skysight-inc/HackerNews huggingface dataset:
Yep, they've got my desktop, work machine and mobile phone browsing history. My ISP has just got my desktop, and my mobile phone when I'm at home.
TrueType Font, actually.
Development and Market of Inhaled Nitric Oxide in Global Market 2017-2022
Quiz: How Green Is Air Travel?
How MTA shut down my app for Penn Station commuters
Finding Andy Cunningham
it's also great for people who never heard of symbols and might have a mistaken idea about what they might be.
An even tinier approach would be to compute the Nix closure size of packages. That way, you'd pay for your libc implementation too.
The current Prime minister of Pakistan (who is under investigation in Supreme Court of Pakistan), provided an official document (I am not sure if it is a document from some bank in UAE or from UAE government) from 2006 which happens to be written in Calibri font which was not commercially released until 2007. This fact is being used a possible evidence for a forged document presented to the highest court of country.

Edit: spell check
> What kind of browser would downgrade the request to HTTP?

Sorry, that should be the browser's local environment, not just the browser itself. An obvious example is sslstrip:

https://moxie.org/software/sslstrip/

> Which require a cert signed by a CA already in the client's machine.

Of course. That happens.

> If you don't have HTTPS, how can you be sure that the SRI hash wasn't tampered with?

Loading static resources from other domains is very common. Especially ad networks.
1) You could try doing TDD. Each passing test will give you instant gratification. You could even try doing Acceptance Test-Driven Development. Basically you start by writing end-to-end test and implementing minimal code to make it pass. After that you will go one level deeper etc. I would suggest reading "Growing Object-Oriented Software Guided by Tests", this will give you a good overview of the method.

2) Also, if you can choose language to work with, you can try languages that allow you to work in the REPL. That way you can have instant feedback loop and feel satisfied even when you get some small functions working.

3) Pomodoro technique.
>The requirements for becoming part of HDCP cabal explicitly state that you must degrade the quality of non-HDCP streams[1].

Your source only seems to support that if you have a HDCP stream and a non-DHCP output you need to degrade the quality. Is there actually a requirement that if I try to view my 4K family video that I captured with my own camera on a non-HDCP 4K projector that the content needs to be degraded? That would be a whole other can of worms of anti-competition. Where not even the argument that you can vote with your wallet would work (flimsy as it originally is anyway).
Clients need the CA cert in their trust store, not servers. Client get it by the act of enrolling into AD or FreeIPA domain.

On the docker side (or rather on the reverse proxy that provides access to them) you are solving different problem and it does not matter whether the key/cert is provided by your internal CA or third-party one.
Inside Airbus' modular plane concept, Transpose
Vizio sues LeEco over failed merger
I'm all about the net neutrality.

But while we're at it how about some hardware neutrality.

And some data portability and control over who sees my information.

And maybe an API neutrality.

And how about letting the municipalities offer free wifi.
> those license fees can be recovered at any time. Forever.

Forever is too long. It should only be for the life of the patent. That might be a nice incentive to open up the conversation to reducing the life of some patents.
> socially committed

I've found the opposite to be true unfortunately. I can work on a project for hours and hours but the moment I say something about it to a friend, coworker, spouse the motivation to complete it just dies. Very odd effect and sucks when you're trying to release a product MVP
Stop consuming sugar and caffeine. Fruits are a great suppliment until your body adjusts. You cannot have an abundance of attention without the fuel to power it. - It was one of the hardest things for me to do.
Is there any evidence that the author's life experiences aren't valid until someone documents them in a laboratory setting?
Unless we're talking about a fabrication, a stereotype is just another word for empirical observation.

It will not be true for absolutely all instances (almost nothing is except the laws of physics), but it's just supposed to tell what the most common observed case.

Without stereotypes (a.k.a. generalizations) there's no science and no discussion possible.

You can fault a stereotype for not being representative (if you have different observations or stats or explanation etc.), in which case it's a bad stereotype, but not for being a stereotype.
"Independence"? It definitely looks more like "isolation".
You are deeply confused.

