skysight-inc/HackerNews huggingface dataset:
It is conceivable but unlikely, if you mean in the sense that the certificates should not have been issued.

The broad issue with Symantec was the lack of oversight delivered by its board and senior executives. People with the power to Make Shit Happen at Symantec either didn't know about, didn't care about, or actively permitted practices that were either forbidden, or which weren't specifically prohibited but a reasonable person should have known were unreasonable.

This is not like DigiNotar, where we knew actual bad guys had either the keys or something morally equivalent to the keys (e.g. root passwords to issuance systems).

It's not even like StartCom/ WoSign, where they were doing naughty things and trying to hide that so they wouldn't get discovered, but they fundamentally retained control of their systems, it's just that we didn't trust them.

But nevertheless this could not be allowed to continue.

Distrust was the mechanism by which it was made certain that it couldn't continue. However, Symantec decided to exit the business in 2017, and as a result their management practices are now largely irrelevant.

In theory we could imagine some James Bond style villain copying their old root keys and, before they can be finally distrusted, using them to enact some ludicrous over-the-top plan. Stealing a trillion dollars? Starting a war between the US and Russia? Something like that. But this is not a James Bond movie, most likely everything proceeded as intended and the final distrust is merely a precaution.
Munich did that too in 1992. Never seen that many trucks before.
I read it as they are acting like they support OSS because lots of people like OSS. And its kind of sad IMO that their biggest open source product is a text editor (a good one, but still a text editor). Let me know when they make word and excel open source and then we might be able to have a conversation about them supporting open source. Right now they are supporting the tools people want to use on their hosting platform because most people dont want windows in the cloud (except to handle current enterprise systems that are slowly being migrated to other platforms).
Taking children by force, confining them in education centers, and violently coercing them to assimilate is counterproductive. A third of them went through the residential school system. The land was fully conquered well before the state setup that system. All it's done is produce generation after generation with very good reason to hate and fear the culture that abused them. Not to mention the related damage going through that does. Been to a few reserves before, and what I see mostly isn't good. I consider it a failure because had governments just done nothing and let them be for the last 100 years we'd surely have the same dominant culture now in place regardless. So much harm done for nothing.
Proof of life: how would we recognise an alien if we saw one? – Aeon Ideas
The current debt-based economy is already encouraging concentration of dollars at the top already.
Why did you choose to draw the line there?
I love HN due to its simplicity. Their login page isn’t styled much and I love it. It’s fast and UX is to the point.

I usually visit hn.algolia.com as staring page but it feels flawless with HN.

Please don’t mess it up like digg.com
"Placebo" describes the audio scene people pretty well in my experience.

I did that MP3/FLAC A/B/X test back in my audio engineer days after catching a ton of condescending comments due to my listening of 'terrible sounding' MP3s.

Either my ears are garbage, or the difference is so subtle that even with solid headphones in a dead quiet room, the absolute best you could hope to be able to detect is that one is "different." getting all the way to "shitty" sounds near impossible to me.

Also, to my surprise, if you burned someone a cd from an MP3 source, but told the person it was Flac, it'd still "sound really smooth". Hm.
I would be so locked away.
This would disadvantage individual inventors though, who would be less likely to afford the application than a company.

My current and somewhat layman opinion is that we need to take a serious look at the duration of patent protection. For instance in software, a patent longer than 2-3 years is IMO absurd, and just serves to enrich the patent owner while retarding the progress of technology. Similar calculation could be made for other industries, based on typical time-to-market and rate of progress. The application process should IMO be also more strict, to a) not let through so many patents on obvious things, and b) ensure that patent description actually allows to reproduce the invention. Lastly, we need to find a way to stop companies from stockpiling patents as if they were nuclear weapons.

And speaking of that, I wish regulators could also take a look at the duration of copyright protection, and curb the practice of extending it in perpetuity.
If it's anything like conferences trying to increase diversity numbers, they don't specifically target one gender, they focus their recruiting efforts on sites and locations that typically have a much higher representation, like a girls college, or a girls hacker group. That way they aren't actively saying "we won't accept male applicants", but they ensure that 90% of the applicants will be from the target demographic.
Why doesn't dropbox just use AWS?
If you look at the de-facto vulnerability disclosure standards where a company is contacted with details of a vulnerability and a timeline in which to fix it privately before the security researcher goes public, you'll see that a hard stance gets things fixed properly. How many times has a company ignored the timeline, only to have the vulnerability fixed within hours of of it going public? These companies are capable of fixing this cert issue, and are being lazy. They have been warned, and have been given a generous deadline. Zero sympathy for missing it and suffering the consequences. Empty consequences will only teach them to ignore future problems.
Which may sound easier than it is, considering that the fraudsters need a good quantity of fake customers and want to avoid tipping off the "geniuses" by having enforcers hover in the vicinity.
If the community person dislikes the question asked, or the use that people make of their software, why do they take the time to write answers at all? Usually being pleasant is a question of writing less words as well. These people go out of their way to add snark to the response.

