skysight-inc/HackerNews huggingface dataset:
> why wouldn’t the first response be action on the part of ISP and backbone providers?

Schneier points out that these have the shape of probing attacks and are executed across multifaceted services at the micro & macro level. I feel like something needs to be done now. There is, I am sure, a fix but with something like Dyn and other major cloud management, infrastructure, ISP and backbone companies are getting seriously worked over. There is a saturation point.

The attackers have capabilities to hit so many different pieces of exposed surface area, that for small networks/apps/services/companies they are unable to be repelled. In between small companies and Google tier service, some can repel attacks, but they still cede some uptime and performance.

Cloudflare has released some insane reports and when you have motivated powerful attackers striking key pieces of core internet infrastructure, to some extent, you have to consider the entire system is under hostile attack.

> but at a point where DDoS has a significant effect on the market share of a company like Google

I am certainly a layman here, but none of the targets made a choice today to be vulnerable. I am sure the entire chain is rapidly reinvesting and hardening the infrastructure, but this should have probably been done years ago. In between when the companies are pouring resources out (I suspect they are now) and when they gain enough of an understanding to withstand these attacks, there will be downtime. I think google will get hit soon. It was reported that a google core outage of ~15 minutes deadzoned about 40% of America's internet traffic. Even knocking google out for ~1-2 hours would show 2008 what too big to fail means. If google DNS, Chrome, google search, gmail, google apps, hosting, dns, ISP all activities ceased for 2 hours things would get bad.
Do you mean The Collapse of Complex Societies by Joseph Tainter?
>but watching the first episode "The National Anthem" so turned me off that I put it down and never gathered up the will to give it another shot.

>From what I've read, there's somewhat of a split opinion on that specific episode, but to me it was just too unbelievable and silly

ahem https://en.wikipedia.org/wiki/Piggate
If they were useless no one would buy them. They are indeed useful. The problem is they also can be harmful, but not to their users.

The situation can be remotely compared to RF interference. If you use RF spectrum irresponsibly, you harm your neighbors, police, military and other parties, so everyone understands some regulation is needed. RF spectrum regulation is in everyone's interests.

If you use insecure IoT devices, they are exploited to harm some abstract people on the other side of the globe, who cares about them? If more people realize their devices can be used to shut down their Twitter and Instagram, maybe something will change. But I personally doubt that.
> [From the article] In this paper we propose a new cloud architecture that uses reconfigurable logic to accelerate both network plane functions and applications. This Configurable Cloud architecture places a layer of reconfigurable logic (FPGAs) between the network switches and the servers, enabling network flows to be programmably transformed at line rate...

Network planes are done with FPGA and ASIC since a long time. Microsoft is late to the game.
A Mars colony doesn't have to be closed loop either. If you're bringing a large power source, you can make oxygen and fix carbon from the martian atmosphere. This is already part of the plan for the purposes of making fuel and oxidizer for the return trip.

Think of it more like a nuclear submarine with a greenhouse full of potatoes attached -- we can most likely do that.

Nobody's going to try to launch an entire mangrove forest on the first go. Biosphere2 is a failure of experimental design, not a failed experiment.
I don't see this.

Designing for dependency injection is mostly about passing objects around as a parameters instead of using globals / singletons.

It's in big code bases where the tempatation to use a singleton is greatest, because no one wants to refactor all the function signatures to add the extra parameter.
https://www.google.gr/search?q=prevent+windows+10+upgrades&g...

I don't even remember if i followed said procedure, but my win7 installs no longer beg to be upgraded. Maybe MS pulled back its aggressive policy (also, i m in europe).
They were bought by ZF a few years back
No, it requires only two threads to trigger the race. Two processes are not needed.
Short DNS Record TTL and Centralization Are Serious Risks for the Internet
Can you explain what you think it does look like? As a layperson, it's hard to know where the truth lies.
What about disease?

Also, the displacement of god-kings by divine creators?
I'd like to see someone actually name & shame the devices involved. With evidence, of course.

I've had a quick poke around my house, and the couple of devices I have (wemo, philips hue) are holding pretty persistent outbound http connections - not dropping their trousers and exposing telnet.

Persistently exposed telnet sounds more to me like industrial control devices, network appliances, etc. But "IoT" is so vague that we're immediately jumping to blaming consumer devices.
Not sure if the race can be triggered with a single CPU.
Yes. Watch out for sea people. Possible fish-frog hybrids belonging to the Esoteric Order of Dagon.
> For me, overengineering is [...] excessive unnecessary complexity (when there could be an alternative, much simpler, implementation, which still complies with the requirements imposed).

