skysight-inc/HackerNews huggingface dataset:
Wow, after all these years I finally learned the name of this phenomenon, constant bearing decreasing range.

I recall a scene in the movie Sin City where two cars crash and the camera was moving in CBDR to the perpendicular car as it zoomed into the impact site. I thought it was a cool shot.

Also I’ve almost hit pedestrians several times when they were obscured by my A pillar. Sometimes I wonder if I would have actually hit them if anyone would have believed I didn’t see them, now I know the proper term to describe the cause of such an accident.
Interesting, definitely looking forward to the details, and great to see Let's Encrypt react this quickly even though this might cause a small amount of disruption to users.

The latest ACME draft - mostly referred to as what will become ACME v2, which Let's Encrypt supports on the staging environment as of a few days ago - has a slightly revamped version of the TLS challenge (tls-sni-02). The TLS-SNI challenge works roughly like this: The validation (CA) server sends a "fake" SNI hostname, generated by the CA server, to the IP behind the domain the CA is trying to validate. Domain control is assumed to be given if the server responds with a certificate that contains the CA-generated hostname in its SAN extension (where certificates store the domains and other identifiers they're valid for).

One of the concerns people had with tls-sni-01 is that it made it possible for a TLS server to "solve" such a challenge by effectively echoing back the requested SNI value blindly. This was changed in tls-sni-02 - just taking the SNI value and putting it in the SAN field is no longer enough to pass such a challenge. Until now, there was no reason to believe anyone was running TLS servers that showed this behaviour, so the was no real rush to deprecate tls-sni-01 right away (as opposed to just rolling out ACME v2, which only has tls-sni-02). I wonder if someone's found a lot of TLS servers that turned out to do this, or if there's some other vulnerability in the design or implementation.
New North Korea Hack: Hijacking Computers to Power Cryptocurrency Mining
Well it is a separate package because it is fundamentally independent of the kernel. For example, your Debian system might want to use a different kernel like GNU's Hurd, kFreeBSD, or NetBSD, so by keeping those packages separate, they can easily be used interchangeably. Also if you are on an AMD system, you wouldn't want Intel microcode, but you might still want the same Linux kernel.

Also another big issue issue is the Intel microcode is proprietary, so separating it from the kernel means that user could selectively pick and choose if wants to have a totally free system, which would mean not loading microcode updates with a libre kernel. This is done for instance with Parabola and Trisquel distros, which is needed to obtain FSF's totally free certification.
Australian tax assessments for some HFT firms 2015/16
This (https://www.quora.com/Were-carriage-accidents-more-or-less-c...) had some links and summarizes them as motor vehicles causing 40% more fatalities (in 2014) than horse carriages in 1907-1911. That's in the same ballpark, anyway.

You can argue the specifics, but it seems modern recreational horseback riding is fairly dangerous. http://freakonomics.com/2006/08/28/whoa-nellie/
You went from student to retired in 3 years? Damn son
One never actually runs a Turing machine, they exist only for the purpose of argument.
And that's what's so twisted about secret indictments. Straight out of Kafka.
The issue I believe with stories, is that Instagram allows metrics and snap does not.

Sure you can have 100k followers and say "80k people viewed my advertising story", but it stops at that.

Instagram provides deeper metrics and analysis which can help justify the spend to advertisers.

This is why a lot of Snap marketers have pushed their content to Instagram so they can get a better pay-day.
Show HN: Go version of HighwayHash with optimized assembly implementations
How I Reverse Engineered Google Docs
Why does this junction not have a roundabout? Would having one there reduce the chances for a crash by forcing vehicles to reduce their speed when approaching the intersection?
Page Table Isolation has been backported to 4.14.12, so no need to test with the rc.
Unless there's a significant discussion in a previous submission, this sort of comment isn't particularly useful.

HN's collective choice in what to promote / demote is exceptionally fickle and happenstance.

Rather like success in the SV start-up world.

In both cases, backing a winner is generally more rewarding than doubling down on an attempt which, through no fault of its own, has failed.

HN also periodically give a second chance to submissions deemed high quality. So you've got that option as well.
> Practically speaking, is there much difference between government backed censorship and online mob justice censorship?

1. You can't sue a mob for justice

2. You can't convict or fire a mob.

3. You can move to somewhere where the mob isn't.

More neutrally:

4. Mobs are crowd-sourced. Government censors are appointed experts of some sort.

5. One rouses and incites a mob. One lobbies and corrupts a government.

6. Mobs aren't constrained by things like double jeopardy. The U.S. government is.

7. Mobs tend to be more situational than government rules. Mobs don't care about boring things, niche things, technical things, or sympathetic perpetrators.
What's really interesting about SAC is that it's less than 10 years away from "Dr Strangelove" (1964). I think the thought of another "1960s" keeps most governments of the world up at night.
The problem with VC money is that you are likely taking on powerful investors / co owners that are unlikely to have the same goals that you have (or should have).

