skysight-inc/HackerNews huggingface dataset:
This is also what we did when designing Intercoin (intercoin.org)

In my opinion, it has just the right structure. The more communities install Intercoin's open source platform, the more ITC tokens would be worth. Thus our interest is to build the best open source software we can and literally give it away to as many organizations (colleges, cities etc.) that we can. We can even have Intercoin power other startups' business models, who would otherwise be competing with us - like Colu or Moocho.

A community might use ITC tokens to back their economy in all sorts of ways:

Micropayments

Raising money for an actual project by selling 100% of the tokens

And most of all - an internal currency and democratically controlling the monetary policy (to implement eg Unconditional Basic Income or loans).

In short - you need one main token network as a store of value, and sidechains for actual spending.

One coin can't be both.
This thread is now gone from the front pages as well. Holy fuck HN, your red flags are poking me in the eyeballs.
As much as I like the phrase "buzzword-powered horseshit," there are always opportunities to apply new technologies in a creative way. In this case, it seems obvious to me that NNs will do a good job in identifying latent features that would otherwise slip past a linear model.
Wildcards are only available via ACMEv2. The post linked to here says that.
I believe "hermit mode" does this.
They didn't rig the lottery, they figured out how to beat the odds. The former makes it sound like they colluded to change the game, when all they did was play by the rules, albeit in an extreme manner.
Union culture can be significant though. From my understanding, in the US I'd expect a union to refuse any form of automation indefinitely; in other countries, they might accept it if the redundant staff are provided training for another job with good employment prospects.
Register with the SEC.

Edit: Why did this get downvoted? That is the right answer to the question!
Just curious, but why is this flagged? It seems like it is an article of interest to the community - just trying to understand what happened. Thanks for any feedback!
If not SSL, then they'd go away at the point some other technical change dropped. Or do you suggest "we" continue using broken protocols forever in order to preserve them? Do you still support telnet to accommodate people who can't handle `ssh-keygen`?

In any case, (a small subset of) the random enthusiast sites and such are close to the only reason I use a browser recreationally anymore. I absolutely agree with you.

The answer isn't to stop fixing things. The answer is to make it easier and cheaper to be secure.

Kinda like what LE is doing, no?
Whether you can get derive function from structure is a big if. This is for the vain.
That’s simply wrong. The CIA has 20000 employees. The vast majority of them never participated in torture. That’s because they are not in roles that do such things, because torture was just not used extensively enough to involve many people, or because there has been a lot of turnover in the roughly 12 years since the practice was stopped.
It's a crime under Geneva Convention to obey an illegal order (unless, I believe, you think you will killed if you don't obey). It's also a crime under the same conventions to give an illegal order.

This was the basis of the Nuremberg and Tokyo war trials.
could it be that more time spent inside a train increases profit? maybe they just want passengers looking at advertising. they are a captive audience.
But man they try awefully hard to compel you

I am sick of seeing my 15-plus-year music collection relegated to the "Downloaded Music" ghetto of my iphone. Apple's shitty cloud service is not nearly as high quality or cared for as lovingly as mine and I am sicking of seeing it front and center

Play Music does the same thing with the online storage locker... but at least they're hosting my music for free (and streaming me transcodes :/) and letting me download it again
LogicGate | QA Engineer | ONSITE | Chicago, IL | https://www.logicgate.com

LogicGate is looking for a full time QA Engineer. LogicGate is building technology to help businesses automate and track disorganized processes. Our office is in the heart of River North with less than 10 minute walks to Brown/Red/Blue CTA train stations and multiple bus stops. An ideal candidate will have experience designing an automated testing strategy as well as experience building tests for web applications. We work with ES6, AngularJS, Selenium, and Webpack. We are currently experimenting with TypeScript, Angular and other modern technologies. Please visit the link below for a more detailed description.

