skysight-inc/HackerNews huggingface dataset:
Limiting a bit the impacts if Let's Encrypt is compromised in any way.

If Let's encrypt is compromised, either by being able to issue certificate for arbitrary domains or if the CA itself is compromised, the impact would be huge given the current number of certificates signed by it and this number is likely to grow in the futur.

With several CAs in different organizations, you have a far lower risk of seeing all the CAs being compromised at the same time, thus limiting the impact of a CA being compromised.

Note that it doesn't mean a full decentralization, but rather a set of CAs (5 or 10) independent of each other and providing a service as conviniant as Let's Encrypt.

As a side note, an idea a colleague of mine suggested to extend and better the security model of CAs/certificate would be the ability to have a certificate signed by several CAs.
Let's say you are a bank or a security sensitive website, you could have your certificate signed by 4 or 5 CAs, and then, you could publish a policy, for example in a TXT DNS record, stating that you need at least 2 or 3 valid CA signatures. This way 1) your certificate doesn't need to be renewed in emergency if its CA is compromised, 2) if a CA is compromised (without people noticing), it reduces the overall impact as an attacker would have to in fact compromised several CAs to actually exploit this (MiM or impersonating websites).
> I worked with people who had been there for 10+ years and they sang praise for how people were handled internally.

EA developed a reputation for abusing their employees first and only after facing tons of bad press and lawsuits did they promise to try to turn that around.

I mean, props to them if they really have improved things, but in order to get there they had to be dragged kicking and screaming
The Surprising Reason Why Prostitution Is Illegal
I'd argue that p(H0|x) is also (in most cases) pretty uninteresting from a scientific perspective, and so the whole "publish all the p-values" solution I think is only fighting half the battle. Gelman does a much better job of arguing this than I ever could [1], but this idea that rejecting the null is the "desired" outcome is the real problem. To put it another way, a low p-value is another way of saying "my model of the data generating process is bad", which is in most cases a pretty unsatisfactory outcome. As to the idea that priors are "impossible" to get, to quote Gelman [2] again, why "strain at the gnat that is the prior and swallow the ungainly camel that is the iid likelihood?

[1] https://statmodeling.stat.columbia.edu/2015/03/02/what-hypot...
[2] https://statmodeling.stat.columbia.edu/2015/07/03/why-should...
From what I understand the restaurant listed themselves on Google's platform with contact information, and a link to their own ordering website, or a way to call for a meal pickup. Google inserted an indirection where the orders get placed via a third-party thus bypassing the restaurant without informing the restaurant.

If the restaurant gets a lead via a delivery-app, they they pay a fee to the delivery app. Here they would have gotten an organic "free" lead, that was then converted into a paid lead because Google inserted a delivery-app between the user and the restaurant. And Google probably earns some coin along with the delivery app.

Seems like Google wants to put a toll booth to monetize the action behind every search result. If I search for a toy and then buy a toy from a website, then Google wants money because they provided a "lead".
One way that malls are attempting to survive is by adding living and working environments; It seems obvious - have captive customers for your stores, have the "company town" vibe for employees, all while reducing parking requirements.

Though, it has some issues; particularly with zoning, insurance, and board approvals.
> People who love Haskell, lisp, etc. despise Ada.

Why?
>All issues have come from illegal products. No brands are mentioned. Clearly, contamination is the issue. It is irresponsible to blame "vaping" especially considering that the alternative is "smoking" -- which won't ever result in a newspaper article about sickness/death because it is so common.

This doesn't sound like that:

>The Los Angeles County Department of Public Health was investigating a possible fifth death, saying on Friday afternoon that the fatality was “associated with the use of e-cigarettes, also known as vaping.”

I'm assuming e-cigarettes are the legitimate sort.
Add anti-lock braking systems and automobiles have to be safer. Basic physics.

https://en.wikipedia.org/wiki/Say%27s_law
Running https://diskprices.com and https://battprices.com, I've been consistently making >$500 in Amazon affiliate fees each month for the last couple of years. It's still growing, slowly. I'm working on some improvements to the software to add more metadata about the drives like warranty and advertised performance numbers.
I do this. I exercise, chill out, and then write fiction for a few hours before I go to work.

