skysight-inc/HackerNews huggingface dataset:
You would fall under 'trafficking' which is federal (Schedule 1 or 2 depending). Schedule 1 that is up to 20 years in federal prison. You would probably plea down maybe get 14. There is no good time in federal prison so you do the full 14 years. Schedule 2 maybe 15 years plea down to 9 years. THAT is if things work out and you don't get a crazy federal prosecutor that wants to file multiple charges (unlikely). This is federal prison (traffickers, embezzlers, wire-fraud) so it isn't that bad compared to state (state is where they keep murders and rapists). EG Guys in for trafficking can probably hold a good game of chess and discuss current world events.

BUT then you might face state charges for possession if the DA wants to bother.

https://fas.org/sgp/crs/misc/RL30722.pdf
Maybe a fountain pen would help me with my painful cracked fingers during the winter. My only fear is that my handwriting is so bad that my notebooks would look like something by Ralph Steadman.
Diamine Registrar Ink is another option. It writes blue then it fades to gray. Some Noodler's (US) inks are resistant to a wide range of solvents as well.
The Emacs keyboard chords were worked out on keyboards that had the Control keys nearest the Space bar - the intention was that you would use your thumbs to press the Control and Meta keys. Turns out this is really useful not just for Emacs but for any program that uses Control modifier shortcuts. I have not had any hand pain after doing this key remapping on my systems:

https://news.ycombinator.com/item?id=14985932
You should have a private CA setup if you're doing TLS inspection, I have one at home deployed through group policy/apple configurator profile to filter web traffic on any system my daughter is logged into (she's five and plays games on pbskids.org and such, need to make sure she can't even accidentally get at inappropriate content if I step away for a couple minutes to get lunch prepared or something).

Unfortunately (?) some companies are actively working against IT administrators (and in my case, parents) ability to inspect TLS traffic on their networks - Google being a big one with the recent release of Android Nougat requiring apps to opt-in to allowing user/admin installed CA's to be honored. User privacy is important, but if you're using a company-issued phone or allow their MDM to deploy a CA to the trust store on your own phone you should know what you are signing up for. Google Chrome pins the certificates for google-owned sites as well, so even if your private CA is installed in the system trust store it will flat out refuse to load google.com, etc.
Yeah, I mean it really depends on the brass tacks here.

Whatever happens with TLS1.3, obviously the looming idiocy of the CA system is a larger problem. And yes, you're right, trusting random web services (ie, the other endpoint) is often a mistake.

But at the end of the day, the users that need to be served by TLS are the endpoints, not the proxy operators.

(FWIW, I suspect that TLS as we know it will shift fairly radically anyway as distributed applications become more prominent).
For Donald Trump News: http://www.trump-news.today
It's also worth mentioning that an MITM proxy with a private CA root certificate could just strip HPKP headers out of any webpage it sends you. If your computer is tied to its network (e.g. corporate PC) it will never see it, so there's no issue.
New world record: a 1923 Leica 0-series camera sold for $2.95M
The person that told you this is full of hogwash. Being signed with the same ink provides no evidence that two people were together at the same time (unless the ink is extremely rare and hard to procure), and you cannot tell if two signatures were done with the exact same pen. Two people can sign with the same model of pen within days of each other and you can't tell the difference after a few days- and most legal disputes are going to occur more than a few days after signing. Being signed with two different pens also doesn't suggest anything other than the two signatories used different pens.

If you want legally admissible proof that two people signed a document together then you need a notary. Of course a notary could be corrupted, but the courts are much less concerned about that than they are about the chance that two people both own a Pilot G2 in black.
Sure, but I assume the question is whether you can trust this particular CA.
THERE ARE DOZENS OF US ... DOZENS!!!

