skysight-inc/HackerNews huggingface dataset:
Also, beyond a certain point, there isn't anything sacred about the Constitution or its Amendment process in so far as a majority of the collective populace agrees to it and there are powerful bodies enforcing it.

Ultimately, as we have seen countless times including now, in China, and 2 years back in Turkey, might is right and any constitution can be amended arbitrarily under the right circumstances by the right people with the right power and control over armies.
"Atari collapsed because they gave too much freedom to third-party developers and the market was swamped with rubbish games." - Hiroshi Yamauchi, President of Nintendo (1986)
> Under TLS 1.3 the Server Name Indication extension becomes mandatory

Is the client allowed to not send an SNI? If not, does this mean that HTTPS servers will no longer have a "default" HTTPS virtual host if accepting only TLSv1.3 connections?

If you don't get to know anything about the backend at an IP until you've essentially proven you have a shared secret (the domain name), this could be a bad time for the folks who try to scan IP address space for HTTPS sites (e.g. the DDoSers who want to de-anonymize Cloudflare-protected backends in order to attack them directly.)
This kink will show you next month’s as well.

https://news.ycombinator.com/submitted?id=whoishiring
Because Wikipedia has many IPs and they change from time to time.

And best part is when Russians were blocking a blogger's web site based on IP he switched his IP to a bank's web site and thus the bank's IP was blocked automatically :)
Fountain pens are unnecessary but you at least owe yourself a uni-ball micro or similar.
HN readers seem to really really want everything to include a [year] unless it's from this week.
> Unlike a burner phone, you wouldn’t constantly be throwing it away (just getting new SIMs every once in a while)

In that case, you probably also want to rotate IMEIs, right? I don't know if the feds are routinely considering it, but they could correlate all the SIMs by looking at the unchanging IMEI.
Yes, sure, the IMEI is accessible; this is why I referred to it as a "side-piece phone" rather than a "burner phone." They're separate OPSEC profiles: evading a state attacker, vs. anonymizing some of your traffic from the view of a private individual attacker (e.g. your spouse.)
The author goes on and on about the purely financial advantages or disadvantages of society's cost of Education. Given the fact that all US citizens have the option to vote on complex social issues, I would rather that each citizen get the most education possible.

Also, the idea of budgeting education to only what we think will be useful is a bad path. We just don't know enough about what's useful to make proper decisions about what to study and who should study.

Dollars and cents is not the only way to measure a social good.
Traditional retail investors can't push a stock to $55 billion. Institutional holders have ~60% of the stock.

Fidelity, T Rowe Price, Vanguard, Blackrock, etc. Even the Bank of Montreal has a billion dollar position. Baillie Gifford of Edinburgh is sitting on a $4 billion position. Institutional holders picked up another ne three million shares last quarter.
PGP might be easier to clone (duplicate private/master keys?) without tipping off the other party like many end-to-end messengers do when you switch devices.

B told Justice Janice Dillon that he sent a message to Kim on a Blackberry that had been cloned from one belonging to the UN associate.

http://vancouversun.com/news/crime/former-gangster-says-dhak...
> My diet, for example, is pretty much a model of what many people would ideally like to eat

Can I ask what this consists of?
A side-piece phone isn't a burner phone (thus why I said "unlike a burner phone.") A burner phone is a phone used to avoid unification of identities by the state; a side-piece phone is a phone used to avoid unification of identities by private individuals. The usual example being your wife trying to figure out if you're cheating on her, but here's a few other examples:

• your wife's lawyer in divorce-court, who would love to compel cell-tower IMEI logs, but has no legal grounds to do so

• your mother who you don't want to be made aware that you're a working as a prostitute

• your abusive partner or parent who you're trying to arrange an exit from

• or, the ever-present cloying example: your friend—who is very nosy and knows your regular phone's unlock code—but who you're trying to arrange a surprise party for

Basically, as a burner phone is to Tor, a side-piece phone is to a browser's Incognito Mode.
Well, it is not a proxy but biggest ISP of Turkey.
I don't have a phone, boss wants me to get one, & I'll be setting it to UTC if I end up with one

I've had my own devices set to UTC for the past few years. It made sense for coordinating when my friends are in whichever places of time, especially for online PvP gaming. It worked well when I was working remotely
> Once you realize that every core belief you once held was manufactured by a corporation/religion/government in an effort to empower that agency, then life really begins.

