skysight-inc/HackerNews huggingface dataset:
Justification:

> The ballot argues that shorter lifetimes are necessary for many reasons, the most prominent being this: The information in certificates is becoming steadily less trustworthy over time, a problem that can only be mitigated by frequently revalidating the information.

> The ballot also argues that the revocation system using CRLs and OCSP is unreliable. Indeed, browsers often ignore these features. The ballot has a long section on the failings of the certificate revocation system. Shorter lifetimes mitigate the effects of using potentially revoked certificates. In 2023, CA/B Forum took this philosophy to another level by approving short-lived certificates, which expire within 7 days, and which do not require CRL or OCSP support.

Personally I don't really buy this argument. I don't think the web sites that most people visit (especially highly-sensitive ones like for e-mail, financial stuff, a good portion of shopping) change or become "less trustworthy" that quickly.
> I think the best option would be some kind of cross-application client-side HTML etc...

I think Tauri is trying to go for this - a web app without the whole chromium bundled, but using a native web view
There are none because people can just go on 4chan and post.
They both recently sold AI to every customer by force. (Free ai, increased price)
Canada and Australia are smaller but surely count as industrialized western nations (Canada is like 9th by GDP) whose infrastructure was not bombed to rubble.
Soon we might need a summary of how they managed to fall from grace and others slowly surpassed them.
It's really straight forward -- Do you consider things like liberal democracy, property rights, freedom of expression, freedom of thought, freedom of association, due process, and the rule of law to be essential features of society?

If you don't -- Chinese hegemony and the path it will lead the world down is the one for you.

If you do -- Then American hegemony with all its flaws is something worth fighting for.
Isn't it usually the server's public key that's pinned? The key pair isn't regenerated when you renew the certificate.
> but internal services with have internal CA signed certs with long expire times because of the number of crappy apps that make using certs a pain in the ass.

Introduce them to the idea of having something like Caddy sit in front of apps solely for the purpose of doing TLS termination... Caddy et al can update the certs automatically.
As I said in another thread, basically that will kill any possibility to do your own CA for your own subdomain. Only the big one embedded in browser will have the receive to have their own CA certificate with whatever period they want...

And in term of security, I think that it is a double edged sword:

- everyone will be so used to certificates changing all the time, and no certificate pinning anymore, so the day were China, a company or whoever serve you a fake certificate, you will be less able to notice it

- Instead of having closed systems, readonly, having to connect outside and update only once per year or more to update the certificates, you will have now all machines around the world that will have to allow quasi permanent connections to random certificate servers for the updating the system all the time. If ever Digicert or Letsencrypt server, or the "cert updating client" is rooted or has a security issue, most servers around the world could be compromised in a very very short time.

As a side note, I'm totally laughing at the following explanation in the article:

47 days might seem like an arbitrary number, but it’s a simple cascade:
- 47 days = 1 maximal month (31 days) + 1/2 30-day month (15 days) + 1 day wiggle room

So, 47 is not arbitrary, but 1 month, + 1/2 month, + 1 day are not arbitrary values...
It makes end to end responsibility more cumbersome. There were days people just stored MS Frontpage output on their home server.
> Do you consider people being deported without trial to be something "controversial"?

Is there, in fact, significant controversy over it?

Then, yes, it is controversial.

> I think most people consider bans on such things to be a basic principle of british common law

I don't think most people have any idea what “british common law” is, much less have a particular opinion about what it has to say about American immigration policy. And, AFAICT, British Common Law at the point it was last relevant to American law, that is, at the time of US independence, was somewhat unsettled on the matter, with leading scholars disagreeing over whether the power of removal was purely discretionary, required stating good cause, or might be subject to more stringent limits as to justification for certain aliens, see, e.g., the discussion at https://constitution.congress.gov/browse/essay/artI-S8-C18-8...
For anyone who used both, how does this compare to superhuman?
Right now it seems to be pretty simple. It's free for most usage and has some AI features.

Edit: according to the pricing page, Notion AI can organize your inbox if you have the Notion AI add-on. Not quite sure if you can do this on free to some amount.
After Forty Years, Phish Isn't Seeking Resolution
No, but this is close: https://www.wis-tns.org/object/2024ass
China orders its airlines to halt Boeing jet deliveries amid US trade war
> “What sort of information would make it likely you could see this in a different way?”

That's the argument to falsifiability, put in human terms.
Siri poped up and suggested me to set a 7 minute timer yesterday evening. I think I did it a few times in the week for cooking or something. This is a pretty stupid suggestion, if I need it I would do it myself.
The "Segregate-and-Suppress" Approach to Regulating Child Safety Online
Related blog post by the same author, Eric Goldman:

[1] Why I Emphatically Oppose Online Age Verification Mandates - https://blog.ericgoldman.org/archives/2025/04/why-i-emphatic...
Who said the following, Garry Tan or Donald Trump?

