skysight-inc/HackerNews huggingface dataset:
It sounds like there might be a few false positives in this algorithm, which negatively impacts the retailers from a publicity standpoint.

Also, can someone verify this but I thought that systems like this can be easily manipulated,i.e buying with cash or buying online with PayPal, different credit card etc, as that is PII and companies can't use it to identify you or reject your claims, unless tied to a specific loyalty account.
>ut as a solution for graduates jumping into their middle-income city gig I think it’s brilliant and a healthy shift away from our culture’s obsessive individualism.

Not serving the poor does nothing to solve the problem of people with big salaries pricing out the locals.

If a room costs X and an apartment costs X + 100 and the rich people can afford either enough of them will choose the apartments to raise the price of apartments and out compete the poor people who want those same apartments.

Nothing less than sheer volume of available houses within a reasonable distance of wherever everyone wants to be solves the housing problem.
wrt to satisfying every single extant ideological constraint that determines 'good' or 'bad', yes. a pragmatic assessment is that, due to it not being possible to satisfy contradicting constraints, it is thusly 'okay' to not do the impossible.
I mean, will they still accept signups?
The good news is that most of the major providers already have integrations into clients like lego: https://github.com/xenolf/lego/tree/master/providers/dns
If you want to get into some of the literature around mind uploading, I'd start with some of Daniel Dennett's work such as "Consciousness Explained". If you think that it's possible for a computer program to have its own sense of self, then it's interesting to think about what it would feel like for that program to be stopped, copied to a new computer, and then started again. There's definitely a lot of literature and debate around these issues!
If you put 10 people who find and publish security vulnerabilities professionally in a room, I do not think you would secure agreement that this is a "clear breach of ethics". There are extremely well-known researchers who have made a point of not coordinating with vendors; vendors, historically, have been far more abusive than researchers.
Can anyone list any negatives of Let's Encrypt? I've been using it since the start and just can't find any practical downsides.
I can't see where on that link it talks about the nib developing flatter surfaces. The nib is flexible and with long term use and excessive pressure can alter the angle of the tines. That can affect the ink flow through the slit affecting how the ink is laid.

The tip, the only part which touches the paper, is made of iridium[1], or similar, which is very hard. As far as I can tell that doesn't wear. Some very old or specialise/custom nibs may use softer metals and perhaps wear would be a possibility on those but in any instance I can't see you wanting a flat spot to develop.

[1] It turns out that modern iridium nibs probably aren't made of iridium. I was looking into wear on them and found, amongst others, this https://www.nibs.com/blog/nibster-writes/wheres-iridium which does into detail analysing the composition of a fair number of nibs. Down the rabbit hole!
I wonder if the unusually short disclosure process was related to their disclosure of related financial interests.

If it was, it’d seem that this research was in support of a financial play similar to how Muddy Waters shorted St. Jude Medical on the basis of insecure medical devices. That would appear to be a legitimate strategy, but if the market didn’t punish Intel for their processor vulnerabilities it seems likely they’d react similarly here and the research would fail to move the stock price in any significant way.
There are some features in V8 to make loading a script even faster.

I'd be glad to connect over these features on twitter (same username). I implemented them.
I never understood why DNS providers are so reluctant to offer standards-based access, like nsupdate(1). It's easy to set up, it can do everything, it's secure, requires no custom anything and it just works.
A particularly desired case is Sandstorm.io, which randomly generates a subdomain every time you open a document.
The performance of this aircraft is piss poor. Why compare it to as SR22? Let's try an R22.

R22

Range 240 miles
Speed 110 mph
Price $250k

Cora

Range 60 miles (1/4 that of the R22, 1/20th of the SR22)
Speed 93 mph (half that of the SR22)
Price ???

This thing is a dog. Cool design, I think it has promise, but let's not pretend this is in any way more than a concept being shoehorned into a niche commercial application.
As a fun note, Pokemon Go (from a company spun off from Google) was one of the first major games to use Kubernetes, and the infamous scaling issues during its launch in 2016 helped resolve many bugs: https://cloudplatform.googleblog.com/2016/09/bringing-Pokemo...

