skysight-inc/HackerNews huggingface dataset:
One of the reasons it is hard is that most error reporting on certificate authentication is horrendously bad and there are a lot of ways it can go wrong. Dates can be wrong, the CN field can be wrong, the server or client might not agree on the quality of the ciphers, user can install the cert in the wrong place or with the wrong options, etc... If any of this goes wrong all you get is a "cannot connect to website" error and maybe if you're super lucky an error in the web server log like "certificate failure". For security reasons they never tell you what the actual problem is and just assume that the user must have a PHD in cybersecurity because they're trying to do crypto on a computer, so it should be no problem for them to check the thousand different possible failure points in the system.
To underline this, here's what happens when something goes wrong with an ejector seat:

http://www.bbc.co.uk/news/uk-england-lincolnshire-37475298

We probably won't ever know how many people died as a direct result of the Hawaii BMD mis-alert, but I'd be surprised if the number was non-zero (think in terms of car crashes, stress-aggravated cerebrovascular accidents, and so on).

Similarly, consider the warning signage deployed around high tension electrical substations, and the consequences of ignoring it or failing to understand its significance.

The point is, in these types of situation bad design can kill, and we need to design accordingly and unambiguously.
The same way you share any of your other data across servers. Save it in a DB or Redis instance that all your servers can reach.
Maybe it spread from the sacramental bread eat in church ...
As an EM, if I were asked about a segment tree in an interview for an EM position, it would signal to me that I do not want to work for that company.
> Is this out of the ordinary? Absolutely not.

I have not seen UI where there is something that appears to be a link that spans an entire line but it is actually several separate links.
> So what, the site could route you through a server side proxy anyways

There's little interest in proxying through a token system (this would require a DB read at each click, and a DB write at each page generation), which means the actual link is available client-side and the whole thing can be bypassed.
A Primitive Reflection System in C++: Part 1
SSL client authentication usually winds up authenticating physical devices similarly to SSH keys, but there is near zero infrastructure simplifying/protecting/distributing a single software certificate for an individual user (especially non-technical users!) across multiple devices -- and this is really complicated by mobile devices. (Enrolling a new cert on every machine is an exponential management nightmare.)

SSL client authentication is widely used by the US military on smartcards requiring additional hardware readers: https://en.wikipedia.org/wiki/Common_Access_Card. AFAIK using a smartcard doesn't work reliably on Mac without installing 3rd-party software. The difficulties of usage in practice has spawned a cottage industry of commercial software and support, like http://militarycac.com.

I assume companies selling end user hardware tokens like YubiKey would love to see client certificate authentication become more usable, but initiatives like FIDO U2F seem to be gaining momentum instead.
If I have the same name as a historical person, should I be barred from using that as an username? While it is unlikely that /u/AlanTuring has that name in real life, the probability of such collisions would become a lot higher if HN decided to block usernames of prominent mathematicians and scientists.
Message from Meltdown and Spectre: Create a Patching Strategy
Micropatching Brings the Abandoned Equation Editor Back to Life
So what do you think of the posted project?
I wouldn't worry so much about it. This is an opinionated group, and having a different opinion is sometimes not taken well, but it is good to challenge the status quo, and good to not be part of groupthink. If you stand by what you said, take your downvotes with pride.

On the other hand, claiming something that isn't true, or being flippant or not contributing to the conversation will also result in downvotes. And those are probably a good guide of how to adjust your communication style to work better within the group.

I have no idea what your original comment was, so I don't know which of those scenarios is the case here.
Vaporize. Smoking is bad for you, and dehydrates you.
Across all 13 colonies, sure but Massachusetts might have tilted more heavily towards independence. Googling around quickly (because this is just a petty comment thread after all), there's a NYtimes OpEd that said it was more like 40+/20-/40abstain but then other sources indicate Massachusetts was far higher. Again, having the lion's share of rebellious acts, notable incidents, and the focus/ire of Parliament.

