skysight-inc/HackerNews huggingface dataset:
Actually I think it was much more streamlined than today

Also, bureaucratic BS usually melts when faced with pressure from above. (Though then you might have things like the Challenger disaster)
Exactly. These EOL dates aren't really helpful in a world where most people just use a handful of distros. WordPress keeps sending the same unhelpful message and I hate it.

Just the other day, a somewhat technical client of mine called me to ask if his PHP 7.0 installation has gaping security holes. I said no, you're using Ubuntu 16.04 LTS, you'll be fine until April 2021. If you force an upgrade now, you might run out of support even earlier.

My go-to version for production right now is PHP 7.2. I'm going to ignore all warnings about its EOL until 2028, when support for Ubuntu 18.04 runs out. Wait a sec, add another year for RHEL/CentOS 8 which is also going to support PHP 7.2 for the next 10 years. PHP 7.2 is going to outlive a whole bunch of future versions.
https://dev.to has a very interesting culture. It's far less toxic than HN or Reddit for discussions, and more suitable for blogging on tech topics than medium.
London may have a huge amount of CCTV, but people in London certainly don't feel safe to walk at night through many parts of the city. London has a high crime rate, stabbings, muggings, hate crime, etc. and the Mayor of London has been ignoring the rise of violence and crime entirely for the last couple years.
https://blog.trailofbits.com/2019/07/08/fuck-rsa/ covers that.

The executive summary is that while it's possible to implement and use RSA properly:

* it looks easy to implement so it's common for people to roll their own (and then it's insecure or broken), ECC look hard (though aren't necessarily) so devs are more likely to use properly vetted libraries

* because most of the parameters must be kept secret, good advice is hard to find (and good parameter selection is absolutely critical), not to mention e.g. good exponents has complexity and performance implications[0], ECC parameters are public and you can pick existing good ones.

[0] and security grows sub-linearly with parameter size: 2048-bit RSA has 112 bits of security, 4096-bit RSA has 140 bits of security
Agreed - while dressed up in technology (that flopped, for good reason) this is simply another way to try and force people into being "normal".

There is no need for this device, or the motive behind it, to exist.
Anyone can make one. You can make one if you want to. Getting others to trust and install it is the key - and in this case it is government mandated.

It is not uncommon to see this in companies that (for security, regulatory, or other reasons) need to monitor traffic in and out of their network. They have all the company provided computing devices include their self-generated CA certificate and force all HTTPS traffic through a MitMing proxy in order to do the scanning.
Thread by robin on Rosegarden, archived six hours ago
Offtopic, kudos for linking „featured at” banners to actual mentions. I wish more landing pages did that.

I don’t like the product, although I like non-crypto parts of the concept. I might like a self-contained version of it that worked on whitelists and email filtering rules.
Interesting. I sort of struggle to imagine anyone who wouldn't value an extra garage at anything - even if your need for it is just hypothetical or aspirational - or even just as cold storage space, which has not insignificant rental cost should you need it.
I'd try Racket (Scheme family) or ReasonML.
It is more that the absurd position is maintained because their jobs is to execute the law. If the law is absurd then you get absurd results.
No, but he's got a self-signed certificate there, so you'll get that warning when trying to access via https (the link posted to HN is just http).
It is all about cost everything is about money. All I can say is if you are middle class, want kids and not struggle financially wait till you have a huge nest-egg in your 40-50s and then find a much younger girl.
The reason why I specifically mentioned the blower motors is because the blowers in most mainframes I have seen have use small(-ish) industrial 3phase synchronous motors, not purpose-designed BLDC motors.
I really don't like the idea that some third forces would interfere with internal politics of my country. Browser should work according to technical standards, not according to what US citizens decided to be good or bad. If Firefox wants to forbid locally installed roots, I'm all for it, but implement it for everyone.