Although Pokemon Go has fewer latency concerns than a FPS/MMO, which Ubisoft (Rainbow 6 Siege, The Division) excels at.
And proofreaders, too. ;)
Aphex Twin did it better:

https://fo.am/midimutant/

Not that I mind having this sort of technology being promoted by the likes of Google (casts glance at two 19" racks full of synthesisers), but I think I'd prefer to go with Mr. D James comes up with over the corporate bread maker path ..
The CIA employ what percentage of the tech community again? Maybe this shouldn't be considered an entirely political story, given the ramifications it has for all of us.
I think it's somewhat difficult to get a valid (CA-valid) certificate for a domain you don't own, though. At least, that's what the job of the CAs is: to verify that the certs they're issuing are for the actual owner of yourbusiness.com.
The stories of Americans living daily with the reality of high-cost drugs
I guess it just comes down to: do you care about the world or not?

The world is pretty fucked up and needs smart people like yourself fixing it.

If ~250K is more important to you than humanity, stay.
To call this drivel is specious. It's not a political cartoon, it's about illegal torture methods. The tech industry, with its tremendous growth and influence, has a responsibility to pay attention to these things.
It's almost as if how government and economy operate aren't well suited to instant revelation of weaponized information

I for one, welcome the impending collapse when the wrong information is released immediately
> Could something like this be considered inside information?

No, illegal insider trading refers to trading on inside information when you have a confidentiality agreement or a fiduciary duty. Information asymmetry is insufficient (or else it would be virtually impossible to profitably trade at all).

> Or is it legal to actively manipulate stock prices to ones benefit in this way?

The way you're presenting this is a false dichotomy. It's not "manipulating" stock prices except insofar as people broadcast news all the time which alters stock prices. Strictly speaking, it's not market manipulation if it's true. If it's false, it can be, which is why you really try not to do it unless it's true.
This particular drug is a human monoclonal antibody, so it's different from many of the small molecule drugs that are derived from natural compounds.
Doesn't seem to have a noticeable impact though, and based on the (lack of) impact of most previous security issues, I wouldn't have expected it either.
I'm more surprised to see that clothing retailers weren't listed. It's incredibly common for "customers" to buy clothes and return them the next day.
Take a look at https://github.com/AnalogJ/lexicon. It's a python library that provides standardized, programmatic access to DNS entries for a bunch of major providers.
People use AMD chips. It's about more than AMD's stock price.

I do not need to be a security researcher to understand that they, as with everyone else, have an obligation to the body politic to not be a dick (as in all things!). There are actors who may be aware of this attack already--but, as I mentioned elsethread, wider knowledge of attacks like this have a much higher chance of splashing back on end users who literally don't know any better than it does AMD. I mean, I couldn't give less of a shit about how AMD feels--they'll be fine regardless--but there are people downrange of this, not just some company.

This is shoot-the-hostages stuff, and I believe that you are better than to be OK with that.
That's why they are always asking for your email address or phone number when you check out. I always decline.
Dynamic DNS providers is one -- I probably shouldn't be able to get a wildcard cert for any of these [1] domains, but permitting *.mysubdomain.hostname.com is probably OK

[1] https://www.dtdns.com/dtsite/faq#hostdomains
For those looking for the ultimate life & health hack, read all you can on Pranism (also known as Breatharianism), the method that lets you live healthily without eating (although it's better to keep drinking at least water).

https://raymaor.com/ for initiation weeks. He's proven the method under TV surveillance: https://www.youtube.com/watch?v=wVXxEaYRhrI and https://www.youtube.com/watch?v=cSlM8PYih7o

Plus, the movie "IN THE BEGINNING THERE WAS LIGHT" features other protagonists such as Yogi Prahlad Jani who have proven the method under full medical surveillance.
When you run the Let's Encrypt official client (certbot), it updates itself.
non-paywall https://outline.com/HKktYH
I do hope GitHub employs this for rolling out https for Pages sites using custom domains too.
Internet explorer with a million toolbars seems to have been replaced with the much cleaner tablet-as-a-Facebook-machine and a million freemium apps.
The vulnerabilities all sound like

> we have another instance of MS07-052: Code execution results in code execution.
Running has never been my thing, just can't seem to get along with it.

