skysight-inc/HackerNews huggingface dataset:
We have similar stories here.

Heavy industry is concerned only with keeping their production lines up and running. They will do amazing and scary things if it helps them keeping production up. These people have absolutely no idea of security or even IT. They want to bolt and wire devices together so that they work. All the cool tech hidden inside is way beyond their understanding for the most part.
Stuff like this currently exists in the real world. Therefore, I can understand the complains of the OP.
Hadn't heard of DeepDyve and I'm always willing to look into paying for something using that type of model.

Out of five major journals in my discipline, four are "Preview Only."

What a surprise. "Huge list," indeed.
ESP32 book
"Basic scientific literacy" is not enough to read most papers (in part because most papers are badly written and need familiarity with the genre to be understood). Almost everyone that I know that uses sci-hub does so because it's faster than finding the correct institutional proxy, repository, login credentials, etc. that they would need otherwise (the sci-hub UX is vastly superior).
> It's in murky waters when it comes to GDPR, for starters.

I'm not sure about from facebook's side, but from the point of view of how GDPR applies to the side being crawled if they, as custodians of PII and other sensitive data, are handing it out to unauthenticated requests, they might be liable for punishment for lack of due diligence.
NASA Seeks the Gold in Winter Olympics Snow
And then we'd have to tell our clients how to add the root cert to their browsers and operating systems. I doubt that this would fly with many customers.
If the portal provides you with the credentials and also asks for them, what's the point of that portal in the first place?
Show HN:Development Status of Crypto Currencies,Repos,Commits,Language Used
A self-employed painter could not send someone else to do the work (without the client's consent) if he was personally contracted to do it. There's no contradiction there.
Another approach is to criminalise possession and sale of ROV components and prosecute with extreme prejudice.
I hate this. I too do a lot of off-line, never connected to the Internet devices and I don't want the god Google telling my users they're "not secure". My users know they're on a self contained network.
What about simple static sites like blogs that dont have forms? Do we really need to scare people away from our blogs and do we have to get an SSL cert for them unecessarily?
This sounds like the sanest solution so far, but this would require a push to get these additional gateways installed in our customers' IT.
Indeed. I, the user, get to choose whether to allow JS or not.

Now consider that things like Meltdown and Spectre have JavaScript PoCs

If this was instead 'Chrome 68 will mark all JS-using sites as "not secure"', I wouldn't want that warning either, but then I'd be in agreement with the majority...
It's what the team already used before.
There's a trade off, though. It might not be the right one just yet, but it's there. Gig economy workers have much more flexibility to set their own hours, schedule, and what jobs they want to do than traditional employees do.

Really the only problem here, and the only reason why there are lawsuits, is that these workers aren't being paid enough. I really doubt any of these people care whether they're classified as employees or contractors; they just want to feel like they're making enough money to support themselves (plus take care of self-employment taxes and healthcare costs) without feeling like to do so they need to work themselves to the bone. If these jobs provided a decent standard of living, I don't think these issues would exist at all.
I am free to run it to get it's benefits and it's downsides, limiting me for the sake of security isn't okay.
A faraday cage will block your GPS and any RF communications on the drone. A fully autonomous drone using vision may have some chance but not much.

EMI protection in devices is meant for normal interference, not high powered EM stuff.
You had me on the plural for your table names. Have not seen it in a while. Personally believe it is a preference thing.
Being certified for 10V/m does not mean the device will withstand 11V/m. Shielding for almost arbitrary field strengths is still hard. At 100V/m any short cable will pick up high voltages.
Let's Encrypt has to use one of the Ten Blessed Methods to validate control over the name they issue for. Unlike a random person out on the Internet, doing that validation is their actual job, so they're pretty good at it, and the Ten Blessed Methods tell them what constitutes an acceptable means of doing so.

These days Let's Encrypt uses a "multiple view" approach in which more than one physical location in the world hosts Let's Encrypt systems (although only their US West Coast location contains the actual CA) and so they can check that things appear the same from more than one angle, you can't just take over the ISP they're getting service from in California and leverage that to get anything you want. If the views don't agree (e.g. you pass a Let's Encrypt validation from Paris but not from San Francisco) then your application is denied automatically.

Now, the next layer above is also interesting. Who checks Let's Encrypt and other public CAs are doing their job? Fortunately Mozilla are on the case again, all major Trust stores say they enforce the Baseline Requirements which explain how a CA should do its job, but all except one make decisions entirely in private. Or maybe they just bin all the complaints if the CA pays them a bribe? Who knows. Mozilla acts openly in public, you can (and indeed your insight might be valuable, so please do) help oversee the Web PKI in their m.d.s.policy group.
Really good examples of email templates done “right”
A single round of lead shot from a shotgun would do the trick.
So, employment in this industry requires

1. maintain an active github profile

2. have active Stack Overflow profile where you help various people for free during the day.

