skysight-inc/HackerNews huggingface dataset:
Encrypted SNI is great for individual privacy but terrible for business/corporate security.

At the moment it is possible to MITM proxy (without the possibility decryption) to inspect the SNI and determine if the host is allowed, and if so the proxy does its own IP resolution and transparently proxies/forwards the TCP traffic. Ie it never engages in the TLS session. This is useful for restricting access from a LAN to services hosted on large cloud provides like AWS, GCP, etc where fixed IPs are not available (well, the third party service/website elects to use a CDN/load balancer/etc without regard to the full security impact).

A good example is PCI DSS and the payment card LAN. You should firewall and lock down so devices can only communicate with necessary services. Along with actual payment services, these LANs often need to allow access out to third party loyalty systems, digital receipt systems, etc that are cloud based.

With Encrypted SNI this won’t be possible to do securely anymore. A full MITM TLS decrypting proxy with explicitly configure clients will be required to ensure the encrypted SNI isn’t changed to a malicous host to eg upload captured payment data to. That’s a lot more overhead both in:

1. Configuring clients to use a proxy and custom CA (let’s hope all the various third parties apps support proxy setup and custom CAs, and no cert pinning!)
2. Running a proxy that now it has to do full decryption and encryption (to make sure you aren’t messing with the SNI and going to a host you shouldn’t).

Of course I don’t expect businesses to these lengths until there has been a serious breach exploiting encrypted SNI. Even then I don’t know which side will take action (or if neither side will)— merchants installing MITM proxies (unlikely), or third party service providers ditching load balancers and sticking to fixed IPs on their cloud hosts (less unlikely).
good name, good possible alternative to yaml (I juste hate json), and not the least a ruby gem ! I will watch for the project, on how to evolves ....
Australia could do something like this to fix the ridiculous prices of housing but really, all they need to get rid of is negative gearing and it would correct itself.
Because headaches aren't the only reason for people wanting to sleep on their back. A couple of reasons I've heard:

* Some feel sleeping on the back is the healthiest, most balanced position (I have gotten this advice from my doctor before, for example). Just because you don't get headaches on your side doesn't mean it's the most ideal sleeping position.

* Some feel that their body specifically is in better balance on the back. For example, I noticed sometimes when I sleep on my side I get shoulder stiffness in the morning. It's not a big deal, but sleeping on the back prevents this.

* Sleeping on your side can also contribute to facial wrinkle formation caused by squishing one side of your face (and normally we favor a side) for ~8 hours every night. There are pillows to let you sleep on your side and try to alleviate this, too, but at this point personal preference combined with other points like the ones above might just encourage one to try to sleep on their back.

In the end I'm not very interested in why OP or anyone else wants to sleep on their back, nor am I interested in convincing them into or out of a certain sleeping position - that's not what this post seemed to be about. It specifically asked "How?" in the topic, not "Let's debate why or why not."
I wholeheartedly agree with you. Go got a lot right (concurrency, deployment), but some parts of Go's language design are missing the last two decades of programming language history. To me, arguments supporting Go's error handling approach alway seem a little bit like people are rationalizing a horrible mistake.
Reduce rebuild time of WebPack by approx 300% – React PWA – PawJS
We are back to where we started only in the sense, that some people still do not understand that these two are mutually exclusive. Once you cross the Rubicon from the platform to the publisher, there is no way back and CDA no longer applies.
A nitpick:

> Does wealthy Europe have among the highest rates of suicide on earth

Certainly not: https://en.wikipedia.org/wiki/List_of_countries_by_suicide_r...

Only your two examples are in the somewhat upper bound of that list, the rest of Europe are among the lowest suicide per capita countries in the world.
I don't like ML frameworks (Tensorflow, etc...), maybe it's because I haven't tried them. My understanding is that they're like a magic black box: you input some data, you adjust some settings, and you wish for the results to be good. Instead, I've taken a direct approach to the collaborative filtering problem, the difficulty being to correlate a huge amount of data. Some said that only quantum computers would one day be fast enough to solve the recommendation problem, until recently a student demonstrated that it could be solved with classical computers.

https://www.quantamagazine.org/teenager-finds-classical-alte...

