skysight-inc/HackerNews huggingface dataset:
I don't use Ubuntu and Redhat. Once they decided to follow a windows model with systemd and the "break everything on purpose" style of writing software, they were no longer useful. So what about the massive variety of other distributions that didn't - or cannot in the case of Free Software - sign up for the restrictions inherent in being "compatible with secure boot"?

More importantly, why limit this to linux? It would be a lot harder to develop a new OS - just like Linus did - when you have to deal with secure boot.
How to deliver a SXSW talk in 15 steps
Email is an incredibly common method for domain validated certificates. The other common options are a TXT/CNAME record or uploading a specific file to a certain URL.

The requirements for domain validation are:

11.1.1 Authorization by Domain Name Registrant
For each Fully-Qualified Domain Name listed in a Certificate, the CA SHALL confirm that, as of the date the

Certificate was issued, the Applicant (or the Applicant’s Parent Company, Subsidiary Company, or Affiliate,
collectively referred to as “Applicant” for the purposes of this section) either is the Domain Name Registrant or has
control over the FQDN by:

1. Confirming the Applicant as the Domain Name Registrant directly with the Domain Name Registrar;

2. Communicating directly with the Domain Name Registrant using an address, email, or telephone number
provided by the Domain Name Registrar;

3. Communicating directly with the Domain Name Registrant using the contact information listed in the
WHOIS record’s “registrant”, “technical”, or “administrative” field;

4. Communicating with the Domain’s administrator using an email address created by pre-pending ‘admin’,
‘administrator’, ‘webmaster’, ‘hostmaster’, or ‘postmaster’ in the local part, followed by the at-sign (“@”),
followed by the Domain Name, which may be formed by pruning zero or more components from the
requested FQDN;

5. Relying upon a Domain Authorization Document;

6. Having the Applicant demonstrate practical control over the FQDN by making an agreed-upon change to
information found on an online Web page identified by a uniform resource identifier containing the FQDN;
or

7. Using any other method of confirmation, provided that the CA maintains documented evidence that the
method of confirmation establishes that the Applicant is the Domain Name Registrant or has control over
the FQDN to at least the same level of assurance as those methods previously described.

Baseline Requirements
for the
Issuance and Management
of
Publicly-Trusted Certificates, v.1.2.3 https://cabforum.org/wp-content/uploads/BRv1.2.3.pdf
Wondershare Data Recovery Crack and Registration Code Free Download
Surprised this wasn't already mentioned, but the best description I've ever read of debugging is in Zen and The Art of Motorcycle Maintenance. (Unsurprisingly, it's about debugging motorcycles, but the author was a programmer so it's directly transferable)
I have no problem with that, but that's not what happened in the article.
> If you are able to set your own keys - then there is almost no problem

Doesn't this make the feature useless from a security standpoint? If you're able to create your own keys then malware could create its own keys. Maybe if manufacturers could do it that would be handy.
If Microsoft’s stance on this issue is not reversed it’s possible we will see a spike in sales by manufacturers such as System76 and ZaReason who ship computers running Linux out of the box without any signs of Secure Boot at all.

So... not a problem. If there is a market for non-Secure Boot machines, they will be produced.
Again, email addresses are fine, but which email address is important. The address on the WHOIS record isn't bad, as long as that's disclosed to the certificate purchaser ahead of time.

TXT records and uploading files are definitely better, though.
ATT was just kicked off the Dow Jones Industrials so, as a sagging, old company, they gotta make money somehow.
And who gets that $99? Microsoft.

Some of us are not okay with one company charging a gatekeeper fee for access to hardware we already bought from a different company.
As someone who is a novice to computer architectures, is there some consensus in the research community about what will be a good replacement for the von neumann machines we are currently running? I mean, if you think about it, if we truly want to take control, shouldn't we attempt to break free, at a ground level, from all the technologies coming from (or dominated by) corporate structures (and government agencies)?

x86 (and _64) and even ARM are all primarily developed by govt-influenced companies like Intel, yes? So what are the possibilities of us, all programmers and electronic engineers who want to support personal computing, to get together and develop a crowd-researched, crowd-designed, and (maybe) crowd-funded architecture to last the future. Of course, writing software for that architecture could take decades-centures (unless someone writes a perfect x86 emulation layer on that architecture), but at least that gives us a hope for the future, a backup to fall to if Intel pulls a full on 'google' on us.