This isn't limited to "open source". It is probably just a people problem.

It's a people problem. In the 70's and 80's, these would've been the kids that would taunt you or worse in the hallways, gym showers and locker rooms. Not literally, exactly. It wouldn't necessarily have been the same people. However, human nature includes a certain degree of aggression and "us vs. them" groupthink. It's only a question of how it gets expressed. We know that such forces can be negative. We also know that such impulses can be channeled for positive ends.
I really think the Open Source Community has been to focused on Microsoft for way to long. Even during the Ballmer ERA we had very Open Source Friendly People at Microsoft.

I think our focus needs to be on what is happening in the other areas.

1) Apple's Counterfeit Lawsuit for refurbished screens and Apple's Diagnostic Software requirement for basic repairs. If that mindset gets turned towards software we all will be in big trouble.

https://motherboard.vice.com/en_us/article/evk4wk/dhs-seizes...

2) John Deer and the very idea of ownership being taken away.

https://www.wired.com/2015/04/dmca-ownership-john-deere/

I think Linux has won the OS War, minus desktop. Now it is moving to the hardware that is running it.
Bootlin docs are awesome from the start over the years. I hope there is a similar company that is focused on linux training in US, or other continents for that matter.
Perhaps a better question is, "Does this area of technology suit you?" Don't give up without a fight, and don't assume "being bad" at what you're doing now means you can't improve or do better elsewhere.

It can take a long time to uncover your strengths--decades, certainly. But stay confident that you will eventually find them. And if you don't find them, then make them.

Find stories about people you admire, who did great things. Learn what they did and how they did it. You can draw inspiration from their experiences. You can draw on their strength to support your own.

Best of luck to you, and know you're not alone.
Yeah, there is a lot of UX work that could be done to address this. For example, a "HTTPS green lock" equivalent for ongoing email conversations.
Flagging and secret down voting
Bogus homeopathy data published in top journal sparks outcry, facepalms
Why Do We Hate Our Planet So Much?
EUV has been the on the roadmap for what, 15, 20, years? It must be amazing for your work to finally pay off after all that time.
> The music labels who decide the terms of sale didn't create the music. They're rent seeking corporations who seek to increase their profits in any way possible and bribe politicians to create artificial barriers through which they can create toll gates.

This is a self-serving rationalization that is not universally true. There are plenty of labels that are artist-owned, or are very friendly to artists. These tend to be small or mid-sized labels, and have been the most hurt by piracy. Ani Difranco has spoken about the impact of piracy on her Righteous Babe Records. Fat Mike of Fat Wreck Chords has spoken about the impact of piracy on independent and growing bands.

Meanwhile the biggest labels (the ones you're complaining about) have done just fine under piracy because they've never hesitated to sign acts desperate for the big time to crappy 360 deals that give the label a cut of every single revenue stream.

Looking at "the music industry" as a whole obscures the truth, which is that the shape of the music industry has changed--the middle has been hollowed out.

What we have now is a system in which it's easier than ever to get discovered, but if you want to actually make money, you're more dependent than ever on a huge company to permit that to happen--whether it's a big label, commercial sync deals, Ticketmaster, YouTube, etc.
Some of us have worked with their software for many years and don't trust anything they say / do because they can change their minds tomorrow. I sometimes think of MS as a abusing partner that keep beating us up when they feel for it, but then buy us some flowers and chocolate to make up for it.

Edit: spelling
If your threat model includes the threat that Five Eyes governments will try to (legally, or otherwise) commandeer the DNSSEC infrastructure (and, more easily, the CA system) to actively attack users accessing your server, then it is perfectly reasonable to "give up on .COM, .NET, .ORG, .UK, .IO, .CA, .AU, and .NZ". Under such a threat model it would also be prudent to never visit a Five Eyes country, or hold any assets there.

Depending on your use case, a better approach might be to host your server in the Tor network, in which case NameCoin would indeed make some sense:

https://www.namecoin.org/2017/06/22/tor-prop279-release.html
Ozark is great instructional material to understand Trump Enterprises.
I agree, in part.

According to the latest government data, as of 2017 21% of African Americans and 18% of Hispanics are living in poverty. Only about 10% of Asian Americans and 8.7% of whites are in poverty.[1]

To what would you attribute the racial disparity in poverty rates?

(Naturally I have an opinion, but I'm withholding it because I want to understand your approach to this.)