I wouldn't say I'm an overachiever but I do work at a fairly high-pressure, competitive BigCorp. Haven't been fired yet, and my performance reviews are fine. The truth is that if somebody else owns 100% of your highest level creative output, he owns your soul too, and I'm just not down for that.

It does mean making sacrifices in other areas, but for me personally the alternatives are worse. Obviously not everybody has the luxury of so much (theoretical) free time.
To enter a market you need to build a firm and develop a product. This requires non-trivial time and resources and is risky. Without the resources you can only try it a few times in a lifetime. With the resources, you can keep trying until you find success.

It's building a ladder up a mountain that already exists.
Both charts actually claim to be Jan to June 2015. The parent was demonstrating that he could make a chart claiming an identical timeframe and claim as the grandparent's, but with contrary data.
I don't see the contradiction. A mall offers the walkability of an urban center but provides plenty of free parking. Additionally, there's no space "wasted" by residential and office buildings like there is in a city. What exactly doesn't make sense here?

Indoor malls died because consumers who want to shop in person turned out to prefer individual stores and strip malls. If anything you should be pointing out how weird and wasteful those detached stores are. It seems to me that the indoor mall is at least speaking the same language as you, with its "synergy and community" and walkability. The model of having detached stores and restaurants spaced widely apart is the unsustainable aberration. The indoor mall makes sense.
A good interviewer will not care about syntactic things, but rather try to sniff out your workflow and thoughts / processing when breaking down a process. It should be a proper two-way interaction.

A shitty interviewer will follow a rigid script and "ding" you on trivial errors.
Good Examples of iOS Code Quality?
I recently interviewed at company X, which had one of those take home assignments, and in the end I got rejected because my code wasn't up to their standards. That got me curious, I've been a developer for ~6 years, (last years I've been managing though, not doing much coding), and although I work in a big company, I've been in the same job for a while now. Not too much of a sample size, and iOS Dev Weekly et al have interesting articles, but I think they focus on new stuff more than things like, how does a good mature iOS app/library look like.

What do you look for in a `good` iOS app/library?
It's very much the website's fault that it uses an awkwardly scrolling span that's much smaller than the viewport.
looks like it should be: https://www.health.ny.gov/press/releases/2019/2019-09-05_vap...
That means: all Google flagship phones and tablets. A lot of phones from companies that take updates serious.

It’s estimated that Google sells at most 2.5 million phones a year and has 0.2% market share of the Android market. Where are all these other companies that “take updates seriously”? How many Android phones still get updated after 2 years? 3 years? 4 years?

Think that’s too much to ask for? I bought an iPhone 6s in 2015 and my son is still using it, it’s running the latest OS, and according to many benchmarks it was faster in single core performance than high end phones released last year. It’s still faster than most midrange phones.

The latter is, by definition of Open Source, out of Google's control.

Google has plenty of control over any Android phone that runs Google Play Services. In fact, it has so much control that it had to pay a fine and is under a consent decree with the EU about forcing anti competitive conditions on Android manufacturers.
I'll start: I'm still actively working on my Android app, Sun Locator, that helps photographers and outdoorsy people to predict the position of the sun and the shadows caused by mountains and hills. It helped me to learn quite a lot about Android programming, the app ecosphere and costumer support, and it makes a bit of spending money on the side.
More info: http://www.sunlocator.com
> leave calories

Ethanol itself is most of the calories in any alcoholic drink.
Seems totally reasonable.