So are these just big dreams or is there an actual possibility of something like this happening? Especially if the community secures the funding of some visionary who's rich as Bill Gates (maybe the man himself) and on the side of the public? That way we'll be able to actually build a system from the ground up that is libre and transparent, without having to muck about with reverse engineering on the 'enemy's ground', so to speak, like corebook does.
I added flamegraph to plop, if you're interested:

https://github.com/andreasf/plop/tree/flamegraph_support

Here's an example: http://zentrale1.com/~an/nachher5.svg
7 tips on scaling a team
I think the post pretty speculative, given the past and current efforts of Microsoft to get together with OSS and Linux community; using a single slide to come to a conclusion of "Microsoft stopped doing that or has been lying about it" is very speculative.

I think we should give credit where it is due, MS is really trying to work with OSS community.

Also, a lot of enterprise customer would want always on secure boot, and it is up to OEM to decide whatever they want. How is this MS's fault?
That is strange.

https://fiber.google.com/legal/privacy.html

>Other information from the use of Google Fiber Internet (such as URLs of websites visited or content of communications) will not be associated with the Google Account you use for Fiber, except with your consent or to meet any applicable law, regulation, legal process or enforceable governmental request.

So they say they collect it. Just that for now its going to be anonymized and not associated with your Google account.
This exact attack was used on obtain a certificate for login.live.com, Microsoft's single sign on site used by millions of people, in 2008 by Mike Zusman. See https://books.google.co.uk/books?id=fQOLBAAAQBAJ&pg=PA88&lpg...

Domain validated SSL was always a bad idea. Disclaimer: I sell EV SSL validation.
Ravens Offensive Lineman Publishes Math Paper
While I'd be interested in the track record data, it is hard to properly metric these professions. How do you control for a priori risk of a patient (IE- one total knee case is a 70 year old smoker so ways 300 lbs and the other is a 28 year old athlete who fell skiing.)
The ACA has resulted in the collection of this type of data and we'll probably see it released someday. We'll almost certainly see complication rates reduced and risky v patients refused certain types of care, but I do feel bad for the professions getting metriced like this. After all, I'd be pretty pissed if my value as a software developer was judge entirely by my bugs/KSLOC number.
Can I ask why there is a need to exaggerate creeping into hacker news, particularly where it involves gender topics?
Barbaric literally means: Savage, primitive, brutish.
You don't help a cause with such inappropriate language. I switch off if people can't use non-political language and I'm a dad with young kids so the topic is relevant to my family.
This doesn't give any idea about the quality of any of these hosts. Many of these are already well known so it's not much help.
Currently ability to set your own keys is mandated for Windows 8/8.1 devices. Leaked slides don't describe how it will be for Windows 10. We can guess only on the base of possible Microsoft's intentions.
We outsource almost everything women would, in earlier times, have had to stay home and do (cleaning, childcare, laundry, drycleaning, grocery shopping), so why not milk production as well? I know the process of feeding your infant is very fulfilling, but I've never heard anyone who liked the actual lactating part, which is pretty miserable.
Excellent. Years ago (15-20?) I wrote a program with the bug he mentions at the end. Way before Stack Overflow was a Google away. I could not work out why it crashed. I ended up rewriting it and it worked, but never understood what the bug was (in my mind it has been logged as 'don't extern arrays' ever since). I just read that and ah-ha!
I would assume that these UEFI machines have a built-in settings screen the same as BIOS-based machines do (and that screen would be where the setting we're discussing is found). If the only way to add keys is thru that screen, then you'd need physical access and malware adding keys wouldn't be an issue.
Serious question: how does Secure Boot make you more secure?

