skysight-inc/HackerNews huggingface dataset:
The classic manual method of cert pinning is not feasible for more than a handful of large sites, because each browser that supports it has to update its own pin list.

Google adds a whitelist of public keys to Chrome upon request, only for high impact sites. Firefox does the same, with a different list. Safari doesn't support it at all. IE supports it in a useless fashion.

This is totally unworkable in the long term. Broader support also opens it up to smaller (less savvy) sites who will inevitably get bitten by a lack of foresight. "Oh, I only authorized GoDaddy and now I use Entrust...". However, set too broad a list and you've just given an attacker a list of targets to pick the weakest link from, possibly not dissimilar from choosing a target amongst "all CAs clients support".

The manual method is not the only way, and it's always been apparent that it was not the end game. HSTS and HPKP are important steps forward, and support is decent. As always though, IE is a useless impediment to progress.

https://projects.dm.id.lv/Public-Key-Pins_test

It's going to be a while before HPKP is everywhere, but it's definitely a better approach.
An architect needs to keep learning in much the same way as developers do. I would look to this person to make the decision on the high-level system design/architecture for each solution. I think they should also be pushing the dev team to look at new tools and technologies, and it would really help if they had some understanding of those technologies.

I think there is a similar debate (but from a different angle) around should your project manager or scrum master be technical. Obviously an architect should be technical but how much familiarity should they have with the technologies being implemented. I would say they should have a good understanding of them.

There is some benefit to being conceptually removed from low-level technology concerns, in that the architect won't get caught up in design patterns intrinsic in the technologies the devs want to use, that could actually be detrimental to the overall design - the old 'the devs can't see the wood for the trees' argument.
Why has wage growth been slow for thirty years now?

Employers are paying more to retain workers, but at least in the US that extra money is getting soaked up by the health care system instead of ending up in peoples' paychecks.
This article covers a lot of ground, but I really enjoyed this quote:

HTML and CSS—those are not pro­gram­ming lan­guages. Those are data-en­try for­mats. So if you as a de­sign­er have ever looked at HTML and CSS and said, “you know what, I would rather drink bleach than learn how to do that,” then I think you’ve got the mak­ings of a great pro­gram­mer. Be­cause no­body wants to work with that stuff. Pro­gram­mers hate te­dious work of any kind. I hate HTML and CSS. That’s why I like pro­gram­ming. Be­cause the point of pro­gram­ming is to rep­re­sent ideas at a high­er lev­el.
Interesting. Bookmarked!
Response to a post from a product manager is addressed to project manager O_o
ok, perfect thanks, I will try and if I don't get something quickly i will open a feature request.

Thanks again for the time you took to answer me
> The idea behind the app is this - every question in this world can be asked in a simple short way, even complex questions can be asked in multiple short questions. The same goes with answers - every answer can be broken into multiple short answers.

Are you sure this is actually true, or is it just wishful thinking?

Complicated concepts cannot always be distilled into 140 characters, and not all questions can be answered in such a short space or indeed, in such a format. I would imagine that the vast majority of the questions and answers will be trivial, which in itself is not necessarily a bad thing, but it does mean that for any detail, users will need to look elsewhere.

This feels basically like one of those Twitter Poll apps, although many (most?) charge for their features.

Don't give up, but I think you need to focus on detail - otherwise this is just Jelly (https://itunes.apple.com/gb/app/jelly/id685652528?mt=8) with a less interesting UI.
I've been reading up about NG development on the wiki lately and have been very interested in doing this. Seeing tools pop up is pretty awesome and it looks like there's a good chunk of other people with the same idea.
While I have as much distaste for godaddy as the next nerd, this sounds like a non-story?

He got emails and a grace period, which is as much as I expect from any budget registrar.
Without giving too much away, how does this work and / or how reliable is it?

I was actually looking around for <famous VC>'s email and it produced one for me.
This is good. Humor is the way to handle heavy topics like this. He's a dissident and accused of treason -- only dark humor can help us cope with this.
iOS uses government certificates, too.
Haidrali, thanks for your comment.
> Javascript is a dynamic language, and will never make the transition to a static one

Never say never. Typed structures are a proposal, and what make you think that we'll never see flow types in the standard someday ? Javascript will always give the upper hand to dynamic typing, but I can see it becoming a kind of hybrid language, where both dynamic and static codes can coexist.
I'm also on the side of user retaining full control over the content he/she consumes, but there's an important difference here - in case of ad blockers, it's your choice as a user to not have ads displayed (or have them changed to something else). However, in case of Privdog, it's a third party changing ads without your or ad-displaying site's knowledge or consent. So maybe I, as a user, did choose to display ads on some site because I want to support them (I do that every now and then if the site asks nicely) - but then the site still doesn't get any of my money because some scumbags injected their own ads.

