skysight-inc/HackerNews huggingface dataset:
What many have not seen is that since 2.0.2 the DNSmasq lookups also give away what type of hardware you have behind it. For example the www.php.net lookup indicates you have HP hardware either running pfsense or behind it, the order these dns lookups take place in are a code waiting to be cracked if you have even noticed what they really are!

In later versions these lookups are hidden from the message logs, but you can find them easily, just assign a fictional Lan IP address to the DNS during setup, do not allow the override of DNS from ISP/PPPoe, log all messages.
In later versions of pfsense ie 2.0.3, don't complete the wizard during the initial setup which forces a reboot, the reboot hides these messages, open a new tab pointed at the main pfsense interface and do the above changes to log the dns lookups, just don't reboot. In even later versions, those dns lookups can be found by packet capturing the wan output or plug the wan interface into another firewall (double nats I know its bad) and then monitoring the lookups that way.

The spooks can use these dns lookups to obtain information about your setup, as can ISP's and anyone who has hacked any switches belonging to your ISP or those en-route to the root servers in the states. When using Bind and the root servers, the capitalisation of certain root servers also gives away the type of firewall you use to the NSA for later hacking. You'll notice that Bind doesn't capitalise
the root servers on other platforms like the RaspberryPi, thus not giving away anything you might have hidden behind a Raspbian based firewall.

You'll also notice that the Texas repository of pfsense
https://atxfiles.pfsense.org/mirror/downloads/old/

doesn't have the 2.0.x iso's available any more. Perhaps because its an attempt to cover up what I have detailed above?
I have ISO's here for my own records, but the earliest ISO's available are 2.3.x

In a way from a hacking perspective, not only do you have all your eggs in one basket with everything pfsense has to offer, because of the inbuilt rules (also seen in opnsense) to allow anything out from the firewall, its good at distributing malware from the pfsense box without any users knowing about it. After all you trust what your firewall says, which is a variation on the lizard squad hacks that targeted routers.

Time and time again, I keep coming back to the conclusion, you just cant trust the Americans!
190 = 5 × 38
Linux pioneer Munich poised to ditch open source and return to Windows
I'm eager to see the follow-up: "How some dude's medium post triggered a left-wing moral panic on HN!"
The Actor Model is imperative. The "send" command is updating state as a side-effect, just like POKE from my old ZX81.
A Linux Driver for the Hue+
> Speaking to Gizmodo through Twitter Direct Messages, Elon Musk said, “Our understanding is that this guy was paid by the UAW to join Tesla and agitate for a union,”

I guess he got this tactic from Trump, claiming that any dissent comes from paid protesters. While offering no evidence that it's actually the case.

> Update 10/2/17 9:20am EST: In a statement this morning UAW categorically denied that Moran had ever been paid by their organization.

https://gizmodo.com/elon-musk-responds-to-claims-of-low-pay-...
sounds like the fate of all my submissions
"Personally, I'd love to stop subsidizing the third world at the expense of American citizens. Developing countries need the US a lot more than the US needs them."

That's the exact illusion most Americans live on.

"On November 7, 2016, debt held by the public was $14.3 trillion or about 76% of the previous 12 months of GDP.[5][6][7][8] Intragovernmental holdings stood at $5.4 trillion, giving a combined total gross national debt of $19.8 trillion or about 106% of the previous 12 months of GDP.[7] $6.2 trillion or approximately 45% of the debt held by the public was owned by foreign investors, the largest of which were China and Japan at about $1.25 trillion for China and $1.15 trillion for Japan as of May 2016.[9]"

Go figure..

Source: https://en.wikipedia.org/wiki/National_debt_of_the_United_St...
That's really cool. I was just looking at the ReadLine that the PowerShell team released the other day.
IDEA individual license
I love Intellij products. I inquired about buying their All Product license, and discovered that this license permits the use of one product at a time. So if I am in Intellij, and want to use AppCode, I have to exit Intellij first. And then exit Intellij to switch back to AppCode.

