skysight-inc/HackerNews huggingface dataset:
Whether or not Merck "did some fraudulent science," I'd need a better source than RFKJr to believe it. Preferably a scientific source.
Here's some scientific sources on Gardasil, mostly after its introduction to the US market:
https://scholar.google.com/scholar?q=safety+efficacy+quadriv...
I didn't think SSL-strip could work as described (unless you trusted the cert chain), so I did a little reading.

It seems like it works by intercepting traffic and downgrading the attacked machine's connections to http. So, your text is correct; it is terminating the https connection "the other way 'round" from the way I first read your text. It's https from the MITM machine to the "real" server, but http from the browser to the MITM machine, rather than the MITM machine being able to terminate the https session from the browser (without a cert error).

Sharing in case that helps someone else not have to google for "hey, I don't think that will work the way it's described".
I'm surprised no one has mentioned the main practical benefit of EV certs: the fact that a green cert in the browser ensures that there is no man-in-the-middle network proxy/appliance intercepting the traffic even if a trusted certificate for the proxy/appliance (or bad guy) has been placed in your machine's cert store. Browsers will only honor the EV setting in the cert if it was signed by a hardwired (and much shorter) list of CAs.

As long as you, the user, trust that the browser itself hasn't been modified (for example if you downloaded it yourself), then it's a nice reassurance when using a browser in a not totally trusted environment.
If you are worried about wealth concentration, there is nothing that concentrates more of it than government.
I've tried many things, to-do lists, timers, etc.

The only thing that has ever worked for me is Qbserve because it tracks everything in the background for me and lets me know if I've been off task too much. It is relentless in its tracking which is exactly what I needed.
Usually in front of the judge in small claims nobody is allowed a lawyer. You could argue that you now need unlimited credit monitoring on all credit reporting agencies. The most likely outcome is that they would agree to this. Honestly, I think Congress should just mandate that they be required to have free monitoring, free locks, free reports... basically any personal inquiry should be free.
The Python docs opened the door to programming as a career for me in my late 20s. I/O, concurrency, polymorphism, it's all there. Thanks Python.
> One side argued that Assange was hiding from a rape charge and the other arguing that the rape charge was a cover for a secret extradition agreement between Sweden and the US.

One side was arguing he was hiding from a rape charge, the other side argued he was hiding from a possible extradition order. Both of those have to do with Assange's likely motivation and are to some degree independent of the facts on the ground - as you point out, the facts of one argument are so far unprovable.

The hiding-from-rape argument has been pretty much debunked by the 7 year timeframe. I don't know what Assange was up for in Sweden, but it beggars belief that he would get more than 7 years jail for a non-violent crime. A fine and community service, maybe. Most aspects of the case must be almost evidence-free and would be a struggle to prove if he says 'didn't happen that way'.

Whatever the truth, he was clearly hiding from a greater threat than the charges the Swedes were bringing against him.
It really is. Hoarding knowledge is harmful to humanity as a whole. Period.
Is this exclusive content of the economist or is there a non-paywalled mirror?
> We currently live in a world where unethical (and often illegal) activities continue, secretly and silently,

Cought, ahem, but also overtly - Venezuela, Iran. Sure, not ideal world citizens, but at least Venezuela still has an independent privately owned press, though funded by some pretty unpleasant rich folks.

Iran - not a big fan but I kinda think I'd rather live there (at a push) than Saudi or most of the other UAE, Oman etc type regimes who are US client states for civilian oppression.
> seem to show that state healthcare is a miserable failure and those who are able to get access to private healthcare will always prefer it.

The reason why the healthcare system in the UK is failing, is because of a multi-fold problem that is too numerous to describe here, but boils down to political sabotage. Two other main reasons come to my mind:

One, privatization and outsourcing has caused mismanagement that expanded healthcare delays to an untenable point. Two, to 'repair' the 'failing' NHS, a 'target' system was set up. Hospitals that fail to meet targets have money taken from them, which causes a vicious circle whereby underperforming hospitals do not have the resources to perform better.