VC money comes from those that have already become successful. So they are pushing for a strategy that will cause the majority of companies to fail but with the small chance that one will become the next Google, fb, etc.

Most founders can't afford that methodology. They should be looking to build a good company with good cashflow that can earn them a healthy nest egg and make them wealthy. When was the last time you heard of a VC that wanted good dividends from their portfolio companies?

So yes, if your goal as a founder is to build the next unicorn and you are willing to risk everything on that small chance to make it super big, then you should go the VC route. Problem is, you have one company and one life, so you better hope your company is the one in 10 that have a profitable exit.

Or maybe save yourself some time and just go buy lottery tickets.
Looks like Ted Unangst was right?

https://archive.is/VZrOS
AFAIK, that's referring to AMD microcode, not Intel. The problem with reverse engineering modern AMD and Intel microcode is that the updates are signed and encrypted, so you can't do the necessary probing to see what's going on under the hood.
Google Python Fire – Generate CLIs from Any Python Object
The way your responses read, you would think this article was some kind of hit piece on your programming skills. Not only is (to my eyes) no slandering or insults to anyone going on in this article, but the only one they call an amateur coder is Rob Dubbin. The name Jason Livesay doesn’t appear anywhere in the article.
In addition to what was already mentioned, it's also to be polite. Imagine if Caddy and other clients already did what you suggest: Let's Encrypt would suddenly be receiving ~50% more traffic during an already-stressful time. When we were first integrating ACME into Caddy, traffic spikes like this were a problem (for other reasons, long since fixed), which we now are very sensitive to avoid.
My ADT pulse login Canada – how do I pay my Bill?
Let's check ADT pulse login help and customer service number. The ADT Corporation is an American Company that provides residential and small business electronic security, fire protection and other related products. But here we get a guide on pay my ADT bill online or My ADT pulse login steps.
Online mobs can make you lose your job if you're working for a company with sufficient media exposure and insufficient backbone, but governments can make you disappear whenever they please. Practically speaking, that's a huge difference.
What hourly/daily/weekly rate were they paying you? It sounds like it must have been low if you weren’t able to save money.
Try 1 TB/day and you'll definitely get an analgesic effect.
Care to explain your reason(s) for disappointment, and/or posit a sensible alternative for consideration?
I dont know of any, nor did I say I did. But thats not what we're talking about. We're talking about a phone battery that lasts >5 years without degrdading to the point that it's causing random shutdowns even when the battery has a lot of juice left.

These batteries are in pretty much any other smartphone.
I find some irony that my content blocker app blocks the guardian’s article about ads.
I'm skeptical that Google divides its revenue and investment up in this way and that more search ad revenue allows Google to invest more in search.

I'm sure that Google is already investing the amount they need to in search to make it as profitable as possible.

It seems that more search ad revenue allows Google to bank roll the rest of the Google/Alphabet behemoth on projects unrelated to search, but within its mission to "to organize the world's information and make it universally accessible and useful" ie. to know everything about everything, which I'm sure tracking plays a role in.
The Impossibility of Knowing Mark Twain
How knowing computer scheduling algorithms can help us to be productive?
There's a lot of math in this article about blind spots and car pillars and whatnot, but a Google Maps Street View appears to show the terrain and brush blocking the view on approach [1][2], making all of this math largely moot. That the drivers in question didn't even so much as slow down for this approach is beyond reckless, aside from the other lawbreaking that followed.

The 'Give Way' sign is idiotic, put a Stop sign on the other, flatter road, or make it a 4-way stop. The drivers causing accidents were blowing through the intersection, and shame on the wording of the law that they were able to weasel out of harsher punishment.

Altering the roadway geometry, either as proposed, or more drastically with a roundabout, is a brute-force solution on this country road when other societal measures don't suffice, but it seems that there's plenty of room to enact other changes before you dig up the road.

[1] https://www.google.com/maps/@50.8638239,-1.4511249,3a,75y,26... [2] https://www.google.com/maps/@50.8634141,-1.452595,3a,75y,269...
Forcing drivers to make left turns just to stay on the same road is a recipe for more car accidents. The proble could be resolved simply by putting up a stop light.
> in France, you’re graded out of 20; but at the high school/college level, if you have an average above 15/20, you’re most certainly in the top of your class. In fact, in some top tier universities the class average might be 8/20. In grad school in the US, I had a 90%+ average, and routinely got 100% on tests - something just completely foreign to me

For many years Denmark (where I come from) had an official grading scale from 0 to 11. And then 13, not the usual top grade, but reserved for rare occasions of unique, original, outstanding performance completely outside the norm.

