skysight-inc/HackerNews huggingface dataset:
> Users can't assume that a site is safe anymore because of a green padlock because HTTPS is so easy/cheap to implement

I don't think this has meaningfully changed today vs the past as you suggest. HTTPS has been cheap and _relatively_ (for an engineer anyway) easy to implement if you cared for quite some time, even before the advent of free SSL certificate services like Letsencrypt etc.

I certainly don't agree that widespread SSL/HTTPS has somehow devalued the significance of the green padlock as you are implying - the level of security it implies for your in-transit requests is still much the same as it always was, it just happens to be used on many more sites than in days past.

For this argument to hold, we would need to assume that for some reason in the past, only "good actors" of some kind used HTTPS due to its expense/complexity, and therefore the padlock was somehow certifying their good intent. This has never been the case, and HTTPS (perhaps with some small degree of exception for the newer Extended Validation certs...) continues to really only indicate your requests will be encrypted in transit only.
>> ...they even went so far as to say it didn’t even matter what you studied!...

> ...They weren't wrong. The sheer number of people who have had their resumes ignored simply because they don't have a degree of some sort attests to that.

This doesn't imply that having any degree would have gotten their resumes looked at, or secured them an interview.
Assuming I remember correctly. It takes only six individuals with the right breeding scheme to maintain a reasonable level of diversity. This is of course assuming that enough diversity is present in the founding population (ie the frozen samples).
The simplest solution would be to hire 2 interns familiar with crypto twitter to sit down and manually ban the fake replies full-time for a couple of months. Would that really be so costly/difficult?
ADADT: Api-Derived Algebraic Data Types
it will work if you add the ssh key to the ssh agent, I more or less copied my .ssh folder my WSL ubuntu install to my ~\.ssh folder and added my ssh key to the ssh agent :)

EDIT: How ever to get tab completion on what is in your config file you will need something like https://github.com/lukesampson/pshazz
We have built a chatbot cost calculator to help people know how much it cost to build a chatbot.
The calculator numbers are based on technology implementation
I don't remember whether the video BIOS was extracted from the old binary or if it is the open-source replacement, but I'd tend towards the latter as I don't remember searching for the backup/dump of the original firmware.

And yes, it's running coreboot, and at least CLI/linux-framebuffer arch linux works. I didn't yet get to setting the rest of the system up, but considering I bought it specifically for high-security operation, as the ME can be physically removed without loosing more than the build-in Ethernet port, I'm not pressed to do it anytime soon.

Edit: I'm pretty sure I followed [0], which leads me to the new conclusion that I did use libreboot, a more strict version of coreboot (think coreboot=Archlinux, libreboot=GNU Guix), and had to fiddle with the question whether the open-source video bios would work. This confuses me a little, as I remembered buying an X61s, not an X60s, but from the fact that it booted after flashing, I deduce it had to be an X60.

[0]: https://libreboot.org/docs/hardware/#list-of-supported-think...
I've just abandoned using a smartphone in favor of a $20 dumb Alcatel phone that can only do three things: calls, alarms, and an FM radio. It doesn't even vibrate.

I offloaded every other functional use into my tablet, in this case an iPad Pro.

The phone battery lasts for days on standby; I can drain my tablet battery without concern. I can leave the tablet at home if I want to stay light or if I want to stay focused on my activity.

I've been doing this for two weeks now, and I most likely will not change back.
Oh I'm not arguing with that part, that's a good development. But that's "assume the web is just the web", not "assume the web is secure by default". The latter is a dangerous idea.
Resolving a .local domain name works like this.

