skysight-inc/HackerNews huggingface dataset:
What i feel is:

- dont mislabel it as https

- every dev who is gonna use tls should try to verify the security of their languages tls implementation

- they should do a feature freeze for at least 1 year or something and let us verify our implementations, theres no need for a new tls every 3 months or they are doing it wrong

- dont run all the worlds https and ssh over tls, at least give everyone two options

- before we let them global root everything, know how hard it is going to be to setup a meshnet
They're not a part of archive.org (just a totally separate group with similar interests, lead by Jason Scott). The specific project page is here: http://archiveteam.org/index.php?title=SourceForge

The best place to pop in is probably on IRC. For the Sourceforge project it's #coldstorage on EFnet, http://chat.efnet.org:9090/?nick=&channels=%23coldstorage&Lo... for the web client. Though note, the ArchiveTeam project seems to be paused right now.
See the response just above yours - ArchiveTeam is separate from archive.org
I still don't understand why there isn't a public private key for each connection. We seem to accept this broken style of encryption instead of pushing for real encryption.
One very bad "oops" I've realized I made.

Show HN is meant for projects one has created themselves. This is not my project and I didn't read that guideline last night when I submitted. It's an interesting project that I stumbled upon last night and started using. I thought I'd "show (it to) HN".

Happy for a mod to edit the title. My sincerest apologies to the author and the HN community for my haste and any misunderstanding.
Work around browser bugs.
> The only sane alternative that I can see is to run your own server, on your own hardware, preferably hosted inside your own home for maximum legal protection. Of course, unless you really know your stuff then your data could well be at greater risk from both legal and illegal intercept.

This is what I do. At home I have a Chromebox with FreeBSD and a fully encrypted disk. I have a VPS with an OpenVPN server and the required ports are forwarded to my own box. IMAP and SMTP submission require TLS so those are fully covered. Like you said though, the only thing you can't reasonably forcibly encrypt is SMTP itself. Most of the mail I receive comes with STARTTLS but not all.

With this setup the VPS provider can't see anything when SMTP happens with STARTTLS. Obviously if they really want to read my mail they can start MITM'ing the STARTTLS away because it isn't forced but this is the best setup that's reasonable.

My ISP for my home can only see encrypted OpenVPN traffic too. In fact the VPS is in another country but that's only a consequence of the silly VPS prices in my country.

Obviously with this setup I don't have to surrender my private key to anyone either, it sits on my own box (and I use a legitimate CA-issued certificate).
Like Tent?

https://tent.io/
They have to become emancipated before they turn 18, and you can only do that voluntarily in some states.
The main argument against incest that I know of pertains to recessive genetic diseases. Suppose one parent has a recessive disease, and the other does not (P generation). Then F1 generation may have carriers, but will not display the disease. If F1 mate together, however, then the F2 generation may contain individuals who are homozygous for the recessive allele, so they will display the disease.

There was a case in which this happened, the "Blue Fugates" [0], who had a particular recessive disease[1].

[0] https://en.wikipedia.org/wiki/Blue_Fugates
[1] https://en.wikipedia.org/wiki/Methemoglobinemia

This argument made sense before genetic screening was available, but falls apart with genetic screening, since you could screen the siblings to see if they are both carriers.
Does anyone know why Cisco would need a root CA on Windows machines...?
Im not advocating sitting by idling. I just think it reflects our innate priorities when we put so much effort into extending our own lives when it doesn't take as much effort to greatly extend someone else's life who is less resourced than I am.
Here's a list of revenue and business models for online companies. I have this list to be exhaustive:

https://hackpad.com/Web-And-Mobile-Revenue-Models-final-EgXu...
My understanding is that this is what gofundme is for, however the money raised there tends to be fairly small.
Yes I doubt it's worth it only for the Mudaneum, but you can probably plan a interesting day if you combine with a few other activities: http://www.mons2015.eu/
Then whats the point of the referendum. If they insist on non-austerity, make a plan outside the euro.
Just have to say, thank you very much for creating this. Use it every for every single new repo I setup, saves loads of time. It's just awesome!
> Letting a vendor decide

The problem with the root of trust problem is that you have to trust someone. Who is your preference? The government? The registries? ICANN? The hardware vendor? Those are all suspect too, and most have been historically compromised.

