skysight-inc/HackerNews huggingface dataset:
The mozilla.dev.security.policy thread linked in the article is a much better read:

https://groups.google.com/forum/#!topic/mozilla.dev.security...

tl;dr: Trustico told Digicert that all 50k of their certificates should be revoked, without specifying a reason as to why they were compromised. 50k is a LOT of certificates, so Digicert asked for details. Trustico then sent Digicert the private keys, and Digicert said "Welp, guess now they're compromised".
That was but one example, there are plenty from before Ukrainian conflict started, e.g. https://en.wikipedia.org/wiki/United_States_missile_defense_...

Imagine US reaction if Putin tried to set up a "missile defense system" in Cuba. Oh wait.
PARKGENE Is One Step Closer to Becoming the Airbnb of Parking
Cucumbers also cause deaths. Around 95% of people who die ate cucumbers.
I'd rather spent 6 hours on a toy project instead of the 200+ hours I spent studying for Google. Solving problems on a white board is very different compared to solving problems on a computer with a plain text editor. I did significantly better in another interview where I was given a laptop connected to a projector instead of having to stand and write on a white board for 4 hours in one day.

The skills I would have to hone to do well in a Google style interview are very different from the skills I would have to improve to excel at my job. I wonder if Google prefers this system because the type of people that are willing to spent hundreds of hours honing their interview skills are also the type of people that are willing to invest a lot of their free time into their job beyond what is required.
What you describe is attempted kidnapping.
It's not. It's actually worse.

You're assuming that random people on the internet are going to collectively be more secure than CAs, which is obviously not the case.

Imagine you get an email signed by the IRS, and which is trusted by people A1, A2 and A3, who are trusted by people B1, B2, and B3 ... who are trusted by Z1, Z2, and Z3, who are fully trusted by you.

Should be reliable, right?

But while Z1, Z2 and Z3 may keep all OPSEC rules, you have no guarantee that they verified that Y1, Y2 and Y3 did. And even if they did, you have no guarantee that ...

And even if you did, can you guarantee that no one there got any malware, which signed off on a bunch of fake certs?
Probably the major cause of deaths in the world is the US Dollar, and BTW Bill is totally outdated everyone doing something fishy as moved to Monero by now.
How many deaths has Windows "caused", through military uses etc.? How about PowerPoint?
The snail-mail address of the registered agent would suffice. The cost of postage is sufficient to deter the least-determined spammers. And the most-determined spammers would be deterred by the most potentially profitable targets having legal departments handling the mail received by their registered agents.
On IPFS popular content is cached, a website like youtube will most likely not have to pay hosting for any parts of it's website or popular videos if they were to run on IPFS.

Content that is not popular enough to remain in the IPFS caches will require filecoin or some other form of paid hosting to keep it around, thusly increased cost.
Care to share one?
> "The main feature of crypto-currencies is their anonymity. I don't think this is a good thing"

So I suppose cash causes death in Bill's world view then?
I managed to get firstinitiallastname@gmail.com (account created in 2004ish) but for my Proton Mail account I had to add in my middle initial.
https://buymeacoff.ee/elliot

This site looks awesome, really cool to see what you're doing and I really hope it takes off! A little bit of feedback:

1. You really show offer a button in markdown format. The HTML one doesn't work on a github markdown document without losing all the styles because of github markdown security.

2. Because I had to use the image for markdown, I noticed that the image is pretty fuzzy on a retina screen. The whole thing is quite low res, might be worth doing a 3x one if you can?

3. It'd be great for a user to see the price they're donating and then just change it with a slide or input field. At the moment jus x1, x2, x3 is not only limiting but also quite hidden. A coffee in the UK is quite different to a coffee in Norway for instance. It also means someone can give much more if they'd like which is great for creators! Perhaps allow the creator to set a suggested and minimum donation, you can then cap at say $5 minimum, but have a suggested of $10 and the user can choose a value from there. If you wanted to keep the coffee analogy, you could have a nice little SVG which changes to a more extravagant coffee the bigger it gets, maybe eventually turning into a coffee machine at X amount.