“cors - today is going to be bleak” as the first search of the day resonates with me on a deep level. Our field is incredibly complex, and some parts of it we just like to not think about too much.
If you want to have a custom setup then nothing is stopping you from doing so, is it?
If you write your schedules in pencil, there's no such thing.
Yo. AMA.

https://news.ycombinator.com/item?id=20899933
With negative numbers, it's still enumerable, as if it were a six-tuple of natural numbers, I figured.
We have a bird feeder, which squirrels cannot (usually) get to but they hang out nearby to eat what falls out. We also have the occasional feral cat or two that swing by. I can attest that they are all listening to each other sound the alarm, so it makes sense they would also listen to the "all clear".

My wife also does, because if they sound the alarm that means a cat is nearby, and she comes over to the window to see if she can see the cat. This may have caused me to pay more attention to the whole interaction.
Fascinating. This particular behavior is somewhat widely known but it does serve as a hint that there are depths of animal behavior we haven't yet perceived. Billions of years of evolution have created fantastically complex interactive systems on the microscopic level, but we sometimes forget it's had just as much time to work on animal behaviors as it has their physical makeup. I suspect there's many more surprising things to find.
The main problem I see with vaping Cannabis extract is, there isn’t much that a consumer can do to verify the quality of the product. The cannabis could be contaminated with mold or neem oil from the grow up or it could be leftovers from the extraction method, because it wasn’t purged right.

Neem oil is something that was cleared for fruits and vegetables, something that you wash and eat. But I think it would be poisonous when you inhale it.
The side channel for most of the spectre variants is the latency of misses on the cache lines. L1 and L2 cache lines are local to a physical core. As far as I know, nobody has made any of the spectre variants work by measuring the latency of L3 cache misses, which are local to NUMA nodes if I understand correctly, but I'd love to hear otherwise.

The most recent round of spectre variants measured the latency of the line fill buffers and other parts which are local to a physical core's memory subsystem.
this is pleasantly relevant given today's Ikea Ireland news
Good story, but I think the link is broken. Try https://www.nbcnews.com/news/us-news/writer-does-twitter-tak...
Yep, and how tedious that would be!
I’ve looked at UK sites, but their odds are unprofitable (at least with what I’m doing). That 6% - 12% stake does sound super nice however, these are exactly the kind od trades I make! If fact they are the only political trades I make. I’m not smart (or stupid) enough to start betting on twitter markets.
That was precisely the aspect we enjoyed the most, though I hesitated to note that detail when posting earlier.

It wasn't the only fun part though. Someone would always start giggling and give away the hideout.
Off topic, this does raise the question of who we listen to to not be terrorised by squirrels.

https://www.bbc.co.uk/news/world-europe-45150298

(Sorry mods)
Hope is a wonderful thing............. With You ISRO.
Are you certain this is only happening from illegal products?

Here are pictures of brands new york has flagged: https://www.flickr.com/photos/nysdoh/sets/72157710703391248/

And according to this article: https://beta.washingtonpost.com/health/2019/09/05/contaminan... a man died after using a product purchased from a dispensary:

a middle-aged adult who died in late July of a severe respiratory illness had used an e-cigarette containing marijuana oil purchased from a legal dispensary. It’s the second death linked to vaping nationwide and the first to be linked to a product bought at a store.
The same NRA that’s fighting tooth and nail to make silencers easier to buy?

The NRA has always been paranoid about the government collecting information on gun owners to the point where they pushed for laws not allowing doctors to ask about gun ownership.
This is a very misleading comment. Vitamin E acetate has nothing to do with the concentration of THC in the product. The addition of Vitamin E acetate to a THC product does not change the quantiy of THC in the product.

The concentration of THC in the product is not "crazy", even considering the concentration of THC in bud - it's a concentrate, of course it has a higher concentration of THC. It has a higher concentration than bud because it doesn't have to carry the plant matter. This is like saying the concentration of vanillin in vanilla essence is "crazy" compared to the concentration in a vanilla bean.

Additionally, the "products to avoid" link you have provided is NOT a list of products to avoid. Those images are for demonstration.
Eh...

As long as the "actually..." only needs a small change to a simple regex (as in your example), perl probably wins the "actually..." game as well until you pull in enough libraries that the Haskell looks a lot like the perl. It's when the regex starts getting overcomplicated and the Haskell breaks out parser combinators that Haskell probably moves into the lead.

