skysight-inc/HackerNews huggingface dataset:
No! Registration is important. What you've described would be subject to an enumeration attack.

During Registration the Relying Party (web site) picks some random bytes, and sends those to the Client (browser). The Client takes those bytes, and it hashes them with the site's domain name, producing a bunch of bytes that are sent to the Security Key for the registration.

The Security Key mixes those bytes with random bytes of its own, and produces an entirely random private elliptic curve key, let's call this A, the Security Key won't remember what it is for very long. It uses that private key to make a public key B, and then it _encrypts_ key A with its own secret key (let's call that S, it's an unchangeable AES secret key baked inside the Security Key) to produce E

The Security Key sends back E, B to the Client, which relays them to the Relying Party, which keeps them both. Neither the Client nor the Relying Party know it, but they actually have the private key, just it's encrypted with a secret key they don't know and so it's useless to them.

When signing in, E is sent back to the Client, which gives it to the Security Key, which decrypts it to find out what A was again and then uses A to sign proof of control with yet more random bytes from the Relying Party.

This arrangement means if Sally, Rupert and Tom all use the same Security Key to sign into Facebook, Facebook have no visibility of this fact, and although Rupert could use that Key to get into Sally's account, the only practical way to "steal" the continued ability to do so would be to steal the physical Security Key, none of the data getting sent back and forth in his own browser can be used to mimic that.
Swiss WorldCargo Becomes IATA CEIV Certified
2. Sustained growth at that rate is unrealistic. Going from dirt farmers to office workers is the kind of shift we're looking at over the next decade, but with a shift from office/service to creative work. Machinery displaced farming and automation/robotics is starting to push office labor off in a different direction. I would argue that developed nations are less prepared for that as their economies and retirement structures are ill-suited to that paradigm. Established systems also tend to fight to to bitter end by increasing taxation to make up for lost revenue.

3. Yes, most states are not part of the core; peripheral nations fail long before the foundation does. Thankfully the cost of such failure has become much less likely to result in loss of life.

4. Not weak states that are developed states - ones that are considered developing, yet experience growth largely due to lack of excessive taxation and regulation thanks to weak government. They are thus progressing toward becoming developed. Two examples are Georgia and Puerto Rico - the amount of growth and development in those locations are proportionally far greater than other nations in similar locations and situations. This is directly affected by investment capital, much of which has left high-tax jurisdictions.

Which country are you from?
That's pretty cool. I think we need a reminder that the Internet isn't a prerequisite for life. :-)
baidu and google.cn are high up on the list of non-HTTPS sites.

google.cn is an interesting one though: It redirects HTTPS to http, but the site consists of an image that redirects to google.com.hk which is https-only.

Who knows what you see in China when accessing google.cn...
Eye Movements During Everyday Behavior Predict Personality Traits
It is silly to compare the absolute expenses for education in different countries, you have to somehow normalize for example the teachers wages with respect to the purchasing power, since it is much cheaper to live in Vietnam compared to the US in absolute numbers. That is not to say that most likely something cultural leads to the poor performance of US high school education.

According to J.Simons (Fields medalist turned hedge Fond billionaire) especially in STEM fields Schools compete with tech companies for talent and can only offer much worse compensation.

The other thing is that in the 50-70ties the number of people that studied in preparation for and went to college was somewhere between 8-15% (continuously rising) it is much easier to teach smart students with few good teachers than to prepare basically everyone for college.

In Germany my parents almost exclusively had PhDs as their teachers, now 60% of all students prepare for university and we have a shortfall of ~20000 teachers with half of the STEM education majors going to industry.
The Prometheus project is one of the most interesting projects almost nobody seems to know about. It is incredibly impressive and one of the most memorable and interesting interactions I've ever had on HN was with the user sokoloff, that recounted his time being an intern for the PROMETHEUS project:

https://news.ycombinator.com/item?id=10328687
I know nothing of https.

