skysight-inc/HackerNews huggingface dataset:
Yes. But my guess is that even wrong/no signatures will land in your inbox.
For Thunderbird there is an addon which will show you the validity of DKIM signatures

https://addons.thunderbird.net/thunderbird/addon/dkim-verifi...
We already have DKIM which does exactly what you describe.
I used both Hetzner and Scaleway. I trust Hetzner way more tbh. With Scaleway we had several issues other commenters also mentioned: instances not rebooting, random freezes, instance types out of stock. In the meantime we have both bare metal and VPS servers on Hetzner that have years of uptime.
It's my impression that the admissions officers (AOs) at these T10 universities are smart and don't care too much "self-discovery" trips to Africa which the applicants' parents have clearly paid for. Volunteer work in general is not good ROI for admissions.

That said, I think AOs do put too much emphasis on research/publications. In my opinion, being able to do research in high school usually means that your parents have connections to whatever labs nearby -- and students do menial work to just get their names on a paper. There are high school students who do conduct groundbreaking, impactful research, but they are much rarer.
Peter Thiel has been warning about education turning to exclusive clubs since years ago. i dont know if much can change though
A meta technology hype roadmap
Those schools don't admit everyone, and certainly not everyone for free.
No there aren't. If you can check your vote, then your abusive spouse, your boss or somebody else who has power over you, can force you to show them your vote.
I thought the :0 would hint at the tongue in cheek.
The replies and downvotes say otherwise.
I’ll worry about that next time I issue a 30 year certificate.
> "Non-profit" is literally no more than a corporate tax status

It is a tax status (actually, a group of them), but the name has substantive meaning, since to qualify for any of them there must be no one with a claim on the entity’s accumulated earnings.

> That actual charitable causes happen to be non-profit is a coincidence.

It's not a coincidence, it's an actual legal defining characteristic of the kind of nonprofit to which donations are tax deductible.
Well, it's a shame then. They were doing nothing wrong
Foxconn challenges Microsoft patent lawsuit
The license they used was and is exactly about giving away free stuff to anyone who cares to take it. Including multi-national conglomerates.
Data Becomes Cash Crop for Big Agriculture
I have updated the article to mention it:

> DKIM is useful, but limited. All it does is verify that an email which claims to be from paypal.com is really from paypal.com. What it lacks is the ability to show warnings such as "this email wasn't signed, do you want to trust it?" and "this signature isn't recognized, yikes!"

Perhaps such warnings could be accomplished with DKIM somehow (I'd have to study it to see), and if it can: great! But in its current state it's doing something different than what I'm proposing (which is why I omitted it originally).
That's just awful practice! It's got a name, use it!

(Yes, that sorta stuff annoys me ;) e.g. people talking about v2.04 of $project, when they really mean v0.204 - sure, I get it, but at some point the searchability for issues on the internet is going to be screwed!)
200 or 20 000 hour doesn't matter because the pilot called back the airport that he has issues taking off. This indicate a problem with plane, anything that happened after might a pilot mistake but 100% you have confirmed plane issue.
You should only have to give them the ipfs hash that you get when initializing your repo.

There is no notion of access restriction for now at least as this is something missing from ipfs itself, check out radicle’s faq.
On-demand Xeon with GPU in the cloud is quite different from local ESP32.
Good grief, when was the last time Airbus grounded anything?
>did the FAA tell the pilot to turn off the anti-stall system in the Lion Air plane? Because that’s what happened, a pilot turned off that system due to the unrepaired airspeed indicator

Do you have a source for this? This sounds anachronistic, or you've got parts confused with some other flight. If by anti-stall you mean MCAS, if it was disabled then what caused the erratic pitching, unstable vertical speed, and the eventual nose down and dive? MCAS is already implicated in that flight the question is whether it was disabled at all prior to the accident, which would have been the normal procedure. Yet you're suggesting that disabling it was wrong, on what basis?