As you say, though, the margin perl maintains is small.
I'm more concerned about the future backlash than the present reporting.

I mean, remember the salmonella tomato scare in 2008? Restaurants around the country stopped putting tomatoes on their food, and grocery stores pulled all tomatoes from the shelves, until the issue was isolated and resolved.

So while I do think it's quite the overreaction to tell everyone to stop using any and all vaping products, particularly people who are continuing to vape juices that have been used for years without issue, it's an understandable overreaction.

In the end, they are going to find the issue, and it won't have anything to do with traditional e-cig alternatives to tobacco. But I suspect there will be legislative backlash that will be vastly disproportionate to the issue. They will punish innocent retailers, make e-cigs outrageously expensive by over-regulation, and discourage a large number of people from a product that really is substantially safer than the tobacco they are leaving behind.
I assume "couldn't even tell it had alcohol in it" was referring to taste and not intoxication.
This approach is guaranteed to give better answers than pretty much anything from standard quantum chemistry. Its limitations are (i) computational cost and (ii) the fact that many material/drug design questions cannot be answered with quantum chemistry only.
Oh, thanks, I see the problem now.

I imagine it would be nailed down at the Moon, even though it 's going "up" on that end too, the Earth end will very likely weight much more than the Moon and pull the entire cable. But the fact that it must be much fatter near the Moon does indeed complicate things.
>> Dan is trying to demonstrate that there is room for many more large VC style returns by investing in companies that's primary value is being an API.

I am sure you are trying to help them, but some more details would be helpful.

Any 12 year old with a phone/tablet/computer can create an "API". Is that what VCs are looking for? I imagine that there has to be more.
Not to mention remote sensing satellites directly help an Agrarian economy,
I totally agree with your reading of the tone and I was kind of floored by it. To me, it seems that there must have been a tempest about it that I (we) missed.

What I mean is that it's extremely reactive, accusatory, and defensive, but in response to something that we aren't seeing. It can make sense if someone was running a huge news story about it, that we're just not in the audience for.
A fair part of the attraction is going to be that it’s not sanctioned.
A senior software developer can be given a vague contradictory notion of a a whole application (or part of one) and turn it into a scalable, performant, cost-effective beautiful product using the best set of tools and technologies to fit the job. They will deliver exactly what you had in mind within the estimated range provided before they even started.

In addition, they will do it while abstracting away all of the pain and complexity as part of that process, communicating only to provide accurate updates on progress and asking thoughtful probing questions. They make all of their work seem effortless in the process.
My first three of the day:

"caniuse position sticky"

"ERR_SSL_PROTOCOL_ERROR angular ng serve"

"hash bitbucket reference jira"

And I've been at this for decades! I remember the bad old days of reference manuals. This is a walk in the park!
Since it's my own CA, I have a few personal scripts that handle it. Everything else (like the root cert) is handled offline with a different physical device. It's nothing more than some glorified bash stuff and pulling public CA's from my own sites.

XCA is a gui for dealing with making certs. For me even as a technical user, i prefer it more than CLI.
Same thing was said about Moon landing. Re: "Whitey on the moon".
BioWare is an EA studio since the release of Mass Effect 2.
Ideally, I would sit down and be so familiar to the problems I'm solving, the tools I'm solving them with, and the tools so suited to solving those tasks that I can just type in my solution without having to stop to consult something on the internet.

Ideally, I'd be able to have tasks that are highly specified in advance and with priorities that are stable enough that I do not have to have multiple social interruptions per day in order to be on the correct task.

Basically, I wish I could achieve productive software development from an isolated cabin without an internet connection to provide distractions, with lots of subtle natural ambiance and my own thoughts instead of interruptive social interactions, and synchronize my work product with society on the same cadence with which I would travel to town to get groceries.

Obviously, this is not the situation.
You don't need passion for maintaining projects to have compassion for the people who need to maintain your projects (whether or not that's also you).

