skysight-inc/HackerNews huggingface dataset:
I work on Let's Encrypt and Certbot and I'll offer the following summary for people who aren't familiar with the history of this.

TLS-SNI-01 is one of several validation methods for getting a Let's Encrypt certificate. It was originally the only method that worked on port 443 (other methods use port 80 or ask you to create DNS records).

In January 2018, Frans Rosén (the author of the article linked here) discovered that, on some shared hosting environments, one shared hosting customer could pass TLS-SNI-01 challenges for a different customer's domain. This problem only affects users of particular shared hosting services, but there was no apparent way that Let's Encrypt could get every shared hosting provider to fix this. (Let's Encrypt already knew about a related problem in a proposed-but-never-implemented validation method called HTTPS-01, but had missed the issue that Rosén discovered.)

Let's Encrypt then temporarily disabled TLS-SNI-01 entirely, and later allowed it for certificate renewals but not for initial issuance, as well as for specific hosting providers that had specifically confirmed that they were not affected by the vulnerability.

At the same time, the eventual deprecation of TLS-SNI-01 was announced.

In preparation for the deprecation, the Certbot client improved its support for HTTP-01 (the challenge that uses port 80), and, in recent releases, switched to preferring HTTP-01 over TLS-SNI-01 even if the certificate authority offers both. (Certbot originally preferred TLS-SNI-01 over HTTP-01.) This change means that recent renewals for people who have moderately up-to-date versions of Certbot will default to HTTP-01 and simulate what will happen after TLS-SNI-01 isn't available at all.

Recently, Let's Encrypt has also been e-mailing people who performed recent renewals using TLS-SNI-01 and warning them that this option is going to be eliminated permanently in March.

There is a newer validation method that works on port 443 called TLS-ALPN-01; this is supported by Let's Encrypt but not in Certbot. Some other clients do support it, although they may require that you shut down your web server temporarily.

https://community.letsencrypt.org/t/which-client-support-tls...

Some people have been frustrated by this change because they have blocked port 80 entirely. Let's Encrypt has published a document noting that this isn't a good idea; in particular, it doesn't protect against active SSL stripping attacks.

https://letsencrypt.org/docs/allow-port-80/
> You're missing the forest for the trees. A fixed and reusable prototype, with a constructor, is a class. And when that's part of the language spec, that means the language has classes.

Yes, but prototype is not fixed. Prototype chain is not fixed (you can extend it at any point). All of that is changeable at runtime. You can also change the object's prototype at runtime.

It's all dynamic, and prototype ("class" as you say) doesn't provide any structure/constraints to the object. Thus it's pretty pointless to call it a class. It's just property sharing via a prototype chain. It's nothing like classes in languages like C++, Java, PHP, etc. And it doesn't help anyone understand the language, if you try to see it through that paradigm.
That was the point of OP's article. That it's hard to change.
Ask HN: How to ask your employer to let you own your personal projects
I have been working on a personal project for awhile now, and think that I could potentially monetize it in the nearish future.

However, the product could (arguably) be considered a competitive product with something my employer offers, and I since I signed a non-compete with my employer I fear that there could be legal retaliation against me if I were to try and do anything with my project.

My project only "competes" in an abstract sense, and a part of me feels like if I were to disclose my project, I'd be told I couldn't monetize it, but also couldn't keep working on it for fun.

Has anyone here ever had any similar situations? What did they do?
I'm curious how you plan to detect dependencies from a file by piping it through a command that removes those dependencies.
the real question is also, when AWS becomes the "authorized, secure" source to whatever, while independent network nodes are marked as "unauthorized, untrusted" via some opaque mechanisms
Out of the GPU mining fire and into the incompetent fab frying pan.
I'll pay what they'd pay
Basically, download GNOME Builder and then it's your standard GTK development. Or you can use any other tools that you would normally use when building for Linux.
Sorry, but another +1 for FM. I've been with them for a couple years now (after 10 years on Gmail) and haven't noticed any increase in spam. And I'm not shy about publishing my email address on the web.
Fit of what to what? If it's a fit of candidate to the event, then YC doesn't have information about potential applicants. If it's a fit of somebody already well inside YC circle, then that should be stated - but I don't think YC would limit their intent that much, even though the size (120 people) suggests otherwise.

So, no, I don't think this kind of fit is good here.
100 introverts walk into a bar...
If you have a criminal case, you need to talk to a local lawyer, in person. An online lawyer will simply not suffice.

If you need help finding a lawyer, contact your local bar association and they can refer you. You can also contact your local criminal defense bar association, though not all of them have websites.

