skysight-inc/HackerNews huggingface dataset:
Wrong. Tesla is a distribution company. Cars and batteries are commodities, more or less. Corporations are now extremely efficient at copying and commoditizing their competitors' innovations - just look at how fast the android ecosystem popped up alongside iPhone - so technological advancements are not the real source of long term value but merely the temporary advantage needed to be first to a market and set up network effects.

EBay, for instance, was there at the right time to take recent technology advancements, set up a network-effect marketplace and milk it for, oh, 2 decades. They stopped being a technology company a long time ago.

So how does this relate to Tesla? Answer: The supercharging stations. If Tesla owns the most charging stations then EV buyers have a good reason to buy Tesla over a hypothetical Ford or Toyota EV, putting Tesla at a major advantage. Eventually it'll be on Ford and Toyota to bet the farm on a massive supercharger network of their own and launch an EV to compete against Tesla's entrenched domination of the marketplace. Right now, Tesla is in a fleeting moment of technological and branding advantage which they are correctly leveraging to quickly set up their charging network.

It's a lot like telcos bragging about their coverage networks. Eventually all the (surviving) car companies will be doing something similar, running TV ads about their charging station maps.

Companies are either A) marketing companies or B) distribution companies or a blend of both.

Nike is a marketing company that happens to sell shoes. Ditto Taco Bell and cheap Mexican food.

Amazon, Akamai, Google and Facebook are distribution companies --- they own the network or marketplace.

Disney (mostly distribution), American Airlines (mostly distributiom) Walmart (mostly distribution) and Apple (mostly marketing/branding, but appstore and itunes are distribution powerhouses) are a little of both.

Edit: Nielsen, Google are distribution comapnies. They have prohibitively large or complicated information ingestion systems set up to and then resell the results.

Newspapers and TV are too, but their distribution monopolies are crumbling.

Interesting. That means solar advancements are very bad for Tesla. If people don't need to stop and charge, then the distribution network is worthless.
Flux7 Becomes an Amazon Web Services Competency Partner
Don't forget the "car charging" business. Tesla announced before that it's willing to license its Supercharger network to other car makers. That business could one day replace most petrol charging stations.
I2C peripherals in microcontrollers tend to be finnicky as well, because the interpretation of certain events depends on the device and so the interface between the hardware and sofware winds up very complex (and prone to error, I've had to reset an I2C peripheral at the start of each transaction in order to get it to work properly).
http://en.wikipedia.org/wiki/Gigafactory
Show HN: Run Vmware View Native on ChromeOS
Or just create a TLS extension that allow all of the chains to be served as part of the TLS Certificate message.
How Computers Trawl a Sea of Data for Stock Picks
Examples of sites where this is an issue? Serious question, where does scrypt/bcrypt overhead get to be important enough compared to the rest of the traffic the site has to handle?
Is Diet Soda Making You Fatter?
Iran atomic dialogs exaggerate causing Oil tariffs drop to $55
I utterly loathe online social networks / social networking. They've become a showcase for society's worst and little more.

Great for people who want to sell you something, or push a political ideology on you, or whore attention for themselves but totally devoid of any actual substance.

I've given them their fair shot. I keep a FB account to occasionally touch base with friends back home and that's it. Twitter is a joke and I wish it the worst. The rest aren't even worth mentioning.
An Agile Design Manifesto (for Ember.js)
I submitted it because I consider it to be nearly a primary source of documentation. Experts write stickied posts on linux.org forum in 2007. Everyone reading those posts could also read the kernel config documentation, yet they stickied this.

The primary kernel docs lack the wider context necessary to capture an inexperienced audience. Optimally, you want as many inexperienced people to be drawn to your project as possible, because if your documentation is good it will turn them into experienced people who can contribute to the project. Therefore posts like this one, albeit a secondary source by most definitions, benefit the linux ecosystem and are also educational.

