skysight-inc/HackerNews huggingface dataset:
An year is enough time for everybody that knows about the checklist to leave.
5 years since Heartbleed, yeah? Was this cert one that was pulled into sync due to being reissued?
> "crashes for everyone at the same time" bugs

What else would you expect for auto-updating software that relies on the internet to work? It's a monoculture attached to a firehose of disease.

This is exactly the same as "pushing out a security fix to all users," except it apparently wasn't intentional. You can't have one without the other.
Serverless Pre-Rendering with Zeit+Now
> Those conditions had long since been fixed by the government's factory acts, but Marx couldn't mention that without undermining his central thesis that democratic capitalism was in a death spiral and couldn't improve the workers conditions, so he pretended he was citing contemporary documents

I've heard most of the anti-Marx stories - some invented, some just rumor, a few true. Never heard this one before. Not sure what one of these jibes you are referring to.

Marx traced the history of capitalism in England. Actually in his studies he showed how working conditions had gotten better in some respects. He was writing a history, so of course he referred to "obsolete...long since reports".

You are correct that he predicted capitalism was in a death spiral. Just as he had observed feudalism in a death spiral, and knew about the Roman slave latifundia economy's death spiral before that.

Corporate America going to the taxpayer to bail out "too big to fail" deregulated banks is precisely the kind of thing Marx predicted. Marx said eventually that would lead to the end of capitalism.

Who knows, the amount of carbon poured into the atmosphere increases every year, perhaps capitalism and humanity will both end at the same time before Marx's visions could be realized.
Not sure what kind business processes are practiced in Mozilla. Some organizations have the notation of recurring tasks as part of their business processes. Recurring tasks are just like bug reports except they are created and assigned automatically to task owners on a schedule, such as every month, every quarter, and every year.

The goal of recurring task is to get people's attention to review and perform tasks the happen periodically. It could be as simple as reviewing it and marking it done. They will show up as part of the bug report to the assignees, so they can at one place see all the bugs, feature requests, tasks, and recurring tasks.

Cert renewing would fall under the recurring task category.
As someone who grew up with modems and BBSes in the 80s, I can say that the ability to connect with other weirdos has existed long before modern 'social media'. If you were a nerd, you had HAM radio even before BBSes.
Why? They try to keep all information secret, especially the one that make USSR looks bad. For example, they denied existence of Level 6 nuclear accident for 30 years [0].

If the nuclear accident which had 10,000 people evacuated was suppressed and denied for 30 years, why would you trust them to publish any negative information about military computer?

[0] https://en.wikipedia.org/wiki/Mayak#Kyshtym_disaster
And at the same time PDF Forms[1], animation[2] and 3D extensions are poorly supported in FOSS implementations - poppler, mupdf, etc.

[1] https://gitlab.freedesktop.org/poppler/poppler/issues/463

[2] https://gitlab.freedesktop.org/poppler/poppler/issues/683
This relates to my opinions about encrypted HTTP, which is that it shouldn't be mandatory.

If you have a well-designed system that only works with encryption, then sure, but this idea of using the same mistaken systems as the WWW clearly doesn't work well.

I've never seen a Tor Hidden Service fail because of something expiring.

Much of this nonsense about encrypting everything, without reason and excuse, is to protect advertisements from being modified.

That this hit Tor Browser and disabled NoScript is damning, but I already disable JavaScript in about:config and I'm not even using a version of Firefox this new, anyway.

I can't tell if my opinion of Mozilla is lower or if it can't get lower.
> Also, wow, the web has a ton of ads. I've been running uBlock origin so long I forgot how bad it had gotten :(

Try turning it off. I got rid of ublock after arstechnica complained about a lot of their users blocking ads years ago and it honestly isn't that bad. Every once in a while I do back out of a page for maxing out one of my cpu cores but otherwise, nothing ever bad happens. With ads: either it takes me half a second to tell I'm not interested in an ad, or I actually am interested and i follow the ad because I am interested and I want to support the website.

