skysight-inc/HackerNews huggingface dataset:
Removing the lock entirely is just wrong.

It’s a really quick indicator that I’ve either set something up right or not.

Also if I’m on chase.com and I don’t see a lock of any kind I’m going to NOPE out. And I’m a tech person.

Imagine explaining to my parents that after all this training to look for the lock they now shouldn’t look for the lock, but look for this red text instead.

Bad move.
Not sure if that’s your job req or whether you just found it online, but here’s some unsolicited feedback on it: the way the qualifications are written there are probably less than 10 people on earth who meet them all. As someone who has embedded experience and an interest in space tech, if I were in the job market I’d be so intimidated by that description that I’d probably not even bother applying!
They could inject malicious code or even just ads into those http assets and therefore compromise the https connection.

I also don't necessarily think that we need https for everything, but it's better to err on the safe side and if you're gonna start doing it, then you should do it properly.
A good reminder that it's difficult to spot genius, whether you're an experienced VC or just some local printer looking to get paid.
Storytime.

I had an online acquaintance who I practiced with in a fighting game called Blazblue. Said friend was also a martial-artist who also did live-steel fights. Dangerous, yes, but apparently there were rules about what weapons you could bring in, "first blood" and other such rules to try and keep things non-deadly.

Anyway, one of his opponents used poison as his weapon, and now his hands were permanently F'd up due to that one poison fight.

Long story short: I didn't see him online much after that. Its difficult for disabled people to get controllers that work well for them.

And its not just arbitrary fights where people can lose the fine motor control of their hands. I know people who lost fine control after a bad car accident. (Fortunately, this one was temporary and after about a year, she got most of her motor control back into her hands).

So any research into allowing injured people to better play video games (a hobby I'm very much like), is a win in my eyes. I've got at least two people who've I've personally met who would benefit. Even with today's advanced medicine, its not guaranteed that motor control will return back to your hands if you are injured.

And injuries can really happen to anybody.
Are you suggesting that as the US population increases you'd expect to see states starting to secede from the nation? Or that that would be a productive solution to whatever problems we may face in the coming years? For China the areas outside the mainland such as Hong Kong, Macau, and Taiwan are already effectively independent and in any case are tangential to the issue here.
I definitely understand the process, I just call it a bait+switch because from the perspective of the recruitee, that's what it looks like.
As noted below, -L and -R do not have access to raw tcp packet data, only tcp stream contents. Those options do not do TCP-in-TCP. It wouldn’t work anyway as usually the networks you’re forwarding into have entirely different numbering and the bastion host isn’t usually the gateway (did you think sshd has a userspace NAT implementation?!).

This stuff isn’t that hard.

ackshually.jpg
Tiny Trains: Neat Narrow-Gauge Rail Connects German Island to Mainland
It's not easy to explain to your parents either. "Don't look for the padlock any more, just look for a Not Secure warning... which may not appear until AFTER you put in your credit card details... at which point it's not really helped you at all has it. Huh. I have no idea what Google was thinking here. Better call the bank and cancel your credit card every time Not Secure pops up."
Lawyer who repped Equifax will run office that investigates Equifax
You have to dumb your questions down to terms "everybody" can understand, or else they won't know what the question is. The first question most people will understand.
A Guide to Naming Variables (2016)
EV certificates are nothing other than a way for the CAs to make money now that people have realized that the CAs' core product is worth approximately $0.

Argument 1: this person was able to get an EV cert for "Stripe, Inc. [US]", an entity they registered in Kentucky, no relation to the Stripe, Inc. of California whose website is stripe.com. They were not able to get a certificate for stripe.com. (The CA revoked it, and then later apologized for revoking it because there was no reason by their policy to do so.) https://stripe.ian.sh/

Argument 2: the actual website for MasterCard's SecureCode is https://www.mycardsecure.com/ , whose EV cert is "Arcot Systems LLC [US]". The fact that it has a meaningless domain name is in no way fixed by it having a meaningless (but technically accurate, Arcot is the contractor for SecureCode) EV cert. How do you know you're actually supposed to type your personal information there?

