skysight-inc/HackerNews huggingface dataset:
I don't know why you were down voted. Yes, Let's Encrypt does verification by requiring a site to host a string on port 80. They discover the site via DNS, and they do NOT require DNSSEC. Thus you can absolutely trick Let's Encrypt into issuing a bad cert if you can serve them bad DNS responses.

This OCR issue with Comodo in TFA concerns WHOIS data, which may or may not be more reliable than unsigned DNS data. Regardless your point remains valid.
Isn't this going from one (perceived extreme) of making sole actors able to bring content down to another extreme where no-one can bring anything down?

Does fixing the issue really mean making all material (copyrighted or not) always available and impossible to take down?
Did 40-year-old Viking experiment discover life on Mars?
Who cares who endorses which candidate, that’s out of their control. Hillary was endorsed by the Californian leader of the KKK, if you care, i don’t. I’m not making any assumptions. Hillary’s on tape calling Byrd her “friend and mentor” after his death.

https://www.youtube.com/watch?v=ryweuBVJMEA&ab_channel=U.S.D...
It goes hand in hand with the industry shift (especially for frontend tech) with considering one's GH as an essential aspect of one's resume.

I wonder how much of that shift is also just perception within a certain bubble/echo chamber, though. There's certainly a trend in online forums and startups to ask applicants for their GH profile, but I suspect this is one of those things that some employers are doing because they think everyone else is. Are those employers really then reviewing all of those profiles to see which include projects where an applicant really made a meaningful contribution and which are just token updates or yet another ad hoc, informally-specified, bug-ridden, slow implementation of half of someone else's popular and established work?

The only thing I know for sure about that sort of policy is that it would immediately rule out most of the best developers I've ever worked with. Most of those people are busy building working projects for their businesses/clients/employers during work hours, and then having a life at other times. Some do contribute back to OSS projects or help answering questions on online forums as well, but not as a resume-building exercise, and it's rarely where you'll find the best indications of what they are capable of building.
> You're very lucky you don't have an early 2011 MBP

I have one. Still works great.
No I mean ISP's that run their own DNS resolvers.
Major Level3 outages along with the DynDNS attacks.

Updated article.
Yea, it's a hard problem. While there's clearly a lot of vulnerabilities out there that emerge because it's cheaper to ignore security until you're large enough for a breach to be a big issue, forcing mandatory updates is a great way to discourage anyone from attempting to try something new. There might be a tipping point at which the costs of a breach outweighs the benefit, and maybe we've hit it already, but government mandates should be something we discuss cautiously and should prefer to avoid.
A corporation cannot sue a government for getting into a specific business normally.

It's a tricky thing: company ABC invests $1B in some industry in some country - and then that country comes along and invests $2B in a national company so that national company can 'stay alive' ... and that money is used to undercut the foreign competitor.

A lot of trade happens in traditionally protected sectors - so it's a hairy thing when foreign entities come along.

Many countries - such as China - claim 'fair trade' (i.e. WTO) but specifically use all sorts of games to protect industries, just not obvious tactics like tariffs.

This issue is almost at the hart of 'free trade' because it's all about opening traditionally protected sectors - and local actors often won't like that and will lobby their governments to 'save them' in roundabout ways.

So it's a tricky thing.

If anything, this shows that the EU is basically inept when it comes to trade deals. They will get nowhere with anyone because there will always be some little state the size of a city that doesn't like something.

Imagine if all US states and major cities had to individually approve US trade deals!
You apparently don't understand DNS. DynDNS is a very reputable DNS provider that twitter and many others use. For someone to take them down requires a massive amount of effort. Running a redundant DNS provider is expensive as all hell.
One is branded a ThinkPad, the other isn't.
Yes, but there's one piece missing.

> Here's the attack:

> - Compromise IP (maybe facebook.com)

- Attacker generates or acquires counterfeit facebook.com certificate.

