skysight-inc/HackerNews huggingface dataset:
Ask HN: Is anyone here a Network Operations Center(NOC) Engineer?
My current job is in Technical Support. No fancy stuff. Basic site monitoring and troubleshooting.

My skills

1) Basic Linux CLI skill
2) Basic sysadmin skills
3) network diagnostic skills.

Few things i would like to ask.

1) What are things that you do/encounter on a daily basis.
2) Do we have to be on call 24/7.
3) Work-life balance.

Can you suggest a few areas I have to concentrate to get a job in NOC.

Thanks!
I wrote a new one in Perl which was always going to become Net::DAV::Server upstream, but never found the time to push it. This would have been about 2006. Sorry about that :(

Mostly due to a lack of enthusiasm from Filesys::Virtual to add the hooks I needed.

It's still powering the FastMail DAV filestorage service, and running fine.
I save my LastPass master password on my home computer, which I never log out of. (It's not a laptop, so it never leaves my office.)

If an attacker is already physically in my office then I've got bigger problems.
You can sync through WiFi and it's pretty painless. A computer serves as a WiFi server and then mobile devices (or other computers) sync off that when they are on the same network.
Curl – bash: a victimless crime?
Sounds rather dicey, considering that the attack apparently depends on both the user using the "store master password" option, and the attacker having admin/root access to the user's computer. At that point, you might as well just install a keylogger, browser snooper, etc.

I don't think this makes any progress on any of the real nightmare scenarios, like a bulk breach of LastPass servers plus some critical mistake allowing the master passwords to be cracked en-mass in less than a multi-decade timespan, or even a vulnerability allowing somebody capable of intercepting the traffic between a device and the LastPass server to get master password or cleartext vault data.
Tool tackles power-hungry Android apps
That's the relatively simple case, but there are a number of corner cases that make the process much more complicated.

See https://github.com/letsencrypt/acme-spec/pull/97 for a discussion of why this was scraped from the ACME specification proposal.
At least for Windows 8/10, I'm not sure if something like React Native is really necessary, since the platform itself already has built-in support for making "native" apps in HTML/JS.

All you would need is a React wrapper around the UI controls, like this one: https://github.com/winjs/react-winjs
I know and as some one who did both Fortran for both billing systems and a CFD model of the CFR (commercial fast breeder aka a mommy bomb ) I do get the humor in ways some younger readers might not
Ask HN: Which NLP API services do you use?
I know of two:

* wit.ai

* api.ai

They have similar offerings in that you can train on sentences and get entity and intent recognition to work for limited domains.

I have a few questions:

* Are there others that you use/recommend?

* Are these useful/enough for your tasks?

* If not - what's missing from them that you would like to see?

* What kind of applications do you use them for?

Thanks!
iOS devices that are jailbroken may have the means to access additional app content without paying the normal in-app purchase price.

I am not recommending this for the LToI app unless you, like myself, have already purchased legitimately licensed copies of those games at least once already.
Maybe, but this article talks about those women who aren't associated with drugs or gangs
Any CA performing domain ownership validation would be vulnerable to the same thing. If you can fake its WHOIS requests or make it appear as if the domain making the request does in fact have the "canary" file they told you to host to prove ownership, then you can get any CA to give you a cert for any site.

You have to trust something.
GraphQL: A data query language
Looks really cool - love the inset video - but I'm struggling to imagine what I'd actually use it for.

Site doesn't seem to say how saving/exporting works - anyone know?
Robo-journalism: How a computer describes a sports match
Dumb storage is fine if you only have a single actor that can maintain a copy of the state at all times. As soon as you've got multiple actors on the data (another client on your desktop or phone, or even something doing mail delivery), then you need a way to determine what changed on the server so you can update your state.

If the server has no ability to tell you what changed, then you're left with having to download and check everything. On a large data set, that's pretty much impossible to do quickly and without a lot of network traffic.

