skysight-inc/HackerNews huggingface dataset:
The whole CA system is fundamentally broken.

When you point a virgin browser to a new ssl endpoint the user should be presented with the certificate and a list of certificate chains that imply trust in the certificate. At that point you should decide which certificate to trust or not. This can be

- only the end certificate (because you verified the hash),

- some intermediate certificate or

- some/all root certificates (that come with the browser).

Obviously the last option is stating “I’m incompetent and/or blindly trust the browser”. Unfortunately it is the default and the software doesn’t help you to manage certificates you trust in a reasonable way.

For me it would be okay to turn of dumb mode during installation. As a start, the green address bar could be used for these user trusted certificates (instead of for EV).
Ask HN: Ideas for 24 hour Hackathon at college
Hello, I'm an undergrad in Computer Science, and our college is conducting a Hackathon based on the theme Computing for Society.
We have been given the problem statements from the UNSDG link - https://www.un.org/sustainabledevelopment/sustainable-development-goals/
which comprises of various problems faced by society and we need to develop solutions to tackle these problems from a Computer Science perspective in 24 hours, like making an app which can track the vaccination details for a child.
Please comment on any ideas or anything which will be helpful.
Thank you.
Fitting that something like this happens when we celebrate 30 years of the decentralized world wide web!
EJBCA is popular but it's hardly a monoculture, especially among the larger CAs that can afford to do their own thing. Let's Encrypt doesn't use it, and I'm pretty sure a significant number of the other bigger CAs don't.
well they found this out while they were pursuing another case so actually they're a real value for money service
Are you a redhead by any chance? Red hair is linked to anesthesia resistance, requiring about a 20% higher dose to get the same effect as other people.
The AOM membership and the VP8 support may even be related. If Apple's assuming risk from submarine patents, etc. inherent in shipping an AV1 implementation, VP8 is something like a subset of it, so they can get that "for free".

The post talks about how iPhone 7's have worse battery life with VP8, which I'm sure is true, but it's still kinda funny because...it's Apple quasi-complaining here, and Apple who can solve the lack of acceleration, at least for future products.
The Pulp Magazines Project: Archive of all-fiction pulp magazines from 1896-1946
i'm sure to the people who didn't get into their dream college this is the most serious case in their life
Likely those who use GPL and other copy-left licenses.
Anyone building out a setup based on cgroups and namespaces will eventually arrive at a poorly specified, bug ridden mini Docker. Might as well get with the program early.
You are 100% right. I'm not Amazon's unpaid lifetime indentured slave.
Near its headwaters, the Amazon is not so wide, and runs through ~narrow canyons. I wouldn't be surprised if there were footbridges. I don't find images of any, though. But there is this: https://planetsave.com/2010/07/23/amazon-river-10-friday-pho...
Paint more!

https://excellentjourney.net/2015/03/04/art-fear-the-ceramic...
Moore's law was described in 1965 and the experimental evidence lined up for well past the next two decades. If you handwave exactly what it means to "everything is 2x better every 1.5 years," we'd expect a factor of 2^(30 / 1.5) = 1 million by 2015, so having a factor of 100,000x in cost and having it fit in your pocket wasn't actually unexpected.

Certainly any cryptosystems designed in 1985 that wanted to encrypt data until today should have taken the most aggressive form of Moore's Law into account.
Google has moved dozens of employees out of its laptop and tablet division
Attachments are definitely down for me. Can't view received images.
Would two signatures on the same cert fit the bill?

Two complete certs is twice as much data to transmit, making the TLS setup a bit heavier.
Tell HN: Bookmark Firefox “Saved Logins”
For quick access to firefox saved logins, create a bookmark with this URL:

chrome://passwordmgr/content/passwordManager.xul

It opens full width of the browser windows but allows to access password very quickly.
> Then you would have a system dependent on the volatile state you configured by hand, meaning the system configuration is not declarative or reproducible.

