skysight-inc/HackerNews huggingface dataset:
I simultaneously agree with the premise that NSA is secured incompetently and also disagree with the idea that everything is at a singe lowest clearance level, which is the opposite of how things have been described to me by people who worked there.
No, what happens is a new framework comes out that fixes the complexity problems of the previous popular framework, but ignores why that complexity existed in the first place.

Once the new framework gains popularity the limitations caused by ignoring complexity start to surface and so the framework has to add features to handle them, creating complexity of its own.

Then the cycle repeats itself.
Chancellor Options System Review
Hahahaha. For sure it's not supposed to be network reliant. But from my experience working on critical infra, even things like power grids and rail systems, this is almost never the case.
Exactly the same right now from Spain. It seems the attackers are now targeting Dyn's European servers.
A better way is to just list your email address and accept that you will get some spam. My email address is already in plaintext on many webpages and WHOIS entries. It's not that big a deal.
After reading both of the Guardian's sources here and seeing what their testing methodology was, I think I'll withhold judgement until someone with a more solid reputation does the testing.

Quite a few users in the comment thread over on GSMArena are posting testing results for their 32GB iPhone 7 which are much faster than what GSMArena is claiming. Judge for yourself:

http://www.gsmarena.com/the_32gb_iphone_7_plus_uses_a_substa...

Edit: one more note. GSMArena's article on this was posted on October 7; too early for the latest iOS updates to have been used in testing.
AMEX is closed loop network. The advantage possibly would be huge troves of data about customer spending habits, if they expose those in future(obviously without PII)
Presumably from European governments in the case of Airbus and from the Brazilian government in the case of Embraer.

In the late 1990's Embraer and Bombardier sued each other in the WTO which found both governments guilty of subsidies.

Embraer is preparing to sue Bombardier/Canada again: http://www.reuters.com/article/embraer-bombardier-idUSL2N18D...
You don't need to target voting infrastructure. You target media infrastructure (DNS, streaming, web media) in order to either reduce or shift voter turnout. A candidate ahead in a battleground state? You stomp on media reporting to ensure their opponent's voters aren't dissuaded from heading to the polls.

Control the message, and through that the actual votes cast.
DJI says it’s starting to ship its folding drone
Is it just me or are these kind of attacks becoming way more frequent recently? This kind of widespread outage seems so new, but again, that might just be me.
Just like you do with ssh: you ask the site administrator.

Now, if you have a CA who gives out certificates to parties who should not have them, and that CA can sign certificates for any domain, how do you know if any connection is a MiTM or benign? Do you actually check the issuer every time you connect to a secure site?

CAs give a false sense of security. We need to move off this model.
It doesn’t exactly work that way. Registrars only allow codepoints in specific ranges (the allowed ranges being different depending on the TLD)¹, so it ends up not being an issue (full FAQ here²).

Also, more information on internationalized domain names here³.

――――――

¹ — https://www.dynadot.com/community/help/question/IDN-not-regi...

² — https://www.dynadot.com/community/help/section.html?category...

³ — https://en.wikipedia.org/wiki/Internationalized_domain_name
Twitter outage
What if someone has an issue with their card in the middle of the night? They need to wait until morning to get help?
I own MS shares and have been pleasantly surprised how stable MS stock is compared to other tech stocks.
After viewing the site I don't understand what functionality it provides.
I went all in with Nintendo's Wii offering after watching the Japanese commercials and made a nice chunk of change. The Wii was a game changer at the time and I get the same happy tingly feeling offering on this as well. Nintendo innovated again in the completely sideways manner we are used to, bucking the VR roadmap.
Puritanism at its worse, also a reflection of upper management attitude I'm sure
In CA - Spotify starting going in and out around 9:15a, then completely shut down at 9:20a (no offline playlists were available). As of 9:49a my offline playlists are back up, but nothing else.