How many times has a virus latched onto your computer by executing before your system booted up? I've never heard of this happening to anyone I've ever known.

The only scenario I can imagine is having a PC set to auto-boot from peripherals, and a USB key having something bad execute before invoking your hard disk's boot loader. And that is obviously possible, but terrifying more complex to pull off. But that seems a lot more like a local, physical attack that's much less useful and more targeted than your ordinary viruses that install after executing inside your OS, where viruses seem to have no problems pulling off privilege escalation exploits to gain kernel access then. Plus you can easily block this and then lock down your BIOS already.

It really seems like Secure Boot is solving a problem almost no one ever had. I may well be misunderstanding the point, so please elaborate on how this is useful and absolutely prevents a class of attack that could not be done otherwise.
No, no. In fact, I wouldn't say that I invented anything at all. It was just the combination of off the shelf items (FreeBSD, jail, colocated servers, various management programs we wrote) that was unique at the time.

In 2001 a colo'd server could be very, very expensive. I think our starting price for a "server instance" was $65/mo and people were ecstatic about that.
Yehuda Katz is in big trouble
A few things.

One possible direction the industry could go in (suggested by Win 8) is that the "laptop" as we know it could be replaced by tablets, and potentially these could be very low cost devices.

The fly in that ointment is that vendors are not that excited about selling inexpensive machines. For instance, going with the "only a USB 3.1 port" approach would make a lot of sense for a cheap tablet but Apple did it first on a premium laptop because the PC industry had a "who moved my cheese" freakout over Win8 and at the moment the industry has abandoned the race to the bottom.

These super-cheap devices will have very different economics (they'll get a free or cheap Windows license) so a major change in the contract between manufacturers and users is possible.

The negative impact is not on the average Linux user who just runs a distro, but it will be bad for anyone who wants to compile and run their own kernels.
Could you give a report of the statistics of the IP address in the DDOS attack? Maybe you can block all the ip address from China. As I known in China people have to use VPN to access some sensitive websites (such as 8964, falungong, dajiyuan).
While some are saying it's only optional and up to the hardware vendors, isn't Microsoft giving Windows7 users a free upgrade? Is this the reason? A potential lock in?
Yeah, the slowdown is a bummer, but it's still fast enough to torrent the Daily Show on weeknights ;-). And there are lots of VPN providers, so if one starts spying on me, it's easy to switch to another. For internet access where I live, I'm stuck with Comcast, Google at the Starbucks, or carrier pigeons.
PSA: http://smile.amazon.com/Source-Naturals-Melatonin-Liquid-Nat... is melatonin in drop form, with 3 drops being 0.3 mg.

See http://www.gwern.net/Melatonin for a good writeup :)
BTW - these these sort of metrics are much more useful in a internal evaluative scenario- a hospital talking to its doctors, a principal deciding which teaches to retain, etc... Because those decision makers have much more access to the qualitative aspects of the work.
Plenty of ARM SoC and even desktop class machines now. The problem will solve itself pretty much instantly. No tears will be shed.
If you buy from an OEM that pre-installs Windows then you are already paying a fee for the Windows license. If you don't want to pay a fee for software then just buy a from a company that pre-installs Linux.
Ask HN: Any need for a better appointment scheduling API?
I recently worked on a project that required a full API for appointment scheduling and had a hard time finding any. Most solutions offered only widgets or minimal APIs. What does everyone use? I'm interested in building my own but was wondering if anyone else has a need for this.
http://www.chmag.in/article/sep2011/rootkits-are-back-boot-i...

http://www.theregister.co.uk/2010/11/16/tdl_rootkit_does_64_...

http://www.computerworld.com/s/article/9217953/Rootkit_infec...

A snippet:

TDL4 is the most recent high tech and widely spread member of the TDSS family rootkit, targeting x64 operating systems too such as Windows Vista and Windows 7. One of the most striking features of TDL4 is that it is able to load its kernel-mode driver on systems with an enforced kernel-mode code signing policy (64-bit versions of Microsoft Windows Vista and 7) and perform kernel-mode hooks with kernel-mode patch protection policy enabled.