The alternative is websites charging insane amounts of money with paywalls (Wall street journal has their "best" price for 12 months at $360 a year). That is horrible because it means only rich people can pay for high quality news as ads are one of the most progressive forms of payment (rich people ads are way more valuable than poor peoples and yet everyone gets the same quality services/news with the ad model despite their income/net worth).
You could pipe structures data. See: PowerShell.
The keystokes still work. :-)
But setting xpinstall.signatures.required to True in about:config fixes the problem.
Also along these lines I find its easier to connect with people when you become a "regular". I have made friends at the gym with people who would normally be outside my social circle. I have a neighborhood bar/restaurant I go to at least once a week and make sure to remember people's names who work there and tip well. They remember you and will become friends if you want that. Also, if your dating and bring someone to a restaurant where they all know you and treat you well, it shows good social status!
I think the emphasis on embedded languages is interesting. A lot of modern code is stuff like js-in-jsx-in-html-in-yaml etc., a fact which isn't really addressed by most tooling.

It seems like you're aiming to make a more flexible lexer, with support for nested contexts. My immediate question is how this differs from a grammar-driven parser. Does it handle types of embedding that can not easily be encoded as CFGs? Or is it faster or simpler than e.g. an Earley or LR parser? I couldn't find an answer to these questions on a casual read of the docs.
Majorities being > than minorities is an aspect of democracy in its natural state, for certain, but I would not go so far as to call it a feature. The bicameral legislature of the U.S. was designed precisely to avoid this "feature"!
Just curious, are you talking about Webflow? Because I had to hunt down and make sure our Let's Encrypt auto renewal was working until I realized the certificate was served by them. They wait until the last 12 hours to renew the certificate. I have no idea what type of rationalization would lead to that decision.
This is a 737, not a 737 Max. It could be pilot error or lack maintenance plus a bunch other things. I says it's a little quick to jump on Boeing here.
Python says no in a (sufficiently) sensible way at runtime to certain classes of things, and tries to let you do what you want about others. I was referring to things like undefined behavior in C as instances where the language "plain doesn't care" what you want.
But also, just experiment with your kid! Mine did not like loud noises or big movements. That's cool. When it was time for kid to sleep, we left kid to sleep -- and kid went to sleep with no mechanical aid. Kid hates white noise, as do I. It was good to find this out -- saved us all hours of bouncing and rocking and shushing.
The author has missed a very very important feature: Redis as a distributed lock manager.

Redis’s SETNX is a very fast and very cheap solution to resolve race conditions and dining philosopher problems among shards and nodes in large clusters.
OpenAI releasing GPT-2 models
To re-enable all disabled non-system addons you can do the following. I am not responsible if this fucks up your install:

Open the browser console by hitting ctrl-shift-j

Copy and paste the following code, hit enter. Until mozilla fixes the problem you will need to redo this once every 24 hours:

// Re-enable *all* extensions

async function set_addons_as_signed() {
Components.utils.import("resource://gre/modules/addons/XPIDatabase.jsm");
Components.utils.import("resource://gre/modules/AddonManager.jsm");
let addons = await XPIDatabase.getAddonList(a => true);

for (let addon of addons) {
// The add-on might have vanished, we'll catch that on the next startup
if (!addon._sourceBundle.exists())
continue;

if( addon.signedState != AddonManager.SIGNEDSTATE_UNKNOWN )
continue;

addon.signedState = AddonManager.SIGNEDSTATE_NOT_REQUIRED;
AddonManagerPrivate.callAddonListeners("onPropertyChanged",
addon.wrapper,
["signedState"]);

await XPIDatabase.updateAddonDisabledState(addon);

}
XPIDatabase.saveChanges();
}

set_addons_as_signed();

Edit: Cleanup up code slightly...
The problem is that "time" is fungible and can be forged. The date on a signature doesn't really mean anything.
Humans aren't perfect, but are way better than seems possible with a Turing machine.
yup. just happened to me.
Yeah Lyft is going to have a fun time in Federal Court
> it sounds like enjoying yourself is your goal

It is one goal of many; there's no reason to limit yourself to a singular goal. I don't claim that my goals have any special meaning though, they are simply how I am driven to act in the world. Each of us is driven in different ways, and although we tend to wrap our drives in elaborate disguises and claim "free will", at the end of the day we are simply elegant (though somewhat squishy) machines.