Also MCAS takes angle of attack, altitude and flap setting as inputs. It doesn't take airspeed as an input. Further there are three separate airspeed sensors, each with their own airspeed indicators, as separate systems. A inoperable indicator is a deviation that will be evaluated by accident investigators, and it might be a cause for confusion and delay in making decisions if the pilots didn't know about the problem in advance. But if they knew about it advance as you're suggesting, they'd just placard the bad one, make a log entry and fly on.

There's no evidence flight experience is related to the crash. It's really common in most of the rest of the world, including Europe, and used to be common in the U.S., to pair very experienced pilots with less experienced pilots - which happens to have been the case with Ethiopian Airlines flight.

The whole bush plane, third world, and "apparently in Ethiopia" commentary sounds ignorant bordering on racist to me.
I’d like to be able to limit certain privately imported root certificates to specific domains — that would be a valuable feature in a browser to protect against corporate hijacking.

However for the average person what you propose is meaningless.
Good to know is that Send is not a silo: you can use it with any browser.
I disagree strongly. It looks obvious to me that they can be equal and that this is a special case. The comparison is done only after checking for A<B, and only if a boolean called "ActiveIfEqual" is true. I mean, I don't know how much more obvious they could have made it.
Maybe, but then again they get the same message every day at work when accessing their business application with outdated certificate or whatever and have been used to just bypass it ...
Email is working for me, but attachments are failing. Opening up the console and it has a message about a database connection loss.
Should there be a 2014 tag?

Pretty cool article though!
The customer support has sucked most of the times that I have been in contact with them.

The C14 cold storage product seems to have a ton of bugs in it, like how you'll open up an archive and you can't connect to it for an hour.

I already moved my small servers to Digital Ocean and I'm thinking of replacing C14 with Glacier.
Ask HN: How do you know what your users want?
PG says that understanding users is the most important thing for a startup, but exactly how do you know what they want?

What methods do you use? How do you differentiate signal from noise?
This post shows some false-positives and present them as bugs. It is mildly disingenuous for the casual observer.
I think what dnos means by vote buying, is not that somebody bribes the people who count the votes, but that somebody bribes the voters. If a politician now approaches me and promises me to pay me if I vote for him, he can't really be sure I actually did vote for him. Nobody but me knows what happens in the voting booth. He could ask me to take a picture, but I could still change my vote after the picture was taken.
Air [Fr,Ch]ance?
Bottega, a Blog/Portfolio Premium WordPress Theme, Is Released
Once kicked out (due to certificate transparency or due to finding out ala diginotar) the next browser update will remove them, and the CT people won’t deal with them.

Doesn't Chrome now require CT?

Not great, but doesn’t rely on crls or other broken systems.

> It's generally hard to MITM an entire nation's traffic, for reasons of computational overhead

Isn't that what Iran did with DigiNotar?
Once (or rather, if) PGP gains some traction this problem will disappear; email clients will improve the UX to show a specialised "PGP signed" box and hide the attachment.
> I don't know the reason behind your various broken pages. It could be something is wrong with FF. But it could also be that something is _right_ with FF. If you don't know which, why are you complaining about FF?

I'm not complaining about FF. I'm complaining about my experience using FF. I'm not attributing blame, only stating facts.

Even if it's something wrong with the websites as you say, what matters to me is whether I can use them or not.

And by the way, quietly blocking the page without any sort of a message or warning to the user would be more evidence of bad UX in my book. I shouldn't have to go the console to find out how the browser decided to protect me, if that's the case.
It's ridiculous to think that just because they've trained their own pilots for this, and that the issue can happen in foreign territories, they can wash their hands off of this
This is complete speculation:
If you're coming from outside the solar system and want to end up orbiting earth, you probably need to change your delta-v significantly.

