skysight-inc/HackerNews huggingface dataset:
These attacks seem to be getting sophisticated faster than defenses are being thrown up. It might lead to better defenses in 5 or 10 years, but the Internet at large is built out of infrastructure is difficult and slow to upgrade. And is everyone scrambling for a solution? Not really... Most are taking the mentality "well sucks to by Dyn but it's not affecting me so I don't need to respond".

Especially because the vulnerabilities being exploited right now seem to by systemic. It's not like patching a zero day. "Uh... we've got 45,000,000 un-upgradeable IOT devices from dozens of different manufacturers executing a DoS attack". You can't fix that the same way you fix a privilege escalation bug in the linux kernel.

If the attackers end up finding the Internet's equivalent to a jugular, there might not be much we can do about it. BGP isn't going to be replaced in the next 10 years, it's here whether we like it or not. DNS is also not going to be replaced in the next 10 years. And neither are the major centralized internet exchange points. Any vulnerabilities an attacker can find related to the fundamental design of those things are going to remain vulnerabilities for many years. If the attacker can get good at exploiting them, we are in trouble.
Book Summary: How to win friends and influence people
Super Cheap Flights Amsterdam to Toronto Canada Round Trip from 336 €
Review of Beats Solo3 Bluetooth Wireless Headphones
> the IoT community

I hate this phrase. It's not like a bunch of people gathered and said "let's make shitty IoT stuff!". It's not a "community", there aren't groups around advocating against security best practices.

If anything the actual community around IoT stuff takes security more seriously than most HNers.

The problem is the companies and manufacturers that aren't part of the community.

And I take issue with your [4]. That has nothing to do with security. It was a glitch, and it happened, and I personally don't like Nest as a company very much and think they make pretty shitty products, but they take security seriously, and in a discussion about IoT security linking a non-security related software bug serves no purpose. Everything has bugs, that doesn't mean it's absolute shit when something goes wrong.

Your [3] is also incorrect. The Arduino IoT Manifesto's second point is that a dev should make sure their product can be updated, and even if it's abandoned it should be able to be repurposed in something else, or updated by someone else.
Said the clickbait. Bleak future indeed!
Wouldn't it lead to just higher internet plans prices? I can also imagine hackers ddosing themselves to get the $$ from the nodes and unfortunate users. And what about international traffic? Same charge for everyone, US citizens and Nigerians? I don't think it can work.
If the transaction cost can become insignificantly low, then money could flow in the direction of the victim. Each attack source could end up making a small contribution to the victim's bandwidth bill.

I'm not sure economic incentives will lead to this happening. There's also the difficulty in attributing traffic to the person who requested it ("is this a request, so we should bill the packet source, or is this a reply, so we should bill the packet destination?").

But in theory, I don't see the DDoS pattern (a high number of attack sources) making any difference to this proposal.
Back to our topic though, the two modern characters, Cumberbatch's Sherlock and House are both arrogant and nasty (yeah, with a "damaged" core underneath).

The original Sherlock wasn't like House but in the more broad sense. E.g. he didn't sadistically play games with his underlings (which he didn't much have) and Watson. He also wasn't about "blunt truth" and other such things House was.
> Maybe these people exist. Maybe there are teams where optimizing technical decisions for these people results in a net benefit.

I've seen this reflected strongly in large companies on the east coast. Design staff is expected to know HTML/CSS, but aren't exepected to have more than a cursory understanding of javascript.

Design will often start with HTMl prototypes, then do a handoff to engineering who will using a JS framework to wire it into the real app.

Lately, though companies are swithcing to React, because JSX seems similar enough to HTML that people presume that design staff will be able to understand it.
An entrepreneur(in working life) has to play soccer and not tennis
What invasion of privacy can't you excuse this way? Any harm caused by a violation of privacy will always have some more proximate cause.
The complex DNS products exist for a reason. For one they can do really good geo-routing. This makes your services go faster for a global audience.

