skysight-inc/HackerNews huggingface dataset:
Will oscp stapling be able to be used to detect "something fishy" going on, because in that case the root ca wouldn't actually match. Do browsers compare the oscp root with the root of the current chain?

Actually, if it's mitm it's "all bets are off" isn't it, because the KZ government can filter that it out the proxied response?

Still, if oscp can assist at all, it's probably worth it that the browsers check for mismatch (if they don't already)

Edit: typos
The "From the Earth to the Moon" series is by far my favorite series/movie/documentary about the moon missions.
Foreign purchases of American homes plunge 36% as Chinese buyers flee
> All of this money and effort to create something that has never scientifically been proven to work: Super-targeted ads, instead of contextual ads.

Have you worked in the field? Because I have, and I can tell you that ads targeting works. I've built some of these systems that people love to hate on HN. Hundreds of PhDs at Yahoo Labs, Google, FB etc have worked on this for decades and run thousands of A/B experiments. Are you saying that all these people are fraudulent / incompetent and that somehow the whole market cap of Google and FB combined (above 1 trillion dollars) is just a complete fraud?

Contextual advertising works, but much less than behavioral targeting. Anyone who has seen and worked on the data knows that.

Knowing that you just visited Best Buy website 10 minutes ago and searched for a camera is _much_ more relevant to figure out which ad to show you on nytimes.com right now than the content of the article you're reading on nytimes.com
I'd exempt Knuth from that, as he's practically a monk in his loner ways, but I also think of him as "genius", rather than "10x".
I'm from Kazakhstan using the biggest Internet provider (Kazaktelecom) and that's not true for me. No MITM here. May be not yet. Also checked mobile provider (Activ) and no MITM here too. But I saw local news, so probably not fake, though I'm not sure if it'll be mobile internet only or all providers.
> Super-targeted ads, instead of contextual ads.

Did you read the article? The point of this new platform is contextual ads, instead of personally-targeted ads.
> What prevents us from having to trust Verisign (or its employees) or a government warrant, etc. to not do the same?

Certificate Transparency. Current browsers are moving to not trust any certificate whose issuance wasn't publicly logged. That doesn't prevent an attacker from issuing an MITM certificate, but doing so would permanently burn a CA. (At least, once the policies are in place and enforced.)
Far too many people would be able to notice. Someone in one of the companies would whistleblow.
Reminds me of the 'off by one' joke in CS. It actually is a 1000 year lease. The first year of the lease is year 0. So you make 999 lease payments and you have paid for all years up to and including year 999. The lease gets renewed at year 1000.
> Why is this different than the US? It's not. But it's like nuclear weapons, yeah? We are the only ones who can be trusted with them. Therein lies the rub, as they say.

Yeah, well, no, stop. Facebook and social networks are regularly taking punches in the face and the US never prevented vkontact, mastodon or other clone to develop. There isn't a moratorium on social networks and public agreement to "limit the scope of our arsenal".
Wasn't aware the loophole was closed. That's awesome.
I agree with the idea its an upper middle class problem, but I’m not convinced it’s a problem per se.

Part of what I’m wondering is if people are agreeing they spend more time alone than in the past, social norms say that means we’re lonely, so they agree with the idea.

I grew up in the country with a lot of alone time. I loved it. I don’t consider myself a depressed person. I can imagine anything I want, write the story down, plan projects, do the deep work of being me.

Being more social just feels like a series of shallow experiences relative. Drinks, coffees, some emotionally exciting event... all fleeting to me.

My own head is forever.

I think we want to believe loneliness is bad because of social pressure to connect, get a job with people we don’t know but we need a job, etc

Personally, I find that all incredibly stifling and stressful for little personal gain (the aristocracy of course loves a population that’s normalized to a small set of behaviors but that’s a diff topic).

Upper middle class types seem to have engagement in social structures forced on them. It’s bizarre to me

Edit: this article and digging into the idea is what underlie my take here https://www.washingtonpost.com/news/wonk/wp/2018/05/17/peopl...

