skysight-inc/HackerNews huggingface dataset:
But in theory the same CA infrastructure as used for the web could be used. The SSID of the network would be interpreted as the "domain".

So if I try to connect to SSID example.com securely, I would verify that the AP can identify itself as example.com (based on the CA roots which I trust) - exactly the same way as a web browser would if I tried to connect to https://example.com.

Or is this already supported but nobody uses it?
Elaborating on this, in case anyone wants to know more details (I'd edit the original, but for some reason HN decides you can't edit comments after an annoyingly short time limit.)

Say you have N free pins on your controller, and you want to read K keys. Find the smallest integer number of columns such that log2(k/c) + k/c <= n - so, for example, with 108 keys and 20 pins, you can have 7 columns, with 16 rows (keys/column). This means a 3-bit mux, which is relatively easy to find.

Tie each row via diodes to 1 key in each column. Then tie each row to a pin on the controller.

Tie each column to an output of the mux, and tie the input of the mux to Vcc. You'll also probably want to tie each column to a grounding resister as well. Maybe a small cap. (Or just use the chip that does this directly, I can never remember the name. Output selector? Something along that line. "An IC that outputs Vcc on the selected pin and ground on all others".).

Then connect the selector of the mux to the remaining pins on the controller.

To operate, just loop through all valid outputs on the mux repeatedly - probably with gray code, as that way you don't need to make as many pin transitions. Each time you change the output of the mux, read the values of those keys. You'll probably need a mapping of row/column -> key, as well as the previous values of keys. Any time the value of a key changes, output the appropriate packet. (Note: most of the time most keys don't change. As such it may be faster to do a quick check that "old column values == new column values" before checking bits one by one.)

As long as your scan rate is sufficiently high, you shouldn't miss keypresses. (And if you want to get fancy, you can actually borrow a technique from dRAM. Have each key connected from ground to a cap (per-key) to a diode to Vcc. Potentially with a resistor, although the diode might be enough. Then do the above row/column, but tied to the caps / diodes as opposed to the keys themselves. This way you'll be able to read that there is voltage on the cap even if your scan missed when it was down. It also provides a certain amount of debouncing. The disadvantage is that there's a whole lot more per-key.)
Certifying as CEH: understand vulnerabilities, TLS, etc. (2012)
24-28 hrs, but they are common after your first year when they are prohibited. Often 2-3x weekly.
Sorry for being pretty brief earlier, as I was on a cell phone. Here's how a police report can help him, in a few ways:

1) In dealing with the company that is billing you, a police report sends a strong, costly signal that "This is not a routine commercial transaction! A crime has been committed!" which will throw an exception in the billing process that will get caught elsewhere in the company. The accounts receivable department is scored on collecting revenue. That is, to a first approximation, the only thing they care about. The legal department, anti-abuse department, etc etc, is not scored on revenue impact.

You're much more likely to have a productive conversation with them that involves waiving the $4k than you will with Accounts Receivable. AR's calculation goes something like "We'd prefer getting $4k over getting $0." The rest of the company thinks "We'd prefer writing off an uncollected invoice -- costs us $0 -- versus spending hundreds of dollars an hour dealing with the legal process for an unbounded amount of time."

2) Assuming that European credit card providers work on the same heuristics as US ones, "I filed a police report" means their response to your chargeback will virtually invariably be "Wait, an actual criminal case? Eff that, sorry merchant, we do not get paid to litigate on your behalf. Best of luck figuring this out after we give the customer their money back." (Conversely they use police reports as a bar for treating claims of fraud seriously, for example, in the case of "family fraud." If you ever say, for example, "My wife bought that but I didn't let her?" the very next question will be "Have you filed a police report against her for stealing from you?" and if you haven't the very next thing they'll say will be "Well, work it out with her then -- the charge stands. Thxmuchbye!")