3. be willing to do coding assignments for any potential employer that take a couple hours out of your day (aside from the time spent looking for work)

4. potentially answer tricky questions in interviews that have nothing to do with your job.

5. Have a linkedin profile or maybe some sort of social media profile so that potential employers can be sure you are not an antisocial shutin who spends all their time in front of the computer working on github projects and answering Stackoverflow questions.

And now, maintain public IQ scores.

on edit: improved formatting
Linkedin launches dating app
Unruly | Aldgate East, London| FULL-TIME | ONSITE

We’re fortunate enough to be blessed with lots of good ideas, supportive management, a great environment and the desire to grow our team to deliver as many of those ideas as we can. We develop mostly in Java and Javascript, with reporting based on a combination of Postgres, Actian Vector and Splunk. Our philosophy is “if you build it you run it”, so we’re biased towards full stack developers, and we support them with a small infrastructure team and shared specialist roles. Our growth plans also give us scope to create new roles that will improve the overall effectiveness of the broad development team. Contact us if you’re interested in:

- Programming in Java or Javascript

- Using large volumes of data to inform business decisions (both ours and our clients’)

- Coaching and enabling better product development, consistently with agile values

- Problem solving in a complicated, dynamic technical environment

- Understanding the video advertising domain and working with both technical and non-technical people on product development

- Exploring new approaches to organisational structure and responsibility

- Building applications on cloud infrastructure, to helping teams get more value from their cloud infrastructure

Have a look at the job descriptions for our open roles, but don’t be deterred if you don’t find exactly the role you’re looking for. Feel free to contact me (steve.hayes@unrulygroup.com) or our People Team (talent@unrulygroup.com) if you’d like to discuss either a job description or other opportunities.

Unruly is the video marketplace you can trust to move people, not just reach people. We help the world’s biggest advertisers engage global audiences by harnessing the power of our data-powered video marketplace, UnrulyX, on brand-safe, premium sites, while helping top publishers better monetise their audiences. Our superpower is emotional testing and targeting via UnrulyEQ, which leverages over a decade of video data and almost 2.2 million viewer reactions to videos to provide deep analysis of metrics that matter, enabling us to deliver better targeting and higher campaign ROI at scale.

https://unruly.co
> To me, Alexandra Elbakyan is kind of like a Martin Luther of science. That is, she enables the lay public to read and interpret science rather than awaiting the interpretation and approval of academics from high-status institutions.

I don't think the analogy works. Luthor took a single text and translated it, making it accessible. The fact that it was accessible didn't affect the creation of the text.

By contrast "the interpretation and approval of academics from high-status institutions." is an intrinsic part of the creation of the document. It's part of the peer-review essential to the creation of good science.

Experts disagreeing on the fundamental nature of the holy trinity is not the same as experts disagreeing on the experimental design behind testing a new category of drugs.
Cloudflare had an interesting blog post[1] a month ago about TLS 1.3. It talks extensively about ossification and the GREASE proposal.

[1] https://blog.cloudflare.com/why-tls-1-3-isnt-in-browsers-yet...

Previous HN discussion of the post: https://news.ycombinator.com/item?id=16010930
You're correct, but there's no need to be a dick about it
Why Is Caviar So Expensive?
I'm confused, you just said they don't update them. Don't update Chrome and you have no issue.
Yes, we need more PC culture. Sugar coat even if at the cost of clarity / accuracy.
Their performance is 0.1-0.03 of postgres. And spectre makes your aws-vps ~0.7x compared to previously. Meaning you can't use it for performance-sensitive stuff (the whole point of fancy sharding and (no/new)sql).
I did a short video on setting up a dev environment in windows 10 if you're interested.

http://fullbit.ca/create-your-own-development-environment-in...
> At Google's size, there are extra accounting processes that you should follow.

I've always assumed when I see an ad for Google Chrome in the sponsored section in Google web search that it is money coming out of Google Chrome's marketing budget. So, it should technically count as revenue for Google web search.

Which is why I think corporate taxes on profit is silly. Taxes should be based on revenue, not on profit. That you choose to reinvest all of your profits back into the company should be immaterial. If a corporation has 1% of its revenue as profit vs another corporation has 25% of revenue as profit is not our problem.
Ah yes, not mentioned in that narrative is a personal experience that happened twice in the 90's. I used a couple of tools to help fix software on PC's. MS bought them and took them off the market.
While I certainly don't disagree with what you said. I think you need to look at his arguments as a way to protect user data. Not all users that use your "mediocre" technical solution are aware of how "mediocre" it is. And if tokens are sent with GET requests or whatever stupid thing.
What I think, is why no body weaponized aircraft model before.
Since 80's/90's small aircraft models had enough capacity to carry grenades and small explosives.