What makes managed/VM based languages big is that those runtimes are general purpose, and therefore have to embark what most people need. A C/C++ app embarks (mostly) only what's necessary.

I can compile a hello world for bare metal, replace puts with a routine that sends the characters to the serial output, add the necessary UART initializations, and the final program will still be a bunch of order of magnitudes smaller that a Python install. The comparison is unfair of course, but it proves one thing: no multimegabyte runtime in C.
Erlang (and by extension Elixir) definitely provides a set of tools which are good for building highly concurrent distributed systems. And your systems are likely to have few errors as well as being resilient, if you know what you are doing.

But indeed, you need to know your tools like every other part of computer science. Storing 9 billion elements in an array, doing linear search and then complaining your linear search is too slow and needs to run faster will be disastrous to your architecture. Likewise, assuming communication is free is equally disastrous.

The problem with building a distribution layer in another language is the effort involved. Most of the companies which pull that off and get stability in addition are usually large, multinational, and has ample amounts of engineering resources to throw at the effort required.
This food forest on a barge in New York floats the idea of fresh food for cities
Any hope for windows users? Hopefully OPAM works under windows OOTB.
Why not make barrier of entry easy for other/new ISPs by forcing them to share infrastructure for a fee, and then allow them to tier/price as much as they want?
USDCHF Weakens, Eyes Further Bearishness
> Distributed systems are more reliable when you can get a service from one node OR another.

I'm confused.. why did it take the author years to come up with this? Why is this a revelation?
Just to be clear, this has nothing to do with the Internet, and everything to do with the USA. Most Internet users can't be affected by stupid actions of the FCC.

I guess I'm just a little annoyed that Americans think their Internet experience somehow represents 'the' Internet experience.
Yeah, sort of. In terms of saying "this works for me so it works for everyone" anyway

https://en.wikipedia.org/wiki/Anecdotal_evidence
You do realize that there are 730 million active Chinese Internet users who basically don't use any US services? They spent more time on Internet/mobile than US users[1], they paid trillion of _real $_ last year using Chinese online payment systems[2]. If you like, we can also compare how many hours they spent on WeChat social media, or watching TV series/videos online.

[1] http://www.vertoanalytics.com/why-china-beats-the-u-s-in-mob...
[2] http://technode.com/2017/04/07/alipay-leads-chinas-third-par...
TVTropes probably has it, but I couldn't find it. Snopes has it as urban legend here http://www.snopes.com/college/admin/recorder.asp
After 20+ years of "next year is the year of Linux on the desktop" (which is about Linux seriously challenging or even overtaking MS on desktop users, not just the "Linux works fine for me on my desktop" which was always the case for some outliers) and following Gnome and KDE closely, and efforts by Ubuntu etc and reactions, his observations sounds quite to the point.
It's less of a warm up and more of a habit. You've done it once, you'll be more likely to continue to do it throughout the day.
Interestingly all this kind of stuff seems to happen in the 1984th year since Jesus died.
I'm saying when you learn something new, you are learning new things, including the "language" that "thing" is expressed in in order for others to understand you.

What you seem to be saying is Japanese is too hard to learn, so let's just discard Kanji and use the english alphabet instead. You can do that, but at some point you are not teaching Japanese any more.
It's hard to imagine an application without getters and setters. Now if you want to read/write those beans in a generic way, you need to use reflection. And correct approach is to use java.beans classes instead of rolling your own low-level solution.
Let's not talk about Javascript date/time.
Hmm. Sounds like a choice of definition but to my mind some IP that lapses in to public ownership (and so is not protected) doesn't cease to be IP, some IPR cease to exist but I'd still consider that work/invention/mark/design/database to be intellectual property just it's now owned by the public.