The only thing I can see that helps is "community" auditing -- things like Chrome's pinning and ... the action that discovered these new certs. So, as much as it sucks, we're sort of doing the right thing already.
SEC investigates FIN4 hackers who target publicly traded firms
If you don't use org mode, you should. Emacs is entering a renaissance.
Then start small. Scale back your idea, pick a weekend project that you can finish in 48 hours. Make it open source, put it on GitHub. You will see the gratification when people will interact with it. After this you can go a little higher, more ambitious ideas.
You continue to evade the fact that, yes, you contributed money to a campaign to remove the right of marriage and to dissolve the marriages of thousands of Californians. You contributed to a campaign that demonized gay people as a threat to children.
Englang went from pre-history into history in 42 A.D. when the Romans came there. It didn't even have written history before that [check Wikipedia if you don't believe this].

Hardly the place to look for the origin of ancient traditions...
I would argue that we need to explore space because of the situations the next 15 billion people on this planet will be facing, it isn't about the current 7 billion.
'Treat' and 'threat' are only 1 letter apart.
The other argument against incest is to protect vulnerable people from abusive adults.

There are enough cases to realise this is something of a problem, although protections can probably be built into the system.
You say marriage was defined as man/woman by pointing to Prop 22 that specifically defined as such in order to prevent same-sex couples from marrying?

And that's you're proof that your position has nothing to do with anti-gay prejudice?
Um? Of the hundreds of millions suffering due to aging, most are desperately poor. Of the 100,000 who will die today, most are desperately poor. The wealthier people of the world have access to better palliative treatments, better support networks, or even treatments at all; they are marginally better off as they head towards a death they do not want. Aging is very much a health concern of the poor, and the poor suffer more from it. Doing something about that starts with creating the treatments.

Treatments to repair the root cause cell and tissue damage that leads to degeneration will be mass-produced infusions when realized, since everyone ages due to the same underlying reasons. They will not be very expensive, their price trajectory looking like that for drugs today, assuming the regulatory environment remains consistent over the decades ahead. Ultimately they will be as cheap as older medications are today. But to get to that point you have to start by creating the treatments.
Safebrowsing protects you from more than tricky websites - it blocks sites and services that are known to serve malware. It doesn't matter how clever a user you are, if your browser (doesn't matter which one) navigates to a site that hosts malicious code that targets an unpatched vulnerability, you're hosed.
>But also click-to-run trojans are malware.

Yeah, they are. But nothing one can do about them besides sandboxing apps (which OS X already does for MAS apps).

At some point, when you click on an app you allow it to execute what code it has.

So the real worthy of the name malware to me is that that spreads by itself without user intervention. E.g. as a virus, or by visiting a page which uses some exploit, etc.
Wouldn't this be the case for similarly fake, different-sex marriages? And wouldn't this be the case before for civil partnerships anyway?
They have those in Star Trek:TNG Engineering!
The Windows store?
Sublime Text 3 for Python Development
What do they call the car they do make then? Its on the Golf frame, has the curved top and looks like the Beetle on steroids.
You can do that in any language. I've done that kind of thing in an hour in languages I've never even used before (uncompiled ones, obviously).

Perversely your first fixes are often easier than your later ones as you're not trying to make things better, you want to show off his good you are to your new boss/client.

The problems with bad code come when you have to make bigger changes and you're constrained by the existing design like a straight jacket.

Adding a £ or a $ or a € is really easy for any experienced programmer.
It works for 5 floors or so. After that the delay becomes noticeable? Elevators can and do accelerate drastically when moving long distances.
> Why shacking up or pumping out kids gives the adults involved an advantage in their financial livelihoods

Even with all the tax benefits that children bring, parents still have way less money available than comparable couples without kids.