4. I feel like I probably shouldn't be forced to setup a payment provider to get going, it makes it a lot more work to get up and running as a user of the platform.

5. It'd be fantastic if I could see where people came from when they donated. Perhaps they came from npm, github, or my blog, each is very different and lets me experiment with what's working and what's pointless.

Great platform, just what I've been looking for recently!
Yes as a concept.

It's like saying personal identity or team idenity is made up which it is but we don't call for the deconstruction of that just because some people are mass murderers or some teams have hooligans.

Individual examples aren't arguments in them selves.

You cannot not have a national identity as a concept whether you want it or not the second you introduce other nations or other personal identities or team identities.

You have to show as a concept that it's worse than it's good, saying that it's made up (which is all the video really do) is not an argument. All identities are made up to some extent.
Wind and Solar Could Meet 80% of US Electricity Demand
They have a tool that allows you create a private key + CSR

https://www.trustico.com/ssltools/create/csr-pem/create-a-ne...

Apparently they decided to keep a copy of the private key.

Edit:
Looks like they are having problems atm. A copy can be found at

https://web.archive.org/web/20180217071027/https://www.trust...
Yeah, and live mods to it as well. They had me write a Tetris game in person. All in all, I think the process most definitely will find good devs.
Some (small) percentage of people would actually prefer to work 14 hours starting at 11 AM than 8 hours starting at 7:30 AM. But...

I learned something at my first few startups... if you are working 14 hours consistently:

1. You will get burnt out quickly

2. Probably only 6 of those hours are productive.

If you tell employees to work 14 hours they will record 14 hours in their time sheet but they are probably not actually "working" effectively.

Now as the CTO of a startup I consider it my personal mission to grow and improve the product by making sure the team workers more efficient not longer hours. I get the same 6 productive hours out of the team and much happier employees. In fact, it could be a coincidence, but this go around we ship features faster and have less bugs then when I was at a company that demanded 12+ hours.

With that said, I also grew a lot as a person and manager during that time. And learned what is effective and what is ineffective uses of time. If you aren't able to answer the question of what will have the largest impact and what is the best use of time than it is easy to end up with people working 80 hour weeks.
and also Bitcoin as saved many lives, just look at the astonishing quantity of Bitcoins that have been given to charity.
Maybe its still workable - the impulse to keep station at that distance would be smaller too?
Angular is coming: Preparing the upgrade
Here is the counter argument to Stochastic Computing.

http://csl.yale.edu/~rajit/ps/stochastic.pdf

Basically, stochastic computing takes exponentially more time and energy to perform the same computation at the same precision, and has a higher error rate. If you want to save energy on precision, it would be better to use bit or digit serial operators.

Note of disclosure, this paper was written by my adviser and I am currently writing two papers on digit-serial arithmetic operators.
I second the housekeeper. I spent $40K on mine last year, and it was the best thing I have ever spent money on. I've done dishes once in the past year, and I generally come home to a made bed. Imagine getting all of that, but then know that you are providing a near livable wage with flexible schedule. She can be a good mom and make money.
in nbody terms - that is an additional condition so the problem would have to be solved separately. ask the author, i'm just a lurker here.
No, its going through some motions. If you don't make the attempt, its not an attempt. By 'change of heart' I meant they don't make contact, not that they 'let them go'.
I'm a bit surprised this wasn't posted on the arxiv as well. Maybe it will be soon?
This seems to be a common assumption but I have not found it to be true in my experience at all. My spending habits appear stagnant and mostly rooted in my childhood experiences, and it's a continual battle to spend more.

There's that idea that giving poor people money will have them just spend it gambling or buying drugs, doesn't seem to be true, either.

