skysight-inc/HackerNews huggingface dataset:
Splat. Not sure if that is a landing site or a crash site.
>towards being The Federation and not The Borg.

what is wrong with the Borg? I mean emotionally we all dislike it, yes. Yet speaking objectively, the Borg is the naturally highest state of developed life we can conceive off. Atoms makes molecules like proteins, lipids, etc., the molecules make cells, cells make organisms, organisms make society... The same cycles of assembly/integration and specialization, basically the same 2nd law driving life at different scales. Looking at the level of integration and specialization our society has so far reached i'd say it is just the level of primitive multi-cell organisms. The Borg is the natural state of society when the level of integration and specialization increases, and increasing of that level is just the 2nd law gradient in application to the live systems. Resisting it is just like insisting on staying "free" single cells instead of combining into organisms. The organisms would see the stars, the cells - no.
Possibly stupid question: why is that no longer done?
I have a shop on etsy.com. It is functional at this time (1418 PDT).
> They want a jerk and they want a nice guy.

It's like the female version of the Madonna–whore complex

https://en.wikipedia.org/wiki/Madonna%E2%80%93whore_complex
More specifics about Mirai bots and their numbers:

https://threatpost.com/mirai-bots-more-than-double-since-sou...
Remind me to populate my /etc/hosts file after this blows over.
To me it seemed to be written entirely as a joke. The idea being that this is an example of inherit goodness in the universe that we don't often see since the entire model is based on ever-dwindling entropy. The universe is pessimistic by nature if you think about it.
ultradns.biz has been down as well.
Now that I think about it more, it's even worse than that. A bogus non-DNSSEC resolution and a forged cert, both of which are real-life attacks that have actually happened, and you're done for. Compromising an IP isn't really necessary if you're going to hang on to a bad one forever, but it's a nice add-on. It removes the need to take out the DNS provider, but we can clearly see that that is possible.

Keeping the balance between security and convenience is difficult on the best of days. Today is not one of them. :/
Sell it as a discount for passengers who are willing to stand, _luggage_in_hand_, on the scales to be weighed.
For the same reason it would be inappropriate to blame you.
When your business depends on your infrastructure being up and running you try to prepare for anything. Then again Twitter is down so...
That's a really cool paper. While I wouldn't say they're doing better than a human (I really think they're twisting semantics with that one), it is impressive and I hope to see a lot more progress in this area. Thank you for sharing!
While I typically would support a tech company, and this is not to say that I'm not pro-technology and want smarter legislation to keep track with technology advances, the opposition does have some good points.

Having only recently become able to afford my own apartment, it appears to me that this legislation is, at its core, designed for the purpose of renter protection. Housing prices are literally insane in metropolitan areas across America. (LA here). Illegal sublets are already endemic, and were I to own property, or even have a year long lease, the ROI from AirBnBs/subletting would definitely be enticing. I won't assert I'm a moral paragon, but there are many landlords less scrupulous than I am.

The problem is that, with AirBnB and sublets come ever increasing rent, eventually pricing huge numbers of people out, which drives down productivity and growth. Uninhibited illegal sublets/hotels create a weird bubble at the very bottom of the housing market, which serves to exert upward pressure on prices across the board, since if one room is now worth $800-$1000/month, a studio apt jumps from $1100 to $1300, and so on and so forth.
This is yet another reminder that it's important, especially for HN readers, to continue to give support to groups such as Mozilla and their Firefox platform. The more widespread Google and Chrome usage is, the more Google can push these changes with little to no resistance.
Not people who use "whom", apparently.
So if I have to stay in NYC for 3 weeks, I am screwed.

Thanks Cuomo, you just made me have to cough up double the price for a shitty hotel.
if you type

!year girugamesh

vs.

girugamesh

you definitely get two different sets of results, one general, and one discussing the term in retrospective (with urls denoting /2016/ for example). I think they don't highlight it well, but the filtering is definitely going on.
Probably, but I would definitely avoid giving all my DNS resolutions to a *.ru domain.