This student's algorithm is quite different from mine, but I suppose that my algorithm is yet another example of solving the recommendation problem with classical computers.
Benefits to Merge Outlook PST Data Files
You're exposing your users to MITM attacks by not deploying SSL.

While your setup stays the same, major security flaws are found in different parts of the stacks.

Security is a process, by neglecting it you're paying for resources that are abused by attackers in order to harm other users.
This is a reply to my "it's not a simple matter of economics and statistics"?

> Or is it more likely these cultural issue are in fact complex rather than simple

Yes, I'd agree with that. I said it was a "question of what people believe about the world and their future in it", which goes beyond the economic.

I don't think all these drug overdose deaths are counted in the plain definition of suicide, but they're clearly a manifestation of self-destructive behaviour.
They may not be wrong. The article says that glyphosate was found present in all but two of the 45 oat-derived products. There are no GMO oats available on the market.

Glyphosate is sometimes used on wheat and oats when the plant is at the end of its lifecycle when it is fine, if not desirable, if it kills the crop. We can reasonably conclude that the traces showed up because of the crop being non-GMO, delaying application until the plants are old.
I loled hard at "Americans do better beer now"
Google risks mega-fine in EU over location 'stalking'
Funny how not much changes in 200yr. Basically every part of MA that isn't a part of the Boston area still resents that the state is run economically and socially (order of importance varies by who you talk to) according to what Boston wants/needs/wishes. I'm sure if you went and asked people in Springfield, Hoyoke, North Adams, Fitchburg, New Bedford, (not to mention all the rural communities) what they thought about the quality decision making on Beacon hill you'd get about the same responses you would have gotten in 1787.

Edit: By Boston area I do NOT mean [1] which includes a lot of the Fall River/New Bedford area, the Lowell area and places more under the effect of Worcester. I mean the area in MA where Boston is the major city that has the most effect on day to day life (not to be confused with "daily effect on life") of most people. The area covered by Boston Craigslist is a pretty good proxy for this.

[1] https://statisticalatlas.com/metro-area/Massachusetts/Boston...
I actually expected more of those type of comments. It is a "heavy" kind of interactive experience, and I'm generally not a fan of them, especially the throttling of the mouse scroll, but this is one of the few cases (and maybe the only one I can think of not done by the NYT) in which the extra animation and load times enhanced the storytelling and visual effect.
For instance, imagine if these tech companies decided to start removing all negative discussion of Trump. There would be quite the outrage

For all practical purposes does it matter? Facebook in particular creates such an echo chamber. People only see opinions from other people they already have. If it wasn't for my one wacko MAGA conservative friend, I would never have known that thier was a child molestation ring controlled by Democrats under a pizza parlor, Obama was a secret Muslim trying to impose Sharia law, the military was trying to take over Texas or that Walker Texas Ranger was going to rescue it.
Why is the assumption always that AMZN, GOOG and MSFT doesn't want censorship? Especially when they have taken to censorship like duck to water.

Why is the assumption that when given a "binary choice", entities like China, EU, etc would give in to tech companies? Especially when these companies so easily succumbed to US government/media pressure at home where we have a strong tradition of free speech? When a binary choice is created, it's the companies that have given in, not the state.

Why are these tech companies being portrayed as being on the side of "good", while nations are portrayed as being on the side of "bad". The idea that AMZN, GOOG and MSFT have chinese, european or anyone else's best interest at heart while the PRC, EU or any other state doesn't. Did the british east india company have india's best interest at heart compared to mughal india? Considering how suspiciously we view foreign companies ( especially chinese tech companies ), it's odd that we view our own so highly.
The Bird Has Landed in Tel Aviv
Useful for the average person, absolutely. I don't think I understood the question.
How to Build an Augmented Reality App Like IKEA
Yazidi sex slave meets her Islamic State rapist/enslaver in Germany
Thought this was about hammocks :(
Just keep a pillow below your knees. It will keep your knee slightly bent and relaxed. The pillow prevents turning to the side. Works for me, otherwise a stomach sleeper.
On Windows 10 it works just fine.
Show HN: React water wave – Add water wave effect to the background using WebGL
Really? I pretty much exclusively buy from iBooks. Is there any data to back your claim up?
Please watch this before making other plainly wrong and unsubstantiated comments like this: https://www.youtube.com/playlist?list=PL150326949691B199