I put my sites on free cloudflare and i get https without having to do anything, is that enough or?
Probably a reference to this

https://en.wikipedia.org/wiki/Computer_vision#History
At the very least, Steam OS was kind of a far off hedge. Like building a fallout shelter in your back yard. Pretty cheap, kind of spectacular, very low chance of it being used. But, boy, should the need arise you'd be happy to have it.
https://www.explainxkcd.com/wiki/index.php/1425:_Tasks
Donald Trump Set to Take Federal Reserve from ‘Rothschild’s Control’
Was this an invited talk?
Isn't there a standards organization / body for C language. Have you proposed this there? What was the outcome?
I know this is an opinion piece, but its been said many times before. No one knows what will happen. So much projections
Lindows was interesting. Windows was much more relevant then, not as much web stuff going on, no mobile apps. Unfortunately, Wine was not very feature complete, so it fell on its face quickly.
In Germany I thought if kind of sad, that a major automotive forum isn't https secured (motortalk.de). I was asking myself, how they manage their user's logins.

Then I checked. The are secured. Not sure since when, but maybe the data from whynohttps isn't as fresh as one might think.

And lot of bigger press sites (spiegel.de, faz.net. computerbild.de) aren't secured still. Kind of a shame imho.
The EU will def not sit idly by and hand out 4 billion € fines if it doesn't hurt, the current one was only about 40% of the legal maximum they could have handed out (ie, about 10 billion €), and if Google doesn't play ball they'll get out the big toys.
Re the quote(s): that's the least interesting part of the article, although assuming the quote is correct, I don't believe we should fault Ars because Google management gave misleading statements.

The core is the discussion about the various apps and how Google is using the GAS as a lever to control an open source OS to the point that it's both having its open source cake and eating it too. Well, until this EU decision that is.

I have seen first hand how Google's subsidizing of Android through ad dollars brought other mobile OS producers to their knees. This behaviour is anti-competitive and should not be allowed.
Few are "successful enough to experience this as well", because Google destroyed the mobile OS market: Windows Phone, FirefoxOS, webOS, Meego were all technically compelling alternatives that had potental to grow, but which couldn't compete with "free".

And since we're wishing each other things, I hope you will realise one day how much your employer is hurting our societies and realise that you were right there helping and defending them.

P.S: I have wrongly focused too much on OSS instead on the gratis + subsidized by ads part. I am willing to concede the point regarding OSS being a plus for manufacturers in light of what you said, if you claim that Google was willing to share all the sources with manufacturers while keeping the project closed.
This would basically have given them all the advantages, assuming they had a solid contract in place.
I'll keep this in mind when discussing this in the future, thanks.
> many devs, don't [...] have the wherewithal to deal with SSL.

I can buy this for a non-dev clicking "Install Wordpress" in a legacy cpanel of a cheap shared web host (though in that case the web host should be setting up certs automatically for them), but what exactly is complicated about setting up certs for a dev? https://certbot.eff.org/ holds your hand through the entire ~30 second process. It's simpler than most other tasks a dev needs to do while setting up a website.
By the way, I used to think that in the future, when people have had computers already from childhood, everyone would know their way around them really well and be advanced users who know programming and what not. That did not happen.
Subscription Retail: an expensive trap
Cut Windows licensing charges for corporates to ensure that the total cost of ownership of Windows is lower than ReactOS. IMHO ReactOS should target corporates who have old Win32 apps still running on XP or Win7 that they can't or won't migrate to Win10.
ESCORTS ANGE – ESCORTS ATHENS – CALL GIRLS – GREEK ESCORTS GDE
They set this high barrier of entry because they want only high-quality immigrants. I assume because they think this correlates with good socioeconomic status in the future (there is some indication of this, but I don't think it's been established. Please do send me some papers if it is, I'd love to read them).