This seems nuts, so I've been going back and forth in email with a sales person. The goal is to prevent multiple users from using the same license. Which, of course, is not a concern for an individual developer license.

The sales person also said that individual developers actually do purchase multiple licenses due to the restriction. Can this possibly be right? Anyone out there do this? My current thought is to by AppCode and use the community edition of Intellij.
Do you think a blog post evangelising native apps over the web should only be published via a native app?
It's interesting to understand the primary motivator for UBI around the world. It sounds like the Fins want to use it to take away the minimum wage, while in the US the primary motivator is to take away the rest of the welfare services.
1) Satellites don't use fiber as a medium so have that against them
2) from point A to a satellite back to point B is generally going to be a pretty significant distance, as such, when combined when a comparatively slower medium you'll get increased latency, which is bad for interactive applications.
3) satellites can be susceptible to weather issues.
> Are the majority of Trump (and Farage, and Petry, and so forth) voters similarly uninterested in actual facts?

Not just uninterested, but actively conspiratorial. It's hard to talk with a Trump voter when it veers into territory like "world leaders are withholding a cure for cancer" and "the Pope has a secret base in Antarctica."
Yes, but I would say fuzz testing is intended to test APIs whereas monkey testing is intended to test UIs instead. It's quite subjective though.
That's correct. Brocade closed sourced the main product in 2012 and left the community edition to die.

It was forked in 2013 (renamed VyOS) and is under active development as a free open source project.
He wasn't being frugal to be frugal, he was being frugal to maximize the amount he could invest TODAY and earn TOMORROW.
Comments like this are a dime a dozen on Reddit and Hacker News but Apple is doing fine.

Higher MacBook Pro sales, highest ever iPhone sales. Services doing well...

I'd say their biggest problem is MBP pricing is high and a stagnate desktop line.

MBP pricing is typical for a redesign, not even high if you include inflation. They'll likely go down with time as they have in the past.

And desktops... Well hopefully there's something this year...
We're Sharing Our Marketing Strategy Executive Summary for 2017
>This is an important question because projects like Python will live that long.

Planning in the 20 or 50 years range is counter-productive.

Heck, whole countries might not exist by that time (the same way ex-USSR and Eastern European countries split into different ones).
That is interesting. I kind of feel like Charlie Brown and the football...If we agree to get rid of the safety net before UBI is implemented, I don't think the conservatives would follow through. I really don't. I don't think that they are interested in co-governance anymore.
For all the other flaws the SV startup game has, it's probably the only place you can realistically become a CTO or CEO in your mid-20's.
What are the bugs?
AWS status page is a point of contention within the support teams as well. I've contacted them for problems when the status page says "everything's fine" and they have known outages. There is ALWAYS a lag between them knowing and anything being reported, usually on the order of 15-30 minutes. Most of the time their response is "Yes, there's a problem. I don't know why the status page isn't updated yet, it would really help us (support) out if the page was accurate."

Twitter is usually the best place to watch if you think it's not you, search #aws or #{service_name} and view the "Live" tab to see if others are reporting the same trouble.

Calling attention to these failures via support ticket, via sales rep and even publicly via @ customer support heads has made zero difference. Here's hoping this blog has enough visibility to make a difference.
This is because unions think they would lose power if basic income is implemented. Unions in Finland have abandoned part time and low income people and only look after people who have full time jobs (who are members in the unions).

Green party in Finland made 560 euro basic income proposal few years ago that was cost neutral. That was verified with microsimulation model that used real world data.
Starter Financial Model
Show HN: A self-hosted js compiler in 1k loc
4 Reasons your freelance writer website isn't converting visitors to leads
It's almost like a corporation is a mini fiefdom. Like there is a petty dictator at the helm , no matter how benevolent. Weird how capitalist companies are structured that way
Your entire economic system is at the mercy of said lunatic.
I think it's tricky. If prices go up then demand drops. So businesses have to adjust to make things work. So late hours, early hours will be dropped so Revenue/Employee is large enough to be profitable. more self check out lines at groceries.
Is it (-)safe to say that Sarao was a randomly lucky trader rather than a genius?