A lot of these just sound like justifications to pay people less, or an odd way to shame people for wanting something material. Money is power, and power is always valuable.
Somewhat related - I've always wished that HN allowed comments on the Jobs posts (not who is hiring, which is a normal thread, but the YC backed company posts). I think there are a number of people in the community who have had interactions with these companies and could provide insight to those thinking about applying to them.
Reach out through my profile and I can give you a basic free review of what you have (redux13 only please, I typically charge for reviews). I run a Shanghai based English resume/LinkedIn Profiles (and other services) editing and enhancement business. I create them multiple times a week for clients globally and received training from the US standards bearer, the National Resume Writers' Association. Previously 24 years on Wall Street, East coast resident, native speaker and liberal arts graduate from good smaller upstate NY college. Speak to you soon.
Bill needs to stick with what he actually knows about.
This was very irresponsible from the CEO, but should not have been possible at all.

The private key should be generated where it's used, a certificate signing request created and sent to a certificate authority. After the CA makes sure the CSR is legit, they can sign the certificate without seeing the private key.

Copying the private key outside the server is an unnecessary risk. Giving it to a third party such as a CA or allowing them to generate it, moreso.
It's far easier and cheaper to build ways to evade an ABM system than to build one.

The US has spent probably hundreds of billions of dollars on ABM systems.

Eg, "Boeing Gets $6.6 Billion From Pentagon to Expand Missile Defense" earlier this year, from https://www.bloomberg.com/news/articles/2018-01-31/boeing-ge... .

And then there's all of the failed projects like the $5 billion spent on an airborn-laser and $2.2 billion spent on a sea-based X-Band radar ship which was downgraded to 'limited test support status'; see http://graphics.latimes.com/missile-defense/

It makes no sense for Russia to spend billions on a similar system when they could simply make missiles which can evade the US ABM systems. Also, doing so does not require them to pull out of any existing arms control treaties, which the US had to do in order to develop its ABM systems.
Internet Explorer Plus their bookmarks manager
Bit by Bit, Whole Foods Gets an Amazon Touch
nixpkgs contains tools for building Docker-compatible container images with `dockerTools`, and also AppImage-style standalone executables with `nix-bundle`.

My project, as well as many other projects, ships its own default.nix for builds. Linking an example would deanonymize this account a little too much, but there's plenty of examples out there.
Remote Code Execution Vulnerability at Trustico
That's not DRM. That's because the Chromecast can't store media, and requires it to be streamed. Google play music doesn't want to stream - probably because it will eat battery, or just because they know/think that few people sideload music. You can just upload it and stream it from their servers, or find and app that will stream from your phone and accept the battery loss. I'm pretty sure these exist.
> "...instead of the 200+ hours I spent studying for Google"

That sounds like an exaggeration. I'd bet that very few people who work here had to spend that much time preparing...
Since we're on the topic of learning... https://hbr.org/2012/03/hard-to-read-fonts-promote-better-re...
The new Light Phone 2 keeps things basic but adds e-ink and ‘essentials’
You are right, my comparison is absurd. bTCe work to return funds to their customers though, not those of mtgox. Nor should they need to, if indeed the accusation they colluded with MTGox hackers is false
How do you figure? Sure the short story has a dramatically different ending, that I kind of preferred, but on the whole it's not like the short story is that amazingly well written.
Some of the Banking websites ( easily say most of them) - Bank of america, ICICIBank (India), State Bank of India etc.
Im not sure biological organisms will ever stick around long enough to do such things. I think the benefits of inorganic organisms are too great. They'll be much more suited for life in space.
This looks great! Here's my link:

https://www.buymeacoffee.com/philbarr

I've suffered with eczema all my life and am working on a webapp to help people monitor their eczema, since constant monitoring of what you eat / drink / do / everything is one of the best ways to control eczema. Couldn't really think of a way to fund it before and will try this. Thanks!
Who can summarize why this is interesting?
This mirrors my own experiences very well. I always look for analogies to understand new ideas (or to explain them).