The reputation of the government - shutting down access to websites that hurt them is kind-a no-go for me.
Not only East Coast, Twitter can't be resolved in Ireland/UK right now (I assume the mobile app uses some kind of 'dns pinning' as that is working)
I spent many years in the ColdFusion ecosystem, not just developing, but running a user group, speaking at conferences, etc. I moved to Rails for the most part (still support code on Railo and OpenBD however) mostly for a much richer ecosystem (like the many background jobs options, CodeClimate, Rails-specific PaaSes, etc)
>The legislation allows you to rent a spare room in your house. What it disallows is having an apartment you rent out in full on AirBnB, either doing that exclusively as an income source or yourself staying elsewhere whenever you are renting it out. [...] If you are renting an entire apartment out on AirBnB full time, you are deciding to run an unregulated hotel rather than rent a traditional long-term lease.

As you acknowledge, there are things in between renting out an apartment full-time, and renting out a spare bedroom. E.g. renting your apartment for a weekend when you travel. This makes it possible for many people to afford to live in NYC.
The clickbait here is absurd.
That's fair but I don't think that how other countries react to what people do in public it should affect how companies act in mine. Ovarall yt's hard because it's unreasonable to expect someone to just not use internet services that are so convenient but it's also unreasonable to expect companies to ignore all this lucrative data that we are literally giving to them. Currently it's a Catch 22 that I've made my peace with but I understand if other people haven't.
Similarly, a single bad device on my network would block the whole of my network from the internet. It's another sort of denial of service attack.

We need IPv6 and have devices either access the internet with their own IP address or not access it at all. This solution, then, would only impact bad actor devices, not your other (non-compromised) devices. Still, not easy.
http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/whi...
> From my experience in the aviation software world, we spend a great deal more on demonstrating reliability than in producing it.

The same is true in organic produce. I hear of a lot of farms that follow all the rules to raise organic goods but can't label them "certified USDA organic" because the certification process is too expensive.
> I don't think anyone saw this particular problem coming.

Knocking half of the web off the grid because their DNS provider is under attack? It happened recently to DNSimple.

https://blog.dnsimple.com/2014/12/incident-report-ddos/

The irony is that I noticed it when dotnetrocks.com went offline, at that time dotnetrocks was sponsored by dnsimple...
https://xkcd.com/1504/
FaceTube
that's github.
"Fix" is a relative term, especially if IoT devices are in play – yes, turning off the internet to customers stops the attack, but then (at least?) thousands of people lose internet connectivity because of a vulnerability that they could very well be powerless to fix. I'm not saying it's ok with me that an army of smart refrigerators could be taking out big chunks of the web, but it's a lot easier to tell someone, "Hey, either get the infection off your computer or re-format" than it is to make someone buy new lightbulbs and appliances.
This makes a case for data caps or charging internet by usage which frankly nobody really likes. Maybe outbound caps for home users (if thats where a lot of the DDOS are coming from).
The risk of getting shut off or a higher bill if your transmitting to much data might make people start noticing and securing their devices.
> Extortion in the form of ransom-ware, theft in the form of stealing bitcoin from exchanges. (Mt. Gox, and a more recent case.)

This is exactly what I meant. I guess I could have been more clear about that.

I don't have any data to back the assertion, and honestly I kind of forgot the markets were still extant, I just happen to know that people are making millions in illicit profits from these two methods, and I've never heard of a successful preminer (which was how I interpreted "Ponzi scheme") other than Mr. Nakamoto.
> Like with cars

That's not the same thing at all. For a car to hurt somebody, the owner has to be actively using it, and doing so in a reckless or negligent manner; and furthermore, note that reckless operation of a car can hurt somebody even if the manufacturer built it perfectly. (if your car somehow did hurt somebody when nobody was using it, then the liability probably would belong to the manufacturer).

IoT devices are the exact opposite: they can cause harm when the owner has done nothing wrong, and they can only cause harm if the manufacturer screwed up and did not secure it propertly.