-By safe, I mean probabilistically possible in a sample of x traders.
> This example will show how to register a route and get the data using just the net/http package.

What is a "route"?

(I don't need an answer, but I think the example should explain it).
Eh, I wouldn't use the response to OpnSense against them. I tried the first few "releases" and walked away screaming (this was before I ever used pfSense). Lost configurations, routing issues, locked out of the interface, stability problems, and more. But it looked pretty, right?
Seems obvious. It's like the current talk of repealing the ACA and then replacing it with something later. If you actually mean to replace it, there's no reason not to figure out the replacement first, and do essentially an atomic swap of the two.
Guys, they started in 2004. Its 2017 today. hackersNEWS ?
Let me offer a deal:

If i get a green card today (no strings attached)
I'll quit my H1b job right now
I'll bootstrap my own startup that'll create 10 jobs in 1 year

Does that sound like a good deal? You are happy, I'm happy, and all the jobs i create, those employees are happy. its a win-win-win deal.
[1] But don't you know by now that everything you are saying is BS? No one can tell the difference, there is no "opening up" it is all in your head, your 1960s bottle or your $6, its not just "personal taste" there is no taste difference, it is proven over and over again.

[1] https://www.theguardian.com/lifeandstyle/2013/jun/23/wine-ta...
Understanding the Basics Building Blocks of All Legal Contracts
The employee contribution maximum is limited per person, but the employer contribution maximum is per company (if the companies are unrelated, by ownership structure). Some illustrative answers here:

https://www.quora.com/401-k-Is-it-possible-to-fund-both-a-So...
Most current WebAssembly compilation paths produce asm.js as an intermediate artifact. In the near term, backwards compatibility should be relatively simple: save both and load the asm.js code as a fallback.
Develop these skills first before becoming a product manager
Union leaders don't like UBI because it empowers individuals, not union leaders.
Steam+Engine+will+run+between+Delhi+Cantonment+and+Rewari,+nation
in NYC right turn on red is illegal, and it makes sense due to the number of pedestrians.
For evolution, the answer tends to be "why not?"
Taming of Complex Business Logic
I disagree, but my intent was not to argue. I've found it quite common even with developers working side-by-side for there to be a big gap between what they think is going on and what's actually going on. Thanks!
I would be much more in favor of a employer of last resort program.
To follow up to your last comment: as you may know, the idea of an infrastructure being invisible until it breaks down is one of the major themes in academic study of infrastructure.

Gregory Bateson and Merleau-Ponty used the example of a blind person's cane as the paradigm of a tool that disappears to its user. Heidegger talked about similar notions of tools being present or absent from the point of view of perception. See p.208 of this book https://books.google.ie/books?id=U8IPBwAAQBAJ&pg=PA208&lpg=P...

Having said that (I'm not sure why I am saying it) a much more important aspect of infrastructure is the political one: does a given deployment of infrastructure reinforce existing unfair social advantages, or tend to equalize things? Fancy words like "apparatus" and "dispositif" can get you access to that discussion though I'm guessing it has a high ginger-factor for the HN audience.
(EU citizen point of view) I'd never consider a role in US that pays less than 150k (outside SV) $200k (SV/NY).

H-1B is really bad because the holder has limited bargaining power vs US citizens hence he's forced to accept a lower salary when competing for jobs.

There's also no clean way to allow talent to move around the world.

A fair solution would be to agree on visa free movement of specialists earning above certain threshold ($100, $150k etc), even if it starts with a group of "most favourite nations".
Yeah, you have to disable tcp hardware packet segmentation offloading.
> That's why PhDs aren't lining up to spend $250,000, then take several years (if lucky) to get a $52,000 a year job with limited security.

In many fields, often fields that don't pay well, the PhD students are mostly American. In my engineering program, the vast majority were Indian and East Asian. They have all gone on to get very good paying jobs.

