skysight-inc/HackerNews huggingface dataset:
This can definitely be the problem. I've seen studies where 50% of funding came from university and 50% from a private company. University required study to be published in their database, company wants the end result and don't want media to know what they are working with. So the report is obfuscated just enough to be legible for publication without giving away too much data from the company.

Especially for final masters degree projects this is very common as the students don't get paid by the university at all, so many try to find a company to sponsor. But the students still need the uni to publish the report for them to get their final degree so you get this conflict of interest again. Most of these reports are just written with the end goal of getting a degree, not of creating solid research, this really needs the stricter universities not letting through all that crap, for now they shouldn't really be trusted the same way as proper research papers.
> Capitalism needs to regulated, or we end up were we are now, where CEO make so much money, vs the combined work force.

The CEOs get high pay because their skillset is rare.

Exporting jobs is the opposite of exploitation. How can more choice harm poor workers?

> Also exporting jobs, like IT, to countries to cut the bottom line, when the workers are not skilled enough, and what I feel, don't care enough to learn about stuff beyond what a script tells them, then it's bad.

The quality may be the lower but the price is also lower.
Thank you, that's very kind of you to say. I have a bit of a history with art projects, in fact. Among other projects, I built and blogged a big interactive biofeedback art piece at Burning Man 2014 called Pulse & Bloom that hit HN a couple years ago: http://www.ofbrooklyn.com/2014/09/6/building-pulse-bloom-bio...
Also the thing rarely mentioned: they have the best web calendar for the desktop. The UX matches that of Fastmail: fast and free from annoyances. Supports sync with thirdparty services, too.
Have you tried modding or mapping? In high school a large part of my life was spent around learning to map for various games because it felt like a way I could actually give back to the community I was a part of while exploring the creativity of it.

I enjoyed making the content and seeing reactions to it and trying to one up myself then I did actually playing the game. In fact it gets to a point where you've seen enough behind the curtain that it loses a lot of its charm.
Also available for windows and mac at http://www.foolabs.com/xpdf/download.html
> Flexible SSL still protects the user from being on an untrusted network, from having their ISP read and/or modify their traffic, etc. It's much better than bare http://.

I would strongly dispute the "much". If anything the local network is more likely to be trustworthy than the remote network - people keep talking about cafe wifi, but the user likely knows who's running the cafe wifi and can complain if they start injecting ads etc. Whereas the user has literally no idea who might be on the connection path between cloudflare and the website and listening in, MitMing or anything.

http:// versus https:// is inherently binary; there's no way to display a connection as http⸵:// . If it doesn't mean "encrypted while transiting the public Internet" at least then what does it mean?
i absolutely hate and detest the way that he talks about his associate dropping out of college. he says something like "he dropped out of college but he was ok, just graduated late." he says this as if not graduating from college is like getting some kind of terrible disease. i was having a family dinner with a bunch of extended family one time and i jokingly told them i was going to drop out and go into the trades. they all recoiled in horror, literally making that gasping sound you hear in movies. "certainly not!" there should be absolutely no shame or indignity in not being able to or wanting to finish a college degree. it shouldnt be a status symbol.
Pmm: PyPi Mirror Manager
That link goes to their CDN offering for me. Do you have more info about their ddos protection?
I just tested Backblaze and found that its deduplication is broken by this. If you let it backup the two files generated by this tool, then restore them, it gives you back two identical files instead of two different ones.
This is sad. Anything that we can do?

There's this site, tree-nation.com that helps with reforestation projects. Any others out there?
Yes, correct. However, this relies on clients using your API in a hateos way - which they have to go out of their way to do: starting at /, reading the responses, navigating down only using URLs that you return, etc...

No clients bother to do this, in the real world - they just hard code/compose the URLs that they need to use. Why make extra http calls when you don't have to? Why parse all the json-hal (or whatever) to "figure out" which URL to call next, when you don't have to?

