skysight-inc/HackerNews huggingface dataset:
The difference between the insecurity of the CA system and the parallel, comparable insecurity of DNSSEC is that the CA system already exists and DNSSEC TLSA does not in any meaningful way. If DNSSEC TLSA solved real security problems, it would be worth the expense, insecurity, and instability of deploying it. It doesn't though, and thus isn't worth it.

ICANN is not the only problem. Even if ICANN is scrupulously honest, the most popular TLDs are controlled by other organizations.

Not only am I right about RSA-1024 in DNSSEC, but I'm obviously and empirically right about it, as a trip to DNSviz will show you. I'm amused by all the arguments that presume that I'm just Googling random stuff and posting them to see what sticks. Unfortunately, no: I'm an implementor and I've been writing about DNSSEC for more than 7 years. I'm also amused by the objection that because there's an algid somewhere in the DNSSEC RRs, RSA isn't a problem. DNSSEC in its current deployment trajectory is PKCS1v15 RSA.

I am also obviously right that a secure DNS system designed in 2015 would not look like DNSSEC. It would instead be based on online-signing, would use deterministic ECC signatures, and would do full end-to-end encryption of DNS requests instead of trying to shoehorn the whole protocol into standard DNS RRs.

You've also missed the point about software reliability. Software today gets away with a shortcut in which it can assume that failed DNS lookups are the result either of user error or lack of connectivity. Software does not generally have a recovery state machine for lookup failures. That cheat stops working when DNSSEC failures are introduced to the model.
There seems to have been some progress here, last time I read the relevant Act I'd swear that it referred to the legality of having "receiving means" (not sure on that wording, I do have bad memory!!). So you were technically in breach if you had a TV with an aerial, it wasn't necessary to show you watched it?

Am I misremembering?

This change is actual encouraging for me as the new box I got to use for catch up services I think allows live TV (as a paid extra) and so I was concerned I might be accused of being in breach of the Act, but it seems not. Always nice to know.
File System Hierarchy 3.0 RC1 Proposal
The advantage may just be the way you interface with the data, SQL vs Cypher/Gremlin(Groovy). I know with Gremlin one can easily walk the graph, write lambda functions to evaluate certain points while you traverse, create easy algorithms to do breadth/depth-first traversals, etc. all as a query. Those things just don't seem possible with SQL alone. Using the setup of a node and edge table, how could I write a query that would start with a node, find all edges of a type and go X levels deep, Y nodes wide, keep reference points that you can then go back to and restart the query from. Maybe write some sort of SQL function, but those things are hideous.

It would be interesting to see a script-type language on top of a traditional relational db.
Right, thanks to who corrected the title
> Even many notable French artists are only known here for their work in magazines like Heavy Metal.

It's not the artist, it's the environment. Moebius did amazing and innovative comics for the French and Belgian markets. Guess what he did once arrived in the US: http://en.wikipedia.org/wiki/Jean_Giraud#Marvel_Comics
My intern is Indian and he said his parents only eat once a day, but that they are relatively religious. Is that common?
In Toronto and surrounding cities (Canada) things are getting better with comic stores catering to independent publishers and artists (e.g.: https://en.wikipedia.org/wiki/The_Beguiling).

Many local independent bookstores also contain a "graphic novel" section that tend to carry independent, literate examples of the medium.

I guess if you haven't been interested in comics for some time it can be disorienting to walk into any shop without doing a little research first.

Go indie! You'll do much better. One series I'm looking forward to getting my kids into is Mouseguard. But I also have comics about the fantastic women pioneers in science, the manhattan project, fairy tales, and so on.
Couldn't they just be looking through house windows for a 50Hz flicker? Wouldn't that be enough to indicate a TV is in oepration?
Hold up. Please don't invoke the argument from popularity, it simply doesn't work. The lead developers of major distros, as smart as they may be, do make mistakes (Debian with cdrkit, sticking with libav for too long, the PRNG bug, etc.) and they may not be fully in line with the intricacies and conceptual differences between process management, init, supervision, hotplug and so on. There's lots of misinformation from both sides and a lot of knowledgeable people (like those maintaining powerful daemontools derivatives) have never been ones to proselytize, but stick to their inner circles.

