skysight-inc/HackerNews huggingface dataset:
Not sure how that article is relevant. As I just said, you can submit a counter-notice. Sure the ContentID system might have flaws, but (as the article says) you can still dispute it.
I've heard good things about both https://www.fastmail.com and https://protonmail.com so would be good to hear your experiences after a bit more use.
I recently did this same thing as an experiment for a full year. No mobile phone actually, no music, no movies, no games, so a little more extreme.

The strangest feeling will come after you “reset” but everything and everyone else around you is still connected. That’s when you notice how different things have become.

Good luck. It’s a nice feeling actually, nothing to be nervous about. It gave me perspective and changed how I respect time and other people. I also appreciate technology a lot more, but it’s now in balance.
Ask HN: Are Twitter and GitHub both down right now?
Is this related to the earlier DNS incident? What is going on?

I'm in the U.K. and isup.me confirms the outages.
Dyn reporting another attack started at 15:52 UTC.
McMansions are actually made for showing off to other people as well as living in. The whole point of a McMansion is a pseudo-status symbol.

If you actually read her blog she actually does critiques the interiors as well.
Ok, misunderstood again, but I get it now.

Depending on the size of it, the whole column may be accessible without rotation, but may require you to stoop low for some items and maybe reach a bit for others.
https://i.imgur.com/SCxAk0V.png is what I get if I try to add two fac to my account, doesn't seem to be any way around it
Sales people make the company money. You can have the greatest product of all time but if you dont know how to find people who need it or how to sell it to those people after you find them than your startup is dead on arrival.
do you end up rewriting the entire legacy applications? How do you balance doing a good job with time efficiency?
No, it's fully compatible.
It seems to have just gone again. This time everywhere, not just US-EAST. O.o

Edit: Seems its hitting their anycasted ranges and taking everything off with it. Even their status page appears to be offline from here.
In the last week my host has blocked 173 different IPs for attempting to guess passwords on SSH. And I don't even have psasword authentication enabled on SSH.

And this is on a nothing host. Almost completely anonymous and yet under constant attack.
Code can still be exploited through vulnerable hardware, though.
I've been waiting on the Quasar Framework (http://quasar-framework.org/) to mature as it's basically Ionic for Vue.
Github seems to be having issues.

EDIT: https://status.github.com/ does indicate issues (with Github).
Vimeo exists and IMO offers a better desktop playback experience than YouTube. That said, they'll never compete, even if they're as good as YouTube as a platform for videos/video discovery because they don't have an entire ecosystem, not to mention name recognition, propping them up (e.g. Android, Google Apps).
Building an enterprise company as a student or first-time founder
And, your art is yours. No artist is able to do huge harm to a whole industry by releasing some crappy painting with terrible design choices. They're only harming themselves and/or their reputation.

There is a parallel though: bad art is weeded out over time, the good stuff remains. In software it is quite similar, the good stuff has staying power, the bad stuff will be forgotten soon enough. The average half-life of a typical javascript framework is quite telling in this respect.
Serial numbers don't matter if you're not using NOTIFY/AXFR.
That used to be the case, but have a look at the new mbed exporters - you can now export to:
uVision 4
uVision 5
DS-5
LPCXpresso
IAR Embedded Workbench
CooCox CoIDE
Kinetis Design Studio
Simplicity Studio
Atmel Studio
SW4STM32 Systems Workbench
e2studio
Emblocks

(taken from this recent post https://developer.mbed.org/blog/entry/Fixed-exporters-in-the... )

Which is a healthy start! There's an open source project for export to things that mbed uses: https://github.com/project-generator/project_generator

full disclosure: I am part of the mbed team
What if I actually meant a guy? /s

I don't discriminate in hypothetical situations though.
Twitter and GitHub down
Twitter & Github are down in Europe
> the registrars do not have any other common interface that can be used to discover domain owners and other metadata

There's `.well-known` HTTP resources: https://tools.ietf.org/html/rfc5785

I work for CertSimple and we automatically use `(site)/.well-known/pki-validation` if we see whois privacy, because in practice customers using whois privacy are inevitably uncontactible. We may use `.well-known` by default in future. Our friends at LE/Certbot (ie, ACME) use `(site)/.well-known/acme-challenge`.