I think the article relates to that though. I agree there are cases in which the complexity of objectively uneeded and will never be useful. (Reinventing the wheel, bad design, the aforementioned misapplied OOP principles and unit boundaries) but what the article stresses IMO is that it's not always easy to see if the simple implementation will comply with the requirements in the future as well. Some complexity could be justified if the speculation on the future is backed by facts.
With the mention of drought and famine in the Levant possibly leading to internal rebellion it makes you think of modern day Syria.[0]

[0] http://www.npr.org/2013/09/08/220438728/how-could-a-drought-...
I raise my glass of Brawndo to that
Fullstack Academy in Minecraft VR on an HTC Vive (using ViveCraft)
Who used Azure here? What's your thoughts about it?
Are they competing against Detroit though, or against Ingolstadt, Stuttgart, Yokohama and Munich?
There is another point though, which is separation of concerns. E.g. if I have a system with different features and some of those features require authentication, I don't want to write a separate authentication system for each feature - here, an abstraction that separates the authentication system from the actual features is really useful.
Built to be resiliant against nuclear weapons, now vulnerable to toasters
Joseph Tainter's theory (The Collapse of Complex Societies) is even more general. Societies collapse when "continued investment in complexity as a problem-solving strategy yields a declining marginal return". The idea is that initially, solutions to problems are found and society becomes more complex as a result, but the benefit of the solutions exceeds the cost of the complexity. But as the society develops, the benefit in the form of solutions to problems become smaller and the cost of servicing the additional complexity becomes larger, until the cost exceeds the benefit. Then things break down and society is forced to become a lot simpler.
What are the questionable political views you are talking about?
Kittens #5 out: with critique of basic income
VNC is pretty laggy to use when you could have RDP instead.
Why Chat May Be King of the New Mobile Landscape
I've had one for about 8 years and the rubber on the armrests has started to degrade in the past 2 years, but other than that no issues to report. Replacement armrests run about 60$.

That said I worked in an office that had about 200 of them, and chairs subject to heavier individuals had problems with the gas height adjuster failing. This was about 5 years ago so maybe they've sorted it out.
I believe this is how the Amazon Dash buttons receive wifi network details from your phone.
ISP will filter more traffic by default. It happened with port 25 outbound when we got too much spam. It happened with whatever port local windows network browser uses.

They'll just add 23 to the default inbound blocks.
How massive DDoS attacks are undermining the Internet
Is steam link VNC?

I've played games via VNC, but only visual novels. In all cases i've known real games require special transmission protocols, which operate in a specific domain, and are a lot faster than RDP, which operates in a broader domain, and is faster than VNC, which is the most general solution.
Someone is learning how to take down the Internet
Chinese government plans to assign a trustworthy score to all its citizens
Hilarious then that this is your imagined perspective of people who dislike you
I believe the Amazon Dash buttons do this.
If you know for sure when your gig ends, you take every "meeting" (emails, calls, however you acquire "leads"), discuss what they're looking for and let them know when you'll be available.

Right now. Just be up front. You're no longer an employee, you are running a business. You no longer have bosses, you have customers. Let them know your terms.

Since this is your first one, you should be aware that the companies you work with will want to play this gambit with you where they make it seem like they want to extend your contract and then never actually do it right up until the point where you depend on it. And then they try to gouge you. You need to have options and they need to know that if they want to continue working with you, they have to pay market rate - and market rate is going up the longer they wait.

You engage with clients all the time. Doesn't matter whether you can'T sell any time right now. You are a business. Engage with your customers.
US airlines can no longer ignore cheap European rivals on transatlantic routes
And both of those things are almost exactly what I see in the market.

1. Qualified people (ie. know useful tech skills and have actual, demonstrated experience with those skills) can find work. Yes, you sometimes have to go through painful tech interviews but if you're actually qualified it is easily possible to secure an offer

2. Salaries are indeed rising, as nearly any salary survey would tell you. Do you think Facebook/Google/Amazon are paying people hundreds of thousands of dollars a year just for the kicks?

> low-paying open jobs would decrease in response to short supply

That's the one part which is incorrect. If there is a shortage then open jobs should increase steadily over time, which is definitely what's happening.

This is especially true because some companies just don't have a clue. So they'll leave up a bad position for months on end but never increase the pay, meanwhile complaining about the developer shortage.

Both as a hiring manager and an engineer, the developer shortage is very evident. We consistently took a long time to find qualified candidates (despite paying a respectably high salary) and on the flip side I have had no problem at all lining up offers any time I've interviewed in the past few years.

