jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
[Full disclosure: I've worked on Amazon Route 53]

It's always neat to see nice data collection like this, but unfortunately the average speed to the authoritative name servers isn't a very meaningful measurement. Real world resolvers bias heavily towards the fastest name server for your zone, and they are so latency sensitive that they'll do things like issue concurrent queries to several name servers at the same time.

The upshot of that is that what really matters is the latency to the closest name server, or at worst the latency to the 3rd fastest server; for the rare boot-strapping cases. Bind, the most common resolver by far will issue up to 3 concurrent queries to different name servers as part of its SRTT algorithm. The next most common resolvers; Unbound, OpenDNS, and Google Public DNS perform pre-fetching and so the latencies aren't contributing to the user experience except for extreme outlier queries.

Some large DNS providers design to this behaviour, and seek to increase the average distance to their DNS servers by operating the name servers for each domain in different data centers. That gives routing and path diversity for the DNS queries and responses. Since network path diversity increases with distance, this works best when you include a location or two that are quite far away, which increases the average latency to those servers - but thanks to resolver behavior doesn't do much to the user-experience.

A write up for Route 53's consideration of the trade-offs is here: http://www.awsarchitectureblog.com/2014/05/a-case-study-in-g... (there's also a video about the role this plays in withstanding DDOS attacks: https://www.youtube.com/watch?v=V7vTPlV8P3U around the 10 minute mark).

Where the average latencies are low, all of the name servers are in close proximity to the measurement point and I would wager that the network path diversity is probably quite low. A small number of link failures or ddos/congestion events, maybe even one, might make all of the servers unreachable.

A more meaningful measurement of the speed itself is to perform regular DNS resolutions, using real-world DNS resolvers spread out across your users. In-browser tests like Google analytics go a long way here, and it's fairly easy to A/B test different providers. The differences tend to be very small. Caching dominates, as others here have mentioned.

Apologies if I seemed to rain on dnsperf's parade here; it's a neat visualization and measuring this stuff is tough. It's always good to see someone take an interest in measuring DNS!
NSA is known for breaking cryptosystems with implementation flaws, side channels, the bleeding edge of cryptanalysis (which in cases of things like padding oracles and chaining modes make practical differences), and by brute force (when key sizes are within their top notch cracking capability). Furthermore they are known to have sabotaged software to insert exploitable flaws and the CIA today will compromise compilers of specific individuals so that they compile backdoored binaries. Unlikely then, but replacing a popular hosted binary wouldn't have been beyond their capability.

It's not that unlikely they could crack some instances of PGP some of the time. Today the NSA docs reference being able to crack things like OTR sometimes, though unlikely.
The BBC broadcast an "Archive on 4" featuring Alan Lomax earlier this year:

http://www.bbc.co.uk/programmes/b050sbzw

Well worth a listen.

If the BBC block this for non-UK users I have a local copy I could stick on my YouTube account. Let me know.
I can't speak for other teams, but re: NTVS... we definitely dont want to force abstractions upon you. For instance, with the npm integration, we provide UI where it makes sense (exploring/managing your packages, searching for packages), but you can drop into the cmd line or .npm command in the interactive window anytime you please. Think of it as semantic zoom - allowing you the flexibility to traverse the levels of abstraction when it makes sense. Are we 100% there yet? No. But I consider that to be the ideal experience, and we're definitely trending closer to that vision.

Thoughts? I'm especially curious to hear how you think we can improve the existing experience so that it caters better to your workflow. What are some of the abstractions that get in your way?
Probably the part where they're not locking you in their network by way of convenience. Forcing you to use their homepage (FB) or browser (Hangounts) and preventing you form using unified messengers gives their other services exposure and makes users advertise/annoy friends to join their chat service.

Much like Apple is doing with the "green bubble" shaming on their keynotes.
I still prefer PyHP: http://www.ccraig.org/software/pyhp/manual/sample.html
As an anecdote, I was seeing outrageous, hard-to-believe numbers in my usage of FDB.

