skysight-inc/HackerNews huggingface dataset:
(IPFS dev here) I think subresource integrity is an _awesome_ thing that needs to be implemented and spread all over asap. (Actually, if you work on this, please ping us! we'd love to help!)

However, this is very far from "many of the claimed advantages". I think it covers a few, but take a look at all the other stuff we can do, like making offline/disconnected webapps work! Think of IPFS like git or bitcoin, not just bittorrent.
The core of the modern web isn't static: it's transactional, it's personalized, and it's end-to-end encrypted for both security and privacy. How does a distributed caching model accommodate such things? If it can't, how can it be a replacement for http? If it's not a replacement for http, is it at least better than current CDNs? If so, how?

It's hard to imagine you haven't already thought of these questions and answered them somewhere, but this non-article certainly doesn't address it or point to better resources (besides "buy my book!").
And this is the less interesting biological fact of the blanket octopuses. One of the really few animals enought smart to 1- make a decoy and
2- borrow and carry a 'fire' weapon with she for self-defense and hunting (a weapon not made by the octopus).

On the other hand, the name of the spider is Nephila, nor Nepila, a small typo.
Completely agreed. Synchronized passwords are risky compared to LDAP.

LDAP is definitely proven (esp in a LAN/non-cloud environment), but isn't perfect: if LDAP is DoS'ed (even from the very servers that it's authenticating for), then you can't log into any servers (or if a maintenance window exceeds the cache window, or even if it's just taken offline via hostname change or something). It also doesn't help much with user-based UX (i.e., key rotation, granting someone additional rights usually has to go through a centralized IT dept, etc) and caching is pretty awful, and it's a pain to securely configure. Lots of risk of inadvertently opening a hole through an insecure PAM/NSS configuration or ACL's.

The worst part with LDAP is the long and sordid history of LDAP and KRB5 root-level vulnerabilities.

Even with all of these drawbacks, LDAP probably less risky than storing (even different) hashes of the same password across thousands of boxen!

Disclaimer: I'm the CTO @ https://Userify.com ; we build an SSH Key management tool that's specifically designed for cloud servers.
a) If the time and complexity to deploy 3,10,100 microservices as opposed to 1 monolith is significant then your build pipeline is flawed. Simple as that.

b) Maybe the commenter has only worked on small applications but I've worked on enough million line code monstrosities to know that one change can have far reaching consequences. It is simply too easy to couple components together e.g. be reusing a shared utility or service class and your code coverage will always be lacking in some way.

c) Microservices enable far more resiliency and scalability simply because you can deploy more of the ones that are critical or non performant. A sensible service discovery strategy can make this a one button, trivial exercise. Doing so on a complex monolith is often far from trivial.

d) This idea that your entire system goes down if a microservice goes down indicates your architecture is flawed. You should be able to still operate in a degraded state or at least provide some functionality.

e) If you can't test your service independently then your testing strategy is flawed. You should be able to trivially mock/stub out any dependencies and if you can't then you need to rethink your API design and the nature of your coupling.
(IPFS dev) Yes! One of my explicit goals is to help get to Alan Kay's "one address for each object" goal.
Which is why nobody "perceives" history, or anything outside our solar system, or the laws of physics, or anything else it's not possible for us to have any effect on.
Criticism of the article aside, having a decentralised, heavily redundant, safer and harder to disrupt web is an excellent idea worth pursuing.

I can see how that could work for statics resources, but I don't get how you can decentralise the dynamic portion of a website without single points of failures to the backend.
This is something I know a little about. I used to run a moderately popular website cataloging unbranded Chinese framesets, and builds using them.

This article rides that line between expressing genuine problems and trying to scare people.

Yes, there are plenty of fake frames around. Yes, I'm sure some EBay carbon handlebars are unsafe.

But at the same time there are lots (more?) Chinese frames around that aren't "fake", but are just less costly. For example, there is the Hong-Fu FM-066/069, which is kind of a cross between a Cervelo R5 and a Cannondale SuperSix, except around ~$500. It's light (around ~800 grams) and has a good reputation for quality.

Interestingly, one of the big selling points is that they are quicker to market with features than the major brands. Until last year if you wanted a Cervelo R3/R5 with Di2 cable routing you had to drill holes in the frame yourself. The FM-66 could be ordered like that, or with conventional cables, and with your choice of bottom bracket (instead of the annoying BBRight thing Cervelo uses). Same with disc brakes: the FM-069 is a road disc bike, out two years before Cervelo or Cannondale managed it.
I'm sure there will be some great brands coming but when they are ready they will spend money and really develop brands. While they are selling literally no-name or no-history brand names that are churned rapidly there is almost no cost in getting a bad reputation, just start a new brand.