That said, I don't see how government would step back. People are uninformed and generally passive, they wouldn't care enough. So, sadly, it might be the only way to push back that decision. But I still don't like it.
Respiration at the Limit: Physiology on Everest
So I actually re-read and followed links (I mean whats wrong with lazy assumptions anymore)

tptacek's "why email is insecure" post is here: https://news.ycombinator.com/item?id=16088386

And yes thats what he says in the original latacora post.

I read the article '''invariably CC the quoted plaintext of your encrypted message to someone else (we don’t know a PGP email user who hasn’t seen this happen)'''

So I made the (incorrect) leap to pgp using the long term key to encrypt files. My bad.

But this does not fix the original point it seems - email is not going to be "secure" any time soon. But you can send encrypted files over email to people.
"we" tried that 15-20 years ago, and while there was a lot of hype around the so called 4th gen languages (https://en.wikipedia.org/wiki/Fourth-generation_programming_...).

It turned out, at least with that iteration of tools, that smaller programs were somewhat easier to write, but larger ones took about the same time, and (at least where i worked) people agreed that it was very hard to understand the flow of the program for new people, or even if you had to maintain something after an extended period of time.

Another problem is that you're somewhat limited to what the language designer envisioned, and if the IDE doesn't have a "building block" for what you're trying to do, you will spend a lot of time working around it.

We had maybe a couple hundred large "point and click programmed" programs, and they've all been replaced by something written in a traditional programming language.
Maybe it's because it has already been "prototyped", but rewriting it in the traditional programming language has actually been faster than writing the original program Some of these programs have been untouched for 15 years, so i doubt anyone remembers much about how it was implemented to begin with.
Decentraland virtual world on the Ethereum blockchain
That thread is more about removing the physical filters from the DSLR sensors - RGB, UV, infrared to achieve higher resolution and much higher sensitivity.
It implements EC with _fallback_ to RSA if EC is not available. Blame OpenSSL, I guess, because this relies on it. Even its CLI seems to be inspired by the atrocious OpenSSL CLI.
I always look in wonder at how americans are so in argumentation. I mean, you even have a whole set of tools and now a "markdown of sorts" for argumentation.

As an european, this never ceases to amaze me.
It's in the contract you sign with them to get their software in the first place.

(Of course, if you're smart you don't. I worked for a place that had a sales pitch from Oracle, wanted to use their product, but cut off all contact once our lawyers got a look at the contract they were proposing)
OmniNet: A unified architecture for multi-modal multi-task learning
And how would Carnivore/PRISM strip off the TLS encryption?
If they can give them credit cards and auto loans, then they can also give them school loans.

Right now the situation is worse - people are working low wage jobs (such as waiters) after incurring tens of thousands in debt. Wouldn’t being a waiter without the debt be a much better situation?

People need to be better with their money. Way too many people in the middle class blow their money on things like fancy cars and then borrow for college degrees that have little value, or can never realistically be paid back.

Yes, some people will be hurt, but right now we are screwing up an entire generation, and the data shows it plainly.
A Hidden Side of Procrastination
> Museums, zoos, aquariums, free events for kids, concerts just for babies, parks, swimming pools, little league, soccer league, skate parks, etc…

You have to have all these things, because the children in a city can't just run off on their own and have to be marshalled and entertained at every step. Living in the suburbs I used to just go out every day and play in the woods and hills with my friends and we entertained themselves. Hardly boring!
AFAIK it's not ideal but possible to use existing radiators.

My parents recently added an air heatpump to their existing (wood) heating system without changing radiators. They Installed a new boiler (water tank, not sure about the translation) where the top half is heated by the heat pump and they can optionally heat the whole tank using the old wood heater.
A generative backlog for large-scale design systems
The Commerce Clause wasn't used as an all-purpose bludgeon over the states until FDR.
Gifts are generally fully taxable as income, with a bunch exceptions for e.g. small amounts and nonprofit donations.

If this was gifted to someone, that person would be liable for $29m income tax.
I’ve just finish (yesterday night) to move old websites I host from a PHP 5.2 VM to 5.6

Some of them are more than 10 years old !

And as they represents a good share of my profits, I can’t dump them.

I think I saw a Joomla 1.5.