This financial disadvantage is a serious disincentive to having children. Do you want to live in an aging society without kids that will be dead in ~80 years?
Exactly the opposite. Amendments are the correct way to change the Constitution.

Randomly deciding, "oh, we'll just reinterpret the existing language to mean something totally different, and is cool because times have changed..." is a totally different ballgame.

That sort of thinking violates the legitimacy of our legal system at the basest level. If words in a law, or in the Constitution don't mean anything and meanings can be changed on a whim, there is no solid ground for anything.
> Shitty layout from 2003

I actually like this layout. It's fast and easy to read, renders ok on mobile and is lightweight. I'm grateful that the maintainers didn't switch to an over-the-top look-at-my-framework.js thing just to make it look modern at the detriment of usability.
Why Github? Copying from one commercial provider to another doesn't solve the fundamental problem. Using git helps, but most of those old repos will never get cloned.

In 10 years time, Github may be the tired old service that gets acquired by a hedge fund that decides to monetize their repos. Such things are part of the corporate lifecycle.
Constitutional amendments are certainly constitutional.

The judicial system discovering new rights is not.

And that clause of the Constitution certainly was not used when the question of mandatory health insurance came before the court. I would actually like that policy if it were consistently applied. Instead it is applied when it is the means to meet the desired ends. And that means we are a nation ruled by men, not by laws.
Except this is the norm. Is electronic communications protected? Freedom of the Press cover that? Who controls currency vs coin? What about bitcoin? Interpretation is going on all the time.
My question for those that have spent years building a product:

Was it worth it open sourcing your product?

Did you get lot more leads and exposure?

I'm afraid of open sourcing because I'm not sure if it will do anything for me, and that I'm giving away years of work away for free.
Ask HN: Lead generation for B2B
Hi,

in few weeks I am launching a new product.

I made my homework and I find the very first client, however I would like to keep work on the product instead to chase new sale lead.

Does HN have any sale lead generation tool to suggest ?

I am in the B2B for e-commerce.
Dual-income families have been the norm for 40 years now, out of the 100 years that the modern income tax has even existed.
My route from employee to business
It stunts credential obtaining progress, more accurately. They're two independent phases.
> The only acceptable solution is to remove the restriction of using only four byte per sequence which would allow to encode these easily keeping all the advantages of UTF-8

I agree. Extending UTF-8 with surrogates like this is intended to be temporary, only used until the pre-2003 2.1 billion codepoint limit for UTF-8 and UTF-32 is reinstated by the Unicode Consortium. Then any software using UTF-88 can easily swap the encoding to the 1 to 6-byte sequences in "reinstated" UTF-8. This surrogation scheme is actually intended for UTF-16 to use as a second-tier surrogate scheme so it can encode the same number of codepoints as UTF-8 and UTF-32. I wrote all this under "Rationale" at the bottom of the linked page, did you read that far?

Hopefully, though, UTF-16 will be on its way out when pre-2003 UTF-8 and UTF-32 are reinstated so this surrogation scheme wouldn't even see much use there.
Looks nice enough.

using PyCharm myself btw.
Hmm. Are these actually new? Did the OP look at Microsoft's full certificate store and notice some additions, or did they look at their local machine? Because in the latter case, Windows does not include a full certificate store. Rather, it fetches them on demand.

EDIT: I googled the first two. "GDCA TrustAUTH R5 ROOT" and "S-Trust Universal Root CA" are both new certificates (~Novemeber 2014). The latter is in Firefox already, and is a new SHA-256 root certificate to eventually replace a SHA-1 certificate for an existing CA.
Electron as GUI of Python Applications
KORE.io – A fast SPDY capable web server for web development in C
Tilengine – A 2D graphics engine with raster effects
I had an interview with Douglas Crockford 2 years ago to work on a project that sounded a lot like this. I'm glad to hear it is out in the open.
I believe that the use of scrypt is supposed to make this unbruteforceable.
I'm not so sure about that. I recently wondered if the mundane would be accepted on Ello. I've seen that everyday plain text is quite ok with the community. You get what you put into it though. With smaller numbers, you have to reach out and comment on other posts. Eventually, people find you and decide to follow or not if they click with your previous posts too. In many ways, people on Ello take a follow decision more seriously than elsewhere I think. Someone said Ello is Twitter's overflow. When you want more than 140 chars (not that Twitter should ever change that), Ello is a great place for the long form.
There's nothing wrong with interpretation, as long as that interpretation doesn't change the original intent. Obviously freedom of the press covers communications in general, already covered several types of communication originally, and would cover electronic communications and any other form of communication we invent.

