skysight-inc/HackerNews huggingface dataset:
I do this, too.

It's called HOSTS and djb's cdb constant database.

And one does not need to use a recursive cache to get the IP addresses. Fetching them non-recursively and dumping them to a HOSTS and a cdb file can sometimes be faster; I have a script that does that. Fetching them from scans.io can be even faster.

cd||exit
[ -c null ]||mknod null c 2 2

case $# in
0)
{
sed '
/#/d;
/^[0-9]/!d;
' /etc/hosts \
|{
while read a b c d;
do
echo +${#b},${#a}:$b-\>$a;
done;
}
echo;
} \
|exec awk '!($0 in a){a[$0];print}' \
|exec cdbmake $0.cdb $0.t||exit
exec cdbdump < $0.cdb

;;1)
test ${#0} = 2 ||
exec cdbget $1 < $0.cdb >null;
exec cdbget $1 < $0.cdb;

esac

usage: $0
usage: $0 domainname

First usage compiles and dumps database to screen.
Second usage checks for presence of domainname and exits 0 if present otherwise exits 100.
Third usage is if $0 is only two characters it will check for presence of domainname and if present print the IP and domainname in HOSTS format.

http://cr.yp.to/cdb.html

With all due respect to the enormous reliance on it that has built up over the past decades, DNS is not the internet. It is just a service heavily used for things like email and web. This does not mean, in an emergency, email and web cannot work without DNS. They once did and they still can.

The internet runs just fine without DNS. Some software may refuse to honour HOSTS and rely on solely on DNS. But that is a vulnerability of the software, not the internet. (And in such cases, e.g., qmail, I just serve my own zone via tinydns, which again is just a mirror of HOSTS.)
Or you need to make it easier for the 'black hole' solution to be pushed further and further back to the sources of the bad traffic.

A remote site shouldn't be able to get you banned from the Internet (by it's self); but it MUST be able to say, "This host is being abusive, restrain them from sending me data". ISPs SHOULD use that information to evaluate if a host from their network might be compromised or otherwise a negative player. ISPs SHOULD also take steps to inform, and link to educational resources, customers which are being bad citizens of the Internet. ISPs SHOULD also be financially motivated (punishments to them) for allowing too many uncivil customers online; this might take the form of instead banning that ISP from the Internet as a whole.
I've been thinking about how you'd design a UI for that, that was easy to use. Maybe a separate wifi network that IOT devices go on to, and then a web app that knows devices with XYZ MAC are LIFX bulbs and shouldn't be able to talk to the smart TV, but that phones on the network should be able to jump the subnet and talk to the bulbs.
This is the path I've just started to take; I'm currently on my first 6mo contract and it's great so far. This post really captures all of my reasons for contracting beautifully, thank you!

A question, if you don't mind my asking: I'm a little hesitant to start filling the pipeline before close to the end of my current gig. Do you find people are planning months out, or do you have to wait until a few weeks before you're free to start engaging with potential new clients?
If Azure and Google would like to gain a competitive advantage over AWS, then I would suggest this: Build out a suite of tools for fighting DDOS. Enable private consultants and companies to provide this as a service. Do this in such a way, that cloud customers save money and have to worry about less. Hell, let companies jump in structured as insurance companies! Also bring in cooperation with law enforcement and use data gathering to catch and prosecute DDOS-ers.
Kind of makes me wonder - why let up? Can it be mitigated at all? Wouldn't they have done so by now. Be interesting if they just kept piling it on until they've got the whole internet on it's knees.
Maybe we need a different word for it then, because they're not hiring. They're "looking" and maybe "interviewing". A lot of companies who say they're hiring are really just trawling for deals.
I assume this post is geared towards all those just starting their career?

Once you have a few years of software dev experience or even less jobs just come to you (I love recruiters .. use them to get the best deal).

