skysight-inc/HackerNews huggingface dataset:
https://github.com/ietf-wg-acme/acme/blob/master/draft-ietf-...

DNS security

As noted above, DNS forgery attacks against the ACME server can result in the server making incorrect decisions about domain control and thus mis-issuing certificates. Servers SHOULD perform DNS queries over TCP, which provides better resistance to some forgery attacks than DNS over UDP.

An ACME-based CA will often need to make DNS queries, e.g., to validate control of DNS names. Because the security of such validations ultimately depends on the authenticity of DNS data, every possible precaution should be taken to secure DNS queries done by the CA. It is therefore RECOMMENDED that ACME-based CAs make all DNS queries via DNSSEC-validating stub or recursive resolvers. This provides additional protection to domains which choose to make use of DNSSEC.

An ACME-based CA must use only a resolver if it trusts the resolver and every component of the network route by which it is accessed. It is therefore RECOMMENDED that ACME-based CAs operate their own DNSSEC-validating resolvers within their trusted network and use these resolvers both for both CAA record lookups and all record lookups in furtherance of a challenge scheme (A, AAAA, TXT, etc.).
> And this isn't even getting into the longer term prospects of the very real danger of the efficiency and scale of China starting to eat into the core economies of other nations as they move away from simple manufacturing and beginning moving up the value chain, as we are now seeing.

I wasn't really that worried about China as they are automating extremely quickly and have shown no better ability to utilize the displaced people any better than anybody in the West--see the recent layoffs in steel and coal in China along with the corresponding strikes and protests.

Now with Xi Jinping being President for Life, I'm even less worried. Xi Jingping will regard striking and protesting workers as a threat to his power and he will suppress them. This will break what little feedback there is in China between the working class and the ruling class and the decisions will become increasingly unmoored from external reality.

If I were TSMC, I would start moving fab lines out of Taiwan.
Exactly. Windows 10 automatic updates have a history of bricking machines to endless bootloops. I've had it happen eg. with broken microcode updates.

Not to mention mundane stuff like broken display drivers that render machines unusable and so on.

It's insane not to disable automatic updates on Windows if you run critical systems.
We merged those comments into this thread. It's true that one was posted earlier, but https://news.ycombinator.com/item?id=16577433 was earlier still, and the current post seems at first glance to have the more substantial analysis.
We've changed the title to more neutral language from the text.
I doubt they would just break it. I imagine if they do this then this will be announced sufficiently in advance (probably around two or three years) to allow people to update their ACME clients. Then you can just operate the ACMEv1 for existing domains until noone is asking for more (and scale down the architecture).
i guess black and latino etc. aren't privileged enough to learn about this, only silly 'white' people
When it's hard to draw the line from outside, prosecutors mostly try to prove their cases from the inside communications. If you email your coworker: "Guess what I found ... AMD can go bankrupt over this ..." and then short the stock it should be fine. But if you write "Let's put together an action plan to drive the AMD price down" then you would be in trouble. The FX scandal is an perfect example of this. It's true you can explain your action in perfectly legitimate reasons but you can't also call your self "The Cartel" in group chats.

I'm not a lawyer.
+1 for PoE support
Radareorg/cutter: A Qt and C++ GUI for radare2 reverse engineering framework
Short squeezes are rough, especially if people are expecting one and want to get in on the action.
Tourists. We have quite a few of them here.
https://news.ycombinator.com/item?id=16577433 was the big thread on the front page all day, but since a second wave of analyses with more information is coming out, this submission is rising and it seems like discussion can move here.
Side question for my research: Have you tried hiking for more than 10 consecutive days, possibly without carrying tech with you?
In-memory database tests with Querydsl
no drag n drop?
Lowering pixel resolution and frame rate will reduce file size the most.

Make the gif straight from the original lossless source if possible, since any JPEG-like video compression artifacts will inflate file size in gif.

If the input is a video already, use gif.ski

And then giflossy.

Of course ideally avoid the gif format entirely, since even the best possible compression in it is still horribly awful compared to H.26x and VP9.
And that’s fine, but you should keep that up to date too.
Or you can just simply block outbound traffic by default and allow what you actually need.