If you want to change the original intent, though, that's an amendment. That's why prohibition required an amendment, for example. The court couldn't (as they disingenuously do today) just say, "well, over here the Constitution says that the feds have the power to regulate interstate commerce. So sure, prohibition is fine because commerce."
Wow 'Nazi' showed up pretty fast on that one. Ignoring that, I'd say that its not bullying to make a person's own professed beliefs public. Just helping them out really - you hate gay people, lets let the world know. No new information, just sharing.

A cake with hate messages is entirely a different deal, than one with messages of love and tolerance. That's a pretty big difference, and conflating the two is the favorite sophomorish 'argument' of the day.

If its bullying, its bullying when a restaurant or bakery humiliates someone in public by refusing their business. But that kind is protected somehow? The irony is not of my making; its something God provides for free. The tactic of revealing your words and actions publicly is freely available to everyone; use it as you wish.
I agree, but in this case I don't think you understand the severity.
Hum... what's happening here with Indonesian people?

https://news.ycombinator.com/item?id=9786010
So why don't you folks fight for changes in the law to only convey the benefits of marriage to couples with children? Surely you'd include gay couples in that if you did, right?
That's a stretch by any interpretation. Its obvious to me that an electronic amendment is overdue. Can we come up with a test for 'amendment required'? It can't be about what's 'obvious' to someone.
The media in Singapore: Zip It
TinVR – Immersive DIY Head Mounted Display
Side rant:

Claiming that you don't believe in God is equally annoying as those sect guys knocking at your door. I do believe in God and I find the use of lithium in treating these illnesses a hope (with potential dead serious side effects: http://www.ncbi.nlm.nih.gov/pmc/articles/PMC4456600/) but not the potential meaning of life (?! how can you compare lithium with the notion of God?!).
Among other things you can:

Identify and fix memory leak, deadlocks, slow methods. And do handy things like enabling JMX server, enable GC verbose logs and more without restarting or installing anything in your app.
How about remote teams?

At previous startup we had guys from: Germany, Russia, US, Romania, Brasil, Ukraine, Philippines.

Our "cultural fit" was just about: Be a Hacker (innovative, open-minded).
They silently installed all the previously existing ones on my system, too. So did Apple on my Mac, and Ubuntu on my old notebook.

Maybe I should, but I am not going to individually double check every root certificate. I don't think I have the means to do so either.
And other forms of marriage are not subject to abuse? Doesn't rise to the level of prohibition, I think.
That figure is a loan, and is smaller than the national debts of many larger EU countries. It's not the size of the debt that matters in absolute terms, but the ability to make payments. I don't see anyone arguing that the holders of the US$14trn debt should get to run the country simply because of the size of the debt.

Errata: for "ECB" read "EU as represented by the Commission. The ECB are providing life support for the Greek banking system and trying desperately not to either get dragged into the politics, lose all their money, or blow up the EU banking system.
We need dynamically selectable trust.

I don't mean the simple ability exposed in most browsers to add/remove certs. That still assumes one set of trust that used globally, which is completely incorrect.

Maybe I don't trust $COUNTRY to handle their root certificate for most uses. Currently we handle that case by removing the cert completely. Trust, however, is not a simple boolean value, and maybe I do trust that certificate for $COUNTRY's official government pages. I should be able to specify that I trust some certificate for some domain (or other, non-domain based use!), but not for others.

