skysight-inc/HackerNews huggingface dataset:
> What did the game offer that the rest of the world could not? To begin with, games make sense, unlike life: As with all sports, digital or analog, there are ground rules that determine success (rules that, unlike those in society, are clear to all). The purpose of a game, within it, unlike in society, is directly recognized and never discounted.

I think this is really the underappreciated factor in why people prefer video games to jobs. For some people, it's not that they're lazy and games are an excuse to avoid work, it's that the games are actually a far better work experience than the average job. You don't have to go to any meetings where an HR manager breathlessly explains how the new performance assessment web app is going to make everything better, even though it just looks like a reskin of the one you used last year. You don't have to spend a single nanosecond thinking about whether you're going to be edged out for a promotion by someone who has a better rapport with the boss. There are no especially demanding customers or government budget cuts eating away at the revenue you're paid from. You get to just do the goddamn work.
So you work from home and your 12yr old discovers SET and sends a few phishing emails to their friends, so now the ISP cuts you off from the Internet. Now what?
When "even" bees are intelligent enough to teach each other skills, i really marvel at the mental gymnastics/machinery that goes into convincing oneself that humans are somehow a class apart from animals, and it's totally okay to eat them after having kept them pent up in atrocious conditions. Makes mental note to be a better vegetarian

(and FWIW: i'm not being morally superior here: i believe that in reality, probably being vegan is the only morally defensible position, but the flesh being weak and all... And in actual fact, probably even that is a tricky position: by surviving one is probably making the calculated decision (conscious or not) to put one's own survival above the cost of some other's demise.)
Bigscreen founder here. Thanks for the kind words! If you have any bugs or feature requests, please let me know! darshan@bigscreenvr.com
Maybe it fits more if you think of it as a vote "against the left" instead of a vote for Trump. As for your "real evidence", I don't think that enters into most republicans considerations.
On a personal note, I agree with you.

Before Let's Encrypt is available to public use (beta), CF provided "MITM" https for everyone: just use CF and they can issue you a certificate and server https for you. So I tried that with my personal website.

But then I found out that they replace a lot of my HTML, resulting mixed content on the https version they served. This is the support ticket I filed with them:

On wang.yuxuan.org, the css file is served as:

<link rel="stylesheet" title="Default" href="inc/style.css" type="text/css" />

Via cloudflare, it becomes:

<link rel="stylesheet" title="Default" href="http://wang.yuxuan.org/inc/A.style.css.pagespeed.cf.5Dzr782jVo.css" type="text/css"/>

This won't work with your free https, as it's mixed content.

Please change it from http:// to //. Thanks.

There should be more similar cases.

But CF just refuse to fix that. Their official answer was I should hardcode https. That's bad because I only have https with them, it will break as soon as I leave them (I guess that makes sense to them).

Luckily I have Let's Encrypt now and no longer need them.
I would amend that to say it may result in the illusion of cheaper internet. Your internet bill will go down, but services on the internet you use will either get more expensive, or degrade (as with adding advertisements).
I'd love to learn more about how you're using Bigscreen (and how we can make it better for you). Could you email me? darshan@bigscreenvr.com
Exactly what I was going to compare this to. And I hope it is—DabbleDB was excellent. This looks like it has more interoperation features (Excel synchronization) but maybe doesn't have the auto-guessed column-types + relations that DabbleDB had.
You're right, I guess. (Disclaimer: Not affiliated with any company affected / involved)

But I still find it troubling. Is it their mess? No. Does it affect a lot of people negatively - yes. I expect Google to clean this up because they're decent human beings. It's troubling because it's not just CloudFare's mess at this point.

It reminds me of the humorous response to "Am I my brother's keeper?", which is "You're your brother's brother"
Millionaire Migrants: Countries That Rich People Are Flocking To
Get out of my country kansan yelled before shooting 2 men from india killing one
Not very familiar with librevault, but on a cursory glance the design seems fairly consistent (p2p, encryption, offline support).

However, Dat has put a lot of focus into developing an ecosystem to build applications on top of the protocol. This is making awesome things like Beaker Browser[0] and peer-npm possible [1].

[0] - https://beakerbrowser.com/
[1] - https://github.com/noffle/peer-npm
I've already (mostly) moved away from google, at least for email. This isn't Google vs. Fastmail to me, this is Fastmail vs. Zoho. (Which I already have a free account with for my domain)
>If a company invests their excess cash then that money is spent and is no longer profit and no longer taxed.

I was using a simplified example that ignores deductions. You're right of course.

But that doesn't change the fundamental relationship between taxing profit and investment.

Even if all reinvestment is made tax deductible, a tax on profits still reduces the incentive for individuals to invest in corporations, since all investment decisions are based on ROI projections, and with higher taxes on profits, ROI declines.