This is too extreme. Corporations, governments et. al. are not original generators of these things, they just co-opt them.

Exercise is co-opted by many groups, but it didn't originate with those groups, it has always existed and worked really well. Same with most of these things.

The fact that an agency decided to make money off of it (why wouldn't it? Why is that, in itself, a negative?) in a capitalist society (where things are valued through money) is... expected? And, in many cases, it's a positive development: making it easier for people to exercise.

I'm just not really seeing the nihilism.
Pilot Varsity. Good enough, no messing with the ink.
That sounds amusing, do you have a link to something to read about this? (my perusal of Wikipedia was not effective)
Get 50% Off BURN-XT Thermogenic Fat Burner – Weight Loss Supplement
My nephew gave a stool sample your gastrointerologist’s infectionist might want to have a look at.
> Please do not spread FUD. This is hn. Mozilla cannot see your passwords.

They process your password with JavaScript they deliver to your browser; they can at any time choose to deliver different, malicious JavaScript which sends them the raw password instead.

It's not FUD; it's the honest truth. For details, see my note https://news.ycombinator.com/item?id=16565382
IANAL however I read through the affidavit and while I agree that they had probable cause to arrest the CEO I don't believe this case is a slam dunk. A fairly competent defense attorney should be able to convincingly claim that the firm was incidental to any crimes committed. Mr Ramos certainly didn't do himself any favors, but this isn't an open and shut case by any means.
Ironically, fentanyl is more dangerous than heroin and a large amount of heroin overdose have supposedly been because fentanyl was mixed in with the heroin unbeknownst to the user.
The SNI extension is a MUST in the TLS 1.3 standard. Of course this is not a law of physics, it's perfectly possible to implement a client which doesn't send this extension but the standard says to do this, so implementations which reject your connection for being non-standard might exist, might even become popular. You can reject connections that lack SNI even today if you want, it's just that the most popular web server software has the "default" behaviour you described, but that's not mandatory or unavoidable.

Anyway, it is unlikely that TLS 1.3 will be popular enough to reject TLS 1.2 connections in the next say, five years unless there's some monumental security problem that makes TLS 1.2 moot.
Same article, but the non-AMP link: https://motherboard.vice.com/en_us/article/a34b7b/phantom-se...
A $20 Retro 51 rollerball is a fantastic "It Just Works" pen that's a step up from Bic disposables -- Looks great, feels great -- I've gotten a ton of compliments on mine, but it's not expensive to the point where you worry too much about it, and fountain pens, while fun, are a bit moody.
As someone who shares this kind of routine, I can say from my own experiences and perception that it's best not to let yourself get too relaxed about the things that matter, and remain focused and dedicated. Diciplining yourself takes a lot of effort and time.

Without that (among other things) you will fail to achieve much.
Even for a Pagani, Japan’s Zonda Anija Is Completely Insane
While I have no idea given the... oddity... of this subthread, I might posit `tinc` is being referred to here: https://www.tinc-vpn.org/faq/

ETA: this is based on the open source code which may be modified, userland daemon status, /dev/tap usage... Portability... etc.

In any case - tinc is excellent
Not in a shape you'll want to bother with, sorry. And cleaning that up is currently not one of my priorities right now (it's a toy project).
Hello, who is there, the seventies.
FWIW I usually use https://npmcompare.com/ to find packages that are actively maintained
How does this compare to Mercury?
Παμε στοιχημα: Μάχες παραμονής παντού
On a similar note to your last argument, I recently started devaluing productivity. Have you read Medium's Self topic section? Have you watched any of Gary Vaynerchuk's videos? No thanks, man - I feel nauseous thinking about them. I look around at my classmates, friends, parents, etc, and I don't know. I'm starting to prefer inner cultivation, solitude, present-ness, and peace of mind over my limited views and the world's limited views. Plus, the latter does not necessarily mean laziness or passivity. Again, I don't know, I'm now thinking about how people tend to associate words with exhaustingly fabricated concepts and often forget what words conceal.
I’d give taking a class in a community college a try, most should offer a course similar to the one in the link.

http://www.nvcc.edu/academic/coursecont/summaries/CSC202.htm
> I would love to see if you can prove this.

