skysight-inc/HackerNews huggingface dataset:
Correct. HSTS does not protect against a first visit to a site. And to work around HSTS, there are many ways to get users to clear their caches, install new browsers, or use new devices to browse sites they've already visited.

Technically, if the domain had DNSSEC enabled, it might prevent this kind of attack, but no regular consumer is using a validating stub resolver, so even DNSSEC wouldn't work.

Now that browsers are saying "Not Secure" by default for HTTP pages, users are apparently expected to notice this popping up where it didn't before and realizing they're on a phishing site.
A camera can't maneuver quickly or vertically, and a satellite can't be directed in real time.
I was going to comment on that exact exerpt. To explain and expand further, all university gives you is a breadth of general purpose knowledge. It merely provides a guarantee of a minimum of passion, time invested, and skill. If a degreeless individual can fulfill these minimum breadth and time investments on their own, they've attained the peak of what most college folks will ever. What's more: their motivation and discipline, their curiosity and self-sufficiency will continue accelerating them well beyond the typical college kid in whatever it is they do.
Before I fully understood bitcoin's Lightning Network, I had the same doubt.

For people who are familiar with the Futex concept in operating systems, I can draw an analogy with the Lightning Network. If the transaction doesn't need to be settled on the main chain (if there's no locking contention), then it can be settled offchain (lock can be taken in user space), which is almost instant, with much (much) lower cost, and has the same trust model as the main chain transactions.

Last time I checked there were some pending technical issues that needed to be worked out. But there's no reason to believe that it has no chance of getting there.
And I would add that although some people see Apple's recent lack of innovation as proof that you need an asshole dictator at the top, I take it as proof that putting abusive people on top harms those under them, preventing people from really owning what they're doing or learning to innovate collaboratively.

It's basically "après moi, le déluge" as self-fulfilling prophecy. Real leaders create something that lasts beyond their deaths. Contrast this to George Washington, who could have ended up king but worked hard to make America about institutions, not men. Or, in business we can look at places like Toyota, which have remarkable cultural consistency and continuing innovation across the decades.
I think the truth is simpler. Ideology and games both present people with an escape from their lives. Life terrible? Play some WoW, and you'll at least be guaranteed slow and steady progress instead of an ongoing backwards slide into poverty. Ideology (particular racist ideologies, as the article and to focus on) offers a similar alternative game to play. Failing at life? Start competing against a minority team that's even worse off, either economically or physically.
I am a customer of Namecheap and Cloudflare too, and though I'm a happy Cloudflare customer, Namecheap has given me no reason to leave.

That being said, the company I work for I think I will begin transferring over to Cloudflare as a registrar, simply because we have hundreds of sites already on Cloudflare's NS, and moving them over to Cloudflare is much easier to sell than moving them over to Namecheap, which is something I had pitched but could never justify.
For those of us that aren't keeping track: "Marzipan is the code name for the technology that will allow iOS developers, with just a handful of modifications, to port the iOS versions of their apps over to the Mac." [0]

At least it's better than Electron, I guess. It seems ridiculous that Apple wouldn't put up the resources to implement these apps properly on macOS. But I guess getting a bad version of an app is better than nothing at all.

I hate the whole mobile-first trend, since it usually means fucking over desktop users. Remember multi-window apps? Now everyone seems set on forcing everything to be done from a single window.

[0] https://arstechnica.com/features/2018/09/macos-10-14-mojave-...
I accidentally made money with Tesla stock options seven times
Never in history has a nationalist political party sought so hard to undermine a domestic company... jesus.

You're telling me the president can make tweets threatening nuclear war and face no retribution but a CEO can make a joke in poor taste and lose everything?
China's had a round over the last few years of prosecutions of big shots, including high-level officers of successful companies, for financial irregularities. See, e.g.,

https://www.straitstimes.com/asia/east-asia/chinese-tycoons-...

