skysight-inc/HackerNews huggingface dataset:
I use to use Moba and on the paid product to boot. It was the best, but it was very, very bloated and they did a fair number of annoying things related to UI.

I have since stopped using Moba and just use Windows Subsystem for Linux... there are still too many annoyances because of the Windows console host stuff; even using tools like ConEmu still fall victim to the issues and introduce their own cruft to deal with. Still, I find the overall experience just more seamless and the least annoying of the options I've tried so far including Moba.
>which is really two chained SHA1 in hardware

no it uses sha256
oh ZoL is terrible with swap; I get OOM all the time when my ARC is still like 4GB.
This isn't about the overall pricing, though since ISPs are a natural monopoly they do require regulation to keep their pricing fair. The end result of both effective competition and regulation of non-competitive markets should be minimally profitable companies.

This is about ISPs having unfair power to manipulate a market that isn't even part of their core business. Traffic carriers shouldn't have control over the competitive landscape for content providers.
To be clear, it's just the frontend for now. Frontend as in the client-side stuff and the backend stuff required to directly support it. The core backend code that manages the games and what-not is not currently available, though it looks like that might happen eventually.[1]

All that said, I'm glad to see this happen!

[1] https://forums.online-go.com/t/the-online-go-com-user-interf...
Navigating Roku Channel Development and Certification
Ah, when I used the first letters hint, it said they were L and G, not F and G, strange.
By tiered flat fee, does that mean that if my little website was DDoSed, they'd stop serving traffic once the amount of data I've paid for is used up? I'd be fine with that. Being billed for more than the data I wished to pay for would mean doom.
Discuss them, sure.

But what does it really matter?
It's no surprise to me that Emacs has already solved this problem... Are there examples beyond dired?
Most email servers reject that (I tried to send something to a Deloitte consultant and gave up after password protecting ZIP file).

While most of such companies actively MITM their HTTPS connections (I wonder whether Google does that - theoretically they are CA so it would be extra easy for them), you could probably get away to uploading said file to any service that is small enough to be unknown to corporate firewall providers (Symantec, etc).
>Average wage can go up while national income goes down.

Only sustained increase in national income can support sustained wage growth. Wage growth that comes out of increasing labour's share of national income is capped, at whatever capital's share of national income is. Once labour's gone from 60% to 100% of national income, no more growth can come from this source. Wage growth that comes out of growth in national income has no natural limit, since national income has no inherent cap.

What this means in practice is that wages will grow far more from growth in national income than from labour growing its share of national income.

In other words, growing the pie is a far more effective strategy for fostering wage growth than trying to increase labour's share of the pie.

A real world demonstration of this principle is the last 200 years of wage growth history: wages have grown something on the order of 20X since the early 1800s. That is something like 10X more than the maximum growth that would have been possible through only increasing labour's share of the pie.

If growing labour's of the pie comes at the expense of even a slight bit of long term average economic growth, then on a long enough time scale, workers will be worse off, as they lose out on a recurring exponential boost for a one-time boost. The former is guaranteed to exceed the latter over the long run.

>If you pay your robot maintenance team of 10 each $100k a year to be able to fire 30 workers who used to make $30k a year, total wages go up, average wage goes up, but the group of workers feels worse.

It's important to understand that automation does not only help highly skilled workers. Mechanisation/automation make complex work more simple to do, and makes expensive equipment cheaper to buy. This means things like starting an advanced business become far easier and more accessible to the masses.

Historically, we've seen increases in productivity, which is mostly a result of increasing automation, be associated with increases in not just average wages, but median wages as well. The typical person, meaning the masses, are better off from automation, and any policy that slows the rate of automation, like taxing those who invest in automation, harms the masses.
It won't technically be "loop unbundling" but it's not like it's particularly difficult - it's how MVNOs work.
Indeed. The life I live.
>> We have continued to escalate this within Google to get the crawl team to prioritize the clearing of their caches as that is the highest priority remaining remediation step.