Twitter was working from my mobile about 15 min ago, but not on my desktop. Now both are down. Can't believe Twitter is down. On my mobile I'm getting notifications, but can't view them. The people who are sending updates are mostly on the East Coast and Canada, so maybe it's back up for them.
I know a lot about some things, but almost nothing about networking, so excuse me if this is a really dumb question but - would your physical location determine what hosts you returned from that query? Like if you were in Asia would you get different ones back?
>This is basically like Samsung trying to DMCA a newspaper from mentioning their name or publishing a picture of their phone.

I have no doubt that companies would do that if they could. Fortunately such draconian censorship methods aren't as effective against print media, especially when said media is ephemeral in the first place.

If the goal of the DMCA is to protect creative works, then it's a huge failure no matter how you look at it. Not only is it being used as a weapon against people who are actually creating innovative and original works, it is useless for protecting those very same individuals. The creative work of individuals is stolen and shared millions of times each day on sites like Facebook, imgur, tumblr, and instagram, generating ad revenue for the parent site, and followers for the pages and individuals committing the thefts, and leaving the creators of the content with nothing.

You can submit a takedown request as an individual, but by the time it's honored the post was old news anyways.

I don't have YouTube right now, but here's an article that gives a good rundown of the Facebook video controversy: http://www.businessinsider.com/how-facebook-is-stealing-bill...

Edit: And another link which goes in to a bit more depth: http://www.businessinsider.com/facebook-copyright-infringeme...
Or maybe shows how difficult that task is. Have you made an implementation that successfully distinguishes the two?
Yes! I’ve been waiting for this for quite a while now. Can finally get a certificate for my .みんな domain.
There is. There is a relatively new IETF standard called RDAP that provides JSON-structured WHOIS data responses (i.e. https://tools.ietf.org/html/rfc7483) along with automatic discovery. ICANN is working on making it a mandate for gTLDs to support it.

It is already supported for IP address lookups by all 5 regional Internet registries.
http://hotframeworks.com/

Skip the chart, look at the long tail of listings.
Lots of sites down for me in the UK. I was using my ISPs DNS (Sky), switched to 8.8.8.8 and not much better.
> I think rock stars earn their status.

I think that's mostly bunk. For every rockstar there's 100 equally talented individuals who will never get recognition because they were not in the right place at the right time.

Rockstars are incredibly lucky.
Artficial intelligence problems
I couldn't find code examples so I lost interest.
Should it be? Yes. Is it? No.
Great, but if they're treating unvalidated certificates as in any way worse than plaintext (they're strictly better), they are still completely wrong.
I wouldn't call anything unhackable.
Macs are 3 times cheaper to own than Windows PCs, says IBM's IT guy
It's probably an overzealous human doing it
I have my email address open on most websites I've designed and programmed for decades now, and I don't receive more spam at these address than on at those addresses which aren't public. Spammer harvest for years now using many channels: buying addresses, hacking databases, using viruses stealing complete address books from people.

Using images as anti-spam measure really gives you a lot more problems than benefits (except you'd use random single-usage addresses).

Don't obfuscate, but fix your spam filters or switch your email provider. What helps a lot is server-side moving of detected spam emails to your junk folder and looking through this folder from time to time.
I'm not well-versed in these trade talks, but you know what really grinds my gears about Canada's current protectionism?

Butter.

No, really. In Canada, the dairy industry is run by a single co-op. That means that all milk and milk-based products must be sourced from the co-op (i.e. your provincial dairy bank).

So all butter in Canada comes from the provincial supply. Want locally-sourced butter? It's nearly impossible to obtain, and even if you can, it's extremely expensive due to tariffs. Want butter that's completely grass-fed? It's possible, but also extremely expensive, and it comes from the provincial bank, so it's possibly mixed with other cows and/or milk. And all butter is 80% milk fat, which is abysmally low. European dairy is 85%, sometimes 90+%.

Only very recently has it been possible to buy "New Zealand" grass-fed butter here, but it's $11 per 1/2 pound, likely due to import tariffs. And it goes through a local dairy, so I'm not 100% confident it's truly New Zealand milk. Nor can I confirm its fat percentage, so I could be just paying for a lot of water.

If you want to drive across the border to buy butter and bring it back, be prepared to answer a lot of questions to the CBSA, and possibly pay more tariffs, making it prohibitively expensive.

