skysight-inc/HackerNews huggingface dataset:
If you do not have the ability to eavesdrop on the network between my client and my server, then port knocking is essentially unhackable. Port knocking only fails when the malicious party can monitor the network traffic. This is a valid concern, and I would never say that port knocking by itself is all the security one needs. It does however completely block all regular "outsiders" from ever being able to even open a connection to sshd.

If I require 5 ports to be hit in sequence, and blacklist IPs that hit unknown ports, it is extremely unlikely you will ever connect. Now if someone on my local network, at my ISP, or at my hosting provider sniffs my traffic to determine a static knocking sequence... good for them. They're the one unauthorized person who can connect to sshd, without a valid ssh key to authenticate with.

It's a reality that most businesses are not going to invest in setting up a network that cannot be accessed from the internet at large. For such setups, a little bit of obscurity via something like port knocking to prevent every single port scanner in existence from discovering your sshd server must be better than nothing at all.
Well I for one know that the head bob back in DOOM made me nauseous, in a fun way.

As did another commenter: https://news.ycombinator.com/item?id=11796367
Thanks, those were the trigger words to conjure up an interesting Google results page.
I remember him saying that on a podcast. maybe talk python to me.
>An army of anonymous, tech-savvy people – mostly young...

Bah ageist humbug. The 2010 survey had 51% over 30 and at Wikimania in London last year the biggest group were retired over 50s. I think because it involves tech people just assume it's youth.

(I note the featured article today is The House of Plantagenet (1154–1485) and you have to scroll down half the page before you hit Justin Bieber.)
In this game being an employee is no different from being an investor, you need to sense which way the wind is blowing and position yourself accordingly.

Here's an example, there is no cloud. It's just a computer somewhere else that you rent time on. They were doing this in the 1970s when they were called computer bureaus. But put the right buzzwords on your CV and KER-CHING!
Can you link to it?
From 2011: 80% of fortune 500 jobs accept only online applications.

http://2010-2014.commerce.gov/blog/2011/12/30/look-ahead-201...
Moved off Django to Flask.

https://www.quora.com/What-challenges-has-Pinterest-encounte...
Neal Stephenson. "Mother Earth Motherboard" WIRED Dec 1996: 66 pages. Print.

http://www.wired.com/1996/12/ffglass/

Without a doubt my favorite issue of any magazine ever. I still have my copy somewhere.
How to Deploy from GitHub via Jenkins on OpenShift
Yes, it comes down to risk management and decision making under uncertainty. i.e. how much of a competitive advantage can we gain by pushing the regulatory limits, and what are the potential downsides and probability associated with such downsides.

PG has expressed a view that he favors start ups that push regulatory boundaries, but I'm sure his view is more nuanced than such a blanket statement.
I use Bitcoin as an easy way to donate money to my Gnu Social host, open source, etc.

Convenient, and blockchain as a wider technology looks great, but I would not view Bitcoin as an investment vehicle.
9/10 top universities researching in Nano-photovoltaic cells belongs to China
I imagine that's because for people like me who get both nausea and headaches in 3D movies, most will just not go to 3D showings.
I listened to a Podcast interview with the author. He is spending a lot less time on Python projects than he used to as he does like Rust so spends time on Rust also.

https://talkpython.fm/episodes/show/13/flask-web-framework-a...
Yeah I meant budget as in 'budget to make one of them'.

The argument is obvious - consumers are the biggest market for displays by a huge margin. The military don't have super-advanced displays that LG and Sony can't match. The military didn't make a 4K 5.5" screen before Sony. They don't have huge display research divisions.

I feel like the original author should have to show this $80k low latency, high res VR system before I can disprove it. All I could find was this:

https://www.youtube.com/watch?v=fT-rFLlvdD4

It looks shit compared to the Vive. Look at how bad the field of view is! No numbers on latency or resolution but come on. There's almost no chance they're as good. Hell, the technology to get really low latency, like G-Sync and OLED displays didn't even exist until really recently.

Just because it's 'military' doesn't mean it is the best.
I see, that makes sense. Thanks for the clarification and the links!
> people don't want to _______ all day and look like a moron talking to beings 90% of the population can't see.