It probably doesn't matter at all.
At least blivet is normal distutils package that can be installed by pip by providing URL to repository and/or source archive.
Yahoo confirms massive attack hit 500M users, blames state-sponsored hack
You must be kidding, Harry Potter is nothing like Charlie and the Chocolate Factory, unless you consider magical candy to be the most important part of the story. :)
> Fedora has concentrated on being a solid, traditional Linux desktop.

If you consider pulseaudio, systemd and not being able to play mp3 traditional. Also, they used to fuck with encryption in some way, not sure if they still do it.

In the end, do you trust more Poettering or Debian or Ubuntu developers?
I have often thought the government should provide an alternative option for critical service just like they do with the mail and now health insurance (ignoring current politics).

That is I think the net neutrality issue could be mitigated or non issue if there were say a US ISP that operates anywhere where there is a telephones poles and public towers analogous to the United States Postal service (USPS).

Just like the roads (postal service) the government pseudo owns the telephone poles and airways (FTC) so they should be able to force their way in.

I realize this is not as free market as people would like but I would like to see the USPS experiment attempted some more particularly in highly leverage-able industries.
Comed?
Populist, authoritarian leaders are still on the rise across Europe
Zscaler performs TLS interception in order to analyse the traffic and “protect the users”.
[https://support.zscaler.com/hc/en-us/articles/205059995-How-...]

The issue is that Zscaler may have flaws, and that even if the validation is performed flawlessly then the introduced risk is not zero…

Usually one would have to trust the root CAs, but with TLS interception we have to trust the trust of the MiTM software in the root CAs. This increases the attack surface instead of decreasing it.

For a security appliance it’s a pretty bad job; sure, there may be reasons why you want to look into traffic, but then the aim is to control the communication. And control doesn’t come for free.
FWIW, I use Gitlab Pages for the same, and they allow you to provide your own cert (be it LetsEncrypt or otherwise). This has become a good bit easier to administer since LE added support for DNS verification, bit you're right, it would be cool to see these providers adding in built LE automated certs.
I think it's natural for a site about American politics to be America-centric. Adding "American" everywhere would make the site read better to people outside the country, but it would weaken its message to the people it's trying to reach -- we love to believe that the entire internet revolves around America, as you can see in the other replies to your comment.
Yes you can. The United States isn't a thought leader anymore in this kind of thing. If anything many politicians in countries other than the USA get more popular by proposing to do the opposite of what the USA is doing. Think Paris Climate Accord if you need an example.
Nice work! The German version unfortunately isn't able to display Euro signs properly "â‚¬0.250" is what I see with Chrome.
> The report charges the PM with perjury, hiding his wealth, forging documents, and living beyond his means.

You can be charged for living beyond your means?
Modi+Government+Eying+to+Double+the+Gratuity+And+Make+a+Few+Changes+In+IT
TBH, this shouldn't be sarcasm. Having first hand exposure to finance infra & software architecture.. traditional organisations are crippled by tech debt and decisions made 20-30 years ago!

I'm betting most traditional organisations are envious of being able to start their architecture from scratch.
Apparently using one's mental faculties and empirical observations to make a generalization has gone out of fashion.

On the other hand, linking to some crappy research in a hastily peer "reviewed" journal, with 20 participants and no controls, that satisfies your biases and which you haven't even read except for the abstract is considered epitome of discussion.
The threat to Seoul is mobile artillery near the border. It doesn't even have to be cruise missiles on anything like that; Seoul is close enough to the border that indiscriminate shelling at the city is probable

Mobile artillery is a very difficult problem to remove all with one strike, because it is mobile for the precise reason that its difficult to know where they all are. That's why many nuclear missiles have been deployed on trucks, so that they can be stationed in remote areas and moved at a moments notice, similarly to submarines
It is possible to be far from a free market economy and still not be completely communist
Interesting that you would say that. After a few painful and confusing months I finally decided to reduce contact with a female ex-flatmate of mine to a minimum. The conclusion I arrived at, is that she's pretty much exactly the type of person you described here. I simply can't handle that. It's confusing and I never know where I stand with her and that just adds too much unnecessary pressure in an area of my life where I just want to feel well (interpersonal relations / friendships). So, for my own well-being, I can't have her in my life anymore.

