skysight-inc/HackerNews huggingface dataset:
Replace "Russian government" with the name of any news organization and your claim is (still) true. So your conclusion is based on the presupposition that the Russian government has such incredibly bad things to say that all the world's naive people need to be protected from it. Really? Are they spreading a new global communism ideal or something?
Who decides what the right story is? Right and wrong should be decided in public debate. Not be some private or governmental entity deciding for us what is right and wrong.
Wont this create a massive demand for VPN services? How can they stop/throttle VPN'ed access?
I think this is fantastic, it's amazing to see how Let's Encrypt just blasted off. It kind of scares me, one company having such a large presence, but I think it's one of the best companies it could have happened to. :)
Why do device designers continue to put the on/off button at the edge distance as the rocker on the opposite side, so that pressing one naturally, accidentally, presses the other!?
Yes, this was undoubtedly one of the Russian government's goals, but the US IC also came to the definitive conclusion that their goal was not only this but also to get Donald Trump elected. It was an open question for some time: were they merely trying to cause chaos and increase the divide, or did they specifically want one candidate in office? The answer, at least according to 17 US intelligence agencies, is both. And this isn't a huge shock considering Putin's well-known long-standing grudge against Clinton and Trump being considerably more pro-Russian than she was during the election cycle.
Exactly. It all depends on whose side you are. If it is from the side which the establishment/puppet masters favor, then its all fair. How much trust do MSM's have these days?
They have bought it upon themselves by being slaves of people with agendas.
Oh this is great news for Bitcoin

If the price of Bitcoin has been inflated by 600 million USD that doesn't really exist, then when this unwinds it will be bad news for Bitcoin.
everybody is quick to bring up president trump becuase this so so opposite to everything else the administration has done.

I absolutely agree, this merger should be blocked. It's against the interest of the consumers. The DOJ is doing their jobs. But everything else the federal government is doing lately isn't. They've been repealing regulations left and right. Anything to increase corporate freedom is an immediate go, except this merger. If they want to work in the interest of the consumers, how about protecting net neutrality? Instead, they only work in the interest of the consumer when it's also working against the interest of an entity that the president has declared an enemy, which makes it hard to believe that they're doing the right thing for anything other than the pettiest of reasons.
How do groups work on Linux?
Holy mackerel: Civilisation begins with fishing
You nailed it. You could use pix4d, photoscan, bundler + pmvs, inpho, areohawk, etc many years ago to achieve exactly what this is showing. With wharever cameras you happen to have had at the time, strapped to whatever you feel like strapping it to.

The author of the article did not do due dilligence on the subject.
So sure, there are a few benevolent dictators here and there... but what's the ratio of benevolent to malevolent dictators/authoritarians? Is there such a a stat?
I’m still wrapping my bed around the concept of Tethers, but I don’t see [1] as problematic. That’s the same way that ETFs work — they ensure value parity by guaranteeing that you can redeem blocks of them for the corresponding assets. But to ensure the ETF shares aren’t all redeemed this way, they limit it to large blocks of shares. That way, smaller investors can still sell their (smaller blocks of) ETF shares for dollars at par, since any divergence would be an arbitrage opportunity that a bigger trader can exploit.

The requirement to redeem in large blocks doesn’t change that logic, and still ensures that the smaller trades happen at par.
The article fails to discuss the ever-popular lots-o-monorepos approach ;)

I really liked the idea behind the approach I learned from the linked-in tools team: project-oriented build-test-deploy tooling. In this approach, it doesn't matter how the projects map to repos. instead, the tooling specifies a canonical way to declare projects (including owners) and their dependencies. The build tool takes care of placing the dependencies in the project build environment, and enforces versioning (like if a library author needs to yank a version because of a bug).

This approach lets library authors make changes without having to update all use cases. They still get to yank versions and test new versions against all use cases in an infra.