This applies to most other agricultural products too, like cheese, eggs, wheat, and more. Getting good cheese in Canada is expensive and hard.

The fact that the article mentions that the CETA made strides in agricultural issues tells me that what I cited above is a possible issue in these trade negotiations. The same was true for TPP.

I'll be really happy when these trade deals pass so I can get some real food at a decent price, and my local farmers can be given an opportunity to compete. Until then, the biggest opponents to these deals are farmers. That should make you question their motives.
I doubt that your offline playlists were affected ...
> I for one welcome our new robotic overlords and agree that it isnuncomfortable to be reminded that my favorite sexual objects are in fact meant for other purposes as well.

So you would be "uncomfortable" having a female coworker that was using a breast pump? No wonder this industry has such a gender problem!
The sad state of the internet and the world wide web, from a decentralized network envisioned to withstand nuclear armageddon [1] to a series of services so intertwined and full of single points of failure that a focused attack can take cause worldwide outages and disrupt communications everywhere.

[1] http://www.rand.org/about/history/baran.html
Why did betting markets get the EU Referendum result so wrong?
Two possible reasons for shower performance:

1. 32GB capacity comes with lower SLC cache
2. 32 GB storage has fewer dies/planes in NAND reducing parallelism
Google "CFML" - that should keep you busy for a while :)
Just to give you and idea of how big of a deal this is, go to https://myactivity.google.com/myactivity and check what third parties could learn from you, with your name on it.
I literally had no idea what that was, and after googling it have no clue how it relates. So the answer is - I don't know.
AT&T said to be “in advanced talks” to purchase Time Warner
Also West Coast. Twitter and PayPal are both down.
>The truth is that bookies do not offer markets on political events to help people forecast the results. We do it to turn a profit (or at least not lose too much) and in that respect, this vote worked out very well for us.
My first "serious" programming language was JavaScript, and I didn't know a lot of basic stuff for a long time – because it is considered normal in JS community! Nowadays we have node.js, so you have to know at least a bit about your terminal, how to run server, kill processes and other everyday stuff, but back in the days it was unnecessary.

And this is not a single story; I've also interviewed some people and for some reason my experience is that JS has very low entry barrier.

Yes, with tail recursion we'll have almost full FP (only pattern matching is missing), but it doesn't mean that every novice will go and study them right after landing – in fact, the opposite, because there are much more tutorials about OOP JS.
I heard the third season was coming out so I checked it out...wow, great show! The first couple of seasons have few episodes so it's easy to catch up. Great writing, but I shouldn't be surprised as it comes from the mind of Charlie Brooker.
Out of curiosity, why do caching DNS resolvers, such as the DNS resolver I run on my home network, not provide an option to retain last-known-good resolutions beyond the authority-provided time to live? In such a configuration, after the TTL expiration, the resolver would attempt to refresh from the authority/upstream provider, but if that attempt fails, the response would be a more graceful failure of returning a last-known-good resolution (perhaps with a flag). This behavior would continue until an administrator-specified and potentially quite generous maximum TTL expires, after which nodes would finally see resolution failing outright.

Ideally, then, the local resolvers of the nodes and/or the UIs of applications could detect the last-known-good flag on resolution and present a UI to users ("DNS authority for this domain is unresponsive; you are visiting a last-known-good IP provided by a resolution from 8 hours ago."). But that would be a nicety, and not strictly necessary.

Is there a spectacular downside to doing so? Since the last-known-good resolution would only be used if a TTL-specified refresh failed, I don't see much downside.
That's good but it should require a confirmation like it's done for self-signed certs, at least when submitting a form.
Apropos those not the next big thing:

- Virtual reality: what time-frame are you talking about? The hardware problem has not been solved. Yes, it's better than in the 90's, no it's not good enough. VR can be big, it will also take a while.

- 3D printing: The disruption 3D printing promises is reducing the "industry" size (both physical and in capital terms) and exploding the variety of real-world products available. This is huge, and is happening, if a bit slowly. The 3D printer market itself is a small detail.

