skysight-inc/HackerNews huggingface dataset:
If a government really wanted access to a specific user's ProtonMail account, couldn't they get a court order from a domestic CA, say Verisign, to generate a fake certificate that they can use to MITM a browser session, and deliver key-stealing javascript to the user? I'm not sure what the state of certificate pinning is, but it seems that for the "uber security conscious users" they have instructions to check the SHA-1 fingerprints[0] manually. I feel like there are just an infinite number of technical ways a state actor with unbounded resources and legal access to basically every authority and pipe that operates the internet could MITM a service like this without compelling ProtonMail to do anything.

[0]https://protonmail.com/support/knowledge-base/protonmails-ss...
I despise the industry that I work in (the tech industry, if you couldn't guess :) ) and doing nothing but consuming after I put in my time at work is the only thing keeping me from a massive depressionary spiral and self-harm.

I've tried, before, to do things, and my mental state has quickly deteriorated to a worrisome point.

Do I wish I could do things? Absolutely. But my hatred of what I do, and the fact that it's the only real thing I'm good at in a productive sense, means that I've never found another outlet that I can work on and not spend the entirety of the time dwelling on how much I hate it.

So all I do is play games and watch internet videos on my off time. Deep down it crushes me that this is my life, but thus far I've managed to keep that mostly bottled up.
They don't take crypto currency :(
Not working was a crime, money was useless past the "enough to pay bills" point. But it didn't started that way, it got progressively worse, and I think UBI can have the same result if it lowers the output enough.
Teens Are Sleep-Deprived, and Screens Are Why, Study Suggests
Horrible Happenings on Halloween
Simplified JavaScript: Getting Started with Closures
I think it is even worse than that. I would like to pay for all of my apps. I could not find any way on Android to filter out all of the free apps and just show ones that have a price.
This stinks of my cynicism, but I hope Tesla doesn't mind competing with unbranded, unlicensed Chinese copies of Tesla-designed vehicles.

Based on their blanket grant of royalty-free patent licenses, I wouldn't think so, but that might just be the sort of idealism you see when a competitor doesn't have you up against the ropes, pummeling the snot out of you. It's one thing to go read the patents and maybe add the parts you understand to your product. It's another thing entirely to be able to observe an entire functioning assembly line and copy it down to the millimeter.

And that is something that will happen to any factory Tesla sets up on mainland China. Then they start chopping off the more expensive bits. Tesla must be betting that the x% of the Chinese market that cares about brand and can also afford to pay for genuine goods would buy a real Tesla instead of a nigh-identical knockoff, at rates high enough to be significant against the 25% tariff. That kind of financial math is beyond my expertise, though.
It got basic facts wrong. Lots of them. Things you could easily google or ask anyone who knew a bit about computers. Gruber wrote some about it on DF:

https://daringfireball.net/2012/02/walter_isaacson_steve_job...

I believe there is an entire episode of Connected or ATP about errors in the book from when it came out.

Sloppy research, unasked questions, not talking to other primary sources. Just a GIANT missed opportunity/mistake.
Denial of service (or access) is one of several possible security threats.

Unauthorised access, content modification or deletion, impersonation, and several other categories of security policy violations are also fairly typical.
Top startup failures of 2017 – Ray Parker – Academia.edu
Is this new-ish? I remember looking for this awhile back and not being able to find it.

Thank you though!
Stops working for me after level 1. Repro:
1. https://lab.reaal.me/jsrobot and click "start"
2. Complete the level and click "next level"
3. This takes me to https://lab.reaal.me/jsrobot/#level=2 but the screen is blank
4. Dev tools shows this: "ReferenceError: URLcode is not defined[Learn More] ui.js:32:5"

Using Firefox 56.
I can't tell what this is just by looking at the home page. After taking a tour and wading my way through all the frustrating "next" buttons I still have no idea what advantages this environment might offer me. As someone else mentioned the site was extremely slow. Feels like it's overly bloated. I'm out before I even tried it.

I've now gone back and tried the sandbox and I couldn't code like this. As such, I'm still left wondering what is the use case for this?
The real world of virtual reality training
The hand-drawn variant certainly is nicer than the first diagram!

In general I like the hand-drawn style for explanations, but it's easy to go overboard with details. Making sure labels are easy to find for the eye and read is important. In your example, some of the labels (e.g. on the left pot and on the arrow across) are a bit small and hard to read in comparison. But that's easy to fix with iteration on it.
>because of the way that you say it

Because of the way you say it in English?
Anyone thinks this would interfere with their security?
https://www.reddit.com/r/ProtonMail/comments/6ru9pf/ive_had_...