Of course, no server is actually that dumb - even a file listing with file sizes can get you part of the way there. But if you've got 10000 files in a file store, that list can still get pretty heavy. If you're willing to make the server smarter, eventually you can get to the point where the server can give you only what changed since the last time you checked. JMAP isn't unique in this; IMAP has MODSEQs, *DAV has collection synchronisation, etc.

JMAP specifically doesn't really care much about the actual format of the data it works with. The only thing it really needs is an immutable ID, so you could use the same model to store all sorts of things (and at FastMail we do, with things like client settings).
"Luckily" everything sends User-Agent strings, so you just have to maintain a giant database of client quirks... ho hum.
GraphQL
Parents with four or more children happiest despite chaos, research finds
You can already do that today with most CAs.

They may do domain validation by looking up WHOIS and emailing the contact address there.

You could MITM the DNS MX lookup and respond with an IP address of an SMTP server you control, and grab the validation code in the verification email as it is dutifully delivered to you just as easily.

Edit: In fact, come to think of it... For DNS you might not even need to MITM, just be able to spoof the IP source in an UDP package and correctly guess the remote source port + possibly a query ID, and race the real DNS server? I wonder how feasible that would be at for example 1 Gbps?
I'm not criticizing them for that. But how many CS departments give the students any preparation for having to maintain and modify an application for a decade? How many of them teach how to structure code so that a million line application is maintainable? How many of them teach application security in any usable form?

If, say, chemical engineering were taught without any instruction on how to make a process ready for actual industrial use, we'd criticize them for just teaching chemistry, not actual chemical engineering...
This is one of the most gorgeous things I've seen in a while. I'm a little saddened that the homepage doesn't work on Firefox yet.
Most people use velcro instead of zip ties nowadays, you can some for sale right next to all the A/V wires
I can absolutely understand the need for this, but until then with a bit of code and the automated workflow you could make requests for new subdomains on-the-fly.
Sounds like one of those "It rather involved being on the other side of this airtight hatchway"

http://blogs.msdn.com/b/oldnewthing/archive/2014/12/17/10581...
Labs64 NetLicensing is going FREE
A good introduction might be this heavily cited paper from 2011 by another author, Busemeyer: "A quantum theoretical explanation for probability judgment errors"

(https://scholar.google.com/scholar?q=A+quantum+theoretical+e...)

He goes through the application of quantum probability, contrasts it with Komolgorov probability theory, and then walks through quite a few "anomalies" in cognitive psychology laying out specific models to deal with them.

The exposition of quantum vs. Komolgorov probability is clear and does not rely on specialized prior knowledge. The list of anomalies makes apparent the need for better modeling tools.
Ken Murchison from CMU has a pretty good grasp on it these days too, having written the Cal/CardDAV support for the Cyrus IMAP server. I'm slowly catching up, having rewritten parts of it :)
Why would car rental companies (or airlines, or hotels, or anyone else in the travel business who noticed this particular quirk of how businesses conduct travel) want to discourage this? It doesn't help them at all to make this change, and would likely seriously hurt them.
I registered, you can currently only export as HTML.
I guess most of the world has been doing something wrong for most of the time we've been working with XML then.

(actually, for us at FastMail the major cost was always passing the bloody VCARDs themselves - I wound up writing https://github.com/brong/Text-VCardFast)
PDF support?

It blows my mind how bad PDF support is in all of these notebook/data organizing apps (I'm looking at you OneNote) given how probably the vast majority of non-HTML digital documents are in PDF format.
> GMO THC

Well that's a new one, because THC isn't an "organism", nor is it "genetically modified".
> Seeing a team build a prototype shows another level of commitment. I've built hardware, so i know how much more time/effort/money it takes over a software wireframe...

A wireframe is not the same as a hardware prototype. The similar analogy would be a functioning product, which in software is also difficult to do well. Functioning means it solves a need better than existing solutions, which requires research, experience, insight, and technical knowhow.

Furthermore, building a functioning software product that is well-engineered to scale (as opposed to a hacked out MVP) is, in my personal experience, rare. Very few "engineers" are able to.
well also b/c at the most you have just your job on the line...