- IoT: I'm mostly vocal for not plugging your "things" on the internet... but "It's mostly gimmicks so far" is what people said about every big market change just before it exploded. I really don't know how you could be wrong (and 5 minutes ago would say you weren't), but that answer does not bring me any confidence.

- Hydrogen-powered cars: Yep, those are really stupid. Won't go anywhere.
I've looked into going back to a dumb phone in the past. If you don't mind, what phones did you order?
Interesting. 8.8.8.8 is not able to provide me with a record. However ns1.p57.dynect.net and ns3.p57.dynect.net give an answer where as ns2.p57.dynect.net and ns4.p57.dynect.net hang.

Shouldn't 8.8.8.8 query another name server if one fails to respond or takes too long?

EDIT:
Is there an inherent flaw in how secondary records are queried? And as bhauer mentioned, is there a possibility to fall back to last known record?
Smells like another Theranos: too good to be true
pls warn podcast in title, i dislike podcasts
I found out Twitter was down because I wanted to go complain about PayPal, lol.
I imagine it's separate teams. Everyone is probably doing everything they can as fast as they can.
That is a terrifying thought. Sounds like the plot of a potential Neal Stephenson novel.
I had issues with netflix as well. Netflix.com was resolving but lot of the resources from sub/other domains didn't load.
Now even the DYN Status page is inaccessible from the Eastern US https://www.dynstatus.com/incidents/nlr4yrr162t8 (Github still down from the Eastern US.)
how do you know its not 'using a political agenda to further Facebook's huge platform'?
https://www.whatsmydns.net/#A/art.nflximg.net

http://status.aws.amazon.com/

Seems like it is affecting another regions now.
You don't need to use redux. But it's very useful to manage state. I went from using simple components to flux to redux all in same project. For me State management is a very part of client ui.
It's 9:55am PST California and Twitter is down.
Is Zendesk being affected? Their status page is reporting external DNS provider is having DNS issue [1] and most of their sites are being affected.

[1] https://status.zendesk.com/
Super interested, why the author has not included specific reason or requests coming from Wallonia on why they don't want the deal.

I'm pretty sure these requests are based on non-corporate-political principle and that's why can't be fulfilled.

EDIT : Only thing I found is

specifically on the symbolic issue of arbitration, which is politically extremely important

Sounds pretty vague to me.
Follow up to Ask HN thread: Growing a side project
As long as they remove breast pictures instead of pictures of beheadings (I complained several times as they appeared in my newsfeed, but they were always deemed as "ok"), our world is not going anywhere in terms of peace.
re SAFEcode/Softbound. That's horrific vs the initial numbers. Good that they dug in to find most of it was in the bookkeeping. Work there might greatly reduce the overhead. That MPX is a Softbound-like scheme with hardware extensions for bookkeeping is already hopeful. Author needs to port it to MPX. Paper also mentions Ironclad C++.

"SaferCPlusPlus just introduces a memory-safe subset of C++ as an option."

True. This has at least basic benefit.

" Namely, portability and, more importantly, dependency risk."

What was the portability issue?

"there is no risk to your project. It will continue to build properly, and the code won't be stuck with some idiosyncratic paradigm that will interfere with future coding strategies. "

This would be a good selling point to enterprise customers or large FOSS projects that use C++.
Makes sense, I don't like to imagine Einstein working at a desk but in front of a blackboard the size of a cinema screen.
I don't mean to implement security libraries myself. The problem is I don't even know what kinds of things to find libraries for.
Leaked Board Deck Reveals Salesforce M&A Strategy
On the East Coast, Twitter still down for me on mobile. All the Twitter media resources (twimg.com) are also not appearing.
Some quick numbers for those interested:

Excel sheet has 11104 rows
2423 verified - 22%
8681 not verified - 78%
This is how I feel about chairs. I've had mine for 12 years now, and I'm almost certain it will last another 12. When I was working in a recording studio, we'd go through a $100-200 chair every year, and they were never all that comfortable.
I spent a lot of my life optimizing for adult relationships, and now I've got kids with behaviors that are normal for kids but in adults would be self-destructive, irrational, psychotic, and like a drug addict.
In my experience Dyn pushes this functionality very hard during customer on boarding, effectively as a lock in for their platform.
Women leaving their faces uncovered is illegal in many countries. This should have zero bearing on what I can do in my own country.
Qualcomm, NXP Semiconductors agree on $110 a share deal
How people still think the PKI system is actually delivering security is beyond me.

