skysight-inc/HackerNews huggingface dataset:
Good question. An expiring cert is not required for VR. It was a massive screw-up by Oculus.

Most (I won't say all) certificates expire. However, there's a huge difference between an expired certificate and one which is renders a driver invalid - and this is one of the two places Oculus erred.

When you sign a driver, you want it countersigned by a timeserver. This cryptographically assures that the cert used was valid at the time of signing, so the signature on the driver remains valid even if the signing cert expires (the crypto ensures a hacker can't just change the metadata with a hex editor). It allows the OS to confirm that the code was signed by a cert that was valid at the time of signature (even though now expired). Without it, the OS can only assume that the code was signed the same day as the validity check. Two days ago that was fine, but yesterday the signing cert expired and everything broke.

This was screw-up number one. Apparently, during the build process from Oculus's v.1.22 to 1.23 release, the timeserver countersignature was removed. This is obviously a mistake, because that took place about 30 days ago. No sane person would assume that they intentionally did something that would bring down their user base in a month.[1]

Obviously the second mistake was letting their certificate lapse. This was compounded by the fact that their update app was signed by the same cert, so they couldn't just push a quick fix (because the updater didn't work).

So in short, signatures don't expire, but the certificate used to do the signature does. With a timeserver countersignature the code would have kept running but no new code could be signed from the old (expired) cert.

Oculus missed some pretty big devops gaps, and suffered a big black eye for it.

But it had nothing to do with DRM, planned obsolescence, needing to connect to the internet, or Facebook data capture.

[1] Other commenters have mentioned that if a timeserver is down at the time of a build, it can fail to add the countersignature. Maybe that's what happened?
scroll to the bottom (corrections)
When Monopoly Is Good: Affordable Insurance in America
GitHub fought the largest ever recorded ddos using Akamai Prolexic. At least according to Wired.
https://www.wired.com/story/github-ddos-memcached

I think protonmail is experiencing the same type of attack (memcached amplified)
5 things Facebook stole from BlackBerry, according to BlackBerry
I'll disagree with this. Cybenko's approximation for a multilayer perceptron is simply a concrete expression for Kolmogorov's representation of a continuous function, which was created in order to solve Hilbert's Thirteenth problem. This has absolutely nothing to do with the brain. Yes, Cybenko uses the word "neural network", but just look at expression (1) in his paper "Approximation by Superpositions of a Sigmoidal Function" and compare that to expression (1) in Kolmogorov's paper "On the Representation of Continuous Functions of Many Variables by Superposition of Continuous Functions of One Variable and Addition". The brain diagram used by most neural network books is really just a graph diagram of a matrix-vector multiplication used in the superposition. While I can't claim to know everyone's inspiration for their research, there really is a mundane explanation and history of these algorithms that has nothing to do with the brain.
Just finished benchmarking this for a key workload in our build process. It's 3% faster than Node 8.x for us. But node-chakracore (the Microsoft runtime) 8.9.4 was 11% faster -- we are considering switching to that.
What about the hundreds or thousands of other ads you see each day which have little relevance? It's easy to remember the ad that is creepily accurate, but I don't think it's at all surprising that these ads are occasionally hitting the jackpot
actually now I reread it I'm not sure either. The rest of the paragraph is:

"Tinder gave rise to a
massive expansion of Match’s market and became one of the largest mobile platforms globally,
capable of a profound and positive impact on the world. Nearly every week we read news stories
around the world of people celebrating weddings for couples that met on one of our properties"

Which doesn't make it sound quite as sleazy.
@patio11's recent tweetstorm touched upon the core point

> Most open source software is written by programmers who are full-time employed by companies which directly consume the software, at the explicit or implicit blessing of their employers. It is not charity work, any more than they charitably file taxes.

https://twitter.com/patio11/status/936629310785437696

The actual monetization, as the post explains, comes from related products and services. The presented Oracle analogy to IAP is fascinating:

> Oracle offers a basic version of MySQL under a GPL license, with additional closed source – and expensive! – add-ons that better fit specific businesses’ needs. The allegory here is in-app purchase: a basic experience that gets the user invested in your product, with value-added options that are more attractive because of said investment
To say a degree "guarantees" you such a job is very much an overstatement, though. (Even more so to imply a guarantee of "a pension when you retire at 65.")
See my other comment replying to someone in parallel to this one.
>Correction: March 7, 2018

Because of an editing error involving a satirical text-swapping web browser extension, an earlier version of this article misquoted a passage from an article by the Times reporter Jim Tankersley. The sentence referred to America’s narrowing trade deficit during “the Great Recession,” not during “the Time of Shedding and Cold Rocks.” (Pro tip: Disable your “Millennials to Snake People” extension when copying and pasting.)

