skysight-inc/HackerNews huggingface dataset:
What exactly are you asking here? You seem to already have a solid understanding of what type of attack would generate HTTP 400.
We had volumetric attacks every day much before reflection attacks became common, the biggest attacks these days aren't reflected but from router nets.

And you simply cannot solve IP spoofing without rebuilding the entire internet, not to mention the fact that it does have legitimate use cases.

Also, if IP spoofing is making filtering difficult for you then you're doing filtering wrong.
Check out this course: https://www.udacity.com/course/deep-learning--ud730
20% at Google is a big joke: it's basically picking up low priority tasks and bugs from other teams backlogs (low priority = will never do).
Isn't it already only writeable by root? The request is to make it not even writeable by root without taking some additional action to make it writeable first. If I understand correctly, that bit you quote just describes the current situation.
That's what I thought, too, but it's apparently an urband legend. [1]

[1] https://en.wikipedia.org/wiki/Death_by_coconut
‘Blooks: The Art of Books That Aren’t’ Explores the World of Fake Books
I think programming evolved from math oriented folks, which is why we find it unnatural to reason about law and other societal constructs using a programming language. I wonder how it would look if it were built for an entirely different purpose. It would be really interesting if Y Combinator invests in that research effort.
Nobody is saying root shouldn't be able to access such functionality but rather it just shouldn't be mounted rw by default. This is actually fairly uncomplicated.
College degrees awarded per capita in the USA (2014)
They seem to have done the research by Google news stories, presumably with English-language queries. Much of the media in India is English language, but little in China.

Shorter: GIGO. That chart had no business in the article.
"lifetime of toil ahead of you" does not make me feel better about the now (semi-joking).
Fixing every vendors implementation is an impossible task. Ensuring that the default configuration can't brick your motherboard is an easy one. So do the easy thing to ensure user safety WHILE working to solve the hard one to the extent feasible.

Robust systems must work in the real world not just in an ideal one.
Not really, there's a wide variety of different requests that would cause such an error.

Just flooding someone with ":P" shouldn't take them down.
Nice project, congrats!

More than pre-installing packages I think it would be great to have a (working) package manager by default. That way users are able to choose whatever floats their boat.

I've been using Linuxbrew[1] (a Homebrew clone for Linux) on a Chromebook for a while, and it's the reason why I can actually use it for something else than browsing. It's a perfect fit if you need to install development tools or libraries.

[1] http://linuxbrew.sh/
I have 5% time. Two hours a week. To work on a project of the company's choosing. They're really proud of that.
I agree with this. In addition, these designs all center themselves around app-specific themes, which is unfortunate because (at least IMO) one of the biggest benefits of a native desktop app is that it conforms to the system's look and feel by using standard widgets. Throwing that out the window in favor of style seems wasteful.

The desktop apps that impress me most are those with designs that create beauty through the stock system look and feel.
Of course they don't! Didn't we learn anything from the Juniper and Fortinet back doors?
I had loads of things I wanted to work on at my last job (only been at the new one a little bit, so not so much yet :p) that just would never be a priority or were too far from my teams normal stuff.

Unfortunately we didn't have 20% time. It's one of those perks that actually sounds great to me (free food, meh).
How big were the volumetric attacks that you saw that involved real IPs? The amplification factor is 1x for the real IPs. With NTP reflection and DNS reflection, you get 50x amplification, so 1Gbps botnet (trivial bandwidth) will cause a 50Gbps DDos (non-trivial bandwidth). This is why filtering is desirable.
Well, I met a probable Israeli spy in-artfully posing as an art-student in Colorado when I was 19 working at an ISP that had purchased some wireless tech from an Israeli firm.

I suspect it is fully-in-cheek.
People that I've seen drop out do it in the first year or even more so in the first quarter/semester. Sounds more like you're burnt out. I say dig deep and push through it.
NFL Consuming SF resources: a survey
The mobile experience is in a lot of ways absolute garbage designed by incompetents.

That the dominate platforms have any customers at all just illustrates how mediocre the entire software industry is.

If software were medicine we would still be leeching people and learning about the miasma theory of germs.
I suppose I could mention things that they could do differently to achieve that goal, but what would be the use?
CoreOS is a fork of ChromeOS, not Gentoo. Both just happen to use emerge. It might poach some Gentoo packages to save work (I don't recall off hand) but build and usage is very different from Gentoo. Importantly, emerge is build-time trivia and has no bearing on the final product; there is not even an emerge binary in a CoreOS image.

(I've seen this meme before, with people - not you - dismissing CoreOS because it's "based on Gentoo," due to the presence of emerge in the build. Pass this clarifying point on to your friends.)
It's still alive.
Spin Doctor is up there for me too
Thank you for the link! Out of curiosity, have you personally gone through it or just heard good things?
The thoughtful use of white space (a.k.a. negative space) can improve readability/scannability, and to guide users by helping to create a visual relationship between various UI elements.