If your smart with each new job you can give yourself a nice/big raise. Like 20 to 40k more with each new job especially govt. contracting gigs and at the big silly valley tech companies too.
could we just move along with ipfs and a distributed web please guys, it's about time!
No, it wasn't. That's a myth, disturbed in many sources, including [1]. Also in [2]:

Many people have heard that the Internet began with some military computers in the Pentagon called Arpanet in 1969. The theory goes on to suggest that the network was designed to survive a nuclear attack. However, whichever definition of what the Internet is we use, neither the Pentagon nor 1969 hold up as the time and place the Internet was invented. A project which began in the Pentagon that year, called Arpanet, gave birth to the Internet protocols sometime later (during the 1970's), but 1969 was not the Internet's beginnings. Surviving a nuclear attack was not Arpanet's motivation, nor was building a global communications network.

Bob Taylor, the Pentagon official who was in charge of the Pentagon's Advanced Research Projects Agency Network (or Arpanet) program, insists that the purpose was not military, but scientific. The nuclear attack theory was never part of the design. Nor was an Internet in the sense we know it part of the Pentagon's 1969 thinking. Larry Roberts, who was employed by Bob Taylor to build the Arpanet network, states that Arpanet was never intended to link people or be a communications and information facility.

[1]
https://www.amazon.com/Where-Wizards-Stay-Up-Late/dp/0684832...

[2]
http://www.nethistory.info/History%20of%20the%20Internet/beg...
The state of New York has lost two Congressional representatives due to its population fleeing for more favorable areas.

New York State is not doing well, and its combination of nanny state, local government corruption and high taxes is not winning in the market place of governments.

If it wasn't for the inheritance of NYC being the capital of the world, NY state would be in seriously dire straits.
Woah, wait. There are "many people" who can only afford to live in NYC if they rent out their apartment when they travel? I have so many questions. How much do they make? How much is their rent? How much do their vacations cost? How much do they make from airbnb?
That would be a horrible idea from a security standpoint. Although not easy by any means for an ordinary attacker, at least one exploit scenario is obvious.
Inaccurate headline. Links to Chromium project tracker ticket with title "No option to deal with background images in the context menu of a webpage"
And that's the key, isn't it, "competitive with..." Now the hotels won't have to compete anymore. I think you know what happens next.
That's kind of what Angel List is. I found my current contract through them and they were fantastic.
I don't believe those are all the rules that hotels have to abide by
A few things, I am not attacking your position against war. I am saying that Russia needs to be dealt with and it needs to happen sooner rather than later.

I am not advocating for war but I am saying that when dealing with things like this you have to prepare for the worst. There is one superpower here not two. You cannot let them do what they want and there has been real innocent bloodshed already because of Putins actions and positions.

I think we are closer in our line of thinking than it seems. I have a family and I would never advocate to end life on this planet. I am zealous about letting someone like Putin go with zero punishment because history has shown us time and time again where that will take us.
What's mentioned is the Multiple Dwelling Law, which covers the '30 day' aspect.

The 30-day aspect is related to tenant protections that kick in after 30 days. It's not a random choice of timeframe.
ESlint: The pluggable linting utility for JavaScript and JSX
Donald Trump's donations page is powered by Stripe
There are two different propositions here:

1. "If the state has a say in renting a property then it's not really the proprietor's property".

2. "If the state has a say in renting a property in a way which has no effect on neighbours then it's not really the proprietor's property"

The person you replied to was arguing against proposition 1. You seem to be arguing in favour of proposition 2. Perhaps you are both correct?
Please check https://www.reddit.com/r/Surface/search?q=surface+book+issue...
Isn't this post about SSD performance on the iPhone 7, whereas this page is about cellular performance of the respective broadcomm and intel chipsets?
If that's what they are, why aren't we already at war with Russia?
This is an awesome idea! I'd love to sign up but I feel uncomfortable giving all my email to a website with no privacy policy, any chance that's coming soon?
> I am not advocating for war

Like I said, you won't find anyone who disagrees (not here anyway), but you gotta know people are arguing with you because you are, in fact, in your other posts, advocating for war - even if you didn't intend to.
Even the incitement or "fighting words" doctrine is limited to specific face to face threats: https://popehat.com/2015/05/19/how-to-spot-and-critique-cens...
Any downsides to using this? I'm tempted to start using it, but I'm not really sure if there's any particular thing I should consider first.
The man doesn't owe you a goddamn thing, and doesn't have some moral obligation to save you from shitty payment processing. You act like you rose him out of the ashes to save humanity and that's simply not the case.
I realize I sound like Captain Hindsight here. But.