If you are using the same attitude as you use in this comment, with their team, i'm pretty sure they will be thrilled to keep aside all their regular work and help you out cleaning up a enormous mess created by a bug in your service.
And it doesn't stop there. I bet the bad guys (or governments) are already crawling and storing the leaked data to their own databases for later analysis.
Sure. But remember when CloudFlare breached an embargo to sell their services on Heartbleed?

They seem to care a lot more about marketing than anything else.

(On edit: which also means they have a fucking cheek whining about disclosure timings.)
How is this better than Filemaker Pro?
Surviving the App Store as an Indie Developer
Yeah I'd request maybe a citation or two
I don't get the need for ad-hominem here.

Though I don't necessarily agree with your parent, it's a valid point of view, and does not require the speaker to be vegetarian or not themselves. The argument reminds me a little of the religious morality argument that only humans are capable of allowing God into their life.

Again, I am not making either such claim, just rejecting your negative reply.
Agreed. The condescending downplaying tones displayed just aren't acceptable.
Google is shutting down 'Spaces'
Humans are the ultimate invasive species. We complain about fungus and other pests moving their range and causing havoc because of global warming, is it not the case that we do the exact same thing all the time, and that's considered a good thing. And it's not the locals doing it, it's global corporations, many with HQ in developed countries, so it's not as if they don't know any better. I doubt we will ever be controlled until we welcome our new AI masters.
I actually contemplated posting this narrated version, which offers a great explanation of what is happening technically.

But I ultimately chose this one because there's something very inspiring about watching the raw footage in silence.
Triggers were super slow in 2.x but are much faster in 3.0. Try it again if it's been a while.
Wouldn't full SSL traffic be encrypted if leaked and therefore kind of irrlevant?
Founder of Airtable here--Airtable is actually a relational database with foreign key relationships (the technicalities of which are abstracted away from the user). It's designed specifically to be somewhere between the accessibility of a spreadsheet and the customizability/structure of a Filemaker/Access/Force.com, all with a much more modern UX and collaboration experience. Airtable.com/product or Airtable.com/templates offers some more context!
You didn't read the article did you? Most of these questions were asked in TV interviews which are generally very favorable to the President.
You can look up the people involved using GitHub. A desire for positive publicity doesn't invalidate anything good an org does.
Terminal dispensed with NSScrollView and I think that won a performance advantage in rendering. It's hard to do if you're not Apple. They also modulate the refresh rate based on load, which 3.1 adds. They're using Core Text which is very slow compared to Core Graphics but they made it up with clever hacks.
You have resolve the DNS and see if it points to one of Cloudflare's reverse proxies.
The WSJ ditches Google's ‘First Click Free’, falls back on stronger paywall
Mmm, I've worked (as a developer) with a lot of shitty developers responsible for project death through incompetence.
Access on a Mac or mobile isn't there
>Why is Cloudflare underplaying the issue?

I suspect the random nature of the overflow plaintext spewed out into caches will be difficult to leverage into a statistically significant attack against any particular customer. If CF's bottom line is unlikely to be impacted, why not downplay the issue and refer to it in the past tense?

There may be significant long lasting damage to CF's reputation amongst vulnerability researchers, but that's a tiny subset of the population and statistically insignificant to a company that ~10% of internet traffic flows through.
Fwiw Airtable has often been compared with DabbleDB :).