Also there is various efforts to replace/standardize whois, eg WEIRD and RDAP https://tools.ietf.org/html/rfc7483. However .well-known resources work well enough for the purposes and in practice is more widely used.
USA cyber defenses are NOT up to the task of defending our critical electronic infrastructure. Letting every company that runs critical services decide their own security posture is not scalable and has left us vulnerable. While no one is getting hurt, we are taking cyber missile hits from our enemies and eventually the damage will be worse. Other countries with more central controls will be less vulnerable than we are to crippling infrastructure take downs.
GitHub, Twitter down for me in Pakistan.
From what we think atm, you can't get a lump of dark matter, without having something to draw it in. It seems to gather where space-time is already distorted. Although it doesn't seem to need much (some galaxies are "made" mostly of dark matter - i.e., they get most of their gravity from it, rather than from the matter we observe), it does look like dark matter only clumps around spacetime distortions (gravity wells basically), rather than being able to clump on its own.

So yes, you could in theory have a black hole which has dark matter around it, which could do this, but it'd be mostly the black hole, not the dark matter doing the pulling.

Hope that made some sense!
New attack incoming https://www.dynstatus.com/incidents/nlr4yrr162t8
"I don't think there were any real bombshells in the wikileaks emails, but still..."

Yes, there are quite a few bombshells. There are now tags of twitter about specific e-mails. If you are a Bernie Sanders fan, then the level of betrayal and cheating is astounding.

Never mind the e-mails that shows the staged violence at Trump rallies. If this was a Republican candidate, it would be criminal charge time with the Project Veritas videos as exhibit 2.
Funnily enough none of those pitches resonate with me. They all seem a bit long
Sure, good sales people have good interpersonal skills. But great sales people are doing business strategy as well. They understand where their product is great and deficient, which provides a better interface to marketing, business development, and engineering. It helps to avoid some of those deals which require more cost for the service provider than the client.

They leverage their network to connect to the right people for a sale. For example, imagine you are B2B and want to sell your product to Box. Who are the decision makers, and who has money at Box to buy your product? How do you get in the door with those folks and have a conversation? What are the needs of the customer and how can you map existing solutions to these problems? These are hard questions to answer but with a good network you can get in the door, and has less to do with interpersonal skills and more on strategy and execution.
Reference for the earlier DNS incident?

edit: this? https://news.ycombinator.com/item?id=12759697
> if they don't fit within their hiring "diversity inclusion" protocols, they receive a rejection notice.

Citation needed.
> My job is multitasking, and I'm good at it.

I'm sure that you think that you are, but I don't believe we're nearly as good at multitasking as we believe we are; indeed, I think that's a truth cognitive science has been exploring for some time now. The time it takes to context-switch from listening mode to watch- or phone-checking mode and then back into listening mode is longer than we subjectively realise, and long enough to miss important information.
Or more specifically, do security auditors have red teams authorized as part of their audit?
See https://news.ycombinator.com/item?id=12759520
From Web Dev to VR: how to get started with VR development
Is there any existing tool to interrogate a codebase for adequacy for a set of tasks? Ie. PageRank/'citations' for frameworks?

Should there be?
There were noon-JS languages on the web, though; in particular, VBScript was a thing in the (at the time) most popular browser. I understand that at one point there was a third-party Perl implementation too.

Unfortunately there wasn't a good way for the other browsers to implement it. Or perhaps fortunately, depending on your point of view…
Exactly, I see tweet in Google SERPS for GitHub , I try to access and twitter too is down like Github.
See more information at https://news.ycombinator.com/item?id=12759520
One of my favorite movies ever. I've been begging for a Criterion release for years! It's a really deep dive into aesthetics, success, and what it is to be human. Plus it's funny as hell!
[Disclaimer: shameless plug, and also previously announced as a Show HN a while back]

I would like to mention my search engine as another privacy-focused alternative: https://solveforall.com/

1) Does not track user activity. Hosted in Canada.
2) Does not leak referrer to visited sites
3) No ads. Will be considering affiliate links, a paid API,
and/or "good" ads -- ads people want that don't compromise privacy
4) Integrated feed reader which also provides search results
5) Activation codes (like DDG bangs, so ?g instead of !g)
5) Plugins written in JS/data to be searched can be added at any time.
6) Deep search -- get results from the search results page of several sites at a time. Try https://solveforall.com/answers.do?q=rx+480&client.kind=web&...