The thing is that I think we don't need to repeat histories mistakes.
I haven't particularly studied punycode, but since I first heard of it I keep thinking that it at least seems like it mitigates one set of collisions by allowing a different set of collisions. I mean, it seems unlikely someone would want the domain Mnchen-3ya.com, but wouldn't the city of München still be able to impersonate that person?
Well, I suppose the difference between this show and say Game of Thrones, or Breaking Bad or something (two shows that I have enjoyed) is that they don't think they're teaching me something philosophical. At least, not overtly. Black Mirror is extremely overt and heavy handed in its moralizing.

I guess it feels sort of condescending, but from a place of ignorance. It's ok to repeat trite cliches and tropes culled from the latest medium articles on futurism, but if you're going to do that, weave it into a compelling narrative, don't try to appropriate those simple ideas and claim them as your own. And that's sort of the vibe I get from Black Mirror - that its writers think really highly of their insight into the interplay of technology and culture, but I find that insight to be pretty shallow. And i'd be tolerant of that shallowness of it was a more background element of a more compelling story (say, The Matrix), but Black Mirror feels to me like it takes it self undeservedly seriously, if that makes sense.

I realize the foregoing was sort of rambling, but it's a little hard to articulate exactly why it rubs me the wrong way. I certainly enjoy plenty of things that could be said to be trite, shallow, or even stupid. But I feel like those things know their place and Black Mirror doesn't.
Airbnb doesn't seem to mind saying that New Yorkers want airbnb because "thousands" of them say so. Doesn't seem hard to imagine there are a thousand New Yorkers who don't, justifying the opposite claim.
In the article it notes a drastic increase in housing prices and a massive drop in development after the passing of prop 13. I didn't see a graph so it could be wildly exaggerating the impact of prop 13.
It shouldn't be legal to tell someone who owns a home that they cannot rent it out.

That's not what relevant the laws say ("You can't rent your property, period!"). Just that you can't use a residential property as a de-facto hotel.

If you and your neighbors get together and decide the community cannot abide someone allowing another person to use their house for less than ... what 6 months?

30 days. The point is that short-term rentals have a very different character (in terms of impact on neighbors, and impact on property values) than long-term rentals.

This is just whiny bullcrap from someone who wants to be able to control their neighbors.

No, it's just life the big city. Though I agree that whether these issues should be of interest of the state (as opposed to municipalities) is very much open to question. Then again, the Empire State is known to be messed up (and to have lopsided control over) a great many things, in this regard.
Because it's dismissive.
Colonizing Mars: A Critique of the SpaceX Interplanetary Transport System
Hillary specifically promised to treat a cyberattack with all possible responses including military.

This woman is dangerous.
Railing against `curl https://foo/ | sh`? I guess security theater's not just for the TSA.

(Do be aware of pastejacking though, but this is not nearly an important enough issue for a wall of shame)

EDIT: We can all learn something from the readability of that page though. One zoom and it's better than 90% of the websites I've seen. Text -- it works.
I remember reading the same about american submarines installing unknown devices on underwater cables.
It's amazing how widespread the idea that that, because it's legal for private organisations to take down whatever content they like, no-one should criticise them for it has become. However could this belief that benefits those with immense influence over the public discourse have become so common?
"War is peace. Freedom is slavery. Ignorance is strength."?
What are you talking about? The law only affects the city, not the whole state.
"with some guests".

Where "some" is "68 in 21 days".
Doesn't Google already have the infrastructure to deal with an attack of this magnitude? I remember recently reading about Krebs on Security moving to Google's Project Shield service: http://www.zdnet.com/article/google-rescues-krebs-on-securit...
Many of us in the industry hope not.
The first episode was absolutely abysmal. Completely unbelievable, and horribly written.

