skysight-inc/HackerNews huggingface dataset:
This is nonsense. Diversity isn't just how you look or who you are attracted to. When tolerance is only for people who agree with you, or who don't disagree too far, it's bullshit. They even get to the root of the issue, which is whether Thiel is endorsing the horrible things about Trump, or supporting the Republican candidate in spite of them:

>Yes, plenty of people on Facebook and in the real world might support Trump for reasons that, in Zuckerberg’s words, “do not involve racism, sexism, xenophobia or accepting sexual assault.” And polling shows many of those supporters do not come from the country’s privileged classes. As Altman argues, having an institutional policy to fire them from their jobs would be a “dangerous path” to follow. But Thiel is a member of the Silicon Valley elite, a billionaire uses his fortune to ensure his views are heard and promoted. He is the opposite of marginalized, and arguing that kicking him off Facebook’s board is the same thing as firing any given person for their political views is a false equivalence.

The argument seems to be "Yeah that's a valid point, except that he's richer than most Trump supporters." Trump is awful, but this is BS.
I agree that it's necessary to often look at society with a critical eye if you want to improve it. I think no small part of a lot of the heat in these discussions is that people do care about making things better.

> This doesn't make them mean or bullies. The problem is that any time ... behavior is pointed out people tend to get angry, and they want to lash out at person who criticized their behavior instead of reflecting on the merits of the accusation.

I elided the behavior qualifiers because I think you're getting at a deeper point that works in general. (Please correct me if this is unfair.) The way the criticism is presented is important. There's an effective difference in listing faults, presenting evidence, or making accusations that put people on the defensive (and they're no longer listening to you), and figuring out ways to take into account human psychology in ways that are more likely to make a change. As you said, "people tend to get angry, and they want to lash out ... instead of reflecting." Engaging people in a way that encourages that reflection rather than the anger is hopefully going to be more productive.

This can be increasingly difficult when tensions are high. And that's usually when it's even more important. And sometimes I feel like this is a slower path, but then if the alternative isn't likely to make a change at all--or make it worse--, slower seems like a better alternative.

This comment is in part me working through my thoughts. The fact that it's attached to your comment is because it prompted me to think more about this, so thank you!

To the general reader, in the hopes of better communication, if you'd like to down vote this comment, will you also take the time to add a brief reply? I appreciate it.
Can we crawl privacy policies and commit each change into a repo -- and maintain this as a public resource?
For commercial end users of SunOS, Ultrix, etc, most of what we used was closed source.

Kermit was not the only software you could get source code for. However, the entire ecosystem was much smaller than what exists today.

I'll concede it may have been different in more academic environments.
So you only want feedback if it is good?

I've released my comments on your idea for free and you're being negative about them, blablablah.
What other CS papers would you recommend?
It would be interesting to have a fund which was mostly an index fund, but avoided "losers" based on simple criteria. Picking overpriced losers is easier than picking winners. (I did that for the first dot-com boom, at "downside.com".) That's a concept worth testing against historical data.
Cisco ASA Software Identity Firewall Feature Buffer Overflow Vulnerability
The sad thing is I'm stuck on a codebase that uses Xmodem for core operations and have to forgo such niceties as having file name, size, and timestamp automatically handled. I don't know why they didn't just implement Ymodem like they should have.
Presumably it would take a lot of cooperation with ISPs they are peering with, which is not something easily done. Or a google-sized network.
Migraines could be caused by gut bacteria, study suggests
No, it's the politically correct who go there to pitch a fit, change the chant, and then leave when satisfied they've meddled enough who would "harm" things.

I'm not black, but have been threatened by police (with guns) for perfectly legal activities. But I'm not going to fight my way into a Black Lives Matter protest to try to change their story. Theirs is true - they are black and their lives matter. Their lives are the ones being systematically undervalued. I was only targeted because the cop was having a bad night, they're targeted every day by racists who think they're doing the right thing for society.

I think they feel that all lives matter (except maybe cops and cop supporters). But that doesn't help the point of focusing on those who are the most under attack and the racism causing it.
AT&T reaches deal to buy Time Warner for more than $80B
I've seen something like this in the marketing industry. I think it happens when success of a company depends not on the efficacy of their solution, but their ability to convince people it works. When customers can't tell whether the solution works or not (or when they can't tell if the metrics you present them are reliable or relevant in any way), efficacy stops being a variable in the business.
i think there is a larger strategy at play. this is pure speculation and anecdote.

recently there has been an aggressive uptick of dns ddos attacks against smaller companies/service providers that run their own dns infrastructure. this includes small/regional internet service providers and individual sites/hosts that still run their own servers.

in almost all of these cases that i'm aware of, the smaller companies immediately outsourced their dns services to a larger company, one that ostensibly is able to either absorb, scrub, or otherwise defend against these types of attacks.