$ dig -p 5353 raspberrypi.local @224.0.0.251

; <<>> DiG 9.8.3-P1 <<>> -p 5353 raspberrypi.local @224.0.0.251
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21640
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;raspberrypi.local.	IN	A

;; ANSWER SECTION:
raspberrypi.local.	10	IN	A	192.168.1.175

A DNS query packet is to the multicast address 224.0.0.251 and UDP port 5353. All devices on your network that are listening on that address will see the query (e.g. Linux systems with avahi-daemon or Macs running mDNSResponder). The device whose name is raspberryi will respond. RFC6762 should have all the details.
That's what was going on on the IRC channel as well at some point.
Ha, this is great. This will be as effective as Beer websites asking if you're 21 before you enter.
The state of California has extradition agreements with other US states. The article says that the owners of the site are living in other states in the US. So they will simply say to those states, "Hey, these people have been convicted of a crime in our state. Please collect them and send them to us." The other state will likely comply per their agreement.
Proton Native: Create native desktop apps with react on all platforms
I agree, getting that initial user base is always tricky. After that, things kinda perpetually keep themselves going.

Especially when you're likely talking about interesting topics / questions people google for. It seems in recent years that going has favored articles over forum topics in their results, but I'm sure there's still plenty of search traffic that goes to forums to bring in new users.
But ~$89,000 isn't six figures, so...? Also, I suppose it depends on the source and relevant area covered by the statistic. I've heard other (lower) figures elsewhere.
console.trace();
>I can’t check my email on my Kindle

I can on mine…
> None of the things you mention are exclusive or innovated by JavaScript

JavaScript is distributed across billions of devices. Nothing else comes close.

If you read my comment as an endorsement of JavaScript instead of an explanation why people care more about its expanding universe than someone dinking around in Rust, then you're making two mistakes.
This is a very poor article. College is, on average, worth it [1]. What the article tries to articulate is that we're not seeing a comparable return on investment for students from lower-income families. This is tied to worse graduation rates. As one example, community college students graduate at abysmal rates [2].

This is actually no big secret to schools. There is a big focus on trying to improve retention rates. What might be interesting to the HN crowd is that there are many startups trying to improve the situation in different ways, like using analytics to identify at-risk students earlier [3] or getting students engaged in campus events [4]. It's a tough problem, but colleges are incentivized to fix it - higher retention leads to collecting more tuition.

[1] https://cew.georgetown.edu/wp-content/uploads/2014/11/colleg...

[2] https://nscresearchcenter.org/wp-content/uploads/SignatureRe...

[3] https://www.civitaslearning.com/

[4] https://www.oohlalamobile.com/
Even worse, I have seen a user get the verification as "John Doe", then he could change his name to Elon Musk, keeping the verification badge.

Twitter has a long way to go.
You COULD play any YouTube video in the background on Chrome on iOS until about a year ago. YouTube specifically sabotaged their site by registering hooks that stop the video when the browser loses focus, so you can't even view something in another tab, much less turn the screen off. This "feature" is a regression with no benefit to the user, and Google was so ashamed at what they did that they didn't even tell anyone.

Luckily, you can thwart it by:
1) Requesting the desktop version of a YouTube video
2) Replacing youtube.com with hooktube.com in the address bar

Perhaps soon Google will disable the use of labels in GMail and then charge you for "GMail Red" to get access to them again.

Shitty move on their part.
My dad told me that school isn't about learning, it's about learning how to learn. That really changed my perspective. I won't care about classical painters and what years they were around and why they were remarkable in even 6 months, but when I do find something I care about, I'll be able to apply focus and learn.
Perhaps bizarrely I actually thought the title meant it disabled it, in the same way that "turning on" something/someone is taking a dislike to it.
SafeScript, a vulnerability-free HTML “script” element alternative
I'm german but I've never ever heard of neither the island, nor the trains. How remarkable!
It was just a dumb joke.

I didn't want to link to a real scam account in case anyone actually clicked it.
I just moved to Android this week, after 9 years on Windows Phone. Android is making me feel very, very stupid indeed.
This is an Onion piece right?!?!? I mean, come on....(pun most def. intended....)
For sure, my experience is US-centric. I cannot speak to systems outside the U.S.
MPs have only voted in favour of this due to extensive lobbying and under-the-table payments from the major VPN providers.
There are a couple of significant and actually, physically, miniature 15" gauge steam railways in the UK. I say a couple because the Ravenglass and Eskdale Railway (Cumbria) and the Romney Hythe and Dymchurch Railway (Kent) are the preeminent ones.