No more forced updates. No more telemetry.
Prior to adwords, what was their business model?

Go.com w/ Overture, acquired by Yahoo - that had PPC offerings before Google even had a monetization strategy.
So many more options now, already have a few ideas in mind.
Yes, that's why we put it that way. "Bannable offense" is more "please don't do this so we don't have to ban you" than "we'll ban you".
I wrote it -- do I need to make a fix??
In 2017, I was fired by the system. I told my manager and she tried to get me reinstated. Instead she received an email to call security to make sure I don't take any company's property. I was escorted out. It took 3 weeks without pay to get me reinstated. Somehow this is the funniest thing that ever happened to me.

tl;dr: I got fired by the system against my manager's will.
Envion ran a very large Facebook campaign and they finished with a 100M funding round. I'd say it has a substantial effect.
The MTA isn't just the subways it's the regional rail and transit system too, including Metro North, LIRR, and so on. It's not obviously irrational for all the constituent counties to be involved.
I've been tracking my time regarding accomplishing tasks/procrastinating and have noticed a definite shift.

Additionally, I have done two presentations and my performance was commented on by my colleagues as a lot more confident and self-assured (I definitely felt that way).

Sleep is easy to quantify: I used to struggle to fall asleep until 1-2am and now I am falling sleep before 12 every single night.
yeah title is click bait
> This product should be operated in a well-ventilated environment and, if used inside a case, the case should not be covered

Does this make the B+ model more dangerous in case of overheating?

I have a couple of Pis running inside official Pi case they hold between 35 - 53 degrees. ( 35 meaning unheated room ). I would be sad if I upgrade the devices and then loose my sleep in case of overheating.
Do you realize the difference between buying a service or product, and investing in a company (or ICO)?
Raspberry Pi Gets Faster CPU and Better Networking in the New Model 3 B+
Have you got it to work? The issue was a broken link on the website.
Pretty amazing to see how it’s completely ok to release this kind of incredibly racist headlines on offial state media in the UK.

As if ”white people” were some magical group of people who share ways of thinking amongst themselves.
Arity, as in number of arguments to function.

As in, beauty(who to-whom &optional context) confused as beauty(who).
That sounds interesting. Would you know of any secondary DNS service headquartered in Europe? I always wanted to host DNS myself but since I lack a secondary DNS...
It's akin to not getting your kid vaccinated because when they give them the vaccine they also change the kid's clothes, haircut and hair color, paint their nails pink and give them a pair of MS smart glasses which record everything you do in your home for vaccination program improvement purposes.
Another way to look at it is that the effort is in the enduring of the pivots.
Eh, who cares.
Oh fuck, here we go again. An idiot thinks they can save the western world.
acme.sh is great because it support manual DNS mode. It also way easier to use compare with other similar client. This is all it takes for me.

./acme.sh --issue -d noty.im -d '.noty.im' --dns

It then told me to add TXT record, which I just manually do because I used RackSpace cloudns which has no built-in support.

I manually verify DNS with dig, when it's ready I just do:

./acme.sh --renew -d noty.im -d '.noty.im'

then the cert(private key and full chain) are stored in ~/.acme/noty.im/

These privateky and fullchain can be used directly with nginx without any modification.
Of course it's routine, and you guys mostly showed your unfamiliarity with the site by acting like you uncovered some shocking new scandal in Hacker News users flagging the political news of the day off the front page.

You'd do better to familiarize yourselves with what HN is and how it works before jumping to confrontational conclusions, stimulating though that is. It's not as if any of this is secret.
Jeff Bezos once said the same thing in different words: "... The true test of innovation is customer adoption."
Indirect money as in brand/capital is still wealth. You have contributed to that creation of wealth.
Growing up in the middle of nowhere, Canada in the 1980s, the library didn't have many good science books. When Hawking's book got published, it was the only thing available like that anywhere around. Remember, this is before you could get any book in existence within one month via Amazon. There was no Amazon.

