skysight-inc/HackerNews huggingface dataset:
But there are different degrees of paranoia. I'm fine(ish) with trusting Microsoft to sign drivers, updates and applications.

I'm also fine with them signing for outlook.com, microsoft.com etc.

I'm not fine with them signing for wikileaks -- but I also am not really worried about that. I'm worried that some fly-by-night CA will loose their keys, get hacked, etc. So I don't want any more than a minimum of CAs on my system, and I'd like to approve them on a domain-by-domain basis.

Even with good UX, that'd bee way more hassle than most people want -- I know that. But it would've been nice to have a sane option for it.

And also some special control over updates/upgrades to the CA-cert store.

In short, I trust Microsoft to write software, I don't trust them to delegate trust, because they're trapped in the CA racket.
Could Facebook implement a PageRank type algorithm that gets people with already verified real names (perhaps they paid for something by credit card on FB, or are registered with a .edu email that matches their initials), to then say whether their friends name was real? Surely there's a way of proving someone's real name without making them use their legal name.
SQLMap GUI for Windows users
There are a couple of in-the-wild nuisances for current versions of Mac OS X. We've encountered Mac Defender, Genieo, Trovi, and others on client systems.

Due to the architecture of Mac OS X, manually finding and removing these things once they're installed can be difficult at best. There are plist files hidden all over the place that can be used to launch and relaunch processes and lots of other nooks and crannies for malware to hide.

See for instance https://support.apple.com/en-us/HT203987 and http://www.thesafemac.com/arg-identification/
How illegal is to provide a fake ID documents to Facebook? ("fake" in the sense of "editing it in Photoshop")
Its hard for me to consider moving to India given the current environmental degradation there, for example[1] and HN discussion[2]

1: http://www.nytimes.com/2015/05/31/opinion/sunday/holding-you...

2: https://news.ycombinator.com/item?id=9670458
I did nuke most certs on my Android/Cyanogen-mod phone at one point, and then added back a few at a time. Their list, while I can't speak for the concrete CAs, looks about the right length to me (slieds 75-76):

http://www.slideshare.net/zanelackey/attackdriven-defense
I think you'd be surprised at how much variation there is in the feature set. libc isn't just the C standard library as defined by the language standard. It's the OS standard library too, and includes POSIX stuff and some de facto standard stuff and some OS-specific stuff. The musl author has a comparison table: http://www.etalabs.net/compare_libcs.html

Historically, the biggest reasons for alternate libcs have been to make tradeoffs for use on embedded systems (uClibc) or political/license differences.
Be aware that the stock market is a game of "dumb money" (casual investors) and "smart money" (hedge fund managers, HFT groups, bots watching info feeds, and 'insiders').

How does one determine the 'true' value of a share of stock? — what is the current perceived market value of that stock and how are anticipated influences going to change that perceived market value?

I don't trade as I believe it's a bit rigged in favor of HFT & hedge funds with deep insider sources. [1] [2]

I'd recommend investing in tangible business assets and infastructure. Do something real, make real things happen.

[1] http://www.washingtonpost.com/blogs/wonkblog/wp/2013/09/24/t...

[2] http://www.zerohedge.com/news/2013-09-20/gold-einstein-and-g...

* ZeroHedge is an introduction to the insane culture of stock trading.
Loneliness is deadly: http://www.slate.com/articles/health_and_science/medical_exa...

The "epidemic of loneliness" has spread to many places. If you haven't read "The Lonely American" I implore you to do so if you care about this topic at all. An incredibly sobering read.

Book blurb:

"In today's world, it is more acceptable to be depressed than to be lonely-yet loneliness appears to be the inevitable byproduct of our frenetic contemporary lifestyle. According to the 2004 General Social Survey, one out of four Americans talked to no one about something of importance to them during the last six months. Another remarkable fact emerged from the 2000 U.S. Census: more people are living alone today than at any point in the country's history—fully 25 percent of households consist of one person only.

In The Lonely American, cutting-edge research on the physiological and cognitive effects of social exclusion and emerging work in the neurobiology of attachment uncover startling, sobering ripple effects of loneliness in areas as varied as physical health, children's emotional problems, substance abuse, and even global warming. Surprising new studies tell a grim truth about social isolation: being disconnected diminishes happiness, health, and longevity; increases aggression; and correlates with increasing rates of violent crime. Loneliness doesn't apply simply to single people, either—today's busy parents 'cocoon' themselves by devoting most of their non-work hours to children, leaving little time for friends, and other forms of social contact, and unhealthily relying on the marriage to fulfill all social needs."

Here's an article for Britain:

http://www.independent.co.uk/life-style/health-and-families/...

