skysight-inc/HackerNews huggingface dataset:
If SNMP wasn't public exposed (along with default community strings), we wouldn't ever see DDoS making use of SNMP amplification attacks.

As the senior network engineer at an ISP, I probably see this more than a lot of others here but recent history shows us that SNMP being publicly exposed is rather common.
The parent comment by munificent is just making the lazy go-to excuse for US policies that it's so big / special / whatever that everything has to be different there.

Notice how these lazy comparisons never make any specific comparisons to other countries that would trivially refute their claims, such as Russia having 4x less population density than the US, but still somehow managing to have a federally mandated parental leave.

If it were true that it's just so hard for people far removed from one another geographically to relate to each other wouldn't it follow that the situation in Russia would be 4x worse than the US?
Bringing Nixie tubes back to life
Feedback loops strike again.

The fault is in the interaction between media and the audience. People tend to react better to some content than to another, which leads to that content making more money, which leads to more of such content. The process is optimizing for exploiting cognitive biases and heuristics the audience uses.

Now the question is - what's easier to tackle? Issues with brain architecture that would require medical interventions we barely can imagine to correct, or business incentives of the media companies?
Bitcoin 0.13.0 Binary Safety Warning
However, I heard it from ESR, and so that is who I quote. He also is one of the few to apply it to programming.
Maximizing code performance by thinking data first – Part 2
Taboola and Outbrain's recommendations are so pathetically insulting, and the tracking so obvious, that I've both blocked their domains (router DNS server) and specifically set "display:none;" properties on any CSS classes/IDs matching their names or substrings.

It's pathetic bottom-feeder crap.

Maybe if I fed the beast through tracking, I'd see higher quality recommendations, but I won't, and I don't. They only serve to tell me just how precariously miserable the current state of advertising, tracking, surveillance-supported media is. I'm hoping it will crash and burn, not because I want present media organisations to die, but until they do, we don't seem to stand any chance of something better.

(What better, you ask? Information as a public good, supported by an income-indexed tax.)
It seems like a massive oversight to implement segmentation like that and yet still allow the fax printer SNMP and telnet/SSH access to the firewall.

In environments I've seen, the network management network is the thing most likely to be isolated first.
How does Opa compare to Urweb? Both seem to have an ML-style influence http://www.impredicative.com/ur/
> Only reason to participate in them is charity.

Maybe believing that it's good when fewer vulnerabilities exist and when attackers are less able to exploit things? Does that count as charity?
Oh, that's great! I didn't realise, from the rate limit page, that the exemption form exists.

If I wanted to issue certs for a few hundred microservices running in a VPC, assuming I could get them to DNS validate, do you think I'd get approved for a rate limit exemption? Or are exemptions more of a well-you-have-to-have-a-really-good-reason thing?
Yeah. Homeowners don't pay market value for me not robbing them, either. After all, think how much that jewellery is worth. And the damage of ID cards and passports.

A laptop alone could get me $250, but no one wants to give me even $10 for telling them their door is unlocked.
Looks like its not maintained.
That's no longer true. The Global Hawk UAV has capabilities similar to a U-2.
Supports millions of people in what way? I "casually" wrote off millions a dollars a day in the billing office for people who didn't have insurance. I "casually" wrote off 90% of people's bills who were state funded.

The only people we actually were forced to try and collect on were private companies and people making over $X per year.

I have no idea how much experience you have with this stuff, but the unfairness comes from the fact doctors/hospitals can effectively charge outrageous prices, knowing they will only make a percentage. On the state payments, they lose money and on the private insurance companies, wealthy and naive honest people they will make more. They have to charge that much to make up for the difference caused by the state options, and people who never pay.

Just like any system with a (semi)guaranteed payment (college tuition, healthcare, government contracts, minimum wage, etc.) Prices will inflate capturing the free market rate + the guaranteed amount. If you want to fix that, you have to force deflation by forcing everyone to pay equally. You can do that by removing the guaranteed payment and create competition.

