skysight-inc/HackerNews huggingface dataset:
Not all of the emails were signed. I haven't seen any evidence that even most of the damaging emails were signed.

Additionally there are several attacks potentially available to state actors to forge those signatures. The most probable is to steal the server's private key.

>As far as damaging e-mails from the other side,

How about agreeing to take a meeting with a Russian agent?

Trump only won by about 80k votes in 3 states. The election was very close--a change in weather could've swung it.

You can Google Russian involvement with Pizzagate. It was mostly Russian linked bots retweeting it to push it into trending.

In addition to Russian bots, all the Turkish pro government newspapers were spreading Pizzagate conspiracies.
Hey glad to find someone involved in metamath related project.

I guess if I could simplify my discussion to one question, it would be: Does metamath or ghilbert use a logic inference engine to automate parts of a proof?

The way I understand metamath (the website, not the language) is that it's like an encyclopedia of mathematical knowledge. The encyclopedia is in the form of theorems, lemmas, corollaries, and their proof. But unlike an encyclopedia or disconnected articles, all the propositions build on top of one another. As a result, it builds (or tries to build) the whole mathematical edifice starting from core axioms (well, I guess it didn't build itself, but hundreds of mathematicians contributed to the database, like people contributing to wikipedia in the form of article-writing. As to how automated this process is, I don't know).

Now the question is, can we use this edifice as a database, to be input to a logic inference engine. What this would accomplish is that:

- If I make a query about a mathematical proposition (e.g., Are there infinite prime numbers), the logic inference engine would use the database to conclude that there are if it is able to access all the relevant propositions.

- If it's not able to reach a conclusion, e.g., if my query was "Are there infinite twin primes?" it would start a process of exploring new propositions from old propositions. Then either the search would conclude very quickly (if the proposition is only one or two steps away from the knowledge in the database) or it would give up after a few million, or billion attempts (e.g., this is more likely the case with the twin prime query). There will have to be a manually-specified cutoff point otherwise it could go into an infinite loop (I guess it may have something to do with decidability, incompleteness theorem, halting problem, etc, etc. Though even many decidable problems are computationally intractable due to very very large search space).

- Suffice to say, when I say "query" I don't mean a question in english language but a well-crafted mathematical statement in language of metamath itself.

P.S.: As for your mention of this work not doable as part-time, I fully agree with you. It would have enough cognitive load to be a very complex project even if done full time.
I disagree that 1Password is easy to use. It’s easy enough for me to use, but trying to get my parents through the setup and UI has not been an easy task. It could be far more simple and straightforward.
Now if they only did respect user privacy!

Still every Firefox user gets a never-expiring google cookie by default, a practice that is going on now for many years! Also cookies are accepted from everywhere and last forever by default without user consent, overriding the freedom of internet users in a brutal and privacy destroying way.

It is a great bigbrotheristic marketing lie by mozilla to obscure this anti-privacy behaviour with glorious blabla about how they respect privacy, when in fact they help the trackers to track you even better, doing so since many years.

Cookie privacy must be handled more restrictive by default, e.g. there is no reason to save any cookie after the browser has been closed if user did not explicitely set that for a site.

Hopefully some journous finally check the facts before mindless re-babbling of mozilla propaganda.
Just because I have good reason to believe it never mattered, that doesn't mean that everyone agrees with me. Even then, people spend significant amounts of time on things that don't matter (see also: social media, entertainment, etc.).

Given that spamming a comment form is a few lines of Perl - http://search.cpan.org/dist/libwww-perl/lwpcook.pod - the idea that some nut might spend 30 seconds ordering their computer to spam the FCC does not strike me as farfetched, nor does it seem reasonable to waste time caring about that.

