skysight-inc/HackerNews huggingface dataset:
> HTTPS provides not only encryption, but also authenticatoin.

Comments like that are a reinforcement of an increasingly-common point: that HTTPS shouldn't be conflating those two things, since doing so is resulting in a lot of pain whenever these sorts of suggestions to encrypt all web traffic come up.

All I want is a way to set up an encrypted connection without caring about it being authenticated, thus offering at least basic protection against random passerbys at Starbucks. Let me do that without having to buy a certificate from some schmuck who was arbitrarily trusted by a bunch of browsers (without any actual guarantee of trustworthiness, mind you; just an empty pinky promise that they won't be naughty).
> d-link could do well by firing whatever uncaring 9-to-5 programmers they have and hiring him.

That's a great experiment to discover how long somebody can can stay passionate inside an uncaring corporation.

I give him 2 years to become an uncaring 9-to-5 programmer.
Why chocolate milk is a lousy “sports recovery drink.”
Nowadays I check any drive that's been out of my house, after my spouse brought a virus home from her workplace. A dedicated Linux box, a quick booting distro on a trusted flash drive, or even a Raspberry Pi can be used for this purpose.
Yeah, there's no way they will be able to easily merge into all the changes that have happened since MongoB 2.6 and now 3.0. They're pretty far behind. 2.6 introduced a lot of refactoring (and therefore broke a lot of things) and 3.0 broke even more I can only assume.

However, I believe they could sell their storage engine as MongoDB exposes a storage engine API now. Then again, I don't know why anyone would buy it now.

MongoDB has done a decent job of patching things up and I guess TokuMK just isn't as interesting as it was before.
Disabling AutoPlay and any other "automatically run a program when media is inserted" feature would be a good first step. Not running executable files (Windows users: unhide those file extensions!) that have no reason to be executable, and using AV software (or multiple, like those online services) to scan the files you are interested in is also a good idea.

If you're really paranoid, do everything with a separate machine.
Big Five Health insurers outperform S&P500 since first draft bill of ACA in 2009
I live in North Mexico, Durango State to be explicit. But this are general laws for all the country, labor laws support workers a lot, there are a lot of government agencies looking for workers right, formerly there is a secretary just for that called Secretaria del Trabajo y Prevision Social. That government arm specializes on checking workers coonditions on a lot of matters, for example there is a revision called "Seguridad e Higiene" where they check if your facilities are right and safe for the workers, they check to if the workers are properly trained. Companies have the obligation to train workers every year, and as an employer you have to fill out forms called DC-1, DC-2... DC-5 and submit via internet where you manifiest the training your workers have, there is anothere revision called "Condiciones generales de trabajo", where they check if all the benefits mandated by law are properly applied, another one called "Revisione de PTU's" where they check another benefits of workers (when you file your taxes once a year in a form called "Declaración Anual" your report your utilities, and you are mandated by law to pay the workers 10% of the utilities)

STPS have a lot of instances, another one is called "Conciliacion y arbitraje", where workers can go and sue you, its basicalle a government dependency made to protect employees. Most of your paper work like resignations, and fired people must be filed against conciliación y arbitraje.

Unions are very strong too.

Anyway, the main problem with Mexico is that most companies are informal (they dont pay taxes), and of course, they dont offer benefits to employees.

It's been a real problem for the country for years, but if you have followed the news, two years ago a lot of reforms have passed namely reforma hacendaria, reforma del trabajo, reforma energetica and well, a lot more.

Basically the government is cornering informal bussinesses in order to make them pay taxes. it's a very difficult time for the country because as you can imagine, being formal and paying taxes is very expensive, and a lot of the news you read about the crisis in Mexico is because of the problems informal bussinesses are having to turn to formal ones. (Oil price is another factor, but well, bad luck for the current president).

As a simple fact, if an employee earns 1000 pesos with me (the money he sees), i pay aroung 700 pesos in taxes, from infonavit (housing plan), imss (healthcare), afore (retirement fund), isn (impuesto sobre nomina), and all the benefits.