Moreover, sometimes it is more effective to sit on profits, and wait for a good opportunity to appear, and taxing all accumulated profits creates an incentive to not do that.
neutriNote – A hub of written thoughts in fast, searchable plain text
And it's going to be great until you hit the top 100 list in your segment. Then the cockroaches will move in and sell knockoffs of your product and you can spend your days proving to seller central staff that they are in fact knockoffs, with the requisite purchases and returns from your new competitors. And the requisite requests for escalation and emails to jeff@ when the associates refuse to escalate.

Enjoy your pink cloud while it lasts. And maybe keep your full stack skills current as a hobby. But be assured, there is a competitor somewhere willing to flip your product for $0.01 profit per unit.
Neural Painter
You are absolutely correct. I think there's a massive opportunity for "3D programs" (Blender, Maya, AutoCAD, etc.) to become native VR applications.

Bigscreen is instead about the other 99% content that's completely 2D. I wrote a blog post[1] about our founding mission and one example in there is Microsoft Word. Even in VR/AR, the words won't be flying around you in 3D space. Movies and videogames won't disappear and be replaced by 360 and VR games anytime soon.

The question that Bigscreen is tackling is instead: how can VR/AR improve our 2D computing experience?

[1]: https://blog.bigscreenvr.com/3-million-financing-round-led-b...
Great(x3) parent
https://news.ycombinator.com/item?id=13718752
For a moment I thought it's about git and cherry-picking.
Interactive Julia set generator
Does Cloudflare have complete logs to rule out that someone noticed this before taviso and used it to massively exfiltrate data by visiting one of the vulnerable sites repeatedly?

If they can't tell, someone may now be sitting on a lot of very juicy data, far beyond what may be left in these caches.
So you're claiming that a manager at Uber thought it was ok to buy jackets for the guys, but to not get anything for the women because there was no bulk discount?

What idiot thinks this line of thought:

"It would unfair to the men if we paid more for the women's jackets, so we'll just give the men jackets and the women nothing. That seems more fair, right guys"?

makes any sense?
I think the content is very relevant to HN. For better or worse, CF has essentially become a significant part of the global internet infrastructure. We should be aware that the CloudFlare CEO is trying to shift blame for their mess. A mess that impacts a staggering portion of the internet.

With regards to the fact that it's part of another thread, I don't think that matters too much. If it were an update present as a separate document it would pass muster. There've been several open letters, and responses to such, and further responses again, etc that have been posted to HN. Furthermore there's no guarantee that someone reading the original thread will see this exchange; I read the thread after the exchange happened and missed it.

This is significant enough to be posted as its own item, that it's part of another, ongoing thread shouldn't take precedence over this significance.
2^80 time is not as much as you think it is. The bitcoin network is currently calculating about 3 * 2^60 hashes per second. It can do 2^80 hashes in under a week.

The 2^80 space cost of doing a birthday attack is a lot more notable, but it's not unfeasible either. Yearly hard drive production is somewhere around 2^70 bytes. You're not pulling that attack off in the year 2017 but a big budget you could get probably get there in a few decades.
Bigscreen lets you view any content in VR that you can currently view on your computer, not just web content.

You can see your entire desktop on floating virtual screens, which enables you to use your any desktop app (including but not limited to your web browser).
>That's why the NRA's position is to say NO to any kind of gun regulation, because they know that's how you ensure guns are made available and gun culture is for sure secure.

There also exist groups whose sole purpose is to make gun ownership infeasible for the vast majority of Americans. Given this, I don't believe their position is unreasonable - the threat to their values and culture is very real.
What other CDN makes it easy to use plaintext between the CDN and origin, yet use a secure connection between the CDN and the end user, and has the nerve to market this as a feature called "Flexible SSL"?

Edit: I wasn't very clear. GP is wrong saying MITM is "wrong" for its own sake. I think Cloudflare is harmful for other reasons though.
> Being against the war after it started is utterly irrelevant.

It’s not irrelevant when someone claims "I was totally against the war in Iraq” is a lie. That's provably true.

> He was weakly in support of the war before it started. That is a fact.

Very weakly after he was asked the question for the first time. It’s utterly irrelevant.

> When he says he was against the way, he says it to differentiate himself from the people who voted for it.

Yes. Because those that voted for the war did not come out against it until much later, if they even did at all. He came out against it early.

> When he does that, he is lying.

Nope. That doesn't follow from what you wrote. Do you want to try again?
When you do have cooperative ISPs filtering DDoS traffic, it's usually a null route, so the IP under attack goes offline, but without taking the rest of the customers on your ISP offline.
Well, consider the numerous animals that are physically unable to eat vegetarian.
Thousands of years from now, when biological life on this planet is all but extinct and superintelligent AI evolving at incomprehensible rates roam the planet, new pieces of the great PII pollution incident that CloudFlare vomited across the internet are still going to be discovered on a daily basis.
Nuking the caches is one thing, but what about services like the Internet Archive whose job it is to hang on to these pages? Pages with leaked data are clearly difficult to identify; removing the leaked data without nuking the document may be impossible, at least in an automated fashion. Are we supposed to erase five months of history from the affected domains?