Hah! Guess someone's editor will be hoping the blogsites don't read the corrections today...
Part of the problem is that it hasn't been laid to rest, it's still being taught as an example of an outdated and mistaken scientific theory, which has lead to a bias against epigenetics.
"In your heart you already know what you want to do".

>> Mind doesn't know that.
I like to get a fair and balanced view on things. I love "racism simulator"

https://chrome.google.com/webstore/detail/racism-simulator/d...

Use it for a week while visiting leftist websites. It will show you how obsessed they are with people's melanin and chromosomes. Shocking beyond belief...
Ah right thank you, I figured it would be an article about millennials that was corrected and not Trump.
Our company is in the same boat - we have this weird, custom package management system that's a franken-hybrid of shell scripts, vanilla Python, Scons, and CMake. Every time I have to do anything even slightly outside of the norm with it, it breaks badly.

And there's this huge sunk-cost that makes it functionally impossible to suggest replacing with anything else. It mostly works but it's getting crustier by the day.

So I feel your pain.
The standards sociological finding is that suicide is more likely to decline than rise during a war:

"Suicide rates are thought to fall during wartime. Durkheim [1] suggested this was due to increased social cohesion, while others have suggested that competing outcomes may be important, with individuals who might otherwise have died by suicide being more likely to die of other causes [2]. Neeleman [3] cites this as an example of contextual effect modification, with suicide risk modified by the likelihood of dying of other causes.

Examples of reductions in suicide rates in times of war have been described for several time periods and cultures [4-9]. Marshall [10] argued that the reduction in suicide rates reflected a reduction in unemployment, a recognised risk factor for suicide [11], rather than a direct effect of war, an argument offered some support by Lester and Yang [12]. Stack [13] suggested that the suicide rate decreased as the proportion of the population employed in military roles increased."

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1526726/
That's weird, I see some people subscribed already so it should work. (creator here)

Is someone else experiencing issues?
Comparing their open-source ecosystem, I still prefer to build my lambdas with NodeJS (or even Python) over C#.
(if my only concern is performance)
http://archive.is/LdEX8
Automation, Metadata, Surveillance: Putting All the Pieces Together
Thank you for the encouraging feedback. Yes, privacy is one of the reasons. And you got it, the high quality stickers and pre printed accessories is what i intend to sell.
As a layman, I've never heard of qubit quality. What is it exactly? How do you determine it? And why does it affect computation?
I think you are making a TON of assumptions here.
Ideas That Changed My Life
The insight about PayPal and the replies on this thread backing that insight up are so helpful to know. Definitely going to try using PayPal on any future paid projects I make.
> There's no reason for drivers to have an expiration date

If you can license software with a definite expiration date, why can't you license hardware with a definite expiration date? And have your license enforced by the operating system? Imagine that I'm a company with a hardware product, and instead of selling that hardware at large expense, I rent it out, and provide drivers with an expiration date to enforce the terms of the hardware lease. If the lease is renewed, I'll provide new drivers with a new lease expiration.

Not that I'm arguing for hardware licensing, or arguing that it was what Oculus was trying to achieve and screwed up somehow. But there's a difference between "Microsoft built a feature some of their customers didn't know how to use" and "Microsoft built an anti-feature".
I would love a book similar to C# In Depth but for C++. The book takes you on an evolutionary tour of C#s features, version-by-version. One of my favorite programming books of all time and a good read even for someone who doesn't program in C#.
It’s worth noting that this has been mainstream science for over a decade. It’s important to know, but honestly not new.
Our product is a training aid for medical professionals and is not regulated as a medical device, in the same way that a flight simulator is not regulated as an aircraft.
That's very interesting. Try to think of what the probability of that happening is.
New Hudson Tunnels Are Canceled. Again. – Pedestrian Observations
If the license that is presented to the user for acceptance doesn't include specific termination dates, or as is common in most consumer software specifically states the license is non-terminating, then any product that stops because a certificate expires is a flat out violation of the agreement and every single user should promptly sue the publisher for 100% of their money back plus any damages. And, in my opinion, this sort of thing is not accidental, so it should penetrate the corporate veil that protects individuals from liability.
No. "Once the DB has finished the query it sends the data back and triggers another lambda function"

What mechanism is the DB 'sending' data via? Is it just the response part of the initial query? Then it's executing in the context of the same lambda function. You -could- then call another lambda function from the running lambda function (but why?), but more, what was the function that executed the query doing while it waited?

If it had something it -could- be doing, it should be doing it, so non-blocking is important. If it had nothing it could be doing, it literally does not matter if it was a blocking call or not; it doesn't effect anything.