And there are pen shows around the world where collectors and enthusiasts come together. e.g. sf pen show in the bay area (sfpenshow.com), LA Pen show (http://www.lainternationalpenshow.com/) which as been going for like 30 years, and more - many more.
I agree that Bitcoin couldn't be made illegal. I suspect if there's a drive to contain Bitcoin, it would at the banking level; driving down the price would presumably have the desired effect (making coinware untenable)
Baoer makes some decent models (mostly ripoffs of Montblanc). They go for around $3, and are pretty durable as long as you don't drop them.
> How many older-than-millennial folks feel this same pressure?

IDK, I think my generation are the ones who took up the mantle and crammed this stuff down the youngsters' throats. I'd imagine that most marketing agencies are run by folks my age who came up through the ranks while the millennials were in their formative years and they grew up being brainwashed by the hippies who took over the education system after their revolution failed.

Growing up though, it was perfectly acceptable to be a slacker with plenty of role models on TV and in the movies.
Just imagine what you would ideally like to eat.
Top 8 Video to Audio Converters
Biopsychosocial model
From the paper:

> Finding 2. No traits are 100% heritable
Although heritability estimates are significantly greater than 0%, they are also significantly less than 100%. As noted earlier, heritability estimates are substantial, typically between 30% and 50%, but this range of estimates is a long way from 100%.

Besides, some of the findings look significantly over generalized, and the ones that aren't don't seem very revolutionary or intetesting.
As someone with a background in neither genetics or psychology beyond a layman's interest, this was surprisingly readable and informative.
"30k to 75k" looks like one can save more in HK, as compared to San Francisco with similar income.
It is the most ill-behaved fountain pen ink there is but it's also the most permanent (which is why Noodler's still makes it and people still buy it). You need a pretty strong bleach solution to get the staining out of anything. Water, ammonia, and other standard ink cleaners won't touch it.
Such enlightened and thoughtful thugs.
A Guide to Jane Austen and Children
FYI https://www.youtube.com/watch?v=2t1g5_eGkJI at the end points to gometa.io/gifts which is dead
presumably they're from a trusted root, so you (and everyone else) already trust them
Looks like they're a DigiCert reseller - https://www.certcenter.com
http://hg.neoscientists.org/tekui/

Last release was early 2015.

Last change to the repo was 15 months ago.
Oh how quickly the blight would destroy the rubber trees of Southeast Asia...
I created an app that uses ARKit + Machine Learning (CoreML) called InstaSaber that projects a virtual lightsaber out of a piece of rolled up paper: http://instasaber.com/

It was more a proof-of-concept of the technology I'm working on, but I think it's worth checking out (it's free to download). I think you will start to see a lot more cool implementations of ARKit/ARCore that integrate with CNN's and do new and unique things.

Edit: 20k downloads in first week, I haven't bothered to market it though.
This was my experience too.

I remember doing integrals in high school, but didn't take calculus-based physics until my second year of college.

Jesus christ, it explained a lot of things.
Interesting... This is the email I got when I requested an S/MIME - Symantec - seriously?:

Dear customer,

Your order request for Symantec Digital ID for Secure Email(S/MIME Class 1) for the email address christian@perspecta.ca is received.

You need to approve or reject the request using following URL:

https://alwaysonssl.com/id-verify/GX5aT6H2vG8s-Td2CLOBBEREDC...

For any further queries please visit:- www.symantec.com

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication.
That page is completely unreadable to me.
In some countries, there are "secret laws" (not the USA), where government body that controls ISP license and legalese issues can force ISPs to keep logs, not just metadata, of individual user browsing and share it with law enforcement official - whenever asked without any form of a court order and legal paper. We already have to share the 'User Form' the users sign up when getting internet connections, which has all kinds of personal information including pictures, address, phone number and national ID number.

Failure to do so will get you heavily fined and get your license revoked to do business. Also, you can't talk about it to the public.

I have friends and family in at least three countries who are involved in this industry and have confirmed me that this is a routine process, log sharing, port-mirroring, putting black-boxes in the middle of your core network is just routine work and has been the case for many years.
They do care about companies leeching off of free work, is the point; they just don't want the outcome to be financial gain, rather, they want the companies to stop "leeching", and rather contribute their contributions back to the community, so that others can benefit from the work just as they benefited from the work those before them did.