Seriously, this is econ 101...

Also, antibiotics, insulin, and many of the other standard drugs doctors prescribe could essentially be free for everyone for half the cost of Medicare. Insurance companies only pay like 10% on the dollar for that stuff. So I would much rather "support" everyone by providing the basics, and having the rest be a free market. It would solve probably 80% of the issues with the current healthcare system.
I'm wondering why you have managers in scare quotes. Are you suggestion that they aren't really managers or that managers as a position is just some sort of fraud?

Also Project Manager and Scrum Master are just positions that describe roles and responsibilities an organization / on a team. The people filling those roles needn't be clueless.
It really doesn't. Either someone leaked these scripts or some remote shell was compromised. Not "the NSA".
I think a comparison to the Cadillac CTS-V is fair. Similar weight, similar size, similar costs.

Both are toy cars for rich people.
I'd say that not only is it all NOT internal, it is often not run on "specific dedicated backchannel networks". Ask anyone who was a victim of a DDoS that made use of SNMP amplification.

I would agree that it should be internal and should be run on internal-only interfaces/networks but the reality is that that very often isn't the case.

The average ASA is better off than most other devices simply because one must explicitly configure and enable SNMP on it. Too many other devices ship with it enabled, accessible from 0/0, with the default community strings set to "public" and "private". I believe the last abuse@ e-mail I received notifying me of a customer with a device exactly like that was on Saturday.
Um, no. Those provisions were the Democrats negotiating with themselves. At the time the Democrats had the votes to force the issue regardless of the Republican opposition.

It was people like Ben Nelson, Joe Lieberman, and Max Baucus that played a rotating merry-go-round of scapegoats that the Democratic Party used to trump up reasons why they couldn't support more progressive reforms in the healthcare legislation.

Also, it wasn't Republicans that put a WellPoint Executive Lobbyist (Elizabeth Fowler) in charge of writing large portions of the actual legislation and acting as the liaison between the White House and the Senate.

In the end we got a big pageant and self-aggrandizing back-patting session from the Democrats who called it the greatest Democratic legislative accomplishment since the Civil Rights Act... which is ironic considering that the ACA is almost the spitting image of Republican Bob Dole's Heritage Foundation sourced (and AHIP sponsored) reform plan from just a few election cycles prior.

So... the greatest Democratic policy achievement in at least a generation was to pass a Republican policy proposal. Well played Democrats. Well played.
> Specifically, when prompted with a Windows 10 update, if the user chose to decline it by hitting the ‘X’ in the upper right hand corner, Microsoft interpreted that as consent to download Windows 10.

Ah, that brings back memories. Back in the DOS days, when you ran "format", it replied something like "Ready to format disk X. Press any key to continue:" (with X being the drive letter). And it really meant press any key to continue. Escape would continue. Control-C would continue. Even control-alt-delete would continue. The only way to not continue was to turn power off.
Typescript to c++? Thats a rare change and seems a bit backwards
Like others have said, that's mostly HAML. HAML syntax is actually succinct and nice once you know what the codes mean.

Basics of it: indentation nests html elements. each line is basically an element or a control structure. = is run this ruby code and display it. - is run this ruby code but don't display it. a period with something after it is shorthand for create a div with that as a class. the fact that it creates nicely formatted html that is automatically closed for you is a bonus. the #{} part is string interpolation that comes from ruby and those items inside that are just ruby objects with functions/attributes on them.

Give ruby a chance and you will likely fall in love with the syntax.
But calling everything that's new "hype" and pointing to the past as the only things that are "real" or "solid" is also a form of groupthink.
My guess is that this has nothing to do with the content of the comments and everything to do with resources. They used to outsource commenting to a third-party. They either decided that they couldn't afford to do this or that they could handle it in-house. Meanwhile, their social team, as of two years ago, was one person and sometimes an intern. NPR Digital does/did a great job at fumbling and half-assing products (like NPR One), user engagement and actually reaching/monetizing/analyzing new audiences.
For better or worse, degree is a signal in a noisy world. Someone who went to MIT is on average more likely to be useful to an investor than someone who isn't. And perhaps this is true even if they have an awful demo or product. If they have tech skills, the investor can find them work elsewhere.