This CloudFlare breach seems to have put a lot of people in a tough spot, but it feels like it's put archivists in an impossible position.
Once you conscript animals into human society they do require tremendous resources and they do pollute. You can look at animal agriculture for an extreme example. It's easy to forget that animals are very inefficient resources because they use most of their input to simply survive, rather than "produce."
DigitalOcean, Your Data, and the Cloudflare Vulnerability
What's to stop you from faking a digital signature, faking its timestamp, etc? You're signing it with your own key.

Needs a timestamping sever
reading a paper a week sounds like an easy and useful challenge - might try this myself.
This isn't 'calling them out'. It's re-posting a single comment for rage-views. If you want to call them out, write something about it, quote Tavis Ormandy if you want, add whatever commentary you think is appropriate and post that. There is nothing in this that 'gratifies intellectual curiosity', it's just cheap incitement. I don't want to call it reddit-like since most sane subreddits sensibly discourage it as well.
Well, you can claim a little moral superiority - humans are the only animals on earth that might choose to be vegitarian!
Its a trade off. You have to be more organized and use the right tools if you are remote. You have to pick the right kinds of personalities to work with you to be remote. If you don't do that, then you will have a harder time than being in the office. It completely depends on YOU.
Keep – A Meta-CLI tool for shell commands
Yeah, I don't think this is the way to do it, see my other comment.
My girlfriend who is a lawyer said: "Bet that is so they don't have to reveal how often it listens or how much it listens to" and promptly unplugged it. :)
What’s Your Hour in ‘Silicon Valley Time’?
Hence the joke that they are MITMing half the internet... or perhaps it's not a joke :)
Some suggestions:

Add some way of marking which papers are good. Just because you read it doesn't mean it was worth reading.

Also, show the year of publication, if you can find it.
We've banned this account for trolling. Please don't create accounts to break the HN guidelines with.

We detached this subthread from https://news.ycombinator.com/item?id=13720426 and marked it off-topic.
There is actually weird magic around keeping open tcp sessions open so you could be faster if close to a cloudflare node and distant to the server, too, even if not cached.
I Am Spartacus: A guide for journalists
Right, but who knows how property is best configured to serve society. Given the market's profit loss system aligns the interests of private investors with the interests of society, private investors do. Not only do they have the right incentives, they have the local knowledge about a particular segment of the economy, that big picture politicians have no hope of acquiring when creating their clumsy plans.

A spending plan that's imposed with a stroke of a pen, and that recklessly interferes with hundreds of millions of people, and forces them into economic relationships with people based on crude categorisations, like income levels, and simplistic formulas, like those that determine eligibility for government assistance programs, is no substitute for the intelligently formed personal relationships and market transactions that spontaneously emerge when property and contracting rights are respected and protected. The latter is based on the unique knowledge of hundreds of millions of people, that is aware of local conditions and opportunities for optimisation.

As for slaveowners, what they have in common with socialists is a belief that they have a right to forcibly confine those who refuse to surrender their rights to them.
To be even more clear: if the CF servers had any plaintext in memory, that plaintext might have been compromised. Plaintext could be anything from HTML pages to GET and POST request data (containing auth keys, passwords, JSON blobs, etc.)

If CF decrypts information you send to it before encrypting it to your users, that's a step where plaintext might have been present in their servers' memory.

(Please correct me if I'm wrong.)
if you really want to rake it in, serve, at static speeds (meaning instantly, I swear, boot a ramdrive (Tmpfs) and serve static html from nginx all from RAM), text versions of the top 10,000 web sites. there is so much crap on most sites. re-crawl hourly.

monetize via Google adwords.

EDIT: I'm not sure why I'm being downvoted. I am not suggesting serving PDF's. I am suggesting serving tiny text renders of top sites, that otherwise are much too bloated.

the hard part is getting the text and layout right. many people read many sites for the text IMO.

So I am suggesting you make an all-text version.

As an example, the front page of the New York Times right now, copied into Microsoft Word, is 2504 words. When I save from the word I copied into into .txt - I get a 16.4 KB file.

By comparison, when I put the site into a Page Size Checker -- http://smallseotools.com/website-page-size-checker/ -- I get 214.23 KB. That is impressively small, and it's a fast page.

If I try their competition, the Washington Post, I get 237 KB. If I try the Wall Street Journal, I get 938.15 KB -- nearly a full Megabyte. (This is actually more what I was expecting - I'm impressed by the Times.)