If you're using Ansible as the author already was, you essentially have this already. I can do a one command deploy to cloud servers, dedicated servers and colo boxes with just Ansible. Docker gets you a slightly more guaranteed environment and an additional layer of abstraction (which has its own set of pros and cons), but that's about it.
I think that AWS are the "bad guy" here. I am happy to be proven wrong but they don’t have a track record of contributing code to the OSS projects they provide as a service. Whenever they are forced like it was the case with Mongo and now with Elastic they are using their power to have a competing OSS project. There is nothing wrong with this business wise but it's totally against spirit of OSS.

If you look at Red Hat on other hand when they decided that Kubernetes was the way to go for their OpenShift project they put lots of engineering resources for upstream k8s.
Gboard uses differential privacy.
November 2016, if you use a prefix search: http://www.openradar.me/29286980
Free tool for developers to retarget HTTP requests from one host to another
Octopuses on ecstasy just want a cuddle (2018)
The caption to the video currently says this:

"Authorities charged more than people, like actresses Felicity Huffman and Lori Loughlin, March 12 with being part of a long-running college admittance scam. (Allie Caren, Justin Scuiletti/The Washington Post)"

It seems to be saying that actresses Felicity Huffman and Lori Loughlin are more than people.

One of the HN comments quotes "The Justice Department on Tuesday charged more than 30 wealthy people — including two television stars". The article currently begins with "The Justice Department on Tuesday charged 50 people — including two television stars". I suppose it must have been edited—and, based on the caption I see, there must be less scrutiny that goes into edits than into the original.
Apple historically considers dupes as upvotes, so be sure to indicate to which bug you suggest they dupe it if you know of one.
> Suspicious function sequence

As far as I remember, and it has been a while (and is virtually undocumented), with ETW the convention is to not call the EndX method when an error occurs as EndX is basically synonymous with `return`. This might have been carried over.

Either way, I'm sure there are false positives, as always with static analysis.
Let me get back to you on that... I have an abandoned version on github that is so sloppy it's embarrassing.
Yet another example of "suspicious" test code which intention is very clear:

TEST_METHOD(TestSwitchAndReselectCurrentlyActiveValueDoesNothing)
{
// *snip*
vm.Value2Active = true;
// Establish base condition
VERIFY_ARE_EQUAL((UINT)1, mock->m_switchActiveCallCount);
VERIFY_ARE_EQUAL((UINT)1, mock->m_sendCommandCallCount);
VERIFY_ARE_EQUAL((UINT)1, mock->m_setCurUnitTypesCallCount);
vm.Value2Active = true;
VERIFY_ARE_EQUAL((UINT)1, mock->m_switchActiveCallCount);
VERIFY_ARE_EQUAL((UINT)1, mock->m_sendCommandCallCount);
VERIFY_ARE_EQUAL((UINT)1, mock->m_setCurUnitTypesCallCount);
}

> [...] The analyzer has detected two identical code fragments executing immediately one after the other. It looks like this code was written using the copy-paste technique and the programmer forgot to modify the copies.

Here Value2Active is a C++/CX property rigged to a PropertyChanged event [1] with a macro:

public ref class UnitConverterViewModel sealed: public Windows::UI::Xaml::Data::INotifyPropertyChanged
{
// other members omitted
OBSERVABLE_OBJECT();
OBSERVABLE_PROPERTY_RW(bool, Value2Active);
};

Can you be sure that this actually does not have a side effect? I bet not. Indeed, the intention of the original test is clear: a property, once set ("Switch") to a particular value, should not update other states even when set ("Reselect") to that same value---as it will really trigger a side effect! This idempotency guarantee is an important interface contract worth testing, no matter what a linter and clueless blog author says.

[1] https://github.com/Microsoft/calculator/blob/master/docs/App...
She got a PhD in science, so she's at least speaking from experience.
This reminds me of my time at the university. Everyone there was using IRC, and not just somehow using it, everyone had an instance of irssi running inside screen on the university's unix servers. When you were done chatting, you'd simply detach from the screen and irssi would keep on running on the background making sure you were always up to date.

The first thing that freshmen learnt was how to do just that. Windows users would install PuTTy and others, like me, would learn how to install and run Linux. Every community had its own channel, private or public, and life was good.