extrapolating to a global scale, what's happening is a forced consolidation of dns infrastructure into a handful of large players. even in the case of having redundant providers, it's usually two very large providers. and as we just saw today, a terabit-level attack is not something we can readily defend against. what if there's even more in reserve?

in other words, we're putting all of our eggs into one basket. and someone is aggregating enough attack capacity to take out nearly the entire internet at once. it doesn't help that everyone is voluntarily consolidating their infrastructure onto a small handful of public cloud providers.

we are setting ourselves up for a massive internet outage.
"Tree swing" seems fine to me (native speaker as well), the commonality of all pictures is it is a swing, set up in a tree (albeit incorrectly or poorly in many cases). If I google "tree swing" it is clear that this is not a particularly rare way to refer to this specific sort of swing.
> If you have say 500 stocks and pay like $10 in broker fees per stock, in the end you'll pay $5000. That's not the end of the world for a long term investment.

If you only buy each stock one time. Which is absurd if you want a balanced portfolio you would need to buy a little bit of all 500 stocks a lot of times. A ETF lets you do this cheaply.
shrugs

Of course, in the early days of unix, you got the OS in source form, but those were long gone by then. AFAIK, a lot of independently developed utilities were distributed in source form, in part because it was common to have to edit the sources and compile yourself if you weren't on the exact same architecture as the author. But that's just what I've heard.
The pic looks like the $20 US note of Andrew Jackson.
Since the GitLab folks hang around here... any chance you'll let us force a redirect to HTTPS for GitLab pages with custom domains? Loving GitLab so far though!
Apple's HomeKit supports Bluetooth-only devices. Seems like a good design choice right about now.
So you would like to see the zoning rules changed, and that's a reasonable discussion to have. OTOH, the intent of zoning is to let people know what to expect when they move into a neighborhood. Changing that after-the-fact violates this agreement, and not surprisingly results in what you call NIMBYism.
Not only liberal, nowadays trolling is any behavior you dislike on the Internet. Having weird opinions, harassment and death threats, shilling, spam - I've seen each of these being called trolling by noobs.
Why? Being able to do business is not inherit part of the property rights.

From egoistical point of view I do hope that AirBnB succeeds because that would give us lines of attack against DRM and EULAs
Reading around the other posts by that "translator", they sound like a wonderful person with a perfectly balanced attitude towards people of color, immigrants, women, etc.

(Illustrative excerpt:

"Complex dialectic is best saved for fellow red-pilled folks because someone who is new to our thinking will forget the wonkier points later. Short, quippy summations are more effective with newbs because they are memorable and they define the big picture. Example:

A questioning friend: 'Why is it bad to let women vote?'

You: 'Because men vote for liberty and women vote for tyranny.'

Friend: 'How so?'

You: 'Women instinctively submit to power. So whichever party appears to be dominant, especially if its rule is heavy-handed and its figurehead is charismatic, women will support that party. Men are less risk-averse, we chafe under overbearing authority, and we take a longer view of things.'

Another example:

Friend: 'So why are our governments doing this to us? What’s their motive?'

You: 'White men hang tyrants. Muds stab each other over sneakers.'"

This particular excerpt from https://paworldandtimes.wordpress.com/2016/09/25/we-would-re..., but every post is like that)
> It does seem like xz is somewhat overengineered, but [...] any other algorithm with similar compression performance will yield similar behaviour on corrupted data

You seem to confuse format and compression algorithm. From what the
article says, the format seems bad. Once any data is damaged, all the rest of
reading the file (as opposed to decompressing the data from file) goes out
of the window. No way to re-synchronize reading with data blocks after
corruption.
OK, I'll give you the benefit of the doubt. If the (ostensible) purpose of laws is to keep people/corporations in check, and our representatives make the laws, then the answer to your question, it seems to me, would be political activism, would it not?
yeh the thing being programmed not same as thing title said was being programmed, am annoyed too
The real question here is whether there was anything they could realistically have done to prevent it at all.

In order to defend against a DDoS attack, you really only have two options. One is to have sufficient capacity to cope with the extra load without undermining your normal service. The other is to reduce the amount of extra load you have to handle, by identifying and blocking the hostile traffic at some point before your main system deals with it fully.

In this case, the scale of the attack was huge thanks to all the woefully insecure IoT devices out there. But worse, from the initial reports it appears that the requests being sent were effectively indistinguishable from valid DNS requests: they came from diverse sources, and asked DynDNS to do exactly what it's normally supposed to do, just for random subdomains that don't actually exist. Unless there is some pattern in those requests that allows for identification of the hostile incoming traffic so it can be dropped early, there's probably very little DynDNS could have done here. And of course the attack is particularly effective because by taking out infrastructure rather than attacking a specific site, it brings down large numbers of high profile sites all at once.

