skysight-inc/HackerNews huggingface dataset:
But note that only works if the manufacturer can choose the name without an issue from the customer. For things like network appliances in larger companies that aren't going to want [generic number]manufacturer.com but want [my name].corp.[my company].com, you're stuck.
Thanks for the link to the security-now show, good stuff and does a good job of explaining the reservations in the crypto community around Telegram. I'm now looking at other options.

I do like that Telegram launched with an API, but ya, it sounds like security isn't something that can be trusted. Thanks for the informative link.
Wings of St. Nazaire
The textual content of this article is spot on. However i do have to wonder why they chose to show a photo with code that indents 11 levels deep at the top of an article about code quality.

I know it's hard to teach programmers how to avoid situations like that, and how to avoid or reduce duplication, because i struggle with this with most of my colleagues. However in a company where code is the bread and butter of everything the company does, i'd expect things like that to be addressed before tabs-vs-spaces.
Startup newsletter predicts which startup will succeed and fail
If a newsletter predicts which startups will succeed and fail, and if it is right 99% of the time, will people pay for it? can the writer make money as an adviser? How much money.

I want to create such a newsletter with 99% accuracy, thank you.
I think you're radically underestimating the entrenched interests that are at play here.
The Apple Airports were at one point NetBSD based, not sure if they still are.
Ground Control to Edith Yeung: Take Your Mobile Apps and Put Your Helmet On
No, most historians agree that the decline of the Harappan civilization and the arrival of the Aryans is separated by around 500 years.

The Aryan 'Invasion' Theory is one that was concocted by the British and is not actually based on any scientific evidence. The wide consesus now is that it was more of a slow migration than a invasion.

Regarding the linked paper, there is no concrete evidence that Harappan was a Dravidian language.
I suppose the real thorny bit is what happens after that. You've used protectionism to raise a number of national industries that have incubated in a shielded market. At some point, they need to be exposed to the world.

I'd imagine, if they provide something unique, they can succeed. However, if it's (for example) a commodity industry, they're unlikely to have faced the same pressure to become efficient that their new competitors have.

Although, on the flip side, that timeline sounds excellent for growing a monopoly-busting competitor. (E.g. what my understanding is that the French do from time-to-time)
Multisig Done Right: Launching Co-Sign Pages and Multisig API (M-of-15)
Probably not well, but it's hard to say. One way of getting around this would be to train the NN on not just the input training set, but also on certain permutations of each image in the training set. So don't just train it on set(image -> labels), but also set(cartoonize(image) -> labels), set(smooth_filter(image) -> labels).

This may make the NN more resilient.
IT's 10 Fastest-Growing Paychecks
Whatsapp Just Switched on End-To-End Encryption
> It's just the best that we currently have.

No, I wouldn't say so. Having SSL is better than having nothing pretty much on any site. But if you don't want to pay $200 somebody for nothing, you would probably consider using http by default on your site, because it just looks "safer" to the user that knows nothing about cryptography because of how browsers behave. Which is nonsense. It's worse than nothing.

And CA are not "authorities" at all. They could lie to you, they could be compromised. Of course, the fact that this certificate has been confirmed by "somebody" makes it a little more reliable than if it never was confirmed by anyone at all, but these "somebodies", CA, don't have any control over the situation, it's just some guys that came up with idea to make money like that early enough. You are as good CA as Symantec is, you can just start selling certificates and it would be the same — except, well, you are just some guy, so browsers wouldn't accept these certificates so it's worth nothing. It's all just about trust, and I'm not sure I trust Symantec more than I trust you. (And I don't mean I actually trust you, by the way.)

For everyone else it's not really about SSL, security and CAs, it's just about how popular browsers behave.

So, no, monopolies existing for the reason they are allowed to do something are never good. Only if they do it for free.
It seems the agreement reached between the US and China has these terms:

* the US will significantly cut emissions by 2025

* China will continue increasing emissions until 2030

http://www.washingtonpost.com/business/economy/china-us-agre...