During my exchange year I was shocked to discover that this wasn't a standard practice in every university. The people at the other (non-technical) university were using a mixture of Skype and Facebook to communicate, but non of the feeling of being one big community was there.
As far as I know, there wasn't a public postmortem for the Oct 16, 2018 YouTube outage. Based on that, I'm not expecting one for this outage.
Cheat. Bribe. Lie. Here's how the college admissions scam allegedly worked
If anyone is interested: Memorystore for Redis is experiencing intermittent failures during instance creation. Existing instances are not affected.
Shouldn’t ... but can’t? Always can.
Mercury, god of communication, retrograde is kicking it up a notch this year.
Show HN: I Made a Template to Build Node.js Desktop Applications
Is there a way to do WebRTC without revealing your IP to some signaling server?
Different companies have different titles for similar roles, and share titles for people of vastly different quality and experience.

Senior Engineer is a relative title. It means more senior than the other engineers at that firm not other engineers at different firms. A senior engineer on the google android team is way more knowledgeable than the senior architect at a local coding shop where the average dev makes 40k/year and has a year of experience.
It will be very interesting to see what timing issues might be involved if this is indeed due to Spanner.
Really interesting! The expanded image was 404ing for me, I found this slightly different one for anyone interested:

https://i.imgur.com/WGOy3qT.png
Small and Cool UI Demos
You can trivially dump your module to a file with the actual LLVM API using `LLVMPrintModuleToFile`, even if the module is in the middle of being built.

It's easier to emit human-readable LLVM IR if you're just playing around (or are using a language without good LLVM bindings), but it's strictly inferior to using the actual API
Suddenly I want to take this SAP class! I imagine it's something like the worst of Oracle Forms, but nonetheless it's really surprising and cool that the class was one-on-one.
I'm not a huge Paul Krugman fan. That said, Paul Krugman is a Nobel-prize winning economist, whereas Daniel Ivandjiiski is a convicted financial criminal.
Skipping the landline stage means skipping the need to stabilize the situation on the ground, particularly involving crime. There is a lot to be said for the side-effects of landlines, other utilities, a postal service, roads, and so on. Widely exposed public assets need protection, and so they get it, and thus the place is becalmed.

Cell towers are tiny little spots that can be fortified without much concern for the surrounding situation. They don't provide an incentive to care about any troubles in the area.
Too bad I can't afford a gaming PC to play KSP.
Is this PVS-Studio blogspam? They're always so proud of being able to detect the same things gcc/clang -Wall -Wextra detects.
I'm an experienced developer looking to dabble in some of the tracks you offer.

What's the best way to determine if this is a fit for me?
That's a bit like saying "ORMs are too complex" before proceeding to eventually build your own crappy ORM. I think by accepting docker you gain a lot of support from a developer community which you'd otherwise not see if you assembled your own.
Patch Tuesday, March 2019 Edition
Breakthrough blood test for PTSD on the horizon
Make the SAT so difficult that on average 1 person gets a perfect score each year. Then do not allow any other criteria for admission.

To prevent bribery randomly sample 1% for a retest under much stricter security.

If you must, lower standards for protected classes to even out demographics.

Rich people can afford to burn their children’s childhood on the enrichment activities and “volunteer” work Harvard requires.

Standardized testing is by far the most fair way to do this. SAT prep is not that effective and besides SAT prep is now available online for free.
That is a great story.

How many times have you told it? :)
Concerns about server going down or changing cloud provider imo is not particularly interesting or even useful advantage to mention for personal infrastructure. Considering that it's likely we might change our personal infrastructure less than one every year and I've never got a case when an unmaintained docker setup can run 6 months later, I'm not sure if the value for portable is that high.
It's not not available for public consumption. After finishing, I realized 2 things: SSL/TLS was necessary for nontrivial cluster solutions, and very few people use Redis Cluster in practice (the multi-key issues being the primary reason).

In 2015 I released a patch to allow for transactions with rollbacks in Lua scripts; it used dump/restore to snapshot keys. This idea was extended to be the cluster solution I released last year. The primary compromise is that as implemented, it more or less relied on the equivalent of a temporary key migration. You want a transaction on server X to involve keys from servers X, Y, Z? You migrate the keys to X explicitly, run your transaction, then migrate them back.