But in reality, pitch nights are generally garbage anyway. Investors put a lot of weight on "Who introduced the entrepreneur to me" and that carries more elitism than MIT. Again this is to get through all the noise.

If you have a project with traction and a large addressable market, the investors will follow the signal and stop worrying about pedigree.
Why Isn't It Called No Woman's Sky?
I'm ecstatic for this! I was getting real sick of keeping the separate branches up to date, when I wanted to make a minor change.
Saudi Aramco Plans World's Biggest IPO
Thanks for all this; I was hoping for some replies like this when I posted my comment. I guess I haven't needed to hide stuff in precisely that way. Of course there's no parent selector in CSS, but if we have something like this:

<label><input type="checkbox" name="cb"> <span>My checkbox label</span></label>

then we can have this:

label input:checked + span { ... }

Maybe that <span> is more sinfully extravagant than a "for" attribute, but it seems DRYer to me.

[EDIT:] It seems sibling comment had the same idea while I was testing this on the other tab.
I always move lines with the keyboard, is there a way to avoid the empty row when hitting return between bracing stuff like {} or html-tags?

It's not needed if I'm just nesting further and move some lines in and I don't want to strip empty lines automatically either.
>>So why is it only working with CF?

Because CloudFlare is basically a MITM Attack.... that is authorized by the website owner.

http://blog.ricardomacas.com/index.php?controller=post&actio...

https://stirling.co/blog/cloudflare-mitm/
I have no idea, but your right. This outrages me on any platform. I don't allow my phone to auto-update, not any of my PCs, nor any of my apps.

If they did, I'd stop using that product.
CNC machine an aluminum wallet from your computer
> it's more about what works for you

No. It's about what works for the person to whom I'm listening, and my experience suggests at best an extremely limited role for a personal zen, however well polished.
> Obviously a child isn't a form of paid work in service of a company, but if not work and if not vacation what is this?

Sabbatical. It's time off from work to make some significant progress on a side project that isn't directly related to work.
I've heard good things from devs in cheaper labor markets like Eastern Europe/India. But most U.S. devs that have talked about it have had pretty bad experiences(typically long and grueling interviews for below market rates).

So it probably depends on where you're from.
.NET Core 1.0 release – what you need to know to get started
Doesn't Firebase hosting do this already - SSL, CDN, push from the command-line - for free?

Pubstorm, too.
Independent of the presence or absence of a public option, the benefits of a private market largely depend on whether an actual competetive market with consumer choice and pricing comparison can exist. In the US it cannot due to regulatory capture and occupational licensing plaguing the industry and creating massive market distortions. Consumers are completely disconnected from pricing.

Single payer and private markets can be complimentary, with private insurance funding more personalized care and a recourse from the dreaded death panels.

Single payer with private markets seems to be the model many countries are converging on.
It's nice to see an abstraction over Javascript and ajax. I'm working on an asp.net MVC site at the moment and can't stand the untidyness of dealing with the jumping between abstractions all the time.

As an aside, Elm looks a nice way to write web client code. I hope Elm will one day compile to a fast language for the server (e.g. C, OCaml or WebAssembly). There's no reason Elm shouldn't be as fast as OCaml and I think for server-based work it should be within 2x C speed.
Cisco is decimated? That's laughable.

$150 billion market cap.

$49 billion in sales.

$10 billion in profit. That's about 60% more in profit than Alibaba for comparison sake.

$63 billion in cash.

So one of the world's largest and financially strongest corporations, and it's decimated. Oh if they could all be so lucky.
I'm definitely going to buy this, start reading three books and finish none.
Maybe ask the local ACLU affiliate, or I think there's a forum of some sort run by Lenore Skenazy of Free Range Kids fame (who is generally critical of recent restrictions placed on kids and adults in the name of children's safety).
looks spammy:
new account
only post
linked site has affiliate links for vpn providers
shady 'review' site style
How do parents in countries with less than six month to one year parental leave handle it?

