skysight-inc/HackerNews huggingface dataset:
Nope. I have a friend (Minneapolis, MN) who was doing exactly this, and she was far from rich. Last time I talked to her she owned a triplex and was renting out the upper two floors on a per-room basis, while she lived on the ground floor.

OP is right though: most people don't want to be landlords. I was for a few years, then decided I didn't really want to be in that business. Pity too: my tenants were great and I was bringing in +$300/month over mortgage/insurance/etc. costs.
OK, so in your example they create a certificate and use HTTPS and I'm unsure what the problem is.

And why would they think outside of their internet only box when they're providing an internet browser?
There are emerging standards around this -- in the sense of, you, as the agent to a new client, providing some information and gaining delegated access, complete with API keys, to some established resource server -- but deployment is fairly low.

OIDC: Dynamic Client Registration: https://openid.net/specs/openid-connect-registration-1_0.htm...

OAuth 2.0: RFC 7591 https://tools.ietf.org/html/rfc7591
this one is avoidable though
This is a great question. I don’t know the exact answer but have worked with some. I’ve seen many stay at darpa more than 5 years. I’ve also seen them jump to PM positions in DoD and NIST.
Let me put it this way: is getting veterans prompter, better access to VA health care a Democratic issue or a Republican issue? Hopefully you'll agree it's both (or neither).

Now you could look at improvements we might make to the VA at this time and oppose them, saying that any improvements we make to the government during a Trump administration legitimizes his administration and priorities.

As for me, I've had enough of that. It's the "party of 'no'" all over again. If you think the 18F is doing something specifically nefarious, name it. Otherwise, if something is a benefit to the American people, I support 18F, the Digital Service, or whoever taking it on--and I suspect that most of their work falls into this relatively uncontroversial category.
To play Devil's advocate, surely it's easier just to align the DST dates - as the EU has already done.
I like Rails, but calling ActionCable good realtime support is being a bit generous, no?

I was under the impression that scaling ActionCable beyond 1k/users per server was pretty difficult.
It's $100/month for licensing our web interface for controller management. You're free to set up your own network controller and write your interface for managing it :)
I think you misunderstand. An ad-free website served over HTTP can (and does) have ads injected into it by someone along the way. And not just ads, but malware as well.

And privacy of information going from your browser to the internet is only half of the equation. What about privacy about what you are viewing?

I don't want every single router between my computer and the server knowing the full contents of the pages I'm choosing to view, or building advertising profiles on my habits, or even knowing what device type, browser, OS, and more I'm using.
It is like selling kit that is only used in Formula 1 and no other formulas. McLaren sell lots of telemetry kit that is mandated by the FIA, they also sell other bits and bobs where there can only be ten buyers in F1. In all fairness they do have sidelines for NASCAR and Formula E so it is not that niche.

Essentially these parts are not mass produced, they are tailor made from a pattern rather than fully bespoke. A different business model with different profit margins.

The thing is that you have to get this kit from somewhere to be in the sport, either you make it yourself or you buy the pricey semi-customer specialist kit from someone else in the game. So the teams such as Red Bull and Force India buy from McLaren, they can't run the cars without the telemetry.

With the broom it also creates this situation, you can't be in the sport without the telemetry. So the niche is a good one, like what MacLaren have, a de-facto monopoly that does not rule out rival teams cloning their own solution if they really want to. (In the automotive analogy Ferrari do not buy from McLaren as much as other teams, they roll their own.)

https://www.mclaren.com/appliedtechnologies/products/list/fo...
go to http://example.com - it will never redirect you to HTTPS and it is an IANA reserved domain which will never disappear.
Almost that same exact thing happened to me when i was 11. The Dr's all said it was the flu, but I couldn't eat and my chest hurt so bad that i could barely breath.

The old Dr's refused to send me anywhere, and immediately got their lawyers when my parents asked questions. The asshats also gave me milk of magnesia at 10pm because "I didn't eat anything for a few days." So that was a great night...