It's very expensive to have employees, but I'm happy to see them and to believe their sons have better opportunities than them.

Damn, I love my country.
https://wikidevi.com/ also has detailed information about what chips are used, often gathered from FCC filings. Atheros, Broadcom, etc. are a lot more trustworthy than D-Link and Netgear. Once you've identified a router as having an Atheros SoC and a firmware update format supported by OpenWRT, you really only need to worry about it having bad power supply and antennas.
This is cutting edge software, so of course things will break. But once it is been tested out, it'll be fine.
Absolutely. You want something ephemeral - meaning software AND hardware you can nuke. And even that isn't 100%.

What's demonstrated in this article is extremely inelegant and clumsy. Truly malicious rootkits and the like are a bit more sophisticated.
Yeah, TIMTOWTDI ftw! Same goes for any kind of social/political change. Diversity and solidarity go really well together.
Any company large enough to make this in anyway confusing has several of those on staff already.
Who has time for 3 syllables? "Sequel"!!
I would second the Raspberry Pi, it would be more or less immune to malware that targets x86 land, even Linux based malware. Still, I'd not have it connected to the network and I would wipe the Pi's SD card afterward, just to be sure. Scripts can run on any architecture.

The Pi doesn't have a BIOS or EFI on board, it uses a special partition on the SD card to POST from, so there's no worry of the device itself being infected.
Website has an invalid SSL certificate. Allowing an exception and trying again shows a blank page :\
I think the way forward is to add the Light Table main features to the Atom Editor as plugin. It has a bigger community (and facebook $$$ behind) and is a very good candidate for "the next Emacs".
Because individual instructions doing the same thing are faster. Though it's especially slow because it's microcoded and is left just for backwards compatibility and not trying to be fast. So modern CPUs are good at reordering, predicting branches, etc., for simple instructions and no extra silicon needs to be wasted to duplicate that.
And encoding space is limited as well.
site is throwing certificate error - wont load
just to nitpick: Lua is not an acronym. It means Moon in Portuguese.
So much character! I really love what they did with the beige concrete.
Yeah, Emacs may already be the Next Great Editor and not know it yet ;)

It needs to be more novice-friendly, having pre-CUA [1] shortcuts and terms ("windows" & "frames") is a trivial but powerful obstacle, I think. It needs to modernize its extension language: I still can't believe a 'then' clause needs a 'progn' if it's to contain multiple statements, but 'else' doesn't. I'm crossing my fingers for Guile, which, though still a niche language (Scheme), is at least more modern and standardized. I don't know how robust the interaction between the elisp (which is, like it or not, is here to stay) and Guile code is.

Emacs has a humongous codebase at over 2M lines of code [2] (of which, admittedly, 1.5M of that is elisp), with some deep black art as legacy from what it needed to run on when it started (thanks to ESR's work, the git history actually spans the entire 30 year history of the project! Here's the very first commit: [3] [Though admittedly because of RCS's per-file semantics, the early history is a bit weird).

But more importantly, it needs more mindshare. I'm hoping the git transition can help that.

[1] http://en.wikipedia.org/wiki/IBM_Common_User_Access
[2] https://www.openhub.net/p/emacs (slow server)
[3] http://git.savannah.gnu.org/cgit/emacs.git/commit/?id=ce5584...
Chris's post on the LT mailing list 1 year ago[1]:

Depending on how things play out, it might make sense to try and merge
[with atom.io]. [...]

The main value of LT isn't about being a better standard editor, it's
taking that editor and making it do things that standard ones can't do.
[...]

From the outset, our goal has been to make programming better and I've
honestly come to the conclusion that LT on its own can't do that. [...]

The truth is that I think we can do orders of magnitude better and I have
some evidence of that already, but it's going to take more than a new tool.
It's going to take a different way of thinking about the problem. That is
what I think will end up being the ultimate legacy of Light Table -
a version of programming that is meaningfully designed for humans. You've
heard us mention "Aurora" a number of times now and I think that's the best
description for this crowd of what we're out to accomplish; programming
designed for humans. This often comes as a surprise to people, but
I honestly don't like to program very much - it just happens to be the only
way to create the things I want.