Racism and such aside, I feel there’s a lot for urban grind types to learn from rural life
Trusted certificate authorities log issued certificates to verified certificate transparency logs.

Site owners can monitor these logs for rogue certs issued for their own domains.
This isn't just a historical phenomenon, given that the Millennium Dome (opened in 2000) was also granted one. I wonder what the point of it is - are local governments in the UK not allowed to gift or sell land, only lease it?
Not because it "MIGHT" happen, because it does happen.
>As a kid, having my own TV meant countless hours of video games and my own movies too. I enjoyed it more than I abused it.

For me int he early 90s was "Hey Aaron/Jimmy/Dani it's raining outside so we can't go ride bikes, wanna play a game?" and then either taking turns or playing a two player game and talking the entire time. Then early 95 when more than one or two of us had computers in the homes it was similar, if it was nice out we were outside, if not we were on IRC and/or a MUD and moving into the later 90s bla-dinging each other on AIM while in a MUD or in Ultima or Everquest with each other if it was too late to go out or bad weather.

Now it's 3 people sitting in a room with a tv going, and all three have their phones out, occasionally sending each other memes and not talking.
Thanks, I appreciate that!

In the abstract sense, I would say we are, in that it's the primary benefit of what we've built versus textual searching like you get with PubMed or Google Scholar. For example, if you were to search for a specific variant like BRAF V600E in Google Scholar or PubMed, you'd need to search for every way that the variant can be described in text, such as p.V600E, p.Val600Glu, c.1798T>A, C1798A, etc. Furthermore, you'd need to then read the results to determine which are specifically referencing the V600E variant in the BRAF gene, versus mentioning the V600E variant in one of the other genes mentioned in the paper.

We've already done that work ahead of time, figuring out which variants belong to which genes in papers, normalizing all the different nomenclatures used for variants so that you can do a single search for your variant and remove the need to think about how authors could have referenced it.

We do the same with taking into account all the different ways authors can talk about genes, diseases, clinical contexts, meanings and interpretations, etc.

I don't know if that answers your question. I guess it depends on what you mean by knowledge graph, since there seem to be a few different ideas of what that entails.
Bingo. Grindr was a terrible app. Inconsistent push notifications, lots of lost chats, and it took forever to support new phones. (I was using it back during the iPhone 5 era, and it was apparently a 6-month technical slog to update a simple collection view to target that SDK.)

But it was first, and the network effects were obvious. You had other apps in use in large gay cities in the States, but while traveling, and you want that fun hotel action, you pretty much had to go with Grindr.
The government is forcing people to find a third choice and they might not like what they pick.
How many users browse the internet through Google's cache? Splitting hairs over cache vs. linking the dead website is ignoring the point.
Huh. Even common law is zero-indexed.
Yes, it did.

What's happening now is going on under a different set of paradigms. If you approach today's geopolitics or military considerations with a cold war mindset you will miss things out. Globalization has happened and that changes a lot of things.
Way too early to draw any conclusions
Thanks! I also realize that if you have distributed database nodes, it's becomes a very hard problem to have a monotonically incrementing id. But still, mysql/mariadb does it, and so does Microsoft SQL Server (via IDENTITY)
I'm not sure that we do need such a term. Ability is a continuous function, and there's nothing magic that happens once you reach 10 times the average[1] that justifies such fixation. I never hear anyone talk about recruiting 5x engineers, even though it would be more viable as a business strategy. Besides, we can't even measure engineering ability to the precision at which specifying "10x" even makes much sense. When would "10x" actually be a more useful descriptor than "very good"? Also, where are all the "10x artists" or "10x mechanics"?

[1] Although I read here just a few days ago that a 10x engineer is only ten times as good as a bad engineer, not 10 times the average. So maybe it hasn't always meant the same thing?
IIRC it's a significant source of income for the British Royal Family. They own a lot of land.
Aw, let them use whatever color they like.
The larger the conspiracy theory is, the higher the risk that someone will simply decide it's worth whistleblowing on. The whistleblowing could even be effectively done anonymously in this case. Secret Government surveillance of end to end encrypted data in the US would be such a huge news story and public interest that it wouldn't be difficult to find engineers willing to take the risk of anonymously providing evidence of it to the press.

