skysight-inc/HackerNews huggingface dataset:
This comment gives me the opportunity to tell a joke I learned while working on an Air Force base.

One of the things most civilians don't understand about the U.S. military is that the various branches all speak different languages. The same words can mean very different things, depending on the branch of service of the person you are saying them to.

Take, for example, the simple order "secure the building."

If you ask a Marine to "secure the building," they will hand-pick a team of a dozen Marines, who will chopper onto the roof of the building at midnight with knives clenched in their teeth. They will then work their way down floor to floor, slitting the throats of everyone they meet along the way, including the cleaning staff, because why not. When they reach the lobby, they will form up in neat ranks and scream at the top of their lungs that the building has been secured.

If you ask someone from the Army to "secure the building," they will put in a request for an artillery strike, which will pummel the building as well as most of the surrounding block into a pile of rubble. When the artillery fire stops, the highest-ranking officer available will run up to the top of the pile, plant an American flag, and tell anyone who happens to be standing around that the building has been secured.

If you ask someone from the Navy to "secure the building," they will send an encrypted message via satellite to a submarine 900 miles away. The submarine will then fire a Tomahawk cruise missile, which will fly at 500 miles per hour 100 feet off the ground into the building's HVAC exhaust. The explosion of the warhead will cause the building to collapse in on itself. The Navy will then issue a press release stating that the building has been secured.

If you ask someone from the Air Force to "secure the building," they will get you a seven-year lease with an option to buy.
This is how the whole industry ran in the mid-1990s. There were secret vendor lists that the cool kids got to be on. If you didn't have the right friends, you were shut out. Vendors took their sweet time getting patches out, because their preferred customers were all read in and had workarounds in place. It was a shitty way to organize an industry, and it fell apart with Bugtraq and full-disclosure security.

It's sad to see people arguing for a return to those norms, especially since the rejection of them correlates with a renaissance in our understanding how to secure software.
Get this "h4labs" spammer out of here. Clearly vote manipulating.
These are not Google ads, but the creator sponsorships
Wonder how much further you can take it. If you lose a little safety (trains) and take more people off the road, you increase the risk of a train accident. How many people go back to the roads after a train accident? Is the backlash greater (my 0 data thoughts would be that more people would return to the road then just if the train was slow). I heard somewhere that more people died through increased car accidents after 9/11 (forget time span) that would have flown but didn't.
the key to the pay wall is in the above link. thanks
> so they're not running untrusted code on their servers in the first place

Oh sweet summer child.
I'm not a finance expert, but my very lay person understanding of how financial markets work tells me that those would have to be some rather huge bounties. See e.g., the effect on Intel from earlier this year:

https://qz.com/1171391/the-intel-intc-meltdown-bug-is-hittin...
1. 7574 is not "novel" indeed. About 10 years old, if you count the original draft.

2. 2^64 is quite a lot, for a single file. The variant I described deals with a single static file. Also, it is a part of a network protocol, so there are some requirements. Like, using standard integer arithmetics for packet-level processing.

3. Feel free to show it to any people you like.
You do realize you're making this complaint on a discussion about a tool that makes HTTPS easier for said small hobbyist websites? I've updated all of my hobby sites using Let's Encrypt, and I really appreciate how it was easy for me while also being good for my users.
FedEx was started by a marine.

https://en.wikipedia.org/wiki/Frederick_W._Smith
Side note: the advice of "just write" doesn't work if the question is "How do I write a particular thing or a particular assignment?". In that case, it is worth digging into what the questions you have are about the particular thing and breaking those things down.
Instagram Updates Its Web UI to Mimic App
>I have is that if LE were to essentially "take over" the CA industry, you know, due to being free, and awesome, we'd have a massive single point of failure for the entire Internet's security model.

single point of failure as in, getting hacked and misiussing certificates?
I think along with this TOY-ness, YC also looks for the available market and in this case I do not see that with this app. maybe the idea is to get some traction and sell it to Google down the road?
One difference between security researchers and "exploit creators", which is a term I think you just made up, is that exploit creators presumably release exploits.