I think the idea behind the Nuremberg defense is that you can't refuse orders b/c it's the military and refusing orders can be punishable by death
Mt. Gox owner faces new embezzlement charges in Japan
We definitely need the ability to store custom properties on the server in JMAP - I think we've agreed on that. Hopefully you'll be at CalConnect in a few weeks and you and Neil can fight to the death or whatever about it.
SSLMate seems pretty easy as well: https://sslmate.com/

(No affiliation, I just saw their HN post some time before)
Agreed - but by making this a fully automated system you open up an easily testable and repeatable source of attack.

I don't think "You have to trust something" is really right in this case, as you're basically saying "You have to trust every single router between letsencrypt and every server on the internet".

I guess it's correct that with most current CAs now automating a lot of this with minimal manual checks, this is probably happening already? I wonder how many amazon.com valid certs are floating around the place? (Or more likely, smaller sites where people wouldn't be checking if the cert is really valid). The original point behind the costs charged by Thawte et al was that they would actually validate that you're who you say you are. I guess that ship has sailed though.
Actually, the link is just fine; it appears that you have discovered a bug in HN's URL matching algorithm. < and > are explicitly recommended by the URI RFC [1] as delimiters for URLs.

[1] https://tools.ietf.org/html/rfc3986#appendix-C
Bitcoin’s leaders don’t know what’s next for Bitcoin
> Shouldn't they have thought of that before they created the Courts and named themselves Judges?

Well, (a) that's not how it happened (judges didn't create the courts, and judges don't name themselves judges), and (b) they do have a method for dealing with matters requiring expertise.

Now, its a mechanism that is highly susceptible to resource imbalances between the litigating parties (in which respect it is hardly unique -- lots of things in the legal system are susceptible to that), and its one that has been very effectively abused in the case of forensic (particularly, e.g., fiber analysis) science by the biggest-resource litigant around, the government. But its not a question that has been ignored and not addressed.
Your example is solely if THEY initiate a lawsuit then you're allowed to respond, not if they do something against you that warrants suing them first.

Note that this is specifically regarding a patent assertion; i.e. the patent grant is not revoked if you bring legal action against Facebook for another reason, including trademark or copyright issues.

Edit: E.g. They can copy your whole business, design and all, and if you're using React and sue them - then they can use that against you

See above – this would specifically only apply to patents.

you'd have to immediately cease using it

This is not necessarily true – it just means that you lose your patent grant to React. There is no assertion here that Facebook hold any patents on React. It's obvious why this would be the case – if you bring a patent suit against Facebook, then they revoke any patent license they've granted you. I would expect any patent license – for open-source software or otherwise – to be the same.

Granted, this does nothing to affect the wider issue of a broken patent system.
I wonder if there is any chance the Avis offices called head office to discuss what this guy was doing before he showed up. If so, I wonder if head office said "be super, super nice to him, hopefully he'll write about it..."
Yes, but GraphQL is just a thin layer so you can call your existing API's from GraphQL. For example you could start with GraphQL calling an existing HTTP service and go from there.

A nice talk / use case given here:

https://www.youtube.com/watch?v=S0s935RKKB4
Heh, one need only exchange the words "lebensraum" with "manifest destiny" to see that the origins and history of the United States are quite compatible with genocide if it furthers our economic goals.
Sounds neat, I do love a rapid feedback loop, although I may have done similar with a debugger and the reload built-in come to think of it.

In the types of apps I think we're talking about, typically most state is in the database and not much is going on in the client.
Vanilla SSL verifies the the website is legit, EV verifies that the business is legit. More competition will lower the price, there's tons of room for cheaper & faster EV providers.
> There's no way in hell he has the rights to publish detailed character drawings of every hit DC character. And the odds of him getting ANYTHING cleared through Warner legally are below zero. This is common sense to anyone who's lived in Los Angeles for more than week.