3) "Theft" is such a wonderfully useful word for dealing with insurance companies. (HNers might say "No theft happened! It was actually..." No, guys, really, theft happened.) It may be covered under your homeowner's insurance -- depends on the particulars of your policy -- and would almost certainly be covered if you had business insurance. It also may be covered under the VPS provider's insurance, in which case they may decide that rather than trying to ring water from a stone (you) that filing a claim is the quicker way to get paid. (I rather doubt, as a businessman with an insurance policy, that they'd jeopardize their future insurability over a $4k claim, because that is tiddliwinks, but risk management is exactly why that policy exists.)
Well, this is interesting to hear, thanks for explaining. I also use colemak, but I've been leaning towards using a wide layout (swapping some punctuation from the normal position to the centre of the keyboard) - it's from this perspective that the typematrix looks unappealing, but I'm happy to believe this is just a misleading intuition. I do like the typematrix movement of enter, backspace etc. a lot, that part is undeniably an improvement.
In the end Stripe could not work with her or other startups that feature "a naked person" on the product they're selling (the article seems to claim), is that correct? I'm assuming then pay-for-porn sties are not permitted business with Stripe either?
That's definitely possible. There are already a few startups that use the same method to track analytics and repeat customers.
Currently they say performance and performance again. Sometimes they say nothing. Sometimes there is a good reason, sometimes there isn't. Sometimes they want to protect, sometimes they want to attack. That's the problem when you give one institution the job to do both.
Thanks for the reply. I've actually removed it from my system after seeing that all it would do is remove inactive memory.
Can I raise my hand here and concede that I do tend to shun people who want to talk on HN about the "biological and cultural" differences between sexes and races? No apologies. Just wanted to confirm your suspicion.
Most PDF readers have a presentation/full screen mode for this (even pdf.js in Firefox does). The nice thing about them is that PDFs work nearly everywhere (if they are made that way, which in this case appears to be true).
I enjoyed this film, but I recall that at the end it somehow, bizarrely, tried to connect the Camorra with the 9/11 terror attacks.
http://www.kamaxcitra.com/
Elon Musk: Bitcoin as a Legal to Illegal Bridge
More of a board for adult affiliates.
systemd is not implemented as a single process.
Make sure Elastic Search is not accessible from a public IP address (this is what likely got you in the mess to begin)
It's an interesting idea but it fails on slow connections, network problems etc. As an attacker I might even start b6 sending a request for something trivial (favicon or something) before I receive anything.

Also as an attacker the effectiveness of your mitigation depends on what it is I want - by this point I have some plaintext and know what protocol you're using.
Technically, I think it is only saying that all crytpo you know is not broken is broken.
First part of Impulse Tracker Source code goes online
20 Years of Impulse Tracker, Part 3
Invisible Risks, Emotional Choices – Mammography  and Medical Decision Making [pdf]
Found on the Rust subreddit.

https://pay.reddit.com/r/rust/comments/2jm4vq/rust_0120_vs_c...
Their analytics is top notch though.

The whole thing is based on what pays, and from what I've heard from friends in the industry the last couple of years "If it's not gay it doesn't pay". There is simply so much free stuff around that there's not much to be made in the mainstream.
I'd put it like this: variation among members of the same sex, race, country, age, etc. are very often larger and more important than aggregate differences between these groups. Ignoring this fact isn't just bad politics, it's sloppy thinking.
What I've heard is that residency spots are restricted in number by Medicare (who pays hospitals that train residents) under heavy lobbying by the AMA. The rumor is that this is done to artificially restrict the number of MDs in the country thereby raising everyone's salary.

Don't personally know if this is true, but if it is it's shameful, especially given the "physician shortage" crisis. Or maybe crisis should be in quotes.
Incidentally, since many HNers probably come at this from a mental model of "Anything which appears on an invoice is non-negotiable and simply must be paid": a B2B service provider which collects payment after services are rendered is knowingly taking on credit risk and has already priced non-collectability of some accounts into their services. You may be overestimating how much drama is required for someone at their company to say "Wow, really? OK, sorry about that. I'll write it off."