https://mobile.twitter.com/patrickc/status/51568968982347366...
Can't they archive the content (but not expose), and then figure out how to filter the exfiltrated data? No history need be lost.
He calls the ISP and they tell him he is compromised. Or they robocall him.
After seeing how Cloudflare have handled this and tried to downplay and even try to imply Google is the problem here, I suspect if this bug wasn't discovered by a third party and they themselves found it out at some point, they pretty much would have buried this issue as just another "memory leak".
"Full SSL" in this case just means that the traffic is always encrypted on the network, Cloudflare still has to decrypt it locally to do what a CDN does.
what a terrible site full of people making the internet worse in exchange for pennies
You call them and get it turned on again. Also, shut off doesn't have to be right away, it could be after a few days of intense spam, and a week of upload constrained connectivity. In other words, you can find a sensible policy.
And along the same lines, in Italian a sandwich is a panino. In English we call a specific type of sandwich a panini (or, "a sandwiches").
As non-US citizen and I am in no position to agree or counter to what is being mentioned in the article. However, I am surprised that the baby-boomers are looked as 'us vs them' whereas the generation change is more of a Continuum. I am sure our next generation will blame us for ruining it for them.

Baby boomers say lot of first things getting unfold in front of them e.g Humans going to moon, Nuclear tech, Electronics, Mass entertainment (Television), etc. These are the legacy of that generation. Many of things they simply couldn't have guessed the consequences of their actions.

The same thing applies to the current generation. What will be our legacy? One of the things is increasing removal of human beings from the equation using AI, automation, etc. We do not know fully how this is going to affect future generations. If things get screwed-up the next generation will blame us.
Jumping Spiders: Smarter Than the Average Spider
The bug is in bad js authored by CF hammering ticks/event-loop.

WebCore is doing what it's told, just just being told very stupid things (very, very quickly)
I think they'd want him cremated. But I get you sentiment.
Oh shit. Got it. Also Jesus fuck
As someone who has used both devkits of the Oculus and now owns a consumer-version Vive, I have to say the jump in resolution after the Oculus devkit 2 was pretty major. The resolution isn't great for reading anything other than big text and you can still make out the pixels when you look for them, but I'd no longer describe the resolution as having the "screen door effect" that was so major in the Oculus devkits.

I've enjoyed using Bigscreen for watching videos and movies, checking a couple headlines, and for vr-chatting with friends. I hope the headset's resolution is better in the future so that I can do more activities while in it, but as it is is pretty cool.
> I've thought about how much time I spent playing games in the past and if I was happy with what I gained from it: I largely was not.

I totally identify, and yet somehow I feel that because gaming is such an important part of how I grew up that I would be very sad and never quite myself if I gave it up altogether. To me, a lot of important culture has its roots in video games - characters, storylines, social experiences with other friends, etc etc. It's a definitely time sink, but for me at least, a very important and defining one.
Nailed it. I work on FastMail's web UI and we really care about latency mitigation; we know if we can make it fast with 300ms round trip times, it will be insanely fast for customers with shorter ping times.
I thought it was a reference to Amazon's competitors. The irony is that I used to think rainforest when I heard that name in the 90s.
Nice. I recently got very familiar with PDFBox and parsing complex layouts - it is a great library.
U.S. Flexes Its Military Muscle Off China
330K iops for a single device you are very unlikely to be running a single device. There are Fusion IO models that can do 1M IOPS but they are on the exotic side. If you are optimising for throughput you can configure commit_delay so you will fsync multiple commits.
Show HN: IWASNUTS – It's a Web App Starter for Node Using TypeScript and Sass
Elon Musk Responds to Claims of Low Pay and Anti-Union Policies at Tesla
pretty sad state of affairs if Amazon in conjunction with deforestation needs further disambiguation around here.
What a shame. Unfortunately, the incentives seem to be aligned such that I fear this will be a difficult trend to slow or ultimately reverse.
That's a childish and ignorant argument.

Google removes info from its index and caches all the time. It's not unreasonable for CloudFlare to expect them to remove this issue. It's just a matter of scale and difficulty.
Whether you believe it or not, there is actually a tangible difference between the relationships US corporations have with the USG vs other nations and their corporate entities.
Google Fiber gave up on silicon valley because of the regulatory burden of convincing local governments to let them install fiber. Let that sink in.