It's everywhere.
The article is incoherent. Also, the quotation of the U.N. declaration of human rights is incomplete:

> Article 27.

> (1) Everyone has the right freely to participate in the cultural life of the community, to enjoy the arts and to share in scientific advancement and its benefits.
> (2) Everyone has the right to the protection of the moral and material interests resulting from any scientific, literary or artistic production of which he is the author.

Aside from the fact that the UNDHR doesn't directly bind anyone in the U.S. it explicitly protects the "material interests" in scientific productions. Copyright is a human right under the UNDHR.

Elsevier's business model is built simply on scientists exchanging their material interest in their publications from the publicity that comes from being published in one of its affiliated publications.
His question was about living a fruitful decade despite the difficulties. Getting a job doesn't necessarily make your life better. Helping other people does. For the skeptic, there is only one way to find out, however.
I usually visit the website minus the referral/tracking :)
Ask HN: How to get part-time high paying consultancy jobs in SF Bay area?
I always wanted to build something of my own. But I was not born in US so it took sometime to get my permanent residency. Now, I am ready to leave my full-time job and start working on my startup. I can support myself for next 6 months but my cofounder has dependents. So, he can't leave his job without any salary right away. Because we are not from bay area, we are not connected in its inner circle. Friend and family funding is not an option. We are wary of raising seed money until we are sure that our idea has legs. So, we are thinking about doing part-time consultancy work in bay area to bring in enough money to pay the bills. I understand that it will be a distraction but I think it is necessary for us to go through the next 3-6 months. I have read patio11's blog but I am not sure how to get some of those high paying consultancy jobs so that it is not a major time sink.
Personally I have worked at multiple major cloud companies of today. I have a lots experience in building really large scale systems, how to scale them on public cloud. My co-founder is also a software engineer. If you need someone to read a computer science paper and convert that to code, he is your guy. This are some of things we can do well: - Help build and scale technical architecture on cloud. - Develop BIG data applications for your startups. - Build your website or mobile apps.

If you have any suggestion on how to get part-time / project basis consultancy jobs in the bay area that will be great help. If you have any concrete project work, you can write to me here: scalablesol AT gmail DOT com.
I'm curious about your French Foreign Legion comment; can you elaborate?
> Sorry if your comfort zone is too small

Please don't be personally rude in HN comments. This comment would be fine without that bit.
Incredible:

- all the environment assets were taken from the Unreal marketplace

- all the character actions were scripted using blueprints only
Why you should never tap friends and family for startup funds
BTW, the above is a very very brief summary of Van Tharp's book Trade Your Way to Financial Freedom [0], which I highly recommend to anyone interested.

[0] http://www.amazon.com/Trade-Your-Way-Financial-Freedom/dp/00...
> A "bumpless" expansion joint is an unusual requirement, but one could probably be designed.

Not just bumpless. It also has to be sealed against a large negative pressure differential. Those two requirements together take you into unexplored engineering territory.

> The SF BART tunnel under the bay has huge rubber expansion joints.

Not even remotely comparable. That tunnel is two orders of magnitude shorter than the HL, the walls aren't smooth, they don't have to sustain a vacuum, and the thermal gradients are much smaller underground.

> Two tubes slipping over each other with an interior lining of braided mesh might do the job

And what provides the vacuum seal?

> The expansion joint problem is probably solvable

Sure, but the interesting question is: can it be solved without prohibitive cost. The jury is still very much out on that.

> Emergency exits will be a big problem

Why do you think so? Pressure-sealed doors are a solved problem.
UptimeButler
What's involved in checking on trains?
I am consistently annoyed that about 3 out of 30 links on every HN page are blocked in Russia. They are not intentionally blocked - it's collateral damage because they happen to share same ip address with censored websites. A single blocked Cloudflare ip can make a thousand websites unavailable.
I guess this is the work of a bunch of trans-haters abusing the report feature.

Assigning the right amount of power for an automatic filter is a science itself, though. Heuristic AV scanners and spam filters suffer from the same issues.

For example even big telco providers (Ay Yildiz Germany) get caught up for now MONTHS in Gmails spam filter with no way to change this. Their emails are discarded already at SMTP delivery...
This is a pretty complicated explanation to give someone who called themselves a beginner.
That is an excellent idea! In fact, we've just implemented the billing service, so please go to http://cuttIeph1sh.com/account/billing, log in to your account and provide your payment information to continue receiving our phishing reports!
ES6 Feature Performance
From my not incredibly extended experience, the problem was the FFL attracts exactly the sort of people in op's situation - those with criminal records and/or nowhere else to turn. You're then basically a mercenary in a group of other very fucked up mercenaries, and from the outside it appeared a great way of reinforcing the worst aspects of one's personality.