Those clients don’t want to pay someone to upgrade or redo their site.

There are several intranets that will not support PHP 7 because they use the old mysql_ functions...

So even I loose a lot of my semi-passive incomes, or I continue to tell them on a regular base that they should upgrade.

(For the anecdote, there were around 40 websites before I alerted my clients in April. 5 of them have migrate to last versions of Wordpress or joomla. 35 more to go...)
Magento 1.x reaches end of life June, 2020 (if they don't extend it... again).

I'd be more concerned about having a Magento 1 site in the wild, than the upgrade path to PHP 7.
oh thanks, some of them are indeed interesting
I had all that and I could pretend I was doing any of it in my backyard at any time with my imagination and the free space to roam I was given. Kids need to pick up sticks and pretend they are tools or imaginary things, kids need to run free and climb trees unsupervised.IMO
Im guessing since the art would be on the company's balance sheet as an asset, a sale of the company would include the sale/ transfer if its assets, thus breaching the law saying the birds cannot be sold.
uioi
That article was discussed on HN about a week ago and there are some interesting comments on that thread: https://news.ycombinator.com/item?id=20381779
Yes, every IDE with code snippets is exactly that kind of IDE for text languages.

Also, DRAKON is a visual programming environment which supports a number of text backing languages.

http://drakon-editor.sourceforge.net/
Extra concepts in templates aren't that difficult, it's usually just binding directive, conditionals and loops. You know, the bread and butter of every programmer. How hard is that? I'd say not harder than learning the many nuances of JSX. And the magic rendering voodoo enables you to do compile-time optimizations, because of the limited set of directives supported by this magical templating engine.
and what most of the companies try to sell as AI is not anywhere close.
I have used their home offering Cylance Smart Antivirus, and I essentially concluded that machine learning is just not enough to detect malware. It's nice signature is small and works even when you do not have latest signature, but there are a lot of false positives. (and it's generally identify the threat just by class of its threat, and not by specific identify of a threat, so there's no way to assess its impact.)

This combined with Cylance's attitude to treat games as its own class of malware (they would tell their user "just add the file to exclusion list" and there's no way to add the file by class -- mind you, this is a "home" product.)

I've tried Sophos Home, which also features machine learning based detection (on their paid premium version), but they use it to supplement the signature / behavior based detections -- which I feel is a more modest approach. For most of "known" threats it get caught by the signature engine by their identity ("EOF97/EicarDrp-A"), if not, it'll identify the threat by its class ("ML/PE-A").

Oh, also, EOF97/EicarDrp-A is actually a EICAR test file embedded in PDF file, I think this type of file is where Cylance's approach would struggle. (I don't think Cylance's engine even look at anything other than executables, anyways, however.)
Yes. It makes those types of projects increasingly difficult to support further.
Privacy is not 'what US citizens decided to be good', it's fundamental human right.

I'm not a Kazakh, I'm Russian, but our politics has a lot in common. And I would say, third forces interfering with politics is not as bad (if at all), as local governments interfering with people's privacy.
I have noticed that the main failing of planned cities seems to be the megalomania and misguided sense of organization trying to decide how it will be used specifically - often out of some misguided ideal of efficiency instead of leaving it to the people to decide. It brings to mind having a single restuarant outside every cul de sac and expecting residents to go only for the nearest restaurant.

Sanity calls for embracing the non-deteminism. Wall Street wasn't intended as a world financial center but that is what it wound up as.

I suspect a "modular garden" approach works best as a balance of setting up infastructure and zoning for purposes to be filled on demand. Japan at least has apparently had luck with building train/subway line loops, selling land to developers and renting out retail spaces in and near stations.
`mem::forget()` only prevents destructors from running, which leaks data managed by the destructor as a side effect, but it gives no guarantees about not freeing the object passed to it (e.g. if you call it on a stack-allocated object, it can't leak it).