See: https://www.independent.co.uk/life-style/health-and-families... and https://www.bmj.com/content/346/bmj.f1848.full

Also, as I understand it, the privatization of the USSR's state healthcare system made things _worse_.

The OECD reported[28] that unfortunately, none of this has worked out as planned and the
reforms have in many respects made the system worse. The population’s health has
deteriorated on virtually every measure. Though this is by no means all due to the
changes in health care structures, the reforms have proven to be woefully inadequate at
meeting the needs of the nation. Private health care delivery has not managed to make
many inroads and public provision of health care still predominates.

(https://en.wikipedia.org/wiki/Healthcare_in_Russia#Reform_in...)
From the Drive link.

>(At the time of this writing the rocket and payload had not been recovered.)

Normally to claim these sorts of records recovery of the vehicle is required. USC RPL's Traveler III was "thought" to have reached space but they didn't turn the avionics on beforehand and therefore didn't verify or recover.
Vendors often backport CVEs without changing version numbers.
>I figure the Constitution ought to apply to anyone within it's jurisdiction, which to my mind means that if you are subject to our jursdiction for criminal purposes, you're subject to our constitution for it's protections as well.

I fully agree, hopefully the SCOTUS will confirm this in a ruling at some point.

Additionally the Declaration of Independence included this statement:

"That to secure these rights, Governments are instituted among Men, deriving their just powers from the consent of the governed"

I think the consent to be governed should be established whether implied or expressed in a way more specific that just being a person somewhere on earth.
Maybe a cross-browsing bug?̊̈
I’ve never seen a browser that doesn’t scroll horizontally in mobile.
In particular, I’ve used HN with iOS 12.2 Webkit and Android Google Chrome Evergreen and Chromium based browsers...
Maybe a bug in Android Firefox?̊̈ (Or the browser you’re using?̊̈)
This is a hopelessly naive view of the outcome of truly anonymous, untraceable, unaccountable communication.

We should all realize that there are much worse outcomes than the current society we live in, and lots of them increase dramatically in likelihood when you remove the ability of society to protect itself from people who intend to create catastrophe. Truly anonymous communication is a catastrophe-enabler.
https://www.npmjs.com/browse/depended/is-number
Huh.. that sounds illegal.
We are perhaps being too cynical, it isn't quite that straight forward. I hear you also need to wear the right tie and buy the correct pair of expensive shoes.
That's why I reckon suppliers of biometric hardware and software are likely to be some of the most valuable intelligence targets in the world. Every time I see another country with a 3M scanner etc I wonder...
who does Mike report to?
It's a work of RAM-constrained and time-constrained people in early 1990s, following approaches developed on 1970s for Lisp.

Packing as much as possible into a single cons cell, or a JS value, was (and is) important, so bit masking to distinguish between integers, floats, strings, functions, objects, was an inevitable approach.
What does it even mean to “search directly for intelligence”? Intelligence isn’t visible stuff. You can see things that are done or made through intelligent action, and in this context that would constitute technology.
reminds me of beartooth

https://beartooth.com
ويكيبيديا“ تصدم المغربية ”دنيا بطمة“ وتصنفها كـ“عاهرة“.. وهكذا علقت
I wonder if any external foreign forces played a role in that Ecuadorian election...
Find it in a library, read some pages. Repeat for Gödel, Escher, Bach.
One big reason is battery life. I don't want my mobile device to have to rely on the reliability of another party to transmit. If the other party can't receive at the moment, my phone has to do a lot of work to figure that out and periodically retry sending in a graceful fashion. With a server I am guaranteed that as long as my phone has connectivity, my message will eventually be received, and it only takes as much energy as it takes for me to send it to the server.
Evidently your understanding of "recreating/restoring an original" encompasses brand new creative works. That is not what is at issue here: Notre Dame is an original, irreplaceable structure.
My goal was to reply to the comment of OP. You're right though
Technically, it's an undefined behaviour. Compilers do what they want in this situation.
It wasn't any better before.
I think Hacker News should start displaying "(duh)" at the end of headlines about things that should have been obvious, or which could safely be presumed in lieu of evidence to the contrary.
You talked yourself out of trying.