The Onion's satire piece is probably a lot closer to the truth:

http://www.theonion.com/articles/china-vows-to-begin-aggress...
> "when a package is changed, every package that depends on it must be rebuilt. This can significantly slow down the deployment of fixes in core packages such as libc or Bash, since basically the whole distribution would need to be rebuilt."

I'm just wondering, wouldn't it be possible to have an additional checksum for just the public API/ABI/headers of the package? Would this be enough to at least eliminate cascading rebuild for upgrades to shared libraries?
Fired for posting photos of DHS vehicles
AOL bought Netscape, and incubated the Mozilla project while Netscape was still alive. they've spent a lot of money on doing things for free.
http://i.imgur.com/cuxFB1T.png
Teespring Says It's Minting New Millionaires Selling Its T-Shirts, Raises $35M
Growing as a Developer with No Formal Computer Science Background
not a very useful project. Problem for journalists isn't "how to inspect edits" but rather "which edits on which entries should I inspect"
So if I understand correctly, coinbase creates a private internal "wallet" for you, "hidden" from the public ledger, and owns the private key to it?

Thank you, it's funny how GP talks about an "open, interoperable network" then...
I have never seen an ad on Facebook that was obviously targeted based on my chats, in fact, targeting ads based on my chats would be a pointless, money-losing approach for them as I never talk about commercially relevant things with my friends.

The ads I see on Facebook currently are for SSL certificates (guess what I bought recently), BGP routing optimisation products (not sure why), and TransferWise (I used them once). In short, lots of remarketing and something presumably targeted at one of the news sources I get in my feed e.g. slashdot.

These are all pretty nerdy yet also pretty reasonable ads. Ads targeted based on my chats would mostly revolve around .... well, not sure. At best, nights out or local cinemas. I doubt there's much profit in that.
>Governments putting people in jail for reading your publicly available (in your country) content, which is illegal in theirs //

How does that work, surely the gov can still see people accessing the information by monitoring network traffic and the info itself is still public. HTTPS doesn't encrypt the actual request traffic does it, and in any case the gov would still see which server the traffic is going to unless you're using something like tor [and possibly still then].
Perhaps you should understand a system before slandering it? As others have said, encryption without authentication is useless.

Running a CA has an associated cost, including maintenance, security, etc. That's what you pay for when you acquire a certificate. Whether current market prices' markup is too high would be a different question, but paying for a certificate is definitely not spending 200$ to look cool.

CAs are the best known way (at the moment) to authenticate through insecure channels (before anyone brings pìnned certs or WoT, read this comment of mine: https://news.ycombinator.com/item?id=8616766)

EDIT: You can downvote all you want but I'm still right. Excuse my tone, but slandering a system without an intimate understanding of the "how"s and the "why"s (i.e. spreading FUD) hurts everyone in the long run.
I think your question is fair and don't understand why you were downvoted.

I also question their definition of slavery. Are US prison inmates forced into labor also slaves?

Slavery is not an easy thing to define.
uh, even nexus devices only get two versions and then are abandoned.

the one and S only got two revisions of a single version even
I had the pleasure of being one of the pilot test cases with Crypto 101:

https://www.crypto101.io/
https://crypto101.github.io/

Much easier for folks who happen to already have a Coinbase account! Same functionality for everyone else (cards, straight LTC/BTC).
The "Lander Control Center" is German (Deutsches Zentrum für Luft- und Raumfahrt. See http://en.m.wikipedia.org/wiki/German_Aerospace_Center#Curre...)
New Google Research Project Can Auto-Caption Complex Images
We intend to have a WebTrust audit, just like other CAs do.
That script does a lot of work that boils down to "go to https://nixos.org/releases/nix/nix-1.7 and do the obvious"

Of course if thats not signed you still have a problem. Eternal chicken and egg issues. How do you install gpg to verify a gpg signature while verifying the gpg signature of gpg
This is EXACTLY what I want for my intranet sites. It lets me protect my users from the wireshark in the next cubicle.
The (Illustrated) History of Software
The probe is controlled from Germany... but yeah, that statement is as vague as it gets.
The closest it gets to the sun is still outside the Earth's orbit (http://www.livecometdata.com/comets/67p-churyumov-gerasimenk...)
I'm not sure if you're being sarcastic or not, but there are thousands of banks in the US [1]. Getting rid of all of them except for a single federal bank is a gargantuan task.