As another example, consider a local Web Of Trust. whenever Web Of Trust is brought up, people complain about the difficulty of key exchange. Well yes, that's a difficult problem, but there is no reason that it has to be solved for all use-cases before anybody starts using it. Maybe a circle of (usually physically local) local friends want to have secure communications. They can share a key in person easily, and so it should be easy to give access to a private forum by simply sharing a key/cert on a USB disk.

We can currently approximate those cases, but it is not well supported, and is certainly not something that most users would be expected to be able to do. We can fix some of that with a better UI, but I'm suggesting a far more fundamental change, because actually solving problems like key sharing will not be easy, and I suspect they will only be solved once we have infrastructure in place. HTTP was successful because it did not require that everybody implements the full, fairly complex specification. Instead, we had a fluid, extensible protocol that allowed anybody to extend it, and that allowed for the development of a wide variety of software.

The problem with traditional PKI (at least as implemented) is that it assumes that we can assign an absolute trust value to anything. In reality, trust is relative, and may in fact have multiple values at the same time. Until software is designed around those realities, it will always be inflexible and insecure for any use case where the needed trust assumptions do not reflect the assumptions made by the authors the software.

Unfortunately, I'm a old-style UNIX nerd who is fine with using GPG, and I'm not sure what the UI for a dynamic-trust system would even look like. sigh
>On the other hand, the scale of economic aid to Greece is unprecedented, with lined up bailout of €240 billion.

It's not aid per se though (like the Marshall plan you compared it to).

First, it still is in the forms on loans. Yes, the "aid" is just further loans (with lower rates), that are piled up on the previous debt (with interest on them repaid normally all these years).

Second, the aid goes this way: from EU taxpayers and the Greek state (its payback to the aid loans), to EU banks. The aid money are not given to Greek government to pay salaries, etc. or any such purose. They go directly to the creditors. Like the "too big to fail" Wall Street bailout, this is too about siphoning money to central European banks to protect them from toxic assets they had accumulated.

Third, this "non-aid" aid (essentially letting Greece near-default and then lenting them money month-to-month to repay its debt under certain conditions), was used to bully Greece to take a number of tax hikes, austerity measures etc, who killed its economy (30% unemployment and up to 50% youth unemployment, 40% loss of wages, etc) to give money for the "aid" loans (which never touched Greece), and to

Fourth, all this is even more damning considering that Germany in WWII invaded Greece, resulting in 700.000 deaths from famine, thousands of deaths from executions, and massive destruction of infrastructure. They also took a "loan" from the occupied country, which they never repaid, without also repaying their war recuperations. Germany was absolved from doing so in the early fifties, despite the harm they caused to Greece, because they were new cold war darlings and valuable US allies (and ditto for Eastern Germany / USSR). And what could Greece do about it anyway?

Here are some thinking points:
http://www.forbes.com/sites/afontevecchia/2012/02/21/greek-b...

http://in.reuters.com/article/2012/06/29/spain-germany-bailo...
I joined this discussion just to recommend that book, it also helped me tremendously; I read it as a teen in the '70s.
You're right about you're being clear about working there, I'm sorry if I've sounded a bit harsh. Thank you for your analysis BTW. I think it's always useful to provide constructive review to fellow developers.

I agree with you that the only alternative is self hosting. That's why I'm anticipating a new wave of low power mini-computers with solid state memory, a fully configured embedded GNU/Linux or *BSD distro, and a webbased interface for management which would make it possible to host our own services at home using OSS only. The FreedomBox is an example of this.
"Since this thing didn't work as expected, perhaps we should abandon all future attempts at regulation"

I'm sure you can see why that isn't a useful contribution.
Like session keys and PFS?
Let's be honest - if you don't vet every single trace and circuit in your hardware, you run the risk of exposing yourself.

Just trying to further emphasize your point, not be obnoxious. The truth is, there's almost no possible way to not expose yourself. Anything made by humans can be abused by other humans for personal gain.
Uindir – Programlar – Uygulamalar – Oyunlar – Ücretsiz İndir