Is it different if you send your comments to /dev/null or if they do? I think it is. In one scenario you at least gave it a try.
> How have we come to a point where we are arguing that a DEA schedule 1 drug (i.e., no accepted medical use) may be among the most promising lead therapies for psychiatric disease and a powerful probe of important brain functions?

I’ll make the observation that if recreational drugs weren’t doing interesting things to the brain, people wouldn’t use them, but psychedelics in particular do near miraculous seeming things with reproducibility that prescription drug companies would kill for in a candidate for a commercial drug.
> Why packaging is considered single use is beyond me.

People used to get ice cream in reusable containers.

It spread tuberculosis and cholera. People died.

https://www.atlasobscura.com/foods/penny-lick-ice-cream
Please, it’s called shitposting.
They mostly do it with emergency funds from friends and family who are not necessarily any better off, selling things off, and putting off essential maintenance. Sometimes they can get by this way for a long time, but it's not sustainable.
That puts societies free riders really into debt
You'd be amazed at how many people "make demands to the creator to implement some feature or fix some bug" already when they're not paying any money.
To Get Boeing 737 Max Flying, Global Consensus Will Be Hard
I did find this interesting article [1] that might fit your description. It gives some history around ice cream poisonings, Victor Vaughan, and the advancement of bacteriology:

For instance, prior to the development of the ice cream cone, street vendors often served their ice cream in reusable glass dishes. Often made of thick glass to create the appearance that they contained more ice cream than they actually did, these “penny licks” were simply wiped out and reused rather than being washed.26 Later in the century the more hygienic “hokey-pokey”—an individual serving of ice cream wrapped in paper—became popular.27 Besides avoiding the unsanitary “penny lick,” the hokey-pokey also discouraged the notorious practice of refreezing unsold melted ice cream and serving it to unsuspecting customers. As melted ice cream provided an ideal environment for the reproduction of bacteria, this noxious product surely caused many food poisoning cases.

[1] https://www.jstor.org/stable/26305867
> it is important he stand trial for breaking the law

What law[s] do you believe he broke? Do you believe he is a US citizen/resident, committed crimes while in a US territory, or otherwise was under US jurisdiction? Please be specific in your legal references. Thank you very much in advance for your detailed legal citations in response.
I had to do something similar for my computer architecture class using the program Logisim (http://www.cburch.com/logisim/)
Why does Congress need to pass a new law to prevent the IRS from breaking a non-compete contract? Does normal contract law not apply?
They're legitimate because your representatives made extradition deals with said countries.
I agree with your premise, but your conclusion overlooks the fact that we are much better at sterilizing things and understanding how diseases work now than we were a century ago.
Honestly I feel like Netflix has given up and just joined the crowd. As they lose non-original content they're slowly morphing into a cable channel like Bravo.

They no longer listen to customer feedback. Their categorization and search get worse by the day. They refuse to add an option to disable the autoplay previews that no one likes.

That'd all be ok, albeit disappointing, if they were still charging $8 a month. But they keep raising prices like Comcast or AT&T each year while the quality declines or stagnates.
Earlier you were flagged, so I could not reply to you directly, but I wanted to share with you an article which explores the first amendment issues and the Assange case which you should read: https://theintercept.com/2019/04/11/the-u-s-governments-indi...

The article explains how there is a very strong press freedom issue at play:

But in 2013, the Obama DOJ concluded that it could not prosecute Assange in connection with the publication of those documents because there was no way to distinguish what WikiLeaks did from what the New York Times, The Guardian, and numerous media outlets around the world routinely do: namely, work with sources to publish classified documents.