They both served as genuine forms of transport at various points in their histories.

https://en.wikipedia.org/wiki/Romney,_Hythe_and_Dymchurch_Ra...
A bit broader than only mugshots, but that easy access on the alleged criminal past of everyone is something I absolutely despise in the US.

How can anyone get a real second chance if everyone looks down at them on their previous mistakes?

The worst one for me is the Megan's law map that anyone can go check out online. Most of the time those people already paid their dues to society after spending multiple years in prison, they should also have the right to start a second life without constant shaming from their neighbors.

This is the consequence of a society that is extremely bad at rehabilitating ex-offenders and that sees them as rotten people that need to be forever segregated.
looks interesting every chatbot agency should try it out!!
Yup, you can either put it in %UserProfile%\.ssh\ssh_config or pass the -F <config_file> flag.
IBM opens Q Network Hub in Tokyo to help businesses explore quantum computing
It's the gold rush that killed crypto-currencies. They are dead, but their gold rush enthusiasts are going to hang on for a decade hoping to recoup their pride.
Because it does not sell
> I don't even know how to respond to this... my friends didn't fail out from a lack of effort. You also don't know this but all of my old friends are Mexican - so you are implicitly saying the reason they didn't succeed is because they are lazy Mexicans. I don't think you intended to take this stance.

This is exactly the stance the GP intended to take. He said if you failed out of engineering, you're lazy. If you're Mexican, you're Mexican. Therefore if you're Mexican and you failed out of engineering, you're a Mexican who's lazy (phrased differently, a lazy Mexican). You seem to think this is racist, why is that?
This is not the case in CA. No plea bargains in traffic court in all of the large counties.
Leaked [Chinese Internet] Propaganda Directives and Banned “Future” (2011)
There is a pay wall.
Serverless Influences Make Predictions
>the first mainstream controller for a console that was fully ambidextrous.

While it's not a console as such, the Atari Lynx in the 1990s could be flipped over so that the joypad was on the other side.

https://en.wikipedia.org/wiki/Atari_Lynx
I think if you work in tech and you're not super made then you've just got to choose a few things you absolutely wont do and compromise on the rest. I don't even think this is the most sinister of stuff out there so personally I'd probably take the job in this case.
I still see this thing of expertise being overvalued in many organizations, and it's completely toxic. I find it's more common and successful private companies, but it can happen at public companies too.

Typically, you get people that joined 10+ years ago, they implemented certain key systems / features when the company was small, nimble, and not too many actual customers to deal with. They probably worked long and hard to make that happen, probably largely without interfere Then, the company / product is successful, they promoted, have a kids, and end up being a full-time "expert" who writes emails and has opinions on present-day implementation details and changes, but is nowhere to be found when it comes to actually implementing anything or dealing with practical, day-to-day problems.

Meanwhile, the more junior, recent joiners who are doing all those things get no say in the direction of what they're working on, and eventually leave to be replaced by the next batch of new joiners.
Last gold rush for crypto was in 2013 so ~5 years.
Also, what does "flaky" mean? Maybe Steve was willing to reorganize his priorities rapidly enough that some found it flaky or mercurial, but in hindsight it worked.
I think another point of the article is that even though we humans meta-game, we probably aren't meta-gaming at a high enough level and that might give the human species trouble at some point in the future. You could even argue that it's already happening with our fairly casual destruction of the environment, overfishing, over use of certain crops, etc.
A better long-term solution (although maybe too long-term) is to move to some auth mechanism that knows about your origin. When you get a bank account, you should get a U2F device (which should cost <$20, which should be far less than the amount the bank is already spending on securing your account) that you enroll then and there, and so if you end up at my-bank.org by mistake, it doesn't matter, your U2F device doesn't have a shared key with the origin and you can't log in. Or do the same sort of thing with WebAuthn. Or you scan a QR code with your phone and get a link to the bank's mobile website and bookmark it, or whatever.