By contrast if you simply go live in South America and teach English, you'll just be any other expat, and immersed in a normal local culture much more likely to help you become a sane, well-rounded human.

(for reference, I spent two weeks in a hostel in Marseilles with a creepy Algerian criminal in the FFL who'd been wounded/furloughed and was trying to obtain French citizenship along with a 19 year old in-denial gay Mormon who was attempting to join. The Algerian wound up making violent/rapey comments to at least three female friends)
He just closed a series A with a $10 billion valuation, so he's hiring rock star full stack data scientists.
Requiring Internet Explorer for switch management sounds like exactly the kind of stupid Cisco might go for.

These days Chrome/chromium uses the system store AFAIK, so at least you can get surprising breakage in your management tool that isn't due to TLS, but rather some kind of IE compatibility hack... ;-)
alias fu='kill - 9'

Some weird things get up voted round here..
Is it necessary to write 1,400 words? It's too much to go through line for line, you're completely missing the point and I'm not spending any more time on it.

Here's a different approach. Read about the history of dishonesty[0] of the woman called the twitter mob to destroy Tim Hunt's career and just think about it for a little while. That's it, just think.

[0] - http://www.dailymail.co.uk/news/article-3141158/A-flawed-acc...
There are many sites like this and I love what they are doing for raising awareness. As one of the first people to ever fight phishing (I worked at eBay and PayPal fighting phishing before there was a word for it), I'm keenly aware that awareness is the only way to really stop it.

That being said, I don't like these reports, because any time I get a phishing email I immediately load it up in a protected VM to see what it does, so it would count me as a victim. Since the page you go to isn't a real looking login page, you can't differentiate between those who fall for it and those who just clicked to see what it was.

You need to actually set up the fake page and see who puts in valid credentials to get a true report.
So, "Zip" used to work there and she hasn't used her connections to get this resolved? While it's unfortunate that this happened, that's pretty standard in this situation. Make a call - it sounds like she knows the right people.
This is magnificent. If only I could use .NET with Unreal Engine. Guess I'll have to look into blueprints.
The results will either be replicated or they won't.

There will either be sufficient documentation to show whether the experiment was repeated accurately or there won't be.
Yeah, but it's in Javascript and edgy, so it's so much cooler... obviously.
I'm not so sure. Before the "encryption fad" most traffic would go unencrypted to a Cisco device (router, switch, proxy, vpn concentrator (the inside of the network)) anyway.

As far as I know, The US has almost non-existent privacy laws when it comes to what corporations are allowed to do/demand to do to their employees through contracts wrt. traffic on company equipment.

Forcefully and silently intercepting traffic on employee networks would AFAIK be illegal in most of Europe.
In 1/136 as many lines of code (although I guess this doesn't emit any emoticons):

$ function fuck { killall "${@: -1}"; }

$ fuck you firefox

$ fuck your bloody memory hogging, firefox
Very definitely your loss, for not following this particular prescription ;)
Real Subjects Have No Arbiter
I've been starting a few Django projects during the last few years and I have had trouble finding packages that are compatible with the latest versions. Maybe their release cycle is too fast for all the 3d party apps to keep track?

Also I find that some of these 3d party apps use a notation like >= Django 1.X but that's not really true because of backwards incompatibility.
A clearer way to know what exact version Django apps are compatible with would already be really helpful.
The screen capture shows what - in context - is a pretty cool effect. When the FF window disappears and at the same time the visual bell causes the Terminal window to flash white, the Emacs window behind it bleeds through and quickly fades out. It's like a moment of rage causing brief hyper-awareness.

(Alas, that's an artifact of semi-transparent Terminal / OS X windows, which in normal usage is quite annoying...)
I signed up also because a friend recommended it, but haven't done the subscription yet. I noticed that you have to pay on the how it works page before I created the account so that didn't bother me when I go to it. The jobs look pretty good so I think I'm going to try it.
Why is this not in Lisp or Lua?
How many active users did you have in your peak? And how large was your server to support them?
Nothing much to add except good luck Gadi. There's always going to be bad actors in this world and the more techniques the better.

(Slight disclaimer: I know Gadi well from the anti-spam world)
Master Password: new password manager without the cloud
Funny, I have this same concern working for a government organization.
I'm kinda surprised a Disney children's property has weapons like Gatling guns and rocket launchers.
Not only it's in javascript, but it also uses monads, like Maybe. Very fancy indeed!
I see you baked most of everything from scratch as far as your control panel goes. Is there any reason why you didn't simply opt for something like WHMCS and then bake in your own API wrapper?
There are many, many people who skip showering, haircuts, exercise and washing dishes and still easily find a girlfriend. The fact that op is 30 and has never had one suggests far deeper social problems, which I think this life-improvement stuff (while not irrelevant) can serve to paper over.
1. There's lots of good advice here. Don't try to do all of it simultaneously; pick one or two things and really commit to them, and then review how well you're doing in those areas once a week. You'll have weeks of no progress, everyone does, but if you keep focusing on 1-2 areas until you're happy with that result, almost anything can get improved over 3-6 months. Sometimes shorter, but ready yourself for more and pace yourself accordingly.

