skysight-inc/HackerNews huggingface dataset:
Can you expand further on the problem which you see? Pinning appears to address the biggest problem with the current CA model, where any of the CAs are equally valid, by allowing you to pick the CA(s) used and, if desired, even locking it to a specific host certificate:

https://tools.ietf.org/html/draft-ietf-websec-key-pinning-20...

> To perform Pin Validation, the UA will compute the SPKI Fingerprints for each certificate in the Pinned Host's validated certificate chain, using each supported hash algorithm for each certificate. (As described in Section 2.4, certificates whose SPKI cannot be taken in isolation cannot be pinned.) The UA MUST ignore superfluous certificates in the chain that do not form part of the validating chain. The UA will then check that the set of these SPKI Fingerprints intersects the set of SPKI Fingerprints in that Pinned Host's Pinning Metadata. If there is set intersection, the UA continues with the connection as normal. Otherwise, the UA MUST treat this Pin Validation Failure as a non-recoverable error. Any procedure that matches the results of this Pin Validation procedure is considered equivalent.

Unless I'm missing something, that allows you both to limit the number of CAs which you trust and if you go to the trouble of pinning specific certificates you can even limit damage from a compromised CA.
As codygman mentions the IO Monad doesn't make haskell impure.

unsafePerformIO :: IO a -> a on the other hand does make haskell impure when it is used. And it is used in many libraries.
As far as I can tell, the downtime message [1] originated on silkroadmarket.org [2-6]. It doesn't look like Karpeles could have reposted it from somewhere else--he has to have been involved in the Silk Road's operations if he was behind the site.

It's also worth noting that DPR linked to silkroadmarket.org in his signature as the official way to get to site [7].

[1] http://web.archive.org/web/20120128114453/http://silkroadmar...

[2] https://bitcointalk.org/index.php?topic=26644.5;wap2

[3] https://bitcointalk.org/index.php?topic=17556.10;wap2

[4] https://bitcointalk.org/index.php?topic=26644.0

[5] http://www.reddit.com/r/onions/comments/i2mq7/the_silk_road_...

[6] http://dailyanarchist.com/2011/06/21/how-and-why-to-get-to-s...

[7] https://bitcointalk.org/index.php?topic=3984.msg57080#msg570...
My Thoughts on Google Ending Glass Explorer Program
Paper Products – Office Supplies from China
I think it's just missing a comma after "tank".
China has historically paid less attention to IP, largely because they didn't create much of it themselves. That's changing. China is on track to handle more patent cases than any other country: http://www.finnegan.com/resources/articles/articlesdetail.as.... As Chinese brands become valuable in and of themselves, as opposed to being behind some Western brand, trademark filings are skyrocketing: http://www.uspto.gov/news/speeches/2013/rea_fordham_china.js....

Part of this is in response to TRIPS obligations. But Western countries have been trying to get China on board for decades. What's changing now? What's changing is that Chinese companies have IP to protect now.
This.

This is the reality of corporate development. I think we should be demanding more before buying software from vendors, especially when you can't just whip out the source code to audit or fix yourself.

Suff like this doesn't have to happen, but we let it.
Absolutely. Arguably, that's the main point of the code review -- you're sharing responsibility. If your team scape-goats, it's not going to be a team for very long.
Linux.conf.au 2015 YouTube channel
That's interesting. The UK also has more protections for small contractors (e.g. electricians, welders, etc.). I wonder if that's the common thread (meaning it's basically impossible to replicate in the US) or if Radical Hack could have stayed alive if it had just doubled down.

The overgrowth factor shouldn't be ignored though. It's a particularly sad effect of MBA-culture and perverse incentives that so many perfectly viable retail outlets grow themselves to death. Krispy Kreme is the perfect example of a chain that was obviously working and did everything it could to kill itself with growth. I sympathize that everyone involved in those decisions made ones that were rational for them and their personal gains, it's just a sad outcome for the chain.
True, I think worldlens is the best for that.
most systems have "alias rm='rm -i'" by default, so it would prompt on every single file regardless of ownership, etc.
It is by definition Slander/Defamation (depending on the medium) to make a provable statement against someone else without substantiation.

Meaning, if you claim someone is AKA someone else, that is a provable statement.

Saying someone is an asshole is not a provable statement.

EFF has a good article on this[1], they call it a 'statement of fact'.

From what I understand though, the defense was trying to IMPLY rather than outright, or rather, just bring up a reasonable alternate explanation.

[1]https://www.eff.org/issues/bloggers/legal/liability/defamati...

Edit: Seriously? It's an informative post, why the downvote hate?
It's a badly written sentence, in part because it's written in passive voice. Lost_BiomedE's siblig comment rewrites it far more nicely.

BI isn't exactly the bastion of quality journalism.
You are describing a problem that has been solved several times over. Blame steam, the distro devs, or the user for not implementing one of the many long existing solutions: chroot [0].