Cosmetically, generous negative space can help create a feeling of sophistication and elegance. I suspect that this kind of use is more offensive to practical people who have little use for how something "feels".

And of course sometimes it's overdone by designers, especially in cases of concepts serving as shiny, happy portfolio fodder instead of serving real users and business goals.
Good managers will give employees the latitude to do this sort of thing, formally or not.

Fetishism of metrics and ITSM bullshit makes it harder to do these days, but it's still worth it for morale alone.
It's probably a purposeful leak.
It is true that this is ultimately a hardware/firmware problem, but if the solution is waiting for motherboard manufacturers to not have bugs or stupid designs, then we will be waiting forever. Badly designed hardware will always exist.

If you look at how probing for hardware works in the Linux kernel, quite a few older drivers (and the occasional feature subtree) have auto-probing disabled by default because it tended to crash some types of hardware. You see this again in lm_sensors, where the auto-probe script specifically asks permission (with a default "no") before it tries certain probes that risk crashing the hardware.

We don't see this as much in recent years as hardware has gotten better - listing the device_ids/vendor_ids on a buss is much safer than poking ISA IO ports - but the problem remains. Some hardware needs special hand-holding, especially in the initial probe or initialize stages. Hence, tools that handle those stages are always going to have special cases and other annoyances.

> the amount of flack being received doesn't seem warranted

The flack against Pottering (and the rest of the systemd cabal) is because this isn't the first time his idealism has caused serious problems for others. Yes, it would be nice if we could just mount UEFI areas (or anything else). In reality, as this bug shows, this is dangerous behavior. It should have been made optional, or the entire idea of exposing those UEFI areas as a filesystem should have been reconsidered - a special purpose tool that handled bugged hardware might have been more appropriate.
> US interests in the middle east almost always directly oppose the ones of Israel

I regularly see stories about the US giving large sums of money and arms to Israel. How should I reconcile this with your claim?
sama, my apologies if quoting you is too over the top, but the following comment of yours from last year is just wonderful, and it's a great answer to your question:

"I think figuring out how technology can encourage empathy is one of the
more interesting and important open research problems in the world right
now." -- Sam Altman, July 10 2015 [1]

There is one group at Stanford that's been working on the empathy-tech problem. I don't know any of them, but I've read a few of their papers. I've submitted a few of their papers/projects to HN in the past six months.

[1]
https://www.reddit.com/r/IAmA/comments/3cudmx/i_am_sam_altma...
But it seems that CoreOS is more suitable as being the underlying OS on which containers are run, rather than being the basis of a container image?
Container images do not need operating systems, and I will forever be angry with Docker for tainting the concept in popular usage. Research a static binary as a container to see what I mean.

Nobody who built containers before Docker came along shipped an operating system in the image. Now we have gigabytes of Ubuntu alongside nginx thanks to Docker. Cool.
Why would you make it require Yosemite 10.10? This is absurd developer laziness. Spend an hour making it compatible with OS versions from the last couple of years.

There's no excuse for this.
Ctrl F quickly revealed that you're the first poster to mention "convention" ("institutional knowledge" decoded) and emphasize its importance...

By definition, half the human population is below average in intelligence (half above)...average people typically go with the flow...the above average often question the flow...the gifted are constantly aware of the flow, but are often complacent if they're not in a position to force-feed change...

Resistance to change is a powerful force, especially when your business (owner), or job (employee) may be at stake in the form of risk-taking that will lead to uncertain outcomes...
Send 10k PhD students each year to US: Narayana Murthy
The FreeBSD repository also has commit history for BSD in the "csrg" tree [1] (this presumably stands for Computer Systems Research Group, which was the group at UC Berkeley that led BSD development [2]):

[1] https://svnweb.freebsd.org/csrg/

[2] https://en.wikipedia.org/wiki/Computer_Systems_Research_Grou...
Be a tech grunt if you want to be a tech grunt. I've done it for years because it's much funner than management or architecture.

Give your company the first shot at making you happy by asking them to let you step down and back into your former group.
> This leak has no value to the public.

US taxpayers give the Israeli government billions of dollars every year.

Then Israel turns around and publicly disrespects the US president.

US taxpayers need to know that their government is willing to stand up to Israel when necessary. This is an actual concern because:

1. US politicians are almost all for sale.
2. The Israeli lobbying group AIPAC has bought and paid for a great number of those politicians.
What's the Best Gaming Mac in January 2016?
You can have a static route to any local device, this is essentially what subnet membership does.