Suppose someone desperately wants to glance at the Wall Street Journal from a poor connection where they barely get data. The difference between 12 KB and nearly a megabyte is huge. Its the difference between 4 seconds and 312 seconds: 4 seconds as compared with 5 full minutes.

So there is a large need in my opinion for such a service in case someone desperately wants to see a text render. Preserving any formatting at all, helps hugely.
This is sad no matter how you see it, but because those Indians were killed under the impression that they were Arabs kind of makes it even more sad.
> Vyos became a command line only distro at one point

Is there something wrong with that?

I'm not trying to be an ass, just curious.
I recently just started playing a videogame again. The last time I played was World of Warcraft in 2005. I stopped to fulfill my career goals, get a masters degree and strike it rich working on my own startup. Well, as the years went by I kept telling myself, any day now my startup will take off and I can go back to enjoying my life and do things like play video games. Uh uh. The only thing I have to show for my years of programming and working endlessly on my startup outside of work is horrible anxiety (I hope but it could be much worse). So, here I am, 12 years older and back playing World of Warcraft where I started. I should have been enjoying my life the whole time. Live and Learn.
It's not surprising though & it's probably going to keep happening going fwd, and not just at CF. There are only ~10 megacap companies that can afford to hire & retain dedicated hardcore, top-shelf netsec teams to fastidiously audit every production SW module for problems like this one, and proactively rewrite things that look sketchy even if no specific bug has been encountered yet. At most other firms, security teams are still largely reactionary.
If Google hadn't noticed and saved them from this bug, who can say how long they might have continued spraying private data into the world's caches? Apparently, this had been going on for months prior. Heartbleed was exposed for years. This could have been too. Worse: malicious attackers could have discovered and quietly exploited it. For years.

The very last people in the universe Cloudflare should be criticizing right now are the Google security team.
what if they put mini museums in museums? better yet, what if future mini museums included pieces of old mini museums?
Because the video card you need for awesome modern games costs more than my whole damn computer? That's why I quit.
I've had trouble finding a competitor that offers the same service with DDoS mitigation, WAF, and CDN for a flat fee. Every other service charges per request and/or by bandwidth. Do you know of any comparable alternatives?
https://www.w3.org/annotation/
Because a modern video card "Good enough" to play those awesome modern games costs more than my whole damn computer? That's why I quit.
Yup, I started it because he didn't merge my pull request :D https://github.com/pirate/sites-using-cloudflare/pull/55
Modern Web Development – Where We've Been and Where We're Going
You are right in that other sites are affected but only the sites running through the parser would have leaked content in their cached pages.
According to CF, they store certificates and cached content separately, so they were not exposed.
IOU network from your command line
Piping grep feels absolutely vintage to me.
why did you bring up Morocco and not any other country? Are they known for selling teeth?
This comment breaks the HN guidelines. Please post civilly and substantively, or not at all.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html

We detached this comment from https://news.ycombinator.com/item?id=13721187 and marked it off-topic.
Interesting project, can't wait to toy around with it a bit. It solves a problem that I had never considered a problem, but it kind of is now that I'm thinking about it.
Yep, my post was unclear. "Everything is text" is the Unix idea.

I know that PowerShell pipes objects and that's exactly the problem from an architectural standpoint. It's what makes it expensive to create and integrate components.
Brian Kernighan on successful language design
I also use an HP ProBook G2 450. This is another awesome machine where the screen is subpar. On the Lenovo I an not bothered by it. But the probook unplugged is annoying.
They're fresh out of those, especially if you're female.
Good time to shoe in some forced dmca content removal
I've been a user for 3 years.

The reason I use Fastmail is they sell you email instead of doing sketchy stuff with your data. As a side effect, this also means they have actual customer service! I've contacted them a handful of times and each time received a real response by a person who understood what they were talking about.

Their web client is as good as it gets except for gmail, and under active development: stuff slowly but seemingly constantly improves. eg they recently added "add Rule from Message" functionality. It remains very responsive with 6G of email.

They also apparently slightly increased prices (with larger data allocations) while I've been a customer and they silently grandfathered me into the old pricing.

Also, one upside of running a domain for your email is you can use [sitename]@kartickv.com for every site. This not only makes routing email very easy, but allows you to both tell who sold your contact info and block that address.
I live in Sweden (moved there from Germany in 2006). The presence of the topic of rape in the media and public debate instantly surprised me. It has always been a topic of great concern to the Swedes, which I noted as being very different to Germany. In very simple terms, Swedes, due to the advanced state of gender equality (in comparison to most other countries, including Germany), are highly sensitive to occurences which might be associated with the act of rape. That, over time, inevitably leads to increased reports of acts of (possible) rape which would not be reported in countries in which awareness is weak, the law forgiving and in which shame and honor count so much.

Understanding Swedish rape statisics requires understanding a cultural aspect and the context that this statistic is embedded in.