Don't tell HD Moore or the Metapsloit team about this, though. They may cry themselves to sleep tonight.
Are you suggesting that different lifestyles don't result in different risks? Such as not smoking, not drinking alcohol while pregnant, not eating excessively?
This reads like an unbearable collection of news headlines, combined with political slogans that mean absolutely nothing.

One example:

I remain committed to making sure the web is a free, open, creative space – for everyone.

That vision is only possible if we get everyone online, and make sure the web works for people.

The web is not free - I have to pay an ISP to access it. Who is 'everyone' in this instance? I don't know what 'open' means exactly, and creative how? Because I can post pictures of cats on reddit? What is creative about 'the web' specifically?

What 'vision'? Why is it only possible if 'we', who is we? get everyone online? Why is that a prerequisite? 'Make sure the web works for people'? What does that even mean?
I hear you. Moving to SSL for millions of old websites is a pain in the ass. It's a degree of effort that people often skim over.

Speaking as someone who's maintained a lightweight presence on the Web for over 20 years, I've thought about the tradeoff and I think it is worth it. Our collective original thinking about protocols skipped security and we've been suffering ever since. I was sitting in the NOC at a major ISP when Canter and Siegel spammed Usenet. Ow. Insecure email has cost the world insane amounts of money in the form of spam. Etc., etc., etc.

You and I probably disagree on the cost/benefit analysis here, which is OK. It'd be helpful in discussion if advocates on both sides refrain from assuming zealotry on the other side.
Did you actually read the article? I explicitly mention that Apollo uses Redux as a cache under the hood (although that's not required).
More importantly, Tesla’s goal is to reach a production rate of 2,500 Model 3’s a week by the end of this month, a rate of 10,000 cars a month, with the goal of doubling to 20,000 cars a month by the end of June.

Does this mean Tesla has finally solved the battery production problems that forced them to borrow employees from supplier(s) to assemble them by hand? (1) Quoting from the same article: "No $35,000 basic models have shipped as of mid-January."

1. https://www.cnbc.com/2018/01/25/tesla-employees-say-gigafact...
CIA chief nominee ran controversial 'black site' prison
Only because having your stuff SSL'ed (not snoopable) is a binary state. And while you might have business reasons for not doing it, putting those above your user's safety is just plain negligent. In the same way that storing plaintext passwords and sending them around via email, or using SMS as a two factor authentication method is negligent.

So in a way, you're right. I'm not sure why that's a negative.
Guido van Rossum: Python 2 end-of-life will be on January 1st, 2020
How uncomfortable space suits took a toll on the first Americans in space
But does coding take more time typing rather than thinking?
I live in Boulder, and seeing this headline made me realize that, as much publicity as Tesla gets, there are probably more Subaru Outbacks driving around Boulder than there are Model 3s in the whole world.

It's pretty amazing how much hype some companies generate.
The SEC exposes the ICO rabbit hole
Ask HN: Intellectual property lawyers by state for hire by individuals
Intellectual Property Law (IP) is a really big part of the creative, startup, and development industries. As a photographer, programmer, employee, open source contributor, etc... I find that I need to start hiring a IP lawyer to review IP agreements, NDA's, and contracts.

Are their any resources for individuals or small companies hiring private practice IP/contract lawyers at a reasonable rate? Something allowing searching by country/state would be great. (I deal with USA California, Delaware, & Texas jurisdictions)
Hmm. Could probably hammer this into a form applicable for a raster, where the previous 'instance' is a linear interpolation via Roberts cross or some such.
You mean to tell me my machine can be exploited if I let someone do one of the following.

1. Flash the BIOS
2. Have admin access

Holy shit, this calls for a full fledged panic!