I'm not sure anyone thought to take a scientific poll. Obviously the Patriots were in favor of it: https://en.wikipedia.org/wiki/Suffolk_Resolves
They should have added the captcha's with the store fronts. That alert would never get triggered unless it were truly needed. It would be 15 minutes late though every time
From the side bar next to the article:

> Who's the pretty girl with Cringely? Learn more about Anina and 360fashion

Both provided links are dead, but I was able to find a Wikipedia page:

https://en.wikipedia.org/wiki/Anina_(model)

Looks like she is (or was previously) a model.
JVM JIT compilation as a way of performance optimisation
> Does it keep a copy somewhere and check against it on every request?

Yes. The last time I did this we checked the X-Token header on every request, if it didn't exist or there were multiple we replied 401. If only one was there we checked a DB table of active tokens, if it wasn't there or had expired we replied 401. If it was there but wasn't associated with a role that had access to the requested resource, we replied 403. If it was not expired and had access we continued with the request.

As soon as you get away from "check authentication on every request" your attack vectors increase. As a bad actor, I no longer need to bypass your authentication, I just need to bypass whatever system you have in place to decide whether or not to authenticate me. That's generally going to be easier.
I have worked with systems that use it to authenticate machine to machine communication (e.g. a web backend authenticating itself to another service doing work for it). In that environment it works well.

Using it to authenticate a person regardless of device doesn't work so well from a usability point of view.
Startcom does client certificate authentication.

The hassle is that you need to install the certificate on every device you want to access the page from.
Top 5 PC Inventory Software 2017
I think we're going to see less of this due to IPv6's design, renumbering is less of a pain than it was with IPv4 so instead of splitting off a route in the middle of your address space and bloating the BGP table you can just move to a different subnet entirely.
Spotify will pay Banks to cut out the Banks
I'd suggest telex, your downloaded content is automatically backed up on paper.

:)
> I was always wondering why no one has started using 6/7 doors for loading/unloading.

I can answer your question with a question, name an airport with that many jet bridges at one gate.
Anthony Levandowski Faces New Claims of Stealing
Wonder how complicated a CSS Parser / White-listing extension would be?
I can't even find a simple listing of the new Kazakh alphabet anywhere, nevermind the experts' recommendation(s)…
We let you set a target portfolio with your targeted allocations. Then...when some assets outperform others, we push you the buys/sells needed to get back into alignment with your target!
You can see the indentation if you use w3m. HN uses tables to structure the comment hierarchy, and the w3m browser does a pretty great job rendering tables.
Goodbye Instagram, hello Ello
You're essentially paying people to dig holes and fill them back in again. Modern agriculture is a highly skilled job done with millions of dollars of capital equipment. Unskilled laborers are more hindrance than help, and will be sent off to the "back 40" to indulge in mindless busywork.

And you expect people to get "Social responsibility, sense of purpose, community, meaningful ways to spend their time" from that?

Meaningless jobs invariably turn into that special sort of hell you get when your ability to do politics and to step on the guys below you are much more important than any actual skill or ability.
When I was still in school I used Leaflet for a product and I remember being really impressed by it then. This must have been around 2013. I scripted huge AutoCAD exports with AutoLISP and sliced them up with ImageMagick to make custom zoomable maps of schools and hospitals. They would be annotated with BIM data and used for utility inspections. I'm glad to see it's still alive and kicking!
Stallman of course.

> I usually fetch web pages from other sites by sending mail to a program (see https://git.savannah.gnu.org/git/womb/hacks.git) that fetches them, much like wget, and then mails them back to me. Then I look at them using a web browser, unless it is easy to see the text in the HTML page directly. I usually try lynx first, then a graphical browser if the page needs it (using konqueror, which won't fetch from other sites in such a situation).

https://stallman.org/stallman-computing.html
The site seems to have render errors on Firefox (57.0.4, osx 10.12.6): https://i.imgur.com/6oKH7Jw.png

Anyone else see that?
Having the UBI conversation in the context of the US is frivolous. The US has no populist or labor presence. We'd need 5-10 years of building that presence before we could even begin to talk UBI, and even then there'd be a lot of obstruction.
What should have happened is HI reassigning the manager of the said worker, and the manager who signed off the design of the said screen, and their respective managers.