Also, if I'm driving to a relatively new destination that I've been to before and think I'll go to more times, I try to remember the way without looking at the GPS, because I've found that if I look at the GPS every time, I don't end up remembering the route as well.
Tories, Trapped by Their Red Lines, Again Blame EU as Clock Runs Down
Learn SELinux by doing. Solve Puzzles, show skillz
> Finally -- the CSR/key generation form page incorporates JavaScript from at least 5 or 6 different companies (including ad servers), which would allow any of those third parties (intentionally or through compromise of their own) to capture generated keys. This is a reckless amount of exposure, to the point that even if the keys were generated completely inside the
browser and never exposed to the server (which does not appear to be the
case), I would consider them compromised at the time of generation.

Also, wow. That's extremely reckless.
This seems more like "How Do We Memorize?", as is taught and performed (poorly) in American schools.

In contrast we learn by doing, by manipulating things or concepts.
He was referring to the way digital currencies like Bitcoin are used to buy drugs like synthetic opioid fentanyl.

anonymity of digital currencies meant they were linked to terrorist funding and money laundering

It sounds like he means drug overdoses, black market violence, and terrorists attacks kill people.

But at least he knows malaria kills far more people than those three combined. He should probably get back to solving that.
Ended up selling the domain. hnrss is a much better alternative these days: https://edavis.github.io/hnrss/
This is more less the same thing I said, with lots and lots of details. Similar things were taking place during the Bush administration. There is a lot of realignment, a lot of posturing, it is certainly a risk but it very much does not amount to a 'nuclear arms race'. If that's a nuclear arms race, the nuclear arms race never stopped. That's not an entirely unreasonable position but if you take that position, for you, the mere existence of a nuclear arsenal of any sort on either side constitutes a perpetual 'nuclear arms race'.
So does USD by that measure.
Wow. Talk about solving the wrong problem.
I got a job at Aflac on my first try. I was even offered my choice of jobs as I qualified for more than one position. I applied because my mother suggested it. It was outside of the field I desired to go into.

A coworker of mine spent 5 years applying and reapplying and trying to improve their qualifications until they finally got hired.

I don't see any reason to question the statement that GP invested 200 hours.
FreeBSD's internal CoC conflict leaked
Someone has leaked FreeBSD internal CoC discussion.

- download mbox file https://dropfile.to/SPOD727
- run: mutt -f coc.mbox
To be fair, he's not really saying crypto-currencies cause deaths. He's saying anonymous currencies can cause death. It sounds like he could be in favor of a regulated crypto-currency.
>It's possible for eyewitness testimony to be the #1 cause of wrongful convictions, but for there to be only e.g. 3 wrong convictions a year out of 100k trials. Which would probably be pretty "acceptable".

"It is better 100 guilty Persons should escape than that one innocent Person should suffer." Three innocent people being punished is a travesty and in no way acceptable.
Nuster 1.7.9.6 released – A web caching proxy server based on HAProxy
yuhuuu! I'm looking forward to the weekend to update my project.
America is strange.
I was really surprised not to see this method in the article.
It sounds like Trustico got these certificates from Symantec. The CEO of Trustico was arguing that they should be revoked as they weren't secure and emailed the private keys as proof. Which, while a dumb thing to do, did prove his point I guess.

EDIT: From Trustico's account

> We believe the orders placed via our Symantec account were at risk and were poorly managed. We have been questioning Symantec without response as to concerning items for about a year. Symantec simply ignored our concerns and appeared to bury them under the next issue that arose... We were also a victim whereby Symantec mis-issued SSL Certificates owned by us, subsequently we were asked to keep the matter quiet, under a confidentially notice.

https://groups.google.com/d/msg/mozilla.dev.security.policy/...
With a base salary. With the comp above, ~£25k (~$35k) in base salary so fairly low with the expectation that a good sales person can earn well over 6 figures.

This is in the UK so expect the US to be higher.
3 Ways Architecture Benefits the Elderly
its worth noting, that they were not orbiting a star (I don't know if that would be a positive or negative issue, for stability .. they moved away from the star to cool off)
They said in the article they kept the private key to simplify the revokation process. Thus, very likely they also generated the private key.

