skysight-inc/HackerNews huggingface dataset:
No and No.

I'm talking about a hypothetical ISP that wants to extract all the hostnames its customers are connecting to. It has to analyze the traffic off a live stream and re-construct the TCP stream to do this. Rebuilding the TCP stream on a 100Gbps switch is pretty hard to do. Something like "sniproxy" is only extracting the hostname for all traffic connecting to it, so it doesn't have to try and re-build the tcp stream.

For the reverse DNS stuff, yeah you can't count on PTR records. The easiest thing is to use a third party like Domain Tools (https://www.domaintools.com/), or you can roll your own. The quick and dirty way to do this is to get your hands on regularly updated zone files with all the hostnames, do a DNS lookup for that domain name, and store that data in an index. Assuming you get regular updates to your zone files the daily load is manageable. From memory, for .com you only need to evaluate about 400K domain names a day.
I must be out of step with the times as I'm surprised by the favorable comments about Night Shift.

For my eyes, the f.lux nighttime adjustment and configurability is great. at work, i use it during daytime hours as well, helps greatly with eye strain.

Night Shift is like an introduction of the concept to a mass audience, surely it has a positive benefit for the uninitiated but there's a lot missing for folks who rely on it. Android is much better with multiple applications available to control this.

I thought it would have been a good gesture for apple to buy f.lux and get the "market leader", and some built in goodwill, as opposed to just copying them, but I guess such is life when you are the largest corporation in the world.
VPN people, VPN
The Long Shadow of Biology and the Past
When the price starts dropping, you would have to sell more shares to maintain a 1:1 ratio. For example, you can double the number of shares each time the price drops by half, and make up to 200%.
Great rant about something way over my head by someone who knows way more than me about it!

If I can transfer to a domain I understand better (front-end dev): It sounds like VMs, Jails, and Zones are like Ember.js: it comes with everything built in and is simple if you stay within the design.

Containers are more like React: it gives you the pieces to build it yourself, and building it all yourself can lead to complexity, bugs, and performance issues.

Disclosure: I have no idea what I'm talking about
What incentive does a tier-1 provider have to collect data from their clients? Keep in mind their customers are not individuals, but large orgs: data-centers, corporations, office-buildings, universities, et al. They lack the strong correlation of "1 IP" => "1 customer" that a residential ISP tends to enjoy; they also lack the storage infrastructure that an AMZN, GOOG, MSFT, et al. tend to have as a function of doing business. (Since the problem tier 1 providers aim to solve tends to require large workingsets, not large datasets at rest per se, they tend to need RAM more than durable storage.) I imagine the infrastructure needed upstream to track such traffic would be immense & costly, and more importantly it would just not be very applicable to the provider's major product offering.

Furthermore just what would their end game be? Per all the DOCSIS whitepapers I've read: my residential ISP intends to sell me any number of "over the top" services: a plethora of cable channels, their own streaming services, VoIP, alarm systems, whole home DVR, etc. There is a lot of money to be made there in terms of equipment rental, upkeep, and paid programming. More importantly most of it goes right into their pockets. The way I see it, it's not about selling the data, it's about using it themselves.

Compare that to a tier-1 provider who has one job: get a drop to my network fabric. Their business revolves around (A) doing that regionally, (B) maintaining good peering, and (C) being extremely competent network engineers. As I see it a tier 1 provider has far less incentive to spy on their users compared to a residential ISP. This doesn't obviate the need for caution of course, since nation-state level actors have all the more reason to spy on tier-1 providers simply due to the volume of traffic that can be intercepted.
How do you run it? I keep having to kill the daemon then start it up again to get it to kick in.
You can fix it using this Chrome Extension:

https://chrome.google.com/webstore/detail/videofixer-for-flu...
I always run my containers in a jail which I run in a zone which is running in a VM just in case.
Warning I tried this on my Mac and it's broken for me - it turned the screen completely black and I had to force-shut down the whole computer to get rid of it.
The app seems to be throwing an error?

Edit: Nevermind, looks like its up again.
I build "cloud" contact center software. To most people it just means no servers at the customer site. To discerning customers, cloud means horiz-scaling, while hosted just means we manage the servers for you.
As far as an uninstall procedure is concerned, the expectations of a MacOS X user do not involve looking up instructions on a web site. The user should be able to quite the app, drag it to the Trash and clean it.

In addition the instructions you posted on the web site do not work. There are two running processes shown in Activity Monitor: a KiteHelper and a KiteEngine. Killing them both does not work, they are resurrected by some process.

I had to manually rm -rf Kite.app, and reboot the machine to get rid of the pesky KiteHelper and KiteEngine processes. Totally unacceptable "uninstall" procedure.
> Reuters is pretty good for that sort of thing (for instance they don't use the term terrorism because they see it as a value judgement).