[1] http://federalsafetynet.com/us-poverty-statistics.html citing https://www.census.gov/library/publications/2018/demo/p60-26...
Let's Encrypt certs are free. Most companies that sold Symantec certs that are being distrusted are offering free replacements. Other trusted certs can be purchased at minimal cost from a variety of vendors. There may be a cost associated with replacing the cert on the server if nobody in your organization has the (very limited) technical skills needed to pull it off yourselves. If you can't deal with a minor IT expenditure with over 6 months' notice, your business has bigger problems.
Just the fact that someone went through the hassle of a presidential campaign indicates that whoever wins will have way too much of an ego to share his job with others :-)
Livestock is responsible for a large fraction of grains (and therefore clean water) consumption, while emitting an equally large amount of CO2 and methane into atmosphere. So largely reducing animal intake would be of huge help.

This large scale habit change don't require gov. aid, it can be tackled by for profit businesses and research institutions alike.
It’s frustrating when I’m intrigued about what a company does and a visit to its front page does not say.
My library is all FLACs. You can sometimes definitely tell the difference on high-enough fidelity gear, not so much in the sound itself, but being able to hear production flaws more, often you can't, but the point is, I don't care if I can tell the difference. If I am paying the same amount, I want the same quality as I'd get on a CD, if MP3s were cheaper, it'll be a different story.
That would mean the fake customers would have to invest the price of an IPhone, and risk losing that amount of money because either the Apple shop is onto the fraud or the fraudsters just rip THEM off, too.

Not that simple.
I wonder when the rapid erosion of Intel's technical lead in fabrication technology be represented in decreasing evaluation of its market cap.

It was rumored TSMC's 7nm wouldn't be the same as Intel's 10nm. But if they reach ~5nm then they'll likely be knocking on Intel's 10nm door. Combined with the double whammy of 7nm Eypc servers from AMD it seems like Intel's technical offerings are rapidly getting commoditized by the rest of the market.
It's ok, I've learned to just throw karma to the wind and speak my mind. Some will upvote, many with downvote. I find it fascinating from a sociological perspective which way the HN crowd will go on any given day. There are some really insightful folks here with amazing backgrounds and a lot to share, but there are also a lot of perspectives I can't quite put a finger on.
Usually people kill people that they already know. So you would have to condition the probability on people you know and where you usually are.
Possibility 1: Female-dominated fields discriminate against men.

Possibility 2: Those fields are female-dominated because they can't get into male-dominated fields.

So what do the pay and prestige look like for female fields, vs male fields? Well, take medical. Nurses (low prestige, low pay) are >90% female. Doctors (high prestige, high pay) are about 70% male.

This suggests to me that there's indeed a huge level of bias and discrimination, but not in the way you think.
The Art of Prolog, Second Edition
New U.S. Weapons Systems Are a Hackers’ Bonanza, Investigators Find
When did they stop having good auto repair shops? My experience in the past 5 years has been that the people who worked there seemed to be picking up a wrench for the first time the day I rolled in.
Please don't turn that into politics.
Had an interesting conversation if you have been involved in any ICO sales and live in North America, seek legal counsel immediately. Do not listen to idiots telling you this is good for the space, they don't know just how much reach SEC has when it comes to securities fraud. The investigation will likely span many years but they will eventually get to your ICO and will hit you with wire fraud and felony, which won't go away and it will impact your employment and possibly overseas travel.

If you were one of those companies that helped ICO launches, there's a good chance you will see jail time accordingly.

Remember, the SEC has the manpower and allegedly a technology to uncloak elaborate laundering on the open ledger, which opens up a whole new can of worms called anti-money laundering orgs that become activated.

Im glad I walked away from ICOs.
Packaging GNU hello is also a focus of examples in the NixPkgs manual[0]. With this Guix tutorial, there is now a litte more pairity between two great tools.

[0] https://nixos.org/nixpkgs/manual/
Personally, I wonder if it's not simply that psychology is the first field to investigate the issue seriously.
That some businesses have figured out how to exploit people's irrationality does not mean that economists have a good model for how actual people behave, and how it differs from rational behaviour.
From the article:

> subpoenas... focusing on those that failed to properly ensure they sold their token exclusively to accredited investors...

The idea of an accredited investor in this context seems either a little silly or like a major philosophical problem for tokens, depending how you view it. What does it mean to be an accredited investor, anyway? From Matt Levine[1]:

> Under U.S. law, some financial products, like hedge funds and private-company shares, are generally available only to "accredited investors." There's no actual accreditation -- there's no test -- it's just that if you have enough money you're "accredited." The theory is partly that if you have a lot of money you can afford to lose some of it on dumb private investments, and partly that if you have a lot of money then probably you know things about money and won't make dumb private investments. Both of these are terrible theories: If you have a lot of money, you still can't afford to lose all of it in dumb private investments, and there are plenty of rich dentists who don't know much about investing. The result is that it is both too easy to be an accredited investor, in that unsophisticated investors can be accredited, and too hard, in that fancy investing products are available only to the rich. (Rich-ish: The threshold is basically $200,000 in annual income or $1 million in assets.)