The project owners get control of their dependencies -- they get to choose what to use and when to build and deploy updates, but also can't fall hopelessly behind on updates -- the build tool won't let them, and they can see which dependencies need updates.

My favorite part is that the build tool can be used for both internal and external dependencies -- who works on them or where they're stored is irrelevant.

I haven't had a chance to implement this approach, but it sounds promising. I also like the migration path -- most companies should probably start with multiple repos to take advantage of open-source and hosted tooling, and this approach allows incremental migration to get advantages of mono-repo without a painful all-or-nothing migration.
I had to switch back because of this. For example Google docs was dog squeeze slow.
I never thought about the idea of "technical profit," but I think it is insightful. There is, indeed technical profit. When you have a quality design that fits the system's space really well, then you can maintain and add features really quickly and safely. This is technical profit.

When Paul Graham talks about how writing Lisp enabled his startup implement features quicker than the competition, that's technical profit. Google's internal systems that allow them to maintain thousands of machines; create large, distributed filesystems; and who know what else are technical profit.

There was an article recently about Boeing retiring the 747, and it commented how pilots would take a picture of the plane after flying it. (Passengers, too) In aerodynamics form is function, and I suspect that the outward beauty reflected excellence of design. The design served them so well they just now retired it after 40 years, despite all the advances since it was originally designed. If I'm right, this is technical profit.

Perhaps the idea of technical profit would be an easier sell to management, especially as management types see debt as useful, but programmers see it as a liability.
> Will there be ISPs that offer packages that we have now? (I.E bandwidth only restriction)

Cynically? Market segmentation. Segment the market into sub-communities along demographic lines as well as producers and consumers. Figure out how to charge both small businesses trying to start a shopify store and the consumers who're likely to visit them.

> How will ISPs decide what websites I can not visit? Will they have a whitelist/blacklist?

If they don't have to treat all traffic passing through their lines equally, then they can choose to downgrade traffic from say Google unless El Goog pays up the fee. And, probably, ask you to pay up too.

> Will there be ISPs that offer packages that we have now? (I.E bandwidth only restriction)

To quote myself;

What makes you think they won't take full advantage of the power that you've given them? Once you give them that power, do you think they won't use it to make more and more? To squeeze every last dime from your pockets?

That's what they've done in the past. They've carved up territory like drug gangs to maximise profit. (Look at the maps - notice how they don't overlap? https://www.publicintegrity.org/2015/04/01/16998/us-internet... ). At the same time, they've often colluded to pass legislation that locks out competitors (https://www.theverge.com/2015/5/1/8530403/chattanooga-comcas...). And they've gotten so good at it that even the almighty El Goog couldn't break into their territory - I mean, market.

What makes you think that these rent seekers won't extract their pound of flesh and then some from you and your customers?

After all, past behavior is indeed predictive of future results.

> I've seen good arguments both for and against net neutrality and I really don't know which would be better.

When all else fails, go with enlightened self interest. Do you really want to pay some "ISP-fee" in the future to start your startup? Do you think consumers will be able to find your company or bother to do so if they have to pay $5 extra for the privilege of seeing your website?

It's in everyone's enlightened self interest over here to oppose this, because in the long run it will kill the consumer internet as we know it.
TLS Redirection attack
I think this entire thing is based on this line of reasoning from people who can't believe Trump won the election:

1) No American would vote for him because he's obviously bad.

2) But they did.

3) Therefore they were weak-willed people who got manipulated by somebody.

4) ... (I don't know this step) ...

5) Therefore Russia did it.

6) Protect the weak-willed people from Russian ideas.
I also really wouldn't be surprised if Comodo's market share is inflated from the free SSL certificates that Cloudflare offers for all its users.
"Time spent thinking" is actually a great metric for getting smarter. However playing mental chess is probably way too difficult for her and the majority of the population.