My dad made the call to the other hospital and they arranged an ambulance. I spent a week at the first hospital, and after 3 hours at the new one, I was already under the knife. That was the first time I saw people at a hospital run because of what they were seeing on scans.

The new Dr told my parents (after i was OK) that the only thing he could think about once he initially saw me was that he was "operating on a dead boy."

Scary stuff.

I can't remember exactly what I had, but it was different than what your child had. Very similar experiences though.
I run regularly on cement with my vibrams. You have to build up to it, and you can get minute stress fractures in your foot while getting to that level. Traditional shoes protect your feet from so much of the stress that most people aren't physically prepared to just switch to a minimalist shoe.
Ironically, it's overloaded.

Text only, cached version:

http://webcache.googleusercontent.com/search?q=cache:QrUx_pA...
Have you struggled with perfectionism?
> Think of LAN only IoT devices which aren't proxy through a external company site, have no domain, are accessed through (local area network IP) and maybe run in non internet environment.

As long as it's a “Not Secure” omnibox warning, I don't see it as a problem even there. Now, if they adopted the “block with non-obvious escape hatch” approach used for certificate errors for HTTP, that would be a problem.
There's plenty shared hosting provider that just have a free let's encrypt powered "https" toggle.

Eg tools like cPanel have built in support for it now.
I'll assume you intended to write 'insecure'.

I'd say the main issue is that anyone between you and that website can inject scripts into the site in order to phish/ exploit you.
I recently needed a server so I went to the local reuse center which offers refurbished machines that are lightly used -- ex. Dell and HP machines that were leased to dentist's offices, bank tellers, users like that. I spent $200 on a i5 Haswell machine.

Some of the machines were fairly compact desktop machines, and I liked that, but I wound up with a large desktop machine because I'd have room for expansion. (Maybe get a 10-series graphics card for media transcoding when they become available again.)

Small machines have more heat and heat creates more problems. I have owned two Mac Minis and they both have burned up hard drives at a high rate. It runs maybe 10 to 15 centigrade hotter than a typical desktop machine. The Mac Mini has a great design for cooling that stays clean, but I've had laptops and other machines in my house get seriously obstructed with dust.

I would watch out for NUC, Celerons, and other low-end parts from Intel, both in the sense of bad performance, but also because features are missing that matter for you. (For instance, you want the best virtualization support you can get)
>Recently, I came down with the flu (I had the vaccine), I took 4 pills over 2 days and it was turned into a slight cold

A much more convincing explanation is that your symptoms were ameliorated by your vaccination, which is a thoroughly-documented effect.
Yes. And clubs like YC reward those who have had extra chances for their whole lives. While the lower-class kids help their parents, the better-off kids are getting tutoring, music classes, and expensive toys to grow their skills and do better later on.
Me: "Alexa, what is a terrorist?"

Alexa: "... a person who terrorizes or frightens others."

Me: "Alexa, define the word 'terrorize'"

Alexa "... to dominate or coerce by intimidation."

Me: "Alexa, define the word 'fascism'"

Alexa: "A political regime, having totalitarian aspirations, ideologically based on a relationship between business and the centralized government, business-and-government control of the marketplace, repression of criticism or opposition, a leader cult and exalting the state and/or religion above individual rights"

Me: "Alexa, what is conservative liberalism?"

Alexa "...conservative liberalism promotes ordered liberty under God and establishes constitutional safeguards against tyranny. It shows that a regime of liberty based on traditional morality and classical-Christian culture is an achievement we can be proud of, rather than merely defensive about, as trustees of Western civilization"

Me: "Alexa, what is tyranny?"

Alexa: "oppressive or unjustly severe government on the part of any ruler."

Me: "Thank you for the explanations Alexa, I think I'm done here."
Are you really equating the abolishment of the death penalty with a decline in personal responsibility?