Agreed the content is messy but it's the clarity of organization that got me to read it. The structure of his content taught me as much as the content itself. I have been looking for a resource to clearly explain the kernel, the boot process, modules, and drivers. I think this did a good job at that and also clarified the bigger picture for me.
Open certmgr.msc and put the certificate into the "Untrusted Certificates" store.
These two PDFs got sent by CNNIC to mozilla.dev.security.policy by way of explanation:

https://pzb-public-files.s3-us-west-2.amazonaws.com/B2.pdf

https://pzb-public-files.s3-us-west-2.amazonaws.com/B2.pdf

The story is perfectly believable: MCS wanted to become a CA, the easiest CA that would chain them an intermediate was CNNIC, they generated the cert from a Palo Alto Networks device because it was the only convenient hardware/FIPS-compliant device they had lying around, and a technician accidentally plugged their laptop on the "MITM me plz" port of the Palo Alto box and fired up Chrome, which automatically sent some alarm bells.

Honestly that makes me more worried for the state of internet security than active malice. If any individual, organization, government, etc. were intending to MITM someone, we could (in theory) track them down and fire them, blacklist their root, or otherwise expel them from the internet community. But nobody had such an intention here. It's terrifying that a series of honest mistakes (extremely grievous mistakes, but honest ones nonetheless) could lead to a valid cert for Google and Twitter in the hands of someone who didn't even want them.

I think a very tiny bit of blame should impute to Palo Alto Networks here. How have they built a device where it's easy to start MITMing certificates by accident? I'm all for usable crypto UI, but this seems excessive. (And should it be built with safeguards that warn you loudly when the MITM intermediate chains to a publicly-valid CA, instead of an in-house one?)

Regarding why I think it's perfectly believable that CNNIC was the easiest CA that would chain them an intermediate: everyone that runs an actual intermediate program sells (as required by the Baseline Requirements) a hardware security module, or better yet, a web interface to a cert that remains in the physical possession of the parent CA. There's an arduous audit process and key ceremony required for the intermediate CA, almost as arduous as required of the root CA. CNNIC, meanwhile, had no intermediate program, and wrote in their Certification Practices Statement that they don't intend to issue such things. So MCS was able to talk them into doing something irresponsible and handing them a CSR and no further details.
Terminal.com is hiring.

We work on next-generation virtualization technology.

We are a hard-working, fast-moving startup based in San Francisco and Palo Alto. We value highly-optimized, correct code.

We are building the next generation of computing that is cloud-first and web-first. We build an technology for clouds, and are deep into scientific computing, network routing, HTML5 web development, kernel hacking, virtualization, and other trends in software technology.
China's response is kind of funny. But if they have no bad intentions, they can just implement CT and not have to worry about it. Of course, if you read between the lines in the last paragraph, you realize that they do have bad intentions. That last line is quite 1984-ish.
CAs are supposed to be in the business of trust. We are supposed to hold them to the highest standard of machine trust. If they screw up and fix the error in a matter of hours or days... alright. But CAs who charge money for making certificates need to earn our dollars.

Sure, everyone makes mistakes. And if you're in the business of trust, you find ways to uncover and correct those mistakes. Also, you insure against those mistakes, and some of that insurance buys another set of eyes.
Can they not put plastic covers like that around the trees and capture water that way? Or does that kill the tree?
>With micro-payments, you can't deal in actual currency. You have to move around some kind of "Credits" that at some point get exchanged back to currency in bulk to a payment processor, otherwise the transaction fees are greater than the payments themselves.

Which prompts me to wonder why transaction fees are so high.
Bitcoin is NOT anonymous, it is pseudonymous [1], unless you use complicated things like Bitcoin mixers.