“Soft-on-crime policies have turned SF into a free-for-all. Shoplifting, car break-ins, and open drug use aren’t victimless. We need a DA who’ll enforce the law and cops who aren’t afraid to act.”
I’m talking about the part where he talks about the government funding indirects specifically, not the research funding in general.

> A key component of this U.S. research ecosystem was the genius of the indirect cost reimbursement system
Can someone explain this? They just reduce the English text during pretraining to balance it out? Shouldn't that harm every other benchmark though?
The US provided billions in aid and resources under the Marshall Plan to rebuild Europe and especially Japan after the war. And provided billions again to Korea after the Korean War. Japan and South Korea obviously made the most of it with their massive science and technology industries in the post-war era.
> through their internal CA

Nope. People will create self-signed certs and tell people to just click "accept".
For the same reason that BitTorrent doesn't work: providing a service costs money, and when there's no way to collect money then you get no service.
There are periodic amnesties granted every so often. The prior administration also radically expanded temporary protected status by hundreds of thousands of people to protect them from deportation. Near the end of his second term, Obama attempted to do this for millions of immigrants. We also issue I-601A waivers, the U visa, and of course the mass abuse of the asylum system.

I think this should be pretty straightforward: we need a somewhat more streamlined immigration system. However, we should still cap the overall proportion of immigration any country can represent, should limit uneducated, unskilled labor, and should block anyone who immigrates illegally from ever obtaining lawful permanent residency, any benefits or privileges, and certainly citizenship.
“If you’re not changing your mind, it’s likely you’re not actually having an argument (or you’re hanging out with the wrong people.)”

Or you’re the toddler. We all are at some point
Because most of the sites on the internet store much more sensitive information when compared to the sites I gave as an example, and can afford 1/2 certificates a year.

90 days makes way more sense for the "average website" which handles members, has a back office exposed to the internet, and whatnot.
Thanks for sharing that Jof! Glad it's helpful :)
Then put your content behind a paywall. Bakeries typically aren't free.
>As I said in another thread, basically that will kill any possibility to do your own CA for your own subdomain.

like, private CA? All of these restrictions are only applied for certificates issued under the webtrust program. Your private CA can still issue 100 year certificates.
I hoped to get my @notion mailbox, but turns out it's just a Gmail client.
While currently it’s open season on the golden goose in America, the golden goose has been under attack for decades. Academia has a strong publish-or-perish culture that I believe is stifling, and industry has become increasingly short-term driven.

Ironically, one of the frustrations I’ve had with the research funding situation long before DOGE’s disruptions is the demands from funders, particularly in the business world, for golden eggs from researchers without any regard of how the research process works.

A relevant quote from Alan Kay:
“I once gave a talk to Disney executives about "new ways to kill the geese that lay the golden eggs". For example, set up deadlines and quotas for the eggs. Make the geese into managers. Make the geese go to meetings to justify their diet and day to day processes. Demand golden coins from the geese rather than eggs. Demand platinum rather than gold. Require that the geese make plans and explain just how they will make the eggs that will be laid. Etc.” (from https://worrydream.com/2017-12-30-alan/)

I dream of a day where we see more places like the old Bell Labs and Xerox PARC, and where universities strongly value freedom of inquiry with fewer publication and fund-raising pressures. However, given the reality that there are many more prospective researchers than there are research positions that potential funders are willing to support, it’s natural that there is some mechanism used to determine which researchers get access to jobs and funding.
Plus, all carriers in Brazil exempts WhatsApp from data caps (zero-rating). They are working on remove other apps from zero-rating, but WhatsApp is harder to since it's synonymous to “messages” here and alternatives are expensive (SMS) or not as near widespread (Telegram is a far runner-up mostly used for its semi-public, huge groups).
I think I got the pitch meaning immediately: this is a specialized ai tool for code review.

That said, that doesn't sound like something very useful when I already use an ai code editor for code review. And github already supports automations for ci/ci for ai tools for code review. Maybe I just don't see value in an extra tool for this.
What are you basing that on? Instagram is clearly their preferred app at least in the US. It definitely bolstered their business. And they obviously invested heavily into it post acquisition.

I dislike meta but wouldnt call their ownership of instagram anti competitive monopolistic.
4Chan was hacked, its source code was leaked, admin emails were leaked
Point of Order: online isn't the real world and drawing conclusions about people's motivations and desires based on online interactions is deeply flawed.
This is true, and at the same time, this article is absolutely rife with unsourced, unserious points. However insane Trumps plans, the fundamental "facts" presented here are largely a joke.

> Chinese workers work longer hours more happily and they’re physically faster with their hands; they can do things that American labor can’t. It’s years of accumulated skill, but it’s also a culture that is oriented around hard work and education that the United States no longer has. In China, there are no people who are too fat to work. The workers don’t storm off midshift, never to return to their job. You don’t have people who insist on being paid in cash so that they can keep their disability payments, while they do acrobatics on the factory floor that the non-disabled workers cannot do.

