skysight-inc/HackerNews huggingface dataset:
I think you can just extract the OEM Windows key from Windows, download a clean retail .iso of the same version and activate it with the OEM key. I'm pretty sure that worked with Windows 7, no idea about 8+.
The times on the left, standalone, are Pacific. In the text on the right, UTC.

Edit: uh, wait, this is wrong. It's edited (possibly) or I'm just bleary-eyed (more likely).
I think that is because you're using IE 8...
I thought that Chrome checks and reports that google.com certificate is a google issued certificate. How did this mitm attack not pop up massive warnings in chrome?
That seems like a pretty easy line to draw. If the software is effectively a device driver - OK; otherwise - no.
TheNextWeb does a poor job at reporting technical facts:

"[...] its own self-signed certificate authority which effectively allows the software to snoop on secure connections [...]"

"[...] the certificate allows the software to decrypt secure requests[...]"

As kentonv reported, it's actually the local proxy, installed by the ad(Mal?)ware which is at the center of the MiTM attack. The root, self-signed certificate is installed in order for the attack to be transparent to the victim (i.e. no warning in browser).
As a non-technical user with a newish Lenovo laptop, is there some way I can make sure I'm not affected by this?
There is at least one possible solution for the near future: prohibit computer vendor by law to accept money or other compensation for pre-installing _any_ kind of 3rd party software except the bare naked OS.

This shit must stop.
For newcomers I'd suggest this introductory course by Erik Meijer: https://www.edx.org/course/introduction-functional-programmi... . It's about FP, not strictly Haskell, but it really helped me starting with it and really stimulated my curiosity (and he really can explain hard concepts in a simple way imo). I started reading the book after I completed the course and helped giving an answer to a lot of questions I had during the course.
https://developer.chrome.com/multidevice/data-compression
A timeline for designing a website from start to finish
Then they should have written "increased our market share again". Growth in corporatese usually refers to revenue or profit, which is not the main point here. Confusing choice of words.
Modern Family’ to air episode shot almost entirely on iPhones
Apple orders up to 6M watches for April launch
FWIW, had pretty good experiences with the five Thinkpads, private and company boxes, that I was using at one point or another. There are things that could be (a lot) better - battery life on the W530 and, related to that, the ugly, ginormous brick of a charger that it comes with - but, all things considered, I will remain a Thinkpad customer, since I am not aware of better alternatives. The machines work without fail, and survive incidents like a fall from the overhead luggage compartment on a plane.

Crapware doesn't bother me, since that gets wiped before I start using the box, including the biggest offender of all them crapwares - MS Windows. Unless you're concerned about one of those disk-firmware-rewiring NSA uglies, that's a foolproof solution to the nastyware problem.
Of course... It's just a certificate and proxy that comes by default with the OS as it comes from their factory. You can uninstall the certificate, reinstall Windows, install Linux, etc. and the problem will disappear.
Fair call on MS, but this allows for free downloading of datasets from public URLs. Surely that's more expensive than downloading from the other cloud platforms, given that you've got a (probably?) higher likelihood of USA-based hosting when pulling from AWS/Google.
0:30 passed and no update?

Who would have guessed that? Anyone?
Let's see now...

Passive-aggressive rant? Yup!

Knocking down your own Straw Men? Yup!

Added nothing to the conversation? Yup!
I don't really think the problem is that "it's a .org" domain. But this is posted in what's essentially a place where a lot of people who understand why "positive growth" is not only wrong, but a load of brainwashed crap, spend quite some time :).

Phrases like those belong in press releases, not a blog post from an organization intelligent people respect.
Can you clap with one hand? I can
I usually use a KMS key to install and then use the Windows+Pause dialog to change my product key to the key that is stored in my BIOS.
I believe it's a typo as all other references seem to point to 22:59 Feb 18 2015.

It's 22:59 Feb 18 2015 also for Google Cloud SQL https://status.cloud.google.com/incident/cloud-sql/17006

Edit: It turns out this was the case. Updated now.
There have been a couple of Show HNs with projects like "Twitch for coding". I don't remember what they were called though.