I am very disappointed anandtech.com even bothered to give this smear campaign the time of day. If someone can flash your BIOS or has admin access then you already have way bigger problems.
Well that's a neat trick to get around the paywall... Thanks!
That's fine, but it doesn't change the fact that the possibility (likelyhood?) of financial gain affects the authors credibility. Especially since it is already strained by other issues with this disclosure.
It is true that we could point people to the ecosystem more. Historically, we've been worried about playing favorites. However, this can come into conflict with our principles of having a small stdlib. It's tough.
> We're right back to the same level of security of you just checking that the browser bar points at the domain you actually intended to go to.

So you’re sitting in a cafe, and you go to Facebook.com. Lo and behold, someone’s installed a MITM proxy on the router, that presents its own encryption key instead of Facebook’s, and your browser has no way to tell this because the CA system isn’t a thing. They now have your password, can steal your session to spam your friends, whatever else. How do you prevent that?

Automated domain validated certificates are meant to ensure that when you go to Facebook.com, you’re talking to Facebook.com and not a MITMing router on the way there. They’re not meant to protect against phishing - they’re meant to protect against the very real cases I’ve seen where my mobile ISP adds random JavaScript into the web pages I view, and sells information about me based on my use of the web.
I used to work at a company that did Dynamic Positioning systems for vessels and oil rigs and I worked on the periphery software systems running with a Kalman-based algorithm there. Didn't work on the Kalman stuff then, but I do think its cool what they can achieve and have always been interested. I will add this to my reading TODO. Thank you.
I've been testing easymail for a couple weeks (the gmail add-on and the chrome plugin). So far a very positive experience - saves me time on repetitive emails. Looking forward to updates & more AI.
Sadly no. The ads I get are largely for things I don't want. Occasionally they are good or interesting, but usually no.

I wish more ad providers had a way to say "please show me more ads like this." Better yet, I wish there was one that had a box where I could just type random complaints about my life and over time it would show me ads for products that might be relevant.
Rust lays out its roadmap for its next release
Here's 1 thing => "Google's "free food" is not free" => https://rachelbythebay.com/w/2012/01/21/notfree/

and a follow up => "Followup to free food that isn't free" => https://rachelbythebay.com/w/2012/01/23/gfood/

I do remember something else she posted about Google that blew up on HN, don't remember and can't seem to locate it on her blog.
Thank you. Looks like what I have in mind is called a Gyrodyne[1] or Heliplane[2]. I would expect it would have almost the same range and speed as an airplane with VTOL capabilities. As you mentioned, the interaction between the two flight surfaces may be too inefficient, but the X3 you linked to broke the unofficial speed record, so there's that.

[1] https://en.wikipedia.org/wiki/Gyrodyne

[2] https://en.wikipedia.org/wiki/GBA-DARPA_Heliplane
I seem to recall that NSynth and Wavenet are only operating at 16Khz mono, or perhaps it was even lower. Are we now able to generate full 44.1Khz sound?
Waffle House

https://fivethirtyeight.com/features/if-waffle-house-is-clos...
Wearing a Mask in the Workforce
I would never sign such a thing. Negotiate. Quite often, unreasonable clauses can be removed from a contract. And giving your employer ownership over your work that they didn't pay for is absolutely unreasonable.
The problem with your first line is that it leaves the definition of black hat open to interpretation, when that is not how the word is actually used in the security industry or in popular reporting. Black hat activity specifically refers to criminal activity, which we can demonstrably perceive and attribute. By your reasoning, I am free to call security researchers black hats if they don't give vendors advance notice. You might disagree with that, but you can't say I'm wrong without making a normative argument about whether or not something is ultimately unethical. There is no categorical difference between me choosing to call people black hats if I disagree with their behavior and you calling these researchers black hats because they're doubling as activist investors.