To apply, please visit https://logicgate.workable.com/jobs/679520
HTTPS doesn't make it uncacheable - you can still mirror an HTTPS repository with another HTTPS repository (with its own domain name and certificate), and preserve the PGP signatures inside the repository. apt works fine with exactly this model: you use HTTPS for transport-layer protection and GPG for the existing things Debian's security model was already good at. The Debian repository is behind HTTPS at https://deb.debian.org - in existing Debian releases you may need to install apt-transport-https, and then just set your sources.list to

deb https://deb.debian.org/debian stable main

HTTPS cannot be used as a replacement for PGP in this scenario, but that's the wrong way to see HTTPS. It doesn't provide purpose-built security for people who have custom threat models and need to build security infrastructure anyway (e.g., Debian verifies PGP signatures on sets of packages uploaded by developers, and then builds those packages and puts them into signed archives). HTTPS is baseline security - it's the security that every web connection should just have. It's not surprising that some specific use case like Debian repositories needs more-than-baseline security.

And because HTTPS is nothing more than baseline security, it's possible to automate it with things like Let's Encrypt and not add any more checking beyond current control of DNS or HTTP traffic to the domain.

(Another confusion along these lines is assuming HTTPS is useful as an assertion that a site isn't malware. It asserts no such thing, only that the site is who it claims to be and network attackers are not present. If I am the person who registered paypal-online-secure-totes-legit.com, I should be able to get a cert for it, because HTTPS attests to nothing else.)
Really? I think the photo's OK.

Tie unloosened, good mix of casual + business like.

Can't detect any obvious lack of confidence.

Making his head point towards the text seems like one of those cheesy commercials where a smiling person points at the text next to them.
Yes ... my point was that it was going to be quieter than a gasoline powered airplane and noisier than a car. As an aside, I suspect the "buzzing" noise made by the propellers was attenuated in the video post production.
Pick for CIA chief linked to torture site
That is still deflation. Deflation is any decrease in the general price level of goods and services. It does not matter if it is due to increased production by advanced AI robots, etc. After all, if you knew you can get something cheaper tomorrow, why spend at all? Like you said, the Fed will run against this.
And it was considered successful enough that they've started work on converting Line 4. After line 14 was put in service in 1998, RATP actually started drafting plans to convert lines 1, 4, 6, 7, 9 and 13.
I dunno, if this guy won't even look both ways maybe he doesn't actually deserve a slot in the cryo cooler.
This is very true, and can be translated to "just do the work".

I made a sketch on bitcoin a few months ago and thought it would go nowhere, and a few Instagram pages picked up on it and posted it. I got some 10-20k views. I had no expectation for it, but I made the video because I thought it would be cool.

Just write!
Yes, I have friends who do this a lot and I just find it so unethical. The stores don't exist to lend you clothes, like they're your older sister's closet. There are costs associated with rent, labor, etc.
You fire everyone.

However, if I remember correctly, they're unionized, which is why this hasn't happened yet.
At what point does Spotify hit a breaking point with leverage against the major labels? Even their current scale, the surviving music industry oligopoly could probably still crush Spotify if it tried to do jumpstart a private label. In this current ecosystem, they seem to be in this awkward codependent relationship. Maybe the only way to gain real leverage is to develop an ecosystem without any labels at all.
Morgan Stanley. Charles Schwab. Chase.
CIA director oversaw the torture of dozens of people
This reminds me of a question I've long had – is there no legal restriction on starting a real estate listing service?
Depends on the flaw, might give them long enough to make a fix [1] (they might have one in the pipeline, or one they kept from release because of effects on speed, you never know) but more than likely gives them long enough to decide _how_ to handle it.

[1] I'm partially recalling a fix, on Facebook I think, that was implemented within a few hours of reporting; it was ac testing API that got exposed. Different field, of course.
>>I could imagine getting some clients under my name and having her "on the team"

What kind of clients do you think you will get - what will they want? The answer should lead you to what kind of work she should be trained on.
Using anything but Apple Music leads to a less favourable listening experience.
Can you add a filter for category? I should be able to click on Node.js category and only see other jobs tagged with that like Stack Overflows tag functionality.