Well, it's great that you think the rest of the HN community has lived in LA for a week and therefore have this common sense.

Does it change your estimation of the situation to know that it's been online in multiple locations[1][2] almost three weeks? Those sources all reference facebook, so it's been up for a while. Actually, based on that fact that it's all over the web, and has been for weeks without uproar, and that it was originally commissioned as both a guide for in-house artists and to be given to to licensee artists and outside artists to make sure they got the look right, I imagine there's not a problem with it being in the public.

I think since it and information about it has been widely available[3] for a while now, and I'm not finding any info on Warner Bros. or DCE complaining or requesting it be removed, it was with permission, or he had some rights. Keep in mind it was never for sale. I think at this point, the onus is on you to prove your common sense actually makes sense.

1: http://robot6.comicbookresources.com/2015/08/the-entire-1982...

2: http://www.openculture.com/2015/08/the-1982-dc-comics-style-...

3: http://lmgtfy.com/?q=1982+DC+Comics+Style+Guide
Force touch is the new multi-touch
KCI Attacks against TLS
Hah, the same thing could really be said of VB.Net
Do note that the clause you quote applies only to patent assertions. This means that your patent license is revoked if you bring a patent action against Facebook (or if you sure someone else for using React), but not if e.g. you sue them for infringing your copyright, or any other matter.

This does seem like it would be a standard clause for any patent agreement with another party, but IANAL.
I'd like to see a proper solution, rsync is not really great UX.
A computer taught itself to play chess at master level in just three days
FWIW, you can already get an SSL cert for $4/year.
This is exactly why I have an issue with meal replacement (e.g. soylent) stuff being used in the long term, or reductionistic nutrition advice that considers food only as a source of protein, carbs, fat and fiber. The fact is, we're discovering a ton of compounds in a ton of foods that have unexpected effects and benefits, not to mention synergistic effects that happen only when multiple compounds are together. To pretend that we know how all of it works seems like hubris to me.
I have found that wireless is not as good as it seems because you can't have efficient wireless power at the moment or batteries that last decades.

So you don't have the cable anymore but now your devices randomly stop working until you change the batteries and if you run out of charged batteries it's really annoying.

Proving that it is secure and avoiding interference are also problems that are currently impratical to solve.
>Although we may not be able to announce certain content from within China, or any other country in which certain content may be prohibited, we continue to serve it across the Internet from the rest of the network.

Does this mean that the CPC can now have 2 factor censorship? If they get past the great firewall they now have to get past Cloudflare too "We're sorry, this content is not available in your country as per request of Ministry of Public Security".
Mine was the first comment on this post; I did read the discussion that followed and it was a huge relief.
Fantastic writing ! I Appreciate the info , Does anyone know if I could get ahold of a sample 1999 ASI Lite - CF form to edit ?
Reveal.js: a framework for easily creating beautiful presentations using HTML
Agreed.

SNI and SubjectAltName [https://en.wikipedia.org/wiki/SubjectAltName] mixed with the simplicity of issuing a new certificate using LetsEncrypt [https://letsencrypt.org/howitworks/] all but eliminate the need for wildcards.
Everything I Know About Star Wars Despite Not Seeing It
Getting NET::ERR_CERT_AUTHORITY_INVALID on https://helloworld.letsencrypt.org/
Quantum Theory from Five Reasonable Axioms (2001)
OAuth2 password grant type would work also where allowed.
Quite right. It's true that if you don't have a background using the native libraries it's going to be difficult, so one approach would be talking to developers who do and doing research like reading blogs and discussions like this one...
http://www.amazon.com/Summa-Technologiae-Electronic-Mediatio...

(Summa Technologiae at amazon.com)
> But there is a sweet spot for semistructured documents where I would say XML still has the edge, because you don't have to quote text and errors in structure are much easier to identify.

No argument—as a markup language, XML is find (not perfect, but fine); it's a better markup language than either JSON or S-expressions.

But as a data encoding, it's far inferior to JSON and S-expressions.