Alas, some years ago this system was scrapped, officially because "abroad" (meaning to a large extent the US) didn't get it. When Danish candidates turned up with their perfect 11-scores, they were reportedly often handicapped by having not a single top grade.
A microcode update is applied directly to the processor, typically during the boot process, and is a common practice to fix CPU bugs. It changes the microcode running on the hardware itself.

This is totally different from the kernel PTI fixes, which attempt to deal with Meltdown by changing the way the operating systems for Linux/Mac/Windows/DragonFly (and hopefully soon *BSD) interacts with the hardware and page tables.

Also you're making a statement without the above comment even stating if this update is designed to address Spectre or Meltdown.
Not if you don’t have any friends! Boom, problem solved.
sci-hub.bz
I'm not an expert, but the autocert package appears to support both tls-sni-01 and tls-sni-02.

The title of this HN post says "tls-sni-01" is disabled, but on the linked page it says "tls-sni challenge disabled".

So I'm confused. Is tls-sni as a whole disabled? Or just tls-sni-01? If the former, then I don't think package autocert will continue to function. If the latter, then autocert users should be okay.
Did you not read the article? There was no solution except to throw one’s hands in the air and proclaim human error.
> Nah, that's not what OP's talking about. OP's talking about services we use on smartphones mostly - WhatsApp, Google Maps.

No, I'm talking about the entire ad-funded internet. Including, for example, the very Guardian article we're discussing.

So yep, you're suggesting that tszyn's mom should not access content she can't pay for directly.

You forget that most people isn't as rich as you or most HN readers.
+1

>because the VC-funded companies you named are so successful at dominating our thoughts, conversations, and news feeds (HN included)

Right - HN's corporate sponsor is YC Combinator, so it's kind of inevitable that the VC narrative dominates.

The good thing about Indie Hackers being acquired by Stripe in April [0] (congratulations!) is that, even though you now have a corporate sponsor too, in the short term at least nothing really changes.

You wrote that

>Stripe wants to grow the GDP of the internet

so having 1,000,000 Indie Hackers starting companies is completely aligned with Stripe's corporate interests and that at least provides a counterpoint to HN and YC Combinator.

Further out, if Stripe Atlas grows big enough then we could end up with an Amazon Marketplace situation where small companies are forced to take whatever terms "Darth Vader" (#patio11) offers.

But we're a long way from that point yet.

A 3rd way is not to start a business at all. As Vincent Woo said in his recent podcast with you [1]:

>Right, so readers at home, if you can start a business, do that, but also maybe don't. It's not easy, it's a lot of work and there are a lot of things that valuable in life that have nothing to do with money, that's how I'd put that.

[0] https://www.indiehackers.com/blog/acquired-by-stripe

[1] https://www.indiehackers.com/podcast/041-vincent-woo-of-code...
Okay, Sorry for my `Gish Gallop`. I am not trying to deny the censorship, in fact it's to blame. And there are better examples to follow. many people dislike that and I pointed out problems in censorship and regulations of movies production in China. But I have seen quite a few directors in China who can't produce great films then just blame the system while others successfully put political metaphors in films which is more artful than name-calling.
Seeking contributors/users for a new JavaScript Library
If the goal is to maintain speed through the intersection they could have built a bridge to overlap the other road.
The premise Google is responsible for the issues he mentions is demonstrably false.

AMP's foundational tenents don't include Google Search is the one and only search engine. Bing and Microsoft's apps have been using AMP publicly for 1.5 years, with Google's help and support during development.

The comments after are Apple bugs, not issues with Google or AMP. To wit, the AMP foundation hired an open source consultancy 6 months to bring WebKit's frame implementation in sync with modern browsers, which also fixes the scrolling issues. See http://frederic-wang.fr/amp-and-igalia-working-together-to-i...
Yes, but wouldn't the fact that it's not totally anonymous discourage people from saying whatever they want? Like, self-directed censorship.
Feel free to ask for definitions!
FreeBSD isn't two people in a garage, it's a foundational part of the internet developed by professionals who can be counted upon to do the right thing.

Intel and Google don't have a leg to stand on: I'm super glad they found the bugs, but their disclosure has been nothing but a shitshow.
(I'm explaining the dream here. If I knew what I was talking about, I would have done it.)

If the blockchain community gets the contract/language issues sorted out, a small dev team could knock out a first-stage system like the fisheries system in three months and in two layers of technology (contracts, oracles). It would be trivial to operate and resilient to server failure (less-so the oracles). Ten years later, it would still be just the same two layers of code.

In this world, contracts make custom APIs obsolete. There is a new career path for a developer who lives and breathes async contract code.

The way of implementing such a system now is db-centric. Business problems tend to be event-driven, but databases are not. So we need many more layers of technology: ERD, stored procedures, 'backend', partner API, hosting complexity, business continuity complexity, further layers to assist support and deployment and API onboarding.

The database company takes on a life of its own, it is expensive to fund and delivers a bad customer experience.