There clearly a lot more work to be done, and I plan on open sourcing this soon, but please try it out and let me know any feedback you have!
round 2!
The best trick I found so far for managing my inbox is the one I learned from "Deep Work" - just unsubscribe from every goddamn newsletter and notification service that isn't very important to you. I did that over the course of two weeks, and now I get a dozen or so mails a day on my personal account, instead of 100+...
Please keep the unfounded conspiracy theories off Hacker News. Thank you.
Let's Encrypt now supports issuance for Internationalized Domain Names
Yeah, some people are nice just because they think they have to in order to be close to likeable. Truth is, most of those would love to be assholes if they could get away with it. I've been like that. Probably still is, just to a lesser extent.

Being authentically nice requires a lot of deep-seated confidence. It's hard to care too much about others if you're constantly worrying about yourself.
Same from Ireland.
This show is definitely the modern day Twilight Zone. All the episodes have great twists that obviously come from well informed writers.
Why would they attack themselves?
Office is cloud ;-)
Ask HN: What are the best web tools to build basic web apps as of October 2016?
A few years back the stack (amongst the startup-crowd) was a choice between rails/ruby or python/{python web framework}.

Then as of ~3 years ago seems the default went to JS/node, or perhaps Meteor or Ember if you wanted.

I've been out of the loop for ~2 years. One benefit of popular tools is people who want to work with the tools, and frequent updates. Seems like Yarn has dethroned NPM. And react seems to be the default frontend choice. I also see Vue for frontend. And node still the default backend choice.

Questions:

1: Which technologies are popular and what do people like about them? (To help someone deciding between)

2: Is there a site that keeps track of the various options for frontend and backend frameworks and how their popularity progresses?
If ONLY they had 10X developers ...

EDIT: joking aside, the issue with multiple DNS providers is primarily (in my experience at the company I'm at having investigated this in the past) intelligent DNS entries. Example, 'return these A records, in this order, based on the number of requests, roughly balanced'.

There's no universal standard, just common aspects. DNS Provider A has one set of features, names for returning A records in some way, based on some weighted averaging, provider B has a different mechanism. So as an infrastructure person you have to:

1. Investigate provider A and B features for intelligent DNS (it's not even universally called intelligent DNS!), and mentally parse the commonalities and differences

2. Create a custom mechanism to keep them in sync internally. So you hope that A and B have an API for maintaining the records.

3. Ensure that when someone in your org wants to make an update, A and B update at the same time in the same way

4. APIs don't change.
Just found this video, it's pretty good advice https://clip.mn/tag/MDhkMDQ2ZTI
I recall a website with a self-signed cert, but they had a non-https page that had a their TLS cert fingerprint signed with their GPG key; which effectively moved the trust from the centralized CA system to the PGP web of trust.

I think it would be cool to have a standard URL (/.well-known/certificate or something) that explains why you should trust their self-signed certificate, and have the browser show that as part of the view when you encounter a self-signed cert.
First of all, Angular sucks (/opinion), so that's a bad example.

I think it's due to the fact that Javascript is so terrible at any scale, yet is so pervasive, that working with/around it becomes this deer-in-headlights thing you can't ignore... since most HAVE to work with it in some form, doing any Web stuff.

I recommend Elm, as a way around Javascript's problems while still allowing you to run in browsers: http://elm-lang.org/
She addresses that.
Is there any reason why Dyn has to be "down" from Google's perspective? Is it possible that the large DNS providers maintain private network between each other, such that DDoS attacks that are effective against the public are ineffective against the private network?
From here (France) the status page is unreachable as well.
down in Romania too
In the UK here and Twitter and Github just went dark.
They have to play Tetris underground though, with the existing tunnels. In some places the new Crossrail tunnels are only meters away from other tunnels.
Not quite. The way they'd distort spacetime would be different. A small black hole produces more concentrated distortion with nothing around it (think of a marble made of lead on a rubber sheet - lots of distortion, small object), whereas something large with the same mass (a bowling ball made of something very not-dense) would have a different shaped distortion, despite having the same mass.