Finding scapegoats is easy. Fixing the problem with hierarchical bureaucracies is not.
eh... why should I need a "serverless functions platform for Kubernetes"
especially since I actually need servers for kubernetes.
and I can probably do most stuff way easier than having a framework on top of another deployment/app scheduling framework.
>The point of the U in UBI is that you can discard the expensive bureaucracy.

Has there been any research into how to set up UBI that actually remains politically/bureaucratically stable? It seems like any implementation would be extremely vulnerable to media cycles highlighting the plight of some poor single mother who didn't spend her UBI wisely and now can't feed her kids, or a rich billionaire who pocketed his UBI rather than giving it to charity. It doesn't matter how infrequent these cases are, it would happen a nonzero amount of times and that's enough to get media stories trending about it. In the face of that, people would start wanting to build in exceptions or adjustments, at which point you end up with the expensive bureaucracy again.
Wishful thinking, but today the web is clearly, obviously not a simple document retrieval system.

It's now an application platform regardless you like it or not.
Anybody here who can explain whether this limitation is specific to appear.in, or whether it's an inevitable consequence of WebRTC's design? Do the audio streams get mixed client-side under WebRTC?

I use appear.in all the time for small meetings and love it. :)
Also founders have shares. Employees get options with some crazy three letter types. They HAVE to pay in advance to get even those 0.0001% of shares after dilution. Not only that but they have to conjure that money in what, 3 month term, 1 month? I don't remember exactly.
> Surely the alert should be sent automatically when the anti-missile system is engaged?

This is a civilian system. Detection and anti-ballistic missile systems are military, specifically NORAD and the MDA. I agree that NORAD should have an API, though I suspect integrating it with civil defense systems will result in more such mistakes in the short run.
React router supports a similar pattern to Express, although they seem to be called "protected routes" [1].

[1] https://tylermcginnis.com/react-router-protected-routes-auth...
I completely agree and I think that if you take care of the people they will take care of each other (team). So when you've built a well oiled team that trusts each other the company benefits as well as they will be more productive and play well with each other.

I also am not an engineering manager.
There is also https://hook.io/ which is a similar open-source platform that's been running for three years and has over 142 million deployments.

I'm using this service everyday, also I created it.
2017 Personal Annual Report – 7 years of transportation expenses
But I'm thinking especially about things that that we all should have a natural claim on, like land, minerals, radio spectrum, etc, etc.
In the this case nuclear alert it should be a big red button with a locked cover - do we know how many people died in the panic due to traffic accidents, heart attacks etcetera
> Both provided links are dead

HTTP works, HTTPS does not.
Not necessarily. Colorblind doesn't mean "everything is grey" it means you have trouble distinguishing between between a few, usually fairly specific colors. There are plenty of color schemes out that that are perfectly fine for colorblind folks, especially when you only need 2-3 distinct colors.
I have to disagree with the primary point being offered up in this post. In my career I’ve met quite a few network engineers who don’t think sufficiently outside the box. They typically say “this is how it’s done, this is how it works.” The idea that we can’t come up with a better protocol than BGP to manage the interconnections of the Internet is absurd. We don’t say “well security isn’t a programming problem, it’s a human problem, so there’s no point in making safer programming languages.” BGP is a ridiculous system of complete trust just like many older protocols.

If we sat down and started designing a routing protocol to handle the advertisement of routing tables on the internet, would we come up with BGP again? Would the new protocol potentially offer up fixes for some of the most common and obvious problems with BGP? Then there’s potential for improvement.