[0] http://en.wikipedia.org/wiki/Chroot
It's in my coreutils (8.22). Maybe it's recently added?
One or two.

I understand the temptation to add evaluation and expressions to everything, but beyond a certain complexity, you no longer have a config file, you're just exposing variables from an application within an application.
Really important hint for those young sociopaths that aspire to be the next DPR. It's something I read in a book about 40 years ago:

Don't fuck with the Eagle

What this means is you should maintain a low profile. Silk Road was anything but low profile. It was more like waving a red flag at a bull. E.g. from the Wiki article on Silk Road:

Once the site was known publicly, U.S. Senator
Charles Schumer asked federal law enforcement
authorities such as the DEA and Department of
Justice to shut down the website.

"The Eagle" aka the US Federal government has almost unlimited resources. Even if you don't attract the ire of a grandstanding Senator, you might happen to attract the attention of a bureaucrat who wants a promotion. You will be vastly outnumbered. E.g. from the article:

Deryeghiayan and a half dozen
FBI agents surveilled Ulbricht

That's just a small glimpse of the resources deployed against him. There were doubtlessly other FBI agents, supervisors, prosecutors, the DEA, definitely the IRS, probably the NSA.

I know that when you're young and naive, it's easy to think you're the smartest guy in the room. And you may well be. But you probably won't be smarter than the collective intelligence of a national government.
anything with a list of task glass is great for i think all the marketing etc was great to make it know what glass is its just people buying it and using a a consumer device than a dev device is the problem but maybe this is what google wanted to explorer world with glass and see what work and what doesn't.
It's not just an issue in "capitalism". Communist countries like the USSR and China have had as bad or worse effects on the environment. It's an issue of humanity.
Always live by the saying:

"If it doesn't exist in at least three places, it doesn't actually exist"

- Allan Jude - TechSnap
You are right. Consider my original assertion (which is past its edit window) amended to read "engineer (or manager who prevented an engineer from fixing)".
Role-based and other access control mechanisms unfortunately come off all too frequently as bolted on and arcane hacks.

The real issue lies in the fact that the file system resides in a global namespace, when it shouldn't. Much like each process has its own environment variables, so should it have its own namespace. Linux does support so-called "mount namespaces" now, but once again they're not inherent parts of the system, but have to be tacked on through explicit unshares, and thus lose the cohesiveness of platforms such as Plan 9. [1]

[1] http://doc.cat-v.org/plan_9/4th_edition/papers/names
My issue with Glass hate is that people say it's about the camera - it's not. It's about the fact that they know there's a camera. There's a lot of cheap cameras embedded in glasses, pens or even clothing, that anyone can buy from a random 'spy shop' down the corner. We're long past point of random stalkers filming people. So all that objections against Glass killed useful technology (AR) for zero real gain in privacy.

> Even if there is a possible net benefit, there will also be, inevitably, be a loss of control over identity and autonomy that no one can be blamed for not wanting to give up without a fight (futile though it might be.)

I think we'll have to learn how to live with that. I doubt that a lot will change though.
Previous discussion:
https://news.ycombinator.com/item?id=8893554
Why is DNSSEC not vulnerable to NSLs?
as a pinegrow user and supporter, I'm a big fan and really loved this write up. I think pinegrow is positioned to kill it in the WordPress space soon. I've been using it as part of my workflow. It doesn't carry me start to finish but it makes some parts of design and makes them sort of fun again. I realize that people on here accept abstraction as a given in technology. the more better code is the way. But just like the promoters of vim / emacs tout the benefits of staying within the environment, enhancing focus, that's the same thing with visual builds. to go back and forth from code to design and to abstract it all together cause focus problems that are hard to quantify but are definitely prevalent. Pinegrow is one of a few tools that can help as they improve. Pinegrow in partiular because of it's fantastic browser render preview, multiple editing modes and as you've read, backend flexibility and intelligence due to the way it was constructed.
which, regrettably, is not something you can do with `man` if you find `${0%/*}` in a script you're reading that someone else wrote.
Are they really trying the "Chewbacca defense" ? Johnnie Cochran would be proud.
There already are better products for that though:
http://www.mygoldeni.com/
This is where the concept of secondary objectives comes in.
"most systems"? Not on Debian or Ubuntu, and that's most of them.
Geico – Who Got the Swag Now? (LAUGH OUT LOUD HILLARIOUS)
Where do the weight savings come from? Hydraulic fluid is heavy; it seems like you could save quite a bit of weight by carrying less of it if it wasn't expendable. Not that I don't believe it, just curious.
Given that the holidays occurred during the 90-day period, and that Microsoft was paying attention and made a fix, and that testing found an issue with the fix, I think it would be reasonable for Google to give Microsoft an extension on the deadline.