Go to https://accounts.firefox.com/signin and view source. Note that it loads https://accounts-static.cdn.mozilla.net/bundle-75dd38d5a7f98... and https://accounts-static.cdn.mozilla.net/bundle-75dd38d5a7f98....

The signin page itself may be edited at any time to point to different files, or to additional files, which load JavaScript which steals your password and sends it to Mozilla's servers. Game, set, match for your security.
What Steve Jobs' 1973 job application looked like
Until someone puts in a tie line from Roxburgh to Benmore Manapouri's power is really only available to the lower third of the South Island. Mind you the sooner we shut down the smelter and redeploy that power to locally owned industry the better
Right. There’s also tex yoda 2. Both of these cost about as much as the kinesis, but they don’t seem as well designed.

The ideal for me would be a two-in-one. An ergonomic, well designed keyboard like the kinesis, with the addition of a trackpoint to avoid lifting a hands for small mouse movements.
One more, from a couple days ago

https://www.theguardian.com/environment/2018/mar/09/nuclear-...
Tom Scott on timezones:

https://www.youtube.com/watch?v=-5wpm-gesOY
Okay, I'll bite: last post says it got moved to new, cheaper hosting to it wouldn't go offline. This submission is on archive.org. What happened?

Neat project, though :)
This is about packages that are just inactive forks of more popular packages

Sure, you might want to install them, but probably you don't
Not really I'm afraid - can't remember what interview I read it in, but you can probably find something with a bit of creative googling.
In most cases, especially ones like this, that trust is misplaced and dangerous.
Ah memories. DirectFB was an awesome project, unfortunately, if I am not mistaken, it was only targeted at Linux at the time. Another project, that now X.org+Linux are re-implementing extremely poorly, was the Kernel Graphics Interface (http://kgi-project.org). KGI was an incredibly well engineered API, portable GPU interface, and reference implementation for FreeBSD-8.x and Linux-2.x, providing modern features and GPU programming paradigms to Linux and Unix systems; monolithic or micro-kernel designs. KGI required the General Graphics Interface for a complete user experience, as in, a replacement X server called XGGI, however, it also functioned very well without X or any other heavy graphical windowing system analogous to The X Window System, it was engineered for embedded systems too. GGI was an amazing project too, with it's platform agnostic way to draw graphics via it's multiple display targets or surfaces; DirectFB; SDL; DirectX; KGI; X11; VGL; foo. I suspect both were well over engineered, and at the time, the patches for KGI were rather large, and I believe the Linux crowd did not want GPU mode-setting in the kernel, a shame, because KGI's mode-setting was next level at the time and it could be tightly integrated with the rest of KGI, or remain a mini driver in the kernel. KGI did have some odd constructs that sometimes made for some mental acrobatics; focuses; displays; devices; odd client-server model between all the devices, it almost became a complex beast on first glance. It actually made way for a true GPU multi-headed and multi-user system, that provided fine grained security between devices or users to the GPU, managed by a brilliant low-level, or kernel level multiplexer of the low-level or kernel console, virtual terminals and other applications (or clients) to the devices (focuses/or inputs and the display). Some of their code was stuck in the late 90s and the interface was rigid regarding what a GPU was at the time, however, that could have been changed, as there were updated specifications for next generation ideas for KGI based on where GPU development was going at the time. If I recall correctly, there were GPU vendor developers volunteering at KGI, and, I could be mistaken, but when AMD bought ATi, one of the last GGI developers/volunteers worked at AMD, and they worked with other AMD engineers to convince AMD to eventually release hardware data-sheets and specifications on ATi GPU hardware, and it happened.

A shame neither took off, and we are now left with X.org's insistence on Linuxisms for GPU development.

