skysight-inc/HackerNews huggingface dataset:
> what about self signed certificates? wouldn't it be great if these swebsites treated like http ones

In the not too distant future, they will be, though perhaps not in the way you had in mind: HTTP sites will start showing similar indications of insecurity, just like sites with broken HTTPS.
Thank you. This is great work from both an engineering and scientific perspective.
> distributions like Debian

In fact, only Debian underwent that process. Ubuntu did not. Nor did Fedora.

The Arch process was very different.

* https://news.ycombinator.com/item?id=11834348
That's fine but still most of your traffic will go to a single endpoint. It'd be easy to analyse patterns in most surfing protection solutions...
What difference does it make? Erlang/OTP distribution doesn't have pluggable architecture. Sooner or later you will reach a point that you have to modify it. Then you are diverging from the original branch which makes it even more difficult to maintain it. You have to merge your additions into every release (minor or major) and test it thoroughly.

A better architecture for a distributed system has a strong composability property. It should be possible to modify every possible aspect of it on a running cluster without introducing downtime.

Write your own standard well documented distribution layer and become independent of underlying technologies.
I think that was a joke.
This is great, thank you! It even supports colors (and other escape codes i guess) and makes clickable links from URLs.

Gentoo ebuilds if anyone is interested: https://github.com/helb/gentoo-overlay/tree/master/app-shell...
How to plant a tree in the desert
That seems backwards. Keys, cups, and pens are pretty trivial shapes. (Assuming you can get good angles on the cup so that it doesn't have air pockets.) More complex shapes like the weird statues they're using seem like a more robust test.
Apache Spark 2.2.0 released
Usually fair price is based on some combination of 1) market price and 2) the investment's expected value, adjusted by some return hurdle rate. For example, if I'm looking for a 25% annual return, and next year I think Amazon is 70% likely to be $1000/share and 30% likely to be $3000/share (weighted avg = $1600/share), then a fair price might be $1280.
I won't comment on how you built your proxy but HTTPS has come a long way since, eg TLS wasn't common back then and SSL has since been deprecated.

These days the only viable way to MITM HTTPS is to either attack the connection while it's in plain text HTTP (ie before the browser redirects to HTTPS:// (which is where the HSTS header comes in to play - it's cached by browsers telling them to default to HTTPS and never attempt a plain text connection) or to form your own HTTPS connection with your own CA signed certificate for the target site. Which would mean you'd either need to compromise a signing authority or have your own CA certs already installed on the victims PC (the latter is what some bad ISPs reportedly do when they inject ads).

Edit: I believe some corporate network proxies also work on the principal of having their own CA certs on their business workstations - so maybe this was how your proxy worked as well?
They also had difference purposes driving their design, and we should not forget that.

JVM - Bytecodes only for Java

CIL - Bytecodes for VB.NET, C#, Managed C++ and the 1.0 SDK contained examples for Lisp, Pascal, Eiffel, Ada, ....

Of course, history then took another path for the JVM.

EDIT: Forgot that C++/CLI replaced Managed C++, which was the C++ variant on 1.0.
This fails utterly when you can't control your clients. My student society for example ran into this problem. Students bring their own laptops and installing our root certificate on all of them is infeasible (if they even would allow us to do so). As a consequence, we need to expose critical internal services on the public internet, some of which contain private user data.
More ideological "free-market fanboyism."

In a world where everyone has the money they want to (or must) spend, this is certainly true. But these voluntary interactions are unfortunately only granted to those who, before the thought enters their minds, possess the means to engage in them.

The general trend that has become apparent for people who are not consistently able to engage in such interactions is that it's really easy to make more money when you have some, and very hard to make money when you have little. Any form of investment, monetary or otherwise, requires some upfront value to be presented. Usually this is capital. If you don't have this you are left in the dust by those who have the luxury to put that money up now.