Just wanted to share that, since your comment summarized my impression of her so perfectly!
Teaching Open Source
User tries to print a confidential document. Prints it on their neighbour's printer, or a printer somewhere on the internet, instead.

User tries to grant their soundsystem access to their google music. Gets cut off and asked to reconnect as they're walking out the door. Ends up granting the cafe's soundsystem access instead, and maybe that gets combined with another exploit to give someone else at the cafe access to their documents.

User is in the habit of using the same username/password everywhere, enters it into http://192.168.1.1 on some hostile network.

User knows to use a password manager, but password manager is happy to put their router password into some other router's login; attacker uses this to subvert their router

Thief replaces the home webcam with one that supplies a dummy image, takes their time to clear the place out.
A single page solution for a site wide issue.
US lawmakers want to ban shackling pregnant inmates which is still legal
Very recently I bought an iPhone and a subscription that includes 4G service. With this subscription I have 6 GB of traffic per month anywhere in EU, BUT any traffic to Spotify is unmetered, and I don't know quite how to feel about this. On one side it's great having unlimited access to all the music in Spotify at any time and any place within the whole of EU, but on the other side I worry that I am helping damage net neutrality.

Now Spotify, like Netflix and YouTube and a lot of other big streaming services, almost certainly has edge servers placed topologically near to the cell towers. I think this is probably ok. In order to provide streaming services to a lot of people you are going to need lots of servers and bandwidth no matter what, and when you do you might as well work with the ISPs to reduce the cost of bandwidth as much as possible by placing out servers at the edges. So IMO Spotify is in a different market entirely from anyone who hasn't got millions or billions of dollars to spend, and if you have that money it should be no more difficult for you to place edge servers at the ISPs than it was for them.

But the unmetered bandwith deal might be harmful to net neutrality, maybe?
I too second the recommendation for "Deep Work" by Carl Newport (http://calnewport.com/books/deep-work/ ). This is one book which is a must-read for all the current generation technology workers like us. I started reading this book about two weeks back and I have finished reading 90% of the book. Already I am seeing tremendous improvement in my day-to-day life.
> - Using a trusted by default CA, that makes your internal-only devices depend on an external service (the CA)?

This one. Realistically all those devices are depending on external services already.
Slightly off topic sorry, but how Algorithm Differentiation usually implemented? Do you just apply the chain rule to an AST, or is there something more complex you have to do?
The exact answer to your question is explained in this book and Carl calls it as "Deep Work".
We’ve already developed “Google Brain”–but what about Facebook Heart?
Brexit: EU negotiator Barnier firm on citizens' rights
> I guess I'm just a little annoyed that Americans think their Internet experience somehow represents 'the' Internet experience.

Isn't that their stance on pretty much everything?
If it's not a US problem, they don't care. If it is, then it more often than not gets portrayed as a major problem for the entire world.
Why Americans can't stop its own isolation and start learning how to use Alipay/WeChat?
That's pretty cool and interesting, thanks for the tip! :)
A First Attempt at HyperLedger Fabric and Kubernetes
The key benefit of Erlang isn't the scalability in my experience. It is resilience. Once your system is deployed, it tend to run with 0 fatalities for months on end. We have systems where we've had 0 maintenance days on them for months and even years.

In turn, you can focus your development effort on new systems, new features, and scaling existing infrastructure since you are not bogged down in maintenance mode. Even better, you can often postpone errors in a system which are non-fatal. I often wait until I have a couple of bugs in a system and then I'll work on that system for a few days fixing them all. In systems where even the smallest amount of brittleness destroys them, this isn't really an option.

Another experience of mine is that Erlang systems tend to take a bit longer to write compared to cranking out a fast solution in another language. But the payoff is that your Erlang solution tend to have better robustness as load increases and people start using the system.