Sorry for hijacking the thread, but thanks so much for the trip down memory lane :-)
> Anyway, it is unlikely that TLS 1.3 will be popular enough to reject TLS 1.2 connections in the next say

Sure, most servers won't be able to take advantage of this. But if your server is using TLS only to speak to your reverse-proxy over the public Internet (e.g. if you're operating a Cloudflare-protected site where the TLS is terminated at Cloudflare and then a separate TLS connection is made from Cloudflare to your backend), you might be able to take full advantage of this as soon as your reverse-proxy's client logic supports TLSv1.3.
I see an intrinsic pattern to variable naming in Go and not some randomly assigned single letters.

I work on Java code where variables name look like 'reconnectDelayToInitiallyEstablishJMSConnection" Even though very clear name it really exhaust me while reading code like this. Java explicitness things like spreading code over dozens of files and directories for a functionality that could ideally be in 1-2 reasonably sized files. And methods that actually do something instead of calling another methods.
So I guess code I deal with is understandable at a method level which finally does something. But overall it is too sprawling to fit everything in mind while looking at a functionality.
Districts don't matter for the presidential election. They only affect apportionment in the House of Representatives, which is region based and is 1 man 1 vote (within state boundaries. Even across states the differences in voting power isn't as aggregious as the Senate or overall electoral college).
Ahhh, the wonderful world of npm, where every small task has 20 libraries that are all named the same and half of them are abandoned and the other half have confusingly overlapping feature sets, and sometimes are actually all from the same authors.
IPs are often used by many sites: it’s like telling the post office to drop mail to 1234 5th St when that’s an apartment building with hundreds of residents. If you block a major CDN you’ll take out things like Microsoft, Apple, etc. and generate a lot more publicity for your censorship program.
I can write faster, for longer periods and getting less tired with a fountain pen.

When I was a student I always took notes with a fountain pen, and I was the only one in the class who could log pretty much everything that was said, and with relatively good handwriting for the speed. A lot of people photocopied my notes!

Maintenance depends on the pen. Some require frequent cleaning, but for example, I have a Platinum Century #3776 that can sit unused for a month and will still write perfectly with no fuss (it has a sealing mechanism that prevents the ink from drying). I use it with Platinum's blue-black ink, which is one of the mythical iron gall inks, but since the nib is gold and the pen is designed so that no other metal parts are in contact with the ink, it's not going to eat my pen any time soon. I think you could give that pen+cartridges combination to anyone and it will probably run for years without maintenance (although I do clean it every few months just in case).
^ I didn't mean the parent comment to sound so personal at the end. Apologies.
I second this. Having studied to the postgrad level, I've come to appreciate just how broad the subject is. Looking back, I feel it would have been near impossible for me (personally) to get here without the help of lecturers and tutors - often prerequisite knowledge creeps in unexpectedly, and you come to rely on them to guide you through this.

I agree also that regular grading and a lesson schedule help to both push you to learn, and for you to assess your progress in an unbiassed fashion.

Personally, though, I am biassed - and am thrilled when people say they want to learn more maths. I love maths, and find it very rewarding. The best of luck with your journey!
Picat has a built-in planner that enables some interesting solutions to planning tasks.

Picat has strong built-in support for important constraints, notably constraints over finite domains which is a very important paradigm for solving combinatorial tasks, and a strong SAT solver that is in fact so good that it is quite competitive with some much more specialized SAT solvers.

Compared to Picat, the syntax of Mercury is much closer to Prolog. In fact, Mercury's syntax is so close to Prolog that many Mercury programs are also syntactically valid Prolog code (if you remove or support some declarations that are specific to Mercury).

In contrast to Picat, Mercury is statically typed, with explicit type, mode and determinism declarations. Mercury can and does reorder goals to satisfy mode constraints.

Mercury supports definite clause grammars (DCGs), like Prolog.

Mercury is a pure language, and Picat isn't: For example, Picat programs may emit output on the terminal without any special declarations or other dedicated provisions.
> Four years is hardly a deterrent. It’s barely a slap on the wrist considering the number of lives destroyed by that plague.