This doesn't mean that brands never fail or do wrong (cough VW) but the fact that they have something to lose is a good thing. Also you are more likely to hear if there are huge problems with a product.
Ohh my I have never heard of this, do you have any more sources? /s

Come on this is getting as boring as regex. Match /(microsoft|google|apple)/i replace with "EmbraceExtendExtinguish|Shutdown|Unoriginal".
(IPFS dev here) Hey! Yeah, we're focusing right now on "distributed static websites" because those are really easy to get right and make work all over the network. However, what's _really_ interesting about IPFS is making completely distributed applications which can do their process unhinged from a single origin -- websites/webapps without an origin server. Posted more about this elsewhere on this thread, take a look: https://news.ycombinator.com/item?id=10329221

Also see the Neocities + IPFS blog post: https://ipfs.io/ipfs/QmTVcD87Ecjps6wv9jMaGhvMuzZ2BgP6NyXDcnM...

Take a look also at this talk, which presents different use cases for this: https://www.youtube.com/watch?v=skMTdSEaCtA

Can also see some of the random crazy things we're planning in https://github.com/ipfs/notes/issues/ + https://github.com/ipfs/archives/issues/ + https://github.com/ipfs/apps/issues/

(Edit: fix links)
Not tptacek, but could you give a bit more on the contrast between Ethereum an IPFS. Also, what is your "version" of DNS? How can I map a human readable name to a file/connection and verify authenticity? Project looks awesome, checked it out briefly last time an article was posted. Excited! Thanks.
BuildZoom is hiring designers and engineers
> other "entrepreneurs" involved with Groovy keep hundreds of HN logins each

> post comments under my own name, as I suspect you also do

I would agree probably 2 or 3 people -- I never said "hundreds" of people, and I specifically said you post comments under your own name, not the opposite.
Installing elm-lang on ubuntu 14.04
What I find amusing about this is that in addition to taking the money on the table by serving mobile ads, the carriers are also charging their customers for "data".

All the mobile ad and other cruft just increases the amount of data used by the customer.

Imagine if customers were only charged for the actual content. Is CSS, fonts and Javascript "content"? I guess it depends who you ask.

As a user, I rarely turn on Javascript, yet I still download heaps of it (then filter it out client-side). For me, this is totally unnecessary data usage.
It's not really harder to disrupt by any means, at the end the internet is a network, or how congress thinks of it a series of pipes.

Most internet censorship eventually works on L3, having a distributed alternative to the world wide web won't make the internet more resilient.
If you own or hire SDCs, does your wife still ferry the kids around? Or do they ride alone to the destinations you've approved in the car's parental controls?

I expect the "Soccer Mom" occupation to disappear.
If you are suggesting that I am an ugly man, no. I am a woman and, by all accounts, I have an adequately fine rump, as well as other assets in the looks department.

And I am one of those women who isn't looking for a hot bod per se, but who would not go so far as to say "Looks don't matter." as just one data point, backing my earlier statement -- I mean, in addition to having seen studies, as I stated earlier.

Also: FYI:

* rum·pus

a noisy disturbance; a commotion.
"he caused a rumpus with his flair for troublemaking"
I'm amazed this warranted research and an WSJ article.
You know, it is possible for you to do the same research as I. The source information was in the original article, and details of the bank robbery is a web search away.

The 2004 Tulsa OK, Bank Robbery was from a father/son pair who wanted "to get money to be able to retaliate against the government because of its role in the standoffs at Ruby Ridge, Idaho, in 1992, and Waco, Texas, in 1993." - http://www.adl.org/combating-hate/domestic-extremism-terrori...

Quoting http://www.securityinfowatch.com/news/10594789/guilty-father... :

> Wade Lay, who is not an attorney but who is handling his own legal defense, testified Monday that the bank money was sought "to buy adequate weapons." ...

> From the witness stand, Christopher Lay acknowledged Friday that he had compiled a list of people who he thought were responsible for the deaths of about 80 Branch Davidians, who died in 1993 in a fiery end to a 51-day standoff with law enforcement agents and federal officials in Waco, Texas.

> That "hit list" had 15 names designated as the "enemy," Drummond said.

> Wade Lay said that "we planned on holding the people who murdered those people accountable," because the government had not.