Perhaps passing by the gas/ice giants isn't that bad a way of doing that?
also known as "curse of knowledge". See https://en.wikipedia.org/wiki/Curse_of_knowledge
I'll just leave this here:

https://seminyaktimes.com/woman-allegedly-invited-into-lion-...

http://www.aviationnews-online.com/airline/lion-air-pilots-s...
Makes you wonder about kids always coming first in highschool. Makes you question the whole world!
This is a great initiative! Thank you Lambda School. Will be following your progress closely.
Amazon talking about open source is funny. Don't let them divide the community they never contribute to.

Talking is easy Amazon.
'But the FAA said that other civil aviation authorities had not "provided data to us that would warrant action".'

Pretty sure the data is that two planes crashed in five months in perfect weather conditions, killing everyone on board. Statistically, that's sufficiently improbable that it warrants investigation.
I don't think there are many clients which support PGP out-of-the-box. The state of S/MIME is better though; I believe many desktop email clients already support it by default.

Still, more work needs to be done. It's a bit of a catch-22: no one is signing their emails because client support isn't that good, and client support isn't improving because no one is signing emails.
Docker is amazingly easy, and it’s more like coding than system maintenance. No installing Linux, just import it! But I have to ask if you don’t use Kube what are you using to orchestrate the containers?
I mean sure when your job as a grad will be to be a rent seeker/pseudo gangster.
Dow is a horrible index. It's price-weighted, i.e. higher priced stock has a greater influence than lower priced stock on the index. Apple at $180/share has 2+ times less influence than Boeing at $375/share on the index, and yet Apple's market cap is $850B, 4 times of Boeing's $212B market cap.

The Dow index is pure BS.
https://eu.usatoday.com/story/news/politics/onpolitics/2016/...
That's why I stopped signing my e-mails. Too many people got confused about these strange attachements that they couldn't open in Word.
> for probably >6 months

The first real issues for XMPP came up about a decade after it was formalized. Matrix is too young to demonstrate how it will cope with unforeseen issues. E2E working? Mobile support? No surprise, both were must-have features when matrix started.

I have no idea what Matrix will be struggling with in a couple years, but that's exactly the point: nobody does.

Surely there will be a new client then whose developers, users and evangelists will point out how it's so much more seamless than Matrix, and don't we just let Matrix die and go for that newfangled thingy, but I'm not really eager to change my mode of communication every 10 years just because it's driven by the CADT model (https://www.jwz.org/doc/cadt.html)
Docker is just setting a few kernel parameters, VMs run a full OS over the host, there's a cost to that. If you don't need the extra flexibility, there's no point.

Mind that you don't need to use Docker to use containers, there's always LXD and others.
Most would even say statistically significant enough to order the planes grounded in their own countries...
I think the big issue is that not every email client reacts harshly enough to emails with either no DKIM header or mismatching DKIM signature. Today it's basically just one of several factors for marking a email as spam, when in reality it should show a big-ass red warning.
Not a questionable safety record. Can we please stop assuming that African countries and airlines are all the same?

https://thepointsguy.com/news/despite-recent-crash-ethiopian...
Very interesting. I cannot recall having sedation outside of dental practices, but I have had several colonoscopies which involved counting down from 10, getting to about 8 and waking up hours later in recovery.

Interesting to see I'm sort of an outlier.
There doesn't seem to be an obvious way to remove content (like issues, merge requests or comments) easily from a project or ban contributors from participating, ie, ripe for abuse by 4chan or whoever wants to set the internet on fire today.
It wasn't spam; that was the point :-)

I will adjust the name momentarily. Thanks for pointing it out.
> Amazon can believe whatever they want, but when they say "maintainers of an open source project have a responsibility to ensure ... " - I call bullshit.

It is true that Amazon here is just stating their own interest and are not well placed to give lessons of open source implication. Elastic has paid many developers to build open source code.

However, Shay Bannon on his side, is too much using the word "open" for a company that is not running and from my POV cannot run a real open governance. Elastic is now a listed company and was VC backed. Presenting the integration of xpack in the core repositories as an "opening" when it's a move backwards in terms of open source governance, is not fully honest.