There are complicating factors in figuring out whether any particular person would be a target of this sort of prosecution (in some cases, the real issue is likely failure to toe the Party line) -- but the idea that the Chinese government turns a blind eye toward this sort of thing generally is, at the very least, oversimplified and out of date.
I don't know why buying something and then leasing it to someone else would be an illegal thing to do. I guess they made sure it's not illegal in Nevis, at least.
Every fund that tracks the Nasdaq 100 (which includes $TSLA) would sell out of $TSLA when it was de-listed from Nasdaq (and therefore form the Nasdaq 100).

There's less financial wreckage created from replacing the CEO, IMO.
My understanding was that they were transitioning from paint (to krita or paint.net or something else). So krita has cross-platform going for it as a paint.net alternative.
This has been true for at least as long as I've been buying apple laptops (over a decade).

If you want something with a similar form factor (light and thin) then anything with similar hardware specs from another company has always been around the same price, or more expensive.

I think the perception of over priced laptops is misplaced because people look at base specs, but ignore form factor. And, yes you could argue that you don't need something so thin and light, and maybe that's true for some people, but if it's a feature you want then apple laptops are competitively priced.
See all your purchases, subscriptions and reservations
Codebuff: Language-agnostic pretty-printing through machine learning
Purse still offers 15%+ spreads on their homepage.

Do you know who is willing to sell a cash equivalent for a 15% discount to face value? A carder. The 15% is their payment for services rendered.
Do they? I don't think so...

Try http://login.ebiquity.com

Do you see any warnings in your browser? I see no warnings in Chrome.
I welcome Marzipan.

It’s not perfect at the moment, but lately I feel like when I’m in macOS I’m running a browser and awkwardly trying to switch between tabs without Cmd + Tab. It’s not fun.

Over the last year I’ve been using an iPad with a hardware keyboard for productivity apps and it’s great. There’s apps for everything, even G-Suite, that I can Cmd + Tab through without any problems.

I really hope that the rough edges get worked out and Marizipan works; otherwise macOS will become even more stale.

The real abomination in Mojave is the Screenshot annotation tool. Good luck figuring out how to add and arrow with some text.

—

Edit: Changed Alt Tab to Cmd Tab
Well, the article quotes an expert who says LiIon costs "$300 to $400 a KWh", while mentioning that Tesla expects to cross the $100 threshold this year. And it doesn't say anything about how many charge cycles zinc-air can do, or how efficient it is at round-tripping electricity.

So I'd mostly get a "terrible reporting" vibe from the article. Of course the company will say great things about its very promising technology. It's up to the reporter to not publish the press release.
Is that a thing? The Java driver must actually parse those and convert them. Java is crazy. https://github.com/mjibson/sqlfmt/issues/25 is the issue to track '?' as placeholders.
At least it's better than Electron, I guess. It seems ridiculous that Apple wouldn't put up the resources to implement these apps properly on macOS

The entire purpose of porting these apps to the Mac was to dog food Marzipan. If they had made “proper Mac apps” that would have defeated the purpose.
I hesitated to put that in, because I knew I would get responses like this. But the reality is that the Tompkins' being white was a significant part of some of the conspiracy theories about what they were doing.
I am considering moving to CF.
The problem that I just learnt is that essentially any SaaS provider has an AUP that says: If anyone accuses you of IP Infringement, you're gone. In theory, this seems fine - because unless you're a Bad Person, you'd never infringe someone's IP.

In our instance, our service providers received a swath of C&Ds electronically, alleging IP infringement.

Within 24 hours, our various services providers had disclosed personal information, cut off services, blocked payments.. all based on an unfounded email.

The legal system is based on due process. This process should be respected. If my service provider gets a legitimate subpoena, I expect them to react.

However, I don't expect them to divulge personal information and cut off services based on an unfounded email. It's really, really nuts how quickly you can lose your business / take down someone else's business..
Right I see your point about most named functions being literals but I think typically when people refer to literals they mean something that can be defined inline or passed into a function without naming it. E.g. map(lambda x: x + 1, [1, 2, 3])

The fact that in popular languages such as C++ you can't even define functions within functions makes referring to the typical way functions are defined as literals quite confusing.