I'm certain you can investigate the specific details to your own satisfaction. Regarding cases where the killer is dead, well, the evidence for the Tallahassee Police Ambush is rather weak: http://www.tallahassee.com/story/news/local/2015/01/09/curti... .

The site https://herestherealnews.wordpress.com/2015/08/29/debunking-... rejects many of the non-jihadist examples. Do note that any such post-hoc qualifiers also change other statistics, eg, how many of the terror plots listed at https://web.archive.org/web/20150214055837/http://securityda... are no longer valid plots under more stringent guidelines?

That "herestherealnews" page shows the problem with post hoc re-classification. Towards the end it says:

> The study also makes no mention of leftist terrorism, like the murder of Jim Pouillion, murders of NYPD officers, the murder of two journalists a few days ago and the massacre of 8 white “racists” in 2010. There are of course the riots in Ferguson and Baltimore and various mob attacks in retaliation for police killings as well.

but at the top it says:

> So according to data from this study the average american muslim is about 39 times more likely to commit a terrorist murder than the average white american.

If they did the analysis to completion, they would have established that non-jihadist terrorism in the US was even higher than what this study concluded, giving a ratio below 39x.

You'll also note that the list is certain to be complete with regard to jihadist terrorism, but may leave out some forms of domestic crime that may be regarded as terrorism, such as the 2009 assassination of George Tiller by an anti-abortionist. Thus, factors like "39x" can't really be taken at face value but rather as an upper bound.
I find that every time that I read it, i learn something new.
"there are a lot more white supremacists out there we have to worry about?"

Oh, yeah.
Sometimes I feel like microservices is pushed by hosting providers to get more money from all the additional deployments...
Autonomy Without Chaos, by Google Engineering Director David Singleton [video]
Obviously it's just the panels, cost for installing are closer to $3-$5 for residential, and dropping below $2 for utility-scale solar iirc. If the total costs were actually $0.55 it'd be frontpage news the world over as it'd mean that utility solar would probably be more like 30c per watt, or $300 per kw. Now consider that the capacity factor is about 15% for solar, that means that 1kw of installed capacity generates about 3.6 kwh per day, or at 13c (US average) residential electricity prices, about half a dollar a day. That means for a $300 investment you'd stand to save about $170 a year.

Little could compete with that, especially once you add in the incentives. Remember there's an immediate 30% tax credit, meaning if you spend $300 on a kwh, your taxes are reduced by $100. So now you're paying $200. Further, you can depreciate your solar in like 6 years, meaning in about a quarter of the lifespan of your solar installation you can reap $300 in depreciation, which you can subtract from your taxable income. So if your effective tax rate is say 30%, then 300 fewer taxed dollars saves you another $100. So now you're at $100 invested for a $170 annual return. And don't forget, you're not just generating energy, you're generating green energy which is certifiable and can be sold as SRECs on the market, which increases your revenue further. Every business in the US would go solar tomorrow and half the coal industry would go bankrupt overnight with more to follow if we saw prices that low suddenly!

Anyway so the prices are closer to 8-10x as much, the figure cited is just the panel cost. It's still pretty nice but it's just an iteration of solar tech like every other that is offset by subsidies dwindling in a staggered design.
Hi itsyogesh! Definitely it depends on having a 3D model of your environment! With all the advances in drones performing 3d scanning of an environment (dronedeploy.com and skycatch.com) we imagine we can easily incorporate the acquisition of a 3D model into our tool.
I view the favorable performance characteristics of IPFS at scale (over the current centralized client-server architecture of the present web) more as a general symptom of the pathology resulting from the incomplete, ill-planned architecture of the web in general.

The greatest advantage of an architecture like IPFS instead lies in its friendliness to more a democratic, semantic web, in which users and programs may make use of URI's at a fine-grained and peer-to-peer level. If we can decouple resources from a central server, and then build programs around these static resources, the web will not only become more permanent, but also more robust against walled-gardens robbing us of programmatic control of those resources.

To paraphrase the Plan 9 authors[1], it might make sense to say that a p2p, content addressable web should try to build a web out of a lot of little systems, not a system out of a lot of little webs. (Well, that doesn't completely make sense, and I'm starting to mix my metaphors, but my point is that what we have now is significantly hindered by lack of fine-grained semantics allowing interop. Hypermedia has the potential to be so much more than simply manipulating the DOM with some javascript!)

[1] http://www.plan9.bell-labs.com/sys/doc/9.html
Something can have no negative effects and still be wrong.

If there are no negative effects, what makes it wrong?

Compare a missing small toe, perhaps.

Or missing tonsils, or a missing appendix, or ....