The network industry resists and slows the horribly needed disruption in several key areas through the dogmatic defense of the status quo that we typically hear from its constituents.

This is why so many of us pray for SDN. It’s the only way to wrest control of networking away from those who typically have dogmatic vendor based training rather than a “network science and theory” education that leads to innovation.
In my opinion, people will get more "Social responsibility, sense of purpose, community, meaningful ways to spend their time" playing Call of Duty all day under some sort of BI program than they would from a UBJ job.
It's actually a neat story. Infoworld magazine made their authors write under pen names to prevent them from building up personal brand and moving to different publications.

Mark Stephens built up a following under the Cringely name then left in a financial dispute and wanted to keep the name. There was a lawsuit, for a while there were two people writing as Cringely.

https://en.wikipedia.org/wiki/Robert_X._Cringely
Also jet pilots have years of training whereas users are presented to "intuitive" interfaces where they have no reason not to push every button just to test them out.
I've been experimenting with using the server's public SSL key as a client certificate to authenticate self-hosted and cross-server web service requests since the cert should be available at runtime in common enterprise setups yet incentives align to keep it well-secured.

I would appreciate pointers to any open source libraries demonstrating best practices and/or promoting this approach, specifically protecting against replay attacks and race conditions that come up as the cert is renewed (much more often - thanks Let's Encrypt!).
What stands out to me the most is lack of standard naming conventions...

> 1. TEST Message

>> DRILL - PACOM (CDW) - STATE ONLY

>>> Amber Alter DEMO TEST

Design aside, a standard naming convention would have gone a long way.
Google denies reports that Google Maps relaunched in China
Why not just make them type the message out manually every single time? Why is it a good idea to offer options at all?
This idea of shared equity ownership is a nonstarter since equity is only created when people pay for it

No, this is equity in real things: land, timber, minerals, clean water, road access, electricity etc. Your company wouldn't owe anybody any shares. Your land value taxes, however, would be distributed to everybody equally. As would the proceeds from your utility bills.

Ideally, you would pay back exactly your share of the net externalities your company benefits from. That may be very hard to calculate in practice, though.
That's probably why they released this cropped screenshot. It wouldn't surprise if the site is accessible on the public web and secured with a weak password that must be changed weekly.
Use different colors
If anyone isn't familiar with the WPA (mentioned in the article), it is worth reading about it: https://en.wikipedia.org/wiki/Works_Progress_Administration
What do you think a template for professional design _should_ cost? How much time does this save people who actually do this work? I don't know. But the price here seems like an odd thing to latch onto. It probably doesn't cost enough to be interesting.
There's an argument made by some psychologists that human satisfaction from earning a wage rather confers irreplaceable benefits and would result in better outcomes of self-sufficiency over living on handouts at an even higher monetary value. I'm not saying your point isn't valid, or that I even disagree with it, but the article does raise this issue, and claims there is data to back it up.
Pushing AWS Lambda and API Gateway to the Ragged Edge with Python
How Static Code Analysis can help you fix software Vulnerabilities
Some possible motives:

- To allow authorities to listen for "chatter" from NK military deployed in Hawaii who might have been ready to carry out some action if an attack were launched, but who would not likely have been told when it would occur.

- To watch how NK responds internally to the idea that the US might be launching a counter-strike. Things like escape routes, comms, etc., could be observed via sigint.

- To create a "path" for the public to think about this kind of thing. It's been years since anyone in the US (public or media) has had to think about incoming missile attacks. The false alarm gives all the reporters an excuse to read up on the history, to issue warnings about lack of preparedness, etc. This means that in the event of an actual attack the information mechanisms will all work more smoothly. It's a dress rehearsal so that everyone is not stuck like a deer in the headlights if an attack occurs.