I got A Brief History of Time and read it, and it's almost cliche to say so, but it changed the course of my life. It's not the only book that affected me, but it was pivotal. George Gamow's little book also was available, and some good Asimov stuff, but otherwise nothing really.

So I went to university in the big city (Saskatoon!) and studied physics, and they had a whole library of physics books! You'd think it was like heaven, but a lot of those books were crap or hard to read. Hawking showed how one can aim for a book that's interesting-and-good and actually achieve it. A few others managed to do the same. There are probably 20 actually-good and readable physics books in the whole world, and his books are a few of them.
All Hetzner managed servers are broken
A FLU SHOT CRIPPLED MAN SPEAKS ABOUT HIS EXPERIENCE IN a VACCINE COURT
>Does this make the B+ model more dangerous in case of overheating?

3A has similar issue, when it overheats it automatically drops CPU clock to afair 60% of normal until temperature drops down.
This concept was introduced in an episode of The X-Files.
For provider with DNS support, you can put it in a cron, and then create symlink or some copy step at the end of cron to copy private key and full chain to appropriate location of your web server.

I think acme.sh is the easiet to use in all of clients.
Effort is a multiplier. A bad idea with a ton of effort won't go anywhere. A good idea with a little effort will succeed in a small way. But a good idea with a lot of effort... that's when things are massively successful.
I'd be quite stoked were Facebook to ban most but not all cryptocurrency ads.

What I find most disturbing are all the self-appointed "experts" who offer classes in which they will teach their "system" that they claim will guarantee the students collossal returns on very small investments.

However there are lots of ads that I'd like Facebook to keep. Many of the ICO (Initial Coin Offering) ads are from legitimate startup companies who hope to finance their new businesses by selling tokens at a fixed price for a limited period of time.

But I only want just the _legitimate_ ICO ads to remain. Unfortunately there are plenty of ICO scams. It can be quite difficult for a newbie to determine the difference.

I had a good experience with my first ICO - I bought NAGA at $1.00 then after it was listed with an exchange, I sold it at $3.00.

I have three other ICOs that I plan to hold until the companies behind them become profitable.

Note: "sold". I have a special hatred for the word "HODL".

There are other kinds of crypto advertising that I feel should remain. I'm very happy with my Bitmain Antminer L3+ LiteCoin mining rig.

Even with mining rigs there are scams: Etherium and Monero are both "ASIC resistant" because mining them requires quite a lot of memory. They both require GPUs.

In principle ASIC ETH or Monero ASIC mining is _possible_. I expect someone will eventually make ASICs with the required memory integrated into the chip.

But there are _no_ ETH or Monero ASIC rigs _yet_. Despite this, scammers are endlessly posting on message boards that their "company" - perhaps "shell company" is a better term - has ASIC Etherium rigs for sale.
The US military, and especially the USMC, is able to mount operations almost anywhere on the planet on reasonably short notice. Very few other countries have the capability to field a sizable force far from home. Most can't operate far from their permanent bases. Even the UK has trouble - they've downsized so much.

That's what makes the US military so expensive. On the other hand, the US does so much of this that everybody knows the US can do it. The USMC tries for a high tooth-to-tail ratio, which is great for short wars, and not so good for really long ones. (Wars seem to be either week long or decade long now. Not much in between.)

China is working on getting more capability in force projection, but it's slow going. The USSR had a reasonable capability, which ran down after the breakup of the USSR. Russia is trying to build it back up.
FAA struck down google's first prototype, that's why they test in NZ
"Description: Due to changes or a bug in the Debian package, some packages were uninstalled from the servers during the routine update. We are currently working on reinstalling them as soon as possible so that the services can be accessed again.

Affected: All webhosting packages and all managed servers"

ATM they have recovered 30% of the managed servers.
I'm surprised someone is yet to point out the error of using the word poisonous instead of venomous. I suppose it's not important to the article.
Learn Bootstrap 4 in 5 minutes
They do, but maybe they're in the middle of something and MS is screwing it up with their forced updates.