Then, some of the big companies use multiple CDN's. You might want to use one CDN provider in Asia and another in Europe. Furthermore, you may want to select CDN not only on geo-routing dimension, but on arbitrary criteria. Imagine that you had a fixed budget for, say, cloufront, and wanted to route to them as much as you could, but never exceed your budget. Modern DNS services allow all this complex of scenarios.

Furthermore, running your own DNS infrastructure is far from obvious these days. In May 2015 I gave this talk on defending DNS from DDoS:

https://idea.popcount.org/2015-05-11-oarc---dealing-with-dns...

Draw your own conclusions, but I'd say that running your own DNS makes you _more_ exposed to DDoS and extortion than using someone else's DNS infrastructure.
Why? is also how you resolve the XY problem[1], and asking it five times[2] is the basis of a root cause analysis, and as any parent will tell you[3] is part of raising children, and is also what you should seek to put into a commit message[4].

Why? is almost always a good question to ask.

1. http://meta.stackexchange.com/questions/66377/what-is-the-xy...

2. https://en.m.wikipedia.org/wiki/5_Whys

3. https://m.youtube.com/watch?v=sahSAMj8OIY

4. https://github.com/erlang/otp/wiki/writing-good-commit-messa...
I doubt that's the case. Suits will be tough, and undoubtedly come with patch kits, and folks will use the buddy system.

A penny-sized hole would give time to patch, and suits would likely be designed to compartmentalize in a leak. In a true worst-case scenario, chimp studies in the 1970s showed they could survive several minutes of total vacuum.

https://www.scientificamerican.com/article/survival-in-space...
Management can always find another job, and cutting corners can be crucial in keeping your current one.
Compromised routers can be used to compromise devices behind it. Also many devices (like IP cameras) usually have port forwarding to allow the users to access it from outside.
your last point does not appear to be true, the article says that the koseki is held somewhere, but doesn't care where you live.
I agree with you. IoT devices inside a SOHO should communicate externally through a proxy gateway device.
IoT devices should only have communications in a p2p network in a LAN, and have strong restrictions or none access to WAN. Any type of updates should be given from a proxy device having proper hardening than a normal IoT device.
Ask all your interviewers: "Would you recommend <company> to your friends?"

You know what to do when each of the 3 interviewers of your on-site give a blank stare to this question :D
> So, being easy to use is a much more powerful feature for a language / framework / platform than most.

I never said that JS was easy to use. I said it was easy to access. With JS, you don't really need an IDE, compiler, runtime etc. You need a browser, and a text editor and you can get started. It's unlike a lot of other languages in that way.

In some ways, I'd argue that languages like JavaScript are harder to use, or at least harder to use well. There is a reason that languages like Ada exist with very strong type systems. Granted, Ada is not a web development language, but I think my point still holds true since languages like TypeScript are making inroads in this arena.

I think spinning up "convincingly useful" UIs is part of the problem. First, in a lot of ways it's the wrong place to start for software design. It raises expectations and can create a contract in the minds of the client, customer, or user that this is what the software will do, and it will do it perfectly.

I'm not claiming that I (or any other programmer) started out knowing everything. But taking the time to learn, apprentice, and hone the craft of software development (the full cycle, not just writing code) is part of the game.

I think the attraction of a lot of the current web frameworks is the "whiz-bang" results you get, and it's my humble opinion that you should no more build software that way than you should a smartphone, bridge, or building. I think people need to have more respect for the software engineering field, follow best practices, and not throw out everything we've learned as each new Next Big Thing (TM) comes out.
So I'm wondering, what are the implications of this ?

Someone is controlling a powerful enough botnet to do this.

How powerfull is it really ?
What else can it do ?
Was this just a message or a test ? Or both ?

What would happen if they would point it to google's nameservers ?

