skysight-inc/HackerNews huggingface dataset:
It's also important to see that the SSL/TLS system does not allow you to revoke a certificate with 100% certainty, the revocation mechanism is flawed - it's often practically impossible to reliably revoke a certificate after someone has compromised your private key. The only feasible workaround is early expiration to reduce the window of vulnerability.

* CRL is a list of revoked certificates, it must be downloaded and manually applied to all clients, which only occurs once in a while as a new update, and many hate system updates. The huge lists of revoked certificate have size, performance and scalability problems, currently they are considered obsolete and mainly replaced by OCSP.

* In OCSP, clients ask a CA's OCSP server to determine the validity of a certificate. It operates out-of-band from the main TLS connection, and networks and CA servers are not reliable, especially in the early days. Timed out OCSP requests were common. If you are a web browser, you don't want a failed OCSP request to block/DoS HTTPS, thus OCSP becomes essentially "optional". Browsers reject bad certificates when the connection goes through, but if it times out, nothing happens. An attacker can simply block the OCSP server to bypass the revocation check. There's also the problem of privacy - you have to send the name of every website you visit to third party servers.

* In OCSP Stapling, the webserver acts like a proxy - it hosts a cached copy of the OCSP response for itself (it cannot be forged because it's signed by the CA) and sends it to clients in-band, via normal TLS channel. Because now the client no longer asks CA's OCSP servers for a response, but instead simply asks the webserver itself, it eliminates the problem of third-party OCSP servers, solves the reliability and privacy issues. However, there's nothing to prevent an attacker to run a server with a compromised certificate with OCSP Stapling turned off.

* In OCSP Must-Staple, you can get a certificate from a CA that says "you must use OCSP Stapling, otherwise this certificate is null and void." Hence, if a browser sees a certificate with "OCSP Must-Staple" enabled, it must see whether the webserver supports OCSP Stapling, and via OCSP Stapling, the certificate's validity will be determined. If OCSP Stapling is not supported by the webserver, the connection is rejected. Thus, an attacker who uses a compromised certificate has to either disable OCSP Stapling and be rejected, or to enable OCSP Stapling and gets caught. Finally the problem of reliable revocation is solved. But this is an optional feature and is only used by a tiny percentage of sysadmins. Also, it's only supported by webservers and browsers, other TLS-based applications like VPN, FTPS, SMTP, IMAP, XMPP, IRC servers/clients, etc, usually don't support OCSP Stapling at all.

Thus, it's often practically impossible to reliably revoke a certificate in SSL/TLS after someone has compromised your private key. The only feasible workaround is early expiration to reduce the window of vulnerability, an unrevokable certificate that expires within 90 days is less dangerous than a zombie certificate that lasts two years.
Been saying the same thing about homebrew for years. It's ridiculous. No one should use homebrew, and macports is far more correct, but it's pointless to say it.
@LinuxBender is on the right track. Bufferbloat can cause this kind of lag. (There may be other causes, but first thing to do is check for bufferbloat.) To do this use:

http://dslreports.com/speedtest

This measures the latency/lag while data is being transferred. When it's complete, click "Results + Share" and you'll see a report. Send us the link of that page so we can see your results.
Well I have a 27" 4k monitor. On 1x, the text is not readable. On 2x everything is absurdly large.

My windows display settings lists 150% as recommended and it works the best: https://s3.eknkc.com/x/2020/12/25/Bv55iSLhjp.png
The F-117 looked more like Testor's MIG Stealth model.
They never thought the lepard would eat their face.
While I did meet someone else later on and life just kept happening... I do have some hope that someday we will cross each other's paths again. As for where she is... a few years ago, my company offered me a job in a location -- of all places, right in the center of the city where she was living. We've crossed each other's paths a few times, but it's just a situation that either of us were in where we couldn't really attempt to commit into anything.
The preferred style of the title for a post like this is "Snapsmile: help people improve their dental health with machine learning".

Using a questions is confusing and make people here unhappy and may flag your post.

Edit: Do you have a technical post about how your app work? It's easier to get traction here with a technical post.
Yeah this is super easy to do in After Effects
You can add non-Steam games to Steam and get the full benefit of Steam Input as well.
This may be an effective test or it may not, I don't care. It is extremely tasteless to offer this kind of incentive to employees especiay during a year where many are struggling financially. This would be slightly more acceptable if the bonus was actually given to the employees. People who really dont see the issue with this most likely havent been in a situation where a bonus can be a lifesaver.
> Speed matters

I fully agree! But not everywhere and not at all times.