The end result is that those things which are valuable to those who can engage in voluntary interactions are supported while those that hold no value die from being crowded out. This is, from my perspective, the driving force for the libertarianism of modern SV: policies and actions which help people with money make more money will be adopted because they have the upfront capital, etc. to enact it. This will breed inequality as those policies in general are not helpful or even directly hurt those with less money.
Price. $1500 (50 USD) for power-line Ethernet, $300 (10 USD) for a wire. And the lower latent power consumption, and the fact the wire is less likely to be the cause of any problem.

I'm renting the house, and wherever I move next probably won't have this problem.
Or just buy something of quality like AVM Fritz!Box, which has quite good diagnose utilities on board
How exactly have they been innovating in the last 5 years?
They bought Instagram and WhatsApp and added SnapChat features to them
FA Labs | iOS Developer Intern | Chennai, India | REMOTE, INTERNS http://falabs.io

FA Labs is an early-stage startup, primarily working on Social Networking based applications. We're looking for iOS Developer Interns to work on a Messenger Application. The Applicant must possess good Implementation Skill, understanding of Object-oriented Design and experience developing advanced iOS Applications. Knowledge of XMPPFramework is a Plus. Interested applicants can send your Resume to info@friendsaddict.com
It will, just wait for WebAssembly to be more mature.
The question was about static HTML pages, so the government can track what you are reading or watching.
This probably comes back to what part of the context is left unsaid.
If someone's favorite mug is broken, you are trying to convey something like: "I'm sorry (to hear that)"
But an apology obviously has the meaning of : "I'm sorry (for what I did that made this happen)"

Being explicit about it could help, but I agree my default inclination is also to assume it's an apology.
https://news.ycombinator.com/item?id=13390245
ΚΑΤΑΣΚΕΥΗ ΙΣΤΟΣΕΛΙΔΩΝ ΚΑΛΛΙΘΕΑ – WEB DESIGN|SEO|PARAMARKETING.GR
This is not about Google engineers being interested in new tree algorithms, but about Google paying for research to deflect antitrust allegations. Which worked splendidly in the US, I might add, poof went the allegations.
"It's best if you actually look at your data, the earlier the better"

What is the difference between this and data snooping?
This 'article' starts out with the following generalization:

>> Most people a few months after taking up programming will reach a certain point where they feel they are the best at what they do.

I don't think this is the least bit true. I think the opposite is true. After a few months, there will be a small cohort who believe they are well on their way to mastery. I'm not sure that 'most' people feel this way after a few months of programming.

These 'lite' articles are starting to infect both Reddit and HN. I'm all for short pieces, but really, this is like buying a bag of chips at 7-11: it's all air and no chips.
As mentioned in the post, it wasn't about politics. Republican or democrat, it doesn't matter. It was about human psychology and how apologizing is a hinderance to getting ahead.
If yaml ever gets too cranky, just use JSON in your yaml document.

Since yaml is a superset of json, any valid json is valid yaml as well. This allows you to combine the two in very convenient ways:

---
test:
obj: {"solution": ["in", "the", "list", {"everything: "is possible"}]}
If you're in a corporate intranet environment, you ought to have an intranet CA, as well as the means to distribute the CA's certificates securely to all deployed machines within the intranet.
FTP011: Bitcoin and Blockchain and Basic Income, Oh My!
I don't think the fact researchers look for future funding from sources doesn't affect this. This statement is the same as funding/donating to politicians' campaigns regularly, and withdrawing if they pass specific legislations.(in terms of the impact it has on the receiver.). That may or may not be intentional or is Google's blame.
Fascinating. I'd wondered a while back how feasible it is to reconstruct an object from a 3-view orthographic projection, e.g. https://s-media-cache-ak0.pinimg.com/originals/b2/92/a9/b292.... Your work seems related.
I can use Signal to communicate to another user without being subject to surveillance. But I cannot use my browser to chat with another browser user with the same degree of immunity to surveillance.