I also built a job board just to learn JavaScript. It is sitting on github rotting. It might be worth something to you. [0]

[0] https://github.com/adam-s/simplejobs/blob/master/server/cont...
One of the reasons for the "HTTPS everywhere" thing that people have been on about is exactly because ISPs were injecting ads or javascript into web responses (https://www.infoworld.com/article/2925839/net-neutrality/cod...).

So, yeah, they've already been caught doing exactly this.
Choice to Lead CIA Oversaw Illegal Torture Program
That, and considering a speed limiter instead of stopping the train when traveling too fast. What good does it do to stop the train when going too fast instead of limiting it in the first place?
All they were saying is that TCP and UDP are the transport protocols that DNS uses, not that they're directly involved in name resolution.
I agree with most of your summary, but I don't believe the article provided evidence that installation of signals to enforce a lower max speed "does not increase safety".

I'd speculate, without evidence, that it probably has increased safety. But maybe it's just a bad tradeoff, compared to other options.
I was just relaying my feelings in that last bit. But the misleading bit in my comment specifically refers to the fact it's an exaggeration as you put it. So you can flash a bios and make it do nefarious things: that is a true statement but it's hardly a "security flaw" and almost not even too surprising. They are however taking a flaw and spinning it out to be the massive security flaw which it isn't.

I guess that's my question. If you take a true statement and put it out with connotations that it's actually a terribly thing and worse than it is, just being "true" doesn't matter. Stupid analogy, say you go to a bakery and buy bread, then it goes stale in two hours or so by the time you get home. Then you go and write a negative yelp review that this bakery is terrible at baking and they sell subpar bread. You just don't know that the bakery doesn't bake in preservatives that bread you buy from the supermarket does. And it certainly isn't like the bakery is selling spoiled/poisoned bread or selling rocks painted to look like bread loaves.
Technically, certificates automatically validated only guarantees that you are on the website that let's encrypt thinks correspond to facebook.com. MiTM state wide could tamper with it
This was the peak of the great Google Plus push. It didn't work out and it had a lot of collateral damage to the org and to a bunch of products on the edges (Reader gone, Google Talk shattered into 20 different messaging apps)
But it says it's "paid members" so how did your trial helped exactly?
> Perhaps you could have a privacy policy which clearly states no text from user emails will be looked at by humans.

I don't think this would be practically possible. As these guys have to improve algorithm for better suggestion, someone has to look at the suggestion and the context to improve the algorithm.
It would be even cooler if he would sprinkle his billions on solving real problems instead of wasting them on toys for rich people like this.
How is it that people worth a lot more money manage to walk the earth among us mere mortals without being preyed upon like these lottery winners? 24x7 security detail? light sabers? both?
IANAL but it looks like -- and it's hard to tell for sure, as there is no sample email -- OP's site is "Linking" w/ some additional data, not "Listing".
That will depend on the definition of paid wouldn't it? It could just mean "we have 38M credit cards" we can bill.
You don't really need to propagate it all the way to actual lives lost. If there is an hour of life lost on a too safe train, that's a fraction of a life lost.
I realize my first comments is not as detailed as it should have been, I've expanded in the comments.

Black mirror is same vein, but different concept:

Getting loans, buying cars, via a single reputation score is different than giving people a tool to curate the content they wish to consume.

By having access to a "user's reputational history" across multiple sites, you can see where their reputation is coming from. Then you as a consumer of internet media, can choose what site reputation to put value on. Letting you curate and avoid toxicity, or live in your echo chamber if thats what you want.

Its like asking a couple friends if they'd loan their weed wacker to the new guy down the street, they say he acts kind of shady but has always brought back their garden tools. Same thing. You ask users of a couple sites how this other user has acted. They say he made some jokes, but also had some valid points here and there.