A "few hundred" gag orders placed on engineers about something deeply outrageous sounds completely implausible as lasting secrecy. Secrets simply can't be kept at that scale.

Even NSA employees themselves would eventually refuse to keep such a program secret, as we saw with Snowden.
I have the impression that people who are not afraid of open offices did not work in an office that was particularly bad. When the manager joins in the constant chatter, talking all the time about video games or sports, it's very difficult to do get work done. You have no one to turn to because the management is in on it.

I worked in open offices that didn't bother me. Generally large companies with more than 60 employees. The noise becomes an indistinguishable background sound and long conversations are almost non-existent.

It's the smaller ones that annoy me. Those with 10 to 15 people. Conversations are easy to hear and understand, so your brain picks up on them. Since it's small, it turns into a bunch of little friend groups who have constant conversations.

...

Describing it just now, I notice that I am describing a high school class versus a university class. That's exactly how they feel. It only takes one or two disruptive agents to ruin everything.
Not sure how accurate this [1] is, but 34k USD puts you in the top ~0.88% richest people on the planet. If that's true, you are not "lower" anything...

[1] http://www.globalrichlist.com/
You're implying that there's no middle ground between "moderators unilaterally edit your question, including substantial semantic changes" and "question deletion".

I find that simultaneously troubling and, given my experiences on SE, unsurprising from someone whom I assume is a SE mod. If that's the position that most moderators take, no wonder it's such a caustic place.
> "In addition to service provider records that point to Kvashuk, the complaint notes that Microsoft's online store uses a form of device fingerprinting called a Fuzzy Device ID. Investigators, it's claimed, linked a specific device identifier to accounts associated with Kvashuk."

1) I guess he wasn't aware of this ID'ing. That's odd.

2) Fake accnts aside, I'd presume he used a VPN as well as other means to mitigate his trackability. But the FD ID can still work? Ouch.

3) If this is what MS can do, imagine what the NSA is dabbling in.
>Gas is burned at night to keep the system primed and to heat water used in the tower boilers. This allows electricity production to start up more quickly when the sun comes up each morning, plant operators said. Gas also is burned during periods of intermittent cloud cover.

https://www.pe.com/2017/01/23/ivanpah-solar-plant-built-to-l...
Are you sure?

It seems fairly likely to me that the average time of day that someone makes the initial commit on a new branch would be quite different from the average time of day that they make commits generally. Am I misunderstanding?
They always forget the last step move to a country with no extradition to US
So that means apps like Instagram are safe to chat in?
It must have been many many years ago, more than 10 at least.

Any way to avoid or bypass name or path constraints would be considered a huge and monumental vulnerability today.
Sometimes I feel like I’m being downvoted and flagged by bots from people I’ve upset in the past with my arguments. Starting to hate this place.
Many websites now want to play at social engineering the populace. They forget what their users want, try socially engineering those users which a great number of them reject and users move elsewhere when something better turns up.
My guess is this was reverse engineered. Once they had identified which employees had access to this digital currency, they looked to see who had $10m or so more than expected, and worked from that person to the bitcoin account.