It's a bad practice promoted by issuers that want to sell a "managed" or "value added" service corporate IT is so fond of. The lesson here is that there's a lot of IT people that don't grasp the basics of key management.
I think the real sentiment here is: good PKI is an unsolved (and perhaps unsolvable) problem.
"foo" occurs in the lyrics to Cab Calloway's 1939 Jumpin' Jive, as in this clip, also featuring fabulous tap dancing from the Nicholas Brothers: https://www.youtube.com/watch?v=_8yGGtVKrD8
China’s Censors Ban Winnie the Pooh and the Letter ‘N’ After Xi’s Power Grab
Lots of silly comments here.
I’m fairly certain in a reply someone mentioned this, and Bill said that cash does lead to deaths, but with it comes actual Person-to-Person contact to exchange, making the anonymity of cryptocurrencies more appealing.
This has been a central problem for decentralized or any 'P2P' protocol since day one.

When the more popular music sharing sites like Napster and Morpheus were taken down due to their reliance upon 'hub servers', more distributed networks like Gnutella attempted to get rid of their need for points of failure.

But even they needed a concept of a bootstrap index to obtain a list of hubs from which to get on the network. And sure enough, it turned into a game of whack-a-mole between the industry and these servers. Torrenting has the same problem.

If I remember right, the only protocols that work in the long run are those that can broadcast and discover each other, but they're limited to local LANs. Once you need to go outside of your own network, you need some way to discover where nodes are located, and without an initial point of reference(s) (which becomes the point of failure), you're screwed.

Same problem with trusting users - either you use a centralized authority or pre-trusted root certs, or you have to know in advance the other users (e.g. physically exchanging PGP certs).
Bullshit. You're arguing as if every JS developer has to interact with every JS community.

Stop presenting these ridiculous false dichotomies.
Do you have any suggested reading for the theory? I'm going to be using QUESO[1] for some research with Bayesian statistics and am trying to learn more of the background knowledge.

[1]: https://github.com/libqueso/queso
Facebook is not getting any bigger in the United States
Sir and/or Madam,

I feel the need to inform you that you are, more than likely, quite ill-informed. Zines are a spectacular human achievement, worthy of your attention and respect. Or, were it otherwise, how do you explain this godamn amazing piece of work:

https://www.alchemistowl.org/pocorgtfo/
> But at least he knows malaria kills far more people than those three combined. He should probably get back to solving that.

Good news he is :)

Honestly, some of the responses in this article are a bit defensive-- he was asked what he thinks of crypto currencies, and he answered that he doesn't think the social impact of anonymous cash is good. There's a sense in this thread that he is going around attacking crypto currency, when he is in fact expressing his view of how anonymous decentralized currencies can enable/facilitate dangerous things to happen.
While true, that's because those weapons are more precise and robust. There's no need to have so much redundancy.

Eg, with super-fuze all of our submarines have hard-target kill capability. That wasn't true a decade ago.
B2B enterprise sales is all about networks and contacts. A late 20s MBA will have none of these. You need someone who can work their existing extensive network as well as cold call, and get you in the door in front of real budget holding decision makers. I've worked on rates & FX trading systems in London for 20 years and know several guys like that who all do commission and equity points comp deals. PM me via contact details if you want to connect.
Well, recruiters do produce /some/ value.

For employers, recruiters will do the dirty business the employers don't want to know about. For example, ignoring PII legislation to get a larger pool of contacts. Advertising highly paid nonexistent jobs to harvest CVs. Lying to candidates and pressuring them if they're wavering.

These convert into more hires.

For employees, recruiters will bypass bullshit job applicant websites that make you re-type your CV into their agonisingly long forms. They'll free you from emotionally draining work like customising your CV and writing a thoughtful cover letter - or even to really know what an employer does before applying to them. Often they'll also tell you interview questions in advance, and some will help you cheat on take-home tests.

This converts into less effort needed per job offer.

I'm not saying I like them - clearly, I see big disadvantages - but there are reasons they've lasted as long as they have, as an industry.