> What is a "press up for zero time" mean?

By that I mean it doesn't take up any special time, like doing my step ups when the kettle is boiling. Even if that extends to 3-4 minutes that's still done in no time.

BTW I measured the table and it's actually 17"/43cm high which is coincidentally about as high as a natural step up would go.
What about responsible disclosure ethics? Yeah they don't owe AMD anything but all AMD users lose - since they claimed there is virtually impossible for any security product to mitigate those vulnerabilities in their televised security vulnerability disclosure interview.

https://www.iso.org/standard/45170.html
JOBS – Grovara LLC Is Hiring – International B2B Sales Rep – Change Global Trade
We cannot accept your return, Mr. Costanza; this book has been flagged.

This only stops gormless shoppers from making reasonable returns. Everyone else will do a chargeback for credit purchases, or file a complaint in small claims for cash purchases. The moxious will call their credit card company right at the returns desk and ask if they need a photograph of the posted return policy.
Just tried this - doesn't seem to work:

- a lot of (visible) elements are missing

- the screenshot is still cropped to whatever viewport is used
I think people misunderstand my GP comment. I am VERY pro subway and public transport in general, and I go by bike whenever I can. But there’s a tool for every job, and one subway line won’t solve the same problem a thousand air taxis are going to solve. They don’t even play in the same league. One connects city parts loosely together and relies on other last-mile means of transport (walking, taxi, park&ride, kiss&ride, bike,...); while the other is a whole-in-one, it’s more exclusive (use once per month vs twice per day) and way faster (minutes instead of hours).

Do we need more subways? Heck yes! I want one in my hometown. Do we want air taxis at the same time? Well, why not?
Yes. Countries like the US, China and Russia don't just divide up the pie evenly and agree to play nice. At least this move is relatively out in the open.

I don't know enough about this domain to really judge the article's reasoning (though it was certainly an interesting read), but as a US citizen, if our government held the interests of foreign powers equal to our own in its decision-making process, I'd be very concerned. Actually, something along these lines has been in the news a lot since Trump took office.
What probability of restoration would be high enough to consider it? The future timelines in which restoration does happen are probably extremely interesting to be part of, given how far tech would have progressed. (There are lots of sucky future timelines too, say with nuclear holocausts, where you'd be unlikely to be restored.)

No: 100% chance of death.

Yes: 100-X% chance of death, X% chance of getting to see a super-interesting future.

For me, X wouldn't have to be very high to make it worth trying.
I can improve my running speed 3x than Usain Bolt in next week if I want to.
The only significant concern I have is that if LE were to essentially "take over" the CA industry, you know, due to being free, and awesome, we'd have a massive single point of failure for the entire Internet's security model.

My biggest peeve with the whole "HTTPS Everywhere" push is not the general notion of using encryption, but that the encryption is annoyingly coupled with the CA system, which is terrible for many reasons.
‘Mallory Is Not Gone’: Daniel Mallory Ortberg on Coming Out as Trans
The timestamp is usually a direct link, I've used it to share a video a few times.
Backup is a misnomer here--it's a fixation of the biological tissues. So the format for preservation matches the structure of the original neural tissue down do the nanometer scale, which is a format nature has deemed appropriate to stabilize on the time scales we care about.

I agree that there's research to be done, which is why we're not offering a product at this time, and may not for years.

I would say that even more research needs to be done for any hope of a protocol that preserves synaptic details in postmortem cases hours after death (as many cryonics companies seem to be peddling). If you're saying "recently" to mean <20 minutes after death, that complicates the distribution enormously, but it's not outside the realm of what Nectome may develop later.
This question descends from an ancient philosophical question; see the Ship of Theseus[0].