It's a clear theft - a malicious third party that intercepts money exchange between two other parties without knowledge or consent of either.
Segment is hiring engineers to supercharge our distributed queues
Why keeping your VCs updated is important
My guess is this is settled quickly: a few million for the attorneys, a few thousand for the lead plaintiff, and either a coupon for each of the class members or nothing at all (cy pres).
> This application will be able to read and write all user data.

Fix your permissions please, sounds useful but no way are you being granted full read/write to personal and organization repos.
There's not much to protect against that. But looking for 'perfect' CA protection is hopeless. At least by eliminating the more untrustworthy CAs you can protect against some attacks.
10 Things That Make Your Business More Valuable Than Your Competitors
Highlights of the Oracle database: Virtual column
Aye, I'd concur with that. Pretty unusual/interesting that they chose Athenry Co. Galway though - I guess specific location is pretty irrelevant in a tiny country like Ireland but I would have imagined that Cork would be the default choice, since the EMEIA HQ is there too. Good news for Athenry in any case!
If it produces an email it is pretty accurate. It checks various possibilities, and returns the valid ones. If only one is returned you can be pretty sure it is a valid email. You can use the social links to see if the email is associated to a facebook / twitter account.

It does check that the domain is not "catch-all", or that it doesn't simply ignore our queries.
Well, one of the big advantages of Ireland is that it's the coldest country in Europe with a decent amount of transatlantic fibre running by its coast, and it has pretty stable temperatures.

Ambient temperature can be very useful if you're building a datacentre. I work for the largest hosting provider in Ireland, and our new datacentre uses the temperature differential between the inside of our pods and the outside air to do energy recovery and cooling, and it's pretty effective . I'm a developer, so I don't have all the details, but I'll ask our CTO later for the details, if I've time.
Yeah - total band-aid fix for a broken system (CA) but here's how to remove them for anyone interested: https://github.com/sammcj/delete-unknown-root-ca
Do you have a link to some 'official' source saying that the movie is free? (I'd like to copy it, but only with the creators' permission).
This tool is amazing!
I think it works kind of like this: it splits firstname and lastname, tests for a response code on some random combination like "firstletterOfFirstName + last name" on a service like this http://verify-email.org/
very clever !!
Why is it called a snafu when a large international company installs malware into customers devices, and a cyber attack if its the Russian mafia? The mafia might also use stronger attacks than just installing adware, but adware is still one of the more common way binaries are infected with malware.

It would be interesting to hear from a anti-virus company on how much resources is spent yearly on adware research.
Ugh. Nice find, I'll fix that asap!
> Was it really necessary to add "class" syntactic sugar?

I think it was. Using the class syntax gives a semantic meaning to the code that propotype wasn't. And if you think it was, then what was the point of typing again and again MyClass.prototype.<> ?

Refactoring Javascript code was a pain, and an excessive identifier redundancy was part of it.
> you needn't be culpable for offenses perpetrated by others regardless of their relation to you.

Unless they are your children and you brought them up. Then there's some justification in your feelings.
I realised this after the fact then thought, hey, my bugbears with project / product managers are fairly interchangeable.
> They probably deserve it but the net effect would be to break many sites for many users. One step forward, two steps back.

This is the attitude that, I think, make these problems possible. There is a time when you should care about collateral damage - say, when deciding whether or not to install malicious crapware that steals from people and/or throws feces in their faces while they browse. But here, it's time to have balls. They should pull it.

Because right now, Comodo literally pulled off the Honest Achmed move[0] - they sold so many certificates that apparently they can do whatever the fuck they want and no one can do anything, because everyone is afraid of breaking browsing for many users.

I say, break it. People will get annoyed, but they will notice. They will learn what happened. A lot of companies will need to spend time and money on new certificates. Let them. They'll learn who fucked them over, and learn to be more careful with who to trust. Not doing anything shows only that the chain of trust is toothless.

[0] - https://bugzilla.mozilla.org/show_bug.cgi?id=647959
Apple's green advantage: Betting on solar & fuel cell farms since 2013
With certificate pinning, the chances that malicious use of certificates by rogue CAs goes undetected have decreased a lot.

For Firefox, use CertPatrol:

• http://patrol.psyced.org/

• https://addons.mozilla.org/en-US/firefox/addon/certificate-p...

Also, a few websites are starting to use DNSSEC with TLSA and DANE. There's also a Firefox plugin for that at https://www.dnssec-validator.cz/
Designing Fail-Fast Error Handling
These problems in SSL and the kludges in HTTP/2 to avoid connection overhead would be greatly reduced by moving to a proper dnssec, ipsec, and tcp reimplementation.
Wiki Wars: Inside the increasingly nasty battle for Wikipedia’s soul
I think patriotism can play a significant role.
Freight|Freight forwarder Software
> It's not always a choice; where I worked, as architects we sometimes had to put on our hero-capes and wade into code to save the day.