Furthermore, how are you sure the decision to adopt was entirely technical in nature? Perhaps they realized that the incoming systemd-integrated Linux desktop userland wasn't worth the maintenance hassle of trying to avoid it?

The way Lennart worded those sentences sounded funny. He is known to distort and exaggerate when promoting, for which I don't blame him, since his goal is to get his software adopted, but nonetheless. systemd proponents have been all too eager to completely dismiss any political meddling on part of systemd's adoption as totally unsubstantiated, insisting it was purely "technical merits". Lennart's words paint a subtly different picture, at the least.

Most people don't fully grasp the state of Unix process management, so it's no surprise they're susceptible. For example, the only alternatives that have been debated primarily were Upstart and OpenRC. That's a red flag.
> Comics were never supposed to be educational or have any non-entertainment value and primary tarted at hormones soaked male teens.

In the USA, perhaps. There is literally nothing about the medium - panes of images, some with dialogue or narrative, which when put together portray a story - that makes it targeted towards males. If I tried to explain comics to people, there's nothing in the explanation that makes it male-only.

And in fact, there's plenty of people writing family-friendly and female-targeted comic books. They're just distributed through the Internet these days, and funded through advertising and merchandise. There's plenty of people reading them, along with manga and similar media.
EFF, Your Overweening Moralism Doesn't change The Fact That Developers Target Us First. --Apple
It was a hint as I missed that info and it was hard to retrieve it. I was trying to get the parity correct rowwise and columnwise, which was not the rule at all. That is another game!
resources to be utilized as "efficiently" as will be tolerated
Twice the salary is almost a no-brainer for anyone in any field to be honest.
5 things businesses should learn from the lemonade boy
"Apple is contractually forcing developers to not discuss the contract, in what way is that good for users?"

What way isn't it? To what end does an end user need to know what the content of an agreement between to third parties is?

"Apple can still have a walled garden without contractually requiring developers to forgo their right to jailbreak their own device."

"It is not necessary to have DRM to have a walled garden."

Where is the DRM in the App store? I ask because I genuinely don't know. I would like to know in simple terms as the EFF have a tendency to use emotive language that detracts from the point.
Nice find. That site explains the situation clearly: the vans exist, but don't do any "detecting". Instead they spend their time parking them in prominent places to perpetuate this myth. http://www.bbctvlicence.com/Detector%20vans.htm
I agree with your overall point, but I would walk it back just a notch by pointing out that being forced (or at least encouraged) to have a theory first helps to prevent correlation "fishing". If you accidentally stumble upon some really interesting relationship, then that is great and ideally would be shared with the world. But if that sort of thing is allowed to be published without any scrutiny, the incentive becomes to just throw tests at a dataset until it yields something that appears interesting. If you perform enough random tests on a dataset, you are very, very likely to eventually find something "unusual" or "interesting".
// Of course this is only an example, but except in rare cases when the value of a boolean is significant (e.g., interfacing code in different languages), don't compare to booleans! Not only is it redundant, it's another potential source of error.

if (!c_assert(p >= 0) == true) {
return ERROR;
}

// vs

if (!c_assert(p >= 0)) {
return ERROR;
}

// The following makes the error condition clearer, but it goes against the convention of having a hopefully true condition as the argument to assert.

if (c_assert(p < 0)) {
return ERROR;
}
Brilliant! When profilers are this easy to use, more people will use them, and the whole Ruby ecosystem will see better performance. Well done.
I'm still waiting `/Users` `/Applications`. Only Gobolinux has it
IANAL, but it seems a little bit of a silly idea to criminalize owning a TV. For that matter, 'receiving means' surely also includes having a laptop or tablet in the house, as that's a means of receiving live TV.