I would hope that even journalistic objectivity has some limit, to the point that one could call the slaughter of innocent people wrong. That's a value judgment that should be made. If not, then it would seem that they could not complain if their offices were attacked by evil people, because that would be making a "value judgment" on their actions. It seems like some kind of hypocritical cop-out.

Besides that, Reuters is no longer a bastion of objectivity. Their coverage is definitely left-leaning. And since they are a wire agency and their stories are reprinted around the world, it makes their bias even worse, because it seeps into other publications.
Mice Have Been Mooching Off Humans for an Astoundingly Long Time
Chinese is a lot of fun as a language, I think you'll be more pleasantly surprised by it, and there's a hell of a lot more Chinese content. Tonnes of cool papers and forums.
I'll give some advice too as a casual sudoku player.

I personally think the background was completely fine for it being made 4 years ago. If you were to remake it then possibly a solid color would be a better choice now.

I am also turned off by the timer. I'm not sure how many players prefer timers, but maybe putting it hidden away on the top right or somewhere that isn't blinking at you every second would help users like me.

Everything else seemed good to me. If there were ads I probably wouldn't play personally (sorry adblock is on) because as the last person commented I already have a paid sudoku app on the phone that is ad-free.

I think it's hard to get users to go from their phone to browsers for sudoku (if you were only targetting web-only users then it's okay) because of how good the interface is on touch panels. If you were trying to get users to move from the phone I think you need some gimmick that utilizes more of the screen space or something that the web provides that mobile can't.
What's the advantage of 6 nested VPNs over VPN + Tor?
The title of the video is "Viewpoint demo" or "Viewpoint: Toward a computer for visual thinkers", (1987) is also appropriate.

It's a strange interface for a graphics/text editor, lots of weird features in the behavior.

For instance the font is anything you draw onto the on-screen keyboard, and word wrapping logic uses those same graphics to decide what is graphics and what is text. The "graphical boot" at 12:15 where he shows how the interface is constructed is a bit painful to watch but fascinating.

The fundamental idea seems to be that the on-screen bitmap is the only state and some of the logic, the user and processor work together on modifying it based on a few things the processor can do automatically.
IDK as the methodology is open and you can just email the guy asking for this information to be included I'm not sure what the problem is.

There are a lot of lists of VPNS and though this one didn't help me choose mine, and ranks mine very low, I thought it answered the question the best.
I don't think IP alone will not be sufficient, for ex i am sure my ISP extensibly NATs the network and shares the same IP for many users. So much so that Google keeps asking for captcha every couple of days
Some food for thought:
Such data can include say, the fact that a certain person enjoys some fetishes or maybe some other similarly compromising data.

The possibility for blackmail exists and therefore the possibility of your freedom being curtailed.
I think that the important feature of containers is that they are running from image containing the application. Zones, jails, and VMs are other isolation mechanisms that could be used to run containers. Running an application image unpacked into VM would be container.

One place where the difference in namespace is visible is with Kubernetes pods. Containers running in pod share network and volumes namespaces.
Let me break down exactly how we’ve screwed over creative people
Not speaking for hydandata, a few key points of CL as opposed to Clojure (which might be advantages or disadvantages depending on context and preference) include:

- Defined by a standard (the text of the standard is available for free online as the Common Lisp HyperSpec [1]), not by a reference implementation led by a BDFL

- Multiple mature implementations, both free and proprietary

- Wholeheartedly multi-paradigm; has FP features, but also provides plenty of tools for imperative (notably including a powerful macro for loops) and (meta)object-oriented approaches

- "Lisp-2" rather than "Lisp-1"; functions and variables are in different namespaces, which reduces name clashes but requires disambiguation in some places

- Designed for implementation in a wide variety of environments, including being embedded as an extension/scripting language in C or C++ applications (see ECL [2])

[1] http://www.lispworks.com/documentation/HyperSpec/Front/index...

[2] https://common-lisp.net/project/ecl/
The UK and USA engaged in a fierce battle of 'hold my beer'.
I used to be a huge supporter of diversity initiatives in tech. That has changed.

Over the years, I noticed more and more that diversity as a topic in high tech had morphed from something positive into a witch hunt against white men and against people who were generally friendly towards the idea of diversity yet did not practice sufficient rigor in enforcing a very specific idea of diversity at their events.

A great example is Nodevember kicking out Douglas Crockford because he made a couple relatively non-offensive jokes using secret accusations against him. Another great example is the ongoing attempts by social justice warriors to force the Drupal community to discriminate against a relatively harmless follower of the Gorean movement for his private life.

Still other examples include unsubstantiated accusations of sexual harassment at OSCON by an anonymous blog. I have been to OSCON and saw absolutely nothing like what was being complained about in that blog post. Yet another example is the continuing efforts to pressure the organizers of Lambda Conf to ban people who privately have non-politically correct views.