> The final nail in the coffin for me is this page right here: https://protonmail.com/blog/transparency-report/ Can I draw your attention to this sentence: "After reviewing the relevant evidence forwarded by US authorities, criminal intent was apparent, so Proton Technologies AG decided to comply with the data request"
Sometimes you don't win.
A Photographer’s View of the American Opioid Crisis
They may have 'as many problems' as the poor ones, but there's a particular category of poverty, where you aren't getting three meals a day, and half the time your parent figure's home, they are abusive, drunk, high, or in withdrawal from their poison of choice. Or in the best case, just not present.

It doesn't matter how good the school is, if the home environment is a living hell.
The reason is to fight with bugs, which are caused by type errors. Current approaches are:

1) use guards
2) add tests which check types
3) use error reporting software, like Sentry, and cath errors in production

Is there any reason you do not want not catch type errors without additional code and useless tests before you deployed it to production?

https://blog.acolyer.org/2017/09/19/to-type-or-not-to-type-q...
How to Deal with Your Past? EFT – Part 2
So it's a PKI, except obfuscated by a bunch of health industry acronyms and "accredited" logos?
I've been using for 4 years and old cellphone as my home server.

I run on it Nginx + PHP, OpenVPN, Samba, SSH, MiniDLNA, a git private server, AvaHi, python scripts...

To get extra memory (not that I need it) I turn off the android UI and to save power I turn off the LCD.

ping me if you want to know more!
The money as it is was not too useful. Until the grand USSR food crunch things worked out relatively fine for most of Poland. (But not most of Russia, Belarus, Ukraine and Latvia as far as I'm aware)
Reasons for that failure are too complex for the post but paying for non-work was not really major one of them.

However the industries stagnated and once competition went on they died. Not to mention scandalous sales of critical companies just to make them private.
A slightly different wording of that last one would make it compassionate, IMO. "Because I can't be happy if I have merely 'won' the soc-ec game, while so many around me have 'lost' and are suffering."
Thanks for editing your post. With respect to the voting, unfortunately that's partly an artifact of viewing the site. Unless people are following the thread, they aren't likely to see an edit. There is an option in account settings which permits including a delay before a comment is made visible. This allows a period of time where you can edit the comment before others view it. This can help if you've dashed off a comment in the heat of the moment, reflect, and rewrite it with a cooler head. Admittedly, it doesn't help if the comment has already been viewed, but it may prevent some of what you experienced.
This is a pretty cool instance of running code together, but it doesn't look like you can interchange variables or data. The most common use case for needing to run Python and R together (IMO) is loading some data from Python and using a R library to do some analysis or graphing.

The bottleneck is still converting that pandas DataFrame to an R data.frame efficiently.
I hate that frog analogy. People always use it as shorthand for "small changes over time go unnoticed" but in the actual experiment, the frogs were basically lobotomized.

So how are we lobotomized? One sort of answer would be how people are convinced that their data is not important. They are convinced of this while Google and Facebook mine it to no end and the NSA stores pretty much everything you do in Utah. So maybe you don't think it's important, but Some very big players who have a lot more money and knowledge sure do.
Sure, but that can easily be turned back around on you:

There's no proof there that they are now at more risk.

> I've looked at the code and I can see already some potential supply channel attacks as they are not hash protecting their incoming libraries.

And if you, or anyone else who sees that sends them a notification about a potential vulnerability and they investigate it they're probably better off than they were before.
Fun thing: the SR-71 is built as well to cope with massive expansion once up to speed, so much so it is leaking all over the place when groundborne.
This was probably the biggest unsolved issue I had when seeking out a new email provider.

"Switch to this other email provider" is not going to get much of a result from your gmail/outlook-using contacts (especially if money is involved), and wouldn't even solve this issue unless you convert absolutely everyone to, for example, Protonmail. "Hey man can you set up this thing called PGP?" is probably even worse unless your social circle is all technically minded already. Even in a group of "nerds that play video games", I'd be surprised if even half of the group even know what PGP is.

So long as we're stuck with email as we know it today, it really seems like there is just no bolt-on solution that can be used to "fix" it.
I think your comment needs a historical perspective. Protectionism and tariffs played an important economic part in the rise of all of the current world superpowers. Pretty much everyone from the USA, to GB to Sweden practiced heavy protectionism through tariffs and subsidies (which also featured in the civil war). While you can pick any window in history and adjudicate whats "fair", the alternative to "Chinese are sneaky" is that they're simply doing what others did before them to become dominant.
While Apple is taking away buttons, we found a way to add one with the camera
Use an independent calendar app or system (e.g., paper).
What effect will .finally(...).finally(...) have ...?
Quick study guide for tech interviews
tl;dr: fzf ftw
Why I'm Not Surprised When I Hear That Powerful Men Are F**king Creeps
Do you really believe people use gmail because of its brand?