On the other hand, this entire sideshow is bypassed if we use the well-established definition for "black hat", which refers exclusively to illegal behavior involving security vulnerabilities and online fraud. More to the point, reporting facts is not "market manipulation" (which is also a well established term) even if you want it to be, and "social engineering" is not the same as publicizing information with the intent to move the markets. Using these words in the way you are is the same as flippantly redefining them as you go along, with the result that the conclusion is quite brittle. There could be a strong argument that the behavior is unethical, but using these terms as you are doesn't help that point along, it hampers it.
Well, as none of you bought into google glasses they still have to do it the old way.
>they seem to be resellers for DigiCert/Symantec certificates

>they should at the very least have either ETSI TSP² or WebTrust³ certifications to meet the security/trust requirements for operating a CA

A reseller does not need to meet any of these certifications. Resellers have a business relationship with a CA, and all the steps related to certificate verification and issuance are handled by that CA.

On the backend, a certificate request for your site is handled the same by the CA whether if comes through a reseller or through them directly.
Keel has permissions to update all deployments in our cluster. Because it runs within the cluster instead of outside (like Travis CI), and the only interaction with Keel is through webhooks, there is no need for finegrained RBAC.

The webhooks only tell Keel that a new image is available, they cannot modify other parts of the Kubernetes deployment directly.
Maintaining a LTS release while focusing on an entirely new technology with a limited number of devs available is an engineering nightmare. They have to choose their battles. The performance of the old Firefox was really bad compared to competitors and this technical debt wasn't sustainable on the long term. I'm happy that they've made this bold move (on the big risk of frustrating some users (rightfully so)), and happy that they rebuild a better browser for all of us (and I'm sure they will come back in the future with the same flexibility for addons).
You could do this before too, without wildcards.
They had all the marketing material available and ready to go (and I bet that took more than 24 hours to make). The 24 hr notice is just an out against the usual accusation of publishing an exploit without giving notice. They sure well knew AMD couldn't even verify it in 24hrs, allowing them to get the full publicity while coming off as a reputable security firm.
Do a ICO or blockchain page generator for April 1st. I'm sure people will love it :)
I use repl.it a lot but the python autocompleter is seriously lacking.
Maybe activate js ?
> Cars on freeways or sleds don't carry nearly as many people/hour.

Almost entirely because of how car ownership is structured now. People most often buy 4dr cars and only use 1-2 seats 90% of the time.

A subscription-based self-driving fleet car system would change this dynamic where you only order a 4dr+ car/SUV/van for a ride when needed.

Otherwise a small 2dr electric vehicle without a large front motor will likely be the default in the future.

On-demand cars will be great for the environment and efficiency of highways...

Not to mention there has been some talk about self-driving cars linking up like trains on freeways to conserve energy and better utilize space at very high speeds.
The more layers you add, the less inclusive it becomes. Coffeescript is decidedly a divisive technology.
Is it wrong that my immediate reaction to that was "Wait, isn't/wasn't the PSP a portable? Did they actually use x86/x64 AMD processors in those? How?? AMD's traditionally been poor on power management!"
When the "long established science" is evolutionary biology, and to a lesser extent the geology of the age of the Earth, some of the questioning is not done in a sincere scientific spirit and it is not a good use of time to always treat it as if it is.
Wow, so now the cryogenic companies have come to their logical conclusion and will actively kill their customers instead of waiting for them to die on their own.

Still, I don't see why a viable brain scan from your dead brain has significantly better probability than getting your entire body rebuilt from your frozen carcass, so it seems like the competition with the straight up cryo guys for the gullible optimists should be pretty intense. Especially as cryo companies have a longer track record of staying solvent (if they have, I have not idea actually).
The Cosmic Microwave Background (CMB) has ~420 photons/cm^3 each with 24 meV, so about 10 MeV/m^3.

The Cosmic neutrino Background (CvB) has ~340 neutrinos/cm^3 each with 50 meV, so about 17 MeV/m^3.

As a comparison, the visible matter (baryon) density is estimated to be 1/5 protons/m^3, each with 940 MeV, so about 240 MeV/m^3.
Alphabet Has Filed 186 Health Care Patents. Watch Out, World
Yea I understand now. Indeed, companies such as Streak, Grammarly etc. are good examples.
2018 Hackaday Prize
Often when there is a great deal, it means there is something wrong with the house or neighborhood.
Oh, so you know better than me what kind of content is on my site? So a static site with my resume needs SSL then to protect the other users?

