skysight-inc/HackerNews huggingface dataset:
They're not verifying your identity, just that you control the hardware running the domain that you want to generate a certificate for.
What is the reason for needing to hide anything from the government?
They could fine you.
Creative accounting at its finest.

Company is either GAAP profitable, pro-forma profitable, EBITDA profitable, cashflow profitable, cashflow neutral or money losing. All other metrics are creative accounting that put lipstick on a pig masking money losing status.

DoorDash is money losing.
Reading the article, I imagined what the people (?) on those planets must think when they discover they're not alone.

Let's say we discover we are not alone. We know those aliens must not be from our galaxy, so do we push for development of faster-than-light travel? If so, why? Intelectual curiousity, defense, offense, trade, habitation?

As for the hypothetical galaxy with two planets of life: Are they developing the same? If not, do they, and if so why, expand to the other? If they are, are they afraid of each other? Do they have a "cold war"? The possibilities are endless.

Like Firefly, there are many posibilities for great sci-fi.
I can't tell if the logic was "we shouldn't have these keys so the certs are blown" or "watch, I just compromised the certs!"

Either way, it's very much a case of "my neighborhood isn't safe - because I keep committing crimes there."

edit: Oh, reading the Mozilla page it's also "we allowed code injection on the cert generation page". That's even worse.
> In other words, it's the equivalent to the Ethernet in your network, over which you run a protocol like TCP/IP, or IPX/SPX

Not a good comparison as those are layer 3 protocols. A better comparison would be two layer 2 links such as USB and ethernet sharing the same plug along with devices offering varying levels of support for one, the other, or both.
You put it in a nutshell perfectly.
An average lifespan of about for years is just huge, even if this probably is pushed a lot by Macs having a longer lifespan than phones..
On the other hand, my mother still uses the iPhone 4S I handed down to get than I got my 6.
Looking at section two I'm struck by just how much better it is to be at the top, not only are you at the top but you're accelerating upward faster than everybody else too. This is as good a place as any, do you guys have any readings on 'winner take all'-ification and/or how to reverse it?
This probably happened because they allowed users to execute root commands on their server. Either they quickly shut down the site or someone else did it by shutting down some servers.

> https://twitter.com/svblxyz/status/969220402768736258
I specifacally read ShowHN for EXACTLY these comments. HN community is always fantastic at providing alternate approaches.
Twitter Demetricator: Hides All the Metrics on Twitter
Food delivery has officially become a very frothy market. Is GrubHub/Seamless actually vulnerable? They seemed to be the 800 lb gorilla of the market. And based on my observation, the competition seems to be private labelled delivery service.
Thank you for the offer. Do you know anyone in the alternatives space? with domain knowledge of private equity?
The blockchain is public, the source of the coins can be tracked, not to an individual, but if they were 'tainted' coins e.g from a known silk road wallet, or from a major hack we would already know. Even if they were tumbled or rinsed through alt coins it would throw up some flags based on the transactions that fed into the main wallet address(es), and you can bet people have trawled through the transaction history of the pineapple fund wallets by now.
Jesus. That means it's not just about "offering revocation" and storing them on the wrong side; even people who didn't use that option are completely compromised.
Do you apply the same logic to cash? Should that be phased out?

The biggest appeals of phasing out cash are the possibility of negative interest rates along with the erosion of privacy. But those are appealing to governments not citizens.
This is not under any realistic or sane conditions a solution.
spend 10 minutes with Rally and you'll be begging for JIRA
I have - the WHOIS verification email!

https://www.icann.org/resources/pages/approved-with-specs-20...
1 in 5 humans live under this dictatorship
I always make a backup of all my work before trying to check it into ClearCase. It should not be possible to accidentally delete files when adding them to source control or checking them in.
I think both are closer to a community with freeloaders.

People that hoard coins/tokens to drive up prices and don't use it as a medium of exchange are freeloaders of the community.