There is a fundamental issue with Open Source and Investor backed companies. The main goal is not open governance, but the main goal is the company.

Elastic is not clear about this. Actually not being clear means there is no open governance.

Shay Bannon won't go there, because I believe as the CEO of a listed company he can't, unless it's in the interest of Elastic's investors, which means the board should decide.

Elastic does not have to have open governance and can be a great OSS contributor nevertheless. And to the opposite, it is very possible that without very healthy Elastic.co, that there would be less OSS code.

However it raises questions about the future. What will be the next step ?

What I would prefer is to have Shay Bannon be fully honest about the fact that Elastic.co needs to be healthy for the project to be healthy unless other companies are heavily investing in the community and start contributing code. And that Elastic.co being healthy means to have a mixed model. And finally I would like to hear that Elastic.co cannot promise that this won't change because Elastic.co might have to change it if the investors decide it but that as long as he is CEO he will do his best to maintain the current mixed model as long as it is financially successful.

It would be more honest that saying "doubling down on open" when you are tainting open repositories with non open source code. There was no technical reasons that the xpack repositories could not be separate.

Also, there is a way to not give an advantage to any company in an open governance way while helping companies be healthy. You can decide to have an App store in which paying features are proposed only from core contributors that contribute more than a certain level. Business could be added to the goals of the open community.
It is a surprise, since he was already a FreeBSD user, that he did not use its facilities like for example jails + perhaps a program to manage them or bhyve for VMs.
nobody who goes through the process believes it to be a true meritocracy

colleges make it very clear that there are certain factors that weigh heavily. one of the legal factors is race. one of the unspoken factors is having donor parents/alum. now we know that another factor is direct bribes to admissions staff, which one could have guessed was happening under the table already

everyone who applies wants to be in that club with, not the smartest or most “meritful”, but the most powerful families/children (sometimes the same, often not) - and why isn’t family money considered a merit?

many of these colleges are businesses/hedge funds and they are looking to increase their AUM and ROI. I agree that advertising this core business as a meritocracy seeking to educate the brightest is false advertising
I'd never thought about it before but you're absolutely right
It’s also worth noting that the MAX should benefit from 5 decades of accumulated experience and regulation. So you’d expect far lower incidents.

The problem might not be with the plane per se but rather with Boeing rushing a bit and relying on the fact that “it basically the same plane but better so why would there be issues”.
I am still convinced there is a problem with the plane based on simple probabilities. These are brand new planes so they shouldn’t be in a phase where failures multiply, and maintenance should be irrelevant unless these planes were delivered faulty. It’s a very small fleet compared to other models. Two extremely rare crashes (plane crashes are rare in general) within months of each others, with the same model, same phase of the flight, what is the probability that it is not related to the plane? It has to be statistically insignificant.

Now it may be a lack of pilot training, but by Boeing’s own account a B737 pilot should be qualified to pilot a Max. Then how come a small, insignificant feature can result in the crash of the plane? It would have to be not insignificant at all.
Is this Yogi Berra or was he mis-attributed?
Your comment is a very nice example of whataboutism. Let's remain on topic about two crashes, with very similar characteristic, with two brand new aircraft of the same model. This is unheard of in this day and age of stellar aircraft safety. If that's not reason for concern, I don't know what is. Another commenter has said to err on the side of caution, that's something the US / FAA should do in this case, but somehow is not. You can give all the reasons you want, but the facts take precedent: ~350 people killed in the same model aircraft and in a similar way, the FAA should act.
Nibbles.bas! You’ve just unlocked a forgotten memory for me. Wow! Great game that was. Takes me back to the Gem operating system days!
subtlecrypto has API to generate a keypair that you can't extract and access from the JS side. You can only use it to encrypt/decrypt buffers, but not access the key itself.
I used to work for a big tech company and the vast majority of people there signed all email by default and encrypted them when the content was sensitive. Part of onboarding was a training session on how all this works.