`Box::leak()` leaks memory.
> if the page would try to explain and "sell"

It's a specific tool for argumentation. I don't think they need to explain what argumentation is.
The screenshot and example linked here are rather curious: https://news.ycombinator.com/item?id=20475870

Though personally I'd still like to read up on the technique.
There are existing companies that will manage a construction project.

Plus if you are doing this for the money you might want to shop around for a few quotes.

Send me the cheque’s is fine and I understand (I’ve used Adsense before!) but this affects the house you live in and for most people their biggest asset. so a bit of forward thinking is wise here.
Good luck getting critical emails or confirmation emails
I would love to see a sound implementation of secure e-mail, but I also believe that such a system should not be built on top of SMTP.

Signal’s cryptography seems stellar, but to me it feels a bit weird to use instant messaging as a full replacement for electronic letters. I’m guessing here, but it would probably not be impossible to build a more traditional e-mail client on top of the Signal Protocol.
When I first saw your un-edited comment, I tried to calm down myself. I didn’t write angry comments.

Sorry, after seeing your edited one, I couldn’t resist myself writing this comment.

Your comment implies that South Koreans are e.g. pigs that don’t care about democracy but just care about their own lives. That’s very ignorant (at the very least).

Your comment basically just plainly ignores so much South Korea citizens that protested to get democracy.
You know what? The presidents that ran the country in a dictationship, used force to remove any protesting people got their righteousness from the US.
Spanning as early as 1960 (when president Lee Seung Man tried to dictate the country with illegal elections) to 1987 (when South Korea finally got to elect our own presidents after 1960), people protested a lot. A LOT. Please search about the 1960 4.3 incident, 1979’s Bu-Ma protests, 1980’s Kwangju Democratic Uprising, 1987’s June protests, on and on...

Your comment also shows your view about China. People in China care about democracy they aren’t pigs either. Have you ever heard about the incidents in Tiananmen Square?

People care about democracy.
Please don’t think that people only care about themselves.
What will Happen after complete surrogacy banned in India?
There are many other countries where surrogacy is completely legal such as Georgia, USA, etc. In my experience, Georgia is the perfect choice for surrogacy. If you have any questions regarding that you can visit https://www.surrogacycentregeorgia.com/
Renouncing your citizenship involves first settling any tax obligations, so that would get you nowhere.
Why is it so hard to breakthrough with someting new?
Product Owner Talks: Designing Invite Codes
Atlassian ditches ‘brilliant jerks’ in performance review overhaul
How about MTA-STS? I guess that improves the situation a bit, no?
The JSON Meta Application Protocol (JMAP)
Why do you have to supervise the work of the trades but not this startup? Why are they more trustworthy? If they are ... then you can probably get someone else who is trustworthy to do the job for straight money rather than owning part of your house.

If this startup did what they did but just arranged finance as a broker and acted as a letting agent I think it’d be a better deal. The issue I have is the splitting ownership and income. I don’t think that’s in anyone’s interest.
Ok, so the "driver protocol" would be another way of saying that.
Elon Musk’s Secretive Brain Tech Company Debuts a Sophisticated Neural Implant
That's what you get when you hype Machine Learning as AI.
But you can't really blame the "AI antivirus" much more than regular ones, they can be fooled similarly easily. Antivirus can't generally protect you against anything else than old malware, with new one you are always on your own.
That said, making old malware undetectable again takes more effort against regular antiviruses.
Full source code available at: http://github.com/subho406
> Pompous believers of evolution

The disrespectul terminology says a lot. Evolution is not a "belief", is a fact and yes, I'm aware that you know it.

There is a skyscrapper of scientific articles documenting it in every coin of the planet, by entire generations of people from each nationality. We are aware of the existence of dinosaurs since more than 345 years ago. Darwin explained evolution "for children" 160 years ago. Most of his picture is still valid and relevant, accumulating proof after proof and expanding and gaining complexity and resolution since then.

Don't fall in the trap of disperate attention seekers or trolls. The only question for people that choose not understand that evolution is real in 2019 is: What is your excuse for lying to yourself?
Yes, banks have too much money (I'm not even kidding here, they have too much money and not enough good transactions to lend money for). So if they find someone potentially great (think Elon Musk, Patrick Drahi, John Malone, or this guy) they are all over it.