It's an actual joke to present something with such a derogatory view of the median American worker with no data to back it up. Most of America's "labor class" is in fact Mexican, the country with the highest annual hours worked per year. Secondly hours worked does not relate directly to productivity. American workers are the most productive in the world. [1]

More importantly, _we don't manufacture like this anymore, even in China_. Doing "acrobatics" on the factory floor is now obsolete. Much of what's said here fails to acknowledge that we would _not_ build our supply chains the same way as China does. China had a surplus of human labor (one that's facing an impending demographic crisis) and so used human labor in ways modern western countries would not and do not.[2]

[1] https://www.weforum.org/stories/2018/01/the-countries-where-...
[2] https://ifr.org/ifr-press-releases/news/global-robotics-race...

Reproducing these supply chains is more possible than this article states. Doing it via destroying our economy however will not work.
That is absolutely not the case even for a moment. No white leftist seeks out black conservatives like Thomas Sowell. Not even for a moment. Leftism is a monoculture that uses cancelling as a way to force ideological uniformity.
Did you play with a controller by chance? Asking because I prefer first person view games on PC
You bring up a good point. It's interesting that YouTube at least doesn't do p2p for their non-DRM content.
How do people respond to these things when it seems like Figma's lawyer here just sees a string they think they own... doesn't seem like they did much thinking already?
Is this ironic? Because if this is serious, note that maybe you are the stubborn person here, the one that is wrong, the one that must be nudged to the right direction and join them eventually.
I want a middle ground. Identity verification is useful for TLS, but I really wish there was no reliance on ultimately trusted third parties for that. Maybe put some sort of identity proof into DNS instead, since the whole thing relies on DNS anyway.
"outdated certificate data" would be domains you no longer control. (Example would be a customer no longer points a DNS record at some service provider or domains that have changed ownership).

In the case of OV/EV certificates, it could also include the organisation's legal name, country/locality, registration number, etc.

Forcing people to change passwords increases the likelihood that they pick simpler, algorithmic password so they can remember them more easily, reducing security. That's not an issue with certificates/private keys.

Shorter lifetimes on certs is a net benefit. 47 days seems like a reasonable balance between not having bad certs stick around for too long and having enough time to fix issues when you detect that automatic renewal fails.

The fact that it encourages people to prioritise implementing automated renewals is also a good thing, but I understand that it's frustrating for those with bad software/hardware vendors.
My parents did that; they managed to win the "go to bed at a reasonable time" argument, but never were terribly successful with the "eating vegetables" one. It didn't help that my dad almost never ate vegetables and even fairly young I was able to point out the hypocrisy.

I still don't eat a lot of vegetables; my health vitals are generally fine when I do bloodwork, as is my heart health when I get that checked so hopefully I don't end up in an early grave.
Have to agree. If you want to limit who sees your content, put it behind a paywall or some sort of subscription.
https://news.ycombinator.com/item?id=43677917
Still feels too much like Web 2.0 soulless template based sites- https://mmm.page/ is much better for unique human made sites- especially if you use the drawing tools.
Washington has "committed intimate relationship" which does confer community property and is similar to a "common law marriage" so if people think that being in a long term relationship and not getting married is a way to "protect their property" then that's a fallacy.
I'll be keeping Superhuman thanks. But good for Notion.
By external I mean anything outside the compiled executable.

Or anything that you have to use ipc like sockets or shared memory.
Show HN: Git First Commit – Find the first commit of any GitHub repository
Some place not run by a publisher with huge Chinese backing and millions of eyeballs? Like Fediverse, maybe? Fosstodon would be good for a lot of folks here. Just remember to not use the public timeline unless you're fine with 4chan levels of content, even on moderated stuff like fosstodon.

Good luck in this brave new world
45 more months for the SANE part of America to try and come up with a populist candidate that will appeal to the red states. Although I fear it’s not possible to win the presidency without Russian help anymore.
Probably Tan? You are wholly ignoring my point: these are factual and obvious issues. Identifying them and proposing obvious solutions isn't being a Trump supporter. Trump does not have a monopoly on every position besides radical progressive.

Said progressives had their chance - more than enough chances - at fixing the issues in SF "their way". When one solution fails, it is natural and sensible to try others. This is why you can see SF voters shifting their positions too. I do not think that an incredibly leftist city magically turned into trump supporters.