This is one of many, many, many reasons why we don't generally do cost-based pricing and, when we do do cost-based pricing, the markup is absolutely phenomenal. It has to include risk premiums. As long as it do include risk premiums, you don't have to sweat the small stuff like e.g. an uncollectable $4k invoice. (n.b. Small stuff! $4k hiccups are utterly routine events and largely dealt with by processes rather than by treating them as sudden emergencies, even if they feel like that to natural humans.)
No. Fact: the insurance industry dislikes innovation, and innovators dislike the insurance industry.

Insurance seems ripe for disruption, but by its very nature it is extremely risk-averse -- and that's not something that will change, nor should it. It's also a heavily regulated industry with thin margins, which favors the enormously capitalized incumbents with years of actuarial data and armies of experts.

On the other hand, because insurance operates with thin margins yet deals with gigantic amounts of money, what seems to be merely an "incremental improvement" can potentially make you quite wealthy, and if you could somehow figure out how to genuinely disrupt a significant insurance market the rewards would be commensurately mind-boggling.
Considering that memory management is one of the headline features of Rust, memory use is certainly important factor to analyze.
Make your next trip social, with Bloompy
> Debian lets choose between the Linux, FreeBSD, and Hurd kernels, but choosing an init system is too much?

Unless you actually want to use one of these kernels that are not Linux. Hurd has nerver made it into a stable release and kFreeBSD is on the verge of being dropped as well.

There is only so much manpower and supporting every possible init system on every possible architecture on every possible kernel is getting out of hand.
Sure; but since you raised your hand could you also share your reasons? I don't wish to debate them. I just can think of several people could have and would like to know what are yours.
Because when you're a sysadmin, you often have to write init scripts for the software you have to run.

Typically, you run servers for a company, the developers wrote a web application and the whole point of the server is to serve that app. You need init scripts to start, stop monitor this app. The choice of init system makes a big difference in your daily life.
Can someone here explain further how you see the road to obtaining the CEH credential? And how the knowledge helps to assure life and work on the web?

I'm impressed lately with the need for and yet the complexity of security measures for online applications. The CEH credential seems like it covers much of relevant information. It looks versatile in the chart of DOD approved baseline certifications in information assurance. That chart is reproduced in many places -- here is one (https://www.isc2.org/dodmandate/Default.aspx).

I'm also concerned that at first glance the availability of CEH training is "if you have to ask, you can't afford it." I was glad to see this article approaching the CEH process more from the ground up.
I don't believe that BTC has enough market penetration to solve her problem. When I've interviewed potential users concerning my product, the response has been

"Isn't Bitcoin a scam? I saw on the news it is a scam"
"I want to just use my CC"
"What is Bitcoin?"

That said, I still will launch with BTC support. Because I believed the hype and coded the solution before doing interviews...sigh
Actually LLVM vs GCC backend benchmark.
Really cool. Great layout and interesting articles. I'd post this on r/gaming and see if it gets some traction.
Hey, just read bytecode, then. As small and fast as you can get.
Yes, I think it's a great idea.

First of all, 3 million rows a month is not that much from a database point of view - if evenly distributed (though I'm sure it's not), it would be about 1 per second. (It is impressive to me from a business point of view though). You don't need Redis's throughput, and you are hitting Redis's limits with respect to memory.

1) This is _exactly_ the use case which relational databases were built and optimized for (fixed schema, OLTP, presumably some analytic queries). You might want to normalize the data a little (e.g. the menu_items, employee_name, pos_type & pos_version), but you don't have to - though this would enable faster & richer querying.

On your schema changes: I bet you'll be much happier using a relational database which takes care of this stuff for you, then you will be implementing it yourself in Redis. You probably won't need partitioning either. If you do end up needing partitioning, I would guess your DB is "trivial" to partition by restaurant.