In all honesty, small businesses are super high risk. This is generally lower risk, because the legal / due diligence / etc will have been done better. Also the likelihood of plain fraud is less.

It's a combination of both. At the end of the day, there are always things that need to be financed. That's whether you're worth a million or a billion. So might as well build up a good relationship. It's easier to establish those relationships with big accounts, but it's also a more competitive environment (so you need to give good rates and not waste time with bullshit offers -- like they often do in retail).
It's generally very simple to find out if someone is lying: just question them 5-6 different times about what happened. No one who is lying or exaggerating keeps their story straight.

I understand that the same can be true of people who are not lying or exaggerating. Every time we remember something, the memories change. I'd be surprised if someone managed the exact same story when questioned 5-6 different times.
Americans are dualists [1] who believe there is both good and evil, and the best thing is to have both (all) sides fight it out to see who wins.

You can see this throughout the culture, from the legal system, to robust support for free speech, to the quite frankly Christian morality (a belief that there is original sin in the body politic that must be atoned for) that permeates even the most hardcore progressive, atheistic left.

[1] https://en.wikipedia.org/wiki/Dualistic_cosmology
I never knew that Norvig worked at Harlequin and was a Dylan advocate
I am 50 and code every day. Love it. And I hopefully will continue enjoying it until I die. I am not planning to ever retire. There will be plenty of work opportunities in the future. There is so much badly written software out there that companies depend on, and few developers experienced enough to reliably and safely take over and maintain it. So if you know how to be productive and safe maintaining old but critical software then you will have a lot of value.
> If Firefox, Chrome and/or Safari block this certificate

For users who are already subject to the MITM, when they try to download a new version of their browser, couldn't the ISP simply serve them a slightly modified version of the new/updated Chrome/Firefox binary which does not blacklist their certificate? It would require a high level of technical expertise, but what could prevent this sort of thing?
I find the inclusion of the statement about the Mayor of London to be very strange. He has very limited powers in this area [0]. In contrast to the government, who have, in real-terms, massively cut public services including policing [1], social care, education, and youth services which have a far more direct link to increasing crime - especially county lines [2] (drug networks) and youth knife crime, both of which have featured heavily in the news recently.

[0]: https://fullfact.org/news/what-can-mayor-london-actually-do/

[1]: https://www.bbc.co.uk/news/uk-45477960

[2]: https://www.theguardian.com/uk-news/county-lines
I hate Uber, but I now opened this issue suggesting a way to massively increase the performance of this anyway:

https://github.com/uber/h3/issues/258

(Note: by "massively" I mean pushing it to O(1) for the fundamental coordinate operations. So, perhaps read that as "most massively".)
I've read somewhere a couple of years ago that SciHub was about 35TB of data, quite big but still manageable.
So does this mean that companies could possess toxic poison pill assets that make it illegal for anyone to buy the company? That seems wrong. Maybe a nice way to prevent a hostile takeover?
> Funded by Debatelab, KIT Karlsuhe

And Christian Voigt apparently resides in Berlin.
Plus you're almost certainly going to be charged with animal smuggling when trying to cross the border with it.
I think you misunderstood the parent comment :)

Regardless of where the cert store is, it came with some CA certs "in the box". Pinning applies to these CAs. Any CA's added by the end user (aka person at the keyboard, or enterprise admins, etc) bypass pinning.

For better or worse, bypassing of pinning is required in some enterprise scenarios to inspect traffic leaving the network. e.g. Is someone attaching all our customer data to a email in gmail? To know that, I need to MITM mail.google.com.

Sadly, this mechanism does get abused :(
Is this the best time to buy Bitcoin or not?
Carbon calculator: taking one flight emits as much as many people do in a year
"the agency naively relies on generic manufacturers to submit truthful data." - yes, but also the non-generics, and the FAA does the same with airplanes and the FCC does the same with telecoms, and, and, ...