Also, I'm impressed that a cheap drone can use optical navigation. The last time that someone talked about it, was about it's usage on Tomahawk cruise missiles, since 80's, as a tech miracle of electronics.
Does it take notice of robots.txt?
> What about middleboxes I want to employ myself, e.g. to watch my own traffic?

> Except I don't have control about the edge nodes either, because the one edge is a remote server while the other edge is a locked-down smartphone or IoT device.

If you don't have control over either of the endpoints, is it really your own traffic? Going a bit deeper: if you don't have control over your smartphone or IoT device, is it really your smartphone or IoT device?
As it is demonstrated now, the indicators work to show the http part of the URL in a way that relates some of its subtext much better to average users. Now, if it were to stay that way, I would be fine with it. But if past performance is any indicator here, this will be just the first step on that silly warnings spiral. If browser vendors aren't careful, they'll flood users with too many warnings, which makes them ignore them entirely.
Awesome! Would be interesting to know more about the software and how they test it all. I wonder what percentage of slot machines run linux? I would assume most due to no liscensing fees?
I've recently discovered DBeaver, and am quite happy with it. https://dbeaver.jkiss.org/
Yoiks, good to know! When scanning the Quic docs, especially around the HTTP header that advertises an alternative protocol, the examples showed some random >1024 high port. I assumed that was part of the middlebox aversion stuff

But it makes perfect sense to have a defined port, so that connection racing can work without first having to receive a HTTP header
DBeaver – Free Universal SQL Client
Honestly, I'd rather they keep it limited to Chrome and Google, while they iterate and develop the protocol. That way can iterate much faster and without backward compatibility concerns.

In a way, that's another example of ossification, this time without middle boxes.

Once the protocol has settled and development slowed down, they can then build libraries for all the other languages and servers.
ArXiv vs. snarXiv
Insights into mitochondria reveal how life expends energy (2016)
I never claimed it did. Further, I don't think there is a dichotomy here.

You could have solved your problem in a dozen other ways. You were privileged enough to do it in the way that presumable pleased you most. There is a hint of toyness to it in that respect.
Astrophysicists settle cosmic debate on magnetism of planets and stars
The bird population is toast. So are all cetaceans when weaponized drones become common in the oceans.
Sound product strategy. Microsoft are finally getting into their stride with this whole social networking thing. /s
what site do you own (if you can tell)?
This comment is spot on:

> I was a sysadmin through the tail end of the Microsoft desktop dominance. I'm glad that MS acted that way. It forever cemented in the minds of IT the danger of single vendor lock-in. [...] MS's bad behavior in the 90s and early 2000's bought us 50 to 100 years of lessons on what we need to avoid in the technology space.
So why is there no Linux version?
Maybe then Talkyard (https://www.talkyard.io/blog-comments) is interesting to you:

It's hosted & serverless, like Facebook and Disqus.

But at the same time, it's open source, so you will be able to export your comments from Talkyard's servers, install Talkyard yourself and import the comments.

(But I haven't yet built export and import functionality :- P )
Seems quite good, it does have issues with chunkwm though if you open two databases and then try and switch between them
Yup, thanks :-)
Yeah easy_install, which theoretically worked (kinda), but alongside pip there was also the overall pypa effort (both marketing and technical) to make the whole thing work e.g. update or even fork the more abstruse projects such that they could actually be installed via pip. IIRC that was the primary reason for Pillow forking PIL.
My motives for MVVM and FlowControllers path
C#
I was a noobie programmer at the time and only programmed in C++ and php. I then experienced what it was like to truly love a programming language after I was employed to do a tiny project in C#
There is a non-zero impact of HTTPS on the size of a webpage. This can be bad for users on bad connections.
And yet people are still all too willing to throw all their eggs into one basket, with Apple or Google.
https://arxiv.org/abs/1711.09784

https://arxiv.org/abs/1708.01785

https://arxiv.org/abs/1710.00935

https://arxiv.org/abs/1702.04595

https://arxiv.org/abs/1801.01693

https://arxiv.org/abs/1503.02531

https://arxiv.org/abs/1712.03781

https://arxiv.org/abs/1710.07535

https://arxiv.org/abs/1702.02540

https://arxiv.org/abs/1603.02518

http://ieeexplore.ieee.org/document/977279/

etc

It is kind of far cry from established practice but how far cry from established implementation are your fears of unintended abuse? It's not nearly at the point yet to be paranoid. Having bugs in ANN before debugging makes them no different from usual software that is already used in forensic research. And nobody in their right mind will deploy networks that impossible or prohibitively difficult to debug for any kind of critical tasks. Otherwise irrational people can abuse power even without any software or ANNs.
While what the comment states may be factually correct, it is unfair, in my opinion. Classic example of people sitting in their couches at home to point out everything Bill Gates did wrong in an attempt to judge him for the right he's doing.