As you point out, though, some code actually doesn't require maintenance. But at the same time, that's not always the code you think.
yes definitely a big issue; testing requirements must be improved, and there should be random samples of product batches taken for testing so companies cannot game the tests
MIT Media Lab hit with Twitter tirade by writer upset over Epstein ties
>They didn't understand what was being written other than "zomg, website can hax my entire phone and could've for two years, I assume all my data is on the darkweb".

Seriously... did you overhear me talking to my relatives?

If not, you absolutely nailed the public perception.
It’s even better than that: by 6000 km the inverse-square law will have reduced that to only 0.25 gee gravity drag :)
I'm Canadian and my friend got PR within 3 months because of the points system (Masters, fluent English ability etc.)

In comparison when I sponsored my wife for PR in Canada it took about 13 months.

I'm now going through the Green card process in the US employer sponsored and it looks like it will take 2 years.
India Loses Contact with Chandrayaan-2 Mission During Moon Landing Attempt
No.

I considered multiple facets when making this decision: 1) people are harmed by it, 2) even though people willfully start doing it, they can't always willfully stop doing it, 3) it negatively impacts them and their family's health/finances, 4) it negatively impacts society in a variety of ways.

I believe that impacts to society is what gives society (read: government) the right or obligation to intervene. Taxes are an effective mechanism of softly encouraging good behavior and they have much less risk of unintended consequences than total bans do.
Thank you for letting me know! I resubmitted it here with the correct url (couldn't edit this one):

https://news.ycombinator.com/item?id=20899980

mods: you can delete this post
Products like Juul do have harmful byproducts:

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5342216/
I just got a "breaking news" notification saying the CDC is recommending not vaping at all. This is definitely going to have some effect.
I agree, totally - that gallon of milk should be taxed at the same rate as a lambo because... eh, who cares about the poor /s
So if Let's Encrypt has a problem, like say their OCSP server is serving errors[1] then the entire Internet is not affected.

https://community.letsencrypt.org/t/may-19-2017-ocsp-and-iss...
Yes but historically there's been a stronger sense of culture around engineering excellence, more channels for setting errant programmers straight, and they were considerably more accessible than they are now. While I agree with your statements about elites in general, all one has to do is look at how much less dangerous and more trustworthy the internet was circa 20 years ago (relative, I know, I'm not saying it was 100% safe or even 90% safe).
well… you should read the paper, or maybe a summary like this one[0], before jumping to comment.

[0] https://news.ycombinator.com/item?id=20897565
I meant to compare getting to GEO (as proposed in the paper) as opposed to Lunar orbit.

Of course the way I worded this is a bit lose, and it's not completely free, but according to the figure in that Wikipedia article, the difference between getting into geosynchronous orbit and getting to lunar orbit from earth seems to be only about 0.1km/s, which is negligible compared to the total cost. So my basic point still stands.

It's actually really expensive to get to GEO.
What a weird question...
We'll end up with a website called "Do Not UseMyFace" and you'll take a picture of your face and upload it to the FCC in an effort to stop RoboFacing.
> It is irresponsible to blame "vaping" especially considering that the alternative is "smoking"

False dichotomy. Not consuming nicotine is also an alternative.
Once place I worked, after week-long reviews of your work, and a day-long interview, the final question in the process was, "Is golf a sport?"

Answer incorrectly, and your resume immediately went in the round file.
But they do need a hide and seek manifesto at least.
NYTimes: "India Loses Contact With Chandrayaan-2 Mission During Moon Landing Attempt"

https://www.nytimes.com/2019/09/06/science/india-moon-landin...

Edit:

NYTimes subtitle says "The country will likely have to wait for a future mission to join the elite club of nations that have landed on the moon."

Wikipedia for Chandrayaan-1 says "On 14 November 2008, the [Chandrayaan-1 probe] struck the south pole in a controlled manner, making India the fourth country to place its flag insignia on the Moon"

.. huh?

Edit 2: Ah, impact landing vs soft landing.