But... you are the one asserting there is a decline in personal responsibility. How are you asserting that?
Building toys probably requires the VC game. Ikea was never a toy.
Fastest Inter-Exchange Ever Created for CryptoCurrencies –  HUGE NEWS
It's impossible to get a valid SSL certificate for an appliance running within someone their lan, without having to open ports. And opening ports would make the appliance even more vulnerable to attack.
Analysis what crowd talk about when the Dow plunges biggest one day fall with ML
It is worth noting that Dropbox took a bundle of business problems that already had been solved in one small community and solved it for a much wider community. Specifically, the problems of "cloud" file storage were being solved by AFS in MIT's Project Athena. So, to argue at Dropbox's founding that it was a toy would require first arguing that businesses didn't have problems that resembled "All the folks working on this class project need to have one accessible and shareable place to store files".
Seems like population has grown significantly more than carbon since 1960? https://ourworldindata.org/wp-content/uploads/2013/05/update...
A warm climate, maybe. But in the current social climate, wearing an article of clothing known colloquially as a “wife beater” seems ill-advised.
See my example above. I think it is very possible, and does nothing of the sort.
noted, thanks!
You're definitely correct, I'm mostly talking about "Enterprise B2B." I'll clarify that.

Hotels are definitely tough buyers, not the most tech-savvy customers. My initial idea was not in-room tablets, I hoped to achieve the same thing through apps that guests could download on their phones. I approached hotels, and even got one to pilot it, but there were many issues with that, I can go into details if anyone's interested. I pivoted into in-room tablets after that.

The problem I'm trying to solve is that hotels are not able to properly collect guest data and upsell to guests. And today's guests expect personalized experiences, but hotels can't offer that in scale. In the long run, it might turn out that in-room tablets are not the best platform, but there is no doubt that the hospitality industry is going in this direction. Looking at a website like hospitalitytech.com, this is pretty much all they talk about.
I'm on High Sierra and it works, maybe just needs a `killall Dock` to have an effect.
Zendar is hiring a graduate student intern
Zendar is a Berkeley-based startup building the next generation high-resolution radar solution for autonomous vehicles. Current perception systems that rely solely on LiDAR and camera are unable to operate in bad weather conditions. Zendar is developing critical technology for autonomous vehicles to operate reliably in all weather conditions, such as heavy rain, fog, and snow.

We are looking for a graduate student intern to join our team to improve our radar imaging pipeline. Candidates should be pursuing a masters / PhD degree in computer science / electrical engineering / applied physics / applied mathematics or relevant field. An in-depth understanding of random processes, digital signal processing and experience with Python / C++ is required. Prior experience with estimation techniques such as Kalman filter, extended Kalman filter and particle filter is a plus. Not only will you receive invaluable guidance from an experienced team, you will gain hands-on experience in an exciting field. This is a full-time paid position and we ask for a commitment of at least 3 months with potential to extend.

What else we have to offer:

Conveniently located in West Berkeley

Free and nearby parking

Daily catered lunches

Full-stocked refrigerator

Weekly happy hour

If you are interested, please contact Jimmy Wang at jimmy@zendar.io
also the 30% rule, which is a huge plus and one of the reasons I decided to move here :D
I don't understand why are you complaining they aren't solving inequality, then.
Like an ad-hoc anonymously typed struct. Only the members are named, so each time the type is specified it is with the member names, hence just using a type name is preferred. If it is really just used at one or two call sites and not propagated all is well, but invariably things tend to expand in use.
pluma is not replying to the original article, but to the post by okket.
US federal government really needs its own cloud computing agency full of stick-up-the-butt security and reliability fanatics. 99.999% availability. Formally verified code everywhere. Built on a real-time OS. Guaranteed periodic permanent backups.

Anything the gummint does pretty much needs to scale immediately to 400 million users, can never experience a data breach, and needs to stay available constantly, possibly for decades, or maybe even forever.