What should we expect next ?
I don't think the atmosphere is the problem with landing heavy landers like we do on the moon. For some reason I think gravity is the main problem. The only effect I can think of the atmosphere would have is on engine efficiency, and it's so thin I doubt it's much of a consideration at all.
As someone who carries a Zairyu card, I can attest to the weirdness of Japanese bureaucracies. The silver lining is that, in my experience, most (all?) ward offices are staffed with helpful people who generally are good about chasing down answers and maintaining a can-do attitude about bureaucratic matters. The waits aren't usually too long either. You can definitely get caught in some Kafkaesque loops though.
Yes, I do. I'm a home owner and I continuously vote to allow construction and development.

Increased supply is likely the cause of a lot of the demand (jobs + cheap housing nationally) so cutting supply only seems maliciously harmful and not directly in anyone's interest.

You move to SF despite land costs. You move other places because of it.
Many devices use UPNP to automatically punch a hole through the NAT and expose their ports to the world.
mobile layout is less cinematographic btw, pretty much like a normal blog layout
Poul-Henning Kamp had this proposal on the subject back in 2011: http://queue.acm.org/detail.cfm?id=2030258

I think it's a good idea.
I don't think "having a service" has much meaning in this context? OP surely knows that the countries he referred to actually have intelligence services. Germany has at least two (BND and MAD) and depending on what exactly you mean more. I would say the point was to which lengths those services actually go.
They released Part 15 of Podesta's emails 20 minutes ago. If someone had whisked away Assange and taken over his Twitter account, why would they continue the huge dump of emails?
It's interesting to see that water on Mars has 6x the deuterium concentration of water on Earth.

It's unlikely to be a worthwhile export though. One in 2500 hydrogen atoms in Earth's oceans is deuterium. There's enough in your morning shower to provide all your energy needs for a year, and enough overall to run civilization until the sun goes out.

Isolating the deuterium takes some effort, but it's not terrible, and certainly easier than transporting it from Mars, even if isolating it on Mars were free.
Ask HN: Working in the U.K.?
Hi,

I'm considering working in London for the next few years and am wondering how easy/difficult it would be to land a job and also what the process is like.

My background is in analytics, strategy and software engineering.

I'm also curious about how differences in the interview process, work culture, etc.

Does anyone have any thoughts?
Assuming all the Martians live in a single pressurized structure.
Wire a microphone to ESP8266 and mass deploy them. What could possibly go wrong?
In React, everything is Just JavaScript, which sounds very simple and elegant - until you dig deeper. The unfortunate reality is that reinventing HTML and CSS within JavaScript can cause a lot of pain.

So what's the pain for me, as a user of React? It's just embedded HTML for me. They never go on to explain why.

And...

Instead, we offer templates as a simpler alternative:

<template>
<div class="list-container">
<ul v-if="items.length">
<li v-for="item in items">
{{ item.name }}
</li>
</ul>
<p v-else>No items found.</p>
</div>
</template>

Notice how the templates are code in strings. I don't find that simpler at all. I find code in strings to be an anti-pattern. I already have a nice real language (TypeScript in my case) to do "templates".
Hardly anyone has this mentality and you're beginning to sound like a caricature.

I actually agree with you on many things (I find ML the best language of all), but this C bashing/C++ promotion is just silly.
Are you suggesting that people should get paid for receiving traffic?
Trademarks don't expire provided they remain in commercial use. Copyrighting them serves little purpose.
Except when the user sees the author's public key for the first time and downloads it from the same site. Key distribution sucks ....
It may be controversial, but I think there ought to be a law. Some ideas:
http://www.dwheeler.com/essays/law-security.html
The colour of skin is relevant in the case of racially motivated crimes. Not recording this just leads to a society which pushes racism under the rug.
Not sure why you are being downvoted, you are completely correct.
Github certainly works. If you go that route, make sure you build things that can be deployed in reasonable time. Include your server configuration etc.

A good github project that is meant for showing off your skills includes instructions on how to get it started.

For example, if you do something javascript, bundle a minimal server that I can execute on my computer. React.js is doing this pretty well, for example.
Lake ice with shallow snow dunes is great for a little snowmobile flight practice.