Attack 1 makes me worry about whether this is solvable at all. There's a lot of "First Bank and Trust"s out there, and they'd all need an EV certificate for the same string, so avoiding the attack seems genuinely hard. Like social media (or curated app stores), the only way it can really work is if the "verified" marker creates first-class and second-class entities: the entities approved by the powerful as reasonable to do business with, and the entities that aren't. Someone makes a decision about which First Banks and Trusts are "real" and which ones aren't, and you can't appeal it.
I was thinking about UBI and does anyone have a good explanation why the price of housing across the board wouldn't increase accordingly making it just an accelerated wealth transfer? The same way housing prices in military heavy towns are basically tired directly to the millitary housing allowance or how tuition goes up when you give everyone loans?
The original title is way more accurate.

Windows 10 OpenSSH Client Installed by Default in April 2018 Update
as someone who didn't get diagnosed with ADHD until later in life, one naively optimistic take on this, is that perhaps it'll allow for teachers and parents to catch signs of the condition earlier in kids, and then be able to treat it better.

Unfortunately, I have a hard time believing this would actually happen. But it's better than thinking being born with ADHD is now borderline illegal in China, I guess.
Hire a paralegal. $500 and they show up for you. Usually they are ex-cops who have good relationships with the judiciary and will do a better job of presenting your case.

Sometimes they will ask you to show up to the court house with them (if it's a tough case), but they hold your hand through the whole thing and heavily coach you on every interaction in the court room. Things like "don't look towards the officer who gave you a ticket" and "only respond with yes, no, or I don't know when questioned".

Yes, I unfortunately have some experience with this...
I am all for secure connections but I do lots of work with apps that run local webservers (inside your home network). AFAICT there's no way to make that non-techie friendly secure. The only non-techie friendly solution I know of is the Plex solution but the Plex solution costs $$$$$$$

https://blog.filippo.io/how-plex-is-doing-https-for-all-its-...

You can also think of this as an issue for any IoT device that wants to serve a webpage.

Let's Encrypt doesn't cover this use case because it only provides certs for domains so every IoT device would need it's own domain or subdomain and that domain would need to be blessed in the list of domains that Let's Encrypt doesn't put limits on certs since you need a cert per device.

Some company making a product (for example Plex) can pay to run the dynamic DNS and partner with a CA but at the moment there is no free and easy way for some open source project to this.

I wish I knew how to make it happen. Get a giant grant like Let's Encrypt got or something to enable a solution. I'd love all my projects running local servers to be able to use HTTPS but at the moment it's way too painful.
What do you do for navigation? (Thats literally the only feature keeping me with a smart phone right now).
> Actually, that sounds like a perfectly reasonable solution to piggyback on the existing telecom infrastructure in a backwards-compatible way.

> I think you just described a stepping-stone for moving from a system where humans burn a bunch of time negotiating deals to where deals are auto-negotiated on behalf of humans without having to build out a new protocol from scratch or run a new initiative through ANSI or W3C.

Except for the fact that Human language is not entirely precise. We can't even implement error-free "smart" contracts in a specialized language and you think doing so in a language with so much more ambiguity using computers is a good idea?
JD – Signale: A Highly Configurable Console Logger for Nodejs
The case for this being extortion feels very weak to me. The records are public record, so they are available to anyone who asks for them. They have already been published on the website, so the request for payment does not carry any threat.

It feels like the real problem here is that many things that are designated as public records have previously been practically inaccessible. We're in an age where it is getting easier to make things like that more accessible and searchable, so we have to reconsider the laws designating various things as public record. Mugshots, in particular, seem to be an ideal case for not being public record at all -- it's not clear how the public benefits from these being accessible.
I don't think his take makes much sense either. But you can get a MCU with embedded wifi/tcpip and 80MHz that costs about 1USD (esp8266). There are also pretty cheap/low power full Linux systems (KeyASIC make one that sits in an SDCard, similar to the eyeFI). They're not too expensive either (~10USD).
Very nice, I forgot about the military covering school as well. Thank you for your service.
That is happening because you are running PHP 7.2. In that file $this->extra_headers is initialized as non-countable NULL. Basically phpBB needs to update their code base to support newer versions of PHP. A quick fix would be to change "var ... $extra_headers" at the top of the file to "protected $extra_headers = [];".
- The space is littered with fraud.