I'm not saying you're wrong, I know that I had to buy a TV license when I moved in with my SO, but I'm not sure if that's because we bought a TV (we never watch it) or if my SO just did the necessary paperwork out of habit.
It could be the browser that I'm running it in. I couldn't figure out how to move the selected box. I tried clicking and dragging, etc.
Anyone have a deck of cards for handling fear of success?
OAuth2 Provider for ruby apps with Single-Sign-On
Nope, not trolling. It's an amazing piece of work from a brilliant (but crazy) author.
What's your point? One dude on the Mozilla team played with the idea of implementing DANE. Then they gave up on it. Now that idea is a rebuttal to my point that browsers won't benefit from DNSSEC?

Is the point that it's possible to implement DNSSEC on end systems? Of course it's possible; everything is possible. But that's not what's going to happen, in large part because the DNSSEC operational community doesn't believe it should happen, and designed the protocol to make it easier not to.
It could be other things. They maybe are asking ISPs to look for packets related to live viewing of TV over the internet, that seems to fit the RIPA descriptions too. Indeed I'd be surprised if Capita weren't doing/looking to do that as they could potentially find lots of people to send nastygrams to that way.
Followlife launches digital photo art collage scrapbook
The titles already exist. The excellent clerk at my local comic store made me a long list of american and international series for my daughter to check out and I've been very impressed. Most of them have to be ordered though, and none are prominently displayed.

So it isn't so much that the titles aren't being created, but I think you're right that the demand will affect what is visible on store shelves.
Yes, which is also why The Checklist Manifesto was so successful.
Well, that's something of an edge case given that Erik Larsen originally came from DC & Marvel, so he has that over-the-top exaggerated anatomy style, but yeah it's indefensible.

Most of the newer Image stuff is really mature and has some fantastic female role models, see for example Lazarus, Shutter, or Copperhead, all have strong female leads.
The reason it was removed was because it was extremely hard to set up and use properly. Glass is seen as a similar device as Chromecast in that it is supposed to be completely plug and play where even the most basic users will be able to figure it out with minor instruction from a Guide. Since Hangouts was unable to work with this experience, it was not seen as adding value to the device.
The thing is, the aforementioned trait is far too generic - it's a characteristic of how development is structured, and has little or nothing to do with the more technical aspects of the Unix design, which is what is being contested.

It's not just Unix. Development in a single repository has been how almost all operating systems were done.

In fact, standalone kernels have usually been research projects throughout the years. Linux is a notable exception.
"if you do an init system but still invoke all the shell scripts and all the other things needed to bring up the system, you’ve only solved part of the problem."

That's exactly what I think is wrong with systemd. If a script bring a speed issue on start up, it should fixed by optimizing the script, use/create another script language with parallelism and higher pref, or even turn it into a compiled program. This is not supposed to be the problem of the init system developper.

In fact the only purpose of an init system is to start executables in a defined order, not more.

This is going to be like X, a huge pile of unmaintainable code, and that's definitely not the UNIX philosophy.
Very unlikely, I think they depend too much on OS X CoreGraphics and other libs to make porting feasible.
The parent comment was phrased somewhat ambiguously, but I think he meant that the law enforcement admitted to screwing up, not that they screwed up by admitting.
"What he's really doing is using interaction with women as practice to be better at interaction with women.
"

Specifically, by learning to not care about the women in question or the interactions.

This is why comparing talking to people with shooting freethrows is goddamn weird. People are not basketball rims. The basketball rim lacks subjective experience.
Excellent tutorial.

I'm actually working on (about to finish) free Splunk app that monitors HTTP traffic via Apache logs on WHM/Cpanel based hosting servers and visualizes traffic and activity trends and patterns between IP addresses and sites.

Awk would be an excellent tool to quickly play and "debug" logs content alongside with visual tool.

Additionally I think I'd want to utilize it for malware detection.

+ On my "to practice" list.
I really like the figure showing the nearest-neighbour graph of MNIST being stretched as it goes through the hidden sigmoid layer. Really helps build an intuition for those of us who think visually or geometrically.

