skysight-inc/HackerNews huggingface dataset:
IP spoofing is the problem. Even if you completely ban UDP protocols, it still allows for anonymous unamplified attacks.

Attacking every single protocol that dares to respond to a query is a pretty stupid approach IMO. Look how well it's worked so far.

Additionally, unless we switch DNS to TCP only, root and authoritative name servers are always going to provide and amplification factor and there are still more than enough of them for devastating attacks.

Agree with you about monitoring, but that wouldn't be necessary if we got serious about enforcing and blacklisting ISPs that drop the ball on BCP 38.
I don't follow the examples.

The Iran example is due to political trade embargos, which apply not only unilaterally to all companies but are also often a part of international trade agreements via NATO, the UN, and the EU. It's a very different nature than the CA ruling in this case.

The second example, they can't actually pass that law. They can have requirements that companies must comply with to get/keep government contracts, but that is very different because the company can stay in the US and simply not try to win a contract.
Maybe they simply don't give a damn, because they realize general population is not their target market, and so it doesn't matter what regular people think of them?
In Canada, you are free to say whatever you want. If it comes into contrast with what is socially (and subsequently legally) acceptable at the time, then you may or may not face consequences for your actions.

Same as in any other country, from Switzerland to North Korea.
Only thing that will change with DRM is less Google-fu and more Pirate-fu which people with good google-fu also have in abundance.
I've always had success with ORMs when I let them write the 95% of trivial queries (SELECT * FROM table, INSERT INTO table, UPDATE table SET ... WHERE id = x). The complex queries I'd always rather write by hand to take advantage of the expressiveness of SQL, and to make sure that queries hit my indexes correctly.
> there is no real scientific explanation for this phenomenon. Of course it's usually labeled as some kind of dream state, or just a chemical reaction in our brains.

Which... is actually most likely. A couple of times I've fallen asleep and still had knowledge of my surroundings -- I could tell what was a dream and what wasn't, and feel when my limbs were getting numb (Normally in sleep you'd move them, but I had to move them in this state. I also wasn't very happy to because that just wrests you out of the experience), but also feel when I stopped breathing (And spend a couple of minutes wresting myself awake in terror...).

What would make that explanation a 'real' explanation, exactly? If it is an actual out of body experience, what evidence would you expect from that? The most science will be able to tell us -- at best -- is that they noticed a change in so and so part of the brain or that our brainwaves go a little fuzzy, and oh, when we stimulate such and such part of the brain with a small electrical current we can duplicate the exact process.

To which people would just say that, while that is interesting and all, the ability to provoke it with electricity doesn't prove that it isn't an actual out of body experience (Of course, if we can do that, we can check for parity between what the subject experienced and what was actually happening -- but this will probably be met with limited success because they will probably ignore the fact that the brain can hear the surroundings...)
http://www.apress.com/us/book/9781484211779

For those interested buying a copy of Common Lisp Recipes:
I think Edi said that for the author it is financially better to go via his page:

http://weitz.de/cl-recipes/

But then, supporting a local bookstore might also be an option. Though I have to confess, I got my printed copy from Edi as a gift... :-)
BCP 38 on ingress at edges is trivial performance-wise (a few ACL entries in TCAM).

It's just that there is no incentive to stop lazy ISPs from allowing everything since that's easier.
Yes, that's exactly right. Sorry for the confusion lambdadmitry!
They can always do SQL abstraction without doing the object-relational mapping.
Yeah stop book photocopying by not publishing books is the best way to do it. Then they are no longer book publishers just another website with a premium subscription.
Or The Killing Star.

https://en.wikipedia.org/wiki/The_Killing_Star
Show HN: Data Leak, a physical display for internet leaks
well i mostly bought their titles from bookstores in deadtree format so it does not really affect me. as long as they continue to publish good stuff and the bookstores have their books (which has become more of a problem lately) i will probably buy a few once in a while. still this is a most unwelcome deterioration. it just puts them in the category of companies that like to squeeze every dollar out of their users, which is not good because they used to enjoy a very good reputation which justified their high pricetag.
Totally off-topic but I always take slight offense when headlines talk about "apps" when the actual meaning is websites or web services.

For example I clicked on the headline expecting content about the speed of Android / iOS apps (which is something I care about professionally), but then was disappointed (and frustrated) to find that the actual content is all about web stuff.

When you mean "Web App", say "Web App"!
Former user of Eclipse an IntelliJ, now Netbeans:

For some people (like me) Netbeans is awesome. I love the fact that it can use pom as its own project model and IMO it aligns better with OS keyboard shortcuts (Win and Linux at least) than VS, eclipse and IntelliJ).