> - DDoS nameservers

> - facebook removes IP from rotation

> - Users still connect to bad actor even though TTL expired

I understand what you are saying, but this attack scenario is extraordinarily difficult as a means to attack users who have opted to configure their local DNS resolver to retain a last-known-good IP resolution. It involves commandeering an IP and counterfeiting Facebook's SSL/TLS certificate. As I have said elsewhere in this thread, all sites are currently vulnerable to such an attack today for the duration of their TTL window. So if this is a plausible attack vector, we could plausibly see it used now.
>> Environmental Impact Review

Does that fit under performance standards of the quality of the build?
At work earlier we was seeing hostname resolution errors with applications trying to contact amazon s3 from on premises infrastructure.

This was in eu-west-1, but it coincided with a bunch of other systems in the organisation having problems at the same time.

Additionally CloudWatch logs seemed to be completely broken for about 30 minutes on the Amazon Console.
This. Porn detection algorithms still have a hard time distinguishing educational imagery. It was just an FP.
Waterloop: The Canadian SpaceX Hyperloop Competition Team
different hardware for different types of mission / cost
Flush your DNS like the parent said.
as a temp solution, add these to your /etc/hosts file: 192.30.253.113 github.com
151.101.44.133 assets-cdn.github.com
It would be the right time to plug in this as well then.

http://i.imgur.com/k0pv0.jpg
> Almost every laptop (and computer, for that matter) has broken down within a year to a year and a half for some random dumb reason.

Consumer hardware is crap because the market doesn't want to pay for anything above crap. The laptops break after a year because that's how long the warranty is, and the manufacturer is counting on you to come back and buy next year's cheapest model when your laptop breaks.

Go look at enterprise quality PC laptops, they cost as much as a Mac does, but they last just as long.

I can tell you stories of ThinkPads which I have personally seen run over by cars, and while the LCD is broken and the body is a bit scuffed, they still work with an external monitor.

> The one thing stopping me is the price point... $1600+, yikes.

Yup, and if you buy mobile workstations, you're going to pay that much. The great thing about PCs though is that they don't retain their value like a Mac does.

This is why whenever someone asks me for a laptop recommendation, my first pick would be a 2-3 year old enterprise laptop. You can pick them up refurbished for around $300, and they'll easily last you another 3.

The only disadvantage is that companies are afraid to innovate their business laptop line, so in a lot of cases you're stuck with laptops that have a 1366x768 screen while everyone else is running around with a $2000+ extremely fragile ultrabook, which has a 3K display.
That makes content discovery very difficult.
Good for you. I have not had anywhere near that experience. My anecdote cancels out yours.
I don't think social behaviors enter into it. Regardless of how one socializes, it's possible to derive happiness from doing things alone. Just because I derive happiness from doing things with friends doesn't mean I don't ALSO derive happiness from purely internal things. There certainly are long term consequences involved with complete isolation, but that's not really in question, I don't think.
It's hardly cut and dry: http://www.snopes.com/clinton-byrd-photo-klan/

You really need to stop listening to people like Alex Jones.
Jobs/quality of life/commute.
E.g. Denver is better at all of these than Modesto or Stockton.
As the system grows I think there are more and more players, competing for market share, trying to get low prices and high profits, and more shit happens as a result. On top of that, since it's getting more and more important, we also hear about it more.
Maybe it is time to widely adopt namecoin ?
Given that a large swath of SaaS services, infrastructure providers, and major sites across the internet are impacted, this seems harsh. Are you unhappy with PagerDuty's choice of DNS provider, or something else they have control over? I don't think anyone saw this particular problem coming.
Does anyone have a link to avoid the paywall?
Thank you :)

A little more information, considering it is public. (I had to double check if it was)

https://www.google.com/patents/US8583801
I've spoken to an Ontario dairy farmer in the past about Palm Oil and it's production's effect on the environment. He let me know that they use it in the feed, so no avoiding it through him.
Google is absolutely still doing real engineering. However, on the web side, I tend to agree with you. The core Google product is now ads-first. Their real engineering efforts have just shifted.
> load fonts from Google.

Not sure, but isn't this yet another beacon?
OK you can focus on the little nuances of whether RDP is better or not on Windows or Mac. The fact is that becomes built into windows where is you have to buy it for the Mac. You also cannot RDP from windows to a Mac. And team viewer is ridiculously expensive.