We don't then say, oh they made crude jokes, charge them an extra $1000 for rent.
Low-level lead exposure and mortality in US adults [pdf]
Invisible conceal carry light sabers.
A bit OT, but does anyone have insight into why Spotify has refused to make an Apple Watch app for offline playback like Apple Music offers? This is definitely possible as a lone developer was able to do it rather quickly a while ago (search: Spotty later renamed Snowy). That developer was eventually hired by Spotify and the project was scrapped. Spotify's new iOS SDK specifically says it's not to be used to create apps for offline play.

It seems to be a major pain point for Apple Watch users that's easily addressed. It's really confusing why they haven't done it yet.
I couldn't agree more on complex or extremely complex interdependent systems.

We certainly wouldn't want to replace an impeller for a precision milled high performance turbo pump on a rocket with a 3D printed part as the risk of catastrophic failure would be enormous.

But there is still great scope for field expedient replacement because of the simple fact that field expedient repair has occurred since mankind started killing each other in an organised fashion.

I think much of the genuine risk of cumulative patchwork repairs increasing risk of catastrophic failure could be mitigated with a smart asset registry/history that could manage "go/no go" for depot level or higher maintenance/refurb.

DOD would surely be one of the world's biggest consumers of duct tape. If just in time 3D printing can provide short term sustainment of assets that includes proper asset history documentation, the I would imagine that would be a net plus.

Looking further into the future, I could easily imagine both 3D printing and production output auditing for common consumables and wear items as not just field expedient, but becoming the standard.

Although I would think this will require a massive R&D/certification effort(so easier said than done), as well as designing this flexibility into future assets/platforms.

"For want of a nail" comes to mind.

For want of a nail the shoe was lost,
for want of a shoe the horse was lost;
and for want of a horse the rider was lost;
being overtaken and slain by the enemy,
all for want of care about a horse-shoe nail.

3D print the nail, and then replace it in deport maintenance.
I agree that it’s terrible, but the reason they used to recommend .local goes back to their Small Businness Server in the 1990s when it was very expensive and bureaucratic to register a domain - not something they could demand of their target market. MS’s error was their failure to update their recommendations after domain registration became cheap and easy.
Bank fees are stagnant, but concentrating
It could be time to specify the meaning of "gratify intellectual curiosity" further than it has been.
I've had a "new" heat sink come with dried thermal paste on it.
One thing that does strike me is that, after the Intel Co. situation, giving only a little notice prevents execs from being able to short their own stock on the vuln.

Is this confirmed yet?
This whitepages unless you disable javascript or enable connections to discourse.org. How disappointing.
> Wow, that's a bit ridiculous.

Less than what's happened with the London Underground Sub-Surface Railway, which is now on the third resignalling contract to get them to GoA Level 3.
I mean if they include people who didn't actually pay in the category of "paid" members, that would be a lie, no matter how you look at it.
Btw the only problem I have with Netlify is the close name conflict with netflix. Chrome's autocomplete is completely confused.
There are... one of them is given in the article—which calls the current system "one-shot"—there exists k-shot variants which allow for at least k opportunities/warnings before automagically braking. The (apparent) reasoning behind the MTA not putting these (for some number k>1) was "safety," but the article states that, in general, the timing circuits are much more complicated therefore resulting in a higher cost.[0]

Additionally, a simple case would be to have circuits which do, after a certain point in time, force slow (but safe) braking into the required velocity---I could see problems with robustness here due to the specific application, but at least in theory this should be possible (we all know the difference between theory and practice, though).

On the general case, this all seems a little weird to me since it seems like such a trivial problem (increase error bands, etc), but may have some deeper reasons that aren't explained in the article(?). It's quite difficult to tell since the primary sources are not provided at any point in time.