Better to focus our efforts on lobbying the FCC to change this boneheaded decision. Frankly, I think the point that they don't care about our comments to begin with is more damning than whether or not an idiot spammed a comment box.
They also had 3 'Critical' vulnerabilities reported by Cure53 in their extension VPN offering last year.

https://cure53.de/summary-report_tunnelbear.pdf
Agreed, HD DVD was the cheaper and technologically inferior option.
How about tampering with a tachograph so that you can avoid having to take your legally mandated rest breaks?

https://en.wikipedia.org/wiki/Tachograph#Tampering
That report: https://cure53.de/pentest-report_remembear.pdf

> It can be observed that since the algorithm is removing up to two top level domains, it actually treats victim.co.uk, victim.com, victim.de and even test.victim.co.at as if they were identical

> it has been noticeable that the development
process of the RememBear suite was affected by tight deadlines. Evidencing this was
the fact that builds were generally provided only one or two days before actual testing
started, leaving little room for in-depth reconnaissance

TunnelBear's pull-quote @ https://www.remembear.com/blog/remembear-security-audit/:

> we’re proud to share that no critical security issues were discovered

I'd consider putting credentials on an incorrect domain a showstopper for a password manager, but whatever.
Mozilla's pretty careful about what goes into the default telemetry, too. Most of it is info that isn't very identifying (stuff like "how many cores do you have" or "how many times did this specific kind of jank occur for you")

FWIW in Firefox nightly (maybe also beta?) if you flip the privacy.firstparty.isolate then the fact that websites can talk to each other is severely reduced; basically third party iframes get their own set of cookies for each domain they're embedded in, so tracking iframes know about each other less. Flipping this pref will log you out of everything though (only the one time), and some sites don't work with it (nothing major so far, and you can file a bug. In many cases it's the site relying on iframes in a weird way).
Nope. Electricity for residential use costs more than electricity for commercial use, which costs more than electricity for industrial use. A fast-charging truck stop is most similar to industrial use, since it involves a lot of power at a single location, and probably also can give the utility at least a few minutes warning before ramping up to full power. From the Energy Information Administration: https://www.eia.gov/electricity/monthly/epm_table_grapher.ph...
You don’t need citations in a comment thread discussion, the same way I don’t ask my friends over beers for citations when they imply the Maple Leafs is a hockey team. We all know that is false.
I did say that it was the frequency that made it 'a lot', not that it wasn't a lot.

I only mean that if someone said to you 'I had half a bottle of wine or more last night', you'd hardly think Sheesh, this guy's an alcoholic. It's if they followed it up with 'and I have every night since I-can't-remember-when' that you'd think Okay that's a bit much.
Am I the only one on HN that dosen't see any significant difference in performance vs Chrome 62 ? and developer tools in Chrome are still superior. I am using both browsers on my ultrabook with mobile low power processor and on my desktop with flagship intel i7 and I don't see any reason to switch to firefox completely.

It seems that Mozilla just uncovered how to make PR/marketing successfully after years of failures in this department. Good because competition is good for end-users.

It's shame that Mozilla is doing things like this though:

"I stopped using firefox since they are delivering cliqz with every 100th download which will analyze and store your browsing history" [1]

[1] https://news.ycombinator.com/item?id=15771719
Hello, friend. Welcome to the site. I see you're new here, so I thought I'd let you know why you're being downvoted.

Your post isn't very substantive. You express your opinion, but you don't explain the thought processes behind your opinion. When combined with the snarkiness, it just wasn't a productive comment.

If you haven't yet, read up on the Hacker News Guidelines[1], that may help when posting something somewhat controversial.

We try hard to avoid forming an echo chamber here. Overly emotional and unsubstantive comments are downvoted, and controversial comments with a lot of substance to them are often(but not always, unfortunately) upvoted.

[1] https://news.ycombinator.com/newsguidelines.html

edit: The irony of being downvoted for trying to maintain a positive, productive culture on this site is not lost to me. I won't bother to do so in the future.
I <3 pass [1]. Earlier discussion [2] on pass here.