(This "contribute back" aspect is, IMO, the core difference between MIT/BSD and the GPL.)
What's the issue?
Massdrop does pretty well in the "stuff I only needed one of but ended up chasing a dragon" categories:

- Everyday carry tools/pocket knives
- Mechanical keyboards
- Headphones
- Pens/pencils

There seems to be a common type of person that wants to have different stuff than the mainstream, and they all start by buying Benchmade knives, Ducky keyboards, Grado headphones, and a Lamy Safari.
See, coming from a culture were people kill each other because of traffic misunderstandings, domestic violence being incredibly common, etc. it's really a surprise.
The clones of polo
Fwiw, I found electromag (typically undergrad physics 2) the best application of calculus.

Classical physics of motion (physics 1) used some superficial calculus, but none of the use cases that would let you spread your mathematical wings cropped up in the material we studied.
Nothing really: https://security.googleblog.com/2018/03/distrust-of-symantec...
Couldn't one argue that the oil and gas industry is on the way out itself? I know that may come off as a bit naive. My anecdotal experience leads me to believe that the oil and gas industry isn't exactly pushing the envelope technologically. Sure there is a lot of cutting edge science and technology applied on a macro level, but for the industry to truly embrace the future would mean to become something entirely new.

I don't see this industry embracing the hyper connectivity, progressive, mind-share of the internet the same way I only see half-hearted engineers entering this field.
This kind of makes me want to make a site that will show the current solar time of the ISS. i.e. when the ISS is between the Earth and Sun it's 12:00, on the opposite side it's midnight. And show what time sunrise and sunset are. The minutes would obviously be much shorter (as a day is only ~90 minutes long), but it'd be interesting to see.
Often the app's interface is simply better than the mobile website. If you do a lot on your phone, the extra convenience adds up.
Just signed up. Cert is valid for 12 months and is chained from DigiCert's CA -- same as their website
> Did you buy this from the Apple store? What precautions were taken to avoid their obvious & hidden cameras

Apple store. Wear hat and somewhat darkening glasses.

> Now the dealer you bought said SIM

Sorry I mean BestBuy... you cant buy stuff from ebay with cash.

> Uhh, Walmart shares their security camera feeds with multiple private companies

Same story.. hat and somewhat dark glasses.

Thanks for other info, very informative!
>Internet access is increasingly a fundamental human right and is needed to interact with most government services in first world countries.

That's all well and good, but you don't need to do it from your desk at a regulated financial institution.

>I think assuming you can control any packets that pass through a network ends up being a losing proposition.

This is a very strange statement. All security is always a losing proposition. The best anyone can ever hope for is raising the bar of cost and sophistication an attacker will have to surmount to be successful, but you're still very much obligated (legally, and ethically) to do that. If you possess sensitive data, you need to take steps to detect and prevent exfiltration. If you have employees (such as registered broker-dealers) whose conversations with the outside must be monitored and retained under the law, you need to make sure they're using only the properly configured communication channels.

>Why not use things like VPNs to ensure that traffic to sensitive internal services is controlled

Because TLS interception is about preventing unwanted egress/exfiltration from the (relatively) trusted zone of a corporate network.

>Failing that, install software on users computers and don’t allow them to use any non-work internet resources.

Installing the corporate CA on managed endpoints is a prerequisite for TLS interception. The problem VPNs solve has nothing to do with this.
This reminds me a lot of Scott Adam's theory about systems over goals. I've used this in various areas of my life and I'm happy with the results so far.

http://blog.dilbert.com/2013/11/18/goals-vs-systems/
Thanks for the heads up :) We leaned into a lot of location-based stuff in the early days (around the time of the Pokemon Go craze)--check these out: https://www.youtube.com/watch?v=Qd6DjJ0GdBQ and https://www.youtube.com/watch?v=FCrWYFTDqfU
Money is naturally denser, so that helps.