Caveat: big keys are slow to snapshot, migrate, prepare for rollback, etc.

I've got incoming changes to my own fork that allow for fast state transfer for large structures (useful on multiple machines, or just heavily threaded + transactions), more or less eliminating the caveats. But that's also not yet publicly available, and I've spent 5-6 of the last 7 weeks sick (maybe 4 full workdays in that period), so I don't have an ETA on any of it.
Lyft IPO's Details – Lyft may not expect to make money for another 11 years
We already live in a world where if e.g. North Korea wanted to destroy the huge swaths of our entire species, they probably could. See things such as salted nukes, like a cobalt bomb. [1]. I think there's an even more general lesson there as well. We first utilized nuclear weapons in 1942. Up until that time major developed powers going to war with each other was a relatively normal part of existence. And given that reality, it would not have been unreasonable to predict nuclear weapons resulting in the end of the world. As Einstein witted, "I don't know what world war 3 will be fought with, but world war 4 will be fought with sticks and stones."

But after the realization of nuclear weapons, unrestrained war between developed nations simply ended. And we've entered in what is likely the safest and most peaceful 80 years of human existence ever. I realize how absurd that sounds, but statistically it is almost certainly true. It's hard to even imagine the death toll of previous wars. In World War 2, some 3% of the world's population was killed. Today that would be 231 million people. For some scale imagine a 9/11 type event happening, every single day, for 211 years. If you have kids when you're 30 then your great great great great great grandchildren would be experiencing a daily 9/11 event each and every day of their life. Now take all that death and suffering, and compress it into 6 years. Really puts our modern losses into context.

The point of this is that weapons (or equivalent) capable of immense harm don't necessarily have the impact you might expect. Similarly, get rid of all nukes in the world today while guaranteeing they could not be easily recreated - and you'd likely set in motion a series of actions that would lead to the violent deaths of what could be billions. I find unforeseen consequences endlessly fascinating. Bring on the planet busters. Hope there's nothing we're not foreseeing!

[1] - https://en.wikipedia.org/wiki/Cobalt_bomb
Maybe you're lucky?
I assume you’ve heard of GlassDoor but don’t consider it sufficiently anonymous?
FBI discussed charging HRC with 'gross negligence' and DOJ said 'no'
What's the difference between MLM and Pyramid scheme?
What's the best way to handle updates?

I would like to switch to a dockerized setup, but running everything on Debian/stable has the advantage of unattended-upgrades (which has worked absolutely flawlessly for me for years across dozens of snowflake VMs). Not going back to manual upgrades.

I tried a Registry/Gitea/Drone.io/Watchtower (all on same host, rebuilding themselves too) pipeline and it worked, but felt patched together. Doing it wrong?
Latest FFox, built from src.
Promises without consideration (e.g. unpaid) aren't enforceable.

I help out by sweeping Amazon's yard everyday, for free. "Thanks!" they say, "Any time!" I reply. But years later, I decide to stop. Amazon cries out in anguish "But you have a Responsibility!", and threatens me that if I don't clean their yard... well, they'll do it themselves.

Free maintained software suits Amazon, and some organizations / foundations provide it. Seems to work as consulting services advertising (BTW which incentivizes hard-to-use software, lots of complicated features, jumbled together... ever seen a large foundation's open source project like that?)

Some businesses fund these foundations directly, but minimally, and there's a certain... reluctance. Perhaps an unmet need there...?
> seems likely to be the root cause of these deaths.

Given that investigation in both accidents is still ongoing and all we know is wild speculation your conclusion is premature even though it finally may turn out to be true.
Wait, are you using Brave New World as a positive example?
This is pretty good. I like it. How does it compare to Jupiter notebooks?
When "login" is a feature that fails and they tell you to use another OS, thats a BIG fail for me.
Gold-Backed Cryptocurrency in Market
It only has little chance to turn out true if they're calculated in different ways and accumulate different error. If you're e.g. dividing two pairs of integers and comparing them, regular equality is likely to be fine.