1: https://www.bloomberg.com/view/articles/2015-12-21/fraud-bon...
Keep up the good work! All Bootlin team members are totally worth following if you're interested in kernel development.

(I'm not affiliated with them in any way but I wish to join them someday)
> ...it's that you would literally have to take on the entire political machine of both political parties in New York...

That sounds pretty complex to me. There's a considerable number of moving parts there all of which inter-relate in intractably complicated ways.
Yes, on paper. The problem is in current practice. In most fields, patent system extends too much protection for the patent owners, allowing them to block an idea from being used by others for far longer than it's needed to recoup development costs and earn a solid profit on top of it.

Also, you forgot about the other part of the purpose of patents - to allow the public to benefit from the innovation, by making it public domain after patent protection expires. Increasingly, patents don't hold that end of the bargain, by being deliberately written in such a vague form as to be useless as a blueprint.

Back to the topic of pharma - this is the only case I know where I feel that cost/benefit of patents favors keeping them. Everywhere else, I feel things would be better if we abolished them, or at least severely reduced their duration.
Obviously it could of if applied correctly. That's an interesting point in general. People are still using insecure communications with no sender verification while doing business here in the 21st century.
Maybe being a high school teacher is simply more pleasant than working in tech to some people? I don't think your example shows there is an untapped talent pool.

Of course, in general, you can make a job more attractive (raise salaries, roll out red carpets, install slides...), and you will attract more people. That doesn't prove those people were an untapped talent pool.

Presumably there is a price that would make a high school teacher consider working in tech again. That doesn't imply companies should be willing to pay that price.
I was referring to this page, not the home page:

https://news.ycombinator.com/newest
I always appreciate more documentation when it comes to Nix and Guix. Being still somewhat new to Nix and Guix I found myself looking up other people's declarations on Github because the official documentation was lacking.
Article focuses on Amazon as a retailer. Don't they make most of their money from AWS?
This is backward, the point of a patent is that it guarantees the invention will become public knowledge. The exclusivity period is compensation for that.

There is no law forcing a person or company to file for a patent. They are free to keep their trade secrets a secret forever, if they want.
Windows 10 definitely feels very user hostile with forced updates and data collection.
Another way to visualize how close the last election was;

If the sparsely populated Upper Peninsula of Michigan were part of Wisconsin and if the Florida Panhandle were part of Alabama, Clinton would've won. These odd little geographic quirks have an enormous impact on our national politics.
IntelliJ IDEA CE is way better than VS Code, IMHO. Much more reliable in the type inference.
The media is no longer reporting things. You can't make money with reporting. The media is actively creating narratives, and one of the narratives that people are fed nowadays is that women are victims.

Men and women are pitted against each other.

Due to the way the media has evolved people consume their own biases and most often just read the headlines.
جريمة قتل بشعة  بحق طفل عراقي للاشتباه بميوله الجنسية
> I've already addressed this, it's pretty trivial to recompile most major software packages.

Is it not obvious that outside of the Linux bubble people are not looking forward to invest their precious time into such things?

> Sucks to be a proprietary software vendor. You have to do all this hard work for people to not buy your product anyway.

Of course the alternative is to just ignore Linux users like most proprietary software vendors do.
Wall Street Has Charms to Soothe a Savage Bitcoin
Is that actually true? Or is there another nuance to the formula that determines what ends up on the front page?
It could, but I suppose that the biggest factor here really is social.
I could be wrong obv, it's not like I had researched the subject
They did, but I imagine it was really expensive vs building their own stuff at that scale. Plus they probably don't want to be reliant on a competitor in many ways.
Protected classes? Can I be a protected class? I don't think having protected classes is a good thing, tbh...
30th IEEE/CVF Conf. On Computer Vision and Pattern Recognition Call for Papers
I disagree. Without diligence, that number could skyrocket as high as 8 out of 20. Where would we be then?
I'd say this refers to stuff that's just thrown over the wall, without much explaining of how to build it, why would you use it etc.
Probably you don't know Python that well, then...

Also we don't need performance parity. We just need enough performance for such a framework to not suck. Interpreting Python bytecode in Javascript already doesn't suck that much, compiling bytecode to WASM and then to native machine code would suck even less. And there are always ways to improve the performance of critical parts.
As of now, the Rust IntelliJ plugin combined with CLion provides the absolute best Rust IDE experience (it even gives you a visual debugger that works as it’s supposed to...)