If only the machines weren't so damn noisy. They are a real terror to the environment.
Getting good, consistent, well routed, fast and secure DNS Is harder than you'd think. Dyn typically sing speed as the main selling point for their DNS product, they do this through a large distribution of domain name servers geographically and anycast. Many hosts (like say, DigitalOcean) run their own DNS but use something like CloudFlare Virtual DNS on top. Personally I was surprised so many large sites trusted Dyn, Route 53 is a more robust product for production and scale. In the past, I've seen hosting providers switch to Dyn, give them load, cripple them, and have to scramble to revert away. I'm not at all surprised his happened, even given the uptick in botnet traffic globally.
It is when a public company is doing it. Privately-owned companies can do whatever the heck their owners want.
Trio of Magnetrons Power a Microwave Rifle
That's assuming that the free market doesn't "solve" things by ISPs and media companies merging into 2-3 mega-conglomerate verticals whose siloed content is only accessible via DRM via their own network.
When they acted as a pass through for leaks and supported govt.transparency. Now its pretty clearly a partisan attack on dems with the min focus of profiting and keeping wikileaks generating cash (check out their store, which used to never be a thing, if you don't believe me).

The first set of large leaks wikileaks ever did were simply dumps. Now they spoonfeed their leaks, which they claim everyone has a right to know, at a peace that is most beneficial to them. Its clear their primary objective is no longer govt transparency, but their own profits.
Star Trek Inspired Device to Detect GMO in Natural Ecosystems
vodafone is building a lowband/narrowband WAN that could/should be used for helping fix an impending Botpocalypse type of thing IF It's implemented with such a goal in mind: http://www.theregister.co.uk/2016/10/20/vodafone_nb_iot_roll...
This also used to be the case in Poland. Now you can choose the GP you go to and change that decision IIRC twice a year. Choosing a doctor that's far away makes no sense, so there's no or little reason to restrict that choice to close doctors.
“You shouldn’t use a spreadsheet for important work”
I've got the UK version of one of their bog-standard rubber dome keyboards and it's decent enough, for a rubber dome keyboard anyway. Think it cost less than the equivalent of 10 EUR too.
Public companies can also have whatever mission they want, subject to oversight from the owners.
I mean, if Assange doesn't have access to the internet, this might not be him tweeting. It could be someone tweeting on his behalf, really poorly.
I believe this is what TekMol suggested when he said that the "individual players will make it costly for the other players to send problems their way".
> I would imagine that very small number of crashes occurs due to runtime errors in firmware.

If so, how much time and effort goes into making it so?

Just because it's not perfect and doesn't do everything, that does not mean it is worthless.
Why do we never talk about how this over-engineering stuff relates to skill development? It's the same, no matter if you look at soccer stars, chess, or programming.

In the beginning people are clueless and just try to make things change and take a horrible amount of time for it. Then they start to develop some patterns. Then they see patterns from other people and choose one as their one true hammer that will hammer all the nails. Then he spents an awful time arguing why X and Y are nails. Then he sees that not all methods apply all the time and starts to balance them with each other. And finally if he gets that far, he will start to develop his real own, efficient methods.

So where is the over-engineer in this? Not in the psychopath section but in the hammer-and-nail section. He developed far enough to be effecient in some ways but still waists quite some time on trying to make all the problems to apply to his solution. That's normal. That's also about the skill level that you SHOULD have when you leave a university type of education. In soccer that's the point where the usual children club stuff ends and they start to compete in serious competitions, maybe one age level below the one that gets public attention. You want to put people on this skill level against real tasks to realise that not everything is a nail.

So instead of always blaming people for being in this level we should appreciate it. Our university education seems to work for that kind of job quite well. And then we should continue to put these people in the right environment to develop further and provide value to their teams despite the things that they still lack.
Ireland: 360/36 €60pm. No tv.
The mystery of the Bermuda Triangle may finally be solved
But wouldn't this make the matter worse ?

Besides all the complications associating with billing, wouldn't this create more incentives for those controlling the botnets to use them in a creative way to actually make money from traffic ?
C++ promotion? Where did that come from?
> Koseki happens to force people to change their name upon marriage, but makes official gender-change easy. The Japanese shrug at both aspects.