This is the exact kind of emotional thinking that makes it so easy to jack up sentencing to an unreasonable degree. It's why we spent so many millennia of human history insensitive to the torture and abuse of our fellow man so long as he could be labeled a criminal.

First, you're comparing a single doctor's sentence to the entirety of the misery caused by a crisis caused by many, many people and systems.

Second, what makes you think four years isn't a deterrent? Maybe it is, maybe it isn't, but we should be using evidence to decide that, not knee-jerk emotional reactions.
There's a famous paper about drug gang economics:

http://pricetheory.uchicago.edu/levitt/Papers/LevittVenkates...

It suggests that $10 million of profit would be quite the success.
I recommend doing negatives (jumping up to the pullup bar off a box or something and lowering yourself down steadily) to rapidly improve your pullups. You can quickly get to being able to do one after never having been able to, or in your case, you should be able to get from 1 pull/chin up to 3-4 fairly quickly.

Good luck, and keep up the good work
> When you consider everything else, it's misery.

You're really missing out there. A friend of mine has given up meat for lent, and we're now trying a bunch of vegetarian recipes. It fits quite well because I've recently started looking into Indian cooking where you can do a lot without meat.

The only problem is that I absolutely despise all the stuff around cooking (searching for recipes, shopping for ingredients, doing the dishes, people that insist that cooking is super-easy and judge you for not doing it more often).
The article I linked has code examples in four languages, all use bigints, not longs.
That doesn’t make any sense. Descriptivism describes usage, not whether people think it’s prescriptivist or not.

Each dictionary has their own standards for what constitutes enough usage to be considered a word. Otherwise we’d have infinite dictionaries.

Dictionaries look at what many people say, and log those as words eventually. They’re decidedly Descriptivist.
For reference, the doctor in the story "pleaded guilty to taking more than $188,000 in kickbacks disguised as speaker fees." As a result, he "lost his medical license and was ousted from his post as a Brown University professor, … the judge sentenced him to 51 months and ordered restitution of $754,000," and I'm sure he's gotten a heap of public shame and humiliation.

Is it possible he has enough cash hidden away to make this all worthwhile? Yes, but I'd bet against it.
jetpens.com - hook up some Pilot Hi-Tec Cs. Cheap as anything but I guarantee you’ll never look back.
I agree, I'm continually saddened by the zealotry of the anti-surveillance lobby and the seeming dismissal of the privacy focused hacker who wants to know when exactly does Uber send data, and what exactly do they send.

Especially when it goes as far as encoding the philosophy that state actors are the only problem that matters into the very protocol.
> your client will automatically, in plain text, transmit the full DNS name of whatever server it wants to talk to

AIUI, it's slightly better than this, because you only actually need to send the name of some domain that the server can serve, not necessarily the one you actually want to talk to. If the domain is on Cloudfront, App Engine, Heroku, etc, that means you can choose one of a billion innocuous sites to use for SNI, before connecting to the one you actually want.

This is called 'domain fronting':

https://www.bamsoftware.com/papers/fronting/

I can't quite work out the trust algebra of this, though. You don't have any cryptographic guarantee that you're connecting to the right site. But you can be sure that you're connecting to whichever server hosts the site whose name you're taking in vain. But if that server was able to serve your site all along, because it had its private key, did you ever really have any guarantee?

Probably won't help for wikipedia, though, as they're not behind a CDN.
DirectFB was great for small embedded systems projects where you didn't want the full weight of X. Unfortuntaely I don't think there's any alternative to X any longer for these kinds of projects, probably because the cost of a SoC capable of running X has fallen to the point where it doesn't make sense to economise anymore.
>Bill Gates never ran a computer business.

Yes he did.

>At age 17, Gates formed a venture with Allen, called Traf-O-Data, to make traffic counters based on the Intel 8008 processor.[1]

And the idea that someone needs to have run a computer business in the past in order to run a computer business in the future is illogical. It means that no one would ever be able to start running a computer business. The requirement should not be running a business in the past, but having some experience with that type of business in the past. Bill Gates had tons of computer experience.

[1] https://en.wikipedia.org/wiki/Bill_Gates