Even if most clients did this, you can't enforce it, so not all of them will, so some will still break when you change URLs.
why not just use babun?
This comment is insightful and is in line with Mina bissels views.

The immediate questions when someone tries to replicate a study is... How hard did they try? Did they go to the lab and spend one year of their life learning the technique? Or did they try it once and didn't think hard enough about being careful?
in https://bitcoin.org/js/main.js:

function makeEditable(e) {
// An easter egg that makes the page editable when user click on the page and hold their mouse button for one second.
// This trick allows translators and writers to preview their work.
Grape is actually what we call "faux amis" (false friend because they are homophonic but with different meaning) in french with the french word 'grappe'. The french word for grape is actually 'raisin'. But 'une grappe de raisin' which is commonly used means 'a bunch of grapes'
> "You know how whiney you get every time you buy a non-Apple product"

That's pretty damn cute. I can see why you married her :-)
Weekly newsletter with remote jobs for developers based in Europe
alternative app that has been around for a longer time: https://www.myorb.com/
If no one tipped it would fuck up the ridiculous system and help the workers.
Show HN: MyOrb – Alternative to Google's Spaces
some video games are just additive and mindless. others are works of art and thought provoking. you should only play the former in limited amounts. spending lots of time in the latter can be justified if you are thinking about and appreciating the game while you play it because it will spur productive activities afterwards -- you will develop questions and passions based on the game that will linger long after playing and those will lead to building and creating things of your own. half life 2 is a good example of that in my opinion.
There is a bit of hypocrisy in the discussion about cutting out rain forests. Western nations paid no mind to destroying their local ecosystems when they were getting rich over a span of the last couple of centuries, and only started to care about the environment when they reached comfy living for their citizens. It's unfair to demand something else from developing countries now.
CloudFlare actually is in that business.

They actively crawl for piracy sites and isolate them all on one IP, they crawl for child porn sites and straight up remove them.

Why not also remove DDoS sites?
I've written a gist that somewhat explains this:

https://gist.github.com/technion/a16095fa6e3a027d6bc938ad6f9...

write() doesn't "print a negative number", as per the man page, write(2) takes a size_t for an argument. And what that means is explained if you run that gist:

We have a count of 18446744073709551611 and will write that many characters

In short, you're looking at a signed, negative integer, cast to a very large positive integer. clang will only print a warning if you compile with -Wconversion and whilst I like to do that in my own code, most people find that too noisy.

Edit: Personally, I feel this "email obfuscation feature" should never have been written in the first place. There are a myriad of options for people to do this in their own website without something this obviously complex being built into an nginx module of a CDN.
Absolutely agreed. We use FBA. It isn't the cheapest way to warehouse and fulfill but, yes, it has many advantages.

Yeah, the seminars and what they teach are the problem. I know a guy who dropped well over $100K on seminars during a period of a couple of years. Horrible personal outcome.
You can also get dedicated server from them. I was hit with DDoS of about 40Gib/s, the filtering kicked in, users still were able to use website.
CloudFlare, We Have a Problem (2016)
Unless you're using an abnormally CPU heavy VPN, you should be able to saturate the NIC without issues. Linode has 1Gbit NICs though peering, like always, is a potential problem.
Sorry but I completely disagree with this view.

It's not about what options they have. They are already here and they do not want to not exist nor be treated badly, they want to live a happy life. It's us who deny them this because we prioritize our convenience over their life and suffering.

If you applied the same thinking to slavery many people would be outraged.
I'm not convinced that the double ptrace is really stronger than the first one, a simple GDB.py script let you bypass it:

first = True
class ptraceBPT(gdb.Breakpoint):
def stop(self):
global first
gdb.execute("return (long int) {}".format("0" if first else "-1"))
first = False

ptraceBPT("ptrace")

what would be interesting is an actual use of ptrace, something like:

int i = 10;
int read = ptrace(PTRACE_USER_PEEK, &i, sizeof(i));
if (read != i) printf("ptrace error");

although it still would be hard to write a GDB breakpoint that mimics it: everything ptrace can do, GDB can do it as well :)
> Linode is top tier. Support is great. Interface makes sense.

