skysight-inc/HackerNews huggingface dataset:
There's overlap, at least in CA. My company has a license with the CA public library system, which includes some educational libraries. Libraries also perform educational functions—our tools are used by literacy tutors in libraries, in much the same way that they are used by teachers/students in classrooms. So for some products, these guidelines are probably relevant, but for other (e.g., infrastructure) products they're probably much less relevant.
Before filtering is implemented, it makes sense for ISPs to warn their customers that their hardware was involved in a ddos attack. Analyzing historical data is typically much easier than real-time.
Well one upside of not being a Unicorn is that doubling the infrastructure/hosting costs for a project that's at a "cup of coffee a day" or a "diner and a movie a month" budget isn't a showstopper. Doubling Twitter's infrastructure costs would not be good...
Are you Ken M? https://www.reddit.com/r/KenM/comments/4944og/ken_m_on_the_c...
If Martian colonists can manufacture something using 3D printing, Earthlings can also do it, and probably a lot more cheaply, because all the necessary ingredient and parts (and even customers) are within forty light-millisecond, instead of ~20 light-minutes.

The economy is just not going to work.
From BHP to Nasdaq, Blockchain Starts to Pop Up in Real World
Unix directory hierarchy history
> Sometimes ref-counting (Rc<T> in Rust) is fine, although that's more expensive than GC.

This is a very interesting and hard comparison to make.

The marginal cost of GCing one more thing is much less than the marginal cost of RCing one more thing. But you need to pay the cost of the GC runtime to get there, and Rust doesn't, so it's a rather hard comparison to make.

However, the cost of RCing something itself is pretty small (and you don't RC very often in Rust anyway), so this rarely matters :)
The malware hardcodes 62 common username:password pairs like root:12345 [0] and apparently there are millions of IOT devices out there where these trivial passwords will get you root.

[0] https://github.com/0x27/linux.mirai/blob/6d5a3e2760852444de9...
Mars 2020 is designed yet, you can view its design and experiments here: http://mars.nasa.gov/mars2020/

Sure, it may not be fully officially built, but it has been designed almost to completion.
NIMBYism (in the form of parking minimums and height/density restrictions) are one of the main causes of that housing shortage you mentioned. The fact that permanent residents feel like they are locked in a tight competition with short-term visitors is a symptom of the problem, not the cause.
10 Geeky Halloween Decorations
That was a pretty good ELI5, thanks.
So cool...
I mean, one of the largest manufacture of generic Cherry switches is Kailh, who manufactures thousands of automotive limit and button switches.
From what I know of the situation (don't trust me, I'm not going to offer citations or sources), this attack wasn't particularly large in terms of gigabits/second. It was, however, very large in terms of economic impact.

I would assume that when a large number of big enterprise-y things go down, HSI takes notice. When other providers get attacks that are 20x larger (gbit/sec), but have much less widespread impact and impact on less enterprise-y things, they don't care so much.
A Swift Serial Port Library for Linux
There's also the possibility of starting a greenhouse effect on Mars[1], which would make it more habitable. No such possibility on the Moon.

[1] - http://www.nbcnews.com/id/6908408/ns/technology_and_science-...
As an Australian, I always muse at what people consider expensive.

http://www.globalpropertyguide.com/most-expensive-cities

There is only one city from the US on that list (New York) of a hundred cities. Sydney Australia is 18th.

And you want to talk about bubbles?

http://www.economist.com/blogs/dailychart/2011/11/global-hou...

Australia tops the list (and Sweden, apparently). That list indicates the price of real-estate has tripled in 15 years.

So yeah...
And you think they are talented and non-retarded beause?
Mozilla Turning TLS 1.3 on by Default with Firefox 52
Yeah i think its about the same thing.
500 Startups Announces 18 New Investments in Latin America
Yup, you guys reinvented docker
In that case, who's responsible for keeping the anti-malware software up to date... and paying for it?

Or maybe that's going too far and the first step is to just have them encourage / force more secure passwords.

(Assuming this is correct [1]):

> Mirai functions by infecting IoT devices by trying to brute force their passwords. The tactic it uses to brute force passwords is entering commonly used and default passwords.

[1]: https://en.wikipedia.org/wiki/Mirai_(malware)
AWS was affected at one point.

I fully agree with you about the paradox of how, in the intent to de-centralize we centralize into cloud VPSes and managed services.

The real reason for the move is that same showtune that we keep hearing in our heads and wish we could tune it out: it's cheaper to move from physical infrastructure to the cloud. It's cheaper to skimp on security by not updating IoT devices. It's cheaper to skimp on security because features need to come first. It's cheaper to outsource operational management to parties with less expertise in places that pay less. To spend less time securing infrastructure perimeters because it costs money.