Google, who has enough cash to pay for nearly half of the entire Comcast company, was not able to rollout fiber to the area because of government regulations.

Why do you think they started in Kansas City of all places? It wasn't because they thought that was the strongest market for fiber in the country. It was because they actually convinced the government to let them bring fiber to peoples' homes.

>Government intervention akin to local loop unbundling would be necessary to create a freely competitive market where one will not naturally develop.

While this would make it even cheaper to get into the market, there is no proof that a market wouldn't develop if the government wasn't already intervening to make it so difficult to build networks.
A list of Cloudflare DNS customers is almost completely unrelated to the list of sites affected by this bug.

Being a DNS customer doesn't mean you're using CF SSL proxy and using the proxy service doesn't mean you're using DNS
Building scalable applications using event sourcing and CQRS
I just wonder when we can stop beating this dead horse here...
I came up with the naming scheme here. We picked n for Intel as I could be confused with i3/i5/i7.

Early work was done in AMD and we had an a1 series pre launch.

IIRC, g is for Google or Generic where there are no promises on architecture. And f was for fractional.

I've been out of Google for 2+ years now so reality may have drifted from that original scheme.
Masha Gessen's outstanding piece from November is holding up pretty well: http://www.nybooks.com/daily/2016/11/10/trump-election-autoc...

"The national press is likely to be among the first institutional victims of Trumpism. There is no law that requires the presidential administration to hold daily briefings, none that guarantees media access to the White House. Many journalists may soon face a dilemma long familiar to those of us who have worked under autocracies: fall in line or forfeit access."
That isn't uncommon enough. Searching for one of the CF- http headers in the source code, however would work.
If I had stolen a bunch of trade secrets I wouldn't tell my company's competitor.

https://www.theguardian.com/media/2006/jul/07/marketingandpr...
A spoon, or a book, would work just as well IMO
> Is it a big smile? Is it talking too much to someone? Is it asking a question not related to work?

How do we know when we're harassing someone, so we can stop? If we think someone hints we're harassing them, how to figure out which behaviours is causing their distress? If we can't figure out is it better to ask directly, which may be seen as intimation, or better to completely cut them off, which may be seen as punishment? Or is everything fine until we receive a direct confrontation?
(1) There is no point in complete cutoff -- partial filtering should be enough. So if email spam is sent, outgoing SMTP port is blocked; if there is a virus spreading over random ports, all outgoing ports except http/https are blocked; if malware leaves spam on webpages, then all http/https connections are redirected to captive portal explaining how to fix.

(2) Same with spam blacklists, you get de-listed either automatically, if few weeks pass without incident, or faster by manual request.

(3) It should not matter why bad traffic was sent. A much more realistic situation is: "So you work from home and your computer gets trojan which starts to send phishing emails, so now the ISP cuts you off from the Internet. Now what?"

In either case the answer is: prove to humans @ ISP that you are no longer danger to the internet and ask them nicely to unblock you. If you work from home is that critical, have a separate internet source (say 3G modem which you activate with a phone call)
The linked piece says much more than that, of course.
Don't overthink it. But if we're gonna overthink it, one thing we can notice is that a rose tree is a free monad, and like any free structure is initial in its category - meaning there's a unique monad homomorphism from a rose tree to any other monad. Lists form a monad, so we can ask "what is that homomorphism?" It turns out to be the traditional definition of flatten.

That is to say, only flatten solves these equations for lists and rose trees:

(flatten . f =<< flatten m) == flatten (f =<< m)
pure x = flatten (pure x)
Linode Introduces $5 VPS with 1GB RAM
This all is assuming that no-one has found the vulnerability before. My understanding is that, once you figure out what kind of request causes the overflow, you can pretty much just spam CF with it, getting new garbage data every time. If someone was deliberately doing that, they could have more data than all the indexes combined. And the worst part is that we'll never know.
We only host our static corporate sites (not apps) and furthermore never used CF email obfuscation, server-side excludes or automatic https rewrites thus not vulnerable.
Why not just pay for something like Route53? It's very cheap.
Dave Pell runs a top 10 news aggregation mailing list with commentary that sends every day. It is the only one I subscribe to and I have been directed to amazing journalism by him. He really is a top read.

http://nextdraft.com/
They seem to be presenting some dubious calculations made to imply that it was highly unlikely to happen.