You also get differences in other things too, based on the other different physical properties and behaviours. Basically, if this exists, it's almost certainly a rogue planet or similar large body, not something exotic. It's not impossible that it's something else, but it'd be very very weird if that were the case.
Ask HN: Is WhatsApp down?
I've been looking online, but can't seem to find anything. Is it being targeted by a DDoS?

Edit: Looks like DYN is being DDoSed. It's the DNS for many sites including Twitter, GH, Reddit, and WhatsApp.
Worth noting formally verified programs are unhackable to the extent three things hold true:

1) Your model of the world corresponds to the world in which the program runs - for example, hardware is usually assumed to be bug-free.

2) The properties you've proven the program to hold are sufficient to stop the hacker from accomplishing their goals.

3) No bugs exist in your theorem prover.
If Assange were say that any state other than Russia were behind the attacks, I'd be inclined to believe him, but since it's Russia and Assange works for RT, I wouldn't put money on anything he says about the Russia state activity.
There are many types of actors even within the USA nation-state / government.

For example, if a particular part of the government got wind of a data dump about to be released by another nation-state or independent actor (for example, a leak of some kind) - I think some parts of the USA government that possesses the ability to do so wouldn't hesitate to take down dns to the entire internet to avoid another similar data leak to the Snowden dump.

Be really wary of attributing intent: you do not know who will benefit the most from taking down certain services. To claim that the US benefits from the internet so much that it wouldn't do certain actions to protect itself from certain types of harm is shortsighted.

Even my example could be really wrong, but the idea is that nobody really can say - "oh the internet is too important to xyz, they'll never do anything!"
Github still down for me in New York.
Same here. Just now. In the UK.
Issue came from dynect.net:

$ dig +trace github.com

; <<>> DiG 9.8.3-P1 <<>> +trace github.com

[...]

;; Received 488 bytes from 192.228.79.201#53(192.228.79.201) in 154 ms

github.com.	172800	IN	NS	ns1.p16.dynect.net.
github.com.	172800	IN	NS	ns3.p16.dynect.net.
github.com.	172800	IN	NS	ns2.p16.dynect.net.
github.com.	172800	IN	NS	ns4.p16.dynect.net.

;; Received 178 bytes from 192.42.93.30#53(192.42.93.30) in 54 ms

;; connection timed out; no servers could be reached
For any sale of a reasonable size, it will go beyond (or not even involve) selling to the end user of the potential customer, but selling into enterprise stakeholders at various levels.

Each of these needs their own messaging crafted for them, and these messages will need to be aligned with the product roadmap.

Important to align with the product roadmap as particularly if the sales cycle is long, companies will typically sell ahead of what the product is currently capable of, with the intention of the product being able to do that by the time the deal is completed.
Or perhaps because the ecosystem is built by people with much formal education and industry experience applying traditional computer science paradigms to a stack with bizarre and unconventional tooling, not realizing it was made by other experienced backend developers attempting to fix the same imagined problem in a domain they don't understand. The outcome would be the same, so it's hard to say for sure.
No. What we need are new techniques for creating back-pressure to all the routers which are forwarding on this type of attack. The issue is that our Routing technology does not give downstream nodes any way to push back on the flood of packets.

Cisco could step up to the plate here. And no, I'm not talking about firewalls. We need newer ICMP type packets to create this back-pressure, so that we can stop floods like this.
and the attacker are back. DDoS v2 is here
I assume this is Unicode in domain names?

I can't wait until I start getting phishing mails from domains that use unicode glyph collision attacks to make them look absolutely legitimate.