We have zero idea how many bad certs like this may be out there (the nefarious people won't publish their results, after all), and yet a browser will still treat a Comodo cert as better than a self-signed one (it's identical to a self-signed cert, since Comodo is a known bad actor now). It's better than plaintext, of course, but that's not saying much.
It postulates threats without hints of solutions, e.g. few happy endings, valiant resistance movements, defections by oppressors, deus ex machina resolutions. TV Tropes probably has a name for this genre of storytelling.
I dont even think you need to necessarily shift voter turn out. I think you need to sow enough confusion in order to cast the results into doubt.
Visual Studios integration with so many other non-microsoft languages and packages is excellent. As a former msft hater, I have to agree with the parent.
It's 9:56am PST California and Twitter is down.
The Aeron doesn't fit everyone. I'm thin as a rail, and for me the front lip cuts into the back of my thighs quite uncomfortably. But it fits a collegue of mine absolutely perfectly. I think it might be a bit sensitive to weight ( or weight over area ) as well as length, which is why they come in three different sizes. But for some complexions none of the sizes might fit.
loss of twitter, soundcloud, and github is what passes for tragic these days?
and its down again
I think the change happened when Eric Schmidt left and Larry Page gave his "more wood behind fewer arrows" speech, which meant engineers down product managers up.
Using a Mac is the first thing to stop doing, if you're at all interested in targeting the median case.

Silicon Valley's obsession with high-powered boutique notebooks and the high-frequency replacement cycle of Apple products is in part why so much software that comes from the region is inaccessibly slow.
And for me in the US on my Verizon Hotspot.
I thought the thing peff briefly described above sounded pretty good. The worst case complexity, if I'm visualizing it right, would be the length of the string you were comparing.

I remember some discussion of this in previous HN threads but I don't know what it was about...
Yeah, so I do all my documents and spreadsheets and stuff on Sandstorm Oasis, which is their managed offering. I can do a bunch of other stuff on it, and it's easiest to figure out the extent of it by just trying the demo yourself (https://demo.sandstorm.io) and checking out the apps and stuff. But in my case, I mostly use it like I used Google Docs and Trello before, that I can easily control my data on, and migrate to a self-hosting solution easily later.

Sometimes it's hard to explain Sandstorm because they have a wide variety of good use cases for it, and there's really not a lot of comparable software packages to it. (It's like ownCloud but it's not like ownCloud, it's like Docker but it's not at all like Docker, etc.)
See also: https://news.ycombinator.com/item?id=12760984
Can you elaborate on DDG when you said:

"it requires a little more effort when looking for certain things"

What type of things?
Chiming in as a TWC user on the West Coast:

Github out, Etsy out, Paypal out, Twitter out, Soundcloud out, Crunchbase out, Heroku out, Spotify intermittent, Netflix only loads a white page with plaintext "who's watching" list and no functionality.
The weird thing is I'm around a lot of conservatives in a conservative place in this country, you know, the people who supposedly are the ones getting offended. I haven't found one damn person who thinks Facebook is doing the right thing. I'm really trying to find these offended people, but I cannot.

The Vietnam photo censorship was met with quite a bit of confusion since I think most folks misremember it being our high school history book.

I'm starting to think that one group who keeps calling the FCC over TV shows is alive and well online.
The best metaphor I have not read for a while, which I totally agree. Thanks!
Try PayPal. That's gonna be a big issue for everyone who uses their payment processing.
I think you're right, not much of the voting infra is network reliant, but the more I think about it the more it seems that the "fear" factor of such outages could influence the election. Or, perhaps a curated working set of information sources, thanks to selective DDoS. Regardless, terrifying to be sure.