There are plenty of horror stories where the PC reboots at a very bad moment and then one is stuck without a computer for a couple of hours.

Windows 10 is an unreliable OS and I don't ever plan to use it. Both macOS and Linux get this right.
Not the full story. They've been actually demonetizing, or in some cases removing, videos for political speech they don't agree with.

Even former Rep Ron Paul's Youtube channel was demonetized--which is frankly just insanely ridiculous.

Meanwhile media reports extremist content such as Nazi propaganda is available?!

Another example is anti-Trump, conservative commentator Ben Shapiro.

I'm not exactly sure who can be said is being "protected" by retaliating against Paul and Shapiro?

It's their platform, but without either competition or regulation they're quickly becoming an unreasonable Thought Police.

1-https://motherboard.vice.com/en_us/article/xw5bxk/youtube-ne...
My biggest source of complaint is that my focus is not in fact razor-sharp and I spend too much time fumbling around unsure of what I should be doing to advance the agenda.
Selenium: Clear as a Bell
The MTA subway isn't really intercity, unless you think of the boroughs as different cities. Although the express trains should be able to go much faster than they do, like the A from 59 St to 125 St, which takes ~8 minutes for 5.3 km even though there are no stops and no other trains on the track.

This kind of thing makes a huge impact on the quality of life for people living in the city.
Is/was Google serving "one weird trick" advertisements? Or is that other ad networks?
Not only is there a reasonable argument, a major chunk of Fred Brooks' "The Mythical Man Month" is about documentation being the entire spec and that software should not do anything that isn't in its actual documentation. Write the documentation, then hand it off to the developers to implement.
My only problem with this is that it's not really a test at all, because it is not quantifiable.

It's almost like saying, "The true test of product/market fit is whether or not it's obvious you have product/market fit."

Essentially, the statement is redundant.

There are various levels of Product/Market Fit. There's unicorn-level product/market fit and there's amazing product in a small market-level product/market fit (ie. $25M-$100M exit). YC and others in the VC-world only seem to recognize the unicorn-level because that's the only level that's relevant to them.
This advice should be stapled on the bedroom wall for anyone who sets out on any creative pursuit. Zen Pencils did a really nice comic on this.

https://zenpencils.com/comic/90-ira-glass-advice-for-beginne...
Is it peer-to-peer as in a direct connection between me and my colleague, or is it a mesh that includes strangers? If it can work between just me and my colleague, that feels more likely to be secure. I have no idea how sniffable or spoofable their protocol is, but it's a lot harder to man-in-the-middle if there's no middle.
> Folks are pretty willing to give up their fingerprint for access to Disney parks.

The critical difference here is that this is done with the consumer's knowledge and consent (as another user noted, you can opt out) - thankfully, we do not yet have the technology to fingerprint someone without them knowing.

To me, the idea that my image and personal details, along with a history of payments and locations, might be stored in any public corporation's database without my awareness is terrifying - especially considering there's nothing preventing the sale or transfer of such data, and the security (or lack thereof) of many companies. While I'm undoubtedly in the minority here, I would be surprised if many people are unconcerned about unaccountable, silent large-scale surveillance by corporate entities.
https://news.ycombinator.com/item?id=16577627

350+ comments
Facebook already has:
https://techcrunch.com/2018/01/30/facebook-is-banning-crypto...
A reminder he stated he was an atheist, so I take his words on god with a grain of salt.

“We are just an advanced breed of monkeys on a minor planet of a very average star. But we can understand the Universe. That makes us something very special.” (Hawking)
I don't think it's a true statement, you have plenty of small to medium-size companies serving niche interests which will be never be drowning in demand but are still profitable. But of course those companies are not exactly the right profile for Y Combinator.
Youtube has several levels of monetization. Some videos can still run ads, but only with advertisers that opt into it. They are really low paying ads and the creators make a fraction of the regular rate on it.

Also what in particular is wrong with this video? I don't have time to watch the whole thing. I thought the controversy was over "crisis actor" conspiracy theories especially. Which accuse victims of notable tragedies as being paid actors. And that sometimes result in them being harassed and mocked. And most of those videos are very quickly deleted from youtube as it is. Videos even mentioning their names or debunking the conspiracy theories are getting removed too.