Instead of diversity being a "positive thing," it became "if you don't do diversity, if you don't invite 50% female speakers, if you don't have a code of conduct...you are racist."

I also noticed Meetup organizers and conference organizers coming under continuous direct public shaming pressure by screaming mobs online when they didn't have a precisely calibrated gender balance amongst speakers despite a numerical discrepancy in submitted talks. On top of that, I frequently see female engineers now actually complaining about being asked to talk about diversity at conferences too frequently because they are in a minority who are able to fill these gaps.

Finally, and most boring, diversity-related content has creeped into many Meetups, conferences and other events to the point where formerly content-filled events are now 30% diversity-related content by weight. Instead of interesting information about Python, we get 7 talks about how Python programmers can be more diverse and what it is like being a female Python programmer.

I find these changes disturbing. I find conduct codes to be sinister and a form of creeping control by the Left to attempt to extend safe spaces into industry and other places they don't belong.

We have a code of conduct in the United States, it is called the law. The constitution is the code of conduct we need to be concerned with now.
Some hospitals do it, some don't. My wild guess - at best 50% of patients get it. And maybe 25% of those get it interpreted as well as you would for your family.
You can disable those 'You are going to be awake in...' notifications. On Mac, it's Options > Backwards alarm clock
Why has Silicon Valley emerged as a unique R&D center?
You can setup your own on digital ocean or aws light sail you will get better bandwidth... IP will not be blocked as it will not be known vpn IP and it can be rotated.. not saying these are solutions to the privacy problem only the technical ones
Yes. Your bottleneck will most likely be network and CPU speed as that's used for encryption. Google around for specific numbers, but my intuition is that network will max out before CPU does even on the $5/mo instance.
tcpdump does TCP sessionization, yeah. But we're talking about ISPs extracting the hostnames in bulk for all their customers' traffic live, right? Maybe you're talking about something else, but I figured, based on the article we're having this conversation about, the attacker is these scenarios is an ISP, which only cares about doing these things at scale. You can't put tcpdump in front of a 100Gbps switch and do sessionization live.

> Assume DNS is not used and there is no reverse DNS information available that gives the specific domainname requested by the user.

If it's a hostname it has to correspond to a valid domain name, right? You can always use a third party or roll your own reverse DNS entry, as I described in my other answer. As long as the domain name actually has a DNS A record, we can get it.
Without consent is the important part, it will soon be part of your ISP's TOS to allow them to sell your data. The wiretap act has a specific call out for this occasion:

> (d) It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception unless such communication is intercepted for the purpose of committing any criminal or tortious act in violation of the Constitution or laws of the United States or of any State.
PostgreSQL anti-patterns: Unnecessary json/hstore dynamic columns (2015)
Exactly this. Apple is building this feature for the average user. If they presented a screen too different from normal, most people would turn it off, thinking that it looks ugly - precisely the opposite of what they want.
No, what matters is tradeoffs. Is one party's set of policies far more problematic than those of the other party?
You Should Appreciate Germs
Hey there, thanks for trying it out. Was this after uploading a wav then clicking to edit its tags or file name? I'll see if I can improve that aspect. In general, Sawtooth transcodes uploads behind the scenes to create mp3 and opus encoded versions so that they can be streamed to your browser (not all browsers support playing wav directly). These versions are all stored next to each other. Editing the name string in the UI shouldn't be able to change file extensions in the backend.

I'd be happy to field any other questions here or equally you can reach me at curtis at sawtooth.io
For reference/laziness: https://brandnewcongress.org/
Some vestiges of that persisted for much longer. For example, QBasic, and even VB for DOS, still had the FILES command. Which, as you'd expect, produced the list of files in the current directory - except it didn't return it, but simply printed it out to the console. So it was something rather useless in an application, but handy in a shell.

Less obvious things were having a variety of filesystem-related functionality as built-in statements with special syntax, rather than functions. For example, renaming a file: NAME "foo" AS "bar".
Instead of on-prem to start, you could probably get away with VM appliances people could spin up in their own cloud provider or VPC.

I don't mind code being sent to a server, but it needs to be a server I control.
OpenSSL Re-Licensing to Apache License v2.0
There's some related research out of UIUC that's pretty neat.
http://dataspread.github.io/
I am still unable to get used to flux. It bothers me a lot, and I think my brain is trying to color correct or something; I swear it contributes to tension headaches. Could also just be getting them from too much screen time but the effect seems worse with flux on.
I just re-read that article again, and don't really see your claims in in anywhere. I can kinda see how you might draw that conclusion, but I think it's an oversimplification and not really that accurate.

I do see some listed counterexamples to the "law", and also a note about occasional upsets where the parties get completely rearranged.

If both major parties suck, how do I ask for an upset? Is it by fuming quietly and voting for the lesser of the two evils, or by saying "no, fuck you both"? Or does the fact that any upset probably won't happen this election mean that it's part of "the long run" where per Keynes we're all dead, and so it doesn't actually matter?