Should be mentioned though that it hasn't always been this way. Before they rebuilt their management infrastructure they were hacked a couple of times and their response was... Not great: https://news.ycombinator.com/item?id=5552756

They've made a lot of progress since then but they were also DDoSed quite heavily recently which brought a lot of downtime.
People are burning it down for farmland and palm oil even after someone else tells them they own it. Enforcement doesn't always work since nobody is that motivated to guard it - you have to actively involve locals in using all the trees for something.
> but that animal life and intelligent life may be rare or even unique to Earth. Our solar system is a freak compared to what we've found out there so far:

This is the type of magical thinking that the parent OP is referencing, vastly exaggerating ourselves or aspects of ourselves to make us exceptional. Let's first set foot on another planet before even considering our universal supremacy. All we have our relatively uninformed ideas and hypotheses about what life would be on another planet.

Our solar system is not a freak. Some 15% of star systems in the Milky Way are similar to ours with gas giants for away. It's not a majority, but not rare either. Oh yeah, multiply that by 100 billion galaxies in the observable universe (btw, the unobservable universe is 10^30 the size of our own.

We're only looking for life like ours because that's all that we can realistically perceive, not because that's all that is possible.

> We're alive relatively early in the history of the universe in terms of the materials for life being available, and a huge amount of the universe still being in information contact with us...

Once again, you're employing exceptionalism and assuming that life has to resemble us and communicates in ways that we understand.

There's so many holes in the Fermi Paradox that you can drive a big rig through it. A relatively simple one is that (let's assume other lifeforms are territorial) Earth is part of some alien empire and is off limits. Another simple one is that we have been contacted but humanity isn't ready. Considering what the current response to globalization (retrenchment and reinforcement of national identity), an intelligent alien civilization could come to the conclusion that introducing themselves would make matters worse.

Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us
- Eminent tiger philosopher Hobbes
Yes. And once it is cleaned up, send Cloudflare the bill. And once they go bankrupt, send the executive officers and the shareholders the bill. And once they go bankrupt, make sure they are still held responsible for the damage inflicted and that nobody that incompetent tries to run a major business damaging millions of people’s lives ever again.
Did you read the article? For the most part the deforestation is driven by companies and large land owners. Their shareholders have nothing to complain about when it comes to their comfy living.

See also: http://rainforests.mongabay.com/20brazil.htm
You have to take into consideration that the seminar peddlers are really, really good. Some people just don't seem to have that internal voice. You know, this one:

https://www.youtube.com/watch?v=OWwOJlOI1nU
Checking 2^80 hashes is indeed faster than I thought, thanks for the stats.

But checking 2^80 hashes and writing them to long term storage is still ridiculous. That budget should still go to hiring cryptographers, not buying hard drives.
So, they are losing money?
I thought that they are basically in the money printing business? Surely the margin in a 100 Dollar text book is about 80%?
neither is google in the bussines of removing the content, they have to remove it if they get the legal request, or they remove it based on some internal rules.
I guess we will have to agree to disagree on this one. If nginx does the same, or apache would you send them a bill also? This is a really really shitty mistake. CF hasn't handled it well. But it could have happened to anyone.
I agree that your PG numbers don't sound likely/factual -- the reason for your confusion is probably that somebody gave you untrue performance numbers for postgres or you're not comparing the same things. Is the 1m+ TPS something you measured yourself or "heard from a friend"?

If you ran the benchmark yourself, how did you achieve 1m durable writes/sec on a postgres machine/instance? [It's quite an achievement] On what kind of crazy hardware? How large was each write/row? Did you use the postgres network protocol to perform the writes?
https://carbonfund.org/forestry/
http://www.edenprojects.org
This alarming map shows dozens of radioactive materials thefts and losses
Their business model also seems to be "get DDOS protection from us by hiding your real IP behind our proxy (while we also hide the IP of the DDOS services to protect against in the first place)".