1. http://online.wsj.com/articles/SB100014240527023045794045792...
Man tests positive for Ebola, quarantined at New Delhi airport
I bought a camera the other day with the nifty feature of having an NFC tag embedded in it to guide your phone to launching (and installing, if necessary) the companion mobile app.

It occurred to me that this is a really good way of establishing a trust path: while they're only using it to guide you to the right app, they could embed a little public key in there. Then you could authenticate the new printer or fridge by physically being near it.

We'd have to extend our UIs a bit to cover these use cases (it should basically act like a trusted self-signed cert), and probably you only want to trust NFC certs for *.local.
>In this case I don't mind //

Just to confirm you've personally paid for access to this content?
Sell analytics and app usage information
The Dr. Richard Feynman Observatory BASIC for Android
Why doesn't every HTTP page show a warning you have to click through?

Back in the Netscape days, it did. People got tired of clicking OK every time they searched for something.
DIY Virtual Reality Device and Opensource VR Dev Tools
Oh boy, TWG on HN! ;) Great job with this Peter, playing around with it a bit more, but I'm intrigued.
Apparently the chipset they had to use to support the Intel CPU tops out at USB2.
UberHealth: Flu Prevention on Demand
Object 2014-28E – Space junk or Russian satellite killer?
Chart axes are labeled extremely poorly. I have literally no idea what the X axis is supposed to be.
Oh, yay, another reinvention of e-mail.

I'm so excited ... not.

Maybe if they finally would be able to implement 30 year technology correctly or being really innovative and dump all the crud that accumulated over the years instead then I could maybe hope a little.

OTOH, it's from IBM. They know how to do e-mail. They have Lotus Notes.
That's quite a painful spike indeed, but fortunately we'll be cross-signed by IdenTrust.
Samsung tab3 10in also has a x86 cpu
To be fair that looks like HTML templating code.
Google created their own browser in order to embed Google search as your default search engine and homepage. Not because of an altruistic quest to make the web faster.
It is very hard to generalize US economic history, but in general before the civil war the Southern states were in favor of free trade and the Northern states were protectionist. The North won. Like many countries that have developed recently, the US depended on lots of foreign investment for canals and then railroads.

I am not sure if the US had, on average, higher tariffs while it was developing than other countries. The US really became passionate politically about free trade after the great depression. Many economists felt that the depression was made much worse by protectionism that undermined world trade.
This is pretty much why HSMs and good PAKE protocols are important. Key stretching only buys you a degree of computational hardness, whereas not storing or exchanging password derived material at all makes offline cracking provably hard.

Hashing is just a stopgap measure that hopefully gives your users time to do something before they're compromised. It's hard to say how effective it is in practice when a new db dump goes to auction.
I didn't. I clicked on the German one, which I suppose I may have paid for in some tiny way, because I pay taxes in Europe. At least I'd rather think about that than people like Berlusconi and friends getting a hold of them.

I subscribe to The Economist, and occasionally buy access to the Financial Times.
Yes. As I understand things, Coinbase provides at least two major services. They're a major US USD<-->BTC exchange, and they also host wallets.

Those things are separable, as you can make a USD->BTC exchange, then transfer to another wallet for safekeeping, or do the reverse to get back to more-traditional currency.
Apple claim that they get no data about individual transactions, at least not in a way that can be tied to specific customers.
The baseband has direct access to the application processor's RAM in many (most?) mobile designs.
"[...] and our roadmap for our own products remains unchanged."

What is that roadmap? TextSecure for iOS is stalled...