It should have been clear by then that the LT author had lost interest. That's when I decided[2] to concentrate on making Vim/Emacs better instead of trying to find (or make) a "perfect" foundation upon which the already existing Vim/Emacs plugins could be rebuilt. There's a reason why Sublime re-uses Textmate themes; and Java is useful (tons of libraries) even though it's boring; and Linux is widespread even though it's inelegant compared to Hurd or whatever: there's a giant mountain of existing, working boring tools already built--tools that you will not want to rewrite after your perfect platform is done.

Neovim popped up around that time and for the above reasons it made sense to me. If the foundation is imperfect, do the dirty work to make the foundation less-imperfect. With 10% of the work[3], I think Neovim can enable 90% of the goodies I (we?) wanted in LT (and 100% of the visual appeal).

[1] https://groups.google.com/d/msg/light-table-discussion/YTuCH...

[2] http://www.reddit.com/r/vim/comments/1ztxgd/why_atom_cant_re...

[3] Remember: don't discount the work of writing plugins.
Is there anything which might catch the eye of a regular linux user? (FreeBSD users would like to point out ZFS, jails etc., OpenBSD users usually point out pf/security and DragonFlyBSD users point out Hammer FS and an inviting community).
Reference cycle bug in Rust's scoped threads
We're seeing that too and working to fix it. Sorry about that!
Interestingly, I feel kinda the same sometimes about MotoGP and Moto2/3 bikes - they sound different to the 2 stroke 500s and 250/125s that were the soundtrack to top level motorcycle racing for most of my life. That doesn't make them "lame" really, it's as least as much about me being old...

I saw the first ever TTXGP race in the US at Sears Point a few years back, and yeah - they sounded "wrong" to my ears (and an interesting comment from a friends wife: "They sound like a herd of angry power tools!")

I suspect in 20 years time the equivalent of teenaged "petrol heads" will think that's what race bikes/cars sound like, and will be restoring vintage 100MPH+ Teslas in their sheds just like people restore 70's V* muscle cars today.

Vive la change :-)
And the people who would like their pensions to be fully funded due to investment gains from new tech companies in SF, currently hindered by rent. And people who want to use exciting new products built by SF companies which are limited or don't happen due to lack of office space. It's a drag on not only the city but the state, nation, and world.
How to Lose Fat and Gain Muscle with Venture Capital
Glucose Is Not Willpower Fuel (2011)
That comment was about package management (i.e. actually installing this on servers), not about language implementations. Let's Encrypt's documentation currently assumes a Debian-based operating system, which therefore leaves out a very large portion of the web server population.
Simulating a simple harmonic oscillator in Python
Sure, that makes sense, I just don't quite understand the "convince Apple to go Linux on everything" bit??

In terms of userland tools, OS X has pretty good compatibility with an average Linux distro (yes there are obvious differences between *BSD and GNU implementations of various tools).

Personally I think you should give Apple a(nother) look in terms of a productive workstation machine, even if that's paired with/using services from/developing systems for Linux-based servers.
Maybe the CUA thing doesn't matter. After all, Vim is much worse in first impression, but it's more popular by an order of magnitude. Maybe Emacs just needs to be installed by default, and for that, needs to slim down. Make more of its embedded elisp optional?
Your second solution depends on interpreting the "Albert knows Bernard doesn't know" to mean that Bernard told (or otherwise signalled to) Albert that he doesn't know, rather than Albert deducing that Bernard couldn't know.

There was a detailed rebuttal of this interpretation by the folks who set the original question.

But it is easy to claim "that's not what I meant!" Actually being precise about what you mean is fiendishly difficult. I recommend Imre Lakatosh's excellent book on proofs "Proofs and Refutations" - its short, and thoroughly dismantles the early 20th century ideas that math is somehow a precise conceptual structure independent of language ambiguities.