> See "XML Is Not S-Expressions" for a deeper treatment of the question.

Yeah, I've read it. He's right that XML is better for documents; he's wrong that the benefits of integrating data and document encoding are worth the pain of XML.
No, they are talking about native widgets AFAIK
DSP Programming for VST Instruments and Effects?
Hey,
I currently work in distributed computing especially in the video domain and primarily have been interested in functional programming in the last few years - I'm currently a scala developer.

I'm wondering a couple things:

1) If I wanted to play with producing VSTs/AUs - especially instruments - are there any decent resources for getting into this specific problem domain? It seems a bit aloof relative to more prolific areas like distributed computing.

2) Are there any functional programming approaches - eg languages and libraries - that are widely used in audio DSP? I don't think imperative languages would fit quite as well as functional programming as you can just string a signal through a series of functions, and re-arrange them to produce some sort of signal path - that seems logical to me from what I know of analog signal processing circuitry.

3) What sort of math would i want to get up to speed with if I was to venture in this direction? I'm assuming that there is a lot more mathematics that become apparent when working with digital audio and processing/altering it.

Thanks in advance for any insight - it's hard to research the field as very little information appears to be available. I can see this one book here:
http://www.amazon.ca/Designing-Audio-Effect-Plug-Ins-Processing/dp/0240825152

I honestly do not really want to work in C - I'd much prefer to work in a higher level language as it's for interest and enjoyment atm.

I also found some Haskell bits: http://hackage.haskell.org/package/csound-expression-0.3.4/docs/CsoundExpr-Opcodes-Plugin-Vst4cs.html
Why is hiring so tough?
I wonder what the purification efficiency is.
For example they've been working on GMO-octane from green algae for a couple of decades. But refining its low concentrations is still uncompetitive with petroleum.
>Our cross signature is not yet in place, however this certificate is fully functional for clients with the ISRG root in their trust store. When we are cross signed, approximately a month from now, our certificates will work just about anywhere while our root propagates.
Visit it on http and it explains why.

>Let's Encrypt hasn't yet been added as a trusted authority to the major browsers (that will be happening soon), so for now, you'll need to add the ISRG root certificate yourself.
Some VCs do not recommend companies to go thru the crowdfunding route early on because of the distraction involved. I wonder if you would share your thoughts on what kind of companies should or should not try crowdfunding.
If the registrar held the job of being a CA, then at least there wouldn't be a spoofable link between the CA and the domain owner - the registrar already has your account information and proof of ownership, 100% verified, when your domain is held with them...
When Delete Doesn’t Mean Delete – Tech in America
Ads Manager =/= Facebook app for "users"
I don't think the owner of "co.uk" should have the power to issue certificates for everything below it.
Our preferred hosting provider
I agree. Just out of curiosity ,at what price the egg minder will sell well (if possible) ?
So there is no code sample only marketing fluff. How does it work , like flex "fx" namespace where web-services are declared in the xml ?
Sure, but registrars would need to start doing a lot better job of checking the identity of people applying for domains, otherwise we'd just end up with domain validated certificates all over again.

As the grandparent post notes, all CAs completely automate domian validation at present.
He needs to put resistors in series with both the signal source and the power supply. Also there should always be some kind of load.

With 0-ohm signal source impedance very strange things happen. For example, a common emitter amplifier will seem to have much better bandwidth than it actually does (hides miller and base capacitance).
Police that don't protect citizens. Consider this...

You are a cop in a city overrun by a major drug cartel. You are sitting alone at a restaurant enjoying your lunch. A nicely dressed man sits at your table with a briefcase. He places the briefcase facing you and opens it to show $100,000 in cash. He then tells you that you can either take the money and ignore certain activities or they'll kill you and your entire family. He then places photos of your spouse and children with addresses/times of their whereabouts. He then leaves.

What do you do?

And so on, and so on, and so on.
I don't get it. Whoever controls the base domain could always just replace the NS records and point any subdomain wherever.