Now, if you meant you have a trigger in the DB that calls another lambda function, such that the original lambda could complete, yes, of course you could do that. However, if this was a GET style call, not a PUT, your options to get the data back to the user are limited if you don't just keep the REST request open and respond that way. Certainly, any other solution is more complex, probably more expensive, and may not be possible.
This idea sounds dangerously close to a company town, which is fairly universally regarded as a terrible idea. https://en.m.wikipedia.org/wiki/Company_town
Thanks you're right I've updated to "Revenue & Expenses Estimate" on the page title.

Indeed there are a lot of norms about how these reports are presented in the financial world, but for the common people it's often complex to understand. I'd like to make a design that could help a 20yo waitress understand business better, more than for accountants !
> Luxury condos reduce demand on other buildings, helping keep rents down. Without them you'd have more rich people bidding on regular stuff.

Luxury condos attract rich people that otherwise might not be in the local market, both directly (to live in the condos) and indirectly (by stimulating a local increase in services catering to a rich clientele, making the area, not just the condos themselves, more attractive to the rich.) This can make the net effect an increase in demand for other existing housing from the rich, rather than relief of such demand.
I'm more surprised that a journalist, whose job is ostensibly focused on the accurate reading and writing of textual information, would run such an extension on their work device.
I've stopped recommending keybase since they removed all references to being able to do operations directly with gpg (which is a real shame - it worked incredibly well and was the best example I've ever seen of web/CLI integration). The whole thing is becoming very opaque and startup-y and hey-we're-an-app have-you-downloaded-our-app why-not-app-our-app app-app-app-app... I'm really not a fan of these "minimal" growth-hack-y websites which seem so popular these days.
The campaign connecting affluent techies with candidates around the country
How does this interact with pilot wave theory?

Is the article saying that the causal direction of time is undefined within a quantum entangled system? Or is that more than what it’s claiming?
> Is it really so implausible that for a house in a scenic rural area, a succession of people renting it for a week or two each over the summer might end up getting more out of it (between them) than someone wanting to live and work in it for a whole year?

Are you really suggesting that just because you live and work in your local (scenic) rural community you couldn't possibly enjoy the surroundings just as much, if not more, than as a few fleeting transient warm bodies with suitcases could? As residents, we're quite proud of our village and surrounding rural lot and deeply care about and appreciate what we have.

Also, and ultimately, it's the local permanent residents that sustain, year round, the two pub/restaurants, the village shop and the assortment of plumber, electrician, carpenters (all of which also provide substantial local employment), not infrequent visitors occupying holiday homes that lie empty for 50% or more of the year.
Thank you for the feedback. The intention is that you don't have to show personal information. Also, anyone can add custom information to display when the code is scanned. So email and number can be that information.
This is great information, thanks.
> trustless, distributed consensus model

Still sounds like git to me. The main difference is that Bitcoin's consensus model is fully automated, whereas git's relies on humans making decisions on which commits to include in their copy of the repo. (Though I suppose "trust" can indeed be one factor humans use when making such a decision.)
> The root cause of everything is the laws of physics and, to the extent it is a separate issue, the initial state of the universe.

Only if you think that the laws of physics are deterministic, I guess.
That's really the riddle of the Schroedinger equation for any quantum entity.
Look-Alike Domains and Visual Confusion
The Quantum Thermodynamics Revolution (2017)
"The Power Broker" is also a great read if you want to know more about Robert Moses.
I agree, but somehow people are fascinated by yet another centralized project
They have VPN service as well. It could be critical for VPN.
If I remember correctly, "Cloud to Butt" was completely open source and easy to self-install if you didn't want any updates added. You could see that it just ran through the DOM and did a text replace.
Exercise keeps your body looking young, study finds
”we now feel ready to take the next step and work to support more instant-loading content not based on AMP technology in areas of Google Search designed for this, like the Top Stories carousel”

Seems encouraging. Any step away from a walled garden is good.
I assume that the incentive already includes “the sorts of files people typically bother encrypting include wallets and private keys”, whether or not the file encryption service itself integrates cryptocurrency directly.
Twenty years here. I've gotten married, bought my first place, had a child. The manager who hired me is still here, along with many others.

We've lost some coworkers, always seemingly too soon. I've been to a couple of wakes, one for a coworker's wife.

I don't want to say we're like family, but we look out for each other. The year before the company rolled out 2.5x salary life insurance, someone started a crowdfunding campaign after a coworker's sudden death that raised over $50K in one day.

I know I've been here too long, but I'll miss it. I grew up here.
This is absolute nonsense and dangerous to boot. Facebook's ARPU is still less than $20/year. If they literally paid all of their profits directly to their user it would still be a pittance. The real value of privacy has to do with freedom, manipulation and surveillance, and that is not represented by economic measures at all. Talking about the value of the data in purely economic terms is exactly the way you would want to frame the issue if you had more nefarious plans down the line.
From the point of view of a user concerned with Google's influence, this seems like a good move.