The loss of the 1890 census records by fire is still significant today. If every copy of the quarterly reports for GE from 1982 were lost, the impact would be much smaller. The current cloud service offered commercially today are plenty good enough for even some of the hugest public companies, but not quite good enough for an entity with vastly different goals and needs. The different flavor of requirements might mean that private sector business will never offer a suitable class of service. Currently, some agencies run their own data centers, so the necessary expertise certainly exists, but that is not currently contributing in any way to a common infrastructure.
That's not a security issue if the site doesn't ask for user input, though.
I don't think I quite get your point, are you implying that destroying an unjust society is equivalent to the injustice of the society?
How about this: oil was being given to kids to play with when Rockefeller was getting started.

Yes the economics were excellent. But very few actually wanted it for years. Oil was fun to set on fire, but hadn't found mainstream use yet. Rockefeller created and dominated the market.

Many of Rockefeller's early writings were about his frustrations of oil not being taken seriously. And he definitely agreed with you that it was a mistake to see oil lamps as toys.
So it's a http2 vs http1 benchmark. Not a http vs https benchmark?
To justify the cost, the plan is to offer a free trial with a few tablets to collect ROI data on how much more the guests spend, how much time they look at the tablet, etc.
> It's impossible to get a valid SSL certificate for an appliance running within someone their lan

Can you not just create a certificate and push it to the system as a trusted cert?

> And opening ports would make the appliance even more vulnerable to attack.

Presumably there is already some sort of communication going on if they're receiving Chrome updates.
Thank you! I got a list of the usual paid holidays observed by companies
That's their prerogative though. They can be capricious if they want, and you're free to not use the service if you don't like it.

Reddit is beholden to their shareholders, not their users.
Hiring Great Engineering Teams
example.com has SSL: https://example.com/ -- so may one day default to using that. I'd really recommend http://neverssl.com/ for this purpose. The homepage explains it's literally designed for situations like captive portals.
A war with China over Taiwan, for example, wouldn't be a total war (at first, god willing). But it would be one that would have the US pitted against a foe with better technology than we've ever faced, even if they can't easily project much non-nuclear force into our territory.

People in the 20th century didn't think WWI would happen, because it would be incredibly stupid to blow up yourself and your trading partners. We did it anyway, and underestimating our capacity for self-destruction invites it.
7 including the central one.
Producing perfect work has nothing to do with perfectionism.
Sure it is. If I have a Chrome exploit that I want to deliver to you and I'm on your network I can inject it into the webpage.
I believe the complaints were on the listing, which means Apple had no way to know which seller it was from
Or comments written in the first person. "// We need to increment i by 1"
If you haven't checked your arches, you might find that you need more arch support, not wider shoes. Arch support prevents your feet from splaying out.
Amazon pitches Transparency anti-counterfeit service to wrong seller
Yeah. You could also just host it literally anywhere and post an URL in the comments here. By that logic clicking on hyperlinks is equally insecure.
"all this backlash"

I think you need to source that backlash. I find it highly likely certain people/groups used their media contacts to push that narrative, but I don't know a single actual person besides some Wall Street types who disagreed with the Andersen prosecution... then to extraplote that to "country have trained the government not to." I think is a mistake.

The DOJ problems are not from the public.. they are lack of internal willpower, among other things. They should be doing their job regardless.
This reminds me of the Cult of Done Manifesto, which focuses on doing and action. https://medium.com/@bre/the-cult-of-done-manifesto-724ca1c2f...
Working age is different than child age. Even today. My point was more on the description "childish." There are childish ways of acting that persist even in work for folks. The way my children "clean" their room, for example, is a lot less deliberate and effective than how I would do it.