Nothing but good things to say, other than their multi-node configuration being a little strange.
Please don't do this here. Maybe you don't owe journalists better, but you owe this community better if you're posting to it.

https://news.ycombinator.com/newsguidelines.html

Edit: actually you've been breaking the site guidelines so consistently with this account that we've banned it. Would you please not create accounts to break HN's rules with?
This is because "strong opinions, lightly held" creates a culture where people with little to no insight or experience feel empowered to create an unceasing high-volume firehose of worthless opinions that drown out anything useful.
Is $5k+ too low for the high end? It seems like people always think their domain is worth six figures. They just have to wait for the right moment. I don’t think people voting would be as irrational though. If someone were to post x.com I hope they could have a higher limit on the poll.

Great idea and execution! I answered enough questions so I could submit 3 for polls.
and at my initial google 10x the price lol
I like using KeypassXC to manage my SSH keys. It can cooperate with an SSH agent and avoids leaving SSH keys unencrypted on disk if you care about that. Honestly though I use it so I can keep my secrets together in an easy to sync location.
A lot of the comments on this page seem dismissive of Gates. While I'm sure he's not the the smartest guy in the room on every subject, I suspect his knowledge about energy, farming and medicine to be superior to almost anyone outside academia. The source of this seems mainly to be the enormous amount of books he reads, which you can get an impression of from his blog https://www.gatesnotes.com/Books/Energy-and-Civilization

I'd rather see arguments against his arguments than against him. They probably require a lot more time to research, but that's sort of the point.
Might be just me but seems that Paypal option is not currently working in Gumroad
I agree. I dropped all analytics for my blog and sideprojects, thoufh I found out that for my personal motivation I really like some stats about user engagement.

I could use the access logs from the webserver. Can anyone recommend a tool that post-processes those logs in a "analytics" like way?
Not necessarily true for all countries and ISPs. Eg in India, you have to specifically request for and pay approx $55/mo for a connection with static IP whereas regular broadband connections (150 Mbps, 500 GB data, FTTH) start as low as $12/mo.
Where do you get the base set of RSS feeds? I couldn't find that in the README.
Over the past 3 years, my monthly electrical bill has been 1/3 to 1/2 what it costs on a "regular" contract.
It's tragic, yeah, but the same thing happens to different urban neighborhoods. And the resistance to this kind of transformation just limits residential option and drives up housing costs for everyone.
ESG probably stands for Environmental, Social, and Corporate Governance:
https://en.wikipedia.org/wiki/Environmental,_social_and_corp...
The obvious solution is to abolish the possibility to make a profit. I think they should allow private schools, let them charge fees, select students the way they want to but simply not allow any profits. That system works here in Denmark and public schools don’t seem to have suffered from it.
Ah, then I suppose it's just a good excuse to go fetch another cup of coffee or tea. I can imagine it being a bit irritating to some users though.
Then you are leaking info about previous (or private) existence of the resource. If I recall correctly github does 404 for existing private repos, for example.
We could set higher bars for what is accepted as "scientifically valid" as an example.

What you're saying is that wrong understanding is better than not to try. At least when political action affecting many is derived from science, standards must be higher than currently.

For example the mRNA vaccines: As far as I know there is no or little research for possible long term side effects as the original research is for cancer medication which has vastly different risk trade offs. Nevertheless the vaccines are approved for use. I've read and seen in many discussions if one raises doubts that just "trust science" is the answer although there is no science. At least I expect when asked that a proponent can name a study which researches on the long term effects of vaccines or the underlying technology (eg. safety of packaging, which is deemed a trade secret and thus not public afaik). "Trust us" is the wrong answer as long as regulatory capture is a thing.
> If I enable them and then exit the software and open it up again, it doesn't save the resolvers I have picked. Is it possible to save the settings?