Argument 3: the web's security model is based on origins (domain names), not on EV certs. If Stripe switches tomorrow to stripeiscool.com and a domain squatter gets stripe.com, my browser will still send cookies to stripe.com, even though it no longer has an EV cert, and it certainly won't send cookies to stripeiscool.com, even if it has an EV cert with the same organization. Even if EV were a good idea in the abstract, it lacks a plan to make it work with the web as actually deployed.
Hmm, interesting. I'll take a look, thanks for letting me know.

Just so I'm clear, this happened immediately after registering? Or did you do anything else that triggered this?
First, find a good marriage counselor. Most therapists in the US are actually pretty bad at marriage counseling, focusing mainly on women and children who have been victims of abuse or addiction.

Because they're not used to having to make two parties both engaged in the process, when you and your wife go in, their prescription will be some form of "your wife is right about everything, and you need to be the one to make all the changes", which is ridiculous, because it doesn't get at the root cause of half the problems in the relationship.

Your marriage is your largest asset, and your children deserve to have it as intact and resentment-free as possible. For your screaming kids to be bothering you this much, the marriage is probably a complicating factor (don't yell at him!). So start fixing the marriage first.

If you absolutely loathe your job, devote an hour a day to replacing it. Therapy should help your wife understand that your health and well-being is more important than your career, so keep it on the down low until you have that portion addressed. It won't happen overnight.

I have no doubt your job dissatisfaction is negatively impacting your marriage. Now you know it's there, you can take steps to fix it. As soon as you start, you'll have things to look forward to, and you'll stop feeling trapped.
Some states charge for court costs and public defenders, including California where this motion was filed.

https://www.npr.org/2014/05/19/312455680/state-by-state-cour...

It's corruption and theft everywhere. If I were cynical (which you bet I am), I would say this is more about California not getting their cut.
Introducing Snappify: A generator of snapshot tests for React and TypeScript
> Vets can easily make 100k+ in rural areas where the median wage is in the 20s or 30s...

Eh... depends on the job. I don't think that most prospective veterinarians dream of working for the USDA ($$$) when they graduate.
My father in law just switched to the triple 7 after a few decades on the MD-11 out of Anchorage. He loved the plane but even with the top spot on seniority the routes kept getting reduced making the 777 more desirable. He often commented that ATC always did a poor job of accounting for their higher approach speed when placing them into the lineup, as they about every other plane out there can fly much slower.
It is actually quite sophisticated, the wallets I looked at even simulated the transactions that are sent back with 10* the original amount (to other wallets owned by the scammers).
Node 10.1, doxbee benchmark:

file time(ms) memory(MB)
promises-bluebird-generator.js 282 39.13
promises-native-async-await.js 292 48.66
promises-bluebird.js 305 47.38
promises-then-promise.js 382 67.37
promises-ecmascript6-native.js 390 66.93

Parallel:

file time(ms) memory(MB)
promises-bluebird.js 547 99.01
promises-bluebird-generator.js 574 98.68
promises-native-async-await.js 1165 254.62
promises-ecmascript6-native.js 1231 256.41
promises-then-promise.js 1569 302.88

Still a big gap for parallel, but not what it used to be.
> A better approach to no icon at all, I think, is simply “secure connection” wording.

The problem is, most people won't understand the difference between that and just "secure"; arguably, the people who understand what "secure connection" means are those for whom this change doesn't matter.
I'm a liberal in Texas so being ignored by politicians is nothing new to me.
I've been using this library for a few months and want to give props to wmhilton who's been incredibly responsive with the couple of issues I've encountered.

The thing I like the most is that the API matches very closely to git's CLI, so if you know git, you know isomorphic-git.