All the liability belongs to the producer.
If you are a chemical company you have regulation on the stuff you put out and the environmental hazard of you product and waste products.

Something similar could work for IT.
Was trying to sell my dad on getting a Chromebook, but he insisted on getting something with a numpad...
That was my point, better worded :-)
That's not how that sound be done. Just use a mix of two providers. Using your own servers and TinyDNS is silly for million/billion dollar companies.

See MaxCDN for example who uses a mix of dns providers (AWS Route53 and NS1):

ns-5.awsdns-00.com. ['205.251.192.5'] [TTL=172800]
ns-926.awsdns-51.net. ['205.251.195.158'] [TTL=172800]
ns-1762.awsdns-28.co.uk. ['205.251.198.226'] (NO GLUE) [TTL=172800]
ns-1295.awsdns-33.org. ['205.251.197.15'] (NO GLUE) [TTL=172800]
dns1.p03.nsone.net. ['198.51.44.3'] [TTL=172800]
dns2.p03.nsone.net. ['198.51.45.3'] [TTL=172800]
dns3.p03.nsone.net. ['198.51.44.67'] [TTL=172800]
dns4.p03.nsone.net. ['198.51.45.67'] [TTL=172800]

Curious, are you the kind of person that runs their own smtp email server and complains about GitHub pricing being too expensive?
Hi - I made PP with a friend/colleague as a tiny side project. Because it seemed small, I thought would be more likely to ship. (Client work takes up most of my working time).

It came about for a few reasons:

1) My current main client's walls were a bit bare, which started me thinking.
2) I then wondered about nice motivational stuff for developer workspaces, specifically -- ideally more cerebral/stuff about good practice, rather than the adrenaline-pumping 'CRUSH IT!' kinda tone or funky designer-oriented posters. Oh, and no crappy jokes.
3) I like the Zen of Python, even years after discovering it.
4) It thought it would be interesting to ship a product that wasn't just bytes.

So, it's a static site (Pelican) + a Shopify backend + a designs from a designer friend + some cash up front to create an affordable print run + a big stack of posters on my spare office desk.

Easy, right?

Er, not quite. It's only been a few weeks and I’ve been rapidly learning that even simple physical products (rather than a SaaS, say) bring a world of complexity... Even though I had experience of the print world (long ago), I’d never had to deal with the mixed quality of print-house results (therefore reprints, therefore delays). Then there's absorbing the cost of defects and damage, plus that need to pre-buy and hold actual stock to reduce the print costs and the angst over shipping physical objects safely (including crossing your fingers when you get a Slack message saying "Hey! The posters just arrived! Opening them now!")

So, yeah, it’s been taking a surprising amount of headspace, but it is still fun – and with lots of small bits of learning (or, perhaps more honestly, small bits of realising that so much of the stuff I've read about physical products is true, even with "simple" posters).

But, yeah, at least it shipped :o)

PS: I know about the FOUC - it's an annoyance of the theme I adapted for the site, which uses skel.js to do responsive layouts (for some reason that I regret not spotting before I pulled the lever and made it live a few weeks ago)
This supply was explicitly built for longterm residents - it's written into the zoning laws. If you want to remove the concept of residential zoning, then start building that political platform. Will be interesting to see whether you choose to make residential housing conform to hotel firecodes, etc, in that platform!
This very much chimes with my experiences of enterprise IT. The change is in throwing out the new platform and putting in a new one, not in what they old and new one actually are.

I'll be interested to see if the waves of BYOD and lightly managed systems give way to a return to centralisation again, when people realise what they don't have any more, or if it turns out, as you say, to be that they never really needed it in the first place.
Stop calling naked female breasts "porn".

There is no picture of naked female breasts (breats only) that can be argued to be pornographic.

To call naked female breasts "porn" is to perpetuate female subjugation and body-shaming.
More likely to be that sergio correia guy. I heard bad things about him.
I only used nim for some side projects but the only times I saw this used anywhere is in FFI bindings.