[1] https://www.passwordstore.org/

[2] https://news.ycombinator.com/item?id=14819136
https://passwordstore.org
What you may not see is both parties playing people against one another. They're both completely beholden to special interests. As perhaps the most visible example, did you ever wonder why the TPP, which was going to be arguably the single biggest corporate handout in US legislative history, was being spearheaded by Obama? Or why he was going about it in such an absurdly undemocratic fashion?

Keeping the people divided is the key to keeping the establishment powers entrenched in office. So long as the people hate the alternative sufficiently, they need not worry about the quality of their own candidate. Clinton won the popular vote, yet I think it's safe to say that most voted for her not because she truly was the type of candidate that people wanted in office -- but because the alternative was considered absolutely unacceptable under any circumstance. And the same is no doubt true of much of Trump's support.

I don't think another Ross Perot 1992 is ever likely to happen. If that's before your political period, an independent individual (vastly more eloquent and reasonable, but politically similar to Trump) ended up making a huge run. At one point he was actually ahead in the polls against candidates from both parties. In the general he ran against Bush and Clinton, even then some of the most powerful names in politics. He pulled 19% of the vote - destroying Bush's incumbency and effectively giving the presidency to Clinton.

But far from just a spoiler, that's a single outsider independently threatening to 'take over' Washington. The increasingly sensationalized and divisive rhetoric with a focus on identity politics, really began to spike in the elections to come. So long as both side of the political spectrum think those on the other side are completely intolerable, it makes it much easier to control people. You can even get them to do things like vote for people they don't actually want in office -- they just need to be convinced that it's better than the alternative.
Django. I'm not doing software these days but still following the news etc., and it seems to me that the general knowledge of the tool is still operable since very early releases. I'm not very familiar with Rails itself but when an environment changes very quickly it's both a big distraction and a great inconvenience. I've last worked with django around January 2014, today when I look at a Django app it's the same beast but a bit better. I was also interested in node in its first days, then about 0.12 I lost my interest. Each time I look at it it's a new thing. If Rails is more like node than Django, that's a problem for a beginner, as they'd rather spend time learning fundamentals of web dev rather than learning a breaking change every month.
Reading and Understanding the Swift Driver Source Code
https://www.passwordstore.org/ (windows, android, and ios clients exist in addition to the better known linux/osx cli client)

Keepass (and keepassX and keepassC)

https://bitwarden.com/
I mean to imply that unless you're following directions to a chain you've heard of, your nearest deli or cafe is probably visible if you 'just look up'.
I agree this is a dumb proposal, but what's interesting is that we're at a point where we have to decide whether the government or handful of huge corporations with local monopolies should be in control of the Internet. If that's the choice, I personally would favor the government which is at least notionally somewhat under our control. It's not like the Internet monopolies have any incentive whatsoever to push back against government attempts to assert control or censorship.

The better solution is a breakup of the massive telecoms into many, much smaller companies, including forbidding local monopolies on home Internet access. But I have no hope of that happening anytime soon.
I suggest email migration in 3 steps:

1. Set up an email client and get into the habit of checking your mail from it instead of the web interface (at least, on your normal devices).
2. Create and start using your new email account, which you can add as a second email address in your client of choice, alongside your gmail. Share the new address with friends and family; people who you want to recieve mail from.
3. Gradually switch over logins and the rare newsletter you care about to the new address.

Eventually, you'll find that you no longer get any mail you care about on gmail. That's when you download an archive (which you think you will look at but actually never will) and delete your account. As a side benefit, you'll likely get to cut down the amount of junk mail you get :)

I've never used Google calendar, but I presume there's a way to export as ical? That should make it easy to migrate to any provider you like.
Does Chrome spam on the google home page count?

I've heard that is one of the most valuable ad spots in the world and I've seen a lot of Chrome ads there.
I think it imported my passwords from Chrome (but then again, memory is a fickle thing).
Domestic companies get a free pass even if their cars literally kill people. But rules are different for foreign companies.
I probably shouldn't have said PHP, since people have reactions to that language that may confuse the issue.