> feels good
> matter of beauty

Well, that's not "matters" as in "must have", rather "nice to have" or "should have". See https://www.librarything.com/ for another example where a slow(er) app with high information density is preferred to a "nice" app (eg Apple Books "shelves" that are next to useless compared to this but sure enough, they are nice and fast).

> playing Doom Eternal the other day and it was just amazing the fluidity I got.

Well, this is where speed truly matters. The whole purpose of a game is to give you experience. Nice UX and fast graphics are a must because it's key to what the game shop is selling you.
Myanmar’s Kyat Beats Dollar as Year of Pandemic Upends Markets
Yes, Im kindof baffled why they insist on a mac mini with such a tight budget. There are linux options too
An official denial will be issued in the form of an apology
Yeah it does integer scaling. I need 1.5x though.
Short answer, yes.

The states are highly autonomous and the laws vary most at the state level, but they vary from city to city within each state as well.

You can already see how this plays out: the protests in Portland were tolerated for a very long time, had they happened in almost any other city I doubt the local officials would have tolerated them for as long. (No comment on whether or not that’s a good thing.)
Utilizing Quantum BlockChain for 6th Generation Neural Networks
Sure it can. Again, see books I linked above. And in many places there are async ways to accomplish what meetings do, such as with Slack, async standups, emails, etc
Binary Search Reconsidered (2018)
Github and git are very different. Github is easyer to use, but doesn't cover all of git's use cases. So actually I'm all for reworking the base commands to support a workflow more similar to GitHub's, but still distributed.
A rant can be useful. The article is just misleading clickbait. Not sure how it got upvoted here.
The PlayPump: What Went Wrong?
That's certainly a concern, though New Orleans is a city with quite a lot of people of color in leadership positions. So the leaders are familiar with how those tools would most likely be used in a disproportionate way against minorities.

There was also a lot of highly publicized examples of the police corruption and abuse during and after Katrina. There's a DOJ report here: https://www.justice.gov/sites/default/files/crt/legacy/2011/...

I'm hoping those things were also part of why it was easier to pass these sort of preventative laws.
Linus' words from the linked mailing list thread:

> I'm very annoyed, because while the multi-root situation can be useful, it can also be confusing as hell. It can cause bisection problems, and it can just cause people to go "WTF?"

http://lkml.iu.edu/hypermail/linux/kernel/1603.2/01890.html

I guess history visualization tools would have a hard time with it as well. But in general, you normally start writing your changes from an existing commit anyways so why not branch from that?
A weather balloon?
CIA does very little guarding national security as far as I can tell.
How's the latency on BT?

I've always avoided using it because of the horror story from early models, but I might pick up a used PS4 controller for PC gaming if BT works well.
Then don't write in Ruby, write in what you want.
I’ll add to this and say that people are mostly looking for validation when discussing problems, and that should always be your first response. If you feel you have valuable advice to give, ask them if they want it and make sure they’ll actually be receptive.
I agree. Technology will soon (within 1000 years) take us to a place where whatever we can imagine we can have in a simulation that is indistinguishable from the real world. Why bother with the real world anymore?

There maybe some cultures that still see value in the physical world, but I'd wager not many.

I also think it's likely that panspermia is a thing. Life is evolving at the galaxy level, it's therefore a little more reasonable to think that we represent one of the more evolutionarily advanced life forms at the current time.
He’s referring to the leaks about NSA putting back doors into algorithms that Snowden leaked. Those algorithms were suspect from the beginning and avoided. It’s possible ones have gone undetected but that’s pure speculation without any kind of proof at this time. It’s also wholly irrelevant to this discussion and just pure FUD. Certificate expiration is needed to make certificate revocation perform well. Otherwise you need to keep the list of all certificates ever revoked whereas with expiration you can ignore checking expired certificates and more importantly revocation lists you download can prune certs that are otherwise expired anyway.

If anything, now that everything is connected to the internet you want shorter revocations (like days, weeks or months). That way the potential for abuse is shorter and the path for renewal is better trodden by organizations (ie less likely to forget about an expiring cert).

[1]
https://www.theverge.com/2013/12/20/5231006/nsa-paid-10-mill...

[2] https://en.m.wikipedia.org/wiki/RSA_BSAFE

[3] https://en.m.wikipedia.org/wiki/Bullrun_(decryption_program)
I think if you have small kids to look after, a partner to share this experience with, and extended family you keep a relationship with, - you have a beautiful life. Maybe just try to be more grateful, once the kids are a little older try to find an hour or two per week to hang out with friend.
I receive an RSS feed on my Thunderbird mail client. There's the whole feed and there are specific feeds with topics of interest from hnrss where I ask questions and learn things from people here, or offer solutions on how we're doing things. I regularly visit Ask HN and chime in when there are questions I may have answers to based on what I know has worked for me (being more productive, management, getting to know a code base, becoming a better individual contributor, writing better code, B2B, building product, building an organization, etc).