Let's say some xyz website's server was just another Signal client. I can talk to it from my Signal client in a way that is not subject to State surveillance. But I can't do that using HTTPS as my security model.

As to how Signal does it... Read their blog.
I'm talking about CS research. I don't really consider law research and public policy research as real research -- that's lobbying and conflating the two is just for a headline.

Edited to add: the WSJ went on a fishing expedition -- while the story is on a few law grant tidbits that they could make into a headline, they actually were trying to get access to the private email of many CS professors. What probably happened is that they got some of that email (which I don't think they should have access to, but that's another story) and found there was nothing interesting to write about, so they found a few lobbying tidbits and painted it all with a broad brush.
> I need it so while I travel I don't have to worry about shitty governments tracking what I'm reading or watching.

For this reason I used a VPN while travelling overseas.
Most places have wifi of varying quality. To my dismay/horror, I found that Hilton charge EUR15/day for the privelege of using a VPN.
I like the 1st method simply because its a generative approach vs a discriminative approach of the 2nd and 3rd one. Put it another way. This is analogous to yielding prime numbers through a sieve generation method vs a filtering method that checks for primality.
I see, I misunderstood your first comment. I took it as you posting a paper about the technique I described, and when you said "This is pretty standard practice now." I thought you meant "this, what natch just said in his comment," as opposed to "this, what the paper said."

So they're still doing multiple hash functions as standard practice, you're saying? Wow.

Yes their methods are rather different I see.

Indeed using multiple salts is slower than two hashes.

What I do now instead of that (the salts method was easier to explain) is just one hash, currently SHA-1 but may move to BLAKE2 soon, and chop the result of that up into 20-bit pieces that I use as hash values, modulo the bit array size. How do you think this would compare to what they do?
Extremely impressed with the investment partners behind this fund. I worked with Shabih during my time at Google and saw his work KPCB; he's a deep thinker and also relentless advocate/supporter for the companies he backs. Anna Peterson is also a legend at Google. Think they'll end up being the strategic VC of choice behind every major AI company.
I think,

1) you are misunderstanding the grand parents points. Better to have primitives that scale you to X rather than having to get to X on your own.

2) The grand parent wrote the Elixir language.

3) Making sweeping statements like "A better architecture for a distributed system has a strong composability property" is very easy.
... and as a professional pilot, you'd probably have to consult a flight physician if you were taking meds like these.
Yeah, like I said in another comment, I'm focused on CS research -- this other stuff, while it might be called research for the sake of the story, isn't the same thing. And the story neatly omits any mention of how much money Google has put into law research vs. CS research (for example).
If you can’t control your clients - maybe use a captive portal style landing page with a link to install the local certificate or something along those lines, it’s also useful to have a wireless network (SSID/VLAN) for BYOD that just has internet access and as such doesn’t need the very and one that has access to internal services that does.
> A discovered back door would destroy Kaspersky, Huawei, Cisco, Check Point, etc.; nobody would renew their contracts with that massive loss of trust.

Given that a backdoor could look like an undiscovered exploit I fail to see how the one would result in the other, besides that where will you turn? To one of the other parties... Consider this the present situation and almost nobody has moved away from their vendors. Except maybe Juniper (not in your list) I don't see any of these brands as damaged (yet).
We haven't had a major new technology company in more than 10 years
I've recently launched https://pryin.io, an application performance monitoring tool made for Elixir and Phoenix.
It hooks into Phoenix and gives you insights into how long your request / channels take and what Ecto queries are run / how long those take. You can also manually augment pretty much anything else (background jobs, API calls, ...).
Plus it keeps track of some important BEAM metrics like memory consumption.
I have been using Fedora on the desktop for the last 7 years. There are lots of pros like large selection of mostly up-to-date packages, good community, security, sane defaults etc. The cons for me are the below par wiki (so I use the Arch wiki) and the version upgrades. The truth is the last few version upgrades were much easier that the previous ones.