I understand why lambdas are called lambdas but I think it is not a very clear or descriptive name.
The box controls the DNS; majorwebsite.com points to any sever the attacker likes.

The only defense is HSTS/certificate-pinning, for sites previously visited with that browser & device (it’s a TOFU security model).

HN has HSTS, but not Reddit, or my credit union, or my local pizza place, or Kaiser Permanente, etc. etc. etc.

EDIT: I believe e.g. Chrome and Firefox bake in some major certificates, which would also likely flag MITM attacks, for those sites.

EDIT II: Someone responded below (since deleted) that you’d also need that cert to be signed by a CA your browser trusts, which is true. My explanation is faulty/poor. Better informed discussion of attacks further down the thread!
Platforms Should Become Information Fiduciaries
I would expect gangs to be more violent in the places where they are punished the same for nonviolent and violent crimes. If I'm in a gang and will go to jail for 40 years if I get caught distributing cocaine, I might as well murder if I think it will improve my position.
It obviously is. Countless billions of dollars wasted and millions deprived of their freedom for what? Prohibition will go down in history as one of the biggest mistakes of our time.
Tickled and the short follow up were both amazing.
Email verification isn't a Namecheap thing, it was an ICANN thing, it happened to every domain provider.
Many sites can be included as HSTS only in Chrome itself, so it wouldn't be entirely useless.

https://hstspreload.org
This is faulty reasoning. Different countries have different laws, enforcement policies, and different environments, and therefore different kinds of organized crime. How brutal do you think the cartels in Portugal are?
It's not. They have to prove intent. Musk didn't make any transactions while the stock was on the rise, so intent (which is hard to prove) and benefit (which can't be proven) are both a huge problem with this case. He deserves the lawsuit, but this is just to force his hand on a deal.
Interesting point is 40+ years ago cpu/memory was very expensive and software engineering and coding labour cheap, relatively speaking. In this scenario the code often could look however it needed to fit into available resources. "Clever" coders wrote terse and often wrote obtuse code that fit into whatever hardware resources were available. Maintenance or modification at times was one step forwards and two steps back with all sorts of side effects revealing themselves.

These days, the software engineering and maintainers are very expensive relative to the cost of the hardware, so the code should use all the memory and resources it needs to be as readable and maintainable as possible.
Just curious: other than established convention, is there anything that Sly/Slime provide that are still missing in Language Server Protocol(https://langserver.org/)? Would it benefit more to move to a lsp-based solution so we can make Common Lisp more modern-editor friendly?
> For another way to think of this, an object that is 8" (assuming a 12" drone at an angle) should appear to be a quarter the size of the moon to the naked eye at 300 feet.

If a drone was a solid spherical mass like the moon, your guesstimate might have some merit, but it’s not. In reality, your 8” is already way overshooting it. Furthermore, the amount of light reflecting by the moon is significantly higher providing much higher contrast for edge detection. The matte white plastic of many common drones however easily blends into the sky.

Am I saying no camera would do it? No, that’s obviously wrong. But the post I replied to used a very vague wording which implies a majority of cameras would do it, which is definitely not the case. Happy to provide real photos to inspect this weekend (assuming it’s not still raining) at 100, 200, 300, and 350ft at whatever megapixel you’d like (up to 22mp) and focal length (from 8-1600mm, 35mm equivalent) so you can see what I mean.
Can you elaborate? I honestly don’t see where I’ve done any of that.
I've seen people starting to say the differences between Trump and Musk are smaller than one initially might think. (personality-wise anyway) And it's hard to ignore once you notice it.
"Do you know what the difference between 20 years and life in prison are?"