- Wallets have bugs that lose hundreds of millions of dollars

- Energy consumption forecasted to hit 0.5% of the world’s electricity consumption by end of 2018

- Promoters yelling “decentralize everything” while exchanges, development teams and mining are all highly centralized

- No legal use case found to date

Blockchain is a parasite on society.
Nagging wife -> bad sign

Job you hate -> bad sign

Probably going to get divorced and leave your job to be honest
You have to pay for a year up front + another fee
ToU don’t change what PII is or isn’t under the GDPR.

The GDPR also states that consent alone isn’t a legal reason to collect or process PII and “advises” against relying and structuring terms of service to collect PII.

Basically you can’t build a service ask people for their data and then relying on their consent for the legal reasoning of having that data.
You need an actual legal basis e.g. a regulatory requirement or a business requirement to collect that data, and in all cases the requirements unless stated in law must be evaluated against the best interests of those you collect data from.
I'm not a MechE but I don't see why it would be hard to show that past a certain size steel can no longer support the structure of a ship.
I think in the modern era, a movement to curtail Government power in the United States would be better served by refusing to pay taxes than military action.
It would be if that was Twitter's response to every spam bot problem on the whole of Twitter yes.
Yes :)! So I mention PEP 3107 (https://www.python.org/dev/peps/pep-3107/) in the thesis. This allows type annotations in the function signature. Cannoli leverages both type annotations in function signatures and assignments to output optimized code. Other projects like Pythran also use type annotations.

PEP 3107 does say:

> By itself, Python does not attach any particular meaning or significance to annotations.

However, I think this will change especially as more projects begin to outperform CPython. In the "Results > Object Optimization" section of the thesis paper, I cover using these very type annotations to optimize the code.

The biggest problem with Python annotations right now is that they don't really mean anything. Nothing is really enforced so it is totally valid to have 'x : int = "string"'. The compiler would have to just ignore this annotation since it was provided the wrong data. This could also be difficult to identify if a variable was being used and its type mislabeled. So it's not perfect but I think it's a step in the right direction.
Not OP, but can answer. What everyone used to do.
What's "premium" about .app?
Raden is no longer in operation
Is it in Twitter's (financial) interest that to remove the spam or keep it going? I'm honestly asking.
Today Is Global Accessibility Awareness Day
Yeah this is annoying. Simply consider a^b, what makes that expression grow faster, increasing a, or increasing b? b is better mathematically and for mental overhead.
England never saw any serious revolution or uprising since the Kingdom of England was founded about 1000 years ago (Scotts and Irish are different)
Is this also going to cause Chrome to attempt HTTPS before falling back to HTTP?

That would be the more useful change. If HTTPS fails (due to hostname mismatch for example), fall back to HTTP and warn, but trying HTTPS first would be fantastic and eliminate one round trip for many of my sites that are not in the HSTS preload...
It's only "not worth it" because the whole student loan system has caused the cost of getting an education to skyrocket. Fix the system, take away extreme profits for universities, give everyone who wants it a free college education and it'll be more than worth it again. This would also increase the wealth of the USA by several order of magnitude. Unfortunately, instead of investing in our children and our future, we'd rather put money in the pockets of the rich, as we always do.
The Windows ssh client pulls its config and keys from %USERPROFILE%/.ssh/, as does the Git for Windows ssh-- they can and will share the same config as long as the config's valid for both (OpenSSH is the same release, but the Windows build uses LibreSSL instead of OpenSSL, so you could conceivably write a config file that isn't compatible with both, I think?).