- The false alarm could have been triggered by someone on the payroll of NK. Note that the main goal of the military is to inspire fear, not to actually kill people.
Exasol – Overall Leader in Customer Experience and Vendor Credibility Models
Infographic Road Map to Getting Great Reviews in the App Store
Yeah I think I'm getting in the wrong loops.
The world now has a cryptocurrency pop group
I agree with you. Individuals who commit these kinds of crimes have anti-social personality disorder. This kind of disorder is considered fixed and unchanging. When this man gets out of prison in 30 or so years, yes he will be different. But I doubt his frontal lobe is going to magically heal itself and be able to inhibit the intrusive violent thoughts he has.

This is a violent and uneducated adult male who raped a medical student and then murdered her. The opportunity cost to society is already great, now they will waste their society's resources in keeping this man alive. In my opinion, he should be executed as soon as possible.
That part of the constitution is basically used to justify things like environmental or historical building protection laws. It binds the legislator to always consider the public good when enacting laws (and "public good" is defined by the legislator itself through the law). In particular, it has no binding effect to anyone apart from the legislator. It honestly isn't of that much importance in the grand scheme of things.

Immediately preceding is the order to always preserve and protect private property.
Firstly, that startup idea was an overt irony aimed at Google :). Secondly, my guess would be that maybe 0.001% of gmail users are familiar with command line interface and regular expressions. Not everybody is a coder and that is not necessarily bad.
Which one is the best? (Or at least, which one is the one you prefer?)

Add at least one of them (the best one) to the main page! Is it too difficult? Sorry for insisting, but I think that with at least one example the post will be much more engaging.
So this person is not yet a total elitist jerk, but almost is. Got it.
One of the 'Most Powerful' Android Spyware Tools Ever Was Just Uncovered
Authentication is such a mess, I don't even know where to begin. Most APIs rely on some sort of token-based auth, communicated via the header format: "Authorization: Bearer abc123", as opposed to placing it in the Cookie, as most web sites will do. Many solutions exist, like OAuth2, JWT, etc. but that's ultimately what it all boils down to.
You should also check out https://webtask.io by the Auth0 people.

They have an in browser code editor that's fantastic.
WebRTC is inherently peer to peer (except the initial phase of signaling) so it (audio streams) can't be any other way. Conferences in WebRTC are just multiple peer to peer connections.
> The best fix for this (yes a new UI/UX would be best but let's be realistic on how much time/energy they are willing to spend on this) would be a scary looking alert confirmation dialog of "Are you sure you want to send this alert to the whole state?"

"Give it a thump with your finger" https://youtu.be/YchEuqYjMi8?t=29
This needs more attention. The rarest pages are probably not very redundantly stored.

Sometimes the datacenter your search query lands in might not have a copy of the necessary page. Now they have to decide if they delay the entire search query to remotely query another datacenter, or not. I would guess returning the results early is nearly always more important than returning a result which is so rare it has never been clicked in the past decade.
Blockchain implementations for the supply chain
As a contractor or an employee, you do have the ability to do what you think is right despite what your employer says they want.

But only to a point. People resist perceived change. You can improve the back-end all you want, as long as you don't make unexpected changes to the front-end. This includes something as simple as a clarifying pop-up, or a speed increase of a procedure.
uBlock and a hosts file are standard on every computer I own.
Access Documentation from Your Code Editor with Dash or Zeal
In 2010, Cringely promoted her "mobile-magazine-based-on-RSS" solution https://www.cringely.com/2010/03/11/the-94-percent-solution/ and included the statement: "this same content can be read today on two billion devices throughout the world. There will never, ever be two billion iPhones."

Seven years later, we're half-way there: "Apple has sold more than one billion iPhones worldwide from 2007 to 2016" https://www.statista.com/statistics/263401/global-apple-ipho...
> There is just no other way the national guard would be deployed and end up firing on students without the war.

Oh? The Michigan National Guard did quite a bit of shooting during the Detroit riots of 1967.
J random local civilian warning system really doesn't have to be as tight as "don't blow up the world". There's a scale, here.