And I'm guessing the trace water content would provide sufficient hydrogen.
> The farther North a place is, the stronger the case for DST

I disagree. If you get to the north pole or anywhere near the Arctic Circle (where Iceland is), it can still be dark at noon in the winter and light at midnight in the summer. You can't nearly compensate for that with a mere hour change, so why bother?
Thank you. It sounds like portability may come via a userspace program. I look forward to it.
Undercover: "Mr ramos, we're drug dealers and we need to send secrets messages. Can these devices do that?"

Mr. Ramos: "Yes, they can. They were designed specifically to do that"

Undercover: "Take em away boys."
UTC as a world clock is a happy medium, and works well. You get it in the notifications tray.
https://alwaysonssl.com/id-verify/%3Ch1%3ECool%20Stuff
Perhaps this is an indication that the son flipped.
Looks like DigiCert and not Comodo.
If I buy drugs from a street dealer I know what I'm getting into. If I get prescribed opioids from a supposedly trained professional whom I'm supposed to be able to trust I don't. So as far as I'm concerned adults should be allowed to take whatever drugs they want. However, it should be illegal to bullshit them into taking them. Especially as a medical professional.
What about Facebook notifying the user of a friend suggestion, as if it were a notification of a connection posting something?
> Most VOIP providers do jack to protect your calls even part of the way in transit, and that call was definitely intercepted since it came a provider overseas

HMA seems to be a joke. I can't find any bad news on ExpressVPN or NordVPN.
Both knives designed for stabbing people and guns and bullets designed for shooting people exist and are sold in the US and I'm not aware of their manufacturers or retailers generally being held liable when they are used to commit crimes. I don't think your analogy holds.

Selling drugs is victimless in the sense that there is no legal ''victim" bringing a complaint - both the seller and the buyer are generally willing participants in the transaction. This is why so many drug prosecutions must rely on stings, undercover cops, informants, surveillance, etc. This is not to say that nobody suffers any harm as a result of the drug trade.

In this particular complaint there is no victim and all the evidence comes from undercover cops and informants.
You sure? How many tech nerds marry idiot model type women and live miserable lives with an incompatible partner because they bought in to the idea of what type of woman they 'should' want?
https://alwaysonssl.com/id-verify/ReplaceMeWithARegexAtLeast
A murderer will murder, regardless of whether they are in prison for 1 year or 100 years afterward, they are not apt to estimate what a judge will give them for a particular crime. Deterrence for higher level crimes through harsher sentencing is ineffective.
I think dom96 is asking about why the youtube video link has a timestamp going 763 seconds into the video.
Several things:

The FSF, and the SF Conservancy (which does the bulk of GPL enforcement) espouse Community-Oriented GPL Enforcement[1]. The goal of Community-Oriented Enforcement is compliance, not punishment.

[1]: https://www.fsf.org/licensing/enforcement-principles

McHardy wasn't seeking compliance. He was saying "Your license to my portions of the kernel was automatically revoked when you did X. Pay me damages." This could arguably work as a deterrent, but it does nothing to fix the current violation.

Additionally, a problem with the GPLv2 is that it is automatically revoked upon violation, and has no reinstatement clauses. If a company violates the GPLv2, and then the SF Conservancy enforces the GPL against them, after it's all worked out, the SF Conservancy can reinstate the license to the portion of the code that the SF Conservancy owns or represents the owners of, but there's still quite a bit of code for which the infringer technically hasn't had its license reinstated for. Even after working everything out with the SF Conservancy, McHardy could say "Ok, but they didn't reinstate your license to the portion of the code that I own. You're infringing on my copyright, pay me damages."
Funny enough, if I buy heroin on a street corner, the addiction is voluntary. If I get prescribed opioids and the doctor who I trust ensures me it's the right thing on my situation, I wouldn't call all cases "voluntary addiction".