Driving a Tesla that costs significantly more than your take-home pay is... a suboptimal way to avoid being identified.
I have a pair of SE215Bs that have been going strong for over 10 years of using them for working out, and travelling. They have even survived a few trips in the washer and dryer. One of the best parts is that the monitors have a connector between themselves and the actual cable, in case the cable wears out over time you can replace it, or upgrade to the bluetooth adapter that shure sells. The Foam tips don't work as well as they did when they are new but I can get replacements if I needed. I now prefer my Bose QC35 but I always bring the Shures as a backup.
Netflix Is Rolling Out a Low-Cost, Mobile-Only Plan for Users in India
Thanks, but it's a repost. Here's the original thread, with more comments;
https://news.ycombinator.com/item?id=17446839
Kazakhstan is blocking some websites, including home pages for Tor and popular VPN services. Also it uses some sophisticated Tor blocking: it establishes TCP connection but no bytes going there, so Tor client just hangs there without error or traffic, I wasn't able to unblock it, though I did not try hard enough. I think that they are blocking connections to popular VPN services as well, but I don't really know. Without access to their home pages it's hard to connect anyway. I know that people successfully using some mobile apps as VPNs, so while they are trying to block VPN, they are not trying hard enough.

I never had any problems with SSH and I operate my own OpenVPN on VPS using standard port and I never had any problems with it as well.
> the places I’ve been are less formal than that and they might be concerned about slowing down turnaround times during the day

I'd be more concerned about code being committed to master without code review.
A bunch of my college/highschool friends will still hop on the ps4 a couple nights each week.

I live 100 kms away from most of them, however we can still catch up and have fun playing games.

Its definitely not the same as real life interactions, but it allows me to interact with people that I normally wouldn't see without visiting them.
The steam cycle has to be up and running before sunrise so they can meet their generating obligations, so they have to ramp up with natural gas while it is still dark. The facility is also capable of operating as a dispatchable "peaker" power plant.

There's a huge amount of right-wing disinformation about solar power so if you just Google for "Ivanpah natural gas" you'll get an outpouring of stupid blogs, but reading them will get you close to the truth.
Twitter has changed the front end like five times in the past five years and improved exactly zero of those times. They need to lay off 80% of their front end devs to keep them from just pointlessly churning the website.
"Globalization has happened and that changes a lot of things."

This is exactly what they said before WWI.
Will anyone remember these works of art in ten years? Twenty-five? Fifty? One-hundred? Beyond that?
Stack Overflow is basically under siege 24/7 by every yahoo with a keyboard. The smaller, more specialized stack exchange sites have less nonsense (maybe a 2:1 ratio of bad to good questions compared to Stack Overflow 10:1) to deal with so can afford to be generally friendlier and more helpful. Although sometimes they can be persnickety about what is "on topic" for the given site.
A village where every cop has been convicted of domestic violence
9. Members of the God Platform realize that each entity being logically separate and needing to be independently profitable hurts the entire platform so they move to a combined subscription model where user revenue is shared depending on the size and popularity of the content provider.

10. The new model ensures that content producers compete at the contract negotiation level and don't manifest in user-visible price differences so the price of content gradually shifts away from the cost of production and up to customers' willingness to pay since all content producers are singular in the intent to maximize total user revenue.

11. Access to this God Platform is pretty much ubiquitous and ISPs try to differentiate themselves by bundling discounted subscriptions as part of their internet package. People love it and gradually move over.

12. Once every ISP offers the service the discount evaporates as it's no longer a differentiating feature.

13. ?
buzzfeed is cancer.
I've actually seen larger numbers, but that's probably ballpark

Launch is the part of the space industry that gets the most consistent PR, but it's a relatively small piece of the pie. A rocket launch may cost $50-300 million, but the payload on that rocket may have cost billions to design and build.

One source for $385 billion in 2017: https://www.uschamber.com/series/above-the-fold/the-space-ec...

Source for $330-350 billion: https://spacenews.com/a-trillion-dollar-space-industry-will-...
Testing data shapes with go-lookslike
Yes, it would be survivor bias, but usually publicly-traded companies have a fiduciary duty to report these types of theft, even if they don't know who committed them.
The goal is to make it evident when there isn't one.
The article is a great introduction to `awk`, but I can't help but bring up UUOC's, or Useless Uses of `cat`: http://porkmail.org/era/unix/award.html
Though I wouldn’t be surprised if there is at least some biasing. E.g. first commits happening relatively soon after regularly scheduled scrum meetings. At least if they’re the type of developer who checkpoints after incremental changes.
> Financial literacy courses should be required

That's rich. I suppose the cost of the course will be included in the student loan?