I suspect you'll also find that a relational database stores the data more efficiently, particularly if you normalize a few things. Your data will probably fit into RAM again, but a relational database can cope even when it doesn't.

2) Any relational database would be a great match for this, and would allow rich querying (e.g. by employee, by date, by restaurant). My personal bias is to prefer Postgres.

3) I don't see what Redis is getting you here. It doesn't support rich querying, is memory bound, and you don't need the throughput it promises.
As pointed out in the reddit thread, this may be more a measure of the llvm backend used by rust to the gcc backend. A more accurate comparison would be against clang.
You haven't really refuted any part of GP poster's points. There's no technical info on the site, there's no telling what kind of user data they may be taking and doing who-knows-what with it. This is solid grounds to stay away from the product.
I've put them on Kivo, which might be easier to view and so people can annotate them.

https://kivo.com/p/h985rFcI
I've only started to investigate rust for server side programming ( websocket in particular) but saw many discussions about the limitations rust has regarding parallel programming.
Yet, iirc servo did parallel rendering of html page, so that seems a contradiction. Anyone here knows about that ?

Specifically, i'm currently hesitating between golang and rust for coding a small Websocket chat server. I'm ready to use beta code because rust seems more promising to me in the long term than golang, but not if the language itself has severe fundamental limitations on server side programming.
There's a small USB stick with Intel's Bay Trail CPU that can run Windows 8.1
They are not, anything classified as "High Risk" cannot be serviced by Stripe, Balanced, Braintree, etc.

Again, from my research, it is because the partner banks will not allow them to.
I agree. One can accept this fact without ignoring that the aggregate differences between groups exist and are sometimes relevant. Otherwise we wouldn't cluster people into those groups.
In my site (http://alephz.com) I separate subscribers and just people with an email for password reset and important notices.

I am totally honest with user that subscribe and let them know that they will receive a daily update on new content in the site. It works pretty well, actually. A Relatively good amount of users sign up, and I get almost no unsubscribers.
Thanks for the support and the nice comments, appreciate it :)
I agree. Through PECL, PHP is soon going to have curve25519 support http://pecl.php.net/package/libsodium

There's already a Node-Sodium package... https://github.com/paixaop/node-sodium

Why can't browsers support it natively? (e.g. through NSS)
why aren't 'know networks' gps-geofenced on smartphones? You have GPS, if your previous 'known network' (say, home) was in location X, it should not automatically connect (or even try to connect) to it at X + 20 miles.

This way you should be able to keep your phone from connecting automatically to (or even looking for) a network that shouldn't be there in that location in the first place, and if you always tether to it it would work for your laptop too...
I see a lot of comments here presenting HSTS as some kind of silver bullet for preventing MITM attacks. While it does help, it's not impenetrable. If a website hasn't been preloaded into the STS preloaded list, then the HSTS header can be stripped on the first visit and the client will never upgrade to SSL.

The only foolproof way to make sure you're not being MITMd is to visually verify that the domain checks out and that you are indeed connected using SSL.
I agree. However sometimes it's good to do tiny side projects in a language. This allows you to learn, see if it's really nice, help the language and its ecosystem to develop and become stable.

For use outside of production it seems okay. There are two Sinatra/Flask/Express style web frameworks (Nickel and Iron), a browser engine (Servo), a game engine (Piston) actively developed. So if you have interest in any of those or interest in implementing something like that you might be able to make your project shine. Also really nice on your portfolio if you ever want to get a job where Rust is already in use.

Or one just has fun with it. :D
If anyone has the time and skills to implement these curves in NSS, I'm sure that the Firefox and Chrome security teams would be more than happy to enable them!
This would, however, require a rather radical change to the copyright law. Copyright seldom protects the subject of a photo, and the instances where it does (certain buildings, mostly) are a tangled mess of conflict at the moment.

The moral rights of the subject currently fall under publicity rights and so on, separate from copyright, and are difficult to prosecute in these cases.
Actually, systemd is pretty awesome for servers. I wrote a simple program that outputs to stdout and ran it under systemd.