Why would you use it over Ubuntu? Ubuntu has an important advantage over all other distros. When you try to install some not-so-common program that is not in the official repositories, usually the linux instructions assume that you are using Ubuntu. For an experienced user it's not really that important but for a novice it certainly is. Now, Ubuntu had some negative publicity with regards to the [amazon unity search](https://en.wikipedia.org/wiki/Unity_%28user_interface%29#Pri...) and Shuttleworth's response ["we have root"](https://security.stackexchange.com/questions/44512/what-does...). On the other hand Fedora, although sponsored by Red Hat, respects the community, so fortunately there were no incidents like that. Ubuntu also had Unity which users either loved or hated, while other distros focused on either Gnome or KDE.

On servers the options are more or less grouped. So, you should first chose between the group of Debian/Ubuntu, Fedora/Centos/RHEL, etc. Once you chose the group then you can chose the distro itself. The fact that I used Fedora on the desktop for so long made the choice of Fedora on the server much easier.

Finally, will Fedora increase your productivity? No, not really. Your setup will increase your productivity. Choices like using KDE or Gnome, or the setup of (keyboard) shortcuts to meet your needs matter. I hope this helps, have fun!
I wonder if a good middle ground (restricting this without breaking legacy sites) would be to add a permission for this. By default any target=_blank or similar opens in the same tab, but it shows a permission or the 'pop-up blocked' notification, which allows the user to open it in a new tab, and grant permission for the site to do that by default. As a user you can still ctrl/cmd-click to force links (which are proper href links) to open in a new tab.
Would just creating (public) DNS records for those private addresses be a solution for 1 and 2?
Uber Can Be Fixed and Middle Eastern Women Need It
If you let any student that brings their own laptop connect to it, then it's already pretty darn public.

And you don't actually have to expose it to the internet to get a certificate, you only have to give it a public name.
This is great, thanks! I wonder how it would do with a more state-of-the-art NN model rather than relying on word frequency as a model.
"This is incredible: Due to a quirk of cosmic geometry, astronomers have detected the light from the farthest individual star ever seen."

That is perhaps the least incredible thing I have ever heard. In fact, it's very nearly a tautology.

The overall writing style of this article is very poor and distracting.
Personally I am considering buying a device to attach to my plug socket for the router. It shall have a crude timer to switch off the electricity.

I think most solutions to the problem are far too complex and this shall suit my needs just fine.
You don’t need to expose them. You need to use public DNS records, but there is no reason those records have to point to public IPs.

e.g. my company uses *.int.cuvva.co which all point to IPs in the 10.0.0.0/8 block, but we still have HTTPS certificates for all of those.
KN Has: list of good US/California/World/Tech rss feeds?
I use liferea (gnome package) for rss feeds. I've started to compile a pretty big list of primary sources as well as news sources. The obvious stuff is local/state gov, local papers, federal agencies/organizations, security updates, etc etc.

I'll post my list here if this gets any responses.

RSS is swick. negligible amount of data/requests for a massive amount of feeds. Just hitting the cnn homepage is ~200 requests and 10 megs.

and yeah I already subscribed to https://news.ycombinator.com/rss and it's ++
powershell requires .net. that is no longer tiny.
I can't disclose much, but can give a very basic idea regarding SSL.

That information eventually needs to be unpacked, so you get a replicate of the destination site with the same certificates, which you can easily download by pretending to be a browser, but running on your modified server, which then unwraps, repackages and then forwards the request to the original server.

Since one owns the server, it is also relatively easy to disable whatever validations the SSL algorithm requires at library level.

So I don't know TLS and since 2000 I don't mess with this kind of stuff, but I don't think similar approaches aren't possible.
Proxies that do https inspection act as a client to the destination server, decrypt traffic, then reencrypt locally using a self-signed (or otherwise non publically trusted) certificate.