Sometimes that's the people that start the community.
Actual paper: http://www.thelancet.com/journals/lanpsy/article/PIIS2215-03...
Couldn't traceable currencies cause death too? Let's say the government knows you bought XYZ, and later a fascist regime comes to power and they have access to your spending history.
All you've told me is you don't understand web-of-trust.
I suppose you could attack your question by considering a DM galaxy and a baryonic galaxy binary. On any given spacelike slice you can probably represent the two as a barbell with the barycentre on the infinitesimally thin bar, although there are lots of 3+1 formalism gotchas that would have to be dealt with.

If you arrange the matter galaxy so that its internal structure is sufficiently stable then the whole binary system would lose momentum-energy to gravitational radiation. It won't be much, and that's a big "if" (and the "if" also works against trying to see the matter galaxy cool, especially as the energy loss would tend to contract the "bar").
Yup I have already seen threads with screenshots from linkedn pages of some of those people.
I guess that just as in US, where Youtube is using partisan and highly controversial NGOs like ADL and SPLC; they are using equally ideologically driven people from other countries.
You can call this mistakes if you want but we all know what happened. Dozens of channels that were deleted in past few weeks appealed youtubes decisions and got negative response. So this was not done by just one or two rouge moderators. Even people who oversee moderators are biased and think that censorship is good and will work.

Moderation needs to be controlled by third and politically/ideologically independent party.
Also I have no idea why it needs the internet. I want to play it on a train commute but I can’t.
How SystemTap Userspace Probes Work
One part that is missing is why did the CEO say those certs were already compromised before they he mailed them? He mailed them sort of as proof they are compromised?? Im confused. Any thoughts?

From the article:

"When Rowley asked for proof the certificates were compromised, the Trustico CEO emailed the private keys of 23,000 certificates"
Right, because the only way we can control speeding is by barricading roads.
Slightly off-topic, but I have a friend who does training for active shooter response (he goes around to schools and large businesses and teaches people what seems to work best for saving lives in these situations). When I see things like "they huddle under their desks in the dark" I cringe. His training is very different, and focused on evacuating the students and disrupting the shooter. First, barricade the doors, then seek immediate escape and RUN. If that's not possible, everyone picks up whatever they can throw and gets ready to pelt the shooter with it if the door is breached. While this is happening, people escape around the edges and others attempt to subdue the shooter (taking advantage of the fact that it's very hard to shoot accurately when you're being pelted with hard, heavy objects).

He has researched a number of these events, and he has some chilling stories. In one case, the shooter walked up and down the rows of desks where people were cowering in the dark and executed each person. I think he said there were only a couple of survivors, and even those were critically injured. In the same shooter incident (sorry I can't recall where he said this one happened), another classroom used the disrupt and escape method, and almost all of them survived.

Bringing it back to topic, I wonder how the psychological effect would change if the students and teachers were trained with active responses that have been shown to greatly improve their odds of survival, instead of being told to wait passively in the dark and hope they get skipped. Would the fear be reduced? I honestly don't know how it would be for kids, but in my own case I feel better when I'm prepared to act instead of having to wait around for something to happen to me.
It can be MITM'd and used as a vector for malware.
There's a difference in certificate type. Let's encrypt (which only issues basic certificates) just verifies that you're the rightful owner of a domain, not whether the domain is what it says.

If you'd like to have more verification for your certificate you need a extended validation certificate (which often costs money). These certificates also include your (company) name and the issuer verifies whether it's correct or not.

Basic certificate issuers don't judge over domain names or content, they just verify domain ownership.
I imagine this sort of thing is how HN will actually look in a hundred years, if humanity survives that long.
Kubernetes Ingress: NodePort, Load Balancers, and Ingress Controllers
The bar for basic certs has been, for some time, an indication of control over the DNS domain in question.

In the past, the bar used to be much higher.

Whether a lower bar is a good idea or not I will leave to other more informed folk.
It's hard to imagine natural formation of such a complex structure in real universe. It needs a lot of precision (interplanetary engineering?) or luck to put 416 bodies in the exact positions and velocity for the model to be stable.