Or put another way: with enough eyeballs, all language is ambiguous.
Fears plane computers could be hacked
Not just that, but the website uses HSTS so you can't connect to it without getting a certificate that your browser thinks is valid (at least in firefox, you can't create an exception from the main error page).
I am unsure if any such pre-built solutions exist but, we have created something similar for our app.

A user can setup an unlimited number of different API Keys for their account. For each API Key, we allow them to specify:

- Name/Description: For internal reference

- High Level Permissions:

Admin: (access to make any account updates).

Read-Only: (provide read-only access to the data).

Write Only: (allows for read & write operations).

- Low Level Permissions:

Access to various end-points that can be turned on/off.

- Throttling Options

Allow the user to specify Max Read Requests p/second and max write requests p/second
OpenWRT tracks upstream software as well as the desktop Linux distros do, and it's what the upstream developers use. DD-WRT and Tomato put their own web interface on things but often leave important parts of the system out of date for very long times, especially when they're being held back by proprietary drivers. If you want to make full use of the features and stability and security of modern Linux networking, OpenWRT is where to start: you know you're getting proper IPv6 support, state of the art QoS stuff many DD-WRT and Tomato devs haven't even heard of let alone understand, and a current kernel.
I know you meant that as a joke but I think there's some truth there. It's so easy to become personally invested in the tools we use and instinctively defend them (even to the point of blaming outselves for our tools' shortcomings) rather than try to switch.
I don't know what is a "paralell map", and also don't know Erlang, but I like it. In general Erlang's syntax seem much better, much cleaner: http://rosetta.alhur.es/compare/erlang/elixir/
> Once again, telnet was an established protocol, yet we got rid of it.

No we didn't. Telnet is still pervasive as a communications protocol, partly because of its simplicity and partly because of its momentum. This is particularly true in the realm of embedded devices; even rather-modern enterprise-grade HP printers (for example) open up a Telnet port for terminal-driven configuration by default.
But here's the thing - the root zone's private key for DNSSEC is not in one place. It is spread across a number of smart cards carried by a variety of individuals spread around the world - specifically so that it could not be compromised by governments or others.

You can see for yourself exactly what kind of process takes place to use the root key to generate new Zone Signing Keys (ZSKs) every 3 months at the IANA key ceremonies: https://www.iana.org/dnssec/ceremonies

It would be an extremely difficult process for an intelligence agency to subvert, even one with essentially limitless resources.
>But you shouldn't also pretend you have zero information.

If you've never done something before you really have no idea if it's going to work, and in rocket launch everything that occurs after the last failure is a complete unknown in terms of failure modes.

Now, if he'd made successful flyback stages before, or it was a relatively routine thing for the industry he might have a good enough feel to assign a ballpark number. But that's not the situation.

In the link you provided he uses computer failure as an example, where a person who is familiar with computers does have some information - I've owned my current rig for three years and it's never failed. If you told me you thought it has a 50% chance of failure next month I can pretty confidently say that's an overestimate.

But it's useless to pull numbers out of the air for something as complicated as SpaceX is trying to do.
Paying more gets you better radios and more GigE ports. It doesn't get you less-stupid software. "Friends don't let friends run factory firmware" applies regardless of the price.
Ah, yes, a router that requires daily reboots. A real gem to reminisce about.
The avionics in a cockpit operate as a self-contained unit and aren't connected to the same system used by passengers to watch movies or work on their laptops.

But as airlines update their systems with Internet-based networks, it's not uncommon for Wi-Fi systems to share routers or internal wiring.

I assume an executive overrides the engineers when they design this crap. It worries me that someone who cheated their way into a CCNA cert. is likely setting this stuff up.
This is all too harsh though. When you are doing something new, you aren't that sure what kind of extensibility and modularity you need internally, so you wind up over engineering and over architecting. Imagine you wanted to build a bridge without no one ever doing that before. It is an open problem, the resulting bridge might work, but it won't be pretty and probably used way too many materials, meaning it will be difficult to repair and upgrade.