That way you can mirror, say, C style while writing the bindings either manually or automatically and use them as if they were normal nim elsewhere.
Yeah, watching what's been down voted and flagged has been interesting. I've seen examples of both civil, substantive comments and abusive/empty comments down voted. And sometimes the former don't even appear controversial. Being new to the community, I've tried to pay attention to what is acceptable behavior.

Thanks for the feedback!
Who is "we"? The u.s. government is a conglomerate of interests, organizations, individuals... Many of whom are quite indiscriminate. I'm not at all proposing that the U.S. was involved here. I'm questioning the simple identification of the U.S. government with the word "we", and the corresponding assumption that this institution is integrated in a carefully discriminating way...
My own domain is hosted on two completely separate providers, with my own DNS server acting as a hidden master, with DNSSEC signing to minimize the possibility of shenanigans. I can have any number of replicas on any number of networks.

The issue comes when you have to depend on a single service. When you're using traffic management from NS1 or content delivery from CloudFlare, then you have no choice but to use a single DNS provider. Unless they have some special service for whoever pays enough.
10+ years ago I needed to contact someone from Google and I found this page. At the time, I didn't know who Sergey Brin is. So I mailed the guy to an email provided at the bottom of the page and told my colleagues something like:

I found a guy who works at Google, we should be all good, I just emailed him, let's see what he says.

Everyone was laughing their heads off when they asked me the guy's name.
Not sure whether it could be used in a legitimate attack (probably), but it can definitely lead to confusing behavior in some scenarios. You switch servers, your old IP is handed to some random person, your website temporarily goes down - and now your visitors end up at some random website. Would you want that? Especially if you're a business?

Also, "commandeering" an IP of a small hosting might be easier than you think. It depends entirely on how they recycle addresses.
The NT kernel has always been rock solid -- so long as it's unmolested. Microsoft made some deliberate decisions in the 90's in the name of performance that made it much less stable. They spent several OS versions working past that, and past some other unpleasant things about the Windows ecosystem.

What I've found over the past 18 years is that Apple is the best at creating an environment where I can install dev or media artist stuff, keep up to date with the latest software and OS, and it all just works -- no WTF moments or frustration. (With the one stark exception of Apple's CoreStorage volume management system.)

That said, Apple's OS has also been getting less dev friendly and more consumer oriented in recent years.
Understanding Google Chrome Extensions
DNS is actually fairly centralized the way it is actually used.

We need protocols and systems that are designed to be distributed from the outset.
I know the TTL is set really low for a lot of DNS entries but this recent outage got me wondering if it makes sense for servers further down the chain to hold onto it for longer than the TTL, honor it when they are able to get a new DNS entry within a reasonable amount of time, but fall back to the "expired" version if the authoritative server is not reachable.

I'm wondering what would be the negative consequences of this and if they outweigh the benefit of being more resilient to these types of attacks.
FWIW, I write software for servers, not clients. But yeah, I understand what you're getting at.

That said, I'm fine with folks using top of the line computers for developing, just not for testing. Nothing will frustrate you more than attempting to use an IDE on a memory and CPU starved system with a spinning rust drive. Nothing prompts you to silly shortcuts more than having a minute plus code/build/test cycle.

But once the coding is done, pull out that netbook from 2012 and make it run fast on that platform.
So then what's the problem? It just limits AirBnB to their ostensible use case, right?
Because it's hard to get an ISP to disable a service for one of their paying customers to help other people on the Internet who aren't paying them.
That's covered by their comment:
>either doing that exclusively as an income source or yourself staying elsewhere whenever you are renting it out.
That is not true; you are still free to rent a spare bedroom through services like AirBnB.
I would hope things like smart refrigerators and lightbulbs actually still operate normally when the internet is out, right? By "normally" I mean similar to "dumb" versions of the same product. So a customer could fix the issue by kicking the device off the network (disconnect the smart fridge from the ethernet / wifi, unplug the hub for your light bulbs, etc) without actually having to immediately replace them.
(Sighs) That's a good point. They mighy try to score an extra conviction on their record in same trial.
How we got 31 Product Demos Scheduled with this Cold Email and dogfed our product
> At the cost of higher temporary housing costs for people that want to visit. Addressing supply by ripping supply from a different market is a bandaid.