I think its a matter of context, and one "architect" from one organisation to another will differ greatly.

I've never seen a good "hands-off" architect in my experience. They've normally been the failed developers, or the ones that have been able to network to such an extent they get to a hands-off role. But, that's in context. Dilbertian almost.
5 Simple Ways Facebook Can Monetize WhatsApp
=/ It produced inaccurate results for myself and a few coworkers/friends. (both public domains like gmail/yahoo and corporate emails)
If you use firefox, take a look at https://addons.mozilla.org/de/firefox/addon/certificate-patr...

Does exactly that.
I don't see this suit as trolling.

There exists a large group of people who were sold a product which did not perform its primary function of "doing what its owner told it to do". It turns out that this was intentional on the part of the manufacturer. The nature of the problem is such that returning the product for a refund will not suffice, so the consumers should sue. The most effect way to handle a large body of plaintiffs against a single defendant is with a class action suit.

Lenovo will inevitably settle or go to trial and be found guilty, there is no other possible outcome. I personally hope that this erases their profits from Superfish, and quite a bit more for the flagrant and willful violation of consumer trust.
Nah, Cork wouldn't be a good place for something like this, other than the fact that a good amount of submarine cable lands there. But then by that, Wexford would be even better.

The big reason for putting stuff on the west coast is wind and cooling.

Doesn't hurt that Athenry is close enough to Galway City, and that makes it a great place to live. Frankly, if I was a network engineer, I'd totally be down for moving to Galway.
N cats on a bed
What about criminal prosecution? In plenty jurisdictions this is illegal. Wiretaping, unauthorised access, unauthorised decryption, "Hacking", breach of privacy (manybe even copyright infringement; they edited other peoples content without their permission) or something like that is usually prosecuted harshly if it's done by a individual. I hope a company does not get away with it.
I think the article is a tiny bit misleading. The main reason for the perceived lack of enthusiasm towards deep learning in neuroscience stems from the fact that such multilayer networks are not plausible models of neural architecture. In a way they are not unlike chess computers, which surpass human performance multiple times yet offer little to no insight into how a human plays chess. As data analysis tools, however, they are quite brilliant.
You don't need scientific proof or reading material - the theory you are trying to prove is wrong.

Just look at the number of billionaires who have decades long 20,30,50% average returns - not possible by chance.

The efficient market hypothesis believers say that these people were lucky.

People who say that don't understand probability.

The probability of winning big one year is probably not that rare - lotto win sort of numbers, and given the number of players and the number of iterations - easily explained away.

However, the existence of scores of individuals who have been able to profit for long periods of time completely destroys the efficient market hypothesis, because the hypothesis says they can't exist.

Take one single example ; Richard Dennis. He started off with $1500 and ran it up into hundreds of millions. He then taught a group of people who had zero trading experience his system and then they went off and made hundreds of millions (some are still going).

http://en.wikipedia.org/wiki/Richard_Dennis

That is completely non-random outcomes. The efficient market hypothesis is something that academics wet themselves over while other people laugh at their theories and make millions.

Essentially, for 'systematically beating index performance on the market using publicly available data is not possible' to be true, then the scores of people who have done just that, over decades, cannot exist. And yet they exist.
Apple is making it possible to Track Your iPhone Even in Switch off Mode
Forget Market Size, Think Problem Size
The one for Ruby is missing. Anyone?
I Went to Europe with a Chinese Tour Group
Compilers aren't that good. We're still in the dark ages.

Your snark should be turned inward.
Awesome! Living in Denmark, this is huge news!

I would have thought they would place it in Germany or the Netherlands, but in Denmark we can provide the datacenter with 100% green energy, and this is one of the main concerns for Apple.

I wonder what the 300 people would work with, since just maintaining the datacenter wouldn't require that many people. So hope they're moving other jobs to Denmark, and accumulate different job positions there.
> Are you sure this is actually true, or is it just wishful thinking?
Powatom, it is not completely true. It can be true only theoretically. You are right when you said that most of the questions asked by most of the people in our daily lives are trivial and can be answered in a simple manner without elaboration.
The difference between Lenovo's use of Superfish and Ubuntu providing anonymized search data to Amazon is night and day in terms of "spyware".

I don't like either, but Lenovo's actions were negligent to the point where they have exposed themselves to a justified lawsuit -- Ubuntu did not.
Team player – In search of a unicorn
Learn the Basics of Body Language
On the other hand, if you run "an unsupported Unix" that implies you are a bit more tech-savvy (and willing to put in the effort) than most when it comes to these issues.
This is a follow-up to this previous submission on error handling in Scala:

https://news.ycombinator.com/item?id=9043721

The post generated some good discussion on HN and Reddit:

http://www.reddit.com/r/programming/comments/2vr6bi/error_ha...
You can try assembly.com and bountysource.com (with or without providing bounties, just say in the README or somewhere that you use bountysource, a user might go there and support the project or a specific bug).