Aren't they held liable for taking money from those conducting DDOS attacks in the US?
Bees are even smarter than we realized
XPS15 + Ubuntu = External monitor hot swap not working, have to reboot the whole thing for it to detect the monitor. Total showstopper.
> For me, working hard has always paid off about the same as coasting. If ever I lift a finger to do better for myself, someone comes along and eats up my efforts, leaving me with a pile of tasty crumbs.

How so? Let's say you try to kick ass at your job (let's assume for a second that you're a software developer), learn the newest/hot technologies, do some side projects and move to a hot tech hub. Unless you've already done that, you can easily double/triple your salary in a matter of a couple of years. That's not crumbs.

Another example - working out. It's amazing how much more women are interested in me now that I have modicum of physique (and I'm FAR from the Men's Health models). That's also not crumbs.
out of all the mother fucking website websites out there. I dislike this mother fucking one the most. Fuck
But he explained this at the very top of the readme?

>This list contains all domains that use Cloudflare DNS, not just the Cloudflare proxy (the affected service that leaked data). It's a broad sweeping list that includes everything. Just because a domain is on the list does not mean the site is compromised, and sites may be compromised that do not appear on this list.
This is hopefully a prelude to a Streisand effect type situation here, but my biggest reaction to this came in the ad below the piece: an "article" describing the reason behind the F and J bumps on any keyboard. Does there really need to be an article about that? It seems like common sense, or something you might learn in any typing exercise ever.
I find it absolutely ridiculous that we have to resort to these kinds of tools :/

We have digital formats, and we decided to standardize document distribution on the one that makes it as hard to extract data as if it were on physical paper.
No need to feel ashamed. I set up my own email server in 2016 and use mutt, squirrelmail, and iOS Mail very frequently.
One interesting thing I've noticed is that ancient Stoics have not rebuked the concept of god (or "the universe"), a higher power that determines all the things that are not in our control (as a Stoic you very much need to distinguish between things in and outside of your control). I have found it difficult to really, deeply, accept things as out of my control without resorting to some concept of god or "the universe as a well-meaning entity".

Is there someone among you HNers who has retained a positive outlook by believing that the universe is a bleak, chaotic place with no intrinsic meaning to the things happening in it?
"According to a source who saw the group leaving the Roosevelt Room, where the meeting was held, those present included John Harwood of CNBC and The New York Times, Juan Williams of The Hill and Fox News, and Washington Post columnists Eugene Robinson and Jonathan Capehart."

Fox New is Left leaning?
Helps a ton if you're terminating SSL at the edge, due to the number of roundtrips you need before the server can even start generating that first byte.
Previously discussed on HN, but the real detective work was done here:
http://www.marathoninvestigation.com/2017/02/runner-disquali...
Doesn't work for me. One of PDFs always says "Insufficient data for an image" (sometimes for the same image that worked before).
Not everyone who says "(formal) set theory" means ZF by default. After all, many mean ZFC; probably moreso than mean ZF simpliciter. And some mean ZFC + various large cardinal axioms. Others go the other way, intending only Zermelo set theory. Some others default to meaning IZF or CZF. Some would even push for Aczel's Anti-foundation Axiom as cleaner system instead. Even in a world of sets of sets of sets of sets…, "set theory" does not mean just one particular formal theory.
‘For such a small price, I buy tranquillity.’ Beautifully put.

The Penguin edition of fellow stoic Marcus Aurelius' Meditations is free on Amazon kindle:
https://www.amazon.com/Meditations-Marcus-Aurelius-Wisehouse...
It's not unlikely — in fact, the mobile carrier I'm using had done this exact thing, as had T-mobile.