That's not such a bad thing. The market has demonstrated that hotels and similar will be built until supply mostly meets the demand.

No one will build affordable housing when they can build expensive housing instead.
About the speed: HN provides a real-time API for SPAs like the NX app, but it is an old fashioned serve-ready-HTML page (a speedy one). I found the API they provide somewhat slower than the site itself. I think other HN SPA clones also suffer from this.

About the site: It is working but things are sometimes not working at some places now because of the DNS attack (pages like GitHub and Twitter are also up and down today.)
This was my initial thought as well. But on further thought, it doesn't seem to be true. I think, with technology and inter-connectivity, we are getting exposed to diverse points of view more than ever before. It might eventually lead to one culture, but then that would be because we all learned from all the options and settled on the best combination.
These attacks are mostly possible because of the complacency of operators at many sites and companies. This is not a new problem and many of RFC's talk about methods for preventing and mitigating them, but most people don't care and prefer to just outsource everything to a single provider, which becomes the weakest link.

The Internet wasn't envisioned with a single email provider, single DNS provider, single app container provider. (Ok, for most of these you have two, sometimes three choices, but still, that is too few). The centralization makes everything very vulnerable - imagine what would happen when Gmail is knocked out for a day.
Yeah, this seems, to me, the most apt existing analog. We have regulation for environmental pollution, this would be digital pollution (of a sort). Insecure devices create a harm to the digital environment.

But this is incredibly hard, due to ease of manufacture and distribution, to regulate in the case of IoT devices and software.
I'm suggesting this just so someone more knowledgeable can debunk it. Suppose FBI or someone up there had a meeting and said "in three weeks, there could be millions of armed Americans who believe that democracy was just stolen from them by some evil dictator in a massive globalist conspiracy. These people love twitter. Is there a way to make twitter go down without making it look like we're suddenly pulling the plug?"
The answer was yes, we'll do a test run Friday.
So grampa doesn't take care of his car, the brakes fail and he kills a family with four kids. Is he liable? Yes. He may not know the first thing about brakes or car repair but owns the car, and he took it out on the road without being sure it was in safe operating condition.

But to steal an idea from another comment, make the ISPs liable also for routing the malicious traffic onto the internet. They will then have incentive to monitor their networks and they can take homes offline until their customers fix or disconnect their hacked devices.
I'm really looking forward to the point in the future where we look back and say, "Why did we ever think it was a good idea to allow the same company to provide the pipe, the content, and the backbone?"
Yeah, that worked for me in SV. But I'd rather not rely on anything Putin related.
"Formal verification makes your code invulnerable against a very specific (though very powerful) attacker"
In Rob Manning's book [0] : He explained how hard it is to land on Mars. It's nicely sum up in those two sentences :

“There’s too much atmosphere on Mars to land heavy vehicles like we do on the moon, using propulsive technology completely,” said Manning, “and there’s too little atmosphere to land like we do on Earth. So, it’s in this ugly, grey zone.” [1]

The recent success of Curiosity, Spirit and Opportunity must not shadow the fact that most Mars missions have failed.

[0] "Mars Rover Curiosity: An Inside Account from Curiosity's Chief Engineer

[1] http://www.universetoday.com/7024/the-mars-landing-approach-...
Or just stay at a few different airbnbs. Which is annoying, but you get what you pay for.
I love my Macbook Pro, it is great for development. The times I have to work with Windows I'm counting down the seconds until I can finish my task. In all these years I've only had a couple real issues: #1 I don't appreciate Apple updating OS X/macOS with features that send your private, local file search queries to remote servers and #2 it has a hard time dealing with smart cards compared to Windows. In every other way it's simply superior.
There was a good discussion on this in a sibling thread earlier today: https://news.ycombinator.com/item?id=12762110