You mean, like radio and telephone and television and computers and smartphones?
I'm wondering why the Oculus developers didn't take those things into account, especially since they are so well known to experts. The most interesting challenges of VR seem, as of yet, unsolved.
> He's wrong because he's worked with the tech for decades, but you tried it and didn't get sick?

Well.. yes? He says it's impossible to make VR that doesn't make people sick. We now have VR that doesn't make people sick. He's wrong. He decades of experience probably cloud his judgement because until now VR was terrible.
Jester: A Macro-Driven Web Framework
It is an interesting issue for all online content providers. If you are in ecommerce, that sector us in trouble because of the monopolies allowed online...thus going down that path is a gamble loaded against you. Amazon and eBay have made it nigh impossible to build your own brand outside of your community. Meanwhile everyone wants great content but subscription models, display ads, affiliate ads are disliked and ad blockers are rampant. When you eliminate pops to earn some green against a background of increasing costs associated with employees, I see a terrible outlook for the future of online for all content sites and the reduction of the net to the few big boys who aggregate retail and brochure sites that are skin to business cards. We ate truly in a pivotal time that I see is a massive change online. It is not just a Reddit issue. It is everywhere. Eager to hear what consumers and readers would support.
Startup Reading List
Agreed, I'm quite sensitive to the scrollbar size when I land on a new article, and in this case I almost closed the window, thinking this would take the whole day to read :)
Given the way the current drug development system has been designed it is very hard to bring a new antibiotic to market

It's hard to get any drug to market, and the FDA's intransigence is tragic. Alex Tabarrok has a good book on this called Launching The Innovation Renaissance: A New Path to Bring Smart Ideas to Market Fast (https://www.amazon.com/Launching-Innovation-Renaissance-Brin...).
In the real world we call this rain
I agree, but the pace of development of those systems over the last ten years is not comparable with the previous ten years. By that time unix sucked already substantially less. For example, SunOS 5.6, 5.7, 5.8, 5.9 and 5.10 were all released in the 1997-2005 timeframe. Only 5.11 has been released since then.
After living a long time and experiencing the medical issues with family that I have experienced. .. I agree with you. The privacy fear is actually related to employmemt.. a fear employers will not hire you if you have medical issues.
Flask = backend

Angular = Front end

Bizarre you are comparing them. Suggests you have not used either.

I have no idea where you are looking for jobs but where I am demand for Flask and Django are booming and there is a shortage of them.
"As a startup of our size cannot spend 30-plus percent of our resources on things that take ten years," Rosenberg said, adding that "there’s some time frame that we need to be generating an amount of revenue that covers expenses and (that) needs to be a few years."

This professorial tone is baloney. "A startup of our size"? You decide what kind of giant company you want to be, Google. If you don't want to think 10 years out, why did you buy so many research labs? Own your decisions and figure out what you want.
Observing Ultra-High Energy Cosmic Rays with Smartphones (2014)
Matrix 2 and 3 could almost have been saved with the twist that The Merovingian was the previous The One who just refused to play along. A criminally wasted opportunity. I loved Matrix 1, I still haven't bothered to watch 3. In fact I can't even remember what happens in 2 after Persephone's bit is over.
They seem to be pretty handy at that anyway
That may apply to sarcophagi from ancient Egypt, but certainly does not apply to all artworks over 300 years old.
> so driving a car while “under the influence” of post-VR disorientation is probably as dangerous as drunk-driving.

That seems like a bit of a stretch to me. The only evidence cited is that the military issued a warning about driving after exiting a military flight simulator. I'm not questioning that the effects of VR can persist after exiting the simulation, I just don't think they can be compared to the effects of alcohol without significantly more investigation.
SMTP is a store and forward protocol that in no way provides real time chat speeds. It is designed to be robust, not fast.
Nice idea, but tbh I'd prefer if someone rewrote it in (ba)sh scripts. Not everyone likes to install dozens of different language interpreters/runtimes on his systems - Ruby for puppet, perl is these days mainly used by apt-get, Go, NodeJS, some people use PHP, then Java, the Python version hell with people using either 2.7 or 3.x, Mono, bash, zsh, C, C++...