Another unnatural thing about this model is that adjacent orbits rotate in opposite directions: according to existing theories of formation of planetary systems, it seems impossible for the gas disk to go into different directions in layers.

Anyway, this model is definitely cool (416 bodies in stable orbits!) and might be a useful blueprint for interplanetary engineering of the future.
That's the impression I got from reading the EFF report on it; the GDPR makes WHOIS essentially impossible.

[1] https://www.eff.org/deeplinks/2018/01/europes-gdpr-will-forc...
Only if you are (or will be) incorporated in the EU, which generally you should be in order to accept payments from and do business in the EU.
Profiling Google Cloud Functions Functions
God I hope my co-workers in the PKI group would say "hell no" if our CEO came and asked for the private keys. Show some damn backbone.

Though on 2nd thought, maybe having a society with a good social safety net and collective bargaining for workers would be a good foundation for a positive outcome in that situation.

If workers are afraid of losing their jobs because they'd lose health insurance and other vital benefits then they'd be more likely to cave.

Sorry but being from a former socialist country in the top 5 world ranking of living standards I can't help but make it a social discussion.
Welcome to Chia, home of the world's best iteret.
But there are always multiple generations living at the same time. Do you only ever deal with one generation of people day in and day out?
And most of them are content with it.
This article about depression is also on the front page at the moment. Seems good to link for more references and discussion:

> https://news.ycombinator.com/item?id=16491986
And all examples of CAs essentially no longer in business (or bought up by DigiCert).
Agree with this. I find it odd that they don't tbh.
I'm surprised I've never heard of them before. Are they doing the same thing as Uber Eats, Postmates, Eat24, GrubHub, Amazon Restaurants, etc? That seems like a really tough market to succeed in. How is so much money being funneled into it?
> Yes, I was accused of talking too much in an interview. How can a website solve this type of problem, among all the others?

You mean you've never had a long winded candidate who wouldn't get to the point, where despite repeated attempts to get things back on track, you could only get through half the material you wanted to cover, and where everyone else who interviewed the same candidate was frustrated by the same thing? I almost envy you.
You presumably got downvoted for being pedantic here, but I think your pedantry is reasonable. If someone's going say "X is fundamentally broken", they should know what X is actually called. Referring to TLS as SSL reeks of amateur hour and shallow knowledge[1], and is a mistake on par with referring to Javascript as Java.

[1] This is the sort of lazy mistake I would make, because I'm not a security expert.
I feel like his case would be stronger if he'd said they all cause deaths. If the oft-touted figures for how much power generation goes in to mining is to be believed anyway.
I still don't understand why everyone is going on about the block chain
They're all pretty much mediocre. GrubHub especially I avoid after having several orders simply disappear without warning. Waiting an hour only to check by calling up the place and finding out they never got the order is frustrating. Twice and I was done, I just call now for delivery.
> So does USD by that measure.

I speculate that the net result scaled for size is much bigger in Bitcoin :)
Oh you have no idea how rooted the mafia is in Malta then.. I've experienced it first hand, and i'm not even a Maltese citizen. Everything you see in Malta is more or less under the mafia's influence, its really just like in the movies, and thats partly because, as another user pointed out, the mafia moved from Italy to Malta.
True. But at least web-of-trust gives you the ability to do something you are comfortable with.
This article about treating depression is also on the front page at the moment. Seems good to link for more references and discussion:

> https://news.ycombinator.com/item?id=16492489
> How about PowerPoint?

Tangent:

There's a great TV show on Comedy Central called "Corporate". (It reminds me of Better Off Ted if any of you liked that series.) There is an episode titled, The Powerpoint of Death, where the main character creates a PowerPoint presentation to win a govt contract for a war.
Wow, that's an awesome salary! What do you do for a living, and how did you get there?
A question I still have is what Trustico _hoped_ was going to happen here. Was there some arrangement where if the certs have to be revoked they get a refund?