[1] http://yro.slashdot.org/story/14/11/26/2121214/bitcoin-is-no...
Do you honestly believe that government organizations don't already have their own people in these CAs that are issuing certificates whenever they want?
At least for Greenery, Singapore does a great job of this.
There's still a hierarchy now too.
I believe iOS lets you specify your own validation callback. (For instance, I think best practice is for a random app on iOS, that only connects to its own servers for an API, to manually pin the public key and a backup public key for the server or at best a handful of CAs, instead of trusting the entire set of root CAs.) I don't know how extensively Chrome is using that feature.
Our software is defining perspective marketing and we're looking for feedback
We're building a platform for companies to connect with those they value and bring them into the decision process. Our software will also allow users to interact and provide their decision ratings and thoughts to all their vendors from one location. We're currently invite only so email us at info@nextcept.com if you're interested. Also, feel free to check us out at www.nextcept.com, and we're going to be launching an indiegogo campaign on May 1st. Thanks all.
The missing detail is that this "delegation" to an intentionally MITMing CA should never have been made in the first place. Using such a certificate in an HSM does not make that acceptable, and I don't have the impression that it would have been acceptable even in an HSM; I think that portion of the article was simply relaying the information CNNIC provided (in which they're trying to shift the blame onto MCS Holdings for further mishandling of an intermediate CA that should never have been issued in the first place).

The claim from CNNIC was that the intermediate CA would only be used for domains actually managed by MCS Holdings; however, there's no technical control in place to ensure that, even if you believe CNNIC didn't know exactly what the intermediate CA would be used for.
New TinyUmbrella beta released
I'm almost certain it was used incorrectly in this case. The correct term is "combinatorial optimization."
Verizon Wireless Customers Can Now Opt Out of ‘Supercookies’
There's even an SSL extension for the client to mention its list of trusted root CAs in its side of the handshake. It's very rarely used on desktop / on the public Internet because people tend to trust more CAs than would fit in a TCP packet, but it's apparently useful enough in embedded scenarios to standardize.

https://tools.ietf.org/html/rfc6066#section-6

You could imagine a variant for, say, pointing out that you explicitly distrust certain CAs that the server is likely to assume you trust.
I'm being pedantic, but the problem being solved here is not a learning problem, but a combinatorial optimization problem.
Sure, but we definitely have the funds as a state as pointed out in an earlier comment.

If additional revenue is needed, the state has a rather healthy economy that could greatly benefit from additional water.
C# (using the Mono VM) actually works inside of Chrome Native Client.
This was brought up two days ago when a similar story was posted. And the conversation then seemed to conclude it's not so much about how much water almonds and cows need to grow, it's about California inefficiently allocating resources and screwing its citizens in favor of farmers.
You know what'd be a cool website/application? A front end to all these 'learn-to-code' things. Like how Mint is a front end to multiple bank's websites I could have one account that interfaces into project euler, rosalind, exercism, etc grabs exercises and checks them.
They weren't even trying to do that, is the saddest part. They were trying to be a real CA, but they weren't trying to MITM. (It's common practice for new / young CAs to chain their CA cert off a more established CA.)

They just, for some reason, decided that they wanted to store their cert on a Palo Alto Networks device that supported MITMing as a feature, and accidentally turned on MITM mode and plugged someone's laptop into it.

The intended use case of that feature on that device is in fact to hand it a private intermediate, not a publicly-trusted intermediate.
"Loneliness centres on the act of being seen. When a person is lonely, they long to be witnessed, accepted, desired, at the same time as becoming intensely wary of exposure."

We are all walking the line of putting ourselves out there enough in a meaningful, authentic way to feel an organic connection while also combating a fear (that of course varies with the individual) of vulnerability.

The internet provides a little sugar high to create an artificial sweetness of connectivity but fails to (on its own) provide the nutrients needed for a healthy, complete life.
He was arguing that these companies got the gestalt / romantic quality right (a positive trend in tech), but that they aren't getting the classic quality right (ie basic working engineering).

I think you're mostly agreeing with him.
I was thinking of relaxing Mozilla's root inclusion requirements (I suggest to the same as Microsoft's) for government CAs in exchange for name constraints.
Any interest in JVM developers?
> You would have no CA's then.

Would you? We've seen, what, a dozen (at most) CAs do inappropriate things in the last several years? And there are hundreds of CAs? I think things would be fine.