CGP Grey has a good look at the question wrt Star Trek teleportation[1].

[0] https://en.wikipedia.org/wiki/Ship_of_Theseus
[1] https://youtu.be/nQHBAdShgYI
I think these would be great for many applications. I'd love to own one and fly it around. But, like I said, the problem is with urban areas. Imagine literally a million of them flying at the same time during rush hour in the LA basin or around the Bay Area. That is something a bit different than flying around remote areas in the Outback, Alaska, the Yukon, or the South Island.

Current rules on helicopters are OK, since they are very expensive to purchase and operate, but drop those an order of magnitude and I don't think that will be the case.
>likely to be a very expensive process.

Obviously it's a huge punt with no guarantee of success, but I would think that in a future that supports such a procedure, the concept of "expensive" won't exist to the same degree as it does now.
A new twist on an old game. I hear people ask why short-selling exists, but’s a good check against corruption but prone to it’s own abuses. Citron Research (a short-sell shop) is a good example of this— they savaged companies like NQ Mobile, Lumber Liquidators, etc. and make a bundle doing it.

The security angle is a fascinating and concerning new development, however. That said it may encourage more secure practices (as opposed to theater) through the hardware/software lifecycle in response to serious fundamental design problems.

It will also serve to increase the premium on 0days...
The service is great, but they're really the only free SSL cert game in town. As more sites start using their certs, they'll wind up becoming a single point of failure.
Yeah but by the same logic as The Simulation Hypothesis if I am not being tortured now Rokos basilisk will never come to pass.
For more information - email Jobs@Grovara.com
Hyping ur own stuff on HN?
Yea, that really does not work.

It's a fairly easy test, and these people lose weight in controlled conditions.
Quite smart breakdown to consider your start)
I've had trouble accessing the Google Analytics dashboard(s) in FF as well. Nothing gets rendered except the background gradient.

In the interest of not using Chrome though, when I run into such issues I use Brave as it's Chromium-based and thus allows me to side-step those problems.
In Java with Spring you'd do something like:

@Scheduled(fixedRate = 5000)
public void poll() {
getCrapAndPutOnConsumerQueue();
}
I was wondering from let's encrypt's perspective, it has taken years to develop, and I know there is good reason for that, I just can't put my finger on what exactly those reasons are.
Net neutrality would be nice to have, but the way it's been overhyped is silly. The internet developed without it. We've never really had it -- people like to cite a few years before the recent FCC decision as a period of net neutrality, but it had so few effects that the average consumer did not notice it being implemented and did not notice it going away. It certainly didn't prevent anything Google or Facebook wanted to do.

If you're worried about centralization, net neutrality won't help much. Facebook and Google are large enough to crowd out other players with or without net neutrality.
it's possibly a good target for decentralization + multisig. decentralization so a CA never "goes down", multisig so that a certificate needs N signers, thus if a private key gets hacked then the cert isn't compromised. the hard part seems to be verifying the ownership and integrating with the existing web (the oracle problem)
I made an account to tell you this was driving me mad and after much google, I landed on your comment. Switching the start of week to Monday fixed the problem and I'm eternally grateful.
It will cause all your tabs to run in one process, so only one CPU core can do work there.

This will especially be noticeable when multiple tabs are actively doing something, for example if you open up multiple tabs at once or background tracking script are stealing your CPU cycles.

Blocking tracking scripts and ads or just JavaScript in general can alleviate this to the point where you won't really notice.
I don't think $4 a month is a lot to pay for a not-so-tech-savvy small business looking for an easy way to have an online presence, though of course there is only one way to make sure.
This could also be "how retailers are going to lose my business"
>Independent researchers don't owe AMD a chance to address anything.

The goal of responsible disclosure windows have nothing to do with saving face for the company. The point is that it gives the company time to come out with a fix so that their customers aren't left with massive holes in the security of their systems.
I'm not sure that a book written by a dude whose position is basically, "the direct experience you have of your own consciousness is an illusion" is necessarily the best choice for exploring what a "sense of self" or "mind" are all about.