A relevant question is what epsilon should be.
"supply does not exceed demand"

This is a misrepresentation of the microeconomics at play.

However much milk is produced, it will all get consumed, because there is a massive demand for Milk, it would just be at very low prices, possibly below the cost of production.

Supply management is better described as price fixing - the amount produced will enable the product to yield a certain price at a certain demand, and therefore be economically viable.

" shoppers will still frequently just buy whatever's cheapest." - if they knew one product was superior to another, i.e. if the ostensibly efficient market which relies upon information clearing actually worked ... then the dynamics of the market would help solve these problems.

This can be communicated through brand awareness, labelling, all sorts of things.

Yes, as you point out, it's an issue basically everywhere because food production, like banking, telecoms, entertainment etc. - is a highly protected industry.
I used the site a few months ago, this is a recent change.
IE: I login and pay my credit card regularly...
It's raining brand-new Commodore 64s
> If I get pressed, then I posit two questions: 1) Do you know of any animals that proactively seek out death? 2) At the end of an animal farming process, does the animal die?

Are you serious?

Disease, starvation, predation, accidents -- you are aware that animals do in fact die outside of farms, yes?

You are aware of the classification 'carnivore' yes?

What about agriculture? It destroys the environment, destroys animal habitats causing them sometimes to go extinct.

What about the worms in the soil getting chopped up by farm equipment? What about necessary pesticides that kill insect life?

Maybe we should blow up the entire planet to end all of the suffering once and for all.

It dumbfounds your family probably because they're more capable of critical thought than you are. Like a lot of 'activists' I seriously doubt you do anything in your life that actually improves life on this plant for people or any living thing.

Veganism is about people searching for identity. It's a marginally difficult diet to follow and it gives you something to constantly complain about, thereby drawing attention to yourself.

If you want to actually change the world for the better go do it. It's hard. You probably don't have what it takes. Stop pretending your soy latte makes one modicum of difference and stop whining about what others choose to eat.
What are your issues then?
Gmail, Google Drive hit with global outage
Statutory limit is actually 20 years, under 18 U.S.C. § 1341 https://www.law.cornell.edu/uscode/text/18/1341

In practice, most of the defendants would be likely to get under 5 years assuming this is their first offense, don’t commit further crimes, etc.
This comment reallly comes off as a procedurally generated combination. Can you rephrase your point another way? I don’t think it’s even clear what point you are trying to make.
> Yeah, welcome to medicine. If you've ever encountered these things in a non-theoretic perspective (i.e., having some condition), you quickly see that doctors don't know shit.

That is, unfortunately, exactly why I am so acquainted with this stuff, and yeah, it is pretty frightening to have doctors tell you they just don't know. But to be fair, I'm talking about being wrong about fundamental biology, not medicine, in which massive shake ups like that are far rarer. It's also not like this stuff hasn't been studied.

> Anyways, how does what you're saying mesh with the fact that extra glucose is stored in your body's reserves while ketones are secreted with urine and breath?

Not sure what you mean but fwiw glucose is also secreted in urine and breath.
Anyone calling bc from bash script will eventually arrive at a poorly specified, bug ridden mini Mathematica?

Wrt "bug ridden"

> if I were having trouble with something Docker-related I would honestly feel like there was a 50/50 chance between it being my fault or a Docker bug/limitation

https://blog.abevoelker.com/why-i-dont-use-docker-much-anymo...
That analogy doesn't really hold. My understanding is that these angle correction issues are due to the oversized engines for the 737 fuselage. The correction system is there as a solution to that which doesn't involve scrapping the line and staying with larger plane sizes .
Not obvious to me at all. I would say that believing you can manually verify hashes in a trustworthy way is incompetent. Where do you get the hashes to compare against from?
Yes, the third brother isn’t quite as successful as the other two, who are brilliant. He works at a payments company in San Francisco.
Wouldn't some of the kids had to have been on it? They posed for picture of sports they didn't even play, and must have referenced it on their application
Taiwan’s New Digital Democracy
Developing Kubernetes Services at Airbnb Scale [pdf]