Most kids I've brought up have been about a million times more intense than any tech career I've ever pursued.

And for the companies they work at, how do they manage retaining any half decent people while actively ignorning one of the most basic human processes? Ask any parent what the most transformative event in their life was. How do these companies survive with a staff that's essentialy kids or dysfunctional/depressed parents??

edit: serious question albeit framed provocatively.
What the real purpose of their firewall is for is debatable. You can't just assume it's purely for control. Control of course is also justifiable in some times and unjustifiable in others, much like how the Democratic National Committee instituted Super Delegates when they found out straight up voting threatened the party leadership's hold on power.

> Well, don't forget that China has been ready and willing to take the benefits of global trade when it suits them. 'We don't want aggressive imperialistic foreign multinationals coming in and bullying our poor domestic companies...', but sure, we'll take all of yor technology, programming languages, operating systems, do literally nothing to stop piracy of Microsoft software...

If you're talking about one-sided business deals, well, it's pretty stupid for multinationals to do that isn't it? They certainly aren't forcing multinationals to do that, but those multinationals obviously calculated the cost-benefits and determined they'd still benefit to doing business under the sovereign rules China imposed.

The difference when multinationals or foreign nationals wanting China to open up to their terms is that these terms are forced upon China and dictated. Fortunately for China it's powerful enough to simply ignore these demands.
> Another way to put it is that average lifetime healthcare cost is about $250k for men, $350k for women.

Do you have a source for these numbers?
Pinterest Follows Rivals into Selling Video Ads
Scientists don't (typically) run journals, publishing companies do. Scientists just write and review papers for free, and they have to pay for access. That's hardly "running" anything.

Scientists do tend to decide who gets grants, but most people I know don't consider those decisions to be too bad per se. The main problem is that the lack of funds causes grant award rates to be so low that very good candidates can be left out, plus when resources are so low the random factors inherent to assessment become too important (with a 50% acceptance rate, a very good project may score lower than it would deserve but still get in, while with a 10% acceptance rate if a single panel member dislikes your project you are likely out).

Not saying that the scientific community doesn't have its share of the blame for its problems, but an important part of the blame is political as well. And scientists are too busy trying to survive in an extremely competitive environment to try and change things by themselves. Honestly I think most of science's problems would be solved just by allocating (significantly) more money to science. Then maybe we would actually worry about doing good science and incentivizing others to do so, rather than about finishing our reviews ASAP so we have time to hastily write another journal article that we need to score points for grants/tenure and not bite the dust. A degree of competitiveness is good, but competitiveness in science is now absolutely over the top and creating all kinds of evil incentives.
Chinatown Vegas – Another Great Addition to Chinatown Vegas
It's no coincidence that this myth is spin-doctored by the West's imaginative ally Saudi-Arabia.

The one country that uses the salafi-radicalization of Islam the way the Papal States used it's catholic churches: to bully countries and to keep it's own regime in power against domestic rivals.

In this Saudi PR-stunt Radical Islam is to serve as the counter identity Arabs should rally behind, instead of democracy, socialism, liberalism or nationalism. Because all these four are a direct threat to the feudalist Saudi Regime.

Wether Al Qaida, Boko Haram or the SS of the 21st century, ISIS, they all originate in the decades old Saudi program to educate and radicalize muslim theologians throughout the world.
> pedigree is not something you're born with

This is a funny statement.
This is a lot like the Lockheed hybrid airship, the P791 [1]. Looks like it. The Skunk Works built that prototype for DARPA in 2007. Works fine, but DoD didn't have a use case for it. Lockheed offers a version for sale.[2] Straightline Aviation bought $480 million worth, for delivery in 2018.