When the driver is loaded into kernel-mode address space it overwrites the MBR (Master Boot Record) of the disk by sending SRB (SCSI Request Block) packets directly to the miniport device object, then it initializes its hidden file system. The bootkit’s modules are written into the hidden file system from the dropper.

The TDL4 bootkit controls two areas of the hard drive one is the MBR and other is the hidden file system created at the time of malware deployment. When any application reads the MBR, the bootkit changes data and returns the contents of the clean MBR i.e. prior to the infection, and also it takes care of Infected MBR by protecting it from overwriting.

The hidden file system with the malicious components also gets protected by the bootkit. So if any application is making an attempt to read sectors of the hard disk where the hidden file system is stored, It will return zeroed buffer instead of the original data.

The bootkit contains code that performs additional checks to prevent the malware from the cleanup. At every start of the system TDL4 bootkit driver gets loaded and initialized properly by performing tasks as follows: Reads the contents of the boot sector, compares it with the infected image stored in hidden file system, if it finds any difference between these two images it rewrites the infected image to the boot sector. Sets the DriverObject field of the miniport device object to point to the bootkit’s driver object and also hooks the DriverStartIo field of the miniport’s driver object. If kernel debugging is enabled then this TDL4 does not install any of it’s components.

TDL4 Rootkit hooks the ATAPI driver i.e. standard windows miniport drivers like atapi.sys. It keeps Device Object at lowest in the device stack, which makes a lot harder to dump TDL4 files.

All these striking features have made TDL4 most notorious Windows rootkit and it is also very important to mention that the key to its success is the boot sector infection.

Another bit:

The original MBR and driver component are stored in encrypted form using the same encryption. Driver component hooks ATAPI's DriverStartIo routine where it monitors for write operations. In case of write operation targeted at the MBR sector, it is changed to read operation. This way it is trying to bypass repair operation by Security Products
That is really shitty.
Though its only an OEM thing? If you build your own machine your still ok I guess.
Trader Joe's sells melatonin that comes in does of 500mcg
Years ago you had to do things like fax an approval letter printed on company letterhead.
It was also used to get a live.fi certificate like a week ago. [1]

[1] http://arstechnica.com/security/2015/03/bogus-ssl-certificat...
BTW: you can put the contents of Greatfire.org to github, it is free.
No, if you read the article, you'll see it is absolutely nothing to do with maternity leave.

The article describes a market where companies pay women for breast milk that is left over after they have fed their own babies, and use it to produce a pharmaceutical product for premature babies. The controversy is between non-profits and for profit companies both doing this (but the non-profit doesn't pay the women).
Feature request: With 4 repeated numbers in the corners, draw a filled rectangle instead of a filled ellipse:

Circle Square
..#1#.. 2#####2
.#####. #######
####### #######
1#####1 #######
####### #######
.#####. #######
..#1#.. 2#####2
how many FPS and how much CPU usage?
Nice idea for keeping your team up to date about new sales.
I meant to say it's primary fuel source. Will look into this more, but I would think avoiding suppression of epinephrine has to account for some of the effect of cutting to a no/low carb diet.
> A potential lock in?

Secure boot is part of the BIOS so nope.
> (though medication is truly just one aspect of it)

Yes, this is so true. The major pieces of the puzzle for me ...from most to least important... are: good sleep, proper environment, exercise, nutrition, medication.

When I say "nutrition" I don't even mean a strict diet. The most important part there for me is simply avoiding big doses of sugar and carbs. Those leave me drained.
Efficient Nested React Components
Google Analytics by Yoast Stored XSS
Would definitely like to know this as well. Also, are there any dropped frames over a certain amount of time? Like 5 frames dropped every ten minutes.
Ah Betteridge's law of headlines at work!

Arrays are aggregates of contiguously allocated objects.

Pointers are values indicating the storage locations of objects.

Thus, not equivalent.