To what extent do toes help with balance, say while walking or running?
Link to .../ipfs/notes/ appears to contain 37 bytes of nothing. Is the content available elseware? Would love to see the random crazy things you're planning.
Yeah, I'm not brave enough for embedded.

I'm still pretty excited about what's happening in this space though. Thanks for your thoughts.
One thing that the author may not be aware of is that, despite the light turning red for you and oncoming traffic, it may turn green for any side streets. Running the red light has potential consequences much more severe than just a ticket (such as crashing into another driver) so no one ever dares to do so.

I completely agree that these are better than speed bumps because people speed through those too. And there's no need to slow down to 15 Km/hr either, you can do it at the speed limit with some margin of error (around 15% iirc).
Sounds a little bit like (though more sophisticated than) the timed lights that some cities employ, for example Oak and Fell streets in San Francisco. If you go the speed limit you'll get green all the way though; if you speed you'll just sit at a red light.
That would explain why Minecraft is unplayable on PS4 ever since the acquisition. /s

Microsoft has the same amount of reasons to "ban" Sony as Apple has to "ban" Samsung. Despite the lawsuits and disagreement Apple still buys a lot of their chips (including their core processor [1]) from Samsung because at the end of the day business is business!

[1] http://www.informationweek.com/mobile/mobile-devices/samsung...
(IPFS Dev) Yeah, we have many similarities with Freenet, but we also have significant differences. You mention the lack of anonymity, and yep, that's definitely one -- to speak more about this: this parts from our content model. Among explicit constraints, we have:

- content must be able to move as fast as the underlying network permits. this rules out designs like freenet's and other oblivious storage platforms, as the base case. Like you said, they're just way too slow for most of IPFS use cases. But, these can be implemented trivially with the use of privacy focused transports (like Tor and I2P -- there's actually work towards this and people are getting close), content encryption, and so on.

- IPFS nodes should be able to only store and/or distribute content they _explicitly_ want to store and/or distribute. This means that computers that run IPFS nodes do not have to host "other people's stuff", which is a very important thing when you consider that lots of content in the internet is -- in some for or other -- illegal under certain jurisdictions. Legitimate companies have way too much in their plate to additionally worry about potentially be storing a ton of illegal stuff. For serious companies like Google to use IPFS, we need to have a mode of operation that allows implementations to ONLY move the content THEY want to move.

- Websites/Webapps must be able to operate entirely disconnected -- this means that it should be possible to build applications which create data locally, signed by the user, which can be distributed encrypted end-to-end to other users, without needing to ever touch specific backbone servers. This means users can move the data end-to-end via the closest route possible and in disconnected networks (think users on mobile phones on a plane using messaging webapp or web game and moving the bits over bluetooth or an ad-hoc wifi network. And this also means users in the broader internet do not _need to_ rely on backbone servers -- the model we're going for is that dedicated computers in the backbone CAN of course and SHOULD help, but you shouldn't HAVE TO RELY on them.

Can write more about this :)
Are you seriously saying that ugly people aren't able to form a reasoned opinion on dating? That's a horrible thing to say.
so Bostonography has been a long running attempt to build crowd-sourced definitions of neighborhoods. I expect the interested difference from my maps will be an aggregated report on the data that will come out as has happened on several previous versions of the survey / site.
I've heard from my Portuguese cousins that they do it this way because speed cameras aren't legal, but red light cameras are.

So while they can't give you a fine for speeding based on photo radar, they can give you a fine for running a red light.

Not sure if it's true or not. But I've experienced the same red lights in the middle of nowhere while driving in Portugal. There's also the social pressure of triggering one of these -- it stops traffic and then you get the glares from all around.

Portugal is also obsessed with roundabouts of all sizes, which I think are a traffic-calming and safety thing as well. Even small intersections in the rural areas have roundabouts rather than the standard North American-style 4-way stop signs.
>The social responsibility of a private company .. is to charge a fair price. .

(And I believe implicitly it's to make a decent profit)

I believe that statement is reminiscent of a world that no longer exists. While this may have been true in the 70s, 80s and even 90s, it's simply not true of the world anymore.

No company charges a "fair" price anymore. The price a consumer pays for a product is entirely divorced from the cost to manufacture said product. The price a consumer pays has been maximized to "whatever consumers are willing (and able) to pay".

Similarly for making a "decent" profit - companies did this for years, even decades, and each year they were expected to make more profit than the previous year. Now, the expectations are completely out of control. That's why when a Bank or big company "only" make billions in profit it can be called a failure.