Great idea anyway. I don't think Twitch is the perfect medium for this though since a full-featured "Twitch for programming" could include stuff like live-pasting snippets to your audience etc.
Hillarious fart like sound made by hand
Innovation Act Needed More Than Ever as Patent Trolls Roll On
I feel like I'm missing something not in the sense of not understanding how to use the language but not fully understanding what the principles of functional programming are.

At least, what makes one language imperative vs functional?

I always thought functional languages were about describing what things should do whereas imperative languages were about telling the computer what to do. I suppose in that sense loops are not really functional because they are not very descriptive, but I was wondering if there was more to it than that.
Lenovo is a Chinese company, so it's possible, but you'd think they're more likely to be responsible.
Thanks. I read it but didn't see the big deal but putting it like that I can see why it would be. I still prefer doing it this way though.
How do I learn coding in a single night?
Rdb – a Node.js ORM with transactions, persistence ignorance and promises
Not to minimize Lenovo's guilt for pre-installing adware and not to say MITMing HTTPS fine - it is not! But...
I'd rather have a laptop that injects ads in my Google searches than one that sends all my data to some three-letter agency in the US.
That being said, we might one day find out that all the Chinese laptops and routers are also sending all the data over to China... That's when the whole story will start being really funny!
How do you safely install Mozilla Firefox if you have a broken certificate store?
Hardware manufacturers cannot be trusted with software. One day the horrors of proprietary firmware will come to light as well, and people will wake up to this shit.

Dells entire business line of Latitude laptops have been completely broken under Linux for 10 months. It took them that long to merely revert the "keyboard improvements" made between two BIOS revisions, but they subsequently shipped, and are still shipping, brand new machines without the fix or any downgrade path. These machines just aren't fit-for-purpose.

Imho Richard Stallman is right if for no other reason than I see no other way to end all this consumer abuse and borderline criminal negligence. In the mean time, this debacle sounds Class-action worthy to me.
With Windows even if you buy the boxed version it still doesn't mean you are free from hardware vendors fuckery. The necessary drivers are quite often bundled with shitware.
"we power the nonprofit's frontend fundraising experience"
This is it right here...as well as the custom domain

So "Shopify for nonprofit fundraising", while limiting, would have been completely clear. But "Shopify meets Salesforce"...now that's confusing :) Trust me I know how hard it is to come up with these so definitely not trying to be negative. If your customers get "Shopify meets Salesforce" without further explanation then it's probably just me being slow :)
What was wrong with V-tail Bonanza pilots? (2012)
Downvotes? Really? Github could make a stand here and disallow licenses that evil and self-serving. With this license, anybody who even uses this software can't challenge any patents of Facebook's. If Github said no, this is wrong, they would set an example for everyone else and single this out as the terrible license it is.
They don't teach you number theory before they teach you addition and subtraction in primary school.

Don't read the "Monad tutorials" and especially do not stop programming in Haskell until you "learn monads". Find one of the respected books, read it and do the exercises.

You do not need to thoroughly understand monads in order to do some IO programming just like a violinist does not have to understand the physics of vibrating strings or you don't need to be an auto mechanic to drive to the grocery store.

Write the "Guess the Number" game in Haskell using IO and you should understand the basics and that gets you far. Reading and writing to/from files and network sockets, etc works pretty much the same as you're used to from imperative programming languages. "Guess the number" contains just enough control flow (repetition, conditionals) to get you started.

I've written tens of thousands of lines of Haskell code, including production code at work, and I still don't know what a Monoid is. I have only a faint theoretical understanding of monads, but I am fluent writing IO code and applying monads to other problems like parsing and error handling.

You should only study monads when you're fluent doing some basic imperative programming in Haskell or if you are a math student and have a keen interest in category theory.
I think his might be very helpful.
If you like this, Manacher's algo is very similar to z-string matching algo: http://codeforces.com/blog/entry/3107
"Someone will extract the private key in the next few hours, and then HTTPS will be basically completely broken for all Lenovo users -- anyone will be able to spoof any site to them."