When you look at it from that light, I think it makes more sense.
And I agree that he is overgeneralizing. There are a lot of people that i come across who don't do this wobble. But in IT hubs (Hyd, Bng etc) it does seems to a general behavior.
Unfortunately not. If you aren't setting up HTTPS at your origin then the connection still goes unencrypted over the internet. Full (Strict) is the only secure SSL option at Cloudflare.
Of course you can for best of category products. Most people just don't care about the difference.
So every non-violent drug offender should just take their multi-year sentence to third-world-tier prisons and their felon status too and be happy with it?
What scriptures or other ancient texts (even scientific ones) did you read? Does one need to learn Sanskrit/Brahmi for it? Can you suggest some good one? I have been thinking of reading arthashastra sometime, any opinion on it?
Apple's Data and Privacy portal lets European users download personal data
Can't we have a combined (computational) approach, where we use a slower shutter-speed to get rid of noise, while at the same time we use a fast shutter-speed to avoid motion blur? Or use several pictures taken with a fast shutter-speed to reduce noise?
https://whynohttps.com/country/nz

Ouch number 5 in NZ is a Credit card payment gateway
I had only cursive for my entire first twelve years of school, then slowly switched to block letters. My handwriting is really nice, but I don't think it had much to do with my school(s). I can't really glean from your comment why you think the kind of writing you are taught has anything to do with the kind of writing you use now.
> As such, the big sentence isn't actually one anyone wants to give unless the defendant basically gives the middle finger to the system.

2 years for the crime, 18 for pissising off your friend. Does your friend think he is a God of some sort?
Please read a bit about autism in adults (especially mild forms) because you have no idea how it works.
That's not to say there isn't an 'indian head wobble'. It doesn't mean everyone or even most indians wobble their heads, or that there aren't people outside india who do so too, but that there are people in india who wobble their head, and it has come to be identified with india.
There are things which pain helps to discover and understand, so it is with any other experience. But coming from a yogic background I see his understanding as quite limited.

Especially that he tries to "glorify" pain as a "true teacher". Maybe it worked for him like this, but it doesn't have to be so, joy and happiness can do the same if properly handled.
He means, how can a machine determine it?
Give a man a fish!
This assumes all stops are equally popular, but that's very unlikely.

I suspect a lot of bunching is caused by buses having to perform complicated manoeuvres around car traffic because of poor stop positioning. In Barcelona what many lines do is skip stops right before left-hand turns (the line isn't even listed at that stop). This way the bus can switch lanes well ahead of time and avoid having to wait for traffic to go though all lanes. This works because most lines stop every two blocks, so you never have to walk too far for the next stop.
And then later they learn the privacy repercussions. Plus earning money on 4 year olds? If its via advertising its shady. There's code of conduct here that commercials for under 12 aren't allowed (so they target the parents instead, yay).

I'll be teaching my kid to learn to go for the duck instead.
The real title should be "Why no HTTPS redirect", but it would be longer. Everything is explained clearly on the website.
Hunting for planets with machine learning
There are some groups of people that find such tasks offensive/beneath them. I don't understand why, I have just seen it in practice.
IoT Security Mailing List (for technical discussions)
Note that the "Flexible SSL" and even the "Full SSL" options don't protect the traffic between your server and Cloudflare. You you need to enable "Full SSL (strict)" as your SSL setting for that.
Thanks for that pedantic insight, doc.

It's patently obvious that API compatibility is a computable problem. You are just checking if API1 is a subset of API2.

Even if foo() never returns, the Application Programming Interface is unchanged if the function signature is the same.
Look at the open pull requests.
WebRTC is just a consensus between multiple parties about how to coordinate and send pure data, or just audio and video, from one peer to another.

Then that phrase would extend into multiple layers of complexity. This could be the first one:

- The "coordination" part is done with SDP, a type of plain-text messages that are used by both parties to reach an agreement about what video/audio codecs they are capable of understanding, and other similar details.