We feel almost as if we feel comfort hiding behind heavyweights like Google and Amazon will protect us from the bad elements of the world, where we hear about major breaches every few weeks (eg., Yahoo being the most recent). Will this strategy pan out long-term?

With this DDOS, articles about machine learning picking up better password-cracking/guessing algorithms by having previously analyzed large volumes of passwords, major breaches in the financial world, talk of state-sponsored attacks (a la DNC emails) it certainly FEELS like the Internet has gotten a little bit more wild.
The Perils of Peak Attention
Since the vehicle design is based on Opportunity, I would say the biggest news is the array of sensor/instruments on board: http://mars.nasa.gov/mars2020/mission/instruments/
I'm just happy to see that kids these days still say "greetz" in their github/BBS posts these days.

Or maybe this is a greybeard hacker?
Would longer, say, week long TTL along with some redundancy have prevented this problem? Can it be done now to prepare for next attack? That is, TTL shortened when making updates, etc., but then set to a week the rest of the time. Here's an article that I think could be useful:
https://medium.com/@brianarmstrong/youre-probably-doing-dns-...
I think this is what you are looking for: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...
DDOS usually occurs via a botnet of infected networked devices. Thus, the attacker is getting their resources for "free" since their host is unknowingly wasting CPU and bandwidth during the attack, while the defender is paying for theirs.
Strange, I see many people saying the same thing, but Ive hardly had any issues at all, though it was/is undoubtedly less stable than Windows 7. I decided to just let it auto-update though, perhaps that or other different config/usage is why.
The trouble with Ya Ain't Gonna Need It is that its counterpart You Are Gonna Need It has the same acronym.
Dowse is trying to help you out http://dowse.eu/#sec-2-2 Dowse is a transparent proxy facilitating the awareness of ingoing and outgoing connections, from, to, and within a local area network. ... Dowse communicates with users in various ways: via a web interface, but also pushing messages via audio (synthesized speech), Bonjour and simple apps interfacing with personal mobile devices.

You can even hook up Dowse to your TV set and show a live animation of where on the your internet your devices connect to https://youtu.be/vquh3IXcduc?t=74
I believe it has a long-reaching effect, but not "exponential", at least not along any axis I know of.

Does firing 1000 people have a more than 2x effect than firing 500?

Unless by exponential, you just mean "a lot".
Because they're intelligence agencies.
True - over the long term it has more potential.
> it doesn't solve the primary issues of algorithmic errors

SPARK does more than described in this post, and you can indeed use it to verify correctness properties of your algorithms. If I remember correctly, it interfaces with Why3, which is itself a platform for interfacing with many many provers like Z3, Vampire, CVC4, etc.

SPARK does more than just "sophisticated code analysis". If you ask it to.
Pay for use billing would go a long way.

People running insecure networks and devices should feel a financial hit.
There is no general C++ ABI, the ABI depends on the compiler and the standard library.
I totally agree. I'm working right now as a remote Scala engineer, and while I was job hunting, I saw more remote positions for Scala/Spark than any other stack. (At least within the world of data engineering)
Venezuela's closest ideological match Cuba does a much better job of providing healthcare for its citizens, and Cuba doesn't have any oil wealth. Wouldn't that indicate that the problem is with Venezuela's regime specifically?

The GDP has tripled, yet the average citizen's health and purchasing power are worse in the same time period. Where is the money? What kind of socialism are they building when even poor stagnating Cuba manages to look like a positive example?
You can't change the contents on a user's local storage that they've verified.

Curlbash lets you change out offerings at will, and leaves no auditable source for the user.
> the server that's hosting a leak

Honestly, that's fairly thin. WL uses torrents and other means of disseminating data that don't rely on central control structures. Plus, presumably, WL has the ability to quickly shift data into secure hands who are willing to release it when things quiet down.

So, sure, the USA could go send someone to sieze the hard drives of someone who has confidential information. But, I have to imagine one of the first steps when getting that kind of information is to disseminate it to others (at least some of whom are unknown to the states). If they were hit, these people would very quickly take that as a signal to indiscriminately release all the information.
Yes, I expect that more advanced active shielding will eventually be developed - particularly since you can detect solar flare events before the radiation arrives.

The challenge with flares is that the radiation can come in from multiple directions, so a cylindrical water container that people can pack into is probably a better defense than just the bulk of the engines.
The french SNCf is a good dxample of a vertical integration not working. Constantly bleeding billions of euros of deficit, trains late, strikes on regular basis, this is just the worst.
Sure - I assumed that's what the large organizations were doing but for the sake of explanation to those who didn't understand why the problem existed in the first place I didn't want to complicate my answer with something even more complex :) Appreciate your help doing so
Is EM radiation that can't be blocked by sheets of metal really an important problem? It looks like we can use magnetic fields to block charged particles and apparently that's good enough for space travel - but perhaps not for a person's whole life.

http://www.sr2s.eu/project-news/19-eu-space-project-will-all...
I mean, taking normal prose and putting it in a pre tag is kind of a silly practice. I know we're hackers here and everything but that's actually not a great way to display anything but what it's intended for.
Indeed, I think most of the harms of curl | bash fall under operational rather than security. To add to your list:

6) reproducibility: vendors could version the download links but I've not seen that done, so you're always getting the latest version which depending on what you're doing might not be what you want.