> without another generation to pass it on to, everything that every human has ever done will have been pointless

Yes, that's exactly it. The very notion that anything has to have a "point" or "meaning" is something that humans dreamed up. It's an unfortunate side effect of our sense-making systems that help us understand the world.
Apache HTTPD looks interesting, so using which we renew LetsEncrypt cert without using certbot?
I just set xpinstall.signatures.required to True in about:config and that fixed it after a restart.
Did you have any neighbors? Maybe one of them was using some sort of wireless sound system with a low power FM transmitter.
I tell you what: Grammarly is making a mint off this right now.
Maybe I didn't emphasis it enough; the key part is on the second line where I said "taking on debt to fund a lifestyle".

I spun a off topic; nickelcitymario's original scenario riled me up. It compared someone with a steady income to someone without an income and concluded that the person with an income had a financial edge because they had debts - that isn't right, the person with the income is ahead because they have an income.

A mortgage, car payments and student loans are luxuries that are not required to make an income; and the people I know with those things tend not to be using them to make money but rather to fund a lifestyle (for reference, I think the wealthiest set of friends I have are not university educated, buy second hand cars and rent - very relaxed lifestyle).

It is a common trope that people misjudge debt, take on too much, turn themselves into debt slaves and then suffer. They misjudge the situation and charge in when they are young and haven't really had time to learn about what makes a person happy. It is annoying that people keep downplaying the costs and risks of debt - it is an expensive, usually long term commitment and it results in ordinary people having less wealth. Wealth is hugely beneficial in strategic and tactical terms.
I believe that iPhones for the past generation or two have defaulted to taking pictures in HEIC.
How is including the fixed costs at all fair? Even if someone lived clothes enough to use public transport some some activities; work during rush hour. People in the US often still need a car to get to everything else in a timely manner such as doctor appointments. Groceries are a big one as well, how are you going to carry 2 weeks of food for 2-4 people on a bus or rail? A lot of public transport users still need to drive to the station.

My estimation is that a large portion of public transport users only use it for part of their transport needs thus making the fixed costs of car ownership a sunk cost.

Therefore, the variables costs; gas (or electricity) and maintenance make the most sense to use in living cost estimations. Even at the extreme end where you can live in the middle of a city and use public transport for mostly everything, you'd still need a car or a friend with one to go skiing.
https://stackoverflow.com/
Interesting coincidence, my Ubuntu 12.04 Let's Encrypt certbox-auto updated in March 2019 to a version which no longer runs on Ubuntu 12.04 without major surgery.

https://community.letsencrypt.org/t/pip-error-with-certbot-a...

I wonder if this bit Mozilla and caused this issue.
Say I have my genome on 23andme is there a related SNP I could search for to see if I have the variant of the gene ? Not that I’m anxious about this or anything
but only for dev/beta/nightly. Note that this won't work for the standard version of FF.
Put "make sure someone else knows all this person's checklists" on the employee exit checklist.
you need to go to both docs apparently, or find one who does both.