I don't know about any security brochure, but I know I can setup 2FA to use push notifications (not an insecure SMS number), and can check where all of my logins are from, and have "suspicious" logins blocked automatically, etc, etc. I can also create single-use passwords for insecure devices (such as a youtube password just for my apple TV). Not to mention how amazing they are about spam detection.

I think their security posture is actually excellent.
I have no love for Flat Iron since ...well, they rejected me a few years ago when I started my code journey.

However, I think this fine is somewhat bullshit. Flatiron did release all of the relevant job figures in an accurate way, even if the marketing headline was, indeed, misleading.

What is the benefit for students of the school being licensed? What does that process bring to the table? I'm sure justifies the existence of some bureaucrats, but it's my understanding that truly terrible GI Bill scam schools are licensed.
>starts on 4chan, moves on to /r/redpill and /r/mensrights

You have that in reverse. All of the worst subreddits of that nature are just Diet /pol/ at the end of the day.
until 4-5 years back, my wife's lab still owned some old scientific equipment whose control software ran on DOS. they'd dumped another piece of equipment a few years before that which ran an embedded DOS system, and booted/ran off of a 1.44MB floppy. (not a good design decision for long lasting hardware.)

both pieces of hardware were sold to folks who intended to use them.
The actual proposal[1] is currently on stage 3 on the standards tract[2]. Meaning that the spec is complete and further refinement will require feedback[3]. Should I be a little surprised to see this enabled by default before it reaches stage 4 (ready for inclusion in the next version of the standard)?

[1]: https://github.com/tc39/proposal-promise-finally
[2]: https://github.com/tc39/proposals/blob/master/README.md
[3]: https://tc39.github.io/process-document/
BoingBoing too! What a lovely surprise, thanks
Automating AWS DMS Migration Tasks
> my friends would end up polluting my news feed as well with crap that I wasn't interested in and got in the way of what I had originally joined FB for

A few weeks ago I went back on Facebook and took the time to try cleaning it up. I went through every shared article and clicked "hide post" and "hide all posts from site". Some bullshit shares still make it into my feed, but mostly it's pictures and actual updates from friends and family again.

This was after I got sick of the crap people were sharing and stopped using Facebook last year. Unfortunately it also meant I missed a few big family events that were announced on Facebook. My brother moved and didn't mention it when I called him because he had posted so much on Facebook that he figured I already knew.
5 Things You Need to Know About Gen C – Buzzlogix
I've been working on adding code signing to web apps, using Service Workers: http://blog.airbornos.com/post/2017/08/03/Transparent-Web-Ap...

The main blocker is https://github.com/w3c/ServiceWorker/issues/1208 (which would fix the non-critical but less-than-ideal issue described under "Service Worker lifecycle" in the blog post).
I'd say two things here:

- Recent vim in terminal (and vim in a GUI container like gvim or MacVim) supports mouse interactions. For example, in macOS's Terminal.app, View -> Allow Mouse Reporting will send mouse events to vim, which will allow you to scroll with your touch pad, select with your mouse, etc.

- I think there is definitely a curve to learning many of the movement commands that vim provides to become fully efficient at moving, say, a block of code. When moving blocks of code, I most frequently use % (which jumps to the matching brace/bracket/paren) or } (which jumps to the next blank line).

I agree that it sometimes feels like there's an analysis step in vim interactions that can feel like it's slowing things down rather than speeding them up. In my experience, much of that calms down after you've been doing it a while. But, that doesn't mean it's worth the investment---I think that depends on the person.

I seem to editor-hop every 2-4 years. I generally end up coming back to vim for long stretches, but I've used plenty of other stuff in the past. I think if you feel productive, that's the tool to use. If you feel curious, or whatever, I think it's worth exploring. Vim is peculiar because its interaction mode is so different that it's hard to feel fully at home with it without going all in for an extended period of time and dedicating yourself to learning some of the stuff that's not necessarily immediately apparent. If you do that, sometimes you find it really clicks with you. Sometimes you don't :)
At least with games like Farmville, they did it because there was a huge backlash from users who were sick and tired of their friends spamming them with game invites and cluttering up their news feeds with game updates.

Facebook did the right thing.
I'm not convinced that the function of the brain is prediction: it seems that prediction is subsidiary to defining an action policy.

Prediction is only useful for an organism inasmuch as it allows it to calculate expected future utility for actions. And these actions are the only things that lead to different outcomes in terms of evolutionary fitness, thus the actions that are ultimately output by the brain are the only things that determined its evolution.