Oh, that's not a g in gmail.com, it's some East Asian character on the ass end of the Unicode character map that just happens to look exactly like a g.
Not just those. These websites are also down:
Etsy
Soundcloud
Spotify
AirBnb
Reddit
VOX
NYT
PayPal
Whatsapp
Daily News
CNN

DYN is also down, and it's because theyre down that all these sites are down.
I'm not implying that intelligence is unnatural. "Natural Selection" is the mechanism by which evolution works.
as of now twitter, github, whatsapp - web down.
> We're still waiting for the Ruby on Rails of frontend development.

Well, there are the people who have moved on to React and are raving about it, and then there are the really hip people who have moved on to Elm from React and are raving about that: http://elm-lang.org/
PC laptops are a thing of the past for me, I prefer the UX of the Chromebook, particularly the stripped down keyboard. I do run Ubuntu and the lack of a delete key (delete != Backspace) has not been a problem. The lack of disk space hasn't been a problem either.

Delighted as I am with my Chromebook Pixel, would I swap for the new HP? Nope. Like an Apple user only interested in computers that run OSX I only want a top end Chromebook next time around. The latest and greatest PC is of no consequence. Maybe the automotive analogy is with Tesla, a Tesla owner is not going to be interested in anything out of Detroit unless it is electric.
Depends where it is, but probably not. Repeated gravitational assists from things much closer would probably beat slingshotting around whatever this is, if there's something there.
Accompanying blog post here[1]. Last time I posted a vulnerability walkthrough[2] for fun on hn (that one was of an eBay info leakage issue) I got a couple of requests for more demos like it, so here's a fun one of how easy it is to compromise an un-patched vulnerable WordPress Plugin.

[1]: http://blog.bugreplay.com/post/152117721734/demonstrating-wo...

[2]: https://news.ycombinator.com/item?id=12002579
This is truly a beautifully produced/written/acted series.

They are all eminently watchable. My personal favorite episode?

White Bear!

Please don't google it. Just do yourself a favor and watch it.

So good. The series has lots of future tech stuff to noodle over. It's one of those that sticks with you long after you finish.

Warning: the series can be very brutal at times. No holds barred.
Crystal: Ruby syntax with almost C efficiency
I understand why it is this way. "Perfect is the enemy of good" and all that. It's probably much cheaper to run a system that is imperfect.

But it bothers me that we leave so much of our discourse to such imperfect systems.
Also heard rumors about StartPage being very shady. Would be nice to get some confirmation on this or to learn that it was only a campaign by competitors.
Google for "StartPage malware" ;)
It's clear from the "putting people down" and "name calling" part of that sentence that the criticizing is not meant in a constructive sense. The poster is clearly talking about a situation in which a person feels lifted up, happier by bringing others down. Such a person, in that capacity, is not providing constructive feedback.
I think that is a great anti-spam measure. Most web scrapers are not gonna run OCR on the images of your contact page and you save yourself huge pains and loads of spam. Tell me, what is a better way? Using obscured JavaScript code to inject the address into the page? CSS hacks? HTML comments inbetween parts of the address?
Irish bookmaker already paying out on Clinton win
I operate in a similar way. If I get a new thing a old thing goes. I bought a lot of new shirts over the last six months and realized I needed to donate half my closet over the last couple week. Same goes for electronics, cutlery, books, ect.
Any insight into what breaks verification is useful. Thanks!
This comes up so often, and I really wonder what the logic behind this should be.
"We have identified a security problem. Therefore instead of fixing it we should abandon all security." Doesn't seem to make a lot of sense to me.
Yep, just saw another submission for Twitter and GH. This seems like it's huge.
DNS came back for a while and just started flaking again.

$ nslookup github.com
;; Got SERVFAIL reply from 8.8.8.8, trying next server
Server: 10.0.0.1
Address: 10.0.0.1#53

Non-authoritative answer:
Name: github.com
Address: 192.30.253.112

$ nslookup twitter.com
;; Got SERVFAIL reply from 8.8.8.8, trying next server
;; Got SERVFAIL reply from 8.8.4.4, trying next server
Server: 10.0.0.1
Address: 10.0.0.1#53

Non-authoritative answer:
Name: twitter.com
Address: 199.16.156.102
Name: twitter.com
Address: 199.16.156.230
Name: twitter.com
Address: 199.16.156.198
Name: twitter.com
Address: 199.16.156.70