In particular, there are lots of intermediates. My personal website's cert is from Gandi, which uses an intermediate chained off USERtrust. Gandi could arrange to have a second root CA sign their intermediate, so that if USERtrust gets kicked out, browsers can still construct valid chains. And I would gladly pay for such a feature from an intermediate, if the alternative were either my site being at risk of being marked untrusted, or SSL becoming meaningless.
Absolutely. He's noticed that new companies seem to be thinking "minimum" is more important than "viable" - which it isn't. No point in making an "MVP" and selling it if it's not actually a working, viable product. But I guess a lot of the mistakes come down to finances, as he noted.
> Or they meant, "Hi! Mind if I backhandedly point out you don't belong here (again?)" Because, you know, that's how people interpret it when you remark upon their presence or skills.

I don't think you're right to say that there's a single way that people will interpret statements like that. Statements like that can be made out of genuine admiration. I have made such statements out of admiration, and statements like that have been made about me (about my ability to speak Mandarin, in China).

It seems to be a fact that women in tech are rare. I have found it to be true in my life that if you are rare or strange in some way, life will probably be harder for you in some ways, because it will take a while for other people to learn to deal with you. You can choose to look at it really specifically as "sexism", but I prefer to think about it as "people don't handle unfamiliar situations very well".
Changes all around - 2030 isn't that far away...

http://gizmodo.com/the-billion-dollar-megaprojects-that-will...
>RAW DEAL #1: Storage, and specifically the 16GB model

I've got a 16GB iPhone and am happy enough. It runs out of memory when I get to about 1000 pictures on the camera roll. I can live with that. Sure if you want hours of video get a bigger one.
Who owns Route 66? (2010)
This will head towards a tit for tat thing. Much like the cold war except this time its cyber in nature.
Los Angeles CA - KEYPR

We're redefining the guest experience at hotels worldwide. With our mobile app, you check in and go straight to your room. With our web app, hotels get real-time metrics and tools to track.

We're looking for front-end, back-end, mobile, and embedded/firmware engineers. We use Python, Node.js, AngularJS, iOS, Android, C, and Clojure.

If you like to solve challenging problems, please email me at charles@keypr.com. Please include your GitHub profile or links to code and any relevant work.

Cheers!
>2. For the users that CNNIC has already issued the certificates to, we guarantee that your lawful rights and interests will not be affected.

...

Does that mean anything?
Dentboard - Princeton, New Jersey - Full-time - Project Manager/Product Designer

Dentboard (www.dentboard.com) is redefining the way dental providers use data to make everyday decisions. A customer-centric company, we’re chock full of awesome people who are passionate about our product and the doctors who use it. We are Dentist founded and led and have raised 1.2M in seed funding so far
Culture

At Dentboard, you’ll create and ship software everyday that is fundamentally changing the way the dental industry operates. Engineers at Dentboard own the product that they build completely and wear multiple hats during the development process. And thus, you should be able to empathize both with users and the rest of your team. This means considering both how our users will use your software and how your peers will use your code.

We are currently looking for a a ProjectManager/Product Designer. He/She will work with the CEO and business development teams to convert market data into a product idea for each release. As a Designer, this role requires converting that product idea into designs for the tech team to work with. As a Project Manager, the role will also require working with the technical team to decide resource allocation to complete each version of the product.

Responsibilities:

-Act as Product Manager in an autonomous team responsible for product

-Coordinate with Business Development and CEO regarding market data and user experiences

-Coordinate with Business Development and CEO to generate ideas for product versions.

-Transform the previously mentioned ideas for product versions into meaningful designs and mock-ups.

-Coordinate with the technical team regarding the implementation of each version and the designs.

-Stay 2+ weeks ahead of the technical team with designs. -Help work with team for designing user tests.

-Own, prioritize, and communicate the short, medium, and long term initiatives based on the KPIs used to evaluate each version of the product.

Requirements:

-2+ years product management experience in technology.

-2+ years Design experience in digital media/technology (preferable).