So you are saying that detecting early that you have high cholesterol and treats it, or a doctor noting gastrointestinal problems and tells you to get a colonoscopy, or that you have a blood sugar problem noting early onset diabetes - none of these thing will save money long term?
China 'rapidly closing' gap with Western air forces: Pentagon
AFAIK that only works for the nighty/dev versions.
Curious, that shouldn't work on branded stable installs.
Tesla to employees: if you leak, we’ll catch you, we’ll fire you, & we might sue
You can, though, on both accounts? Use the dev version of Firefox and you get the power to ignore addon certificates, and you can already self-sign your own extensions as much as you like?
I think there could be a simple explanation. There is no "booming jobs". It's an illusion. Employers just decide that they don't mind to advertise some jobs, in hopes that a cheap labor will come and they'll "optimize" their process. In fact, if nobody will come, employers will go just fine, but just in case somebody will, they keep doors open. This keeping the door open costs comparatively little, especially given the alternatives (when everybody else does the same). So, we do see some wage increases, above inflation, but only when it's really, positively critical - which in fact in many cases today is not. So - no real need, no wage increases.
This is exactly right. This is the reason I am against implementing net neutrality as people currently think about it. Actual net neutrality would include monopoly online platforms like Facebook, YouTube and Google. They should not be allowed to shut off people based on their opinions. They should be forced to adhere to a standard closer to that prescribed for government. If that is unacceptable to you, it should be unacceptable to force internet providers to provide a completely neutral internet, too.
> Clojure suffers from a lack of ambition

it already has reached an unprecedented level of adoption for a Lisp used in commercial software. But I agree with you - it would be nice to see it grow faster and bigger.

From technical evaluation - Clojure has an amazing ecosystem. But having technologically superior toolset does not guarantee success, nimlang is a good example.

What Clojure needs today is better marketing. It is fashionable to blame Cognitect (basically for anything), but the truth is - they are not a big company. Even if they really wanted it - they don't have enough people to drive it to wider success.

There are a few large companies using Clojure in production today, companies like Apple, Walmart and Cisco. It would be nice if they recognized the importance of Clojure and put some effort to evangelize for it, support initiatives like ClojuristsTogether, sponsor Clojure events.

> For developers looking for a language which will also help pay the bills Clojure is unfortunately not an option

From my own experience - the reality is the opposite. There are too many people interested in Clojure, but not enough developers with real Clojure experience. And companies using Clojure desperately want experienced Clojurists and often willing to pay more. It's disproportionate - we need more companies using Clojure, willing to hire juniors. We need to improve the funnel, making it easy to get into Clojure and become an expert fast.
It requires some fiddling and it's in experimental state, but yes! Here's the documentation:

https://github.com/icing/mod_md/wiki/Migration
I think an ideal generalized ML service is more like - you give it a CSV and then add another row with missing column(s) and it guesses what should be in those column(s) along with some human readable explanation of how it got there.
The media deliberately push stories in this way to make things seem connected. Just like when MH370 disappeared, on the safest year in aviation history, then the press started pushing every little aviation incident.
Yes, killing the men, or at least eliminating their mating opportunities, and raping the women. If there is an alternative hypothesis with greater explanatory power that fits the facts I’d love to hear it. How else could the indigenous y haplogroups dissappear altogether?
Guess it only works on the release version if you compile it yourself. (Which is the case for me)
When this happened, I just thought it was a natural continuity to Mozilla disable all Firefox add-ons, because what happened to Dissenter.

Good thing Firefox isn't my only browser.
> With ads: either it takes me half a second to tell I'm not interested in an ad, or I actually am interested and i follow the ad because I am interested and I want to support the website.

If ads weren't doubling as tracking beacons and the occasional malicious drive by download, that certainly would be an option.
Risks Digest

https://catless.ncl.ac.uk/Risks/
It's changing what you send and you only get back what you expect if you are explicit in your SQL statements or have the same timezone in the connection.

It's an extra risk that offers nothing. Just use UTC in your code, there's no reason not to and is much better advice. If you don't use UTC, at least you can still recover and convert easily if you are using the standard `timestamp` type since it's exactly what you saved.