Trustico also don't seem very clear on what exactly they're accusing Symantec of, the Ars article quotes them

"We believe Symantec to have operated our account in a manner whereby it had been compromised" and "We believe the orders placed via our Symantec account were at risk and were poorly managed"

In the relationship we're talking about here, a reseller to a CA, basically the only valuable information that can be compromised is payment instructions. All the important seeming cryptographic stuff? All of that is allowed to be public by design, the CSR, the Certificates themselves, any validation messages used - all public thanks to asymmetric cryptography.

Symantec got in trouble last year for inadequate (in fact basically non-existent) oversight of their RAs, particularly the Korean CrossCert. Unlike a reseller the RAs were trusted to do the domain validation themselves, so if CrossCert said "We checked and it's OK to issue a Thawte cert for www.example.com with this key" then Symantec just did it and didn't ask any questions (though they do seem to have checked they got paid...). Resellers aren't trusted with validation, they're just glorified sales people who just take a cut and help with price discrimination, what's there to "compromise" months after you cease the relationship?
Gitflow Animated
Do you mind sharing the math? Isn't impossible to know how much the equity is cut by because we don't know how much dilution there was (vs. liquidation)?
I think a lot of times as engineers we imagine the tech divorced from the reality of the world it exists in. It would likely be politically untenable to start stopping and frisking Wall Street bankers.
> If you raise children in fear, they're easy to manipulate into fear as adults.

An implicit claim in the quoted text is that one of the reasons people want to implement such drills is to produce adults that will be easier to manipulate. I think a claim like that requires some attempt at justification.

(And before anyone jumps to conclusions, the point I'm making is completely independent of whether I think the drills are a good or bad thing).
Interesting that he's out rattling the saber after US opened a can of whoop a$$ on his undocumented mercenaries in Syria. The chess pieces are moving around the board a little more vigorously.
Ask HN: What jobs that do not involve using a computer have a future?
>Well, the same is done based on race,

While there are many parole officers who use race to make unfair judgments, this is considered wrong by the system and work is taken to stop it (one of the reasons systems like the one I mentioned was being adopted). Compare this to the system I was talking about where it was recognized official policy and considered good, right, and just. Imagine if some police department came out and openly admitting that their official policy is to use race to punish someone harsher for the exact same crime.
Little War Game
The first line of the blog post calls it SSL. It's irrelevant to what I said because I'm talking about the public key infrastructure.
I said it was basically the same thing, but a big difference is that we aren't using polymorphism, just encapsulation.

You don't need reflection to break parametricity. All you need is instanceof (in Java) or a type switch (in Go), and this is very common style since sum types don't exist and that's how we pattern-match. (Along with the visitor pattern.)

Parametricity seems to be when a language doesn't have these things; if you want to pattern-match on types, there needs to be a sum type or an operation that returns one.

It's not clear that programmers used to an object-oriented style will go along with the idea that downcasts are bad and should be forbidden. Is it worth removing a useful escape hatch (particularly in framework-heavy code) to gain an esoteric form of type-based reasoning?

But if you try Rust, you're fighting the borrow checker anyway, so perhaps this additional inflexibility isn't that noticable?
If only one inhabitant of any of these planets so much as sneezes too hard, it will destabilize the whole system. https://en.wikipedia.org/wiki/Butterfly_effect
Could you help us out by explaining what this comment is misunderstanding?
People of China, speak up, rise up. You deserve better than this. Chinese people should have the freedom to choose where they can visit and what content they can consume and who they want to lead the country forward. http://www.latimes.com/world/asia/la-fg-china-south-korea-to...
I'm sure there are a lot of content North Korean's as well.
> When I hear people talking about how things are "mysterious" I assume that the actual answers are not difficult, but what they imply conflicts with what we want to believe to be true.

So true. When someone says that there are no answers, there's usually an obvious answer which makes the speaker's continuing lifestyle untenable or their professed values hypocritical.