I'm sharing the same link a little lower - hope this isn't breaking any HN rules - but wanted to share it with you.
We at Datto [1] are all very proud of our very own Tom Caputi and all the hard work he and the ZFS team have poured into the encryption at rest feature. Well done and thank you for an amazing feature!

Also, we're hiring [2] ;-)

[1] https://www.datto.com/

[2] https://www.datto.com/careers/job-board, esp. https://www.datto.com/careers/job-board/post/1639738
> I'm also not stupid enough to deny that even though my income is higher than national average,I'm most likely getting more in return than I contribute.

But we have also proven that men have a great interest in exaggerating the relative value of the services they render one another. I cannot indeed, see any other limit to these claims than the free acceptance or free refusal of those to whom these services are offered.
This seems to primarily only protect against passive listeners [1]. So, while I guess this could be useful to transparently increase security of unencrypted protocols, it seems like the use cases would be somewhat narrow and that TLS over TCP and QUIC will continue to be much better solutions.

[1]. From Section 8: "... tcpcrypt does not protect against active network attackers unless applications authenticate the session ID. If it can be established that the session IDs computed at each end of the connection match, then tcpcrypt guarantees that no man-in-the-middle attacks occurred ..."
> In particular, tcpcrypt does not protect against active network attackers unless applications authenticate the session ID. If it can be established that the session IDs computed at each end of the connection match, then tcpcrypt guarantees that no man-in-the-middle attacks occurred unless the attacker has broken the underlying cryptographic primitives, e.g., Elliptic Curve Diffie-Hellman (ECDH).

What am I missing here? An active attacker will just terminate the connection on both ends. There will be 2 authenticated session IDs at L3. At L7, how will an application authenticate the L3 ID in such a way as to discover a MITM? Even if it can, there needs to be a new ioctl (or similar) for the application to learn the L3 ID. That's rough for the large legacy of applications that might otherwise benefit from this.

I'm sure I'm missing it, since this has been 10 years in the making, authored by well known folks. The referenced USENIX paper discusses how both ends of the tcpcrypt connection can know there's no MITM. However, in the case of intercept, the other end of the connection is the MITM.

Because tcpcrypt uses ephemeral public keys, there's no L7 identity proof, such as is offered by TLS (as far as it can). This further permits MITM.

An active attacker can also just strip the TCP-ENO bits from the SYN. If [just] one side insists, the attacker can strip it just from the other side, for performance.
A discussion that makes us think about the boundaries of what is or isn’t possible today is indulgence?

You failed spectacularly by your own definition of a good faith discussion by dismissing ops post as “fantasy”. You give no explanation of why it is unachievable today or why it would continue to be impossible in the future.

My previous team had a member who outright dismissed ideas and criticized things for the sake of sounding intelligent without proposing solutions to further the discussion or solve the problem. We let him go.

Good luck.
You can blame these reasonable people. They are blind sheep following a mythical unicorn if they believe this is a reasonable course of action.
In response to a comment about keeping notes, which any reasonable person would interpret as meaning private notes.

What got my goat, though, wasn't the mere, if silly, clarification that notes are only protected if they're private. It's the phrasing of the quote to suggest that somehow these notes should have been considered private because the publisher didn't intend on anyone reading them (despite publishing them such that they could).
I would hope that any security person, even Windows based, understands what a .tar (or .tar.gz) is. If they don't, I'd be very worried for what else they haven't been paying attention to.
I was working on a contract to replace a legacy system for the federal government, and we were doing agile development (or attempting to) and let me tell you the interface between agile teams and feds is painful.

Agile development is about people over process and government is about process over people (for valid reasons!)

We sat through a retro after a sprint with some of the feds and the questions were all about deadlines and dependencies and when such and such would be complete so they started putting everything on the board and made us throw out story points and put dates on everything and we were like, congratulations you just reinvented the Gantt chart.