A great way to understand how to get mentally fit is to look at physical fitness. For most unfit people, exercising muscles that they don't use is unpleasant. What they need is simple exercises that are short, easy to understand, repeatable, cover a range of muscles, and have variations that provide increasing difficulty for advancement. You don't want to start someone off doing power lifts.

If you've been to any gym classes, you'll realize that there's no such thing as an objective scale for exercise difficulty. Squats may be trivial to someone but impossible for someone else. Finding a person's level of fitness and figuring out a good set of exercises that are appropriate for their progression is the key to a good long term fitness plan that actually works.

How about starting her off with something simple like sudoku? I know some may balk at the idea of sudoku being a mental challenge, but it's the mental exercise equivalent of yoga. The reality is that some people who haven't used their brain in a long time may be at a very, very low level. Not a knock on them, just not everyone has the opportunity to use their mental faculties 8hrs a day at their day job.
SuperShape – Codevember 2017
Can confirm: I created an open source TA tool[1] for crypto markets that can function as a trading bot. If only I got a penny every time someone emailed me saying they are total beginners, looking for help installing it and hooking it up to their $xx,xxx account.

[0] https://gekko.wizb.it/
Manual setup with a running nginx server is easy. It's when you have docker on the mix that it all goes for a toss.

Are you using docker to spawn nginx ?
It seems a lot of computer science books I read that have been published lately talk about their build process (web, PDF, EPUB/MOBI) in the same way they would talk about compiling code. How much typesetting is really done these days?
Yeah, DeX used some relatively obscure DisplayPort based implementation of Usb-C to HDMI, as long as you're using that (might be called slimport) it works. I'm getting away with using a $20 dongle.
> To the best of my knowledge, all SGX attack research papers disable checks and run unsigned SGX code to demonstrate a proof of concept.

While interesting, papers like these usually have titles that are disingenuous at best. I’ve seen the media report on papers with scary titles and make it sound like the sky is falling, but the scenario is generally (not always) contrived.
The abstractions and tech which cryptocurrency works on is fragile in most of the same ways as the layers that came before it (credit cards/banks/etc).

Try to look at all this holistically.

How many people and resources do we dedicate on this planet to keep track of money, economy, mine the coins, cash the checks, swipe the cards, keep the lines working?

All of these abstractions make trade faster and more liquid but honestly it really feels like dimished returns in the grand scheme of things.

So many people make money by keeping track of money. So much resources. I can't even fathom it.

Bankers, store clerks, amazon servers, politicians, Dunbar, Stock markets, its crazy.

How much do we allocate to this cause, the cause of keeping track of "who owns what"?

This is not rhetorical, If I had to guess, I would guess that 70% of our resources and jobs are dedicated to this nonsense.

Just think we are mining coal out of the real ground just to mine these "valuable" ones and zeros. What the actual fuck?

It all just seems like a waste.

Use my empty clock cycles to mine and keep track of everyone's virtual coins?

I was behind folding proteins and SETI, and all the other distributed computing ideas. It felt meaningful, like I could help change the world and help raise up the human condition...

Thanks to this post, I just learned what "Tethers" are, and I have to say, I'm so fucking disappointed with this part of the industry.

One of the early promises of cryptocurrency was to "sick it to the man and governments". Now its powered largely by greed and consuming our most important resources in breakneck speeds.

I wish you all luck this this "investment", hopefully the planet will survive this next abstraction of "money".
You mean until the hacker starts sending some money to known exchange addresses and tether cold storage addresses, infecting everything?

EDIT: it appears I was wrong!
Quant strategies in cryptocurrency space
Previous discussion: https://news.ycombinator.com/item?id=15720923
薪资方案拼不过对手，如何拿下优秀工程师？如何婉拒一位求职者，但仍然能让他对你恋恋不舍。
> Wow all 6th, 7th and 8th gen are all vulnerable along with a bunch of Xeon processors.

Do we really think older systems are magically not vulnerable to any of these? It seems more likely that they're vulnerable but old enough that they're getting ignored... and so they'll never get fixes.