Edit: I can buy a damn gun when I'm 18, but have to be 21 to drink beer and will never be allowed to buy LSD which is pretty safe and not addictive. WTF?! I blame religion and Puritan nut jobs.
But the companies that are forced to pay out large amounts are going to be more careful next time and release their contributions as source code. Same with other companies that see this going on. That's a win for Linux and GPL code.
How to land a paid speaking gig
Opera Mini has some awful ridiculous newsfeed on it now, too.
Distributed team: making hardware happen
Because there's no legal and/or social infrastructure in place that demands the bounty hunter shares their winnings.

The way things are right now, the bounty hunter could argue that the very idea of the statement above is absurd - and that demonstrates how broken things are.

I can't help but agree more and more as time goes by that maybe Linux is getting too big for its own good. I do wonder how it'll topple.
My first thought:"I'm using signal. Should I be using telegram?"
how ARKit is used in this case? Isn't ARKit for detecting plane objects?
In Italy they're "tapparelle", and I think they're a fantastic thing to have for your house. With even mediocre ones you can get a room really dark even if it's pretty light outside.
I Went with Johnny Cash to Folsom Prison
oh, for rendering I guess
Reading that it sounds like they reached the same conclusion, that they didn't want to mess with git's internals. They wrote a filesystem to run underneath git.
"A DEA trip" is not a small thing. It's a terrifying thing. It can be the end of your livelihood if you're a doctor, even if you've done nothing wrong. There is no shortage of stories about that happening (and what about the hundreds of patients who are suddenly left stranded with debilitating chronic pain?)[1]. I wouldn't call for you to have an "IRS trip" or some other jack-booted government agency, nor do I think you should call for the DEA to visit other people. It's this type of attitude that is literally killing pain patients [2].

But then again, I don't think it is any of my business what other adults want to put into their own bodies, so even if some doc office were a pill mill I wouldn't care.

[1] Here's one off the top of my head: https://www.painnewsnetwork.org/stories/2017/12/28/tennant-p...).

[2] https://www.painnewsnetwork.org/stories/2017/9/4/how-chronic...
Interesting, though a bit dangerous to look just for outliers. Medecine advances by having physicians trying new things. You don't really want to end up with fully standardised prescriptions.
The 12 month validity - which means it's way more useful if you want to pin certificates in a mobile app...
Same here too. I just think it's dishonest that there's no mention that the JS version is being throttled while the wasm version is not.
Same. My folks signed me up for a weekend calligraphy course around the same time frame (primary school). I've avoided calligraphy and fountain pens since. I avoid most pencils, too, so I don't end up with graphite all over my hand and smudges all over my paper.

After a reasonable amount of experimentation I've ended up just going with Uni Jetstream 101s because they feel smoother than most ball-points but dry fast enough that I don't get ink on my hands. I played around with modding various pen pieces to assemble a franken-pen but having to trim/tape ink refills wasn't much fun.

I'm always on the lookout for other recommendations from lefties. I've seen a couple in this thread already.
steak, lobster, a milkshake, a baked potato and some cake?
> it turns out no speeches were given and the doctors got the checks anyways.

True, but it's not like if they did, the situation would be that much better. In a way for them they screwed up because the actually didn't bother playing the bribery sham all the way through like say political candidates do. For example, Hillary Clinton made $3M from speeches to large banks in just 2 years: https://theintercept.com/2016/01/08/hillary-clinton-earned-m... but they were actually organized enough to have "speechs". I remember the transcript of one was leaked, and you'd think they'd be some really deep insights and strategy laid out for the future that's worth $600k. But it was mostly "you all great, thanks for creating jobs etc etc". It is legal of course, but everyone know what it really is.
I had my Vanishing Point Decimo stolen by a cleaner in my university.

I'm still upset about that.
I wonder if this is related to Symantec's Encryption Everywhere program[1]?

[1] https://www.symantec.com/about/newsroom/press-releases/2016/...
There was some interesting answers around this in the original thread for GVFS: https://news.ycombinator.com/item?id=15725497

The Microsoft PM for GVFS commented there.