Like I get it, they have different incentives than most product owners do, but yeah if you think you’re going to reinvent government by bringing silicon valley development practices to Washington, you are going to have a bad time.
I have terabytes of pirated music....that I hardly ever listen to because it's too much work to load up the player and find something to play. I much prefer google play, with their algorithms for finding new music for me, instead of me having to hunt for it. Looking at multi-terabyte directories and trying to decide what to listen to is just overwhelming. Google Play has introduced me to several new artists and a couple entire genre's of music that I would have never otherwise found, and $15/mo is well worth it.
I'd be fine with the latter if it also had a way to sense when you were overdoing it, and either warn the user or disable itself.
So, if the government had a weapon plan with the power of a nuclear bomb, and could easily be created with certain instructions...that should be leaked because something something the government has no entitlement to have secrets from the governed...even if it's to protect those it governs.
That's true, but someone who is doing something unlawful that they believe is nevertheless ethical is engaged in civil disobedience and should be prepared to face the civil consequences, including being convicted of a crime and going to jail.
It still works just fine for the kind of music I listen to, no distortion involved.
leave it to libturds
This’ll be my final response to you: those making minimum wage don’t typically pay the average cost for anything. Their healthcare will either be:

- Covered (at least partially) by their employer (like most Americans)

- Covered by Medicaid

- Heavily subsidized under the ACA
For those who care about JavaScript in embedded environments, Moddable released BigInt support in their open-source XS engine a few months ago: http://blog.moddable.com/blog/bigint/
EquiFax outsourced its network monitoring to ReliaQuest, and I have friend who works at ReliaQuest, so I've followed this with some interest. There is a general issue here too. Back in 2017 I wrote:

"But I don’t mean to only focus on EquiFax. I’ve seen many small companies where computer security was considered the exclusive job of the tech team. I recall a jewelry manufacturer in Richmond, Virginia, which had about 100 people, including a tech team of 3. Top management of such a company has the option to educate everyone about the importance of security, or they can just leave the task to the tech team. The tech team is often happy to gain the power granted by being in charge of such an important function. And then they implement silly rules, like forcing all passwords to change each week — minor rituals that annoy a lot while offering little real security. Real security could only come from educating the staff about the open nature of email, the importance of using encrypted communications, the importance of protecting the intellectual property of the firm. A company with 97 ignorant people and 3 security minded people can never be as secure as a company with 100 security minded people."

http://www.smashcompany.com/business/if-a-company-is-serious...
Lua 5.3 added 64-bit integers along with native bitwise operators. There's no end of bickering on the mailing-list over the finer details, but without a doubt 64-bit integers is a win.
Title is missing the trailing digit, should be "in 2018".
the government isn’t about efficiency, it’s about fairness. (In theory).
Instant graphic card type output
> Spotify did it right; they managed to put together a service that is actually better than piracy in the ways that matter to a typical consumer.

I disagree. As a listener, Bandcamp and Soundcloud fulfill my needs better. Artists are more willing to put their work on those services than they are with Spotify, and it's entirely understandable. With Bandcamp, there is a link to buy albums at their asking price while listening. Spotify listens will pay out fractions of a penny. The result is that other platforms will have new music that suits my tastes, and I will be lucky if rights holders will put the same content on Spotify within the next 5 years.
PayPal is a shitty company though.
Seems like a cop out. The abuse on twitter isn't directed at any one group. Every group is composed of people. Since they are composed of people all groups have nice people and assholes. So, the problem steams from people being mean. If the CEO really needed a diverse team to figure that out, then he should have never been put in charge. This is just another example of the rich passing the buck.
As someone getting well with an incurable genetic disorder while the world calls me crazy and generally tries to tell me to STFU because I must be making that up, I find comments like this ironic at best.

Good luck getting the word out if one person solved it rather than a member of a team in a large lab and yadda. More likely outcome: The "one guy" who cures cancer will be written off as a member of the lunatic fringe and have endless doors slammed shut in his face.

https://en.m.wikipedia.org/wiki/Ignaz_Semmelweis