The statement that "if 90 days elapse without a broadly available patch, then the bug report will automatically become visible to the public" is little more than Google claiming the computer made them do it.
Trees grow from the top - from the very tip of the branches. The trunk never moves up, the gun would not raise as the tree grew.

(Grass grows from the bottom, that's why animals can eat it without harming it.)
Pretty well. Amazing what you can do with $5 ultrasound detectors, if your software is clever.

https://www.youtube.com/watch?v=kk-H--e6PUs
Current iteration is not fit for any market. They botched the implementation by going for the nerdgasm angle instead of actually making a good product. 100+ posts on this page and not one mentions the shit battery life. A device like this starts with battery life and uses that as the constraint on the quality of the screen, chipset and camera. We saw this with the iPad, they started with the full workday/school day as their battery standard. For a more personal device like this the standard is even higher, likely 12 to 16 hours. That is for professional or mass market use.

The killer apps for glass type device are life casting and personal security and glass can't do either of those due to battery life.
Vavle's customer support is known to be pretty awful. This is all too familiar an issue.

To be fair to them, when the six-sigma of your customer service is 15 year olds asking to be unbanned cause they totally didn't use hacks, your CS probably gets a bit desensitised.
Need Some Espionage Done? Hackers Are for Hire Online
What, AFAIK, hasn't been found is other contributing factors...

Clearly you aren't that familiar with the research then. There are many disparities in work and academic effort, labor force participation, criminal propensity, IQ and career choice.

I've not seen any analysis that controls for all of these or any remotely accurate predictive model. I guess given your voluminous command of the literature, you'll provide one?

Finally, why are you trolling? Are you trying to understand this science or make fun of it?

I was merely linking to some interesting and relevant articles on causal calculus that relate to the issues in the article. You are the one who went on a random tangent about how everything is political and I should use the most expansive possible definition for certain words, and somehow I'm denying science if I don't.
Isn't Hyperloop a fail-safe design? If you blow a hole in it, the whole thing will start pressurizing and the air friction would slow things down fast (AFAIR pods ain't that aerodynamic, so as long as you shut down that powered air intake in front, it they'll be as aerodynamic as bricks).
Disappointed owner here. I'm a developer, but I'm not going to write software for a product that isn't even for sale. There just won't be enough users, and even if I wrote something that justified the cost of buying it, people couldn't. That said, it was very clear last Android update that Google just isn't capable of supporting the TI chip any more. It was horrendous.
Yeah. @boredelonmusk is my favourite Twitter profile and I often can't see where the serious part ends and the joke starts.
> Also you can get one off simple 2 layer boards for $25.

Where? I haven't really looked into outsourcing it. I assume like most things it's a hefty cost for the first one due to setup and tooling, and the rest are dirt cheap. I'm a hobbyist so a mill like that is interesting, but as a hobbyist I'm not really aware of all the options. It seems much better than messing with etchant. The designs that use SMD components aren't going to work with breadboard. No vias as they are single layer.
I don't understand why they included the butterfly synchronization model at all compared to the lazy update one, the latter is far faster, especially when you have raw access to GPU raw memory.
Google didn't make glass the most publicized product, the media did.

I believe I read a comment here that basically said that Google didn't kill glass, they stopped selling it and moved the work to another division. So I think you could debate forever about whether this is considered "killing" google glass or not, but that's neither here nor there.
> Why are we still running bash scripts?

Because admins gotta admin. Also, adding python to a software suite just to work on the file system... gross.
I would stop polluting, but I can't hear you over this waterfall of money, yo.
Steam shouldn't run as its own user. It's a user-level process, not a system process. It needs to have user-specific things (install directory, save games, etc.) that need to be accessible to the person using it. Separating processes into users is only one method of sandboxing, and not appropriate in this case. Sandboxing via mechanisms like SELinux is the correct solution.

One of the users in the Github thread even mentions how SELinux prevented the same thing from happening on his machine.
Launch Your Business/store App for Free
but the same wouldnt be acceptable in other lines of work right? Try a civil engineer or surgeon... what would you expect someone to do in similar situations? Probably escalate the issue and perhaps delay the release.

Pushing in shitty broken means you're not doing your job. If your company forces you to do this then they are not doing their job.
If you are talking about Wall Street investors, then they have no excuse for investing in a company that loves pet projects. They have all the research at their fingertips. I could understand if Joe from down the street invested $25,000 in GOOG and is now pissed because he thought they would try harder or whatever.
I've lived in the US my whole life other than 2 years in Belgium and 1 year in Afghanistan, I have a pretty good idea what I'm talking about.

The article is specifically about city streets, it even says so right in the article if you had bothered to read it.
SourceTree and Transmit need to stomp all over directories to get things done. Yes, it's useful. But it's not common for applications to need that kind of access. The sandbox seems to work fine for the other 99% of applications. I think Apple even uses the sandbox heavily for their own apps, check ~/Library/Containers next time you use an OS X system.