I'm not sure that's fair. People have gone to court in Japan in the hopes of not having to change their name.
4,000 year old working children's rattle crafted as bear cub's head found
I would say that the bugs for which known exploits exist definitely qualify as "security bugs". Treating them as any other bugs is just plain stupid.
> "...much more than endless detail about pre-collapse civilizations like the Minoans."

Funny you should say that, because the author does in the book (by your description) what he describes happening in a systems collapse scenario:

[describing a systems collapse, 48:10] "It usually takes about a century, there's usually a dark age that happens right afterward. And when they're coming out of that dark age they start immortalizing the great period ... before them."
None of this is an inherent problem with curl and piping however; any installer you could download and run has the same list of issues, and many of those aren't even auditable.

You should redirect your anger away from curl and pipe and toward using install scripts vs package managers in general, because that's where your beef really is.
If my current phone, that cost me 750, runs for four years that halves the total weekly ongoing costs to 3.50.
I've used Vue since before v1 and for my use cases it's fine - especially v2 combined with Vuex. I was suspicious towards React from the get go because to me it looked over-engineered. As for Angular 2, yeah, it's a major improvement over its predecessor, but that's about it.
Being lucky doesn't explain the existence of Renaissance Technologies[1], one of the very first quant fund companies, which has averaged a 71.8% annual return from 1994 through mid-2014. In fact, "the fund’s worst year was a 21 percent gain, after subtracting fees". Of course, it's very much of an outlier — just like Facebook / Google / Uber, if we retrospectively see startup funding and hedge fund investing.

[1]: https://en.wikipedia.org/wiki/Renaissance_Technologies
Darpa Transfers to the Air Force a Revolutionary Space Surveillance Telescope
Making every part of your system an injected thing can lead to massive configuration points where there is only one possible choice for much of what is configured. That is annoying and I fail to see how it really helps extensibility.

Oddly, I think the problem is often lack of a global namespace. Consider how you pull in the "parseFoo" method. In languages with a global namespace, you just use it. You can put a declaration saying the method has to exist, but no need to import it from anywhere. That is a build time concern, not a write time one.

Even better, changing the implementation does not require changing the user site, at all.

Namespaced languages have to use factories and abstract factories to get the same flexibility. (Or dependency injection.) I don't even think they're bad ideas, just find it interesting how much effort it takes to change which method I'm actually calling.
My Friends and I Bought an Island (2013)
Does it also solve collision problems, when there is more than one transmitter?
Yeah, and that idea was always pretty stupid. They'd create some some new, terribly ugly, syntax. Maybe at first functions were limited, nut inevitably, they'd add connectors for every function in the "host" language (php/js/...). Or just something generic, allowing you to do something like <this-is-definately-not-a-programming-language native="Kernel.exec('sudo rm -rf /'"/>.

OF course it meant you had to learn a new language, even though you were perfectly capable of perfectly suitable language already. But at least designers didn't have to learn "programming".

There's no way around this. Templates need logic, mostly for loops (or maps, same difference), or dynamic formatting.
Indeed. Ride sharing is BlaBlaCar, and countless other services that existed locally years (even a decade) before, that facilitated carpooling for work commute. In such a service, the driver advertises that they'll be going from Point A to Point B, and is willing to take passengers (in exchange for fuel money). Any additional money that goes to the service itself is payment for matching drivers and passengers.

Uber and Lyft are not sharing economy, they're taxis. AirBnB is not sharing economy, it's Booking.com meets Craigslist.
WiFi handles the same problem by having CSMA/CA (Carrier Sense Multiple Access/Collision Avoidance) and MAC-level retransmissions:

http://www.labs.hpe.com/personal/Jean_Tourrilhes/Linux/Linux...
it has a keyboard interface.
Nice documentation.
Cancer patient's leg kept alive by being attached to arm (2014)
Monit Nodejs app with tinymonit
> I took some pictures of them

Could you post them somewhere? I'd be interested to see those graffitis.