I should have said stateless Python front ends. Not even CGI/FastCGI, but just plain HTTP front ends. Many large websites use this architecture (YouTube, Instagram, etc.)

An example of something that doesn't follow the architecture is a stateful node.js or Go server.

I would say that the typical web architecture is similar to what they are talking about, with the benefit of existence :)

But you're right in the sense that they are trying to be more strict, starting on page 50:

- benefits for state -- avoid useless accidental state. This is the same philosophy behind SQL.

- benefits for control -- They are being more strict here, but I think it is missing a lot, because sometimes you need control flow.

- benefits for code volume -- I would need to see a real system to evaluate this claim. It's not fair to compare systems that exist with ones that don't :)

- benefits for data abstraction -- SQL agrees here. You don't abstract data. People sometimes make this mistake in their OOP languages, but's incidental.
The former please - it's been my experience that switching from Verizon to AT&T is somewhat easier than a bloody revolution.
If losing your job over something unethical is wrong, I don't want to be right. I would never be able to trust my employer again either way.
> and user_pref("taskbar.grouping.useprofile", true) so that I get separate icons in my taskbar for each profile

Thanks for bringing this up. It was bothering me.

Here are specific instructions on how to do this, for the curious: https://superuser.com/a/1050664

And in case anyone's curious about changing the icons of the different profiles in the taskbar, there's this: https://stackoverflow.com/a/24398229
It shares a fraction of one property with IE6. It's nothing like IE6 in all other respects.

A quick refresher for those that perhaps was not around in those heady days: to build even moderately advanced (dynamic) web pages that were cross browser compatible was not merely a question of remembering to test in both, it was a significant engineering commitment. To add to the badness, Netscape in those years was frankly just not a very good browser, so it was not a particularly easy sell. Thus a lot of apps built in those years only (and quite rationally, too) targeted IE4, 5 and finally 6, Microsoft being very focused on backwards compatibility. IE7 was the first browser standards compliant enough to make cross browser development reasonably easy, also being the first browser in the line to have to compete with Firefox. It broke backwards compatibility, which is why IE6 ended up hanging around for so long and being so hated, even if was the DHTML API of IE4 that was the original culprit.

Today, there is no good excuse to build web apps that does not work in all the major browsers, it's just so (relatively) easy. But that was emphatically not the case 15-20 years ago.
This is a bug in a fork of bitcoin.

It shows how bad things can be if you don't use development practices that are appropriate for the project, but it doesn't show anything at all about how actual bitcoin code is developed. This is about a fork (that never ended up happening).
The confusion seems to be an AFP story conflating two separate programs. The AFP story mentions Mozilla at the same time as an organization called Full Fact, that has a product that does automated live fact checking. It was initially designed for use during televised political debates, where it could show "correct" and "incorrect" warning popups on screen in real time according to what was said:

https://phys.org/news/2017-08-mozilla-fact-checker-fake-news...

(Apologies for the awful link source, I can't find a primary AFP link. Several other sites that have published the same identical story.)

Full Fact does appear to be a real organization, they claim to already work with the BBC, Guardian & other media partners, as well as Google. Some of the controversy seems to be over their grant funding from Omidyar Network and an organization founded by George Soros. (Whether that's a reason for concern, I have no idea.)

https://fullfact.org/blog/2017/jun/automated-fact-checking-f...

https://fullfact.org/blog/2017/jun/awarded-500000-omidyar-ne...

https://www.theguardian.com/technology/2017/aug/08/fake-news...
Thanks, the link you posted clarifies that what they are doing at this point is "researching" ways to combat fake news. In practice, the solutions I could imagine them coming up with would be either outright blocking / de-ranking, or preemptively labeling certain sites / articles as fake news. I hope to be wrong on both of those counts.
Is that why America's private healthcare system costs more than any other country and yet we do not have any where near the top outcomes?