It is disturbing, but apparently the reality we face, that there are now so many hopelessly insecure devices on the public Internet that this is possible. The best long term strategy for dealing with it seems to be trying to improve the standards of Internet-connected devices and reduce the number of highly vulnerable devices with access to the Internet, but this was always going to be difficult with IoT products aimed at the general public. I suspect some sort of remediation/recall scheme for manufacturers/vendors and some sort of throttling of users' Internet connections to force them to respond to security recall/update notices may be necessary if this kind of attack starts to become a pattern.
I wonder if there's any way to tell apart real-users-requests from fake-users-requests.

If I'm not wrong, it's only preventable by increasing the resources of the server, doing anti-bots things like CAPTCHAS (not feasible for stand-alone IoT devices) or detecting weird patterns (which can be masked really easily).

How will DDoS attack be preventable in the future? There will be so many things and nano-thing connected to the internet that can act as "attackers". Is getting harder and harder everyday.
It is perhaps ironic that I find the fright-night theme beautiful and soothing. Would love capturing them for real on camera.
If performance is important, I believe it's still a fair bit faster to use a plain object as hash, rather than a Map. (If the keys are integers V8 may initially treat the object as an array, but it'll switch over to dictionary mode pretty quickly.)
> The article claims xz was chosen by prominent open source projects due to hype. No, it was chosen because of its favorable size/speed tradeoffs.

No: that's why the LZMA compression format was chosen, and why the .lzma container format temporarily became popular as people started using lzma-tools. The move to xz, which results in slightly larger files for seemingly arbitrary reasons and which technically provides one benefit (seekability) almost everyone defeats (by compressing a tar file) while using the same relying on the same underlying compression algorithm is less-well motivated.
It's probably even worse than that. Ages ago [1] Philip Greenspun wrote about the gap between "the five-page magazine article, serving as filler among the ads [and] the book, with a minimum of 200 pages." For the most part surprisingly little has changed although that comment was made in 2009. There are some shorter form books these days, e.g. from O'Reilly. But if you want the gravitas that a book often conveys there are still a lot of forces pushing you toward 300+ pages.

[1] http://philip.greenspun.com/writing/changed-by-web-and-weblo...
Here's a pretty fun 2 year old talk from Blackhat, re surveillance camera firmware and how s*tty they are:
https://www.youtube.com/watch?v=B8DjTcANBx0
Typescript is fully supported by vuejs, I use both and they don't contradict each other.
Ask HN: Are more people voting posts up?
It seems, although I don't have data to support this, that frontpage posts are getting >300 votes very easily.

Has the median number of votes on posts that make the frontpage actually increased in the recent past (the last few months, to my mind)? Is this significant in any way?
For a DNS-only service provider, it seems like 1.2Tbps could be 1000x normal traffic. But Akamai claims 30Tbps+ is their routine traffic[1]. Some have commented that this DDOS questions consolidation around cloud providers, but I think it will cause consolidation among service providers. You can no longer be a critical service provider if you don't have the capacity to absorb attacks like this.

http://www.csoonline.com/article/3123797/security/some-thoug...
That's part of the problem. DNS servers should probably reject queries that require long answers when they come in over UDP. If you want a zone transfer, use TCP. That prevents amplification attacks.
I would like to remind those that think all is lost with this:

A serious conversation with vendors about default passwords and backdoors post this incident will help prevent recurrence. This has forced this talk and we are better for it.

There was a time when your windows box would get popped from being online for more than 4 minutes. We recovered from this. Conficker in 2008. Blaster in 2003. It was a 'BIG BOTNETS OH NO', but we cleaned up, recovered, hardened. Microsoft went from being botnet enabler to an active force in dismantling bots and crime rings.
It sucks, and some of us have a bad day, but we recover ever stronger.

XiongMai Technologies may well find themselves in some international hot water over this incident, and I think they deserve it. They sold a faulty product that caused billions of dollars in lost revenue to some very large internet properties for a day in October 2016.
I would encourage vendors look at these incidents from last decade and how these were turning points for upping their security game. I would encourage its victims to investigate legal recourse.

Specifically the current vulnerable nodes of Mirai, i am sure these will be removed from the internet pretty soon. One only gets to fire something like this a few times before the feds are on the door.

Your regularly scheduled program will commence shortly.
I am confident somebody knows :-DDDDDDDDD
So pointing out unambiguously[1] bad behavior is wrong because communists murdered people. wow.

[1] unambiguous = something you would not want done to your mother
Would it be possible to make the Board view default view when going into issues via some option?
If the cost of the produced electricity is competitive, the unit size of the production system doesn't matter much (this metric will account for the differing capital and operating costs of the production systems).