The community is small however, so you'll need to write more code yourself in-house as a result. For some problem spaces, this will hurt a lot because there are off-the-shelf solutions in other languages. On the other hand, larger projects which are more specialized can benefit from you knowing your own code better.
Meditation. Coursera have a course called "Demystifying Mindfulness". Check it out.
Ask HN: How do you know if you are good enough for X?
My current dilemma is whether to apply to Stanford GSB or whether the impostor syndrome I'm currently suffering from is real or just holding me back
Not that I don't appreciate the efforts that they put in to helping developers--and I'm sure this is for the single-page PWA crowd--but CSS and JS is far more complicated than looking at a single page (especially for big organisations).
Simple. (Purely my personal opinion)

1) Divide the complex problem into small yet challenging chunks of problems.

2) Totally forget about the large/complex problem.

3) Focus/Solve one problem at a time, the way you already do.

4) In the end, ask someone else to weave the individual solutions to solve the original problem. (or DIY if you prefer to!)
The best way to protect yourself against this kind of attack is DNSSEC. Plain and simple.
Hi Balgair, your comment made my day, i was feeling the same as you at that age.
I'm hoping their fight actually leads to a defeat rather than a submission. I have faith that Cloudflare will see this through but I also had faith that Carolla would too.

https://www.eff.org/deeplinks/2014/08/good-bad-and-ugly-adam...
Why not just proxy the REST requests through your own backend HTTPS server-app ?
Or more generally, those who have a say in resource allocation, have the power.

Therefore, this is a blatant power grab by the ISPs - suddenly they get to decide how to allocate a resource, however artificial that resource may be.
What convinced the Supreme Court to take the Wisconsin gerrymandering case?
It's Time to Make Code More Tinker-Friendly
I don't know the details of Pakistani law, but it seems like it could be a clever judicial technique for fighting corruption or tax evasion in cases where it cannot be directly proven. If you spend more money than you lawfully earn, then presumably the rest have to come from illegal activities (assuming no fortune)?
Parse JSON in Python
>It's not, by itself, necessarily unethical.

can you explain this line? I was shocked to read it after your first paragraph and I can't imagine why you wrote it.
“Quant Quake”: What Was Behind Last Week's Historic CTA Crash
> we Chinese

Yes the "peoples" Republic of China.
Symbolic Differentiation in HLSL Shaders
> It's no longer a "note" when it loses the debt provisions.

You may be right, but what makes you think that?

The common law and some statutory definitions require only that promissory note be, upon breach, reducible to what are called "liquid damages" i.e. "a sum certain in money". This does not mean monetary debt or future payment of money with or without interest. It just means reducible to a certain amount.

The purpose of having a promise with "a sum certain in money" is on the enforcement end. The monetary compensation upon breach (damages) of a promissory note can be unambiguously calculated by a registrar (as opposed to assessment open to interpretation by a judge). This expedites processes such as obtaining summary or default judgment.

However, the promise needn't be in money itself, as long as there is an unambiguous objective calculation of the amount of damages.

I'm not sure how it would be calculable in the case of a note without debt or interest; I'd need to read the note language. If there was nothing specific, one could argue it is portion of the pre-money to the the valuation cap, but that'd be a very loose guess.
What happened with shipping everything in a single file and letting cache magic happen?
Humans want equality – as long as the rich stay rich and the poor stay poor
Using symbols I think is more expressive than using strings.

I like the separation of strings for external data and symbols for internal data.

So symbols will usually be used for enums or things which logic or control flow depend on. Symbols then have the benefit of feeling like syntax and the scheme zen of code is data is code...
I don't think this writer omitted it intentionally. I think it's because journalists that are too at-odds with corporate (or other dominant narrative) just have a harder time in their career. No-one gets censored, except in rare cases - they just don't have their contract extended. See https://cartoonistsrights.org/u-s-cartoonist-fired-after-cri... , but I imagine it's usually handled more subtly.