The only complaint here is about the app store, sandboxing is wonderful.
I'm guessing you'd need more pistons, pumps, piping, etc. in a closed system. Probably need to repressurize the fluid.
testimony in court and court filings is, as far as I know, absolutely privileged with respect to defamation -- even if it is false

If for no other reason, this is necessary so that a trial doesn't devolve into an endless cycle of suit and counter-suit
2015 SXSW Accelerator Finalists and Alternates
Disclosure: I am founder at one of these companies.
fwiw, making those "-i" aliases to rm, mv and cp are one of the first things I do on any new Linux machine I'm on.

I don't understand how anyone works in the very unforgiving-of-accidental-delete *nix world without those aliases.
If a problem has been solved several times over, that's a sign that it has never really been solved. If there's a thing that most apps should do, then doing it should be the default, and avoiding the default should be the thing that takes work.
Disclosure: I am founder at one of these companies.
> Your

> intelegent

> Shure

> Reolistically

Spell checker broken?

Anyway, you're going to have to develop your AI somewhere, you're going to have to move it to the box somehow you're going to have to train it somehow and you're going to have to have it interact with the real world somehow. All of those are opportunities for escape, I think 'unplug it' sort of defeats the purpose of having an AI.
Why not? The key was to deliver supplies to the ISS.
And even if it isn't, modern perl would do as well as python for this case, with no language wars required.
Also, someone should have been asking "Why is that scary?" - which should have lead to a discussion on alternatives.
They don't have to convince a jury it was Karpeles, just that it may not have been Ulbricht.
Yes, even though it's an abused term that covers everything from a thriving small-scale full-time business with reasonable hours, to making enough bucks to hang out on the beach for 6 months a year, to barely making it in spite of 80 hour weeks, to labors of love that fit in there someplace.
I disliked that element of the reporting too. Your use of "they" is funny, too--SpaceX and NASA would say that CRS-5 was a complete success from the point of view of the mission.

The reporter's not being disingenuous, she's just...not using words correctly. The mission was to keep the ISS astronauts supplied and alive. The mission succeeded. The tests around rocket reuse were not part of the mission.
Thanks for reminding me to unmount my backup drive.
UK wants to essentially ban all secure communications
Pumps and pipes. With an open system, you don't need to recompress the fluid and move it back, and from what I read, that hardware weights a lot.
> Bottom trawlers scraping large nets across the sea floor have already affected 20 million square miles of ocean, turning parts of the continental shelf to rubble.

That's a number I wouldn't have guessed, that's about 1/7th of the ocean floor.
Just watched the whole video. Thanks for linked it.
With care.
Seconded. His work is fantastic.

He has a few collections of short stories (Luminosity and Axiomatic) that give a good breadth of exposure to the themes he explores in his books.
He's not being charged with that, but the jury is seeing the evidence.

http://arstechnica.com/tech-policy/2015/01/judge-govt-can-sh...
Guide to Buying Digital Flower Printer
Steam doesn't deal with its own files. It deals mainly with random games that are creating tons of random files.
If the grid fins were stuck in an unhelpful position, then the engine would have to compensate much more significantly, reducing the trust available in the 'slowing down' vector.

It's also likely that 'hit hard' just means it crashed. Looking at the pictures of the ASDS, it's clear the rocket came down off-center. Perhaps it was at the appropriate velocity, but because it landed on top of a bunch of support equipment, it fell over and exploded.
99% of the time, my terminal is open to a git repo, and -i would just be more noise. The other 1% of the time I add the alias or use Nemo.
Go with GS. In the end, you want to work for companies that will be accretive to your future career growth in the industry. Also, you want to make sure not only you have technical experience but also domain experience that will be more valuable in the future.

GS had for long time and still has the cache within Financial sector. Having GS on your resume will open doors at other financial companies for technology opportunities and give you an edge in your career growth.

Google has the cache right now but will it be persistent in the future. Considering Microsoft name on your resume no longer gives you any edge/influence like it did in 1990s, I will assume Google influence will be similar to Microsoft in another decade.

CS is a fast changing field so skill obsolescence is a major issue with the field and a major challenge to long term stability/growth of your career. You will have to stay up to date with newer technologies and continue to reinvent yourself every 5-10 years just to stay relevant. For example, knowing Microsoft stack is no longer as valuable as it was just a decade ago.

Working in an industry vertical such as financial, despite changes in CS technology applied to finance, you are still relevant because of your domain knowledge.
Assault: "Intentionally putting another person in reasonable apprehension of an imminent harmful or offensive contact. No intent to cause physical injury needs to exist, and no physical injury needs to result. So defined in tort law and the criminal statutes of some states."

http://www.law.cornell.edu/wex/assault