Looking around a bit, I guess nuclear is considered cheaper than geothermal, but for Iceland the fixed costs of dealing with nuclear might be prohibitive (right now they spend nothing on stuff like securing nuclear materials, to add a gigawatt of nuclear, they have to deal with it for a long time, or pay someone else to do it).
Brian Krebs pegged a company called XiongMai: https://krebsonsecurity.com/2016/10/hacked-cameras-dvrs-powe...
If you think standard A is good except for a potential backdoor with the key held by entity X and you think standard B is good except for a potential backdoor held by entity Y and you assume entity X and entity Y do not cooperate, then composing A and B is completely reasonable.

It's the same thing as having 3 computers vote on the space shuttle control signals. You could follow your argument and claim, "If the software has a bug in it that would produce output different from the other 2, then don't use it!" The problem is that we don't know if there is an issue or not, so we go the safer route with multiple implementations.

You also did not address the main issue I have with your comment. You made this assertion: "If you're using GOST, you're no longer building NIST-compliant crypto.", which implies that the contents of the plaintext determine if the crypto is NIST compliant. This is completely false.

It's like claiming that uploading an AES encrypted file over an HTTPS connection is less secure than uploading via HTTP.
I don't think it becomes socially 'unforgivable' per se. Although it really could be experienced as such when done with people who you don't know at least a little. My friends and I often try to illicit reactions from each other but everyone knows it's just a game and in the end no one gets hurt. I would say that's what separates trolling from just plain bullying: people know it's just a game of sorts.
There are indexes of dividend-paying stocks. If the market decides dividends are important, companies which pay them will do better.
How exactly does this work at a technical level?
This drives me absolutely nuts. It makes me want to delete my LinkedIn account.
That's what the following blog claims:

https://krebsonsecurity.com/2016/10/hacked-cameras-dvrs-powe...

I don't know any other independent researcher who confirms this.
This is true, but unless you understand the problem then (which you might not since not all of us work at 50x expected load) then how do you architect it properly while also not wasting time?
That is the correct reaction.. The only time when you can't blame the phone is when it is duct taped to a grenade..
how does that go for refactoring? when I refactor code I'm typically making a decision that we have now pinned down the functionality of the code, and we are going to make the structure reflect that functionality clearly and directly while stripping off incidental complexity that came from exploring the design space.
> If you demand special protection rights for your opinions, are unwilling to rebut attacks with good arguments you disserve to be trolled else you could damage the public.

How does that work with opinions that are demonstrably false though? How many times must we keep supplying creationists, flat-earthers or any other conspiracy theorists with rebuttals before it's enough? The problem here is that what constitutes a "good argument" is entirely subjective to your view of reality and these days you can find any number of websites that will support whatever opinion you wish to take.
Oh really? Why hasn't this guy found another job yet? https://en.wikipedia.org/wiki/Jeffrey_Skilling

He made the company tons of money. I'm sure he would claim it "would never happen" to the new company as well. Yet he's not exactly leading up another energy company, is he?
It's time to apply some serious pain to the junk IoT manufacturers, retailers, distributors, and importers. A nice big billion-dollar lawsuit against Amazon for gross negligence would be a good way to start. US consumer law allows suing everybody in the supply chain. (They can then sue each other and try to sort out who pays, but that's not the victim's problem.)

We also need some big recalls. If Homeland Security tells the Consumer Product Safety Commission this is a national safety issue, the CPSC can order a recall. Something like this worked with those exploding "hoverboards". CPSC ordered recalls, Amazon took the junk back, and Amazon refused to pay manufactures in Shentzen. The manufacturers were furious, but hoverboards with crap batteries disappeared from the market very fast.
Mopping Robot for Cleaning the Home Floor
I suppose Akamai wasn't ready to deal with the attack that size. They only recently bought Prolexic, but things move slowly on their scale.
Agreed - it's what the average investor should do. Even if it's really hard to beat Index Funds consistently, there are two factors that will make active trading always important:

1. Some people will beat the market, and regardless, someone has to try or there's a massive opportunity left on the table.

2. Indexing actually has more of a certain type of risk than passive investing, because if you take a huge loss for some period of time, you can't hedge it and cut the short term loss. You have to just hold. Active investing can be really valuable for folks as they enter phases of their life where big losses are unacceptable and they're willing to forgo some of the upside.
Filimica-galbenele PLANTA MEDICINALA
You might have just gotten trolled. It's hard to tell, but then again, smart trolls won't shy away from recursion.
There was a website doing this a few years ago, it showed diffs for privacy policies and terms of service. You could also get email notifications when a site changed. However, it shut down some years ago.

Unfortunately I can't remember the site's name, or find it in my bookmarks, sorry.
There's a subtlety here:

Renaissance is a company which manages hedge funds. They're famous because their main fund, Medallion, has done exceptionally well. The only investors in Medallion are Renaissance employees; it's capacity is limited, so that even employees can't generally invest as much as they'd like. Renaissance also manages several other hedge funds, which have much higher capacity, and have both employee and outside investors.