What statistics are you cherry picking to make your argument?
You’re really not in a position to speculate about someone’s mental health state.

Furthermore, the manner in which you’ve phrased your response is going to be counterproductive to the person to whom you’ve communicated your perception, at the least. You’re projecting your own social norms and worldview onto someone else in an ostracizing way.

This is actually a really telling microcosm, how you’ve decided to respond. It’s indicative of the chasm between people like you and the poster to whom you’ve responded, a chasm that goes beyond any simple assessment of a mental health condition, all the way to elucidating a fundamental issue with the manner in which mental health issues are identified and handled in society.

The way you’ve represented the other poster is that he is odd, unusual and that your way of thinking should be the majority consensus view (at least you hope so), and is the socially acceptable way. You’ve alienated the poster with your phrasing.
It's a jpeg in a resolution so poor it is difficult to read what has been highlighted. So no, can t explain it at all.
I've seen something similar — because I turned off auto playing videos. Manually scrubbing the video forward and back seems to fix it for me.

It's also not that surprising that Google has less of an incentive to test interoperability with their competitor's product…
True, I was thinking of NetBUEI/IPX/AppleTalk/etc.
Firefox has about:profiles; they work much the same but don't have as good a UI.

I prefer Container Tabs, which basically let you have profiles on a per-tab basis. So you can have some green tabs, some yellow tabs, and some pink tabs, and each is effectively a separate profile cookie-wise. This is a built in feature but I recommend using https://addons.mozilla.org/en-US/firefox/addon/multi-account... since it enhances it.
If we have to choose between direct government control or government-endorsed cartel control that will just ease towards full monopoly sooner or later, I would rather just skip to nationalization so we can start talking about how we reprivatize it in a new, competitive fashion.
Security Guidelines for Congressional Campaigns
Gopass, the 98% `pass` compatible password manager with a lot of nice improvements on the UX side:

https://www.justwatch.com/gopass/
https://github.com/justwatchcom/gopass
Waiting for High Sierra optimization and totally ignoring everything else for browsing. Ideal choice for old os X installations. Running it on Mavericks was a blast.
https://i.imgur.com/syMwVDT.png
Oh come on.

We've been pushing this since IE6 ruled. :-)

Cross browser compability should be easier than ever so it should just be a matter of being a professional developer.
I feel the company's modus operandi is to have easy and cute UX to simplify using security tools.

Their VPN software is apparently very easy to use (from reddit comments). The same will probably apply to the password manager. They also seem to have a good marketing and PR team since I see them around quite a bit in youtube videos (Linus' being the most prominent one) and ads thinly veiled as articles. These two points alone have the ability to make the difficult mainstream user market to use it.

If all your security tools had similar UX and only a single login (what we see as single point of failure is usually seen as convenience), then you'll get many people to use it.
probably users flagging it, given the topic (already heavily discussed political topic, submission adding no new info to the debate) and that previous submissions of it had been flagged completely. If you want an authorative answer, e-mail the mods.
Okay, that's maybe true. (Although I'd say if they're sufficiently similar I'd probably just base it on price rather than being indifferent.)

But you've added the qualifiers 'in a store' and 'basically the same kind', and it's still not really describing fungibility, is it?
It's got to at least be in the top 3 problem-domain-specific vulnerabilities you can have in a password manager, that's at least for sure.
> I would concentrate on making the codebase flexible, but that's about it

Arguably that's the property of good architecture. Standardizing your entire codebase also works, but only as long as those initial standards stay smart (1), and even then, that relies on discipline, tools, and incentives that are typically not all in place.

(1) A standard might be "all webservers will be written in Java 6". The benefits of choosing that standard tend to be front-loaded with a gradual decline into net-negative with no affordable path to a better standard.
Mozilla ain't what it used to be: http://www.zdnet.com/article/firefox-tests-cliqz-engine-whic...