He quotes Bret Victor at the end:

"When Hamming says there could be unthinkable thoughts, we have to take that as “Yes, but we build tools that adapt these unthinkable thoughts to the way that our minds work and allow us to think these thoughts that were previously unthinkable.”"

Great work!
gladly will. learning is an important process. :-)
The distro developers likely all 'chose' systemd because they were forced to to continue using GNOME, which is the experience people expect as end-users on Linux.
Syntax changes and freebsds smp "enhancements" means you'll be waiting a bit longer, methinks
Thanks for the link, I'll share it.

edit: would this prevent you from being able to support 1GB pages?
Do regulations really exist to prevent crime, or to threaten punishment when it occurs?

Arguably, neither a free market or a regulated market can prevent any criminal activity.
I find myself wondering why the init is supposed to figure out what the computer is to be doing.

I've never messed with systemd configuration too much, but is it much more complicated than a make-style "how do I get there from here? OK lets do that"?
"Please don't invoke the argument from popularity, it simply doesn't work."

Even when almost every distro has switched? If the situation were 50-50, I'd agree with you. But given that Systemd has been overwhelmingly adopted by distros, I think that says alot.

"The lead developers of major distros, as smart as they may be, do make mistakes"

Yes, but again, they surely haven't all made a giant mistake, right? I don't buy the "they've switched because of upcoming desktop userland" argument either. Distro devs -- like Linux users in general -- aren't ones to roll over easily.

With overwhelming support from distro developers, the people who know their stuff, Systemd must be doing something right. And if you look at the Benefits section here, you can see a lot of things that are appealing to distro devs: https://bbs.archlinux.org/viewtopic.php?pid=1149530#p1149530
I believe there's a lot of worry about systemd because what Pottering is doing is relatively new. To grossly oversimplify; the ecosystem of inits among Linux distros looked something like "sysvinit -or- spin your own." So when systemd comes along and starts getting integrated into damn near everything, there's naturally some alarm. There have been endless flame wars about init systems for almost 25 years now. It's almost unfathomable that every major distro has managed accepted systemd with relatively little drama.

I feel like "the marketing is too aggressive" or "they're being astroturfed" or "they're being forced" are all expected responses to what's going on.
Servo: Building a Parallel Browser [video]
Personally I believe that once Dart development is finished, Google will roll the good parts of the server-side pieces to Go and frontend into ATScript/Angular 2.0.
A definite case of seen and unseen consequences.

Developing a biopharmaceutical product requires the following:

1. A professional who discovers the possibility of a new chemical entity, requires infrastructure: comprised of medical grade equipment (centrifuges, beakers, pipets, filters, microscopes, testing equipment, etc.), experts capable of understanding applications of drug, and many iterations of tests. There will be about 5,000 to 10,000 opportunities for these to address something like Hepatitis C.

2. The NCE is developed for dosage and scheduling. Again more testing.

3. The drug needs to be optimized for manufacturing: infrastructure requires additional experts and assessments

4. Preclinical testing is completed. Only 250 products out of that initial 5,000-10,000 NCE group make it here.

5. Only now is a submission made to the FDA.

6. Go through the process of FDA approval starting with human trials. Only around 10 of these from the 250 will be instigated.

7. FDA human trials, a three to four step process that only 21.5% entering the process will make it through.

8. Production of drug.

9. Sale of drug for seven years to recoup costs

10. Post-Surveillance of drug

11. In people with an asymetric heart ventricle that exhibits heart murmurs but only on Wednesdays, the approved drug causes uncontrollable urination. The drug company has to deal with trial lawyers who develop a lawsuit in the general area of $300 million. And this lawsuit can be brought against the company throughout the lifecycle of the drug and in some cases, the original patent holder can be held liable for the generically produced NCE's.

12. Drug finally goes to generic and the generic manufacturers in Brazil and India sell it for pennies, wiping out all profit margins for your product.