The stimulant/depressant dichotomy doesn't hold by the way. For instance alcohol's effect on the brain is not only very non-specific but also not very well understood whatsoever (see https://en.wikipedia.org/wiki/Alcohol_(drug)#Pharmacology or the lecture). Or more precisely it (dose-dependently) acts directly or indirectly inhibitory or excitatory simultaneously in various parts of the brain.

And whatever mess mixed intoxication causes in your head...
> 3. How are the electric skates driven? Autonomous? If they're relying on cameras to do autonomous driving, any disruption in the tunnel lighting will kill them all dead.

If you have a fixed track that is also free from environmental interference, why do you need a complex, camera-based system at all to find the route?

Why not simply use a guard-rail?
It was tried, was a success, and wasn't applauded.

https://news.ycombinator.com/item?id=17608261

It's been effective in the countries that have tried it since. Overdose is the failure of dose management. Harm reduction is less profitable than addiction. Wars create jobs and huge profits. Collateral damage is the human cost. Success wasn't the goal.
It's still a crappy version - since when do browsers need javascript in order to display images?

I know that it is off-topic, and the topic of the article is much more serious than web technology, but I feel it is always worth pointing out that if a high-profile website like www.nationalgeographic.com can't provide elementary functionality without javascript, what hope is there for the smaller websites?

In this case, though, I am glad the images are not shown, the text description was gruesome enough.
Face detection – An overview and comparison of different solutions
Sounds like a success story? From what I've heard, the recovery is unpleasant and many people still end up snoring anyway, so I've been reluctant to go down that route.
It is a joke on Ethereum giveaway scams (with scammers pretending to be celebs) and giving zero f*cks.
Many would argue that Copenhagen is not local, but its very hard to even define locality if you are genuinely non-realist about everything.

Regardless, if it was possible to be "local + non-deterministic" many of us would be fine with that. But its not - Bell rules out "locality + realism", regardless of whether the realistic theory is deterministic or non-deterministic.
It took 17 months to bore the 17 km City Tunnel train tunnel in southern Sweden.

But the City Tunnel is actually two tunnels not one (+ cross-passages), it's 3 times longer, and has twice the diameter.

For the City Tunnel, the whole construction including 3 elaborate stations, all the traditional track infrastructure including 2 different signaling systems and connecting it to the existing rail took 5 years. That's probably the part the Boring Company is trying to save on, not so much the actual tunneling.
> Fact 2: Search engines are more and more irrelevant these days. All interesting new content are either from Weibo or Wechat (or other closed garden)

Uh no. I don't see how you could even think that.
You mean like a certain reality star that had no funding, was outspent by his rivals in the primary, who the conservative establishment fought against the entire time and still ended up becoming President?

If your ideas are popular enough and you know how to market yourself, you don't have to be a sharecropper on FAANG's farm.
Aren't businesses that are serious about meeting their legal/regulatory obligations for controlling internet access already using full MITM TLS interception with their own CAs?

Given a malicious actor can register any old domain and get a cert for it very easily, I'm not sure what particular threat blocking TLS connections based just on the SNI is actually protecting you from.
Bitmex CEO just called Ethereum a shitcoin
I wonder what other legacy, potentially useful features lurk behind user-agent gates. For example, you can get messages to work on the mobile version of Facebook by switching to a very old user agent. Maybe I should just permanently switch to an IE6 user agent, I wonder how many websites would still show the popup to encourage me to get a decent browser.
Oh, I just noticed it's closed source. Too bad :/
- Q: "I don't understand what this article is trying to convey."

- A: Getting as much hits as possible so they have more income from ads.