- The "send audio and video" part is done by using ICE to find suitable ports by punching holes in router NATs, which is a common problem we have in current networks. Once ports have been agreed upon, then the audio/video is sent using good old (encrypted) RTP protocol.

Anyone could implement this consensus in their applications, and so be able to send audio/video to other apps that implement the same details, but the most relevant implementations of this standard are those integrated into web browsers, because then they expose all this functionality to their JavaScript engines, thus allowing to control all this from a web page.
If the feature is not used in production, it's not exactly improving safety any more than ASan, which is already available for C. So it has to be mandatory (e.g. by team/company decision) and then one has to look at the costs of enabling it.
Show HN: Literal volume control
"But as Norway aims to make all new cars sold in the country battery-powered by 2025—a target it will reach only with lavish subsidies paid for by sales of oil"

Comments like this are unnecessary and continue to perpetuate a false stereotype of Norway as some sort of naive smurf-land where everything is paid for by oil.

In reality electric cars have taken off in Norway due to well coordinated social policy, and a lack of undue corporate influence on government.

Electric vehicles such as Teslas are not in fact subsidised in Norway- however they are exempt from the high taxation levied on fossil driven vehicles.

Norway has high EV ownership due to punitive taxation, not subsidy. You can argue about whether or not this is a good thing.
Is there a huge difference between MFT and traditional DSLRs? I thought the quality is comparable, except for maybe top of the range.
I think cargo supporting binaries and sharing build dependencies between projects (cf maven's .m2 directory) will mitigate a /lot/ of Rust's build time issues.
There's also a second hand surplus of old technology. They may have wear & tear and other disadvantages though compared to today's standards: slower CPU, slower IO, less RAM, HDD instead of SSD, dead pixels, (half) dead batteries just to mention a few but hey its an option.
You can enforce such rules on your own, by slowly trimming down after-hours "work" (since it is unpaid, it's not work to me). You can compensate this with very good time management and always being on time/reading up on meeting agendas. Nobody will openly criticize you for such a practice since everyone sees you as together and competent. Eventually they get used to this status quo and nobody will even question it anymore in your case. It might take you a few years, but it pays off in the end I think.
That's fantastic to know, thank you!
The US as a nation was/is strong thanks to its people, not the government. This has been due to the fact that the US Constitution is restrictive - individual freedoms are expressly permitted and functions of the state are explicitly limited. In effect, the government was disciplined as opposed to incredibly overbearing; individuals were allowed to grow, learn and create for themselves instead of relying on government.

That system has been attacked from the beginning and the US is rapidly becoming a nation where government replaces the family as social structure. What is now will not always be - the trend is of far greater importance than momentary status.
Startup founders, the media and the market/reality in one video
A bug fix is not a breaking change. You are speaking in tautologies. "A bug fix is a change that is a change to the API". No, bug fix does not change the interface. A bug fix does not change the API. It does not require a semantic version change unless it also changes the expected behavior of the method, in which case it is a change in the documentation, which is part of the application programming interface.
Nice to know that a bank, Sberbank, doesn't bother to use HTTPS.
A good alternative for FUN programming projects would be http://www.meccano.com/meccanoid-programming
It is drag and drop.
It may be not as good as raspberry pi or arduino but it is at least easier
As a bus rider whose drivers on one route sometimes do this, I loathe it.

The problem is that the route timing is designed for a specific traffic and ridership level. The actual time to run the route can vary by a factor of 3 or more depending on whether it’s before, during, or after rush hour.

The route timing is designed for after rush hour traffic levels, when it takes about 45-50 min to travel from my stop to my office stop. During rush hour, this trip can take 90 minutes. Before rush hour, it can take 20 on a good day.

So now, if I leave before rush hour, a commute that could be 20 minutes becomes 50 minutes. On a bus that is scheduled to arrive every 7 minutes - so bunching means waiting 15-20 minutes for a bus: LESS commuter time wasted by bunching than is spent sticking strictly to the schedule.