So the thing that blockchain adds: you will able to reliably build significant systems with two-person teams in domains where we currently struggle to do adequate work with firms of twenty or forty people. We will be able to engage with more complex domains than we can at the moment, and there will be network effects from this.
> Or just people with money should be allowed to have access to content?

>>That is the case for pretty much everything non-digital and schools and education as well and thus an entirely reasonable position to take.

Please explain to me how "just people with money should be allowed to have access to content" being "an entirely reasonable position to take" doesn't fit into that?
There are startups out there running their whole backend on products like graph.cool and have no need for an ops person.

And they are building their app in react native with one developer (which can then be launched in iOS and Android simultaneously).
I say it'd always best practice to update things via the standard package manager. I'm sure debain/RHEL/cent repos already have updated kernels for the PTI fix. Unless you are seriously hitting hard performance issues with the new kernels (there's nothing in the firmware page that says if this is for Meltdown or Spectre, or did I miss it?), wait for your distribution to update its linux-firmware package.

People on the unstable branches will get to test it first and give appropriate feedback before it gets marked stable, and there will also most likely be a delay before a kernel is released that re-enabled PTI (once again, if this is a PTI/Meltdown fix).
First rule of cycling: assume drivers don't see you.
My first exposure came from a relation of Werner von Braun witnessing a V2 launch or test. In one of the rare instances where von Braun did care where they come down,[1] he observed that the bearing to the rocket was constant -- that is, its course would bring it directly to his location.

He avoided death by diving into a ditch, if I recall. I think the story was told by Arthur C. Clarke.

I'd later encounter the concept in sailing training.

________________________________

Notes:

1. Allusion: Tom Lehrer. https://www.youtube.com/watch?v=TjDEsGZLbio
Well, IC3A and IC3B are just functioning as inverters ...

The thing with the bubbles is probably an old technique that we used to use called "pushing circles".

You can shove all the circles on one side of a logic gate to the other side of the logic gate by exchanging the gate type (AND->OR, OR->AND).

And then you can ignore lines with two bubbles in series (ie. a double inversion).

There are a bunch of tricks that we used to use when you had to do everything on graph paper. It's actually a good thing that they are lost to the mists of time as it means we have progressed enough that they don't matter anymore.
Really? I thought they were still denying that this is a flaw, and not, “working as intended.”
Part of our bubble is that at times it's been "more than 100% efficient", so to speak.

Witness dozens of TV shows, "You guys had $50K for your reno budget. Your original value was $250K, and you spent $50K and now your house is worth $350K!"
Good write-up about a phenomenon I’d never expect to matter in a car. In aircraft it is the norm for mid-air collisions to occur this way. For example, https://en.m.wikipedia.org/wiki/Hughes_Airwest_Flight_706 but there are many others. Aircraft in the US now have autonomous transponders broadcasting their location to each other. The author overlooks this fact since the “pilot training” to avoid this problem actually does not work very well. The pilot training is to take advantage of services that can alert you to other traffic, such as Air Traffic Control.
A vehicle doesn't have to be obscured by the pillar for you not to notice it. If you're both moving at a constant speed, anything on a collision course will have the same bearing and appear relatively motionless. If you look left and right, your eyes might saccade right past the target.
Actually, it worked brilliantly. He timed it right with the September China fud and probably picked up some coin right at the 3k low on the dip on that news.
Did you not read the parent's remark? My comment was directed towards discussion of article's proposed solution, not resolution.
tls-sni-02 is not supported on the production ACME server. It is part of the latest ACME draft (ACME v2), which recently got deployed on Let's Encrypt's staging server, but the certificates signed in that environment aren't publicly trusted.
Nano Review – a microblog for summarizing interesting academic papers
Oh, I am, but maybe you're not understanding the scale of the internet. Connections, cables, CDNs change on a daily and weekly basis.

Is a cable is cut between Jakarta and Singapore, it can take months to fix as Indonesia only allows Indonesian-flagged cable layers to operate in its waters.

Individual datacenters, CDNs, cables are going offline constantly, so you'd need to be continuously testing every site to rank it correctly. Not only that, each page in a site might have a very different structure, so you can't just rank a site, you need to rank individual pages and articles too, which means testing every new page and article from every city.

I guess you're not getting the scale of that...

AMP standardizes the CDN serving part, largely eliminating that issue. AMP articles can't prevent 3rd party CDNs from caching them, which means that they can be served from the closest CDN after the first time they are used.
Yes. However, none of those laws prevent you from firing someone who is creating a hostile work environment for your other employees.
Is intel-microcode not part of the linux-firmware package on Debian based distros?
The Basic Ideas in Neural Networks (1994) [pdf]
For LetsEncrypt, the acme-v01 API is the only production endpoint as of this time [1], which only supports the -01 version of tls-sni.

[1] https://letsencrypt.status.io/