Lockheed's Skunk Works finally solved the landing problem. Landing large airships has been a huge problem as long as there have been airships. The P791's big "feet" work like hovercraft. They land the thing on a runway and taxi to the hangar. In windy conditions, they can run the fans in vacuum mode, suck the craft down to the runway, and keep it there.

With enough steerable fans and computer control, airship maneuverability today is reasonably good. The Zeppelin NT was the first airship to have this, and it could be landed without a ground crew hauling on lines. They just needed a big field and a heavy truck with a mooring tower. But it still had to be towed into the hangar.

[1] https://www.youtube.com/watch?v=W3n5cUaG5fg
[2] http://www.lockheedmartin.com/us/products/HybridAirship.html
It's probably inevitable that someone will publish a collection of predicted sockpuppet/alias accounts. It wouldn't surprise me if the HN mods had their own private collection; I think it'd be a fun project to show estimated alternate usernames next to a comments' username along with a confidence score. Naive bayes on comment text would probably do alright but there are plenty of other signals. A public list being published might suck if any of them are linked to a real identity and the real identity didn't really want them linked, but at least it's safe from novel associations, like maybe chipgap98 is _why but is also Bob from the Mozilla office down the street (in addition to Jonathan)...
Metafilter is interesting in several regards.

There's the token payment. It doesn't cost much to post, but it does cost to be an asshat.

It's tiny. The userbase and total content volume are a small fraction of other social networks. Which I've objectively measured.

The S/N is amazingly high. Better than all but the best paid-contribution (e.g., professional media) sites.

https://www.reddit.com/r/dredmorbius/comments/3hp41w/trackin...
While there have been monumental breakthroughs in understanding, the core idea of neuroplasticity is nothing new [1], and that quote certainly strikes me as odd. It sounds like what a neuroscientiest would say if he were explaining the concept of neuroplasticity to a toddler.

[1] https://en.wikipedia.org/wiki/Neuroplasticity#History
It's interesting to see that real name policies can actually make trolls behave more aggressively. On the other side of the spectrum, I anecdotally find that they actually prevent me from posting constructive things. I frequently refrain from leaving reviews for restaurants and stores on Google because I don't want them associated with my real name. It's not that I would otherwise be leaving low quality or bitter reviews, I'm just not particularly interested in anybody who knows my name having access to information about where I shop, what I eat, etc (even though I would be happy to share this information anonymously to help other people make informed decisions). I feel similarly about commenting on news articles, blogs, and apps that I use. It wouldn't surprise me if this was a significant factor in how real name policies affect overall comment quality.
Do you think there's a moral imperative for researchers to responsibly disclose discovered vulnerabilities?

I see it as a kind of Hippocratic Oath in the field.
Netlify CTO here (so I'm very biased).

These are some things that you can do with our Pages tier FREE, that you cannot do with GH Pages:

- We don't restrict people to only one static site generator, like Jekyll. You have use whatever with our Continuous Deployment.

- Automatic rollbacks at the CDN level. If you push a broken site, you don't need to stress about fixing the issue, pushing again, and waiting until the changes are published again. We have a big button that says "Rollback". Clicking that, our CDN automatically purges your site and promotes the good version you want. After that, you can spend as much time as you want writing a proper fix.

- Deploy Previews for Pull Requests hosted live. We build each pull request and put it in a subdomain so you can collaborate building sites much easily. Blog post announcement: https://www.netlify.com/blog/2016/07/20/introducing-deploy-p...

- Automatic provisioning and renewals of Let's Encrypt certificates for custom domains. If you have a custom domain, we do that for you, you don't have to worry about anything.

- Free custom domains, you have to have a paid subscription with GitHub if you want to use your own domain.

As I said again, those things are FREE with our initial plan, $0.

Happy to answer more questions if you have more.
>Even if I set telemetry to "basic" (the lowest it will go), turn off Cortana, and don't use IE or Edge (or any other MS app), Windows 10 sends telemetry to Microsoft. That's not OK.

It doesn't on my setup. I have neutered that shit completely.