Business is business, he did what he had to in order to see his company thrive. And now he's stepped back and wants to give back to society. Branding him as a villain who wants to buy his way into heaven is a cheap shot.
I think he's very optimistic about the collective memory of tech people.

I don't know enough about sysadmin work but programmers reinvent the same techniques every 10 years.
In my anecdotal experience, consumers yes, businesses less so.
Campaign for a mailto: equivalent for podcasts
That's not entirely true. Twitter doesn't show you all tweets in chronological order, it has some kind of sorting algorithm like Facebook. If you follow enough people popular tweets and tweeters definitely drown out less popular ones
Bitcoin wallet Bread is initiating Bitcoin purchases via credit cards
Hey now. This happens to be how the EU does politics. We don't consider it "cool" any more to quip about being bad at math, right? Same goes imho for history, geography or foreign politics.

Looking from the other side, laws and bills in the US seem to me to often have titles like "something something act", which are short, catchy but just as often as not, utterly misleading and/or meaning the opposite of what they actually do. Or blatant propaganda like "patriot act". But alas, I don't speak propagandese ...
If you have E2E auth/encryption, all a malicious DHCP server can is, indirectly, identifying every site you connect to, and potentially blocking you from accessing some sites. Or all. It can intercept all unencrypted stuff. This includes NTP, which in turn means your computer’s clock will be set wrong, which in turn means it can give you long distrusted certificates whose private keys have leaked.

TL;DR: If you can MitM a system at the root, you can already break basically anything relevant.
My only issue is HTTP/2 client and servers only implementing TLS. This makes it unnecessarily hard to reverse-proxy HTTP/2 on a loopback connection where it's reasonable to assume being safe from MITM.
AppCode 2017.3.2 Build with Crack Full Version
>Fast nearly free exponential distribution

Just because you make an app and publish it to the App Store doesn't mean that it is "distributed" to anyone at all. There are massive costs to marketing apps because apps are commodities.
Easy way execute commands on remote windows from linux terminal
5 Event Management Mistakes You Must Avoid at Any Cost – NVOLV
The English government (well, they're the British government, but they don't get to set building rules for the bits of Britain that aren't England) didn't think fire sprinklers were necessary in big tower blocks and schools. Too many regulations you know, it hurts the economy.

Then not just one but two huge tower blocks in London burned down. So how about that, suddenly maybe tower blocks _did_ need sprinklers after all. Shame about all the dead people.
Lower connection establishment latency:
SCTP over UDP using DTLS requires 4 roundtrips (that's worse than standard TCP) while QUIC (which includes DTLS like encryption) only requires 1 roundtrip for the first connection and 0 RT for subsequent connections, when it cached some information.
I never understood the employee distinction.

If I sign up on one of those freelance coding websites and I get no work offered to me, can I claim they need to pay me a minimum wage? What is the difference between that website and Uber that makes them entitled to be treated as employees?
I'm saying that instead of doing away with plain-text protocols, maybe national govts can each regulate their ISPs to stop injecting content into the bits they transmit? That would go a long way towards increase of privacy. As for bad state (sponsored) actors, I doubt https can really stop them doing what they want, especially not the big ones.
> Branding him as a villain who wants to buy his way into heaven is a cheap shot.

Moreover, in reality the choice is usually between a villain "who wants to buy his way into heaven" and a villain who doesn't give a fuck. I'll take the former over the latter any time, because forever-saints with lots of money generally do not happen.
The article did say it was a $14 Million Dollar tax bill.
As a native of Scandinavia I too have experienced the trend of people claiming their right to be judged on skill rather than background or appearance. Here however, it is often argued that the right to be judged on skill and compatibility, and therefor being able to dress to ones own preferences is earned only when you have proven to be a) greatly over-qualified and b) of a high enough age and/or c) with an ethnicity, gender or other background factors that conform with the existing idea of what a professional in the specific field looks and acts like.
Why the US is drawing in Europe’s expats post-Brexit
Are blockchain games really that useful?