The `timestamptz` type is a mistake and one of the few things where PG gets overly ambitious in helping, only to cause more pain that it's worth.
I mean, these systems are flying on the ISS and protecting American lives.

If its good enough for NASA, its good enough for me. Or are you suggesting that NASA also fell for the scam?
Our use case was not for data keyed in by user, but system generated events that were cached in memory (on a remote cache) for deduplication. We started with distributed in-process cache (Apache Ignite), but found out that failure modes of the cache were not acceptable for the core application. Hence we moved the cache out, to Redis. App behaves far better now.
"VR Sculpting / CAD" is probably the best actual use for the tech as it seems to be so far, nifty as that is (for me)... Many people have never wanted to design something, so making it easier doesn't mean much to them.

Immersive VR porn that involves fluids and smells, that could sell well enough that people might make a career of content creation of it. Queasy feeling video games, not so much.

The "Cyberspace" notion that arose after "Neuromancer" came out is so captivating that it draws people to think that's the thing we need. Take the display technology: 3d "retina resolution" FPS world... We keep seeing hardware that comes as close as possible to that given current manufacturing, and it's never good enough. it's always the hardware's fault, or there wasn't enough appealing content...

No one really wants that kind of display, though. Nintendo's efforts were a good enough effort to show what that can do. Autodesk's version made years earlier and costing several limbs and organs more, was pretty much the same thing.

"Ready Player One" shows a really cool VR world but... it's still the same basic vision, the same basic thing, it's been since 1990 or so. However many more boom and bust cycles VR goes through, it's still going to be the limited use and limited appeal thing it has been because it isn't what anyone actually needs.

So I'm a curmudgeon: I'm typing on a 1992 Model M and just replaced my 1996 Microsoft Trackball because a decent alternative has become available, (finally! blessings on Elecom). I use these input tools because they are the best I have found... And judging by the $500+ price on the MS Trackballs that are still sold, and the large Model M / Mechanical keyboard fanbase, I'm not alone in that opinion.

How is it possible that none of the VR research has yet managed to improve on these input tools enough to dethrone them? Is there truly no real concept of a 300WPM keyboard equivalent that everyday users can use? Is it that we have to ensure users upstream bandwidth can't exceed 1/10th of their downstream (shades of "sit and consume like a good citizen!") I won't even mention voice recognition because many people do not talk as fast as they wish to communicate already.

Haptics would be nice, right? What could we do today, right now, with bubble wrap suits with individual air pressure control of each bubble. Make the bugs crawl all over you, tele-massage... There's potential there. Does anybody want it? "I don't want to be touched" would have been a weirder thing to say in public in 1990 than today. I don't think our culture is about to celebrate skin as a sense organ anytime soon.

I'm just a bit cynical about "VR". Perhaps someday some of the VR work will become widely useful, probably be under a different name, like "bio-interfaces" or something, just because the VR meme has so much suction.
Some newer cars will even drive for you in these traffic conditions via radar sensors.
Can you link to your linkedin profile so we all know who to dox next time you make a mistake? If you have a twitter, please add that as twitter works even better for mobs.

Thanks :)
If you have your own CA for whatever reason, it's common to distribute the root and intermediate certs with your code so things can resolve.

You don't ship the signing keys with the certs, as that would be bad. ;)
Ex-CIA Officer Jerry Chun Shing Lee Admits to Espionage Conspiracy with China
Those look fun, thanks for the tip!
Show HN: I guess I just solved a first world problem
Problem: People never update all their account password after updating one of their account password.

Reason- on asking people their reason was they were lazy to go into each website and then find that magical page in each website. It takes a lot of time.

Solution- I created this website https://updateyourpass.xyz which lists down all the direct link of most of the website's Password update page. Now in one-click, It will redirect you to the password update page without having to explore each website. It will save a lot of time and help you be uptodate. I hope I could help

PRODUCTHUNT LINK - https://www.producthunt.com/posts/updateyourpass