From the point of view of a SRE who would have to help configure a server side implementation of web packaging, having yet another http request/response type to build and maintain seems like a bloody nightmare. And OCSP with the signature when Chrome themselves have disabled its use? It also requires custom behavior from the client, all-but-guaranteeing it won't be broadly honored.

And ultimately, I'm confused about how this replaces, or supplements AMP.
Except in that experiment Facebook was intentionally trying to manipulate users' emotional states.
Agreed on dummy files, that's one of my least favorite things about Make. If you structure everything right though, you can usually figure out how to do it with the actual input and outputs.

GNU Make's documentation is very well written though. Like, shockingly well. Don't be afraid to read through it if you see some weird syntax that you can't figure out.
Would have been awesome like a year and a half ago when I cracked my phone screen.
<facetious>
Unicorn opportunity? "Uber for touch"?
</facetious>
Depends on where you are in Manhattan.

I used to commute from Nostrand to the UES and it involved taking the G train to the E train to the 6 train plus lots of walking. Easily over an hour.
Quite a useful platform
Thank you, that's a very good point. I'll update. Stick it, scan it!
That is one hell of an impulse buy. Would you care to hear my sob story and startup idea?
Server Rendering with React and React Router
Housing subsidies and allowances are pretty common though.
I use tmux for this, often with a horizontal split displaying the output of the script on the bottom and the query/ddl on top (just like isqlw).

I know it's possible to automate further (to make vim talk to tmux and execute the bit of SQL under the cursor, for example), but it works well for me as is.
or the port on your keyboard is upside-down. -_-
nobody on Earth knows how to "split it up".

You can get preferred treatment for preexisting apartments, but how would you manage that for newly built ones? USSR tried to, they failed and made lifes miserable. China tries and it's not helping.
Big hype cycles typically have lower low point as well as higher high points. I don't know if another AI winter is around the corner, I hope not, but it is definitely a possibility. I am much more pessimistic about blockchains.
Akamai's Prolexic platform was able to mitigate the attack by filtering all traffic sourced from UDP port 11211, the default port used by memcached.

Interesting. The impressive part is that their platform correctly identified the attack and automatically applied the solution within 20 minutes. I wonder how?

Possibly a team of smart sysadmins on standby? It's easy to detect when you're being attacked, but hard to mitigate. So whenever you get attacked, set up your site to automatically forward over to this service, and their clever humans take it from there.

Some of the most impactful tech projects are just mechanical turks, so it wouldn't be surprising. But I wonder what the truth is.
Canada’s housing bubble is starting to burst
Browsers already do this with HSTS.

https://tools.ietf.org/html/rfc6797#section-12.1
That's true, though this particular spot isn't very popular. Until recently, I'd never seen someone else take a sunrise shot from this particular point of view (the beginning of summer is when the sun is closest to the bridge, and it only rises close enough for a good sunrise photo for around 2 weeks). And when I took my shot, I actually thought I was alone in the park.
Yeah, I didn't mean that as a dig at target. More so I meant that Facebook is probably just leaps and bounds ahead of everyone else.

That being said, that's totally based on just a hunch and I have no real data to back up that assertion so I could easily be wrong.
Yes. I don't know what the exact term for the process is, though, since I'm not knowledgeable about linguistics and childhood development beyond what I've learned from raising my son.

It's very exciting to watch and hear the progress!
Launching on the Slack Directory and how we doubled signups with a simple change
A House of Cards: An Exploration of Security When Building Docker Containers
I guess we didn't have to worry about Kang or Kodos... :-)
Groundwater Reveals Widespread Radioactivity at Duke Energy Coal Plants​
How Streamr Labs will help make a real-time decentralised data economy a reality
The 30-second to publishing a TypeScript package to NPM
The issue is that you now have ICOs (including by public companies) that use the term "blockchain" just for the hype, even though the supposed "blockchains" they use don't fulfill your conditions.
The idea that people are perfectly rational actors with perfect information has long since been debunked.
Then the attacker gets access to that USB device. (And only that USB device.)

What if your unsandboxed native USB utility has an RCE vulnerability?
Scons and Cmake aren't too bad. With either one of them, you at least know that a team of developers and a large user-base have worked out most of the kinks.

Honestly though, raw GNU Make isn't too bad either, except for the not having any good built-in mechanisms for a 'configuration' step.
Juno and CoCalc: Bringing Jupyter Notebooks to the iPad
From what I can read, entanglement extends to other particles like electrons, which have mass and do take time to travel. So, your theory doesn't explain entanglement for electrons.
XMPP is a protocol. Slack's own RTM API is a protocol. It was claimed that the former cannot be extended but the later can be - which I argued is wrong.

Now you're arguing about something completely different. It's not like it's a death sentence if some RTM API-consuming app is not capable of something - why does it suddenly becomes an issue when we switch protocol to XMPP?