"We throttle speeds to several streaming services. Pay only 5$ a month to get unlimited Spotify and YouTube"
Excellent! This ought to be the top comment; have you submitted it separately?
I was considering implemented the same thing, since there wasn't any reason for those limitations. The Google researchers purposely designed this collision to be highly reusable, probably to encourage everyone to generate lots of fun examples which will be spread widely and break systems everywhere :)

I'm surprised that some PDF renderers have problems with JPEG streams that contain comments and restarts. Actually, glancing at the JPEG spec, I didn't even realise that restarts would be needed, I thought this was just done with comments. Is this really "bending" the spec, or is GhostScript buggy, or is the problem that it's assuming that restarts don't occur inside comments without escaping?
Worth noting is the "Swedish Defense and National Security Advisor" recently on Fox News, who confirmed Trump views has no connection at all to Swedish security or the government, he is even completely unheard of. Also living in the US since long with a criminal conviction. So not much of an expert.

http://www.dn.se/nyheter/varlden/fake-sweden-expert-on-fox-n...
FastMail scores pretty well on this comparison of email providers based on privacy:

https://thatoneprivacysite.net/simple-email-comparison-chart...
Funny thing is, they used all this advanced math to reach the same conclusion the 5 years old child would come to: armor should be put around engine and ammunition storage. Too much education sometimes makes you really stupid.
I kinda despise that idiom quite strongly.
I use alpine in 2017.

It's easy to use, pluggable, and faster than any GUI I've touched.
You cannot deny that murders are way off the charts in the US. I also keep hearing anecdotes like "random guy stands on a highway bridge with a semi automatic rifle and shoots down at the oncoming cars, until one of the people on the highway snipes him down". Those are WAY rarer in other parts of the world.

I get that you are offended, I think I could have gotten my wording better. I'm referring to the American culture somehow not suppressing such behavior enough, and I'm not saying people in the US are intrinsically worse than others.
Plenty of sources tell us that emergency services in metropolitan areas in Sweden wear protective vests. There are cost issues, and there are image issues, i.e. if the firemen are protected against you stabbing them, it's "militarization" and you'll see them as your enemy.

E.g. Svenska Dagbladet (no fringe publication, a major newspaper):
https://www.svd.se/ambulanspersonal-far-skyddsvastar

Of course, this is not unique. Plenty of American cities have the same:
http://host.madison.com/wsj/news/local/crime-and-courts/madi...
Uber Is Doomed
You are of course responsible for the tools you use, so if I use nginx and it has a bug, I won’t send them the bill.

A better analogy would be to crash your client’s car into the building of a competitor and then complain if the competitor doesn’t repair that car immediately because it makes you look bad and it is for the greater good for your client to have a working car. This is what happened! Cloudflare took their clients’ cars (their data), crashed them into random buildings all over town (Google, Bing etc.) and now complains that Google and Bing don’t get their act together to repair those cars (remove the private data from the public internet).

If Amazon Prime took your car to do your grocery shopping and then crashed it into Walmart, would you really complain that Walmart can’t send the bill to Amazon Prime for the clean-up?
Child pornography sites are easy to isolate and remove. There's a database of md5 hashes for images that are considered illegal; if you're a CDN you are likely already calculating the md5 hash of all images passing through your system as part of your caching process.

If you find any site has a large number of illegal md5 hashed images going through it; then just remove the site.

Piracy sites can be isolated by checking for keyword clusters or seeing if they're directly serving torrents, or banned hashed content.

We do something similar at work to sanitise image data---by policy no one actually looks at the content, but if you match against previously banned content for DMCA reasons, we drop your data.

DDoS sites though? How can you tell some site individually is part of a network to DDoS another?
Self-hosting with OpenBSD (in french)
He's also The Tick!
I see what you are saying. So that function actually accepts a size_t which is a unsigned type. I now understand why this call to the function went through without any exceptions. When I posted my question, I was referring to this page[1] which claims the type for the "numBytes" to be a signed integer.

[1] https://www.lix.polytechnique.fr/~liberti/public/computing/p...