Now I work for a non-tech startup and there are exactly two of us who sign our email. Happens to be another engineer I need to occasionally exchange encrypted messages with.

As a positive, at least no one seems confused by my signed messages.
> it's probably better to phrase a change to the root store policies that say "We won't accept CAs we just don't trust" instead of waiting for them to misbehave and then rescinding their membership

Unless you can define the policies up front that's a very risky road to go down. Why refuse to trust DarkMatter, but not refuse to trust China Bank?
And A330s weren't grounded. Had there been a second crash for the same reason though....
Considering the direction Microsoft has taken, I think they in particular would agree. It is no coincidence that MS is more and more straight up giving away their software, or at least bundling it as a service.
> Would probably have avoided Podesta and the entire Democratic Party a lot of trouble

Unconvinced. The Podesta phishing email has:

> From: Google <no-reply@accounts.googlemail.com>
> Date: March 19, 2016 at 4:34:30 AM EDT
> To: john.podesta@gmail.com
> Subject: Sоmeоne has your passwоrd

From a Google domain, to a Google domain. Google uses DKIM, so the sender, message-id, etc, WAS ALREADY SIGNED, and apparently got through anyway.

Which part of this would further signing have helped?
One reason is that SPF already accomplishes good enough sender identification without any hassle on the user side.

When you get an email from joe@example.com and example.com is trustworthy and uses SPF, then you know that the sender in fact was joe@example.com

It's easy enough to set up SPF for any domain.

Gmail, Yahoo, Outlook etc all use it.
Should be solvable using techniques from https://notabug.io/
I'd urge you to find something to tinker with. I've lost that magic a few times in my career but this last year I've started tinkering with machine learning, a side web app for finding lost pets and in the last week the ESP8266 chip for a few home experiments.

Here's why. The apps are a nice distraction. You can forget about the work stresses and just play a bit. You loved this stuff for a reason, I think you can get that back. You also have more control in your own projects. No committee.

46 this month. Not super old but old enough to know what jaded feels like!
No, I am comparing cheaper types of plugs with the more expensive ones, with similar levels of attenuation. You are thinking of a quite subtle effect which can lead you to think louder sounds are better, when they are actually the same apart from the volume. The difference between the sound of different types of earplugs is _massive_. There is no mistaking the difference.
A non-profit has to show their outflows but it is quite common to have a non-profit where 100% of the money is doled out as taxable income to the board members.
>The very much social world of instant messenger and plain old web pages pre like-ified and follow-ified social media seems like a quaint anachronism, now.

It is a lost concept nowadays, but it's very possible a subsequent development to be a regression compared to what was before.

Sometimes in every way, sometimes in a few important ways.
Tons of research!

Many many interviews with target users and/or surveys before building MVPs.

After that, user tests to get feedback on the MVP.

It takes a lot of effort to find the right people but it's well worth it!
active customer for like 2 years, no issues with my 3 euro/mo instances
Well, the CA system for HTTPS is a false sense of Identity protection. Is great for encryption.

0: https://stripe.ian.sh/
Aiko Meet video chat adds subtitle/transcript support for 60 languages
>>And you had no clue.

Anybody who does these kind of things does it because of positive feed back loops training over years. So they have a fair bit of clue. It's just the incentive ladder works that way.

Corruption exists because people want to be corrupt.
The simplest way to get JS function location from reference at runtime
There's more than just companies or people working in their free time. This might not be very popular for the libertarian fringe, but state support is an option that's probably better than other models. And we already got that to a large degree, with plenty of software coming from universities or state-funded research projects.

Granted, that might not be the next Javascript framework one needs to fill developer ennui.
Jails are just the runtime mechanism, equivalent to cgroups/namespaces/etc in Linux. What Docker provides is the tooling for repeatable container setups, so you can have a single configuration file that you can deploy locally for testing and then on the server.

What would you use for doing the same with jails?