Which is really missing my main point. The leisure time aspect is much more relevant.
That is why those of us that could do it, would bring our ZIP drives to the university labs and plug them into the parallel port. :)
Whoa, why do you link to a website distributing malware here?
I realize this isn't immediately realistic, but please brainstorm with me:

1. Change privacy laws so that consumers own their own data. (Something like Germany's BDSG?)

2. Repeal the Fair Credit Reporting Act.

The idea is that once consumers have the weapons and wherewithal to sue irresponsible credit rating authorities out of existence, perhaps fewer "regulations" will be needed.
the future of IoT is HTTPS with client side X.509 authentication. you don’t need internet to make that happen. but if you are web based and not using HTTPS... i can only ask why not? internal CAs are free
Unfortunately, this is a problem that will never go away, no matter how slowly and gracefully we transition. There is no alternative that allows these devices to continue to operate without friction that doesn’t also enable current device manufacturers to kick the can down the road by releasing new HTTP-only devices.

If we want to keep making the web a safer place, these kinds of cutoffs have to happen. Infinite backward compatibility simply holds everyone back for the sake of decreasingly-relevant devices and irresponsible manufacturers of new hardware and the customers who purchase their products.

The sooner we get to universal HTTPS the better.
Toms sells $10 shoes for $40, though.
Or it could fuel housing bubbles to new heights. The fact that there are now housing lenders who use projected AirBNB revenues in determining creditworthiness is worrying.
Thinking the unthinkable What we cannot think in programming
Thanks for letting me know about PM's switching to DoD & NIST :)
Oh good, I'm just down 17% on my TWTR holdings now.
Nobody shooting back at you, check.
For equivalent code, you will not experience any noticeable difference compared to C. It is nothing like Aparapi.
Ask HN: What are some good books on starting an Enterprise Software Startup?
That was interesting reading. Also a damming account on how the leadership of the U.S forces are not prepared to face the fact that they may be wrong about their capabilities.
This report doesn't take into account the probable upcoming tariff on imported solar panels.
Nice! Was trying to find that video of the live drag and drop updating of the skin that I saw on Twitter last night. That's super slick.
Think FaaS: Talkin' Lock-In
Yes. OpenCL supports that. However, I am using it for computation and Machine Learning algorithms, so I haven't tried that myself and can't give you detailed pointers.
When Probability Meets Real Life
If browsers allowed you to bypass HSTS, then it could be easily defeated by an attacker by breaking the traffic on port 443, forcing the user to disable SSL for the site. What would be the point over regular SSL? HSTS was designed as a response to programs like sslstrip, where the implementation of SSL may be attacked so the user is made vulnerable.

If a website puts out an HSTS header, they are telling the browser they need a higher bar of security than regular SSL.
Thanks for sharing, I didn't know that.

I love the last point "Done is the engine of more"!
I think it's an ADD/ADHD thing.

Highlighting text as I read helps me out when I'm having trouble focusing on the page.
http://explosm.net/comics/3433/
> How much nicer it is to tell yourself that you are a perfectionist than you are just not very good at whatever you are doing.

By that logic, Steve Jobs should have never been good at what he was doing...

I'm sorry, but this notion of yours is kinda insulting to all the perfectionists that had the misfortune of living in a world that doesn't appreciate them.
> The funny thing is that every Lean Startup founder who delays shipping struggles with excuses like this.

Honestly, that's the whole reason why I wrote that article. I'm struggling with that thought as well, but I don't think you're completely right on that.

> Maybe you start with a single floor or even a single hotel room into which you preferentially book people who you think will be early adopters.

This is exactly the plan I'm going with actually. But still, sourcing tablets, sourcing funds to buy them, and then developing an MVP takes time. It can't be too simple that it will be detrimental to their guest satisfaction, finding the balance is key, that's why the initial version is only room service.

> Maybe you just find one mom-and-pop hotel who pays you not in money but in their time and data.

Again, that's what I'm going after. Some people say that I should already charge them, and finding hotels that would pay for that at this stage is a waste of time, that's the point I was trying to make in the article. Finding a hotel that will pay with their time and data is exactly what I'm going after.
Right. HTTP/2 is only available with TLS, due to browser policies, so it necessarily requires TLS.

This means you need HTTPS if you want the performance wins of HTTP/2.

This doesn't mean that HTTPS is a performance win if you're still using HTTP/1.1. However, the "performance overhead" for TLS is negligible in practice.