I stuck around to watch the second episode, which was at least tolerable, but I got bored and stopped after that.
What "backdoor access" are you talking about? These botnets spread via static admin passwords.
I think a problem that you might be overlooking is that DNS lookups aren't just failing, they are also very slow when a DDOS attack is underway on the authority servers. This introduces a latency shock to the system which causes cascading failures.
> She was a good listener as well as an eloquent speaker. As she understands well, the President of the United States needs to understand and be engaged with wider world issues, rather than be consumed by petty personal quarrels.

Well that is her job and has been her job for most of her life. To talk sweetly. But looking at her track record, the above quote is laughable and means nothing at all. Absolutely nothing.

This is such a pompous piece of crap and I am glad to be leaving Virgin ASAP!
This might be attacking the wrong issue. How about making it easier to create packages for major distributions? (this includes Windows and macOS)
Speak for yourself. When I see the "desirable" houses, all I see is endless painful maintenance, and long travel times. Massive apartments means proximity to work and recreation (possibly even by foot, or at least mass transit) and shared public spaces and parkland instead of teeny isolated gardens.
Is it confirmed yet that so-called IoT devices were the bots?

Bruce was on point if so, arguing a couple weeks ago that accountability needs to happen on the manufacturers:

"What was new about the Krebs attack was both the massive scale and the particular devices the attackers recruited. Instead of using traditional computers for their botnet, they used CCTV cameras, digital video recorders, home routers, and other embedded computers attached to the Internet as part of the Internet of Things.

Much has been written about how the IoT is wildly insecure. In fact, the software used to attack Krebs was simple and amateurish. What this attack demonstrates is that the economics of the IoT mean that it will remain insecure unless government steps in to fix the problem. This is a market failure that can't get fixed on its own.

"

https://www.schneier.com/blog/archives/2016/10/security_econ... ("Security Economics of the Internet of Things")
Are you legally allowed to run a hotel in/on your property, and is it properly zoned?

Adhering to the few rules you listed above doesn't mean you follow ALL the same rules as hotels.

(Not implying that in your case you're not zoned correctly or following ALL rules, but certainly many airbnb properties are non-compliant).
The Tesla Model S Is Absolutely Not the Best-Selling Luxury Sedan in America
Isn't "zoning" the primary reason why NYC real estate is so expensive in the first place?

More directly, it's one of the reasons NYC real estate is so valuable in the first place. The way the city has managed density (and parks, open space, and its waterfront) has in general worked out pretty well, over the years. Which has helped the city thrive in ways that its direct competitors (such as Boston and Baltimore) have not.
afaik Shield is for select journalists only, not for typical web infrastructure.
I don't disagree with the author that it is a huge security risk. But this is yet another example of a software enthusiast who doesn't get the value of convenience. In fact, "convenience" is probably the first attribute of great software.

So again, while I agree with their general sentiment, being "baffled by how [oh my zsh] became so popular" just because it instructs users to curl pipe shows that they don't get the core issue at play here.
It does generate verilog, but there is quite a lot of glue which you need to run that verilog on an fpga. And all this glue is proprietary(I heard some rumblings about open tools being pretty limited), you need a license to use the compilers which compile the verilog to bitcode.
"curl | bash" isn't actually very different security wise from "download this piece of software from our webpage and install it". Every time you install software these days you put a certain amount of trust on the vendor. (This may change in a theoretical future of reproducible builds and binary transparency logs.)

I'd argue that "curl http://.* | sh" is always bad, but so is every webpage offering software downloads that isn't https by default (and there are plenty of them).
This is a great point, and I didn't mean to downplay it. As much as anything, I was interested because you offered a time/size progression of attacks and I saw a chance to study it against total traffic.

I've been really selective with the reporting I checked, and so most everything I've seen has been either BBC-bloodless ("these sites are inaccessible, because a DDoS attack happened"), or TheRegister-sophisticated (assumes the reader knows what DNS is). A quick look at what other people have been running explains your general sentiment. This isn't the end of the world, and running stories saying "IoT WILL KILL US ALL" isn't making anything better.