Absolutely yes. Without that layer of security, anyone looking at your resume could either be served something that's not your resume (to your professional detriment) or more likely, the malware-of-the-week. (Also to your professional detriment).

Do you care for the general safety of web users? Secure your shit. If not for them, for your own career.
Looks like the source article is here:
https://www.vpnmentor.com/blog/vpn-leaks-found-3-major-vpns-...

NB: I suspect most privacy VPN products suffer from this since they don't really do any customer data filtering at all.
I'm getting a "Secure Connection Failed."
I deploy via git-push to Travis CI which then runs my test suites and if they pass, continues on with the deployment to the (virtual) hardware server via https://www.gigalixir.com/ (it's an Elixir Phoenix web app).

A properly set up CI is awesome and a huge timesaver.
Obama did shut down Guantanamo to new detainees. Congress wouldn't let him close the facility. He spent the remainder of his term releasing prisoners, trying prisoners, and/or transferring them to other facilities, all pursuant to the UCMJ.

Unlike some presidents, Obama tried to follow the rule of law. He achieved 90% what he promised on Guantanamo. Are you really quivering over the last 10%?
Thanks! So I assume for the companies you consulted at they were not a web based application? (per your "app and marketing are intertwined and should not be separated" comment)

I'm curious how did you "tie" the Wordpress site to the custom app? Did you simply use subdomains like app.example.com or was there a deeper integration?

Also, if the Wordpress site went down, who was getting paged in the middle of the night? The agency, the eng team, or both?
I found this on /r/AMD haha: https://i.imgur.com/OkWlIxA.jpg
Another use would be 3D printed surgical instruments. There is already a proof of concept paper written on this topic:

https://www.ncbi.nlm.nih.gov/pubmed/27822724
Mapping Income – Income disparities are real and getting more extreme
Yes, we're on it. We're implementing a language-server-protocol LSP for Python and most of our languages. Coming out soon.
Thanks so much for all the feedback, I really appreciate it.

1. We're sharing our privacy policy on our chrome extension webstore page - did you manage to see it there? If not, we should definitely do a much better job presenting it, so thank you for pointing it out.

2. So sorry, definitely don't want to hide anything! We'll push out the changes asap to show our users how to remove your permissions. We stop looking at your data once you uninstall (even if you don't revoke permissions).

3.Sorry about that! You can remove it easily in the "EasyEmail" control panel - just hit "Settings" and you can uncheck the button

4. We'll keep getting better! Thanks for pointing out that we're suggesting some generic sentences - this tends to happen when the user didn't send a lot of emails from a given email address (which means there's not a lot of data to learn from.)

Again, thank you so much for your feedback. We'll get right to fixing all the problems!
Thank you letsencrypt team! Really appreciate all the hardwork to get this out.
There is a "reasonably accepted" definition of black hat, by your reasoning, and it is: someone who uses computers in bad faith.
I spent 5 years taking the Toronto subway (Yonge line, North York Center to Union) every day. I noticed this interesting pattern.

During rush hour, any small delay on one train will almost certain impact every train down the line- there's little time buffer between trains. The bigger the delay, the more trains effected by it. The more passengers per train, the more likely that train will have a delay- loading and unloading taking too long, sure, that can cause a small delay. But consider events like heart attacks, seizures, a fight breaking out- all kinds of major-delay-causing-events that are roughly speaking a linear function from 'time passenger is on the train' to 'likelihood of major delay event'.

If you have twice as many passengers, you have twice the odds of a major delay. If a passenger spends twice a long on a train, you have twice the odds of them causing a major a delay. Delays cause more passengers per train and cause longer time-on-train for each passenger.

It's all non-linear. Any one tiny delay can spark a total breakdown and the longer that delay is the more likely it will cause more in turn.

How on earth does the system ever work at all?
Thread – clothes for hackers
Electric, self-flying, vertical takeoff taxis are coming to New Zealand
Boaty McBoatface Has Returned from Its Most Perilous Mission Yet