Please ignore the other fact that I stated about how big companies have to build their own systems management frameworks for the Mac though. And I think you probably know that there is a ton of other software that just does not exist for the Mac. So you're going to end up writing your own and that is definitely not cheaper than buying it off the shelf and many many many cases.
Anti-trust violation anyone?
How to protect your account when SMS is the only 2FA option
missed a comma there!
Having good luck with opendns 208.67.222.222

They have other IPs as well, but that's what I'm using
Herman Miller is actually pretty good at improving the quality of their products over time
Ask HN: Women iOS Swift Meetup Group in Oakland, CA. Interested?
My fiance has been teaching herself to code for a while now and is now to the point where she wants to start chatting with other women about coding in Swift. We own a house in Oakland with a nice yard and would love to start hosting swift meetup groups. If you are interested please email me at: rodriguez.brenden@gmail.com or add a comment.

FYI: I'm a Product and UX/UI designer. You can view my work at: http://brendens.work/

Thank you!
Mlr: Machine Learning in R [pdf]
From the context of the paper, because the USA could just send a three-letter-agency agent of some sort to Dyn, a US-based company, and ask what their infrastructure looks like? (Presuming of course some weird scenario where they weren't already tracking it, which seems unlikely.)
Total and absolute speculation follows: If the US wanted reliable take-down capability, they might want to test it first, and it would be least provocative if they tested here in the US.

As for the length of the "test," they might want to see how the US would react to such attacks in the future, and shake out anything critical. "Oh, these two agencies can't talk to each other. Good to know."

I hate the way modern times makes me look.
Mirai? With the source of that being public, there are probably quite a few Mirai botnets now.
I'm less sure.

I don't think that there is a per se connection between the definition of a right (ofI think that the human) or tendency (of the internet organism) as absolute with a viewpoint which is politically extreme. (In other words: sometimes the moderate position is the one which seems absolute, and the position of relativity or balance is the extreme one).

The notion that speech and expression always supersede "intellectual property" seems to be the tendency of the distributed network. I'm prepared to argue that holding on to industry-age statues regarding "intellectual property" (ie, that some actors justly have authority to change the shape of the network in order to subvert access which they claim violates their IP) is an extreme position - an extreme clinging to policies which are unrealistic and inapplicable to the internet.
On OSX, I'm getting timestamps sent to me, but not the messages contained.

Also I think you need to slap a `npm install` in there--- I know you have node_modules in the repo but I think they don't really like being cloned.

Also, what repo is this writing to?
Riddler – the deep web crawler [pdf]
So who was prepared for this? Pornhub:

pornhub.com:

Name Server: ns1.p44.dynect.net
Name Server: ns2.p44.dynect.net
Name Server: ns3.p44.dynect.net
Name Server: ns4.p44.dynect.net
Name Server: sdns3.ultradns.biz
Name Server: sdns3.ultradns.com
Name Server: sdns3.ultradns.net
Name Server: sdns3.ultradns.org

ultradns.biz:

Name Server: PDNS196.ULTRADNS.ORG
Name Server: ARI.ALPHA.ARIDNS.NET.AU
Name Server: ARI.BETA.ARIDNS.NET.AU
Name Server: ARI.GAMMA.ARIDNS.NET.AU
Name Server: ARI.DELTA.ARIDNS.NET.AU
Name Server: PDNS196.ULTRADNS.NET
Name Server: PDNS196.ULTRADNS.COM
Name Server: PDNS196.ULTRADNS.BIZ
Name Server: PDNS196.ULTRADNS.INFO
Name Server: PDNS196.ULTRADNS.CO.UK
Just remember: your "livelihood" should never include shaming people for their sexual orientation or exhibiting surreptitiously recorded videos of other people having sex.
That's great, you managed to keep yourself the lowest growth area in the world, while the rest of the world is gaining wealth by leaps and bounds.

Everyone else is opening up, Europe is hiding in the closet.