For example, if I have IP 192.168.0.2/24 assigned to eth0, my routing table will have:

192.168.0.2/24 dev eth0 proto static scope link

I'm free to add a local route to a device outside 192.168.0.2/24 though:

192.168.10.1 dev eth0 proto static scope link

This just indicates that I should be able to resolve the MAC address associated with 192.168.10.1 through an ARP query,
same as other devices on my subnet.
> When one argues about income redistribution, he does so it can be done in its own country.

Why should wealth redistribution be scoped by country, but not less, not more? The rich class in the United States want to limit the redistribution within themselves, and they are called greedy and evil. Yet when the lower class of the US want to limit the redistribution within the US, and refuse the share with the even poorer, they call themselves the paragons of virtue. Isn't it double standards?

And I'm not talking about income redistribution, but wealth redistribution. The opportunity to work is important in that.
Hy is a Lisp that compiles to Python AST and then to Python bytecode:

https://github.com/hylang/hy/blob/master/docs/language/inter...
my thoughts too
You should name them.
If a developer places an idea up requiring only 4 points, can they pin their own 4 points to it and work on it alone without having to answer to anyone?

The entire point of the 20% concept to me is that I get to work on my own idea. I do not like your version that makes it a popularity contest between developers and their separate ideas. Most of the fun that can be found in 20% is the lack of constraints and oversight. The 20% should not have to be justified to anyone, let alone planned out and required to fit within a single sprint.

To be fair, I despise agile (or is it capitalized Agile?) in all its bullshit incarnations. The most interesting aspect of a 20% project is that the business keeps its filthy hands out of my time. Applying agile into the 20% makes me sick.
That makes me think of the amount of satisfaction one will receive pushing MIT's autofix-it button as opposed to those seconds or minutes when you've caught the fucker and go in for the final fix.

Those moments of updating the files: That little euphoria of finding the fix but needing to focus to get it done correctly and finally hitting enter for the last time...ahhh.

I'l take that instead.
No high ranking USG official should be using insecure communication channels, as it will inevitably lead to leaks that could damage the state (secret information).

What Clinton did was dumb, but no one should have sent her classified emails in the first place. If the people sending the 'classified' documents were doing it through the right channels, it wouldn't be getting to her email server.
What immediately comes to mind is that trivial repairs may soon be done by "Prophet", or it's progeny, instead of a human...sobering...
Why scientific studies can't be reproduced
I think I worked out once that the average working American spends as much on Israel as they do on their phone bill. (Back when we had phones tethered to the wall, so YMMV.)
would be happy to message on a private channel. Still not comfortable talking about it openly till I'm confirmed employee :)
I dropped out of my senior year of college. Currently a software engineer at a nice company.

I've only been away from school for about a 1.3 years, so it's too early to see if I'll regret the decision. Perhaps I'll return to school in the future, or end up lying dead on the street because of my lack of a bachelor's degree.

If you stay in school, you don't have to worry about regretting the decision to drop out, nor do you have the difficulties involved in potentially returning later on.
I'd be cautious: the range is too small for me (6'1" / 188cm). On a regular desk that suits me, it doesn't go high enough, and if you prop things on the desks up a bit, you then need to remove them when you lower it.

(It's also a bit wobbly, which isn't great, but probably expected.)
Approach to instituting 20% projects is going to vary wildly from company to company.

After thinking about it, the method proposed makes sense for structured companies trying to introduce the concept.

Unfortunately, I still think it's non-ideal, but it is a good start.
It's not about fitting things onto screen; it's about fitting things in brain.

If ~25 years of doing programming for money taught me something, it's that the code is written to be read and maintained by humans, and having really short, clean, one-purpose, composable functions makes your life easier both long-term and short-term.
Annoying and hypocritical. This is the same league that's barred Pete Rose from the Hall of Fame, and all their scoreboards last year were sponsored by Draft Kings.
I'd be interested in a tool that simply fixes the bugs found with static code analysis tools like findbugs. Some of them aren't very meaningful, like dead code... but if it could make good choices about how to handle slightly more complex situations like NPEs and that sort of thing it could make a lot of large corporate code bases a lot less buggy.
I wish the team luck; but I think that most of that luck will occur if they pivot hard away from their current tactics.

Governments don't really care about informal smuggling (e.g. somebody bringing a laptop with them, and leaving it behind) because it's not happening at scale and it's impossible to police. But governments are going to care deeply about a formalized smuggling organization that beats market prices by evading import duties and VAT.

If this gets any traction, expect all inbound luggage to be searched for anything wrapped in shipmates packaging; and for it to be seized and the individual carrying it to be fined. It won't go well.

And the founders should not expect to ever visit home again... they'll get arrested when they step off the plane.
> Israel's interests in the middle east are generally about not having their citizens murdered in the street.