Awesome for Moxie and team, his is huge news. But the world still needs a cross platform, open source, end-to-end encrypted platform... It's just too important to trust Facebook with.
Major brain pathway rediscovered after century-old confusion, controversy
Thanks for the comment. I chose that picture more to capture the spirit of collaboration than to highlight specific code. We still have a lot of legacy code that we're constantly trying to improve.
Congrats Teespring!
Organic meaning, in this case, organic chemistry, i.e. stuff containing carbon. Perhaps hydrocarbons. But it doesn't mean 'life'.
Allow the cert to be configurable, then the company can use its internal CA to give certs to all its appliances.
Very easy.

git clone git://github.com/NixOS/nixpkgs.git
cd nixpkgs
nix-build -A packagename

Building the dependencies is completely automated. For more information, see the nixpkgs contributor's guide: http://nixos.org/nixpkgs/manual/

Note that the above command will simply download cached binaries where they are available, but if you make any changes to the build scripts nix will notice rebuild locally instead. This gives you the benefits of both source based and binary based package managers.
Significant to me would include:

- inability to change employers

- inability to travel off site

- inability to make more money than the employer charges for fees/housing/...

- inability to quit

- fear of harm from employer

Similar to the workers in Abu Dhabi

http://www.theguardian.com/world/2013/dec/22/abu-dhabi-migra...
No. Self-signed certificates are much worse because they bring a false sense of security.

A self-signed certificate is trivially MITMed unless you have a way to authenticate the certificate. At the moment CAs are the best known way to do that (and before anyone brings certificate pinning or WoT, they come with their own problems, please read this comment of mine https://news.ycombinator.com/item?id=8616766).

EDIT: You can downvote all you want but I'm still right.

Each time anyone repeats the "self-signed certificates are still better than HTTP plain text" lie is hurting everyone in the long run.

They're much worse, both for the users and from a security perspective. Self-signed certificates are evil unless you know exactly what you're doing and are in full control of both ends of the communication (in which case just trust it yourself and ignore the warnings).
Activists in Russia flush GPS down the toilet to prove river of poop
This underscores what David Conroy used to say when writing the MWC compiler: Yacc makes the hard part harder and the easy part easier.

And I agree for all its thoroughly-written tutorial approach, I don't find myself going back to it very often.
Ricardian comparative advantage always applies’s simply because domestic land/workers are going to be doing something. The economy might end up being based around running internet scam's or gold farming in MMO’s, but compared to substance farming that's still a step up.
Thanks. Just a note to others, if you have already opened the link 'with' the paywall, even this might not work. Just open this link in another browser.
The abolitionist and former slave Frederick Douglass initially declared, "now I am my own master", upon taking a paying job. But later in life, he concluded to the contrary, "experience demonstrates that there may be a slavery of wages only a little less galling and crushing in its effects than chattel slavery, and that this slavery of wages must go down with the other".

https://en.wikipedia.org/wiki/Wage_slavery
They rotated it slightly just before the main battery ran out. They hope it might get enough light as the 'season' on the comet changes (perhaps around christmas) but no-one knows for sure.
> Slavery is not an easy thing to define.

People also do a good job of rationalizing slavery into something else. The Swiss verdingkinder (child contracting) program existed until into the 1970's and some people still don't believe it was child slavery: http://www.nytimes.com/2014/11/11/opinion/slaverys-shadow-on...
Using Fig and Flocker to build, test, deploy and migrate multiserver Docker apps
Yamaha FX500 Batteryless Mod – PCB Build
The lotus notes thing was like kicking a dead dog.
<sarcasm>
No need for it...
</sarcasm>
This is great! I was using the donate button on www.gitignore.io but this is what I was actually looking for when I implemented the donate button. Thanks for launching this.
Stay Steps from the Slopes
If you want to ski Vail, Beaver Creek or Cooper this fall, you should consider staying in the Pando Valley. This area has a long history and today it is home to some of the best snowmobiling in Colorado. If you want to be centrally located for all the best outdoor activities this season, you can rent a cabin in Pando Valley for up to 6 people (and your pet!).