---

[0] I'm reluctant to accept this claim since most of these things aren't done in an analog way, anymore. Timing is a matter of figuring out empirical constants and programming them in directly, which, while not totally trivial, seems to have roughly the same difficulty (amortized over all of the lights that need to be put in) as doing the timing for a 'one-shot' light.
That's the com system, but there are fully automated off-the-shelf systems (com, rolling stock, …). Two examples are Siemens's VAL (Lille, Taipei's Brown, Seoul's U-line, VAL tech has also been used in Lyon's D and Paris's 14 and 1) and Hitachi's AnsaldoBreda Driverless (Copenhagen, Taipei's Yellow, Milan 5, …).

The latter is very popular and getting deployed in several places right now: Honolulu, Thessaloniki, Lima 2, Rome C, …
I've considered this too. I think the problem is when you aren't paying people, you can't really demand they do stuff. I mean, perhaps you can - but I don't feel comfortable with it. So you end up being some kind of cheerleader - which I'm not great at.
Larry - what did you use for the design of the site? Custom, or which website builder or template/framework if you used one? Looks great!
I wish the browser could present a huge screen (2000px high or bigger) to the webpage and render it.
After that I would love to scroll this viewport without the page even knowing about it.

This would resolve all problems with position fixed and also block the page from showing real modals once scrolling starts.
I got a couple of ICESticks I've been meaning to play with a little while ago, they're only $25 MSRP and have a 'USB stick' form factor.

But it's hard to find and get started with a good open source toolchain. I have heard good things about IceStorm, but haven't gotten around to setting it up.

It's great and inspiring to see people successfully stepping through these sorts of starter projects and documenting them, though!
How can this be from '98 when it mentions Malcolm Gladwell and someone's death year as 2004?
Terraform is pretty awful for Continuous Delivery. I inherited a deployment system were new app versions were deployed with Terraform, and I did quite a lot of automation to make it not totally suck from a workflow perspective, not it's still not the right tool.

Devs should be able to merge a PR, and have it safely rollout to production (e.g., canary), possibly with a staging step and manual promotion if desired. They should have a simple ability to rollback to a previous version.

Terraform typically would involve editing TF files to update a version, committing that TF change, opening and merge a PR for the change. The running plan, reading the output of plan, then applying the plan. If you have staging and stable environments, repeat the steps. If you want to rollback, repeat the steps.

And it gets oh so much more complex. TF binary versions need to be globally consistent, because the version is stored in the state file. You basically need to only run TF from the CI/CD system, people can't be allowed to run apply locally because they might use a newer version of TF which would then break CI/CD which has the older version. So then you wrap TF commands with a Makefile that checks TF version, or you pin the TF version within the TF code.

How many resources are you managing? Hundreds? Thousands? How many apps? Are they all deployed using the same state file?

How long does it take to run a plan and apply? 10 minutes? 20 minutes? Same for a rollback...

What if Bob want to deploy version 13 of app 'foo', but when he runs plan it says it will also update app 'bar' to version 27. But Bob doesn't know anything about bar, his team only works on foo.

So you break up the TF files so every app has its own state file. Cool. But now you need to upgrade TF itself. And it is a major upgrade. Now you need to update the TF version pinned in the source files, and update the build servers to have the new TF, and run a TF command to upgrade on every state file.

Then you start adding symlinks into the TF source tree, because TF doesn't have any sane way to reuse code. But there are slight changes that need to be made for each app, and TF doesn't allow variables in some parts of the code, and modules are OK be still too verbose, and you still end up with places you can't use variables. So no you start using templates to write you TF code, so you can reuse code, because 99% is the same for each app.

Ugh.

Terraform is great for defining infrastructure that rarely changes, and is managed by an infrastructure team. When you are trying to use it for app deployments, which happen multiple times a day, and are handles by app devs, it is a royal PITA.
New Garbage Collector for LuaJIT 3.0
Words have meaning, "Paleo diet" doesn't mean "whatever is healthy or 'natural.'"
Prediski Viktoria Plzen vs. Sporting Lisbon 16 Maret 2018 – Lajubet
WWDC 2018: Apple will unveil the next generation of iOS and MacOS on June 4th
Ha, let me guess, you have no problem with Google doing the same thing.