Strange. I hope you're on the latest version, v053a? I am not able to reproduce it. This is what I did:

1. Setup to use a custom DNS over HTTPS resolver, say, https://trr.dns.nextdns.io/dns-query

2. Force stop the app.

3. Come back to the app and reconnect, and notice it still picks up the resolver from step #1.

I guess you're seeing that in step #3, the app reverts back to "RethinkDNS Basic (default)"?

Can you drop me an email because we have seen reports of DNS flips when using DNSCrypt v3 but not DNS over HTTPS, I am mz at celzero dot com
Thanks! Reading HN inspired it 100%.
The discussion of Adams' presentation: http://news.ycombinator.com/item?id=1867807
I think it was called gooey: http://en.wikipedia.org/wiki/Gooey

this screenshot of it takes me back 12 years, woah: http://www.forest.impress.co.jp/article/1999/06/17/gooey.gif
I'm a professional Flash dev, but I spend my after work time on CoffeeScript/JavaScript/HTML5/Node/MongoDB (♥ ECMAScript). There's definitely still a use-case for Flash. It's still faster for some stuff I do (in Webkit{Safari,Chrome}). ActionScript has some nice additions to ES that were unfortunately left out of JS going forward (classes/packages/implicit getters+setters, type enhancement). Adobe's doing some really interesting stuff with 3d+gpu http://labs.adobe.com/technologies/flash/molehill/

I don't blame people for statements like "Once such a WYSIWYG app exists, there'd be no excuses left to use Flash online". They're authoritative and are tapped into the zeitgeist. As an Interactive Dev, though, I hope my opinion can count as some kind of counterweight to what I sometimes view as polemic.
Remember Golive CyberStudio? That used to be a great tool, but then it was bought by Adobe. In subsequent versions (>v3.1), all Adobe did was introduce bloat and instability. After Adobe bought Macromedia, they did the same to Dreamweaver. Because Adobe now had two web authoring suites, they simply killed the one they had put the most time into ruining.

However, I'm grateful for Adobe ruining WYSIWYG HTML editors for me. GoLive 5 crashed so often that I finally decided to start coding in BBedit. That was back in 2000, and I never looked back.
What a great publishing environment! Love this tip.
I don't think there is a club to be in, but if you want to feel in the club about such things, just say something like "I expect that there is an option for like '-w whatever_madeupoption' that is useful here, but I'd have to take a look at the man page or use '--help' to know for sure". Be prepared to respond to "how would that work?" with APIs/syscalls/etc that you might use to implement that or say something like "I'm not sure, it sounds like an interesting problem if I had time to solve it"
I'm new to Emacs, but enjoying it very much. Just got mu4e working with Gmail XOAUTH2 (for a G Suite account that the administrators have implemented their own "delightful login experience"). Would there be any interest in reading a writeup?
> based in the Occident

OK Rudyard Kipling.

> Let me see if I understand this correctly. US tax dollars funded (in part, via UC Berkeley) this technology, and now this organization is moving outside of the US specifically so that it can work with China in ways that the US would not appreciate.

Given the open source nature of the tech, one assumes they are (rightly or wrongly) moving out of the US so they can continue to work with whoever they want.
I know it is exciting. I hope to blog about it and would love to meet the we are ny tech people too

steve - http://1x57.com
It's not just you!
I'm guessing there is tons of complaints if a regular store denies a product from their shelves too? And an uproar if Steam (or any similar service) denies a game from being distributed using their system? I also assume that the same protests occur if, let's say, Bodega (or Chrome Web store for that matter) refuses to list a specific app?
Personally I am going to use a super weak password on most sites from now on with the understanding that anybody may hack it. 90% of sites it doesnt matter anyway. Then I can focus on the rest,which actually matter to me.
The info for RTP Hackers & Founders is up to date.
Eh, it wouldn't be great to weaponize. You'd have way too much warning. The prompt global strike using a submarine launched ICBM mounted with a convential warhead accomplishes everything you would want from space based weapons without your targets being able to track things as easily, yet the US doesn't do it becuase of fear it would spark diplomatic problems.