That's what they say, but when I read stories about them demolishing Palestinian neighborhoods, billing them for it, and building real-estate developments over the "confiscated" land the whole "we just want peace" line starts to smell like a rationalization at best and more probably a flat-out excuse.
I went to college for 4 years as well, so again, you can say we were in the same boat: 4 years of lost wages + $65k in debt for him, 4 years of lost wages + $65k in lost wages for me
for one thing, because pg doesn't consider UX to be relevant.[0] This site is meant to appeal to the sort of programmer who is comfortable working in a terminal, after all, so it shouldn't matter to a "good hacker."

[0]https://news.ycombinator.com/item?id=5025176

that said, apparently collapsible comments at least are on the way... eventually[1].

[1]https://news.ycombinator.com/item?id=8297695
Why would eBay block ad blocker users?
It's very common for fashion models to get O-1 visa. Just few pro photos for commercials/magazines are enough for papers, you can do that in europe. And it have no cap, so O-1 is more popular in last years
> Some googling shows that you can get about $300 per acre for corn with costs of about $250/ac to grow it. So if they put all 6 available acres under cultivation they might get about $300/year in profit. Those poor girls must have been selling corn at that stand for years before they could all get tablets.

I suspect that the girls got all the revenue from the corn without having to cover the costs.
Zest docs browser — gathering feedback
do season tickets never expire? that's pretty neat.

I've never thought to look in to how a season ticket actually works, the stock comparison is an interesting one and puts them in a different perspective for me.
I agree with everything you wrote, but he did close the issue, which generally implies "I'm not going to do anything about it".

Maybe it's not his responsibility and distro creators need to protect it, I don't know.
Also consider this in your decision making:
Not having a BS makes it harder to get some visas.
You never know when you may feel like changing countries.
I'm using a spreadsheet to organize the job listings before I apply. Some columns include Job, Title, Industry, Salary, Notes, Distance from my house... If a job search portal was combined with a 'job application organizer' that would be a nice product.
How can I get in touch? I've been getting deep into esoteric spiritual practice and I also love and used to program for a living. I miss an alternate reality HN with a humanities hive mind.
Stalin 'used secret laboratory to analyse Mao's excrement'
From a human rights, civil rights, universal rights, and transparency perspective all USG communications, and communications of all government officials everywhere should be public knowledge available to anyone on the planet at any time. At the end of the day what we find is how much all of these people conspire behind each other's backs to screw each other over and get the upper hand.

If citizens are not allowed to do this for fear of damaging society and government, politicians should be held to the same standards. For fear of damaging human rights of non-citizens, their livelihoods, economies of other countries, etc.

It's funny how government does not trust anyone below them, and yet expects everyone below to trust them when we know that they do not do the right thing most of the time (tm).
Are there any languages that automatically (as in, deliberately) lend themselves to automated error detection? I feel like it's either not possible or so possible that Haskell is the answer.
Defending Your Wifi Network
Plastic Reconstruction of the Face (1918)
Some designers I know always bash Reddit for having an "ugly" design, but out of all the link aggregators out there, the links on Reddit "pop" out at me. I can comprehend the whole page by just glancing.

Other link aggregators like inbound.org or growth hackers are definitely prettier, but I have to focus and slow down to understand all the submissions.
To answer this more explicitly than the other comment: Yes, CoreOS is intended as the host system for containers.

Inside the Docker (or rkt) containers you can run whichever distribution or static binary you like.

The combination of CoreOS+Kubernetes+Docker+Alpine Linux (inside the containers) works pretty well in my experience.
Addiction. It affects so many of us-maybe all of us-greatly. Our legal system, education system, healthcare system are all heavily burdened by it, and they all treat it differently. Good solid science (and a health dose of PR) in the name of ending addiction could go a long way towards making the world a lot cooler place.
Tangent:
Guys, which channel do you recommend to someone who is knees deep into Algorithms, Correctness Proofs and Discrete Maths self study process.
Shoes with thick heels in trends – The Emporialist│„street fashion” magazine
The Prickly Genius of Jonathan Blow
You're thinking of defense helicopters.
Nope. Barely have time to do regular development properly.
Is it considered cheating to use files to "save state"?

SPOILER:

One thing I noticed doing this was that most of the interviews that weren't Alice in Wonderland snippets were less than 3 or 4 lines long. Rather than typing in the same long filtering for loop again and again, I basically outputting the list of "good interviews" to a file which was a `for i in $(cat goodinterviews);...` away. I wasn't sure if using the disk qualifies as just using the command line though...

Also, I think more or less (the commands) are cheating just as much as an editor but many associate less as more of a "command line" tool, so the author should specifically forbid it.

Also, grep -rn is a godsend in this case, might have made it too easy :) This was quite fun!
A specific political party who happen to be in power (barely in power, literally by a single seat in the knesset) disrespected the president, a significant proportion of the Israeli population, including the defense establishment were horrified and embarrassed.
CodeWarrior T-shirts were legendarily cool

https://www.google.com/search?q=metrowerks+codewarrior+t-shi...