Wallonian farmers will pay a much harder price in the long run when the Flemish dump them.
Anyone with an app affected by this because you use Heroku's SSL endpoint can fix this by switching to SNI. Unfortunately Heroku's API is also affected. There is a workaround... just edit your hosts file to point to the proper ip addresses temporarily.

add to /etc/hosts

23.21.149.112 api.heroku.com
107.21.99.123 ssl-doctor.heroku.com

Then use Heroku CLI to switch your app to the new SNI endpoint

heroku certs:add --type sni server.crt server.key -a YOUR_APP

That will spit out a new host name that you can point your DNS to and still be online.
Relevant mailing list post: https://www.mail-archive.com/dev-security-policy@lists.mozil...

In this email, Comodo discloses the security issue to Mozilla. The email was sent 26 days after researchers Florian Heinz and Martin Kluge of Vautron Rechenzentrum AG informed them of the bug.

Comodo clearly states that they used OCR for .eu and .be domains because the TLD registrars redacted their port 43 WHOIS data, and only provided an image of an email address on their web WHOIS pages. There was apparently no other way to obtain the email address.

Rather than flag humans to fix OCR in ambiguous situations, they had automated heuristics to correct the OCR, as determined by the security researchers. However, the heuristics chose the wrong output for the domain @a1telekom.at, producing @altelekom.at (an L instead of a one). The researchers registered altelekom.at and obtained a cert for a domain owned by A1 Telekom, a major ISP.
Search is one of the most technically complex engineering problems out there. A search company is by definition an engineering company.
The other thing is that he is super friendly to random people on the street. I know quite a few people who have bumped into him and he always has some sort of quick joke to tell.
Yes, is Google still using this internally? If not, then what would be a more up to date reference?
Or more simpler yet, Active Directory? My brother works with Macs as a sysadmin of a university and there are constant issues getting them integrated with the rest of the PCs in their AD. They even discussed buying Apples OD to integrate with.
Thank you for sharing.
Fast Image Resizing with AWS Lambda
Cuomo signs bill prohibiting Airbnb listings in NYC
Proper cache invalidation is one of the 2 hard problems of computer science (the other 2 being naming things and off by 1 errors).
199.16.156.70 twitter.com

104.244.43.231 abs.twimg.com

104.244.43.231 pbs.twimg.com
Have you forgotten the years they went providing Google search without a single ad?
MIT President Leo Rafael Reif  25 Broadway and a Surprising Meet and Greet
I don't think that's necessarily a bad thing. If a company doesn't have the resources to create secure products, then maybe it shouldn't be in that business in the first place.
I had to move my DNS servers off google today to get twitter to load.
You're assuming that people will know or be able to guess what is compromised. Assuming multiple IOT devices the average user won't have any clue, and will think they just need to run antivirus on their Windows box.
Yep I know, I'm specifically complaining about the current trend of casting off old ajax methods/libraries and moving to 'fetch()' polyfills, as currently the 2 main popular fetch modules both recommend 'es6-promise' as polyfill which has serious problems in this regard: https://github.com/matthew-andrews/isomorphic-fetch/issues/1...

Technically however, what that polyfill is doing is 'on-spec'. Note that your `process.on('unhandledRejection')` thing is clearly outside spec as `process` is a Node thing, not a JS thing.
Ah good call. I'll add the install bit in there.

The repo is here:

https://github.com/git-chat-client/git-chat-messages

Also, I don't have OSX, so I'm not sure how to test that. Probably something with your git configuration or maybe my naive parsing of the logs?
My point is not that these things are or are not true, nor whether they matter or not. My point is that you’re labelling Trump as the worst human being in history based on such minuscule things, but ignore everything remotely questionable about Hillary Clinton.
Time Warner Cable was bought by Charter, and the Spectrum "rebranding" is Charter's existing name for cable services. If there are continuing licensing fees for using the Time Warner name, I don't see why Charter would continue using it over its own brand name.
Realistically though those are organisational decisions not requirements of the Windows platform. there's nothing that mandates that a windows environment must have AD/Group Policies or Anti-Malware software, you can configure a stand-alone windows 10 PC quite happily without any of those. Personally I work in a Windows environment but don't sign into a domain.

It's more that organisations demand that windows, which they understand, be configured in a specific manner.