So fair enough: I think this is a serious issue, and today's events revealed that people haven't been properly prepared. But pitching it as something totally unpredictable is downright dishonest.
Belgium is an America loving country though, like all of western Europe as far as I know, and Americans usually quite aware who the friends and 'terrorists' are. I wonder if AES had been from, I don't know, Kenya or Kazakhstan or Bolivia, if it had had much chance at all (though I'm not up to date on the exact America-sentiment in each of those countries, we hardly hear about them in Western news).
That specific setting controls the latter.

There are separate controls for data collection (e.g. turning off Web History).
Nobody’s mentioning the 1st Amendment here. People are arguing principle, not law. You should let people speak their mind, no matter how offensive it is, or how much you disagree with what’s said, you still should be capable of listening and being able to criticise the content of the speech, not the speaker.

As a side note, it’s easy to argue that the xkcd comic is false, since banning a person from a public forum, effectively takes the person’s ability to speak. If somebody doesn’t want to listen, they don’t have to, but taking someone’s right to communicate their ideas is cowardly and uncivilised.
Yes, or perhaps xmodem or zmodem.
I think the main problem is that the Internet is decentralized. As it has no single owner nobody is responsible for mitigating the attacks and noone wants to pay for developing and implementing new protocols, installing new hardware.
Medium acquires superfeedr (May 2016)
TRUMP OR TREAT – DON'T RAPE
Also see https://curlpipesh.tumblr.com/
Granted, but the countries negotiating this treaty already have functional court systems to adjudicate who is wrong or right and to what degree. I strongly disagree with supplanting existing conflict resolution mechanisms that evolved over many years out of the choices of the local citizenry with an opaque, supranational entity whose rules of engagement were negotiated in secret, reflecting primarily the choices of large businesses.
Yeah, you'd think. But when you get hundreds of emails, along with other day-to-day tasks to keep on top of... it's easy to let fall by the wayside.
Unless you're installing from a package manager with signed packages everything is going to suck by comparison.

What exactly is the alternative the author would suggest? Git checkout? Couldn't you paste-jack that too? If the instructions come from a webpage, aren't they all basically paste-jackable? What is the specific issue with using this method?
Where Wizards Stay Up Late is a fairly dry book, but it contains interesting kernels of information (like this). It's not a page turner, but it's worth a read if you are interested in things like, for example, the information in this comment's parent.
Well, the fact that people still remember goes to show what a truly terrible idea it really was and that it probably did permanent damage to your brand.
There is no reason for microsoft not to expose the fabric to customers of Azure. I am sure there are applications out there which can benefit by being able to synthesize their own code just like microsoft did for its bing search traffic etc.,
Folks, not all apartment units in New York City are big, crowded buildings with long hallways. You're forgetting the Multiple Dwelling Law affects multi-family houses, many of which (especially in Brooklyn and Queens) were single families build in the 1890's that were converted to 2, 3 or 4 family structures in the 1930's.

I'm not ideologically against regulation, don't get me wrong, but I DO recognize that sometimes 'big hammers' affect big and small scale landlords equally, and that's not fair. And quite frankly if you're disrupted because I'm AirBNBing one of my units, just come down the stairs and knock on my door and we can talk about it.

Joking aside - New York housing laws need to do a better job, whether it's housing code, fines, or anti AirBNB laws, of distinguishing between big and small scale operations.
If so that's a quick turnaround.
It's been fashionable to blame China not so long ago.
Can you not click the link to the bill and read all two pages of it?
Rijndael, the Belgian cipher in question, famously won a very well-regarded cryptographic contest to obtain its role as AES. "Belgium" has nothing to do with it.
Ok, then they should be liable for any damage their lack of maintenance causes. The cost of properly maintaining your product is nothing compared to the lost business and repair costs caused by these DDOS attacks.

Being a small company doesn't mean you should be able to ship a defective product that is guaranteed to eventually become part of a botnet.