EDIT: Just realized that by "not staying in the US" you actually meant you were physically not in the US anymore. This doesn't change my recommendation to ask the Santa Clara Bar Association for a referral to a local Santa Clara criminal defense or traffic/DUI lawyer. You'll just be corresponding with your lawyer mostly by phone/email.
The Mysterious Discipline of Narratologists: Why We Need Stories to Make Sense
Hm, lots of options going - negativity bias (bad stuff is more memorable), conservatism bias (low-frequency events are overestimated), availability heuristic (memorable events like misrepresentations are overstated).

Honestly though, I'm not sure I'd call it a bias in your observation so much as a sensible assessment of sources. A source that's right about 90% of topics is still misleading you quite often. And even worse, a source that's 90% accurate about each topic can leave you almost totally ignorant; there are a lot of stories where the entire message can be destroyed by any one of numerous errors.

(And of course, there's a pithy name for that too. "O-ring theory", after the Challenger shuttle disaster, describes phenomena where everything has to go right, so the failure chance at each step is multiplicative.)
C-q closes the window, not the tab.
I'm not sure how your clarification addresses MBlume's concern.

A mass culture of "If you have X on your resume, I won't hire you" puts pressure on people who have X to stay in the space where X is true rather than try to exit it. It could put pressure on incoming software engineers to not join X, but if X's perks are good enough, will it? I'm reminded of the fact that undocumented immigrants in the US rose after the beginnings of tightened border security during the "war on drugs"---if the flow back and forth is easy, people flow back and forth. But if the flow is blocked, people will tend to stay where they are (or, worse, migrate to where the perks are better...).
I Tried Linux as My Main Dev Environment but Was Forced Back to Windows
I don't think it was him in particular, it was just that firing him gave them the opportunity to replace him and his people with people more attuned to their agendas. It's the agendas that should change, the people would follow. They installed a new culture at the top that was more interested in using Firefox as a transitional way to burnish their resumés, and any semblance of core values disappeared in a tangle of projects that were branded as innovation and that everybody could sign. Meanwhile they've been in consistent negative growth in users that is actually starting to look insignificant because their entire userbase is now insignificant. I mean: losing 1%/month of the number of the users they have now seems like a rounding error compared to 1%/month of the users they had 5 years ago.

Anyway, they'll always be guaranteed at least 3% of the market from diehard anti-Google/Microsoft/closed-source users like me, and users from outside the US who are concerned by unaccountable US tech behemoths who are intimately intertwined with the government. With that 3%, they'll be able to fulfill their primary function of being something that Google can claim in an antitrust hearing keeps them from being a monopoly.
It self selects for people who are great at talking about themselves i.e narcissists.
On the other hand, if my email is broken such that I can't receive, it's actually helpful that other people can't send to me!
I like open source, and I don't like how patents and proprietary software has made the life of the developer difficult, but to be fully honest I don't like java either, I would really prefer to see languages like C++ thrive instead of java, especially today with the new iterations of C++.

I just don't understand what makes java more appealing than C++. I guess the garbage collector? I just wish python was just in the same league of performance of java...
to be honest I think it's all bullshit, just like how oracles sued google for fucking 9-line copyright infringement, when the first jury trail came out i was working at google. or the lawsuit Qualcomm 'won' against apple in china. imo copyright law is hurting competition and innovation in the long term
> good employees

An assumption at best. Those of us that have the leverage to choose our employers can be judged by that choice.
I've been using Zoho since 2013 and never had issues with spam. It's $25 p.a. and offer's all the bells and whistles I need (multiple domains and unlimited email aliases, DKIM, SPIF, 2FA + application passwords).
I suspect that the implementation of any API would come under the shadow of this ruling. For instance, replacing a proprietary product with an open-source variant that has the same API would also be illegal or subject to licensing fees.

In my opinion, this will be bigger than proprietary languages and cover drop-in replacements for pretty much any proprietary code, thus providing yet another way to lock customers into a particular product.
Asynchronous Operations in React-Redux
My biggest worry would be that they don't seem to have chosen a modem for the phone.
Visual programming systems I’ve used seem to have problems that are still present in traditional text based languages. Most of the value seems to be entirely built around helping non-programmers provide value to programming related output

- Modularity / reuse is tough

- Tracing is difficult to do as a system increases in complexity.

- Distributed systems including primitives like locking semaphores are difficult to express visually and are thus still difficult to author. How would you demonstrate to anyone that you don’t have deadlocks and race conditions across modules?

Data flow and perhaps control systems (AI scripts and GUIs built around something declarative and event-driven come to mind) indeed seem to be the only commercially successful examples of visual programming thus far.