Do you mean the proxy is remote? That is not the impression I have (otherwise having the private key locally makes no sense).

If it's local, then even with the private key extracted, and considering a lot of website force https nowadays, we should still have standard crypto between the lenovo computer and the website. EDIT: As long as the adware checks the website certificate AND doesn't trust it's own self-signed certificate in the store... yeah... a lot of ifs...

Anyway, thanks for the additional details, more helpful than "[...] the certificate allows the software to decrypt secure requests[...]", found in the article...
I definitely haven't heard of any company that discourages overtime, and my experience has been very similar to yours.

On the other hand, I feel like saying "You work overtime, it means you are either trying to play politics or inefficiently managing your time" is a bit of a stretch. I've met coworkers who I genuinely believe just enjoy what they do at work.

It seems like an ideal would just be to make sure everyone knows they are not expected to work over time and nobody will hold it against them if they don't.

However, I do remember there was a company which had 4 day work weeks! I believe it was an education focused tech company in Oregon.
You built this? I have actually used this, which means you are doing something right, because normally I don't register, I go off and build my own version. So kudos!
Actually this pyramid technique has been around at least a few years and probably goes back to beginnings of google.
This looks like a great idea, I'll be tracking its development for sure. Android without cumbersome Java and NDK sounds like pure bliss.
Google Employee's Video of Nest Smoke Alarm Malfunction
Ah I guess that is true! There's no reason to have them unless you need them since it would make the language simpler. Also I am beginning to see that loops actually can lead to programs which are hard to reason with, so if anything I guess they would want to not include them unless absolutely necessary.
That’s like leaving an abusive relationship to instead plug yourself into the Matrix.
We found that we could still go into their console, SSH into the boxes (from the browser-based thing), and reboot the boxes from there. When they came back up, they worked. May have just been good luck, just happening to come back up on hardware that's not behind the bad routers or whatever it is.

Edit: Also, we found that our instances were reachable (they mostly provide a JSON-based API over HTTP), in the sense that they were getting the incoming HTTP/HTTPS traffic that they normally do. But the responses were not getting back out to whoever requested them... lost on the way back out or something.
I always have been interested on haskell.... but it doesn't look to be enough practical. For example there is almost no information about how to write a smartphone videogame in haskell, even if it possible to trasnpile it to C or to Javascript. It is possible to interoperate with the host language? Does it perform well for high performance activities? Is it possible to isolate some kind of events in a thread?

Edit: This lack of practical approach is what makes me hesitate in contrast to clojure (just to mention a language), especially if the only goal is to become again a "better developer" rediscovering functional terms and abstractions also documented in other languages.
I have the previous version and am really pleased with it.
The new line is kind of missing a developer edition with 16GB RAM in my opinion.
With a kit containing all the required components, along with instructions perhaps something like $30, but I'm not sure the cost of such things.
I did the same with "test". No idea what this is still.
That last paragraph really helped make this clear. Thanks!

I guess I never thought about it that way but the logic in the loops could be considered their own functions, except they actually can reference and alter variables outside the loop which is kind of against the ideas of functional programming.

Awesome! Thanks again
/start rant/

I honestly have no idea why more entrepreneurs aren't focusing on energy.

The world currently uses 528 Quadrillion BTUs annually[1], 87% of which are fossil fuel based[2]. These fossil fuels are constantly adding more carbon to the carbon cycle, which is the primary driver for climate change[3].

So, this it is challenge for our generation. The history books will catalogue the next 40 years as the period we address climate change. How do we transition 87% of the world energy sources to something that doesn't add carbon to the carbon cycle? No seriously, how do we do it? To most people that sounds like a very difficult feat. But to an entrepreneur, that sounds like a huge opportunity[4].

When you're talking about multi-trillion dollar industries that have to shift to a completely different resources, there's got to be some upside for the innovative-minded hackers here. However, when I look around in my energy community, I see many faces from traditional energy jobs, and very few faces from the tech sector. Why? Because I think the tech community thinks of energy as an old industry.