If the purpose of prediction is to calculate expected future utility of different actions, then it does not follow that a general-purpose prediction device will be useful, because the prediction device might use all its energy predicting aspects of the environment along dimensions that are irrelevant to utility. A useful prediction device would only predict along useful dimensions, and may be very different in behavior from a generalized autoencoder. As an example of this difference as it comes up in the field of deep learning, consider the case of machine translation: you could either train a sequence model (LSTM or whatever) to autoencode sequences---i.e., to be able to predict them---and then use the resulting representations to do translation, or you could train end-to-end where the objective function is translation quality. It turns out the latter yields better results.

Maybe the brain, or part of the brain, is a prediction engine and another part does action selection based on the predictions. But then why would we identify intelligence with the prediction engine part rather than the two parts combined? Searching for an optimal action is a very different task than prediction; it seems you need both to have what anyone would call intelligence.
That is only remotely exploitable if you use Intel network cards.

There’s a reason all my systems use other cards, and are behind a hardware firewall specifically configured for my use cases.
Take advantage of the Bitcoin hardfork and get free Bitcoin Gold
It is very unreasonable for users who hundreds of friends to expect interests to he similiar. This could be excused for a smaller site but facebook has detailed metrics on what I liked where I visited outside of facebook and what purchases I made.

Using that targeting is much more effective compared to friend's interest.
I mean I'm guessing one crucial reason is that far more people are familiar with the story than have ever actually read it.
Amazon Says It Received 238 Proposals for 2nd Headquarters
This is not a good heuristic, for several reasons.

First and foremost, despite widespread fetishization of things like end-to-end encryption, real world software rarely differentiates its security based on superior cryptography. Most security vulnerabilities occur at the endpoint level and are not even technical vulnerabilities, they're just successful, targeted phishing campaigns. The next most common set of vulnerabilities are in mundane software, typically in the infrastructure and peripheral logic. These are due to developer ignorance, misconfiguration or sometimes both. From there we have crypto implementation flaws, which are typically due to software engineers' fascination with implementing their own cryptography libraries or taking strange liberties with existing libraries that deviate from the explicit or implicit intentions of the original author. Finally, on a peak so remote and small it's scarcely visible from the ground, we have actual cryptography design flaws, where someone literally rolls their own crypto at the conceptual level and deploys it.

Second, email is a fundamentally antagonistic medium when it comes to end-to-end encryption. If you are actually concerned about your privacy and you're discussing something that warrants extreme care, email is the least user-friendly and most error-prone method of going about it. You should consider a synchronous medium with forward security if possible, probably based on a well-known and well-audited messaging protocol (to avoid a flame war I'm not going to suggest any particular one - do your research).

Third, if your threat model is honestly the US government, you need to significantly revise your opsec entirely if you're realistically considering Protonmail. Regardless of its actual security, you're (implicitly) saying that you trust Protonmail to be capable of withstanding the resources of a motivated three letter agency with an armada of security compromising tools at its disposal. Why trust a third party at all then? What makes you think the servers being in Switzerland is going to help you if you distrust the government this much? By all means, don't use Gmail either, but then Protonmail isn't really a coherent security measure either - again, use a synchronous messaging platform, or develop the opsec needed to consistently use PGP correctly on your own.

Given the foregoing, if your adversary is actually the US government, neither Gmail or Protonmail are effective strategies, and if your adversary is not the US government, Google's security team is vastly more qualified and has overwhelmingly more resources at its disposal to secure its email infrastructure.
So this is ProtonMail vs Free Gmail correct? Not G Suite?

Why would you compare a free service with a paid one?
This article seems to reference a personality trait that seems to be lacking in modern society: grit. Just my person opinion. Heck, I've lacked grit, in some situations.

For a good (motivational) read about the definition of grit, who's got it, and why it matters, I recommend Angela Duckworth [link]http://angeladuckworth.com/
Any claim of security without a thread-model

I'm not sure I understand what your counterpoint here is since we seem to be saying the same thing but I had to go back and fix 'thread model' twice myself. An underestimated threat model to commenting about threat models!
Online Privacy Doesn’t Exist
You should do the right thing because it is the right thing.

However, with speed limits your teacher framed the question incorrectly. There is not right or wrong to a speed limit. 35 miles an hour is no more right than 38 miles an hour. The real question is why do we obey a law when there is no clear right or wrong to it? In the case of the speed limit our right/wrong choice is to obey the law or not. (And while speed has no right or wrong unsafe driving absolutely does, which could be unsafe due to the speed.)
The point is they're not going to win anyway.
Only One in 10 Tokens Is in Use Following Initial Coin Offerings