And it makes a lot of sense for them. Most probably wouldn't be getting a high paying tech job back home, so the opportunity cost of spending 5 years in a PhD program is low, and it opens up a lot of doors. By comparison, a U.S. citizen with an engineering B.S. might get paid $65k-$115k year out of college. A 5-year PhD will then cost them $250k-$500k in lost earnings.
Sometime you like to waste a little money and sometimes you like to waste A LOT of money, to each his own, thats the fun part!
Shoreham is actually way more interesting and complicated than that. The plant was never really in operation, but a deal was struck for it to briefly "turn on" so that cost recovery could be triggered and passed on to the rate base. It never entered real operation despite being completely finished.
In my opinion, this kind of frugality happen when you have a small (or non-existant) social circle. The main reason to spend (clothes, cars, etc..) is to impress the people around you. If they don't exist, you are not that much pressured to spend.
> If anyone wants to play around with this and has at least $10k to play with, Interactive Brokers will give you better fees.

For anyone 25 or younger who's reading this, the required minimum for you is $3k[0].

[0]: https://www.interactivebrokers.com/en/index.php?f=4969
Debt and GDP is only loosely related. Nations only need to service their debt not pay it down in some short time period. Thus, 14.3 trillion in (debt) * (current interest rate - inflation) or around 14.3 trillion * (2.423% - 2.20%) = 28.6 billion per year or ~1/500 GDP aka peanuts.
1. Satellites aren’t used because they can’t carry terabytes of data for less than a billion dollars per communication line.

2. The bandwidth available using a single fiber optic cable and a laser beam is much much greater than you can get from a single satellite radio channel. This is due to the higher frequency and shorter wavelength of light compared to microwaves. The higher the frequency, the greater the bandwidth.

3. An undersea cable is a bundle many fiber optic cables. Consider each fiber cable as a channel. You can have more channels, each with a higher capacity, than you can build radio channels into a satellite.

4. The uplinks and downlinks cost and putting the satellite in space is a huge huge ask and far more risky.

5. The delay for satellite communications would be around 255ms both uplink and downlink. For continuous traffic this not to a bad price to pay. But for burst traffic (like voice) you pay for the delay at each pause. The Rule of Thumb is 10MS per 1000 miles so Rule of Thumb to Europe on say TAT-8 would be about 75MS vs 510MS for satellite.

6. Finally, you can fix a broken cable. Once you launch the satellite you don’t get a chance to fix it if it gets broke.
>And I suspect that for a "brown" skinned persons the south is not exactly a welcoming environment.

That's very ignorant.
Narrative Neediness
I'm still bummed that he never posted the last 2 parts of his Programmer's View of the Universe.
It's worth noting that this grammar is a bit more restrictive than the Perl 6 equivalent. In particular, "\d" in Perl includes not only 0 through 9, but any Unicode character that's classified as a "digit". The Perl 6 grammar documentation features this in an example of using arbitrary methods in grammars: https://docs.perl6.org/language/grammars.html#Methods_in_Gra...
Well, if you remove the limit on the number of H1B visas then all is of course fine and dandy for employers and potential H1B visa holders like myself, but I do think you have to respect the fact that American workers have a legitimate interest in restricting the number of visas...
When you find yourself replying to every branch of a thread, it's time to take a break.
While your points are true, how are they different from the situation 10, 20, 40 years ago? I'd argue that, similar to salaries, other teacher benefits are about what they have always been. My argument goes against my experience; my wife is in the public school system, and benefits are weaker and cost more than they did 10 or 20 years ago, but I won't chase that too hard here as it is only anec-data.
Check it out:

https://msdn.microsoft.com/en-us/library/windows/apps/window...
>Bored with ho-hum cloud backups?

Well I can't say that's something I've ever thought.
> They took much more than they have given (which the source code licence allows them to do, even if it's morally wrong).

I don't want to start a flame war, but if the BSD license allows for them to do this, why is it morally wrong?

That is - how can you complain when the license explicitly allows for this? If you (not you personally, of course - but the OpenBSD project) didn't want this to happen, then the license would need to be changed to prevent it.

Of course then, companies wouldn't be as willing to use the code, as we tend to see with the GPL.