There are plenty of weapon systems better than a mag rail on the moon that we don't use today already, we don't need more.
These are amazing. None of them are made up, I've personally encountered all of the ones he is talking about so far.
Is there legitimate support for this hollow sun theory, or is this a fringe theory like flat earth and so on?
(free) The Superstar Salesman's Handbook: 150+ Greatest Tips on selling
http://bighow.com/news/the-superstar-salesmans-handbook-150-...
Sorry - unintentional repost.
thanks. This gives me something to focus on.
Welcome. You're here.
_If they just allowed a fewer number of people into the park on any given day, would the customers be more likely to return again?_

Well... not the ones that are turned away. They'll be mad.
by async I did not mean syntax sugar. More like way to do async via continuations/callbacks
A removed leap-second is gobs easier to handle. I can't say if it will or won't be handled properly, because I never tested it, but roughly you have three options:

a) software ignores it, and your clock is a second behind as of the discontinuity, and adjusts eventually

b) software handles it properly and jumps ahead

c) software handles it by explicitly dithering the difference over a day

d) c, but it also jumps ahead at the discontinuity

e) your network has a mix of b, c, and d, resulting in wonky clocks throughout the day, but generally still +/- 1 second of real time. This could be problematic for forensics, or for distributed software that uses time as measured on nodes to determine order of operations, but using time as measured on nodes requires constant vigilence to ensure clocks are in sync enough.

An added leap second is a lot trickier because at least Linux and FreeBSD simply repeat the last second of the minute at the discontinuity if you don't take special action to dither it. That brings two new problems:

a) real time is no longer monotonic

b) a logic error can result in repeating that second forever
Do you have any addons related to video or blocking? You may need to unblock mediasource support in noscript.
My personal poll of around 20 Republicans found only a single supporter. Sure that's not scientific, but that's such a difference I doubt the number is that high.
And we got to the heart of the issue. The problem for these people isn't immigrants. It is the "wrong" immigrants.

A first generation American is no less American than a 4th generation American and an overwhelming majority of us are the children of immigrants if you go back far enough.
I have many disagreements with Ajit Pai, but I think this is a smooth move. I think there needs to be some regulation on content moderation policies for the platforms which are becoming increasingly entrenched as the new public square. But even just the last few days have proven it's a difficult subject on which there is little public consensus. I haven't read up on Section 230, but I'd rather them not rush a solution out the door in the final hours of the current administration.
Agreed! There is a full, edited transcript right below the video. Realm actually takes the time to rewrite every video it publishes blogpost-style so it’s shorter and easier to read if you’re not much into videos.
How does this work with ICANN being an American organisation controlling the . server?
Well, the kid's liver was already questionable and the immune system can really go haywire with stuff like that. And those guys circumvented the animal studies (monkeys died and they didn't feel like slowing down because they had a financial interest in a good outcome).

I just want to see this damn thing you all call purple. If it really exists.
I haven't had significant problem with OS X. iOS is trickier.

For a more concrete criticism of functional software, thoughtfulness of design, and reliability, though, I submit Apple ID, iTunes, App Store, etc. This has been the buggiest and most opaque set of services I've dealt with recently. I have 3 different accounts now, each connected to developer credentials and app store purchases. 1 original account seems to have turned into 3 by way of failed sign-ins via iTunes and multiple failed password reset attempts.

Each of these has 3 or 4 nonsense trivia questions associated with it. I have a folder in KeePass dedicated to managing this stuff. I have a spreadsheet that attempts to map these things to purchases. I can't automatically install updates because App Store downloads have associated themselves with different accounts.