Also: "Cancer-linked herbicide, sold as Roundup by Monsanto, present in 45 products including granola, snack bars and Cheerios" is very sensational because there are a lot of types of herbicides.

Glyphosate is possible connected to cancer but there is not much proof for it.

Edit: (disclaimer) I think it's still crazy companies are allowed to add toxic synthetic chemicals to nature.

For example: In the US and Netherlands there is now GenX [1] in drinking water because it is unsure if GenX can cause any harm. Well imho that should be the other way around: only allow chemicals to be dumped in open water if you are 100% sure it can't do harm.

[1] https://en.wikipedia.org/wiki/GenX
Please stop repeating this. Its just not completely accurate. I keep hearing it from people. First asbestos has been in use for a long time. Still to this day before anything to do with Trump. What has been happening is the number of companies that produce or use it have greatly declined. Due to legal issues. Second not all asbestos is created equal. Some of the fibers are completely save for there intended purpose. There are many studies that argue claims that it is the direct cause of illness. We really don't know. The people at the greatest risk and I'm sure this risk is universal for such materials. Are the ones working with it on a daily basis.

I have nothing to do with asbestos nor did I vote for Trump. But the knee-jerk reaction does nothing to inform anyone of reality.
UTF-16 is not always 16b/codepoint. UCS-2, its ancestor and more or less what is actually used by Windows when it talks about "Unicode", was 16b/codepoint. It turned out that 64k codepoints wasn't enough for everybody, so they increased the range and added "surrogate pairs" to UCS-2 to make UTF-16. Codepoints in UTF-16 are, therefore, either 16b/codepoint or 32b/codepoint. Many systems that adopted UCS-2 claim UTF-16 compatability but in fact allow unpaired surrogate pairs (an error in UTF-16). The necessity of encoding such invalid
UTF-16 strings in UTF-8 under certain circumstances lead to the pseudo-standard known as WTF-8[0].

UTF-8 was designed (as legend has it, on the back of a napkin during a dinner break) after the increase in range and doesn't suffer from the same problem. Additionally, it's straight-forward "continuation" mechanism isn't any more difficult to deal with than surrogate pairs, and it doesn't have any endianess issues like UTF-16/UCS-2.

[0]https://simonsapin.github.io/wtf-8/
Most languages, sure, but not all; Haskell doesn’t have NULL. You can express the absense of a value with a Maybe:

Just “value” -> Maybe String
Nothing -> Maybe a

If your function returns a “Maybe String”, it can either be just a value, or Nothing. However, if a function returns a “String”, you can’t return Nothing, only an actual String.

There’s no null in Haskell.
To use the software one you just need a $3 board and to connect three cables. Hardly rocket science.
Prize-Winning Images of the Brain
Nuro and Kroger are deploying self-driving cars for grocery delivery in Arizona
NetData: monitor your systems and applications, with interactive web dashboards
Not really, many of the stores are $1M+, so a $100 purchase of groceries could just be considered an outlier. The bigger changes you'll find is when word of mouth spreads about a specific product. Ex. If Tide came out with a new version of the pods, sales will be slow (assuming no advertising) for the first few weeks, but it acts more like an exponential curve if the product catches on.

Good! The Dark pattern for the store layout is working :P

Friend referred me.
Engineers Say They've Created a Way to Detect Bombs and Guns Using Basic Wifi
It's referring to people impersonating him and offering a multiple of the amount that someone transfers to them. (A bit like the Nigerian Prince scheme).

Here's the first example I could find, the scammers are impersonating Elon Musk in this case:

https://twitter.com/88kboss/status/1030003844497989633
Re. "null protection": It is kind of hard to fit non-nullable pointers into Go. The fact that non-nullable pointers do not have a natural initial value and always require an initial assignment is especially problematic in Go's struct semantics, because first of all, struct creation is supposed to be light-weight. If a struct contains pointers, the cheapest way to initialize it would be to assign them nil.

But the more interestingly problem is how Go's struct "constructor" works. It is very low-level, you just assign some fields in a struct like &SomeStruct{X: 1, Y: "y"}; you can also assign all fields, in which case you can omit the keys, like &SomeStruct{1, "y"}. let's call those the key-value variant and positional variant of "free-form constructor".