But if companies are just going to take the code, modify it, and not contribute the changes back (or contribute little back), where's the loss by using another license?

If the loss is "but the code then won't be used in the greater ecosystem", why complain when it is?

Again - I'm not trying to cause a flame war; everybody has their license and needs. I'm just trying to understand why there is complaints when code isn't contributed back under the BSD license, when it explicitly allows for this.

Furthermore, I am wondering if there is anything we can do about it, that doesn't cause the kind of ire to rise when the GPL is invoked instead. Perhaps there isn't a solution, but I'd love to hear ideas on the subject.
when the idea is baked into how your whole traffic system operates, you don't have these issues. People turning right have the same right-of-way as people going straight through an intersection. People turning left must wait for all traffic to clear from the opposing lane before turning.

As for someone to your left going straight thru the intersection... you, turning right, must yield to those going straight. However, there is not always traffic coming straight through the light. If someone on the perpendicular street turns right instead of going straight thru, you may turn right from your lane into their lane because there is a pause in traffic flow coming through the intersection.

That probably doesn't make much sense but the bottom line is that when everyone knows the rules and everyone observes them, right on red is mostly painless.
>With access to a Usenet news server, you can simply upload your backup there, and it will be stored redundantly in news servers all over the world. Best of all, this approach typically costs considerably less than a cloud backup service.

I saw no mention about "retention policies" in the article. For newsgroups with binaries, the other Usenet peer servers can choose to download only text and ignore binaries. Or they only hold binaries for 30 days or whatever discretionary time period they choose based on available disk space.

With AWS Glacier, Backblaze, etc the data retention would be explicitly specified.

[1] example of limited retention period: http://www.giganews.com/blog/labels/retention
This is interesting content, but the format is atrocious. How is Twitter still relevant when posts like this must be made one sentence at a time?
I'm a software developer. What I know about manufacturing, I learned from my Grandfather, who lived through the depression, worked 4 jobs all the time, and died from the emphysema he caught from inhaling the fumes from unsafe chemicals in the factories he worked in - back before there were adequate protections FORCED upon those companies by organized labor and the government.

But that's harping on the past. No, I'm talking about my own personal experience as a software engineer.

I've seen managers get big bonuses for denying their workers vacation time. I've seen employees get "disciplined and fired" for minor infractions, that I'm certain had NOTHING to do with their medical conditions that were driving up the costs of the company's medical plan (that would be illegal!)

And more, I don't even NEED the evidence I've presented. I'm drawing the cost-benefit analysis in raw terms. And I'm saying SOME managers play that analysis in ways that hurt workers, and think those costs (of hurting employees, employee morale, reputation of the company) will be short-term, and are worth the short-term benefits.

This blind faith that managers will always do right by their employees ignores the facts. Some managers don't. And workers need to protect themselves from those few who are dangerously abusive.
While interesting, this seems like a bad idea. You're uploading your backups, no matter how encrypted, to a place where they will be publicly available to download.
A note: trying to apply strategies from the How-to-Game-Product-Hunt handbook will not work on Hacker News. On HN, content should speak for itself.
Todd McLeod has a good introductory series, with lots of follow along examples.

https://www.youtube.com/channel/UCElzlyMtkoXaO3kFa5HL0Xw
Use of Technology in Education Discussion
Couldn't a genetic comparison give us an estimate of how long ago the 2 lines split?
>At work, how can you just write code without testing the functionality

consider this scenario:
developer is tasked to make an update to a report. He does not have reporting services available locally (long and complicated setup) and neither does he have access to the data he will be reporting on (because of data privacy regulations). He makes the change to the report, checks in the code without any testing and it then blows up in qa. This is a common scenario that i have seen many times before, especially when developing for systems or with data that developers don't have full access to.
"You can do more than pfsense with a plain old Linux box but it takes some dense reading to learn to manipulate the traffic control and routing tables yourself."

That's why having a nice UI adds already a lot of value :).

I wanted something under Linux and I ended up trying a combination of Shorewall and its Webmin plugin to have something similar, but a more holistic solution would be interesting.