Pointers are involved when you access an array. That doesn't make it an array. Just like scanning written text on a piece of paper using your index finger does not mean that "paper" and "your index finger" are equivalent. That's true even if you always instantiate an index finger before evaluating a piece of paper: co-ocurrence is not equivalence.
Where does it say that isnt what happened?

It's entirely possible the WHOIS data for the domain in question had several email addresses listed, at least one of which was not blacklisted for use by clients.
I didn't say I was a doctor of entomology :)
Computer Color Is Broken – MinutePhysics
The Little “Fighter” That Couldn’t: Moral Hazard and the F-35
My organization provides the disk images to the manufacturer for the computers we buy. This isn't about "paying a fee for software." It's about the fact that Microsoft has used its industry influence (and cozy relationship with Intel) to attach itself like a parasite to the process of bootloading in UEFI.

We currently pay our manufacturers to install our signing keys into UEFI; this is fantastically expensive. It's a damn shame that it is literally impossible to buy a consumer UEFI device without Microsoft's keys in the image unless you pay to have yours put in.

In short: it sucks that they are the default, and it sucks that Red Hat and Ubuntu rolled over on the issue and pay the (latest) Microsoft tax. I would have preferred a more flexible solution.
If you're going to change your messages after posting them, at least disclose that you did so. Some of the replies don't make sense with the new content you added.
> It can only be obtained by making spying expensive and difficult.

Yes! The only real solutions are client-side: IP-block trackers and encrypt your connection. The "please, sir, can I have some privacy" nonsense of do-not-track headers and IAB opt-out pages needs to die.
I haven't read it, but a really smart ex-colleague is the author of 'Debug It': https://pragprog.com/book/pbdp/debug-it
Is there any way to discover a list of SSL certs that have been issued for a domain?

The problem here is, once someone has shown that they could receive emails for administrator@yourdomainname, you have no idea how many SSL certificates they bought, and from which CAs.

Even if they publish a blog post about it and show you a certificate, surely your domain is now compromised? You can revoke that certificate, but how do you know that was the only one they obtained?

From this point on, all you know is that your domain name is potentially compromised and there's nothing you can do to fix it...
Are these vulnerabilities exclusive to UEFI BIOS? The more I learn about UEFI, I am left with the feeling it is nothing but a wide open back-door and a method to "brick" pc's.
This is true today, but it ignores the realities of many secure boot implementations. Specifically, many UEFI firmware vendors don't include the ability for the hardware owner to update the public key used to verify a bootloader signature. This means that someone wanting to use a new bootloader on one of these platforms has to beg for permission from whoever owns the existing keys (Microsoft seems to be popular right now...) to get their software to boot. Right now, MS is willing to sign bootloaders for OSS, but this could change at any time. Do you really want MS to control the ability to boot your operating system of choice?
Here's an interesting post someone made cataloging all the different nootropics they've tried.

http://www.gwern.net/Nootropics

And here's one specifically about modafinil:

http://www.gwern.net/Modafinil
Sadly this still needs implementation in the open-source JavaScript x86 emulator v86: https://github.com/copy/v86/issues/26
Magic Leap's New Game Changer
Hah, Étienne, lord of hacks :)
Well, Chris and his friends are using Lightable for Eve development so I don't think that Light Table is going to get dropped on the floor.

I donated to early LT development (although I spend my considerable Clojure dev time using IntelliJ with a separate command line repl) and I am looking forward to trying Eve when available. Granger is an amazing talent, considering his work at Microsoft, LT, and a ton of open source.
We've been down that type of road before, and it always ends with the "option" being made into a "Hobson's choice"[1] due to the inherent power imbalance. This kind of free-market solution only works when people can and do freely choose between options. With an ISP, most people will be stuck with "whatever the local ISP offers" or not having internet.

This is why there are various rights[2] that we have created laws saying you cannot negotiate them away. Without these restrictions we got things like indentured servitude. Unfortunately, the law hasn't yet kept up with the changes in technology.

[1] http://en.wikipedia.org/wiki/Hobson%27s_choice

[2] and privacy absolutely IS a human right