This does come with the caveat that the shortage is by far most acute in senior web-oriented engineers. There's no shortage of eager bootcamp graduates. If you don't have relevant experience on your resume or have crippling anxiety with technical interviews then your results will vary substantially.
We read about similar disasters happening today in third world countries and we think "It's all due to the corruption in those places; such things could never happen in developed places". It is really thought-provoking to think about how not very long ago they did.
'Smart' Home Devices Used as Weapons in Website Attack
I've played poker professionally, studied physics and mathematics, ran my own startup, etc.

My resume is the opposite of a career.

If you've got skills, just put yourself out there. Getting a contract is a whole lot easier than getting a job. Which doesn't make any sense, but its what it is.

Sites like toptal and gigster can help getting the ball rolling. Gigster will probably not accept you because they pattern match against keywords or whatever. I don't know. Didn't accept me either. Not a big loss in my opinion. They just mostly do web apps anyway.

Toptal makes you solve a bunch of challenges so if you've got the skills you'll get in.
1. If you really hate templates, maybe it's time to go full bore and make the switch to Elm.

2. If you are working on page/site that may or may not evolve into an SPA, choosing Vue.js over Angular or React seems like a no-brainer.

3. If you are working on an SPA from the the get-go, then the choice becomes more difficult. However, if the SPA is only one part of your site Vue.js offers you the opportunity to use it site-wide, whereas using React or Angular site-wide would quickly become quite cumbersome and I'd guess is most cases folks actually use React/Angular for the SPA pages and jQuery for all others.
This is the equivalent of retiring the domain name itself. If you stop renewing it anyone can hijack it and serve whatever they like. Not to forget, they will also get email intended for that domain.

Anyone sane will keep the domain name and ns infrastructure and serve a 301 HTTP redirect.

All anyone is proposing here is to override the TTL to something longer (like 48h) if the nameserver is unreachable.

Of course the perfect solution would be to have the recursive nameserver fetch the correct record from a blockchain.
Yeah. Until the Wikileaks twitter proves itself with a properly signed PGP message, I won't be trusting it anymore (but even then: If the twitter account has been compromised, maybe they also grabbed his PGP keys?). Also, I'm worried about the wellbeing of Assange. As you said, it shouldn't be too hard to give some sign of life, would it.
Have you ever read the marketing material from those companies? Because they do talk about their mission to host your content.
Sheets of metal have a lot of issues, unless you bring hugely THICK sheets of dense metals. All you do with thinner shielding is turn your alpha/beta risk into a re-radiated gamma risk. Plus, dense shielding is heavy... and therefore expensive in terms of its Delta-v.
A Professor Who Was Right About Index Funds All Along
My definition of Over engineerkng is that you try to cover many edge cases which are not belong to the current system scope, or you try to concern system performance improvement cases which are uncertain.
Fixing the IoT isn't going to be easy
> It certainly is exciting. Tech that began by replacing discrete logic ICs (TI 7400 series) is getting powerful enough to pack a computing punch.

<nitpick> Those were PALs, basically fuse-programmed logic-in-tables. Even a single of the later CPLDs could already replace a board or two filled with SSI logic. FPGAs took that to replacing an entire cabinet.
Upwork is cancer for this. Caters towards less skilled labor, like manual data entry. Nothing I'd work with.

Toptal is great but you have to hustle them as well. If you decide to get on toptal, make it your first priority to make sure the recruiters know that how awesome you are.

Gigster I believe would be great but they're not responding and from past interactions it looks like they're way understaffed to handle all their applications so can't comment on that.

I don't get how its difficult tbh. I do very marginal outbound but have people contacting me all the time. I don't even have a linkedin profile because its too much of a hassle to set up.

Maybe I ended up on some kind of list. I don't know. The people I've worked with so far know that I deliver and I guess I'm living off referrals.

I don't actively network, though. I just talk to a select bunch of people on the internet.
>event-based” Official Documents (birth certificates, divorce decrees and so forth) that prevail in places like America

Almost all other developed countries have comprehensive civil registration system that is not event based (The first country to establish a nationwide population register was Sweden in 1631).

In United States some of these functions are divided between Office of Vital Records in each state and clerk of court of each individual county, but you need official document trail for most things.