You can provide a "function constructor", which is simply a function that returns SomeStruct or * SomeStruct, but it is not required, nor can you forbid the free-form constructor.

This is in stark contrast with, say, Java, where the function constructor is both required and the only allowed form. That makes it easy to make sure that non-nullable pointer fields are always initialized, because the compiler only needs to check the constructors.

In Go it is much harder. You can make the free-form constructor check that non-nullable pointer fields get initial values, but then Go has this promise that the author of a struct can add new fields without breaking users of the free-form constructor, as long as they are using the key-value variant instead of the positional variant. So if a struct was originally:

type SomeStruct {
X int
Y string
}

A user can make an instance with &SomeStruct{X: 1, Y: "y"}. If the author of the struct decides to add a new field, the code should still work. That should be the case even if the new field is a non-nullable pointer field. This now defeats the purpose of non-nullable pointer fields.
Because our internal infrastructure is a steaming pile of s*. Probably. I don't use it, so I can't particularly comment.
There's an incentive to do it all at once, or as rapidly as possible. If you try to recruit them, you run the risk of them reporting this and suddenly the other 29 spies are exfiltrated.
If I had intended to explain that, I wouldn't be replying to your comment about your not working out the bits with an explanation that works out the bits for you, and shows that it really is capable of encoding all 17 planes even though surrogate pairs have only 20 bits.

And as you can see, if you do work out the bits, you find that cryptonector is wrong, since UTF-8 (as it has been standardized from almost the start of the 21st century, and as codecs in the real world have taken to implementing it since) encodes no more bits than UTF-16 does. It's 21 bits for both.
>>Also, the pregnant wives of traitors aren't executed in the USA.

No one meant to say that both countries treat people the same. However, Chinese treat traitors like USA treats, more or less terrorists. Traitors do cause a LOT of damage, in lives, money and potentially a lot more down the road.

China might have made his wife "confess" to knowing and abetting, just so all the boxes are checked. Their system is rigged, but I doubt they would just kill a person simply for being his wife, without trial. The legal justification might be that she confessed and is a traitor.
Studying impossible systems with analogues
Yes, we do. You are free to skip any subthread you are not interested in, even to collapse/minimize it if you have javascript enabled for this site.
Mention of atom and the fifties caused me to hallucinate Fallout-style atompunk/Jetsons retrofuturism.
Even the recent court case about Roundup was careful to avoid looking at glyphosate, but instead focused on other additives mixed into the Roundup brand.
There's More to Student Advising Tech Than Implementation
Massachusetts is at least somewhat atypical in that the state capitol and economic center are the same city. In a lot of states, the state capitol is in some smaller city precisely so that all the power in the state doesn't flow from a single place.
Palestine's unique stretchy ice cream [video]
Which is to say, you might actually have to learn something if you go to CMU, UCB, MIT, Stanford or UIUC; instead of just leeching off of your group-project teammates.

(Not that I've ever had any experience on the receiving end of this... /s)
The failure is a feature not a bug.
It can be a little difficult to keep up but everything's being done in the open. For anyone who wants to follow along, the main research forum is https://ethresear.ch/
yeah... no. most notably rust, which might be surprising as it can be used (and has been) to write a kernel in, only has null pointers in unsafe code.

rust is hardly the first one, too.
I love these kind of legacy features. Reminds me of better times when sites could be handled, albiet more basically, by small dinky devices.

At various times, I've written "graceful degredation/progressive enhancement"-friendly versions of work internal sites so people working on the floor could access them...from a scan gun running Windows mobile.

Was it pretty? Not really. Did it respond well to only having arrow keys and a numpad? I tried, and would like to day yes, but who can say? You can't optimize for the ux without previous experience as a user imho.

Edit: fix typos
But by giving someone an advantage you then immediately give a disadvantage to the ones not within the group you have chosen to advance. Even if perhaps your original intention was merely to do the opposite and help people.
It's probably for situations like displaying tweets on a wall or something