On buses that run even more frequently (one every 2-3 or 3-5 min during rush hour), this would be ridiculous. People aren’t catching the bus on a schedule - they just walk out the door whenever they’re ready, and expect a bus to turn up within a few minutes.

On a bus that’s scheduled to run once every 20 min (and you can wait an hour for a bus if they bunch), people are more invested in the schedule. I don’t actually trust the schedule at all unless within a few stops of the start of the route, and usually use the “just walk out the door” method anyway; but would appreciate and use the schedule if it were reliable.

So: as a bus rider I might support this, but they would have to fix the schedules. Create and enforce bus lanes. Run more buses - so that even when you get more riders than usual they can carry all the passengers at rush hour without being so packed that it takes 5 min to cram each new passenger aboard and half the bus has to debark to let someone off the middle. Then a little bit of traffic is less likely to create bunching.
With certbot, it really is trivial for anything that's not using some very unusual setup. Shared hosting systems like CPanel have also added support.

Our biggest problem with the transition was mixed content issues with hardcoded HTTP URLs hidden away on long-forgotten pages.
People do care about conflict of interest disclosures.
The C mindset is one of always looking for optimisations and thinking at the bit & byte level. The above solution flows naturally...
You seem to have a war like WW2 in mind. But a war between big powers in the 21st century couldn't drag on for five years while you frantically work on new technology. Even without use of nukes, one side or the other is going to be flattened a lot faster than in the days when bombers used propellers.

Now, a new Cold War, that might push technological competition, although you won't get that "reset" of people's attitudes that you're after.
MondoTunes
MondoTunes provides the largest digital music distribution channel in the world. Sell & stream as much music as you want on iTunes, Spotify, Google Play & 600+ stores. Sell music, get paid, keep 100% of your rights. It's that easy.
Right! Workplaces seem to advertise to, for example, computer people how they are relaxed and that you can come to work in jeans. I just want to get to wear a suit for once, for the enjoyment of myself and others!
That's true although we haven't seen any country leave yet.
Not that different from my ancient Nokia 808 PW or the Nokia 1020, and I presume the low light performance will be worse as well.
Asterisk has a pretty colorful security record, and probably the others from the same era (early 2000's voip C/C++ code) are in the same league but either have escaped attention, or for the commercial side, just hush up vulnerabilities.
Maybe the _are_ still at work! :-)
It doesn't work every time for me. If i open it in a new private session (chrome or firefox) there is no redirection... Probably a faulty configuration on their side.
No shortage? Are you kidding? There is only Sony and Canon who make full frame sensors right now at mass market level (nikon is supplied by Sony), and the amount of cameras available with not-really-medium-format size, you can count on one hand. This is a far cry from the situation of film cameras where you had at least at least several dozens of medium format cameras available for purchase at once.
That's because Yugoslavia was torn apart by two larger imperial powers (the West and Russia).

Czechs and Slovaks, for better or worse, were much more heavily under the sphere of influence of only the West
In their defense, they don't offer payments through the site. Their actual payment gateway (sec.paymentexpress.com) is secured with https [1].

I'd be more concerned with the ecommerce sites on the list, like Rebel Sport. Kmart at least does seem to redirect to HTTPS.

[1] http://paymentexpress.com/merchant-ecommerce-pxpay.html
They probably meant that the reason is malicious, to spy on traffic. Especially since a good chunk of the top sites on that list are Chinese which is known to have generalised spying on internet users.
Why would a 2018 sensor from the low-light kind (Sony) have worse "low light performance" than a 2013 one (of equal number of megapixels too)? Brand loyalty?
The 7 best deep learning books you should be reading right now
https://whynohttps.com/country/tw. Taiwan, Province of China. Taiwan is a country. This would be the correct wording: Republic of China.

China used its influence at the UN to have that included in ISO: https://en.wikipedia.org/wiki/ISO_3166-1#Naming_and_dispute