a terrible idea. Asphalt is durable and flexible. It's OK with getting bits of gravel, glass, or steel ground into it. Solar panels deal badly with such abuse.

Putting solar panels flat on the ground loses 30% of their potential power.

Even ignoring all of that, covering solar panels with cars is a terrible idea.
To know you're talking to the domain owner, I think you'd have to use the contact info from the whois info. I don't believe that's especially consistent across tlds.

The http or dns challenge/response is more reliable and pretty easy to automate and scale to many domains.
New Sound File in iOS 11 Hints at Wireless Charging for 2017 iPhone
Next generation of cybersecurity professionals being created by Girl Scouts
So you think this stockpile is mostly viruses/trojans that would target random users and hope it spreads to important systems, or hope there's important systems manned by naive people? These kind of exploits are everywhere, and I'd say the NSA is hardly the biggest threat in that arena.
Maybe, but as someone who use them regularly we've moved far beyond "hopefully check my emails sometime in the next five minutes". It's still not good enough for something like youtube, or even javascript application with a need for low latency, but it's definitely good and reliable enough to "use the internet".

I've used it on both Qatar Airways and Emirates, and would recommand it if you like to work during flight and your work needs the internet (eg emails, your task trackers to follow/answer your team, code reviews, ...), it's also been cheap enough that it fitted into my needs (paying it and getting myself up to date was worth more to me than not paying and then having to catch up after landing).