If these visual programming environments serialize to normal languages then the tooling to validate them is pretty straightforward. Instead, most visual programming systems seem to be entirely domain-specific and are made custom for a specific set of needs so formats tend to be proprietary and not applicable across different domains. It’d be cool to see a visual programming language based upon something like Squeak but this approach seems to have not caught on.
I see google doing the same thing twice. Now... which one do I gamble won't reach EOL first.
Apple’s streaming video service is reportedly launching this spring
It sounds like you're judging all of visual programming based on one project, written in one language. You don't even say what language it was.

Am I allowed to condemn all textual programming based on the last textual program a company asked me to maintain? It had a single function over 1500 lines long, which took over a dozen parameters, had well over a dozen exit points, re-used variable names and values (sometimes unintentionally) between otherwise independent sections, and had zero documentation. And I had to fix a bug in it. "Impenetrable" does not begin to describe it. Text-based programming is a disaster.
Does this mean that Racket is now R7RS compatible?
Most likely u need an oracle to forecast all kinds of error in real world.
PG&E files for bankruptcy amid wildfire lawsuits
> Are you able to root an iPhone

You can root, but it's security-suicide because the OS' security model isn't designed for that.

> or use one without signing in with an Apple account

Technically yes, although you couldn't download any apps so you really don't want to.

> If not, then I believe the devices are still very much part of a mass-scale corporate surveillance network.

What I always tell people is to look at the economic incentives. Apple makes the vast majority of its money from paying customers, not advertisers, so it has less use for big data. It has also invested huge amounts of money in marketing itself as a champion of privacy, a key diversifier from its competitors. If it tried to do some shady data-gathering, it would have relatively little to gain and everything to lose when that inevitably leaked. Apple usually can't even keep the next iPhone a secret; there's no way they could conceal a massive conspiracy to secretly collect data on customers. And if they did, and it became public knowledge, their sales would go down the tube. It's just bad business. I don't trust any corporation to do what's right out of the goodness of their hearts, but I certainly trust them to do what's best for business.
The explanation strikes me as overly complicated; from what I recall, the "flippin'" goes before the stressed syllable of the word. In "absolutely" the "lute" syllable is stressed, therefore "abso-flippin-lutely".

If I recall correctly, I learned this from "The Language Instinct" by Steven Pinker
And Steve Jobs was running NeXT. And like NeXT, Brave doesn't really seem to be catching on...

From what I understand though, Eich has lost faith in Mozilla maintaining their own renderer, so if he came back to Mozilla it would probably coincide with Firefox becoming yet another chromium skin.
Stuff is changing all the time implementation wise, but the architecture of WASM will enable faster-than-JavaScript access to the DOM https://hacks.mozilla.org/2018/04/javascript-to-rust-and-bac...

Also, I think this might be the tipping point where web UI applications begin to be built in WASM-targeting-languages rather than JavaScript
Microwave and fiber for long haul.

Ethernet is still viable in the LAN. With solarflare/mellanox nics + kernel bypass you can get a message from wire the memory in around 2-3 microseconds. The layer 3 10/40g ultra low latency switch offerings can pass a frame port to port in 200ns while layer 2 offering can do it in 5-50ns depending on how many features are stripped away.

HFT firms use FPGAs with integrated nics as well. Pci-e Latency to pass a message is around 800ns.

For the ULL crowd, when the money opportunity arises, everyone is stampeding to that order to get there first and causes a micro/nanosecond level spike of messaging/activity. FPGAs are great at staying deterministic during this burst.

But alas, i digress. Ethernet is still used and can be wicked fast.
I worked construction one summer during college and my running habit died very quickly after starting that job. Getting paid to work out isn't too bad of a deal, but it is nice to be able to make a choice on the matter.
Yeah, a part of "open" community is to provide MRR, or at least Annual revenue, so potential makers can have an insight on how business in a given niche performs.
Thanks for linking to graphicallinearalgebra.net . I finally sat down and read it today, and (loveheart-emoji). This stuff looks more complicated than just writing a bunch of matrices, but it really does go to the deep of linear algebra.
How can we help you get to your eulogy? That could be taken a couple ways.
Second question is very delicate. You definitely don't want to discuss something which may end up being unattainable. Say, you're working on a new physics, and you don't have something to show in form of math theories or experiments. Chances are you'll be labelled a nut, which from a nerd community could be counterproductive (see "ought to work on a good ides which looks like a bad one"). So you want to germinate your ideas - and perhaps throw those not good enough - until you have a sort of MVP. Which defeats the idea of the second questions substantially.

If you have something to show, it's more in venue of incremental, predictable work, and less in "out there" ideas perhaps.
I guess I just don't agree that those are your only two options. Consider, a nested JSON structure is essentially N-dimensional. Even something as simple as a list of people is effectively multidimensional. You have the dimension of the list, and then you have the dimension of the the structure representing the people. Which, itself, my have multiple dimensions.