As much as I like flexibility and "the right tool for the right job", we have ended with ridiculously huge install bases - a minimal Debian may very well end up with hundreds of megabytes, it's ridiculous.

Mandatory xkcd: https://xkcd.com/927/
I'm not so sure building a robot capable of killing toddlers 'does something for the USA' - at least not anything positive.

I'm not particularly horrified by military robots, but I suspect they'd have to deal with complications and subtleties in the environment even more effectively than domestic robots in order to be remotely usable.
Definitely. It takes hours to properly argue. It takes minutes to bullshit.

How many times do you give up on a social media argument just because you don't want to spend the next 30-60 minutes researching and building a solid case for your argument? I've given up completely. The bullshitters win.
> blacklist IPs that hit unknown ports

so what happens when someone hits an unknown port on your system from every IP on the internet?
Elixir Confs Sessions
Thanks Peter Thiel for killing this type of journalism. Truly those that report on 1990s virtual reality games are in your words "al qaeda". Kudos.
http://www.thefreedictionary.com/Taxonomy
One game that seems to work for me in VR is EVE: Valkyrie;
An arcade style multiplayer dogfighting in 0G space.
As you are in space, the lack of an 'up' feels like you are never at the 'wrong' direction.

It took some getting use to doing barrel rolls or adjusting yaw and pitch too quickly. As I improved, the sickness from more complicated manoeuvres subsided.

I think that attitudes that VR is somehow dangerous and impossible to be done without sickness are foolish and ignore historical precedent; Many things throughout human development have felt 'unnatural' and required adjustment and training - driving, flying, skydiving, moving pictures; yet humanity has adjusted to these in short course.
The proof is in the pudding. I'm kind of amazed that the first response to this article is not either: "Correct. We tried Vive/Oculus on 1,000 subjects and 90% were sick within ten minutes," or "Incorrect. We tried it on 1,000 subjects and 10% were sick after 2 hours." Or some other clear test from real players. How can the viability of VR be this speculative this deep into launching to real customers?
Your knowledge of London transit is shockingly bad.

There is an express rail connector from Heathrow to Paddington that costs around 15 pounds and gets you into London in about half an hour. If you have more time you can take the Picadilly tube line from Heathrow to Victoria station in about an hour. More stops and less room for luggage on the tube, but it will cost less.

Crossrail is not about connecting heathrow, it is to connect the southeast with London, the phase II link to Heathrow is just bonus. In fact, it will use the exact same line as the heathrow express uses now when it goes from Paddington through Heathrow and further west. A crossrail link just means you don't have to switch trains at Paddington to finish the trip to Heathrow if you started in the SE commuter belt.
That's just because the camera and your eye's focal range differ. It's trivial to fix.
Ask HN: Current state of Bitcoin mining?
It seems hardware mining companies are going under. Mining farms are going under. What is the current state of mining hardware.

CPU and GPU mining seems to be unwise.

FPGA and ASIC seem to still be viable.

What hardware is all the rage right now?
I know that you are probably joking, but you'd launch such a thing from a unit file. Hence, no silent killing.
That's a interesting idea, to make encryption dynamic using something like the 2FA described here.
A second (or 4) camera would be cheap to add. What is the latency like, though?
Love Flask. I don't do it anymore for other reasons but flask is what got me started with web frameworks that are minimal but powerful. What I love about flask is that it does not do too much magic like django even though this is not meant to demean django of course. It makes me think and make some choices. Since the core is minimal, you still have to learn a few things to really understand how to put together a decent web app or an API but I really feel that is the strength of flask.

My belief is that when you are learning, start with a minimal framework so that not everything is already done for you a.k.a magic. That will make you think and make some choices. Sure it may be amateur choices in the beginning but you will become a better developer. So if you want to learn python for web, go with Flask.
The Best Entrepreneurs Learn to Stay Ahead of Change
How would that even be possible?
Some of the advice here seems rather optimistic for 'not technical':

- Have a (technical) side project

- Do basic HTML/CSS coding as needed

This may well work for someone who starts out as (say) an engineering major who wants to transition to a programming role in a startup, but I know some Project Management people who would have a very difficult time doing the above, but nevertheless add lots of value.