Enjoy Colorado’s snowy season with skiing, snowshoeing and snowmobile rentals near Vail. Enjoy amenities including a full kitchen, fireplace and satellite TV. Sit out on the deck and enjoy the smell of pine trees. Then, pack up your gear and head out on your choice of adventure. Take in views of snow-capped peaks in every direction and return to your cabin for some rest and relaxation.

Visit the website for more details: http://novaguides.com/cabin-rentals/
Researchers Bypass Microsoft EMET 5.1 Protections
Roughly, look at any mobile software you use and look at the open source licenses. Note how much of that code gets pushed back into the rest of the world. For even more excitement, look at major non-tech companies and see how much they contribute back. In my idle memories, I think Walmart might be the only one I've personally seen... The GPL (or its stronger and younger sibling, the AGPL), contractually require release of source to the user.
Don't forget the classic non package maintainer mistake of thinking policy = package file type/format.

Its pretty trivial to "force" a rpm to install on a Debian box. That doesn't mean that magically any of it will follow Debian policy, any of the paths will be correct, any of the dependencies will be correct. But technically files can be thrown onto the filesystem, even if they can't actually be used where they land. And vice versa, if you shove a deb onto a Redhat box.

My biggest "NIH" surprise is GNU has this and the emacs package system and at first glance they have nothing in common. The idea of installing a local copy of Rails or Leiningen off Emacs MELPA is kinda weird. I wonder if emacs twenty...something will use a user level version of this system. That would be interestingly consistent.
Why the downvotes? Apparently people didn't care to check the source code before drawing conclusions ...
It's not fair to make up a very specific statement, attribute it to someone, and then say it was in accordance with how you think their views run. You are right about uber being slime but don't pull a mark fuhrman.
It's not true that South Asians are not discriminated against. Look at the boards of technology companies. Even though they are staffed by South Asians at every other level, there is a conspicuous absence at the highest level. There is also a thinning out at the higher levels, which is hard to ignore.
Linux still owns supercomputing
It's totally irrelevant to what happened but totally relevant to the current mainstream narrative of women versus men.

It allows them to take something non-gendered and create an absolute shitstorm from it.
The downside is that now I have to manage and deal with multiple certs for all of my sub-domains, rather than dealing with a single cert/key pair.
Others have suggested it, but:

- local groups for your preferred hobby (there are lots of tabletop gaming events, I met some cool people in Europe that way)

- taking classes is a way I've met lots of people. Even if it's short courses

- going to events

- sports and other hobbies - as some mentioned, biking, trekking, climbing, running. In southern Europe there has to be some kind of sports app.

Other family members use other kinds of social support:

- couchsurfing (there are local couchsurfing events almost everywhere)

- churches / NGOs / charities / volunteer work
Who's auditing the auditors? Remember Moody's? It's not entirely analogous, but it's not far from it.

At some point down the chain, you have to rely on trust to some degree. Either disappear in to the wilderness and completely disconnect from the grid or - at some point - you have to trust someone.
Since Firefox already shipped with Google as the default search engine and homepage that argument has flaws.
I'm sceptical of the score. How did they calculate that?
The Bizarre Fight Over a Scientist’s Sexy Lady Shirt
I find it hard to believe that close to one percent of Russians are slaves.
Real life ewok goes crazy on mommy coming home
http://www.globalslaveryindex.org/terminology/

Just in case people are wondering where you got that from.
comets go round the sun, not into it
Engineering community portal for industries product data
Engineering community portal for industries product data are open now for beta-testing.

Help to build the world-wide database of structured technical information.
It appears that inmates in modern US prisons are forced to work, though they are often incentivized to do work.[1]

Your question is still a good one though, and I would be interested to know whether penal labor would qualify as 'slavery', and whether the conditions of the facility, or the reason for incarceration would be taken into account in this judgement.

[1] http://en.wikipedia.org/wiki/Penal_labour#United_States
Yes, that's the status quo, and has been for a while. The point is that's currently the best you can do. For boxes without external exposure, this work won't change anything, but a standardized protocol for dealing with boxes with external exposure would still help some use cases.
Today I learned there are 23 enslaved people in Iceland.