I gave other libraries a try before settling on this one (spent a whole daying playing around with the optios). IIRC I decided to use isomorphic-git because the alternatives were either abandoned or simply broken.
No, as of chrome 68, http will be marked as not secure without waiting for any user interaction at all. The change for http pages outlined in this post is to upgrade that from the grey info message to a red warning.
in-addr.arpa is the reverse zone.
"What gets measured gets improved". Which really means, "what doesn't get measured, will be traded off for what does".
Who will clean self-driving vehicles?
Haven't used the software, but how about pitting intelligent agents against each other (incorporating reasonable models for vision, motor control, etc.) and evolving the optimal martial art? :-)
I take this to be a aspirational statement, not a descriptive one. Google is not saying the web is currently safe by default, but rather that it is their goal to make browsing a safe experience by default.
Not only that, but the red text doesn't appear until it's too late: AFTER they've put their sensitive information into a form, which probably spirited it away with JavaScript before one can change their mind.
The root cause of the problem is believing that some technique can be successfully applied to all people in all departments in all companies at all times.
The US operates on common law, so much of it is a matter of precedence now simply what's written down. And their are many cases of police but not private citizens being given deference on the use of force.
http://www.businessinsider.com/why-your-iq-strongly-influenc...

>A growing body of research suggests general cognitive ability may be the best predictor of job performance.

Of course there are other factors as well, but IQ is one of the biggest factors and it's taboo to even mention it.
That's not what the law states.

It actually says:

(1) A purchaser of goods acquires all title which his transferor had or had power to transfer except that a purchaser of a limited interest acquires rights only to the extent of the interest purchased.

The part you're quoting refers to the recipient being the fraud, not the seller. The recipient never acquires more rights than the seller had. This is why stolen goods can be seized by police, even from innocent purchasers.

[Edit:] Actually more complicated than that. The provision contemplates the middle-man acquired the rights to the goods sold through fraudulent means. In this case, it still requires the middle-man to have acquired the rights from the original seller in a transaction in which the seller gave up the rights to the goods. I.e., theft by fraud would suffice but mere theft would not. It's hard to explain theft by fraud. In a nutshell, the original seller is deceived as to one or more details of the transaction itself, such as price, identify of the seller, or even as to what they are exchanging. The UCC expects all parties to a contract governed by the UCC to exercise due diligence with respect to a contract, so if the transaction includes the "stolen" goods, the UCC doesn't provide any relief. Generally in a situation like this, it would happen where the language of the transaction clearly would include the goods at issue, but the middleman misrepresents to the original seller that those goods aren't included in the contract.
Our society doesn't exactly pay attention to anyone who thinks differently.
Seriously speaking... not a single sysadmin is going to spend time deploying IPv6 for future-proofing while IPv4 is fully maintained and supported.

Best push we can make IPv6 happen is to force all Operating Systems to ditch IPv4 support in favor of IPv6 on their next major version and just play the wait game but nobody is going to do that.
"It more or less boils down to this and not status or race..."

This is so far from the truth that it'd be laughable if it wasn't so sad.
When I was in junior high or highschool I made an SNES controller for my friend's mom who had limited hand movement due to a stroke. I made her a joystick from a piece of PVC pipe, two plastic spools, and a plastic case about the size of a cigar box for the base. The way the mechanism worked was I used strips of packing foam to center the PVC pipe inside the hole in the spools, and mounted 4 microswitches in a collar facing the PVC pipe. Instead of a big movement like a traditional joystick, it required only 1/8 inch "twitch" movements to close the microswitches, but was surprisingly precise & responsive considering it was made out of scraps and hot glue. (But then again I designed it to work with the limits of the materials I had access to, and "tuned" the placement of the switches as I built up the device.)
The two major important improvements Rust type system brings are :

- the ownership of your object (who is in charge of free-ing it) and the lifetime of the pointers that targets this object. (the whole ownership system & the borrow-checker)

- is some data-structure thread-safe. (the Send and Sync traits)

With those, you can take any Rust code and play with it without having to ask existential questions. Your code will never segfault or exhibit a strange intermittent bug ones you add multi-threading.