Unfortunately, I know very little about how PMs are hired / show skills. Certifications? Discussions about what they've done for past companies? Seems like it would be very difficult to weed out bullshitters on a phone screen. What's the equivalent of 'fizzbuzz' for a PM?
That's exactly the point, he got a reliable system with off the shelf components that is more reliable than your proposed solution (no water = burned pump, can mix anythig in the water, etc)
Drug smuggler got caught with 6500 MDMA pills, built a $30 mil. tech business
This is what it's like to grow up in a rich suburb of DC as a white girl in the age of...
I have so many reactions to these thoughts that I hardly know where to start! My first reaction is that this means all sales functions are to not be trusted. Is that accurate for you?
Oh no. Oh no no no. I think it's pretty clear that VR headsets make you look like a moron at a whole new level. Take away a person's eyes—hide their eyes so that they seem to have none—and you take away a lot. Put them in touch with a private world and you make them even more alien. Radio, telephone, even television can't compete with that level of moron-looking.
I disagree - we never have really thought that we could live indefinitely and sustain ourselves. Overpopulation has been a fear since Plato at least (https://fee.org/articles/overpopulation-the-perennial-myth/). We hunted things to extinction and knew it. Plus there were more diseases to worry about, death rates for child-bearing women were high as well as the child death rate. Really, if you weren't worried one way, you were worried another.

Different times simply frame problems differently. At least we are more aware of some of the stuff now, even if we haven't scientifically figured it all out nor figured out how to work together enough to solve them.
This sounds suspiciously like the "sufficiently smart compiler" argument.
Building Sketch Mirror
But then AR's going to have a similar motion problem when you're up close to synthetic imagery instead of only having a little bit of it as an overlay.
Have they started sending around apps to beta testers? You can sign up[0] and I'm pretty sure I did, but I haven't heard anything.

[0] http://crayfis.io/
Most people will want AR for that.
Why freezing can work sometimes but generally won't: http://www.datarecoverygroup.com/articles/freezing-your-hard...

Related question: http://unix.stackexchange.com/questions/112050/
I assure you people said those exact same things when radio, telephone, television and smartphones came on the scene. Since that last one is pretty recent, I'm sure you would remember all the comics and satire around people being absorbed in their iPhones and whatnot.
I would install it, but there is not the usual "wget https:// ... | bash" setup...
He's certainly right that in AR (where you literally don't mess with a lot of the scenery, sometimes most of it, because you use a transparent visor), these problems are often less severe.

It's less of a "sufficiently smart compiler" argument and more of an "if you only touch 5% of the scene, the other 95% is just looking through glasses, and people do that just fine" argument.
A Djangonaut's Experience with .NET MVC
Some of that is related to the article talking about differing nausea when synthetic imagery was different distances away -- it depends a lot on what you're looking at.
Ok, that's what I thought : )

It interesting that they stripped down the runtime from previous(larger) iterations. Are those discussion discussed anywhere that you know about? It seems like that would be an interesting read.
Is the app open sourced? any link?
MITM attack on Freecharge reveals credit card and other payment details
Keeping a separate work account is easy. Just create one. I don't understand why people just don't do this more often.
Peer pressure dislike fight ans strive for social peace.

It is an amount of magnitude more harmful to be labeled troll than imaginative.

Most BSer are hiding themselves behind smoke screen of so called innovation, saying the old ways have always tended to be wrong.

And the mass is BSing to. Pretending to know more than what it actually knows.