2. Start trying to meet more people and make more connections Friends, acquaintances, professional colleagues. Go to where people doing the type of statistics/marketing you're doing hang out, and get to know them. In-person is better than online, but if you're not near a major metropolitan area, online would be okay too.

You could, for instance, find some discussion forum devoted to marketing/statistics, and learn, post there, follow up, etc.

It doesn't have to be purely professional related, but if there's overlap between the work you want to do and the type of people you're meeting, you'll have more job offers. There's a number of studies showing that the vast majority of hires made aren't from applying blindly by sending in resumes, but based on recommendations and personal relationships.

So -- get to know more people. It'll probably also help with your self-esteem. I'd also recommend never calling yourself "broken goods" or similar again: the world's got enough antagonism in it without you getting on your own case.

But yeah, your main goal is get employed? Start meeting people, getting to know them, and showing your competence in the areas you'd like to be employed.
Perhaps visit some sort of counselor every so often? HN might help you with career advise, but a therapist will help figure any problems you have with yourself and others. You don't have to be crazy to seek assistance.
One idea that might be both workable, and possible would be to a) have reasonable way to choose CAs (not just, oh this, XYX corp sounds trustworthy, I'll let them in), and b) have a capabilities system that's not entirely embedded in the CA system.

So, I could have my own CA, or GNU/Debian could have their own CA -- and I/they could sign a capabilites document allowing NORID to sign off on .no-domains, but not on any other TLDs. Or I could trust Microsoft and Google with their own domains (a whitelist), and nothing else.

Such lists could be distributed in a similar way to certs and revocation lists -- and might take us from a 100% broken system, to a 80% working system -- which is probably as good as automated(ish) trust is going to get anyway.

[edit: I don't think delegating trust is completely wrong. It's insane to think that 10 billion people will get the required knowledge to make good trust decision for software etc. Most people can't even do that for normal stuff like money.

Anyone remember nt-bugtraq? I loved that. I still can't read official MS security bulletins. I usually only see that there's a patch, rated at some comically low importance, and usually have no idea if I really need the patch or not. And I consider myself rather technical, and while windows isn't my prime platform, it's not completely alien either.

The summaries on nt-bugtraq was gold. "This is remote root in default install of IIS". Ok, I don't run IIS. Note-to-self, make sure this patch is installed if I do. "This is local login bypass in GINA". Ok, lets install that, prioritize public facing machines. Etc.

That is why I'd like the ability to trust third-parties to help manage trust. I don't think MS is maliciously complicating their security bulletins, I just think they're trapped in an obscure dialect of Coroporatese that I don't speak, and really have no desire to learn.

Maybe I should order a few copies of "On Writing Well" and ship them to Seattle, att: MS security team.]

[ed2: Actually:

https://technet.microsoft.com/en-us/library/security/ms15-ju...

is better than what I remember. Note that the page doesn't mention certificates, and the new update doesn't appear to be mentioned on:
https://technet.microsoft.com/en-us/security/advisory

either.]
The best thing you can do for yourself is to go to therapy. Cognitive behavioral therapy can make a big difference in your life. Find someone in your area and commit yourself to improve with the guidance of someone who can help you.

A lot of the issues you have could be the result of a distorted life perspective. Superficial advice like "lift weights" are not helpful. You need to change your thinking patterns to have results that last.
woohoo University of Illinois

goooooo get it!
Instead of putting everything in the cloud like Lastpass or 1password do, they seem to have a one way function to generate your passwords deterministically with your name, master password and the name of the website you're trying to log into. I think that's pretty clever, I can see several problems though:

* How does it know what websites you're using this algorithm on?

* What happens when you need to change your master password? (although that's an even huge problem with the cloud solutions)

* What happens when you need to change just one of the password? (sometimes websites ask you to change your password, because they got hacked or for other reasons)

-> from the FAQ: "You have to increment the "site counter" in the app and remember the number you're at to generate the correct password."

* What happens when the website asks you to construct a weird password (lots of restriction, limitation on the size, etc...)

-> from the FAQ: "You have to select a different password type which will use a different recipe."
Definitely agree on Alan Kay--his talks are fantastic! I would also add Bret Victor to the list too.
Facebook needs to be replaced by something that is people oriented instead of marketing oriented. Fat chance, but one can dream.