Closely related to "no one could see it coming" when people saw it coming.
If you are "Per order profitable", why do you need 535M USD? I dont get valley valuations/Metrics..
Yep, racism came later. Racism developed to justify slavery. Slavery didn't come into being due to racism.
I would love to see improvements to "the button" as well.
The problem is that a tool like this gives the same bad data a "scientific" sheen.
Any sources of that claim? because seams very unlikely.
Beyond React 16 by Dan Ambramov – Async Rendering and React Suspense
Just how hard is it to build and run a successful SaaS?
The cryptocoin crowd is ridiculously defensive by nature. They have to be, the value of their funbux relies significantly on speculation so negative press is threatening to their pocket book.
I honestly wonder how many of them actually know?

If _all_ your media (including news, private messages, encyclopedias, history) hide this fact from you, how can one possibly tell - or understand what it means?
I disagree. I think I am saying something quite different.

I think the current arms race started in 2002 when the US pulled out of the ABM, followed by the "upgrades" which started under Obama. (The research for those upgrades of course started long before - it's the deployment I'm interested in.)

I think adding super-fuze to US nuclear weapons - "In the case of the 100-kt Trident II warhead, the super fuze triples the killing power of the nuclear force it has been applied to. https://thebulletin.org/how-us-nuclear-force-modernization-u... - is an example of not just of the "mere existence of a nuclear arsenal", but a determined effort to tilt the balance very much in favor of the US.

Why did we need that upgrade?

I think the US has developed its systems far enough in that direction that Russia is now forced to spend money to keep up, as otherwise MAD is no longer effective.

And that's why I call it an re-uptake of the arms race.

What would you expect to see if there were a new nuclear arms race?
I really hope they use some of this money to better screen dashers and improve customer support.

We used to order lunch on Doordash once a week till things got so bad that we decided never to use Doordash again. Orders would regularly have missing or incorrect items. Some dashers would leave the food in the lobby, text me, and leave. Delivery was hardly ever on time and there was no way to get in touch with a human on customer care except through some unlisted numbers. We've switched to Caviar(https://www.trycaviar.com) since and have no complaints.
He's arguing that the various issues that lead to Symantec being gradually distrusted mean that they believed all their existing non-expired, non-revoked certificate were compromised (in the sense that they should not be trusted) and should be revoked.

Maybe it's just me, but a company who stores their customer's private keys, sends them around in a ZIP file via email and has a trivial code injection vulnerability on their site, with a process running as root, is probably not the one I want to make that call.
Just 3 days ago: https://news.ycombinator.com/item?id=16470788

Is that a good enough response for you?
Does it make you happy that Putin decided to tear up treaties banning intermediate range missiles and start a new arms race?
Introducing HTTPClient Factory (ASP.NET Core 2.1)
Microsoft Soundscape
Chrome to begin enforcing Certificate Transparency for new TLS certs
Cyber Intrusions Forensics Manager
Cyber Intrusions Forensics Manager | JP Morgan – Jersey City NJ, Columbus, OH, Tampa FL | https://www.jpmorgan.com | Full Time - Onsite
$ 120,000 to $ 190,000 + Annual Bonus, 401k, & Pension
Looking for a global manager for our Digital Research and Intrusion Forensics team. Experience in forensics acquisition/analysis, memory forensics log-file analysis, network forensics, industry standard tools (X-Ways, EnCase, Volatility, Rekall, Wireshark, SIFT etc.) Industry standard digital forensics certifications (GCFA, GNFA, GCFE, CFCE, etc) are a plus.
Plenty of animals can tell which way I'm looking, and can teach each other things.
HP Arcsight SIEM
Fair enough, I wasn't aware of the original meaning since I only came across it multiple times on the web in this drawn, comic-like form.
Thats why they had to resort to banning a puny letter?
Trump: I can say anything to make people go crazy... No one can top me!

China: Here... hold my beer.