Consider, a large part of the literature of machine learning is talking about taking a hypercubes and consequences of most distance/volume measures. (Quickly searching, https://datascience.stackexchange.com/questions/27388/what-d... talks about this.)
Great points,

> scalability and maintainability
> easy for very small examples but it doesn't scale.

this is very true, that is why we do it differently; we clearly define the semantics of our diagrams and take guidance from category theory in this. this is different from other graphical languages; we try to assume the minimum but then guarantee you that some stuff is always preserved.

think of it like deterministic, pure functional programming, but with diagrams.

> usually lacks good mechanisms for abstraction, reuse and hierarchical structure.
> f versioning, diffing or merging

very important points, we try to address this by having everything based on immutable, persistent data structures with built in content addressing; similar to git for instance.

diffing and merging is very complicated and still research but there are many hints that this can be done
> The Linux ecosystem is so full of the attitude "oh well, my users can figure it out". It really annoys me, and it really holds stuff back.

Or worse, you get devs with super high egos that will say "Anyone who can't understand a tar file is a freggin' idiot". Note that this is significantly toned down. Ever wondered where Internet troll culture comes from? Linux devs.
As someone who has recently tried Rust and uses Java in his day job, why do you think that Rust is the obvious successor? Wouldn't C# be a better fit for people looking to leave Java?
Look, it's everyone's responsibility, this doesn't just fall on Systemd. While it's clear that Systemd made some difficult changes to how user processes operate, it still performed the due diligence of providing the original behavior as configurations. They should reconfigure their tools. If they're not doing that, then it's not necessarily Systemd's fault that things don't work for sysadmins trying to use their tools.
Douglas Rushkoff: don't learn to code, just be human
Curated is the social network I've been waiting for
Depends on the program. Anything you use to "index" into data is effectively a dimension. This is obvious with arrays, since you can have multidimensional arrays. However, even structs can just be seen as arrays with symbolic indexes. Usually bound by a given cardinality.

That make sense?
To me, 1st and 3rd are way more reasonable, than 2nd.
Sorry, I was unclear and didn't address the concern specifically. I meant it is still overall what I would want even with that downside. Granted I recognize that there will likely be no observable effect to such a limited, hard-line stance on these principles, but that's the case with many other principled choices too. I wouldn't suggest it if it was hard or unreasonable.
Huge props to the Mozilla crew. Firefox has been an awesome browser and I'm thankful for their product.

My only major gripe is video sort of sucks in it, especially when I'm on my laptop.

I'm glad we're starting to see AV1 rolling out in places. Full support can't come soon enough. Last year at NAB everyone was saying it's about 2 years out from solid support. 2020 should be a good year. AV1 looks pretty promising.
1) Most notably, fastidiously obey the law. A close second, learn to speak and write American English really well. Also, work if you can.

2) Pretty sure we know what we're talking about here.

3) My understanding is that being in the US illegally is a misdemeanor, but entering the US illegally as an act is a felony. This is splitting hairs, though. Jumping the citizenship line, putting yourself in front of the thousands of people doing the hard work to get in right, is simply wrong.

That said, it's been politically convenient for both major parties to look the other way on this for decades. Hence the mess we're in. Clearly we need to stop digging ourselves further into the hole. What to do with those already here is a tough topic.
I am having trouble seeing what the deadline for this is. Am I missing something obvious?
Here's a detailed survey of women in Silicon Valleys' experiences with sexual harassment from a couple years back: https://www.elephantinthevalley.com/ . And a more recent one focused specifically on women YC founders: https://blog.ycombinator.com/survey-of-yc-female-founders-on...
> But good luck making an input, button and select the same height. It's just not going to be pixel perfect.

Sure you can. Just see how Bootstrap does it.

It is true that for a long time, input controls were rendered using the native platform controls, so there were are a lot of differences and limited styling capabilities. But these days all browsers (as far as I am aware) use the browser rendering engine for input controls, and they are fully stylable.
It's a ridiculous question. 99.9% of all obituaries look the same. An announcement of the death, maybe a quick mention of career, a list of close surviving relatives, and information about memorial services.

I would just submit that.
That's ridiculous self-serving high-horse grade-a bullshit. You've chosen a single feature among countless other's and decided to give it disproportional weight and treat it as a perfect predictor.
If you don't have anything interesting to say about yourself or your ambitions, maybe you just aren't that interesting of a person...
The writing was on the wall for run-levels for a long time. Longer than Linux has existed, in fact.

* http://jdebp.eu./FGA/run-levels-are-history.html