7) uninstall: maybe the vendor was nice enough to include an install script? Sure with deb/rpm a vendor can screw up the uninstall but the framework is there for them to do it right, with curl | bash the vendor needs to understand that's something they need to do and implement a solution on their own.

8) am I really running bash? And the version you expect me to be? Hopefully your distro isn't evil, but I have more than once found bash just a sym link to something less feature rich. Same goes with older versions, you'd be surprised what features are "new"

I also find it a bit odd because the cranky old sysadmin who solves everything with unintelligible shell scripts is often made a mockery of in this world of saltstack, docker, cloud and other buzzwords - yet now we're just signing up for an even worse version of it?
Curious: why use the managed hosting if you are a privacy enthusiast? Or are you just a sandstorm enthusiast? Why? Became nits not Google? Just curious since your every comment is about it...and it looks like you are wearing Google glass...
> Admittedly, it did have some authentication for accessing the video streams, but I didn't trust that thing as far as I could throw it

So...you wanted to have authentication and it has authentication...I must be missing something.
> is was anybody prepared / preparing for a DDOS on a DNS like this

Yes.

I have, personally, been under attack with as-large or larger than todays attacks at my DNS infrastructure and survived.
For reference, the earlier Krebs attack is quoted on Wikipedia as being 620 Gbps [1]. I'm not sure it's really comparing apples to apples though with this being at DNS level. ~2x the traffic sure, but at a layer with a lot more impact on everyone, so the outcome is much more than ~2x worse.

[1]: https://en.wikipedia.org/wiki/Mirai_(malware)
> there is no difference between piping a script directly into bash and downloading a package and installing it

Well then I guess you haven't seen this, in which the server detects whether the script is being downloaded to disk or piped to a shell, and adjusts the payload accordingly:

https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

i.e. when you download to disk and look at it, it looks benign, but when you pipe it to a shell, you get owned.

Just say no to curl|sh, kids.
Even if you're under the voting/driving age, any Korean citizen over 9 years old can ask to get an ID card for opening (non-credit) bank accounts, taking tests, getting discounts, and accessing various government services.

I live in a low-income area where lots of kids are on their own because their parents are alcoholic, disabled, always away, etc. The underage ID card helps them navigate the world.

It baffles my mind that anyone in the developed world in 2016 should be unable to prove such basic things as who they are and what country they belong to. If we're going to have pervasive surveillance, at least we should get some benefits out of it!
I'm skeptical of how effective a simulation of a trip to Mars would be.

There's just a huge psychological difference between knowing that you're in space, millions of miles from Earth or any kind of help and knowing you're in a simulation on Earth.

I suppose it's possible to fool people that they're in the former while actually being in the latter. But the ethical issues surrounding such an experiment would make it out of bounds for NASA. It might make for a fun scifi story, though.
A lot of providers do have 'fixed' portions of costs, so, it won't be quite 1/2 or 1/3rd.

It may, at scale, be like 100% (one provider), 55%+55% (two) and 40%+40%+40% (three). Still eminently affordable.
> Over-Engineering is when someone decides to build more than what is really necessary based on speculation

This is so wrong, in the context of software at least.

Over-engineered software has layers of abstraction that add nothing to the function or form of the product the costumer sees - it is over-engineering for the sake of ideological notions about design patterns etc.

As for functionality delivered to the client, software very, very rarely gets over-engineered - in reality it almost always gets delivered late and with core features still in development. The idea that there is all this software being delivered on time that not only meets 100% of all the original requirements with exacting quality and perfection, but is somehow delivering in gross excess to the point of giving customers more than they need is pure fiction.
If you don't think a space colony would have overengineered multiple redundancy against depressurization, you don't understand the psychological effect that vacuum being 6 inches away would have.
Probably no more fascinating than what we've seen of human evolution on Earth already. If you were living that far in the future, the differences between Earth people and Mars people would be mundane common sense to you already, just as we're not fascinated by how different chimpanzees are to humans.
Author here. You are right, I did not know the name of the thing because English is not my primary language. Thanks for teaching me that, I have edited the picture caption to show the correct description of the image. Thanks!
+1 for TinyDNS.

I just wish it scaled to multiple cores :(
Re:industries, you don't think that the fact that education is about humans, rather than say.. power grids, or financial instruments, or mines, or laundry detergents.. makes it at least somewhat different from other industries? Or that those being served (children) are often not in a position to be the sole determinants of what's best for them, and thus your buyers may not be your users (and all that entails)?