Intel sales slump solved? :-/
They were very invested in the status quo of net neutrality, regardless of what you think about their sincerity.
We did this recently with a small app that needs to be fast. The relatively simple page that you see when you first visit the site is rendered with plain old Rails, then when the user interacts with the page (based on DOM addEventListener hooks) it causes additional React components to be mounted and rendered.

Originally I’d hoped to be able to render a basic version of the page with Rails, then ‘enhance’ it with React - ie render <button>For</button> with Rails, then when React has loaded, replace it with a React component. But I couldn’t find any details on using it this way, and given time constraints choose the simplest option.
All lorem ipsum text on the site
> In 2004, Respironics gave iron lung users three options: transition to another ventilator device, keep using the iron lung but know that Respironics may not be able to repair the device, or accept full ownership and responsibility of the iron lung and find someone else to repair it.

I wonder what the alternative ventilator device is. Iron lungs are not convenient or cheap by any measure. I am sure if they were any better options all of them would have switched without needing the ultimatum. What exactly was the company suggesting they do instead?
It didn't help, since Republicans made it a point to oppose it out of spite. Overall it became a partisan issue, instead of a normal common cause.
> When you go to withdraw from Tethers it basically says "if you don't have more than $50k in claims, go away" [1]. Suffice it to say that most of their customers don't have that.

This is not how most people redeem tether, they go to any of a wide range of exchanges (kraken, poloniex, bittrex, etc) and trade whatever amount (from a dollar or whatever the minimum trade amount is).
It is hard to compete with free. I think if some CA made things as easy as the ACME protocol and the associated tools did, yet still charged $9/year, it would have delayed things a bit. But the end result would have been the same: $0 is the winning price.
Back when boards kept the IPMI on a separate interface it was easy to isolate them, including shutting down all port to port traffic on a switch.

Now, on many motherboards the BMC stuff will aggressively talk in-band even if you think you've disabled that.
Facts are not up for debate. For way too long we’ve allowed idiots to argue facts with opinions. Your opinions are less valuable than facts. So are mine. We need to be dealing in reality, everything else is noise.
I'm super pumped and bullish about crypto and the whole idea of a decentralized world, but there's so much money involved right now (most of it speculative money, and arguably lots of illegal money), that there needs to be some real measures to ensure the security around it.

Crypto has made it easy for people to essentially start a bank, without actually thinking too much about or knowing how to build a vault properly.
Bezos’ Amazon Sets Up ‘Secret Region’ for CIA, 16 US Intel Agencies
There is no alternative to comcast, so what do I do for Internet since Comcast has basically a monopoly in my apartment building?
An underrated biological threat
I find Microsoft's 18% Other category interesting. Anyone have an idea why almost 1/5 of their revenue is un-categorized?
Hello Anatoli. Thank you for this. It was clearly an oversight on my part, not intentional to make React look bad. I have added a note on the article and will run the tests with the correct settings and your PR with further optimisation.
Might help when you need some creativity. Although Edison's method of nodding off and waking up might do the trick. For production code... I'm not sure.

/IANA./
Me? No where. I'd probably figure out how to live life without the internet, by and large. I know for many people that isn't an option, but personally I've lived without the internet for a good chunk of my life, and I can do it again. I'd probably be happier anyway. I'd probably read more books, get out into the community more, maybe learn a new instrument. My parents live without the internet and they're getting through life fine in 2017.
> postal service ... elaborate rules

Such as that the USPS must be self-sufficient and doesn't take tax revenue.
WhatsApp Finally Ready to Have “Admin Super Powers” Feature on Its Next Updates
I agree. The danger isn't simply "Big Government" or "Big <Whatever> Corp.". It's the concentration of power, whether by private or public entities. Private entities will abuse/buy/influence any power structure that happens to exist, to server their interests.
The time is not right yet, but mobile hardware gets faster a rapid pace and the upcoming Linux on Galaxy [1] might change things to be more useful.