-Self-motivated and autonomous.

-Great communication skills.

-Strong opinions regarding product development philosophy and customer development best practices.

Wants:

-Knowledge of front-end programming (javascript, angular.js, css, etc.)

-Knowledge of backend programming (python), but not necessarily experience with programming.

-Demonstrated passion and knowledge of healthcare industry and trends.

If you are interested, lets chat: sanket@dentboard.com
> Unpaid Internships Available

Don't do this. It's exploitative and extremely classist, even if not intentionally.

I'm also wondering what the quality of interns you could get given that most tech companies actually pay their interns pretty well.
And Google is a search engine...
JVM developer here that is interested in learning C++, Rust and Go (among others)... any interest?
You should create a ~/.gitconfig file that specifies an excludes file for all of your git projects that keeps editor generated files/directories out of your repo. (http://365git.tumblr.com/post/519016351/three-ways-of-exclud...)
well, they aren't exactly priced on a cost basis
Do you really think people seeking jobs from your portal are going to use your android app.
I've paid for it, but have since switched almost entirely to Emacs(evil mode), Vim and IntelliJ. LightTable intrigued me for a while, but I'd say I'm more interested in the source code (as it's a sizeable ClojureScript application) than using it for active development.
finally! disruption in this industry is long overdue. That said, http://www.bloomberg.com/news/articles/2015-03-12/new-startu...
>"...meanwhile CNNIC sincerely urge that Google would take users’ rights and interests into full consideration"

And that, ladies and gentlemen, is exactly what they're doing.
Google Play’s New App Approval Process – What Developers Need to Know
Hey,

I had sent in a mail last month. Got a reply from you but nobody follwed up.
Unfortunately, that's not valid per the RFCs (from rfc 5246, TLS 1.2):

"certificate_list

This is a sequence (chain) of certificates. The sender's
certificate MUST come first in the list. Each following
certificate MUST directly certify the one preceding it. Because
certificate validation requires that root keys be distributed
independently, the self-signed certificate that specifies the root
certificate authority MAY be omitted from the chain, under the
assumption that the remote end must already possess it in order to
validate it in any case."

I would be super happy if I could send multiple certificates though (provided all my clients magically got tls client library updates to handle it)
Merely an amateur here who's done some demo tapes at the zenith of my career. But if I had to guess, it would be tied to how we listen to music live. In a _Transformers_ movie, as an example, you have explosions in front of you, missiles whizzing from behind, cars screeching from the left, etc. Surround sound is useful to create an immersive experience. The Beatles' White Album, meh, not so much. What, we'll put John and Paul up front, George rear left, and drums go...? Because that's not what you'd hear live. The Who tried quadraphonic sound on _Quadrapenia_, as did a few others back in the day. It obviously didn't go over big.

The simple answer is the more likely idea that iPod headphones only do two channels.
I still think that water desalinization improvements should see a lot more funding... and that cross-country water pipelines from the areas that commonly flood over, to the southwestern US should be started.

Combined with wind and solar power, this can be used as a fuel source (hydrogen storage)... it's rather short sighted that such efforts haven't been made in this country starting years ago.
There was no intention to MITM here. MCS's goal was to become a certificate authority, and it's common practice for a new CA to get their CA cert signed by an existing one. Let's Encrypt is planning on doing exactly this, for instance.

What went horribly wrong is that nobody knew what they were doing, CNNIC didn't realize they had an obligation to bring in auditors to both CNNIC and MCS to make sure that people knew what they were doing, and MCS unintentionally placed the cert on a device that happens to do real-time SSL MITM.

I believe CNNIC's claim is about the "test" certificate that was issued to MCS. (The fact that they issued a test certificate off of a publicly-trusted one is another sign they didn't know what they were doing.)

There's a long thread on mozilla.dev.security.policy with replies by CNNIC and MCS that explains the story. (The CNNIC rep's English is pretty good, MCS's is good enough to get a sense of things.) https://groups.google.com/forum/#!topic/mozilla.dev.security...