Which it is, but we see that as an opportunity for disruption and progress. The startup I'm in is currently addressing the TWO WEEK wait it takes to get energy data out of utilities. There are many other startups that are trying to address more inefficiencies in energy, but there definitely needs to be many more.

For the love of all that is holy, stop making social network, marketing, and consumer apps. Contribute to something that will define your generation: energy.

/end rant/

P.S. If you're in the bay area, I'm hosting an energy entrepreneurship event next Monday[5].

[1]: http://www.eia.gov/cfapps/ipdbproject/IEDIndex3.cfm?tid=44&p...

[2]: http://www.eia.gov/todayinenergy/detail.cfm?id=11951

[3]: http://www.ipcc.ch/report/ar5/

[4]: http://www.pvsolarreport.com/the-next-internet/

[5]: https://www.eventbrite.com/e/ype-energy-entrepreneurship-at-...
I want to note that LYAH may not work for you if you have my kind of learning style. I need to solve concrete, realistic problems to creatively use the knowledge imparted on me. I can't just read stuff and understand. Real World Haskell [1], the course by Erik Meijer [2] and the courses referenced here [3] worked much better for me.

[1] http://book.realworldhaskell.org/

[2] https://www.edx.org/course/introduction-functional-programmi...

[3] https://github.com/bitemyapp/learnhaskell
There are updates and clear times for when to expect the next update.
What's your agency? I'd love to chat.
Both monads and monoids: The only thing you need to learn about them is practice. Screw tutorials and books. Read LYAH's intro chapter once (you won't understand everything, but that's fine) and then write code.
How could you add mitm functionality by mistake?
Interestingly it is disabled for Google services (making the article's image irrelevant :).
If this regex matches, `nofish` is set true, which disables superfish:

/^https?:\/\/(www|play)\.google\.(?!com\/analytics\/)/i

Also, if you add a <meta name="superfish" content="nofish"> tag, it gets disabled as well.

Possibly some agreement with Google, like the ones they tend to make with ad-blockers? (http://www.theverge.com/2015/2/2/7963577/google-ads-get-thro...)
Chrome ignores Trusted Root Certificates when checking certificate pinning.
So basically I have to pay for the hardware and then see annoying ads too?
Huh, that's actually seeming not that dissimilar from what I had in mind.
Vote to have Reddit donate part of its ad revenue to the Mozilla Foundation
Apparently transparent – CSS3D HTML5 Experiment
Apple wins patent for virtual reality goggles
Isn't this just a specialised pawn shop? The more interesting thing is that the 'value' of the cheese goes up over two years so there is an incentive to purchase back the cheese, although I suspect the 'bank' sells the cheese on behalf of the farmer for a fee and writes off the loan and gives the farmer any profits.

I'm guessing a similar approach could be used for some hams but not sure if there are that many food products where there is relatively high value in very small amounts of space.
>Every banking site, shopping site etc. you’re visiting is man-in-the-middled

That sounds prosecutable. Call Carmen Ortiz. https://en.wikipedia.org/wiki/Carmen_Ortiz#Prosecution_of_Aa...
It really looks like their biggest malady is a junior web PR team. A lot of the web site looks and reads like someone had a lot of good ideas but hadn't really run/written for large projects (like a major corporate web site) before.
On the other hand globalization has made it much harder to scam in many ways since information about scams spread instantly. Back in the days you could use any simple trick and people would buy it over and over again since they had never heard of it before. Nowadays the scammers need to be much more inventive.
I can't see why it would matter, since literally every laptop is made in China already. Plus the vast majority of computer components.
How to add a tab with products from the same manufacturer in OpenCart 2.x
Beam smart projector
That's my current best guess too. Which would imply that Firefox users are...fine? Hopefully?
2-3 degrees lower would be great for savings and the environment (+ health) :D
"When using Superfish for the first time, the user is presented the Terms of User and Privacy Policy, and has option not to accept these terms, i.e., Superfish is then disabled."