Here is Finnish version and their English frontage: http://vrk.fi/en/frontpage
Marketing hint: Don't use renders of hardware as hero images if you already have the real hardware (as the video below shows). Using a render always makes the impression that you didn't build it yet.
Can Airbnb’s Business Model Survive?
Mapillary time travel anywhere where there is overlap
The real weirdness in the US vs the rest of the world is not that you have to get a court to issue a divorce or that there isn't a central registry, but rather there are literally fifty separate systems, all with slight variations, and you're not locked into a particular one. Divorces used to easier to obtain in Nevada, so people would go there. Certain states adopted same sex marriage before others, so you'd go there.
Wow, this is a nice quote:

"Yeah I was wondering about the Linux base. I was denied a Mac when they introduced this policy as I was what they call a privileged user (most sysadmins will be)."
The price is not mainly computationally, but in complexity. You need to have a library implementing that alg, maintain that, make sure it has no security flaws...

And by the way, these Gentoo manifests, if you're worried about their cryptographic security there's something much bigger to worry about: For most users they're transmitted unprotected and unsigned via rsync. There are non-default ways to improve that, but the default is insecure. (It pains me to say this, because I'm a long time Gentoo dev, but it's a nasty truth about Gentoo's lack of security.)

If you want to improve Gentoo's cryptographic integrity this is the first thing that should be worked on (either through a working signing system that would be acceptable by default or by switching to an authenticated transmission mechanism like git over https). This would be much more helpful than adding an obscure hash algorithm.
Wait, isn't this whole plan a massively worse DDoS than what we experienced today?

By exploiting a toaster, the attacker could shut off the domestic internet service entirely, rather than just disrupting Netflix.
Show HN: El-Gamal Encrypted Chat (C language)
Arlington Road
Yes.

But people would do well to get over discrimination. (in the silicon valley software engineering job market. im not talking about minorities in poor neighborhoods having literally no chance of living the american dream. ok? thank you)

Maybe its illegal, but if you're a 45 year old professional with a family seeking a job where you can be highly effective for 8 hours and then go home and play with your kids, do you really want to join a startup that asks you to be in the office for 12 hours so you can play foosball for 6 and do stupid shit for the other 6?

Maybe at some point you have to somewhat appreciate being discriminated against. As silly as that may sound (because they are helping you stay away from pointless drama)

People who discriminate against "the old" in jobs where experience clearly enables you to do your job 10x better are just nuts. Don't sue them. Pity them. And then move on.
Is Figma for Us?
Here in Britain we have compulsory registers of births, deaths and marriages and anyone can query them. You don't get a number or ID card but the data is collected.

It doesn't seem especially different to the continental systems.
So you either tell them that they're on the waiting list or you end up in the dysfunctional basket.
Intentionally impeding progress to protect profits of archaic industries.. awesome.
> When people (rightly) talk about how much slower reference counting is than tracing GC, they're almost always talking about either thread-safe tracing GC vs. thread-safe reference counting or single-threaded tracing GC vs. single-threaded reference counting.

Reference counting has always been slower, even in single-threaded cases. This should be obvious because pure reference counting requires modifying counts whenever locals are assigned, which happen orders of magnitude more often than main memory updates, and now each local assignment requires touching main memory too.

As soon as you defer these updates somehow to recover that cost, you've introduced partial tracing. You can find papers from way back acknowledging this overhead, and suggesting optimizations [1].

[1] http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.25.9...
>I predict that many in bigger cities will give up on owning their own car, and join car sharing services.

>Then you can choose between a private car just for you, or a shared ride where the car optimizes routes and picks up multiple people.

>Other benefits: it's just you? take a small 2 person car. On the way to a party with some friends? Get a nice Mercedes to drive you there. Need to transport some furniture? Get a pickup.

That's how I and many others are already living their lives. I don't see how self-driving figures into that development, really...
Honestly, I've never had to directly deal with the rights and protections put in place for tenants when I rented from landlords/companies (for the past ~6 years), and had experiences ranging from negative to "meh".

I've only had positive experiences with Airbnb (so far at least). I rent the entire home so things like temperature control aren't an issue, and in the two instances where 1) a host was unavailable to check me in on arrival, and 2) a host needed to end a contract early,
Airbnb went out of their way to rectify the situation (calling the tenant every 10 minutes until they responded for #1, and offering equal-cost-per-night lodging at a hotel of my choice for both #1 and #2). I would never expect a landlord to go through that, honestly.

FWIW, I'm located in the NL but I've also stayed at Airbnbs in the US and Canada, and have the next 7 months of Airbnb rentals (3 months per place) already booked.

I would definitely (honestly, not being facetious here) be interested in what rental rights I'm missing out on by renting through Airbnb, and how realistic it is that I'd actually need them outside of something crazy happening (I have insurance for most of those cases).
This mail is shady and not providing any critical information.

Shipping 11 secret patchs? developed in 11 secret branches? to fix 11 undisclosed security issues?

Not a single word about the vulnerabilities, the bugs being fixed, the impact, or the security risks.