"Consciousness Explained" should really have been titled "Consciousness Explained Away".
Only if you use certbot-auto, not if you use an OS package.

(I'm on the Certbot team.)

Also, some people dislike this feature quite a bit, and there are about 100 different clients.

https://letsencrypt.org/docs/client-options/
How does Amazon apply customer LTV?
Ask HN: Have you visited an office that requires to take a photo of you?
If yes, how did you feel about this?
I don't know why people flagged that link, but I'll tell you why I'm flagging this one: because you have to have flagging or crap takes over the site, and if you also allow protest posts from people upset about things that got flagged, then those take over the site.

I don't complain in Ask HN posts when stuff I upvoted is flagged off the frontpage. If you have a problem with moderation, email the moderators, like everyone else.
Easy in theory, but you can't just abolish the gambler's mentality. Cunning people with a loose moral compass will find a way.
Lockin could mean they use the service, or stronger, they use the service on the official UI (which may have ads). I think for Slack, the first type of lockin is enough (a paying user is a paying user, whether they use IRC or slack.com), whereas for FB the second type of lockin is better because only that can be monetized.
This is just too good.

On Captain Kirk: “Kirk is just this ridiculous, wonderful, bookish lesbian who’s always wearing kicky boots and visiting ex-girlfriends on different planets and talking respectfully about their shared past and saying things like, “I’m so glad you got your Ph.D. in neuroscience now. Be well. I release you!” And I loved that, I really connected to that.”
I use gevent + gunicorn, it improved by API's latency and throughput by 10x.
Why restore the whole brain if the value is in the private key? Why not just read the private key from the brain and steal it?
I would go the old fashioned route and store the Bitcoins in a bank safe and prepay it for 200 years, by which resurrecting people should be either trivial or humanity won't exist). Still, there's no trustless way to do this.
If they need an immediate answer, they are not children and know how to use a phone (I would hope).
Returned clothes are surely significantly easier to restock than opened high ticket electrical goods. The typical wholesale values involved are probably very different too.

Clothing is further complicated by the fact that not having time to try something on in store and returning it later is typically considered a pretty legitimate and widely practiced shopping pattern, and one that most clothing stores encourage, at least in my experience. I'd imagine red flagging this would materially impact sales overall in some places.
I started using Cloudflare just for their DNS API - the dynDNS providers baked into my router's firmware went under so I started pointing the DNS record to my home dynamic IP with a cronjob that called CF's API.
That sounds like the description of an EV or OV certificate, where the CA takes additional verification steps.

LE is all about DV certs -- you just need to control the web server at secure-payments.yourbusiness.com, and with DNS control you can aim secure-payments.yourbusiness.com anywhere
Sanctions could help, but are expensive politically and practically. Giving the Mossad marching orders in Moscow and Syria might be more productive, and deniable. Whatever we do, it will engender a violent response, but the alternative is unacceptable weakness.

Of course, it’s the U.K. being targeted, and they are weak. I somehow doubt that Putin would pull what the US would call a terrorist CBERN attack on US soil.
Not all stalagmites are made of the same material. The guide most probably knew this, and you should have asked to get a correct explanation.
Update, 52 mins in:

This thread is not appearing anywhere on the front pages. With 31 points and 18 comments in less than hour.

What the Fuck?
No, it does work. How do I know? I've been doing it for a couple of weeks now and my weight has been fully stable. I live a normal life, two gym sessions a week. All without food.
Or by awk for that matter. Sorry to be silly but terraform solves a completely different problem, which is what happens when you have disparate cloud resources you want to manage. For instance cloud network resources. Using it to manage containers is... Not it's use case.
React Authentication in Depth
"The Web" is commonly understood to be HTTP on top of DNS. These are centralized protocols, in that each resource name entirely depends on a single entity to serve/steward that resource.
it isnt sexy enough and wont make them any return. completely agree with you. its a total waste of resources. never gonna happen