Some might say "ah well you've got to have A-V on windows or you get malware", but at actual technical level there's not a lot of reasons that MacOS is less susceptible to malware than Windows, and indeed its rise in popularity has seen more emerge
I love the show, but I find it unbelievable in the same way I find 1984 unbelievable. Both serve as brilliant reminders of what humanity could become if we succumbed to our darkest nature. But just by existing, they serve as warning signs of what we must not let happen.

I don't want to give away any spoilers since the twist is so brilliant, but I find "White Bear" particularly unbelievable. That episode rocked me to my core, but I also don't think it would actually happen.
Perhaps they wanted to check that IDNs were within valid character ranges (and therefore couldn't be a homoglyph attack).
Yeah. I'd bet developers would happily pay 2-3x in fees if they didn't have to do environmental impact reviews (EIRs).

It's not that EIRs themselves are especially troublesome. But the reviews are the hook for litigation by NIMBYs, especially in California where the state-based environmental review law makes it incredibly easy for challengers to tie up a project in court for an eternity; even tiny developments. Exceedingly rare is the case where a legitimate environmental issue is at stake; and on the whole EIRs have had the effect of encouraging urban sprawl--there are fewer challenges to EIRs in less populated areas.

It's really difficult to keep investments lined-up for an indeterminate amount of time. Time and indeterminism is perhaps the most costly aspect.

And it's compounded by the fact that California doesn't provide development-as-of-right, which means zoning reviews and permitting can drag out for years as committees hem and haw, or allow NIMBYs to control the process. Many if not most cases in the state are likely unconstitutional as a violation of Due Process. But the Supreme Court hates taking those cases because it's a tricky area of the law. Part of the problem is that developers are repeat players in the game, which means they tend to not want to, literally, make a federal case out of any particular project because they know they'll be black-balled on their next project. So the really good cases that would make for good law never materialize.

It was maddening--nay, sickening--to see Governor Jerry Brown's development-as-of-right legislation fail in the legislature. Localities could still have had all the ridiculous zoning restrictions they wanted; it just would have required them to strictly apply their own rules, rather than making them up on-the-fly according to their and challengers' whims. Which is what Due Process technically requires, anyhow! And that legislation would have required 25% affordable units in a project, which means it wouldn't have applied to single-family units, nor effectively to most other projects except large inner city residential projects. Basically it would have had very limited effect. But localities across the state--rural and urban--went apoplectic at the mere hint of being subject to their very own rules.
I don't think /etc/hosts will work with wildcard subdomains.
Ok figured it out. It was actually an issue with cloudflare being affected by the Dyn issue, rather than a heroku-ssl problem. Thanks for the help.
From the perspective of my service being down, my customers being pissed, and me not being notified.. yes, maybe PD should be held to a higher standard of uptime. Seems core to their value prop.
Please check our status page as an alternative method for updates. Unfortunately, it's also been encountering the same issue so we're sending out an email with the latest updates.
Flushing DNS wont do shit
This question came to my mind when I saw this post. The possibility might be the management cost. Synchronize between different providers can go wrong and might hard to debug when end users get different replies.
I actually laughed the first time I saw it because it looked so much like a Goldberg machine... But it cost 500M$... And they only got one try.
Really?

Route53 on AWS is $0.50/zone and $0.40/million queries. API integration is also very easy.

Using something like Route53 as a backup is significantly cheaper than suffering from the current Dyn outage.
That the scale of DDoS's has increased is the entire thesis of the OP.
We are seeing inconsistent resolutions on fppaco.org. sometimes it resolves to a 4.x address and sometimes a 50.x address. According to whois.net, their DNS servers are DYNect
Oh yes, there is a huge association. but for me? It is nostalgia of a pleasant sort. I was a 17 year old kid in 1997, and the next four years were brilliant.

I mean, if you have experience or a good education, now is even better, but a lot of us got our start during the first dot com, and it really was glorious, while it lasted.

I am sure investors have different associations, but for a lot of us it was a very positive experience.

(It is also why I keep predicting another crash. The experience was so formative that I expect much more radical boom and bust cycles than have materialized in this industry since.)
Solar desalination would be quite effective for California.