Bullshit is a global shared social attitude.
I'm still confused about the price comparison he keeps using. Is that really apples to apples? The Navy may have wanted to sell a dozen of these units at a time whereas oculus and HTC go into true mass production. I was always under the impression that rally limited runs of anything are far more costly per unit.
FWIW Firefox manages to use W^X in their JIT (the experimental patch back in 2011 had a very interesting idea: one process w writing out to memory mapped RW, another process with the same mapped executable): http://jandemooij.nl/blog/2015/12/29/wx-jit-code-enabled-in-...
Hmmm ... wouldn't it be possible to use a distrubuted portscanner to find the current port? Or simply DDOS the switch that the box is attached to? Or the router? Or another downstream connection point?

While I love the ingenuity of the OP's software, I'd have to agree with their own assessment on the Github page "Beware, currently I would not really recommend running this software, it was only written as a joke."
> It's a real shame, because if you learned about fundamentals like compilers, data structures and operating systems eg in the 80s and then slept for 30 years, you would still pass a Google interview today.

LOL, on my own Google recruiting track, it turned sour after I admitted I am significantly older than my LinkedIn profile shows. I believe I was reasonably good on fundamentals during the phone interview as you say ;-)
http://www.stoa.org.uk/topics/bullshit/pdf/on-bullshit.pdf

> One of the most salient features of our culture is that there is so much bullshit. Everyone knows this. Each of us contributes his share. But we tend to take the situation for granted. Most people are rather confident of their ability to recognize bullshit and to avoid being taken in by it. So the phenomenon has not aroused much deliberate concern, or attracted much sustained inquiry. In consequence, we have no clear understanding of what bullshit is, why there is so much of it, or what functions it serves. And we lack a conscientiously developed appreciation of what it means to us. In other words, we have no theory. I propose to begin the development of a theoretical understanding of bullshit, mainly by providing some tentative and exploratory philosophical analysis.
That page does not support the statement that they moved off Django to Flask.
Can't a scan like that be detected by a simple firewall?
Ελλάδα: Ντέρμπι Δικεφάλων με ΑΕΚ και ΠΑΟΚ
This is also an interesting idea:

http://serverfault.com/a/217066/46738

(accepted answer is pasted below)

Rate limiting login attempts is an easy way to prevent some of the high speed password guessing attacks. However, it's hard to limit distributed attacks and many run at a low pace over weeks or months. I personally prefer to avoid using automated response tools like fail2ban. And this is for two reasons:

1) Legitimate users sometimes forget their passwords. I don't want to ban legitimate users from my server, forcing me to manually enable their accounts again (or worse, try to figure out which of the 100/1000 banned IP addresses is theirs).

2) An IP address is not a good identifier for a user. If you have multiple users behind a single IP (for example, a school that runs NAT on 500 student machines) a single user making a few bad guesses can land you in a world of pain. At the same time the majority of the password guessing attempts I see are distributed.

Therefore I don't consider fail2ban (and similar automated response tools) a very good approach to securing a server against brute force attacks. A simple IPTables rules set to cut down on the log spam (which I have on most of my linux servers) is something like this:

iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent --set

iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent --update --seconds 60 --hitcount 4 -j DROP

It prevents more than 4 connection attempts from a single IP to ssh in any 60 second period. The rest can be handled by ensuring passwords are reasonably strong. On high security servers forcing the users to use public key authentication is another way to stop guessing.

---- (end of answer)

for Ubuntu admins...

http://manpages.ubuntu.com/manpages/xenial/man8/ufw.8.html

(Uncomplicated Firewall) ufw supports connection rate limiting, which is useful for protecting
against brute-force login attacks. When a limit rule is used, ufw will
normally allow the connection but will deny connections if an IP
address attempts to initiate 6 or more connections within 30 seconds.
See http://www.debian-administration.org/articles/187 for details.

Typical usage is:

ufw limit ssh/tcp
Thanks for the reference. Do you have one that shows your point that, instead of being from the 50's it is from after the 70's? As previously discussed, its meaning in 1951 was radically different after the 70's and today maintains the polarity that's properly described in Neoliberalism's Wikipedia page.
*500 Lines or Fewer

https://en.wikipedia.org/wiki/Fewer_vs._less
I looked it up - segmentation in long mode. I'm curious how both Linux and BSD had/have gotten it "wrong" for so long? That just sounds unusual and likely not an oversight. Can you elaborate?