It's not helpful for the left to act like Trump has a monopoly on legitimate use of law enforcement and maintaining some level of order.
Neocities is more like Geocities than this is https://neocities.org/
When Life Gives You Java
Ofc, but you have to be quite techsavy to know this and to set this up. It's also cumbersome in many low-tech situations. There is certificate revocation, I would really like to see the threat model here. I am not even sure if automation helps or just shifts the threat vector to certificate issuing.
You might be surprised to find that, in person, people are quite amenable to good faith discussions. It's the internet where slam dunks reign.
In the case of illegal immigration, expedited removal [1] was established in 1997, under Clinton. It qualifies a number of different groups for immediate deportation without a hearing, including anybody who has been in the country for less than 2 years - which would include the individual in this article.

[1] - https://en.wikipedia.org/wiki/Expedited_removal
Our founding fathers dressed as indians to throw tea into the Boston Harbor. You and your ilk demand the bank account information of anyone opposing your views.
Is it possible the danger you think we’re in isn’t real? And are you open to that?

I’m not really what you’d call “on the right” but my left-leaning friends seem convinced democracy is teetering and to me that seems to be mostly just propaganda.
Cohere Launches Embed 4
Not to be "that person" but in the game space there is already a "t-engine"[1], AKA ToME (Tales of Maj'Eyal) engine, for building rogue-likes in Lua. It seems to go by "t-engine" primarily, but it's begging for confusion.

[1]: https://te4.org/
>[…] it's socially awkward for them if they don't respond

Out of corporate contexts, email is only used to register for services, newsletters, and recover passwords. It's a shame, I prefer email over messaging for anything non-urgent.
Modern CMake
They MITM the key exchange step at the beginning, and now they do have the keys. The thing that prevents this in TLS is the chain of signatures asserting identity.
When you reach "The cliff of Irrational Arguments" you need to stop and reevaluate what is the purpose of the discussion.

There was a joke about the man who was threatening to jump off a cliff. No professional could convince him otherwise with sound arguments. It took a another mental patient to make an irrational threat, cut the cliff down, to scare him off.

Edit to add link:
https://idiallo.com/blog/the-cliff-of-irrational-arguments
I mean you can't when a non-insignificant amount of people have magnetic metal in their body.
We have been redirecting our toddler pretty successfully in most “conflict” situations. Instead of telling him what he can’t do, give him a few options of things he can do. It’s not appropriate for all situations but a great strategy for drawing focus away from whatever is causing contention.
Non-Transparency Resumed After Pirate Site Blacklist Publicly Exposed in Error
so far it seems like better routing protocol, the ability to set what path your packets take if needed, and some different ideas about roles on the network. i’ve been playing with it for a week or so and people at my hackerspace have been contributing and i’m excited to see how it does, but it’s not good enough to the point where everyone is just going to switch over. some board support and polish needed before that happens imo
Only for Gmail? no thank you.
Remember when people thought Superhuman was the next thing?
No, I do not, but I also do not much stock in America's policy of spreading democracy. I believe that America will do best by setting a good example at home, and it is failing in this regard. China is obviously not a democracy.

My fear is that people will look at China's might and economic success and conclude that democracy is overrated.
What’s worse, many real brands you recognize sold off their brand name a while ago so you’re not even getting the product quality you might expect.
That's not the average website, that's a corporate website or an online store.

Why do you think all the average web sites have to handle members?
> If you’re regularly having arguments with well-informed people of goodwill, you will probably ‘lose’ half of them–changing your mind based on what you’ve learned. If you’re not changing your mind, it’s likely you’re not actually having an argument (or you’re hanging out with the wrong people.) While it can be fun to change someone else’s position, it’s also a gift to learn enough to change ours.

What kind of arguments are these? Are these "this episode of TV was not good" or "the earth is flat" or "I think rent is too high"? This statistic seems a) made-up, and b) as simplistic as conflating all "arguments" into one group of indistinguishable arguments.
It’s stated as fact but what’s the causative link for indirect cost administration being the key? If those costs were made direct by university labs having to compete with commercial labs by requiring researchers to explicitly rent facilities why would that break things?

About the only argument I can see is transaction costs. And those are a factor but that incentivizes university labs because they have facilities for teaching as well so they can bring transaction costs low.
Why is the expansion of powers permanent? Do you think they’ve never been reversed in history? That there weren’t times when {insert government branch here} didn’t have more than it does now?
I recommend the book How To Talk So Kids Will Listen And Listen So Kids Will Talk.

The same basic techniques work on toddlers, teens and many adults.
Mutual preferences, very Dale Carnegie.
The previous time the alien enemies act was exercised (putting Japanese Americans in camps during WW2) is widely viewed as having been highly inappropriate and regrettable act. Ronald Reagan officially apologized and paid $20K to the families of each person victimized.
It isn’t that much of a spoiler. You find all this out in the very first part of the game.

If that’s enough to ruin the game for you, then it’s not much of a game. Even if it is a big spoiler for you it’s not that big of a loss IMHO - there are so many great games and so little time. The time you don’t spend playing OW you can spend playing something else.