The reason why I consider them dubious is that anyone simply searching the name of some HTTP headers in Google et all could have stumbled into this. I don't find it at all unlikely to happen in a timespan of 5 months.
Wasn't TSX completely disabled in all Intel processors because of silicon bugs? If it is enabled in the Skylake E5 Xeon series that Google is rolling out, does it mean the Skylake E5 Xeons are the first processors to have a working TSX implementation?
Cloudflare cannot delete documents from other company's caches. The actual deletion must be performed by Google and Bing, who can then sue Cloudflare for cleanup costs if the latter is unwilling to cooperate.

When there's an oil spill, we don't wait for the oil company to come and clean up their own mess. Others clean it up a.s.a.p. and (ideally) then make the oil company pay the fines and damages. CloudBleed is a virtual oil spill. They literally sprayed other people's private data all over the internet.
As an aside, I found this really interesting:

ashleymadison.com

ashleyrnadison.com

I find it really interesting that they registered that particular misspelling and they both point to the same servers. I can see doing this for some obvious domains like gogle.com, but the distinction there is simply that r+n looks like m.

Probably a really obvious answer here, but my guess is that they are trying to help people throw off the scent of someone browsing a history.
This is great additional context Splintercell. I'll have to toy around with music and podcasts and maybe try going cold turkey for a few days.

I'd be very interested in a full write up, not just in the method but also in your results and observations (once your side project is done of course!).

Thanks for the great tips!
To some degree that's what happens. Internet Archive and Common Crawl use WARC files and deleting an individual entry or set of entries from them can be markedly difficult. It's easiest to mark it with some manner of tombstone for later handling.

The complication comes with the edge cases they'd need to face and @eastdakota's call to "get the crawl team to prioritize the clearing of their caches"[1]. This is also work they now need to do due to Cloudflare's blunder.

For Internet Archive and Common Crawl, these aren't caches, they're historical information. You can't just blow that away - but you also can't serve it if it has PII in it. Either they need to find all the needles and filter/tombstone them - which we'd expect to be very difficult given leaked information is still sitting in Google and Bing's cache now - or wipe/prevent access to the affected domains.

Wiping the donaldjtrump.com would be historically painful but even temporarily blocking access to the domain would be problematic.

Finally, and most importantly, the fact that non-profit projects need to worry about how to exfiltrate such information is ridiculous anyway. Exfiltrating the information is non-trivial as well and may well be destructive with even a minor bug in processing. Having looked at much of the web, it can be hard to tell what's rubbish and what isn't :)

(Fun example: I had an otherwise high quality Java library for HTML processing crash during a MapReduce job as someone used a phone number as a port (i.e. url:port). The internet is weird. The fact it works at all a mystery ;))

[1]: https://news.ycombinator.com/item?id=13721644
I have an alternative:

Work at an established old economy company, build a network and start off on your own as a single founder.
Pepakura Designer 4.0.4 Keygen and License Key Download
They buy 100% Juniper to secure their routing. Formal analysis?! They can barely analyze the purchase contracts. In fact, that too gets farmed out to contractors. You'd be hard pressed to find an actual civil servant or active duty military signature anywhere beyond a vague application or statement of need. Formal analysis... Oh, my sides, they are killing me!
Inside the Car Dealership (2013) [audio]
I'm not sure if you're playing along or if you entirely missed his point. Of course it's a bad argument, just like when it is used by cloud flare to protect the ddos site they are hosting while they often remove other stuff. That's the hypocrisy he is pointing out.