Less important but still really convenient on a daily basis:

- will this function mutate the value I give it. (&mut pointers)

- has this variable already been consumed, which means I should not touch it anymore (affine type)
Anyone into this check out dual quaternions

http://www.chinedufn.com/dual-quaternion-shader-explained/

They are magic.
New catalyst upgrades greenhouse gas into renewable hydrocarbons
Hah.

If you want to raise a generation of people capable of hiding their online activity more effectively trying to get between a teenager and smut is basically the way to do it.

I'm pretty sure that VPN's and Tor will explode in popularity if they ever manage to enforce this in any way beyond the most silly methods.

Also hello escalating arms race.
As others have commented, AOT compilation is limited to the information available at compile time. Various features of Python like dynamic typing and object/class mutation (via del) preclude many static analysis techniques. In Cannoli, this meant that the compiler had to also generate code that manages scope at run time. Whenever an identifier was encountered in the compiled code a hashmap would be searched to find the bound value. This overhead becomes expensive, and the thesis covers optimizations that avoid this. PyPy's JIT operates on the PyPy interpreter itself, finding linear lists of operations that are frequently used. It can then compile these operations to bytecode so the next time that trace is encountered it can execute the compiled code. The self-analysis at run time provides information that an AOT compiler just doesn't have.

That being said, I did leave a few suggestions in the "future work" section that talk about writing an AOT compiler for RPython (the version of Python that PyPy's interpreter is written in). This would provide more information at compile time and would be an interesting comparison between a Python interpreter compiled AOT versus a Python interpreter with a JIT (PyPy).
You fail to mention that YouTube allows people to monetize off the content they create. There are a whole lot of content creators whose sole income source is YouTube. Many of those videos wouldn't exist if there was no monetary incentive. So, yes, YouTube does profit off a lot of content it doesn't own, but it generates a ton too.
I wasn't asking about -w - I'm specifically asking about ssh'ing directly to target servers, not ssh'ing to bastion boxes and making an ad-hoc VPN. The BeyondCorp ethos is not that everyone should put their ad-hoc VPNs on the internet, it's that you should ditch your VPN and put your actual services on the internet and secure them because your internal network isn't meaningfully more secure than the internet (especially if you have personal devices connecting to the VPN).
Also seems to have received 1BTC from controversial Mircea Popescu. (http://btcbase.org/log/2018-04-11#1796067)
What are "catalog sheets"? What was Jobs asking for?
Decompression has nothing to do with tar, though.
But I agree, it is painful to deal with tar+gz.
I replaced putty on day one, it is part of my workflow ever since and I use it more and more each day. WSL is probably the most used "application" on my workstation.

What do you find it is lacking?
ZeoTier, which also uses UDP, has an iOS app. So it is possible if the dev team wants to prioritize it.
The way to solve the chicken and egg problem is through paid posters. If you hire an initial group of people to post content and reply to new users eventually visitors who come on board will see the buzz and participate. Then you can phase out paid posters when you no longer need them. Pretty easy.
> All of this despite having years of proven open source contributions.

I wonder how experience in open source maps to professional experience. My impression is that employers seem to value professional experience much more.

I've had a similar experience to you in terms of not having a college degree, but after I worked for a few years employers stopped caring.
Google Chrome is removing the secure indicator from HTTPS sites in September
No, because the fraudsters weren't entrusted with the bridge.
I like this idea because HN mods (reasonably) discourage certain types of discussions as off-topic. But I'm actually interested to know what HNers think about various topics that may be deemed off-topic by mods. Looking forward to joining your community!
Not sure why you're getting downvoted - it seems that many people fall to the fallacy of what they think is true, must be so.
It doesn't even have to be injories; a stroke can easily cause pretty much unpredictable amounts of fine motor control loss in one hand or the other, and that can happen to anyone at any time.
In other words, they got a lot of money and then they sold the .home tld.
Awesome. Which games did she like?
It's not just Ethereum. I have seen this scam aimed at DGB and MAID folks as well, and those are just two that I pay attention to, so there are doubtless many more.
JITs also tend to optimize for compilation time over final performance. Doing ahead-of-time superoptimization or polyhedral loop transformation isn't going to happen in a JIT.
Cough!, void pointer, cough!