Better to do away with the cruel 3 prong Brunner test and just make the debts dischargeable in bankruptcy. Two useless financial literacy courses are already prerequisites for predominately-consumer-debt bankruptcy case discharges.
That's a great link; thanks! I've heard the slave explanation from numerous people at various stud farms, but not everything we hear is true...

Still, southern Missouri has lots of limestone (it's "the cave state"), and had lots of Irish and Scottish immigrants, and I can think of precisely one "slave fence" in the whole state. If the difference wasn't limestone, and it wasn't Irishmen, maybe it was that Kentucky had lots of rich tobacco plantation owners, and Missouri didn't.
I often take the compromise technique: write a prototype and build off that.

The prototype is generally a mess, but I throw that out anyway.
> At this point, I'm starting to suspect that most designers actually don't have any clue what they are doing and the entire discipline is 90% following the latest trends.

You could say the same thing about the software developers who work on these websites.
It's most likely not at all intended stop or affect scraping. Although I haven't looked at how obfuscated it is.

https://github.com/css-modules/css-modules or similar does this because the CSS global scope is more and more painful as applications get bigger.
I'm surprised the government, some nonprofit or some university's sociology department isn't doing this. It wouldn't be hard to publish a weekly newsletter with meals for various family sizes that can be made at various price points using all SNAP-compatible ingredients.

How much would it really cost to send a weekly pamphlet of cheap and not nutritionally terrible meal ideas to the address of every kid who gets free lunch?
Why do they not lock the account after n number of tries say 5?

The user will need to use a different way to authenticate if they can't enter the correct code in 5 tries
Who do i sue over global warming?
>Satellites seem largely unregulated

Also, because when a company like Swarm launches even after their licenses are denied, all they get is a slap on the wrist.
Facebook will always show you an ad. First the system tries to select a relevant ad with the highest predicted income ($$$) for FB winning the auction for your screenspace (the placement). If FB can't find a perfectly relevant ad the algorithm will choose a less relevant ad, But it will always show you an ad.

The thing is FB does not select a relevant ad from all available ads on FB, but only from a subset of ads matching a certain targeting setting that in turn matches your profile or interest. And this targeting setting is set by the uploader of the ad. And in some cases advertisers select a targeting that does not make any sense at all. (They target you by error.)

Does the placement algorithm like to show you a non relevant ad? Most likely not because on average it yields less money for FB. It could be that FB does not have much information on your interests or your privacy settings disallow using this information and the algorithm does not know what is relevant to you. And/Or the advertiser had a very high bid for the placement and the placement algorithm decided a less relevant ad with a high bid yields more money than a more relevant ad with a low bid.

(This is often the case if the advertiser decided to pay per ad-view and not per ad-click. Pay-per-click ads only yield money to FB if they are relevant, because users don't click on non relevant ads. Per-per-view ads always yield money for FB.)

But in the end it's not facebook who is to blame. It's the advertiser setting up stupid targeting and placement bids. (I once burned through 10000€ in one minute because of an erroneous targeting setting while showing the right advertisement to the wrong people...)
so basically I'm eating about as much fat as I eat meat. That usually makes it about 20/80 protein/fat so I won't go into rabbit starvation hopefully.
> I am a weirdo in that I like my team, my teammates and my job in general

How does that make you weird? Seems pretty normal to me.

> I would rather have a well-equipped onsite gym and a roomy cafeteria and a free ice-cream shop than that space being filled with 100 'offices'

From this statement, I'm guessing you are in your 20's and single. Those are not important things when we are talking about a job.
Are there any reliable and trustworthy Monero exchanges that allow anonymity? Not even Coinbase supports Monero, and Kraken requires identification.
Isn’t that the whole story behind the linked article?
I think as long as you're adding the leaves on the same resolution level it should be fine. the problem is when your storing objects in different levels as it would be possible on a KDB tree.
So, what's sustainable?