* it automatically cares about starting it
* it automatically puts the programs stdout into the journal (from which I can filter the output of my specific program without having to syslog() everything)
* it allows me to run the program as user with one line in the INI unit file
* it allows to make the users home directory read-only (or even inaccessible), so in case someone takes over, there is only so much they can break
* it can create a private /tmp for my program

Actually, for desktops I don't care but for servers systemd is pretty awesome.
https://bugzilla.mozilla.org/show_bug.cgi?id=957105

Looks like there's already a bug in Mozilla's tracker.
Hm, okay. Though, it's not clear to me why porn sites en masse would be classified as "High Risk"? Are you sure this is always the case? How are current popular porn sites doing this?

And, now that Stripe is quite big, don't they have some leverage over the banks to be able to say they do want porn sites et al. to be able to work with Stripe?
In Cambodia coagulated pig and chicken blood are common, especially in soups and rice porridge/gruel.

I eat it daily. Pig blood has a firmer texture and a more neutral taste -- it's comparable to tofu in both regards. I strongly prefer it to chicken blood.
Good points. As for compression: I think most people compress logs post-rotation. So you'll be unlikely to have a corrupted compressed log. Either the file will be compressed, then then original removed, or compression will fail, and the original will remain untouched.

It's more of an issue with whatever is written to disk by running processes. As you point out, it's debatable whether or not unicode/ascii vs "binary" is a sensible distinction ... I'd say taking a hex-editor to a mangled but mostly ascii text file is easier than some (any) binary format, but perhaps you know of some easy-to-use tool that will take a file-description and give you back data? Things like figuring out integer encoding and offset for timestamps across different files etc... is much easier with a rather redundant ascii timestamp than some binary number?

If your filesytem eats your files... well then that's a different problem.
actually, sweden's been tweaking their laws to encourage men to take more because there's still a large disparity between what men and women use.

http://www.economist.com/blogs/economist-explains/2014/07/ec...
Depends on the kinds of parallelism you want. Rust has built-in support for parallelization, but tasks are mapped 1:1 to threads. Currently M:N threading is also supported, but that will be removed. Consequently, applications requiring lots of tasks (including highly-concurrent websocket servers) won't do well with the built-in mechanism.

Context: https://news.ycombinator.com/item?id=8459888
I am not sure why debian needs to force replace sysvinit, can't they have systemd-debian distro that will have all the shiny stuff in it? and maybe have it grow and if it won't go down with their userbase then they can discontinue it?

Go read the arguments, there are many reasons why they decided to switch. A big part of it is that Gnome/KDE and other upstream software is already dependent on systemd, so keeping SysV means extra effort to fix that.

C is very insecure for daemon coding with all other options why no use go for example?

What do you think the current init system is written in? That's not a reason to keep sysv.
You answered your own question: "journo".

Our standards for acceptable behavior for private citizens is different based on occupation (or ostensible purpose in life).
If you think the place names being in French is obvious, you've probably never been to Belgium. As most places in the country have names in both of the national languages, many signs with place names on them carry both.
Agreed. I would do a small project just for fun.
your thoughts on how this relates to or serves a different usecase than yeoman?
They keep saying China is a big enemy, so it would not be surprising if they have growing resources to start exploiting these kinds of vulnerabilities as well. Should stop backdooring stuff in the name of terrorism because the economic and political damage of enemy states with growing IT resources is far worse IMHO.
That may well be, but the benchmarks game measurements are not a good basis for that analysis.
Creator here! I'd love any comments if anyone has them. This project is particularly useful for me so I was hoping others would find great use for it as well :)
For side projects I have found App Engine to be the best choice. The free quota gives you time and space to develop and explore if this project is of any worth. And if suddenly there's an explosion you really don't need to do anything other than enable billing... (of course, giving that the design of the model is scalable)