[1] https://seap.samsung.com/linux-on-galaxy
After the fall of mt. gox there was a huge push to get exchanges to do this.

My guess is that the costs of doing this (security is quite hard: anything that can sign messages using cold storage keys can obviously also empty the cold storage, since transactions are simply signed messages) does not outweigh the demand for this. Most traders don't care (and subsequently get burned).

> And the transparent bank would publish a daily record of balances for each account

I think this is a terrible idea though. Even if done anonymous it gives way too much information about a market and its participants. IMO just use a merkle tree so everyone can check their own balance.
How does that prove that Tethers has USD to back each USDT? If it's all exchange-based then there's no guarantee of a peg to USD.
Aren't Bing's pictures of Shia LaBeouf? How does that relate to Eric Schmidt?
If anything the ABC probably has the opposite slant to what GP was talking about (ie slanted against the government rather than for it).

Irrespective, I believe it would be harmful to penalise...
The Best Email Design Hunt 2017
EmailMonks presents the Best Email Design Hunt 2017: a contest to appreciate best creative mind behind an email. Our partners in this contest are EmailonAcid, Really Good Emails, Campaign Monitor and MyEmma.
Participate to win prizes worth $10,000.
To know more about the contest visit contest.emailmonks.com
> I'm thinking of ditching my iPhone for a flip phone.

That reminds me of my college days back in 2011 when I decided to go for a flip phone instead of a smartphone. Most of my friends thought I was peculiar for my insisting I use one and to do this day I still have that same flip phone, but not in use; just as a memento... sort of.

At the time, I wasn't really thinking about how my attention was a valuable resource or that most smartphone apps were major distractions. I just simply didn't like how inundated with features smartphones were. I always thought my laptop as my primary place of "getting-work-done" and my gaming laptop for entertainment (i.e. helluva lot of StarCraft II) and to have a phone that competed with that, but far worse, never sat well with me.

Looking back, I'm glad I did that and wish I could continue with a phone that could only text/call.

edit: Formatting
Oh I can't wait for that day. Then I can sell an Internet enabled appliance with a certificate that lasts just as long as the warranty! Recurring revenue here I come!
How about distributing Let's Encrypt?

Do cloud hoster offer a copy of the service from their datacenter? Otherwise it could be a single point of failure / single attack vector, right?
I don't know man. There's enough use-cases to make both boats float. Just gotta find it.
How do we now which facts are true and which are fake?
What specifically about the Crowdstrike and Mandiant reports was particularly suspect? They have tracked these campaigns and found them completely consistent with APT 28, whose infrastructure leads back to GRU.

All actors leave traces, how do you think Kaspersky was able to track down Equation Group?

Why did you choose to deflect with the Homeland Security "report"? I didn't bring it up, and it isn't meant to be evidence of anything.

Why are you choosing to be a bit disingenuous in this argument?
"The four created things in which all earthly things exist are aer, ignis, terra and aqua. Aer is air, ignis is fire, terra is earth, and aqua is water."

They actually weren't too far off. Sure, we have many more elements than just four, but there are only four states of matter. Although of course fire isn't literally plasma, but in a sense, they had essentially grasped this truth about these four fundamental states
If you’ve never used Stripe or had to implement a payment system it may be hard to understand. Like others have said, Stripe made it simple to accept credit cards online and since have expanded to offer several different products that focus on helping internet companies (sass, ecommerce, marketplace payments).

What they did right was their developer first approach. They eliminated all of the bullshit you had to do to start accepting payments. They took something that more and more companies needed to do, was unusually complex, and made it easy. It certainly qualifies as “special” if you’ve ever had to do it.
Having source code is but a tool towards having the freedom to do what you want with your hardware. I can't see another tool that would also work and give the verifiability that you want.

Access to the firmware binary running on the ME processor and documentation for the latter would be even better than having source, since the latter assumes you trust the toolchain too.