Brilliant! It is behind a "Terms of User and Privacy Policy" text.
I have had first hand recent experience with this. I bought a new Lenovo laptop at the start of the month.

When I put a new webpage online using my webhost's cPanel to edit the raw HTML everything seemed fine, until a friend asked about a 'best-deals' script running on the page. The Malware / Adware was intercepting & inserting a script not only into pages I was viewing but also pages I was putting online.

Very, very concerning. I have since removed it completely from my system but it's still caused some paranoia. Thankfully it was only a hobby project which was affected & not paid.
Ssh'ing from the gce web console seemed to make my instances reachable. Afterward ssh from terminal and web access worked.
Doesn't he just merge stuff and write on the mailing list these days?
Cheese is very interesting because it's a food!

There are also 'Gold loans' in India where you can give up your jewellery for a loan. What's interesting is that there are specialised banks that do this rather than an ordinary bank taking it up as collateral.

I guess other items that could work this way more interestingly than gold are whisky & wines.

[1] http://www.manappuram.com/goldloan/
The Javascript code shown connects to "https://www.superfish.com/ws/". WHOIS for "superfish.com" gives names and addresses of people in Palo Alto, CA and in Israel.

The other URL in the code is "https://www.best-deals-products.com/ws/sf_preloader.jsp". That domain is being blocked by some DNS services right now, but it's up. It's a Domains by Proxy domain. That code is worth reading. You can tell what it's looking for as it examines the pages you are browsing. It has a detailed analyzer for car ad price comparisons, and a simpler one for hotels. It phones home to "http://ia1-p:10009", which isn't a valid domain, but there may be some conversion of that I haven't found. One out of every 10,000 times, it reports some debug info to "https://www.superfish.com/ws/trackSession.action".

There are long lists of sites, both blacklists it avoids and whitelists it messes with. There's a list of "paying countries: "IE|CH|ES|US|AU|BE|IT|AT|NO|CA|DE|NL|SE|GB|DK|FR|BR|NZ|AR|MX|CL|CO|RU".

Lots of comments and debug code; it's not obfuscated at all.

Javascript experts, please take a look at this. There might be something hostile embedded in this adware code, and it may bring in more Javascript.
Not sure what you mean with "non-traditional keyboard", but Lenovo did change the keyboard in the 3rd generation Thinkpad X1 Carbons, reverting the layout of the 2nd generation to a more conventional one: with six rows instead of five. Glad they did.

Ars Technica just reviewed the 3rd generation version: http://arstechnica.com/gadgets/2015/02/thinkpad-x1-carbon-re....
Your fears are not warranted. Haskell is the most practical of the "research languages" out there, it's very mature and has good facilities for interfacing with the "real world".

> For example there is almost no information about how to write a smartphone videogame in haskell

This has been done before but most of the "hard stuff" here is getting your game built and deployed on a smartphone. You can find Haskell for Android articles if you look around.

There are examples of game programming in Haskell too.

> It is possible to interoperate with the host language?

There is no concept of "host" lanugage, Haskell emits native code.

You can call native code from Haskell and Haskell code from C or other native languages.

> Does it perform well for high performance activities?

Haskell is good enough for most "high performance" activities (it's one of the highest performing high level languages according to the debian shootout), but caveats may apply with long running processes and garbage collection, etc.

> Is it possible to isolate some kind of events in a thread?

Yes. Haskell has very nice threading facilities and high-level concurrency primitives, including stuff similar to "channels" from golang.
This worked for me too, about an hour ago. So not just good luck it seems :-)
Isn't superfish (or is it Phish?) a US/Israeli company?

Some of the code inserted is pretty strange, including functions to checks for lenevo, bestbuy.com and isPayingCountry() with a list of country identifiers:

http://pastebin.com/AQqWirba

So apparently they work with some big companies, and I can't work out what the country check is for, perhaps for subsidiaries of a large customer?
Right, when I posted it said the next update would occur at 0:30, but it was after 0:30 and there was no update.
Amazon App store is the first that comes to mind, but IIRC most apps sold in asia are through non-google app stores