What changes people's habits is the likelihood of punishment, not the severity of it.
My point is that I don't really see any reason to view this with more authority than the self-reporting of someone after a trip of the wisdom of the Machine Elves.
Thank God for that. I don't mean anything bad about Germany when I say that. It's just that I don't think people realize how important it is to have good incentives. Getting rich on the basis of successfully electrifying the world is a very good incentive to have. Legacy automakers have to fight their own incentives. As a consequence, they can't quite manage to make the full turn. Regulation has helped curb this a little, but Elon Musk founded the company without the corrupted incentives. Their market capitalization in the electrical energy sector is a direct consequence of this. Anyone who knows about climate science ought to be happy with his accomplishments.

There is a causal link between Elon Musk putting all his money into SpaceX and Tesla and their successes. This is true from the obvious way (they were literally close to death with his last infusion), but its a truth that is more than superficial.
McConkey

Trailer: https://www.youtube.com/watch?v=XiFo-osFHwQ

Brilliant documentary about the life of Shane McConkey and his progression from skiing, BASE jumping and ski wingsuiting.
> I debated calling this post ‘Home, News, Stocks and Voice Memos for Mac’ because it’s not really a comment on the Marzipan project initiative.

I would've been a lot less disappointed with the article if it had the alternate title.
I disagree, I also have an iPad 2 and it works perfectly fine for watching youtube and browsing. I can't say I have any issues with downloading apps either, of course most new ones wont be supported.
Am I just misremembering, or was there a time where the only way to register a .je was direct through island networks? I used to live there, and recall the domains always being a bit of a pain.
Python packaging has a lot of warts, but you can specify dev dependencies in extras_require. Also, you can just run a virtual environment's interpreter without "activating" the environment.
Taking risks ‘will make Japan great again,’ says Uber investor
I don't think I've ever heard of a company that actually does this in practice. I suspect it ends up simply being more trouble than it's actually worth. I know at that company the list of approved device would probably end up being dozens of pages long... and yeah, thumb drives and USB hard drives were used a decent amount, especially outside of IT.
I suspect MacOS will slowly begin to look more like iOS. These apps might be the beginning of the trend.
As are USB stick attacks.
I feel the same way about Windows 10 Store apps. They don't have the performance issues mentioned in the article but they otherwise feel alien to the rest of the OS. Even web applications feel more integrated.
Wouldn't syntax highlighting help with most of the issues you've outlined?
This is the problem of the leftists. They removed the foundations of culture (for good reasons), but never replaced it with something as solid.
I wouldn't be surprised of they just offered you referrals to Google Apps and Outlook 365. Email is a mess, no one in their right mind would try to get into that business. I guarantee you there are thousands of email servers out there that some small providers want to kill off but can't because it's legacy and impossible to force customers off.
Which literally nobody cares about.
It's definitely not. On my 6s, once it gets below 40% or so, it's prone to rapid drain (2-5% all at once) and random shutdowns. None of which happened on ios 11.
Billionaires don't go to jail.
I recall bailing out a LOT of executives at car companies not that long ago, don't you?
QuickStart for a SQL Database with Blockchain Features
Per WSJ reporting, they already had negotiated some sort of settlement, presumably with milder action toward all concerned, and then the Tesla side blew up the deal at the last minute, resulting in the SEC's hurried drafting and filing of the complaint we have now.

As a procedural matter, they probably could still settle the case if both sides agreed to do that. But the best deal Tesla could get now is almost certainly worse than what was on offer Monday -- particularly since the case against Musk looks awfully close to open-and-shut.

(The case: 1) He said he had funding secured, 2) he didn't, and 3) the result was to run up the stock price to his personal benefit. 1) and 3) are matters of easily accessible public record; as for 2), Musk thought he could get the money from the Saudi government's "sovereign wealth fund", which was thinking about formally providing it, but had absolutely not agreed to do so. During the BFR announcement, Elon talked pretty frankly about his habit of promising best-case outcomes to give people something to shoort for -- but when it comes to public statements about company financials, it's a very, very, very bad idea.)
I don't think it's about the News app, the technology gives Apple an easier way to ensure the Mac has a sort of 'feature parity' with iOS devices. Apple's own goals seem to be the primary driver.
Hayek accepted dictatorship as temporary mechanism. China is relevant because they increasingly allow market economy and private ownership without planning.