Re:physical forces, there's actually several that have defined why education is a certain way today, and that will shape it in the future. Probably the most powerful is that it's first and foremost about human relationships - foundations of values, trust, physical presence, belonging, etc. And the second most powerful is that poverty is a physical context that shapes outcomes in the most profound of ways. I only bring these up because a) they're taken for granted by many tech entrepreneurs who did not have to worry about them in their own lives, and b) they're the reality tech entrepreneurs grapple with when they focus on the core of education problems, rather than the periphery where most wind up.

You sound pretty dead set in thinking you've got this though, so I wish you the best of luck.
Sorry, you'll have to explain what you mean instead of referring to dark mysterious stories that we don't know.
Right, the challenge is mainly that the first missions will have to carry a lot of cargo (priced into the cost of sending the crew) and that it'll be easier to bear the cost of development and construction if the early missions have a higher price.

Even if the cost for the first few trips was $50 million per person, there'd be no shortage at all of people who would be paid for by governments or organizations with that kind of money. Might as well use it, and apply these funds to expanding the program.

Full reusability is really the essential part of this system - you can't afford to throw away any stage of a rocket this big. Fortunately, the larger the vehicle, the easier reusability tends to be (up to a point of course).
Good catch! That was a typo. And very good remarks on how to relate that to the real world, definitely agree with that!

(Btw I have fixed it :D)
Rewriting is rarely a good business decision. Companies have already invested time and money and changed their internal processes. I maintain and fix what they have. If they decide to replace it I am usually the first developer they offer the job to.
Outcry is one of the mechanisms that dissuades censorship on privately-owned mediums. Let's have more outcry please.
I focus on web applications and most of those are PHP and MySQL. I have worked on other kinds of code in the last ten years though. Ruby, Python, C#, Oracle, C++.
How does this affect the validity of the original statement?
We ask supporters to stop taking down the US internet. You proved your point
doesnt matter because Intel modem is practically free. Intel is subsidizing it at the Atom levels from few years back, in other words Intel is paying Apple for the privilege.
Well, this is unbiased again.

From the article:

"Martin learned to speak Russian at some point in time and proceeded to communicate with unnamed individuals online in Russian and potentially other foreign languages."

From the actual report, quoted in the same place:

"The Defendant has also communicated online with others in languages other than English, including Russian, and in June 2016 downloaded information regarding the Russian language as well as other foreign languages."
https://weakdh.org/logjam.html even uses it as one of the examples. (the site has since been fixed)
Please prove that the models of client change are used politically. You appear to be trying to dismiss concerns around climate change are some kind of irrelevant politically driven scheme. Asserting that it's a conspiracy, only politically driven requires some evidence. You can't dismiss it just on your whim.
Not really representative. JavaScript is used in almost every web app (like HTML) but pure JS (i.e Node) jobs are rare compared to PHP, which isn't even on the second list. Likewise with SQL: every web app uses a database.
Off topic question: If I was to find a job right now, what's the best "engineering company" I can work for?
Vacuum-gapped computers, anyone?
> The market has demonstrated that hotels and similar will be built until supply mostly meets the demand.

Actually I think what we're seeing is precisely that this is not happening. If that were the case, hotel rooms in NYC would not cost 2-3x what they do in the suburbs. The price is high because short term rentals are scarce.
Have you ever wondered why Mr.Robot character Darlene used old VHS camera setup for the demands videos? Digital camera fingerprinting (beyond metadata) is a real thing.
Yup, that's one restriction on supply. Other restrictions include:

1. Limits on the height of new buildings

2. Limits on the ability to demolish or extend existing buildings

3. Limits on the minimum size of new apartments

4. Limits on the number of people who can live in an apartment
"Musk said 5% of SpaceX is working on the project and that number will increase over time. That's already 250 of the smartest engineers in the world working full-time on the Mars project."

Correction: some of the smartest engineers in the US, maybe. But US laws don't allow SpaceX to hire anyone from outside the US.
You might enjoy The Expanse book series! There are several world-building tangents that delve into exactly this area.

I'm thinking (no spoilers) specifically of how Ceres, having been spun up to provide artificial gravity, becomes a destination for expecting mothers trying to avoid complications associated with low-G.
As someone whose career has revolved around education, I have to say I'm a bit disappointed with these guidelines. The focus is entirely on formal schooling as opposed to education.

The problem is that "widely accepted standards", especially in the US are sub-optimal in terms of educational outcome. Even if Common Core were great (which is not the case), continuing to improve pedagogy and curriculum should be ongoing goals. Similarly, why push people to use a closed system such as Lexile® for rating the difficulty of reading material instead of something open?

On an even more basic level, should edtech offerings be limited to children living in the US at all? I would say no. Most Americans aren't children and most humans aren't Americans.