I'm not sure if anyone really cares about random conspiracies about how much the CIA hates Julian Assange. Which may very well be true and doesn't offend anyone.
First ever blockchain based elections
Even then, by the point I put a few ships in orbit by hand I downloaded a couple of the mods that help by giving TWR stats during building and automate orbit/landing so I could focus on setting up my interplanetary satellite network :)
Jobs at Mezzanine in South Africa
It got fixed to use require() instead of import().
Fuzzing JSON Web Services
Yes, I admit the startup time for the JVM is terrible and your choice of V8 makes sense in that light.

Plus indeed people will be able to use WebAssembly and compile languages like Rust to it.
^ spam
Separate feature updates from security updates, and we'll talk.
Do You do it for productivity reasons or you happen to be offline because of some other conditions?
The discord server I moderate has a strict "don't ping moderators unless it's important" rule and in general anyone who just pings for shits and giggles gets quickly muted.

I like it when people interrupt what I do when the server I moderate and therefore are responsible for is atm being swarmed by people spamming senseless shit into the chat or someone going of the deep end and yelling racist slurs, thank you very much.
Wouldn't it just be straight up libel?
The career mode sucks. Feels too much like work. Use the free mode and build crazy rockets and jet planes. And have some fun. Going to other planets and orbital maneuvers are really end game stuff, which you can learn after getting tired of blowing things up.
I'm not arguing that we should never downvote, if someone is writing garbage, I will happily downvote them. But maybe people are a bit too quick to downvote when they disagree...
> Here’s a long post. [...] If you don’t have time to read it all, we recommend you watch this video

The video is 1 minute long. The article is ~84 lines, ~8 KB of text. Is that really long?
Amazon Expansion to Denmark, Finland and Norway Imminent
This California Bill Would Bring Back Net Neutrality with a Vengeance
DNSSEC is required to secure DNS responses which can be crucial to prevent "every crooked CA" to issue a cert for you. If CAA was interpreted by the browser, you could determine exactly which CA is trusted to issue certs for your site and DNSSEC would ensure that the browser gets the correct list of trusted CAs.
ODROID-MC1 Parallel Programming: Getting Started – ODroid Magazine
Still Ethernet via USB 2.0, which means it is not actually gigabit.
> In principle ASIC ETH or Monero ASIC mining is _possible_. I expect someone will eventually make ASICs with the required memory integrated into the chip.

Yes, it is, and you don't need the memory integrated into the chip
By the way, it's entirely appropriate and desirable for anyone to speak, given a broad or general audience purpose or topic.

Avoiding those doesn't get us answers to hard questions. It does simply push the problems out of scope.

In some contexts, better understanding one another does a whole lot of good.

That is also a focus of mine personally.

My comments on should be taken with that idea as context.
And it's actually covered in the article:
https://www.raspberrypi.org/app/uploads/2018/03/sysbench-2.p...
Except that in this case they get the opposite result: people are just getting more and more angry.
Very minor nitpick: Surface devices have combined infrared and regular cameras for face unlocking for years. It's a great tech but it didn't start with the iPhone X.
I'm not sure why that would be terrifying. If we are able to upload and run brains on a computer, then we understand consciousness which is a mystery subject.

Be aware that running code on a computer is just the computation of numbers. So if computing a number makes a consciousness, then all possible states of your consciousness are happening. All the numbers are there.
> If you’ve been a Raspberry Pi watcher for a while now, you’ll have a bit of a feel for how we update our products.

Model B... Model A... Model B+...

When can we expect to see the Raspberry Pi Master and the Raspberry Pi Master Compact?
The technique in the article does not seem to be using depth data (there is a picture in the article), only RGB image data.

So, he could have gotten the same results with a webcam.

My understanding is that these depth cameras create a 3d point cloud and use the rgb to map/overlay color onto the 3d.
I think a good way to say it might be: I'm not afraid of death, I'm afraid of not existing.