>Well, I would say that, as long-term institutions, I am totally against dictatorships. But a dictatorship may be a necessary system for a transitional period. At times it is necessary for a country to have, for a time, some form or other of dictatorial power. As you will understand, it is possible for a dictator to govern in a liberal way. And it is also possible for a democracy to govern with a total lack of liberalism. Personally I prefer a liberal dictator to democratic government lacking liberalism. My personal impression — and this is valid for South America — is that in Chile, for example, we will witness a transition from a dictatorial government to a liberal government. And during this transition it may be necessary to maintain certain dictatorial powers, not as something permanent, but as a temporary arrangement.

­ -- Friedrich Hayek, El Mercurio, 1981
Our move to Azure was actually a slight cost bump, but we are doing it because it will empower us to built new and better services and give us new flexibility. It's getting harder and harder for smaller data centers to compete on features that the cloud providers are constantly starting to offer.
I'm posting this from a Macbook Pro I bought in November 2008. My family uses it daily.

My daily work computer is a 2012 Macbook Air which I dropped from a standing height 4 years ago. It has one bent corner but still runs great.
Yeah, we use C# for the backend too and recently moved away from Typescript. It's a breath of fresh air getting away from all of the type complexity of Typescript. Like you said, it just bogged us down and made us less productive.

With VsCode and a jsconfig.json file you can get much of the benefits of typechecking anyway.

I'm still a fan of static typing, but Typescript ain't it. I need something much simpler that isn't dragging our productivity down.
Starcity (YC S16) Is Hiring a Senior Front End Software Engineer
The biography of Elon Musk by Ashlee Vance talks about this. Which I recommend everybody read. I don't remember the details but I think he was admitted but not enrolled. He ended up not going because he thought pursuing an internet company in Silicon Valley was more valuable than research work at the time.
This is shown in firefox: https://files.catbox.moe/srdxhe.png
Bitcoin, on the other hand, leaks your entire transaction history to the world. Hardly an improvement.
What they did might have been morally appalling, but much harder to pin as breaking a law. What Elon did was a blatant and highly public violation of regulations
Funny RFCs
I used Typescript for years and found that the costs didn't outweigh the benefits for us. It slowed us down tremendously.
LoJax: First UEFI rootkit found in the wild, courtesy of the Sednit group
As someone who serves as a product owner for analytics use cases, I can attest that the hardest problem in Agile is accurate qualitative and quantitative measurement of progress, value, and delivery.

Definitely going to check out the book.
> He was trying to bankrupt the short-sellers, and he was doing it by lying

I'm out of the loop - can you point me to some proof of this?
A businessman who actually wants to make money wouldn't start a rocket company. The return on rocket companies is nil.
I manually set up a bunch of rules that move inessential mail to a folder called "Bacn".

My rules list is about three screens tall now.
The issue with cars is less efficiency, but more energy density. Li-ion is just at the point where it's energy dense enough to use in cars, and e.g. Tesla vehicles are considered very heavy. Any new battery tech needs to be at least as energy dense as li-ion if it's going to work in vehicles.
USB drivers can still be vulnerable, though.
It’s about who you know, not what you know.
I think there's a bit of overexcitement going on in this thread; it doesn't look to me like Musk is going to jail on this one.

This part is interesting:

> The SEC had crafted a settlement with Musk that it was preparing to file Thursday morning, the Wall Street Journal reported, citing unidentified people familiar with the matter. Musk’s lawyers called SEC lawyers to say they were no longer interested in proceeding with the agreement, it said.

If his lawyers had a settlement lined up, and then retracted it, that means that they are confident they can win a better outcome in court. The deal they were going to cut did not involve Musk going to jail, so the outcome that Musk's expensive lawyers are betting on by retracting the settlement presumably also doesn't involve that.
There's nothing temporary or liberal about China's government.