13. A third world nation tries and successfully invalidates a patent that you hold, wiping millions off of the revenue forecasts, thus eliminating the monies needed to test up and coming NCE's. Then someone on a forum

The amazing part in all of this is that a drug gets made at all. The argument that it costs pennies to make, apply the same logic to a cars production. The modern car costs about $1,000 to manufacture, this includes materials and labor costs, the other monies include research, development, marketing, and all the other accouterments that make it possible; why are people not screaming for the costs to be lower, because they understand that there are costs and regulatory capture involved.

[1] http://www.forbes.com/sites/matthewherper/2013/08/11/the-cos...
[2] http://en.wikipedia.org/wiki/Drug_development
Pretty sure the lawyers are the ones proposing and accepting. The lawyers for the plaintiffs generally receive about 25% of the award. So while $6500 (actually more like $5000 after lawyer fees) is a small amount for each person in the class, $103 million is a lovely amount for the lawyers, so you can see why they'd accept the deal.
2014 Warmest Year on Record, NOAA
I agree with everything you said, and it makes sense for a trial. But people shouldn't think the only people affected were those that had a strong case in court. This salary fixing scandal is black spot on how American companies treat workers.

(It's not "hire Pinkertons to shoot strikers" bad [1] or "pay employees in our own private currency that only we accept" bad [2], but its pretty damn bad.)

[1] http://en.wikipedia.org/wiki/Homestead_Strike
[2] http://en.wikipedia.org/wiki/Company_scrip
sigh, there's one of you in every thread about weight loss these days.

it's not that simple, it never has been. you're just flat-out WRONG. you're not the only enlightened person in a sea of idiots. you're not smarter than all the scientists and dieticians on this. if it were as simple as that there would be no scientific inquiry into this area.

http://i.imgur.com/0EQF3.jpg

look at this map of the (known!) human metabolism. you think this system is 100% efficient, 100% of the time? you think if you put one calorie in one end, one calorie pops out the other, like a tube of marbles? you really think this? we don't even know how this shit WORKS, let alone the laws regarding its efficiency.

but hey, everyone wearing those silly white coats can go home and watch some reality tv, we've figured it out! calories in, calories out! the answer was staring us in the face the entire time! who cares about hormones and metabolic pathways and endocrine pathology and nutrient intake? calories in, calories out! that's all there is to it!

quite honestly this kind of intellectual laziness disguised as common sense is the LAST thing i'd expect to find on HN.
The other nuance here is focusing on process gives you a place to put less capable people that you're stuck with. You can create tightly defined QA tasks that are easily verified, give people a checklist, and keep them away from places where they can break things.
I tried out google glass last fall and this matches my experience of it. It really doesn't overlay info as part of your normal view, which for me removes the AR designation. It does place information in a place that doesn't require you to move your head or look down, which is I guess where the "heads up" description comes in...but it still requires you to divert your attention, like looking at a rear-view mirror in a car. Sure, you can still see things in front of you in your peripheral vision, but that still seems less integrated than I would associate with the term HUD.
And with good reason. That was never said by Apple. They simply explained why it happened (people's hands touching various parts and messing with the antennae). The media created that whole "You're holding it wrong" thing.
I think it's more of a function of how much time elapses between dinner and bedtime.
I had the same thought, but felt it was best to be clear that the practice isn't unheard of in the United Kingdom.
Apart from the Nice man from the Eu with the CAP monney nudge nudge wink
A (RAID6) fileserver running ZFS with filesystem-level snapshotting. It's really, really good.
Reckon you could write a book for web folks?
Genius tests ‘annotate everything everywhere’ feature
I have the same problem on 4.4.4, but in moto G. The solution that worked was to wipe the cache partition and reboot.
It can help prevent diabetes and is theorized to assist in slowing down aging (through HGH secretion). Longer fasts are theorized to help stave off cancer to some extent, but I don't believe those ideas are backed up by hard science yet.
In support of your stance, Danish Radio (Danish version of BBC, including TV, radio, internet etc.) have not only admitted to using fake detector vans, but even went so far as to by on the roof taxi ads displaying a message akin to "This is a detector van"