Sometimes I'll reply with an "index reply"[0] that contains a collection of replies that are relevant to the Ask HN question.

- [0]: https://news.ycombinator.com/item?id=25367011
Is 7zip really a good format for sharing data? I also use the program for unpacking and I like the context menu integration. However when I send files, I prefer zip because I feel like this is easiest for the recipient to open (no matter if they are using windows, linux, osx, Android...).
Yes, they vary wildly. For example, in a lot of rural areas the only law enforcement is a county Sheriff. There's often a "good old boy" system where people that know the sheriff can do whatever they want, driving drunk is a typical example.

Everything is potentially a different system from how jail works, bail amounts, maximum penalties, typical plea bargain offers, what laws actually get enforced, etc.
One of the tips in "Practical Vim: Edit Text at the Speed of Thought" is to learn touch typing, which is what prompted me to take the plunge. I got a 2nd hand CD of KAZ and within about two weeks I'd got the "I know kung fu" feeling. Productivity definitely improved.

Now if I could only find something similar for learning piano.
Building a Competitive Ladder for OpenRA
Oh wow that’s so interesting! Especially how incomprehensible most of the dialog still is. I just realised this account posted the same video with the non-distorted speech too [1]

[1] https://youtu.be/Jz7FUYRQqfY
Is there any particular reason people would go out of their way to use gcc on macOS? It comes with clang/llvm, which seem adequate.
> But not everywhere and not at all times.

I think you and I differ here because I really don't agree with this. Speed always matters. In fact, it is superlative, the fundamental feature on which other features must rest. I certainly won't use an app that's slow, even if it does more, because I get annoyed at the slowness.
Automate your Bug Hunting using Nuclei – Writing our own nuclei template – Ep-18
Sanctions on the US are inconceivable regardless of what the US does. The pardoning of war criminals goes by with a mere eyeroll.
Unfortunately that reasoning is based on the axiom that "we can't prove or disprove anything beyond doubts" or that "anything might be possible" and this doesn't help us making decisions about solving problems or making informed decisions.

"Let's just stop doing anything regarding climate change because in 50 years we'll have the tech to solve it, we don't know it yet because we can't imagine it."

At some point, as a specie, we certainly can't afford to gamble our survival and culture like that.
What do you do if there are no good pictures of the food?
No, but they're actively working on it. You can mount it as a CIFS share to get somewhat better performance; I believe there are some other hacks to fix specific things like "git status".

https://github.com/microsoft/WSL/issues/4197
Better to train police well.

Tech does not fix getting what we pay for.

Cheap police = thugs

They, we all deserve much better.
Git LFS lacks a "host your own server" setup. That's a big downside. Hosting your own revision history should be simple.
The privacy impact of this is immense, as if you can imagine doing ML training on millions of mugshots to create a model for scanning people's eyes, we've now got super-fancy phrenology. Who needs morality when you have biostatistical markers.

It's conceivable we could probably do the same with gait and voice analysis for other issues as well.
Interstellar travel is possible with 1960s technology. Search for Project Orion. Thermonuclear Orion could reach as much as 10% the speed of light, which is fast enough to reach the Centauri system in a human life span.

Then there is the potential of things like hibernation, or AI that can just turn itself off. The latter would be able to use a less costly but slower propulsion system.

I really don’t think travel implausibility works as a Fermi paradox answer. It’s hard but not hard enough to explain the absence of visitors in a galaxy full of planets in habitable zones.
I know the concept is offensive to us who love optimization and efficiency, but would it actually be impractical, though? A root certificate is a couple of kilobytes. How much space would you need to store every single certificate in history for the next hundred years?
Yes, with one caveat: There are times where you need to send a zip file to someone who does not or cannot install additional tools. I. this case, 7z can cause a “I don’t know what this file is and can’t open it” reply. Of course you can always counter that with “Here’s a zip instead”
This assessment makes sense, many large Southern cities have this same demographic and hence public leadership profile. This is a strong step that may signal other cities (if not already: maybe Atlanta, Charlotte) to follow suit. That I think would be a boon for the future because of the ways such technology can be used against minorities as you point out.
I love that the MFT makes utilities like that so fast. I couldn't imagine working without Everything Search. I've never found anything similar for Linux. I think I could do something with locate and a cron job, but that doesn't get instant updates to its database like Everything does.
10.000 years is a lot.
In the past that’s roughly when agriculture was invented. In the future chances are humans will be either extinct or living in very though conditions. The future is not necessarily always better. It certainly wasn’t for the grandsons of hunter-gatherers that became farmers
Leaked Documents Show How China Censored Coronavirus Information Spread
That should be iOS 10: https://support.apple.com/en-us/HT207177 (iPhone 5 supported, but no 4s).