Do the major parties just ignore any non-major-party vote, or do they analyze it to tweak their platforms for next time? (And, is this consistent over time and space? I'm hearing that it seems to be the case in the US now, but in the same breath I'm hearing that that's a recent localized disaster.)
Potentially a workaround is getting a business account/connection. I doubt most businesses will want any kind of data gathering. So they'll be exempt but obviously more expensive. Could be worth it for no speed loses/VPN hassle.

Maybe they'll even offer pay for privacy on consumer accounts? It's just the price you pay when most people don't know about the issue, or don't understand the issue, or don't care about the issue.
How about Apple provide a VPN as part of the device? Remember Apple was the one that broke the telecom's dominance on the mobile market. I wouldn't mind paying Apple for the privacy.
Back from Quakenet era there were fewer and smaller online communities and generally internet was seen as niche whereas now it is a commodity.

Are there any gaming communities still using IRC? It might still be niche which is why it's not a problem?

Disclaimer: grew up in France during that time so can't speak for other countries
Does anyone sell a router for the home that has a VPN built in?

So that I dont have to have every computer in my home hook into the VPN when I start it up. Just one account for my whole house?

I imagine you could setup a linux box to do that for you, but I am lazy...
And that high level of difficult to learn skills if tended and protected can yield dividends for generations. Or, one generation can outsource everything including decades of hard learned secrets for a short term boost in earnings by selling for the same price but paying 1/10th the wages so they can cash out millions in stock options.

But then ten years later the workers you trained have now formed their own company and they are the ones making the huge profits, and there's nothing you can do because your country doesn't even have any skills in the field anymore. Now spread this across tens and hundreds of industries.

Sure, we still have software development and other super high tech stuff, but China is figuring much of this out very quickly as well.

I think we'll find out soon enough which country had the better strategy.
And BigQuery!
the search filter seems to have some hard coded logic, preferring languages like R (4 projects [1]) over Scala (5 projects [2]). I wonder if that's based on trends or purely taste (or just cache :-)).

[1] https://opensource.google.com/projects/search?q=%20&language=r
[2] https://opensource.google.com/projects/search?q=%20&language=scala
Some point are just wrong. Containers and jails have many design similarities which were dismissed by author. Notably PIDs, both containers and jails are nearly identical with regard, you can kind of have one leg here another there, although that harder to achieve with FreeBSD jails; both implementations do not hide PIDs from the host systems. Networking - jails can run on top of non-virtualazed IP/net dev, containers can run in such modes as well. Link is someones rant without tech details.
Sure, I had the "what's up with your screen" comments too.

Then I'd turn off flux while they were watching & everybody said the same thing as the screen returned to blue-white: "ewwww."
Every time I tried to get into CL, having to use Emacs/SLIME (which, let's face it, is the development environment for it for all practical purposes) has been a huge turn-off.

So, yes. Please?
I have been learning about containers fairly recently. What are these security vulnerabilities that the post talks about? I haven't come across any docs that mention security yet.
Basic fair reality: if you don't work, you starve.

I'm working out the baseline effort required for "here's your fair share of Earth, and a bag of assorted seeds - fend for yourself." The notion that you should be able to exist indefinitely without effort is preposterous. Either you put in that basic effort (which I'm trying to quantify), or that effort is taken under threat from someone else and redistributed to you. Finding the latter morally abhorrent, I have to conclude that "freedom" is predicated on the axiom that one must produce enough to sustain oneself.

From there we can return to your assertion.

If someone does not possess the means of independent subsistence, then it is not unreasonable to expect that someone to at least generate equivalent productivity under whatever circumstances are available, trading it for equivalent subsistence. "Produce 730,000 consumable kcals annually or starve" being a practical law of nature, it is not "unfair" nor "un-free" to enter into an employment contract trading productivity for sustenance. Your "freedom" is, however repulsive the choices, to either expire or produce enough to survive - and that either thru independent subsistence farming, or an equivalent effort traded for equivalent nourishment etc.

It's not unfair to expect a baseline productivity of someone, and whether it's complete self-sufficiency or capitalistic contract to work makes little difference. (Whether someone takes "unfair" advantage of that arrangement is a different discussion.) Fair work for fair pay exchangeable for fair sustenance is fair.
Of course, the math says that with the current voting system, any third party that emerges as a major force will always consume one of the existing major parties, leading the nation back to a two party system. I wonder why people always ignore this inconvenient theorem.
I filed a bug for this a few weeks ago, and then issue disappeared for me (I'm on the Sierra beta builds).
Germans may think beyond next quarters earnings.
Re-fuckin-tweet. It's a good thing that the world is different from how it used to be -- the past was full of injustices and suffering. Nostalgia for nostalgia's sake is poison.