Traits are used to express generality, when you need it. If you don't need to be generic over your input, you don't need traits. And when you need it, Rust makes it more explicit than C (and also more performant because it's statically dispatched by default).
"And the free program should be based on Merit, and career demand."

Who chooses what defines "Merit"?
If you go to an Ivy, everything you wrote is incredibly true. Going to any Ivy or other elite (or even semi-elite) school is a HUGE benefit if for no reason other than networking.

As you move down the scale that becomes less and less true. People go, learn whatever they learn, get few if any connections, and wind up with a pile of debt.

So, we've created an incredibly regressive system.

One other thing to note. When people form those friend groups it's not just about who's their intellectual peer, it's also about who came from similar backgrounds etc. It's an engine of division as much as anything else.

I agree that the value is there for some individuals, but I disagree that this is a good thing for society as a whole. If you get accepted to Harvard, it's almost certainly worth your while to go. College still remains a finishing school for the elites in our society. Some people bubble up from the underrepresented portions of our society, but they remain the exception, and will continue to be so until something changes.

I've included a couple links below that explain the disadvantages some groups face when attending college.

http://www.pewresearch.org/fact-tank/2016/07/27/blacks-with-...
https://www.vox.com/2017/9/11/16270316/college-mobility-cult...
Here's a start:

https://www.tripsavvy.com/faqs-about-lobbying-1039165

Example:
https://lobbyingdisclosure.house.gov/register.html

There will certainly be attempts to end-run the disclosure, but in principle it's a regulated industry.
AFAIK you can configure this in chrome://flags to see what it looks like.

Do you know the thinking behind getting rid of the EV indicator? Is EV considered useless?

Edit: Just as I posted this, someone else answered my question: https://news.ycombinator.com/item?id=17093737
I think anyone who's trying to shout down another group based on their race doesn't deserve to be allied with.
My friend use to intern in a Senators office. All the responses are written by staff and not the member of congress.
To be fair, the "Not Secure" message is always there—it only changes color to red once you start typing into a form field. I do think it should be red by default, because the gray is not obvious enough, but I don't think it's necessarily any harder to explain than the green padlock.
Seattle's Idiotic Tax on Amazon
> I take issue with the fact that the company has any say in the matter at all, tbh.

What? How does that make any sense. Someone stole their property, it's still theirs, of course they have a say in what happens to it. "Finders Keepers" is not how the world works...
Right, but if both of your rotors are spinning the same direction, you have net torque under normal operation.
The right description for most networks in finance isn't really private, but rather semi-public. NYSE's matching engines aren't routable over the public internet, but they'll give access to anybody willing to pay the price. Same goes for any of the hundreds of other exchanges out there. And lots of broker/dealers need to talk to multiple different exchanges, as well as to each other. It would be nice to do all of that communication using one globally unique IP address, rather than with a rats nest of NAT for each gateway.
It's only my speculation as to why all these deficiencies go unaddressed. It seems to me like GPM is not in any way incentivized to offer a product significantly competitive to other music streaming apps. If they're not even using the usage data, then I've really got no guess on why the app is almost unusable on an airplane.

Thanks for your work on GPM. Don't know when you left the team, but there was a time when it was pretty even to the other offerings and it's still got its qualities. After all, I'm still paying for it.
No, I never said god cannot exist. I just said that I refuse to live my life assuming that the most unlikely event, the one for which we have no proof whatsoever, is true.

God can exist, I could be Superman.