See also: https://support.apple.com/en-us/HT209143
Concept is interesting.

Needs an option to remove underlines and no dark mode.
Facts are bad business. They don't sell well, people don't like hearing them, they're expensive to get, and provide only intangible benefit to fake facts. Many societies these days seem to be operating just fine purely on fake news, demonstrating the (at least temporary) irrelevance of the truth
If you want a terrible time, have several members of your team not install git lfs, and have them be the main people that commit binary files.

LFS uses some sort of internal filtering and tracking to determine which binary files might have changed. It seems to have trouble deciding if there are actually dirty files that need changed. So you can't just say, "Okay, go find all the binary files that didn't actually get moved to LFS and correct them"

Instead you end up with random moments where you want to commit a single file and git instead detects 1000 png files that it absolutely could not go on without doing something about.

But then the diff is a disaster so good luck understanding that what it is actually mad about is that it wants to move the files into LFS. The only way I finally figured it out was to manually load the object blob and notice one of them was an LFS pointer file.

I personally think git annex handles things more elegantly, but lfs won that battle.
If one day we can solve for how AI is just bias enshrined in software.
Same, and you can still own an actual copy of the software.
> when you no longer chase "breaking" news, you have to provide more analysis

Which is why there's a sea of difference in the quality between an Economist opinion piece (which takes a week to craft), a Bloomberg opinion piece (which takes a couple of days unless it's an expert or Matt Levine), or a standard run of the mill media outlet opinion piece (usually the next day).
Ah, I didn't consider that things would be like that in the US, with unions and puritanism hurting careers. It's nice to get a different view point, thanks.
While I think general awareness of ethics concerns is needed, I think it might also sometimes bias research directions in itself.

I.e., dealing with ethics concerns and/or ethics committees becomes a huge additional workload in itself, so the research is prioritized to minimize dealing with it.

For example, one might stop a research which might help to treat cancer but dealing with the necessary approvals for patient data makes it unfeasible. Instead you switch to a general purpose target domain where it suddenly (unintentionally) could be used for war instead, but being general purpose it does not need to be approved by the ethics committee..
That's certainly one possible way to interpret what he said. Here's another: he wasn't refusing to answer my question, he was sardonically answering it.
Anyone else have the website refuse to scroll at all in Safari?
There are, in fact, some (very primitive) organisms which don't appear to age. They're just not very complex, or large. Which is probably not a coincidence, and suggests that ageing is not (in humans and other complex species, anyway) only normal entropy, but rather an adaptation.

Telomeres, for example, put an upper limit on how many times a cell can divide; much of the anti-aging work is focused on getting around this limit. But, telomeres are an important anti-cancer adaptation. The fact that they limit how many times a cell can divide, and thus how long the cell line can persist, is not a bug, it's a feature, and in fact the primary feature. If you managed to disable them, you would not become immortal, you would probably die sooner (of cancer) than you would otherwise.

It's also not uncommonly the case that changes in society come from the younger generations, who get power as the older ones die off. If Stalin's generation had lived forever, the Soviet Union might still be shooting people who tried to leave. Actually that wouldn't have happened because we would probably still be living under the god-emperors of the ancient empires.

But, a society next door that did NOT have agelessness, which was therefore more able to innovate, would eventually come across the border and kill off the ageless.
Mercurial and Git were both created around the same time in response to the same need for the Linux kernel to find a new vcs.
I developed a facial recognition access and timekeeping system a few years back, people refused to use it so it never got past the pilot phase.
Be warned.
The main problem isn't really that it doesn't require sudo.

If it installed as a user into your home dir, that would be fine.

Changing a shared system-wide path or installing shared system-wide files owned by a user is so fundamentally borked that you should immediately reject anything offered by anyone who suggested to do that.

But the masses of users who made it popular didn't know that and there were/are a lot of them, and the reason it's wrong won't bite many people because their macbooks only have one user account, and so you have a zillion people who didn't know they were getting bad advice and doing a broken thing, and if you tell them now, they don't see it because they've been doing it wrong for years and their house didn't burn down, and they vastly outnumber the people who unserstand the problem and would never have designed something so broken in the first place, and so it just stays both incorrect and the standard.