The website needs some work. Full width is not good for readability. A quick héllo world on frontpage is helpful. In the frontpage it doesn't says that it is a Desktop automation.

Good luck.
'tax reasons' are actually why I find this most surprising. The "Double Irish" tax arrangement is being phased out, which has led some to worry that companies that are only here to take advantage of it, may move on.

Seeing the complete opposite happening is very reassuring (as a local).
You bought a machine with Ubuntu pre-loaded?
In Brazil also: "armado até os dentes".
even thgough im Palestinian and these guys are Israeli, should we really be blaming superfish? this company makes software, seams like a bunch of hackers to me. Lenovo is the real culprit here.
What?! That's a good thing! Are you sure you read that right?

Frankly, we need more native tree cover, and that's what they're planning on doing, and getting rid of those damned ugly conifers that are only good for wood harvesting. Personally, I'd like to see more marginal land being returned into proper deciduous forests. The problem is that people have difficulty getting to the idea that more forest cover would actually be beneficial to the unforested land as it would protect it from the wind, thus preventing soil erosion, which is an issue, especially in the west and northwest. I'd a discussion about this in a pub over Christmas, and the arguments against boiled down to people not wanting to lose grazing land for sheep, which is reasonable enough, and that forest can be breeding grounds for midges, which is less reasonable.
I was very surprised to learn that "focussed" seems to be a correct spelling/variation of "focused".
Ireland has maybe 1% of land covered by trees. Choping down forest near major city to build datacenter is just bad. There are many free pastures.
It is a clumsy implementation at best and not ideal for any covert operation, why would a serious intelligence agency have any interest in this?
Honestly, I'll all for it. But the article had nothing of substance. After a deluge of NSA/GCHQ/ASD/Canadian/NZ links lately, this is like saying, "They're spying on us". Sure, and I despise that, but what's the point of posting this until there is something of substance posted? Whet our tastes?
Because the semantic versioning meme appeared tens of years (!!) after people started using x.y.z versions for software (including Linux).
Yeah, it returned exactly one email that's likely (in my opinion) to be correct. That's really cool. Thanks.
I would use a tool like this as our product does need hustling tools.

I used my own email id(plus a few more) and my actual email wasn't in search results. Looks like they just do standard string combinations.

Our aim is to source publicly available information and build a profile of a prospect for use by our clients. Maybe I am missing something and if I could see an explanation of their process that would engender more trust in their results.

Back to writing my own data mining tools..
The IT spokesperson from the same party as the former and current mayor of Viborg wrote a very critiqued article about making it attractive to build data centers in Denmark on the 6th of February[1].

Now when this deal is public he will surely boast about his brilliant foresight in the upcoming election...

There's of course no definite proof that he knew about this deal at the time of the article, but the timing couldn't be better.

[1] = http://www.version2.dk/blog/tid-til-danske-datacentre-76979 (in Danish)
Manufacture of new home systems ceased in 1997. Games were still being sold by the system's manufacturer, SNK, up until 2004. There was still new arcade hardware being produced up until that date (with the last games also being released as all-in-one boards in addition to cartridges). Any games released since then have been made by enthusiasts and third party developers - the titles produced by NG:Dev.Team (https://en.wikipedia.org/wiki/NG.DEV.TEAM) being prominent examples.
It takes time for that to recover. Initial plantations are always obvious, but that'll change over time.
It's surprising to me how much narrower 40 columns is now than it was when I had a real Apple II.
Free and easy intercepts with a straightforward "it wasn't us!".
>I've never seen a good "hands-off" architect in my experience.

Because when it's done right, coding is 80% "architecting" stuff. If there is more than a tiny amount of menial work involved in programming then you are generally doing something very wrong.

I think architect is one of the worst metaphors to ever grace the software engineering profession, by giving this impression that a programmer who can work "hands off" is even possible.
Newest stuff from the nordics
Why Travel and Hospitality Companies Can’t Do Without Data Aggregation Services
This looks awesome, I just wish it could go full screen on my mac. You can download the OSX dmg here, I almost missed it since it's at the very bottom of the instructions:
https://github.com/Swordfish90/cool-retro-term/releases
Therefore I wrote "become happier"
Few do, I can probably agree with that. But it's not like investors through money out of the window unknowingly of where it ends.
They either knew about it and didn't care about it or they just didn't care about it in any case, because following due diligence would've raised some red lights.
I think you may have misread the OP because you're tone is one of disagreement while your content is a near-reiteration of his post.
That makes a lot of sense, and would explain why the OP couldn't see the American, Japanese or Chinese CAs.
Haha fair enough! I guess blaming private companies and investors is a good way to move attention from yourself.