I've given up in a way. I have years-old versions of software that I don't update just due to the complexity of signing in. I don't know how people deal with it.
Thanks for the comment! Haha, I am definitely aware of Charles Darwin. I agree with you that much theoretical work has been done, and early on biology was largely a theoretical subject (we had an accurate quantitative theory of genetics before we knew what genes were!). (see my comment in the root thread)

I was hoping in this blog post to point to a more disturbing trend in our modern culture, where the need to solve problems in health have moved attention away from generalization and more towards individual instances of human diseases.
> The buggy experience of a person with an older Mac doesn't provide any useful information about the code quality of OSX for someone considering buying a new Mac.

It absolutely does, because it shows how quickly you will run into trouble if you don't upgrade your hardware. Macs used to be something that the average user could buy every 4-5 years and it will just keep on running well. These users back then would probably never upgrade, but nowadays with free new OSX versions being in your face every time you launch the mac app store, most non technical users will at some point clicky on the button and run into the trap. Meaning that, unlike with earlier software, users have to watch out what they do more so than just a few simple rules like don't delete anything from the trash if you aren't absolutely sure. There's gotchas here and there, so it's not as safe anymore and thus not as empowering (because before, non technical users could be much more bold and try things out, it was harder to get things into a non working state).
upvote for "anecdata"
Sounds like he's describing software architects. I feel software architects follow a slightly more complicated heuristic. They can't do the same thing every time when they draw the line connecting all the boxes. It has to be a little different every time with different boxes and a different set of lines.
> 1. Decided Ruby needed more formal specification 2. Made their own formal specification

RubySpec isn't a formal specification in any way, shape or form. RubySpec is an implementation test suite, and for MRI a regression suite. It uses language constructs and expects a behaviour A based on Ruby version B (which is itself assumed to match MRI version B).

RubySpec isn't somebody thinking up his own definition of Ruby (let alone doing so formally), it's somebody encoding MRI behaviour into a test suite because he needed that to code his own Ruby implementation.

> Why should the ruby developers have to follow his specification?

There's nothing to follow, there's a test suite to run. A test suite which encodes existing MRI behaviour. Why should ruby developers run it? Because it catches bugs is a pretty good reason.

> The fact that there is a bug that causes a segfault only indicates there is a bug, I don't see it as an indictment of the core language process.

How is segfaulting on existing code not an indictment of the core process when just running an existing test suite would have caught it?

> Instead of saying "you should be using my test", you could commit mew tests and patches to upstream.

Have you missed the laundry sheet of issues in the existing MRI testing system?
> They prove their own correctness, and can't gloss over important details.

They most certainly don't, do either of those things. You can still have incorrect, incomplete specs even with an executable test suite. You only get those properties through constant work.

The idea behind TDD is to do that as you develop the application, but even then you're not automatically saved from incorrectness and incompleteness.

The only way to really do it is the way RubySpecs intended, create a third place for the specification of the language to live, that any implementation can use to measure its compliance against. If anyone running any implementation on any platform finds a problem and traces it to the implementation, then a new test case can get written and all implementations can then fix the bug assuming it's present. Code quality goes up for everyone.

Most other applications don't need to do it this way, they're intended for an install base of one. But since Ruby has multiple implementations intended to be able to run under multiple platforms on multiple architectures, a living collection of specs that ensures that each combination still has the same behavior would seem to be absolutely essential for one's sanity if one cares about the quality of the language. Each implementation then only has to maintain platform-specific test suites. It's ultimately less work.

But just like TDD/BDD, it requires organizational buy-in to really get the benefits. Everyone working on Ruby needs to be involved in maintaining the test suite or there's no way you can consider the suite canonical. If you can't consider the suite canonical, there's no point in having it.

I develop on MRI at present, but at some point I'm going to switch to either JRuby or Rubinius. If Brian actually follows through on his goals to implement even better ways of specifying Ruby than a test suite, I'll probably switch to Rubinius.
We know that most users can't manage good passwords, and they are ridiculously time consuming to use, so that's a non-starter.
I don't want to get in the middle of drama, but if you take anything away from this, read the actual code.

Just read the actual code of the MRI tests.