In short, you can intercept the traffic, but it relies on the client explicitly trusting your certificate. This is the foundation of all security on the web.
> As a consequence, we need to expose critical internal services on the public internet, some of which contain private user data.

No, you just need to have a public DNS entry, no need for that service to be reachable from the internet.

foo.example.com can resolve to your private RFC1918 address, when you send the CSR to a CA, they'll verify your ownership of example.com.
There is no good or bad in politics. Just interests.

If there really were "good countries," then Saudi Arabia would not be getting any support.
Depends what boxes you're normally on, but it's a rare day I'm somewhere without .NET.
Contact details are in my profile - if there's anything in particular you're looking for I can ping a few people from the project.
People are not stupid to downgrade. They just want to use their legacy software and familair UIs?

Speaking of stupid, what hard with beefing up the code while "allowing" backward compatibility and familiar UIs?
Battle for the Internet
Revisiting Unreasonable Effectiveness of Data in Deep Learning Era
It's a subtle stab at Debian-based distributions, where pip and venv are only available as optional, non-default packages. (I think Debian really wants people to use apt to install things.)
Has anyone tried unity services? How have you found them? The more in depth the better as i am thinking about using them in the next couple weeks
It's like when you decide to do something, but then someone else nags you to do it and you lose all interest.
Debugging JavaScript – console.loggerheads
My certificate is the original certificate.

We weren't using an off-the-shelf proxy, rather some nice debugging tools with extra help from the networking layering.

Maybe TLS is more full-proof to Website replication with DNS spoofing and a few other tricks, but they did work without issues in SSL 1.0 connections, using modified web servers.
FYI, I recently watched a potential portfolio company fail dilgence for having "insecure network practices". The diligence item? Is the lockbox green.

Do I agree with this signal? Not entirely. But the company was forced into restart and into new management. Guess what colour their lockboxes were?

The default has shifted; if your best retort is "it's hard," I'm not sure what to tell you. Yet government, maybe?
1st one is the fastest in Cpython and causes the least mallocs. Ultimately not sure what the criterion for best is here
Scrolling whitespace with lots of links on the side feels and looks bad. Either reinterpret it [1] or make it a separate scrollable section [2].

[1] https://developer.apple.com/documentation

[2] https://developer.android.com/index.html
How Calibiri font could bring down Pakistani government
‘Alexa, Where Have You Been All My Life?’
Incidentally, I heard a story on KQED (SF Bay Area public radio) today that mentioned a potential clue. There are two parallel runways on this heading -- however -- the left runway is closed for repairs and therefore is currently unlit. If the pilot didn't remember this (it would have been included in his briefings and approach charts for the flight, but he may not have internalized it), he would likely have been looking for two parallel runways and would have lined up on the right one, which in this case would have been the taxiway...
Bought for 100 euros at a flea market, WW2 Enigma machine sells for 45,000
It is... Assuming you didn't also set the x11 option for it via localectl or similar. The two somehow conflict.
Probably I misunderstood you but this is because your posts don't differentiate themselves from someone using HN just for ideological purposes. If so, there's an easy fix.
> 1) Better to have primitives that scale you to X rather than having to get to X on your own.

For a fast time to market, I do agree with you. But if you are well established company in the market, then in most cases "do it yourself" is the best idea. Unless you have the money to call for experts to fix the problem for you.

> 2) The grand parent wrote the Elixir language.

I didn't know him, nor I care.

> 3) Making sweeping like "A better architecture for a distributed system has a strong composability property" is very easy.

I'm considering this as an excuse, than a technical argument.
"Any application that can be written in JavaScript, will eventually be written in JavaScript." - Jeff Atwood
You absolutely nailed that argument. If someone reads it and is not convinced, they're not thinking straight.

Cryptocurrencies are a symptom of people's intense distrust of governments and the corporations which lobby them. People are voting with their money. It's not the most efficient solution, but it's a desperately needed one.
> Who wrote the better version?

The one who moved on instead of bikeshedding.