But your next bridge will be better, benefiting from the experience of the previous one, and you might be able to even do some design up front for the third one that actually sticks.

Tl;dr get started on your first bridge early.
Sure, but for that to be efficient you need aerodynamics based purely on mass and drag coefficient for each part.
Semver. Everything you upgrade a dependency you have to update the package.json in every other modules that uses it. With semver you can just say "^2.0.0" and always the get latest 2.x release.
When I worked at Gupta Technologies back in the '80s and we wrote SQLBase and SQLWindows, we all pronounced it "sequel".

These were people who came from Oracle and such places, so I naturally assumed that this pronunciation was correct.
Bemyheroes – Pocketful of hope in the life of an Orphan
Wouldn't shoring up holes in security ultimately reduce costs though - safes cost money but banks still recognise the benefit of putting them in, and they don't just buy the cheapest one available.

I don't think this simplistic "it's a cost centre" gets to the heart of why banks are seemingly so bad at online security.
Yeah, but they bootstrapped for 5 years and the same 3 funds anchored each round. They were fairly successful before taking any money.

My bad. You gave the impression (to me, at least) that this was some sort of shaky, small situation when it was anything, but. If anything, there are way too few IPOs these days. The only people making money on new company creation are venture investors.

Also, something like 85% of the IPOs in the last 2 years have used the new JOBS rules, so it's not really "one of the first". The threshold is $1b in revenues, after all, quite a rarity at the IPO stage.
Convert WMV to DVD
That would be awesome, thank you for considering it!
File Sync for the “Nomad Worker” – The Official BitTorrent Blog
Design never loses. Write it down. Remember it. Simple truth is that in digital age, some computer operators with a little bit more of a visual culture are perceived as a designers. Nope. I am learning visual artistry from 6 years old. First started at school, then from old masters by serving them like a dog, then when digital era started i learned more about the medium, then learned about the business by risking it all, than learned about the psychology of perception, culture impact, age differentiation, then learned to think from user perspective, to measure reaction and get critical design data from it.... Now when i am almost 40 years old i can say that i can make a good design. Not only because of a talent, intuition or experience. Mostly because my life is a direct result of my design. And when i am designing i am a servant of people's needs. And i always learn. Write it down. Design always wins. Vanity always loses.
I still don't get the "craigslist looks awful" or "craigslist has terrible UI" stances. It is simple and bare, unflashy, things are where you expect them to be on the first or second guess, there are no gotchas, the colors are balanced adequately such that they aren't glaring or distracting, sections of a page are appropriately positioned and proportioned, and even relatives who have to ask me how to put files on a DVD for the hundredth time seem to be able to navigate and use craigslist with ease. By what actual measure does craigslist have bad design? All I can think is that HackerNews readers have some kind of kneejerk to it because it's in minimal old-HTML style rather than the new pseudominimalist style with pointless animations everywhere instead of static page linking, text that's too big, buttons with no text on them instead replaced by icons you have to guess the meaning to rather than simple textual hyperlinks, and no Konami Code. I have never seen an actual Craigslist user complain about the interface, only internet armchair designers.
People have put little nano atmel's in usb drive cases that have emulated a virtual keyboard. Sending ~a few strokes could open command, download, and run an executable.
> I've never seen it in Asia in 15 years

Direct debit is very common in Japan and South Korea, although credit cards are also used for recurring payments. My phone bill is paid via direct debit. My parents' utility bill is paid via direct debit. A client of mine collects membership fees via direct debit.

It's ridiculously easy to set up. It's also easy for fraudsters to abuse. But then again, a fraudster would need to register his business with the appropriate authorities in order to start making debits, and many payment processors require additional details such as the account holder's date of birth. So nobody seems to be particularly worried. People here hand out their bank account #'s like they hand out business cards. A lot of small businesses even have their bank account #'s posted online. Heck, even I have my bank account # posted online, to collect donations for an open-source project.

So, direct debit is everywhere, fraud is everywhere as well, but for some reason, Americans seem to be the only ones who freak out when someone else figures out their bank account #.