Be prepared for weird reactions though: it seems everyone "knows" it is awful.
Custom Software Product Development: Envisioning Your Software Product Journey
>There are plenty of high-value activities that go undervalued

I think given the distinction you're making, it would be better to say these activities are underpriced.

But I agree with your point. Far too many proponents of capitalism seem to believe the economy is somehow inherently fair because all prices reflect utility creation.

Another factor here is that demand is distorted by wealth. Things that provide value to rich people will be priced higher than things that provide equivalent value to poor people. A yacht seems unlikely to be as valuable to its individual owner as an equivalently priced amount of food is to many different people.
We write science and GIS related interactive web applications. All our backends are Django because every application has some CRUD components somewhere and in general Python and Django have fantastic libraries available.

The Django ORM just works, I love it, it's never in our way and does what we need.
>At what age is Informatics\CS first compulsory

2-4 grades - elective (in some schools)
5-end of school as compulsory for all schools.

>when does it stop being compulsory

It doesn't. Here in Russia we don't have a system where you can chose your subjects, even in high school (university[1] etc). Instead there is an educational programm to follow. Plus some schools provide elective subjects which you can add to you programm (for example second foreign language).

>Are there specialist teachers

Yep, there are. Specialized schools (we have general schools and schools with specializations, for example with deeper math&physics, or biology, or languages) might have several CS teachers (for example one who teachers younger kids simple things and general programming and the other one with algorithmic\math\network bias).

[1] Obviously in university the programm will differ depending on department you are in and other small things.
Yes, they may have rights to this script. But he probably doesn't owe them any documentation and certainly not training or maintenance. Depending on situation, he may still be able to get something from it and probably he should if they didn't want him to automate that and didn't pay him a real programmer's salary.
Look at this part of the video from https://zeppelin.apache.org:
https://www.youtube.com/watch?v=_PQbVH_aO5E&t=3m21s. It shows plotting directly from SQL.
What's wrong with ORMs?
I tend to use Dapper. I've found that it can solve most of my problems, and it's easy to drop back to raw SQL as needed for the last 5% that need finer control. It's also super easy to extend and customize based on my requirements, and it's almost as fast as raw SQL.
>a miniature rock that has nothing to offer to a space faring race?

I'd think a truly space faring race would probably have very different goals to us and the currency of culture would be much more valuable than natural resources which surely are abundant if space travel is trivial to you. Looking at it that way we'd have a hell of a lot to offer.
Cool story, but did Milton Friedman genuinely do in his head the optimization between the social benefit of the jobs program and the infrastructure benefit of the new canal?
Covered previously on HN:

https://news.ycombinator.com/item?id=11232724

I do wonder how they are doing now though. Seems a really sad state of affairs.

See also:

By installing NAT, MIT stifles innovation
https://news.ycombinator.com/item?id=14637850
And why should some people benefit from progress, while others are left to live in the wilderness? (Considering only few people actually contribute to progress.)
Google must alter worldwide search results, per orders from Canada’s top court
> Bulgaria may not be entrepreneur friendly or corruption free, but it is not a misery cesspool

I absolutely agree with your opinion. There are companies like Telerik (acquired by Progress Software) and Chaos Group which have earned our country a formidable reputation on the global tech scene and it's relatively easy to get recognized. The overall ennvironment is good too - the country has grown a lot since it became member of the EU. Despite all this, it doesn't have the extremely competitive atmosphere, the "evolve or die" mindset of the more developed markets. There is nobody who's going to push you out or take you over. Personally I think such type of atmosphere would have let us grow much faster and innovate quicker.

> Nevertheless, the rest of the post shows that it is in fact easier to start a business in Bulgaria.

I'm not implying the opposite. It's easy to start a run-of-the mill software development outsourcing business and sustain it, but with such "immature tech scene", it's very difficult to evolve it in something bigger, and that's a big problem.

p.s I'm the author of this article
Nothing. They're just as bad an idea today. I think perhaps that message had begun to sink in.

Developers have this unreasonable fear of the SQL language, and I can't really understand why. Sure, it's different. But then so is CoffeeScript and everybody seemed fine learning to draw little arrows in their code for the six weeks that was popular.

For me, SQL is the perfect language for describing and working with databases. "Computer, give me a list of Students who are taking Algebra 101". But developers really seem to prefer taking that whole Student list and spinning through it themselves, looking up every class everybody is taking and building their own list thank you very much.

And instead of using a simple, concise way of defining data tables (that follows that same elegant data retreival and manipulation language), devs would much prefer something with angle brackets.

So they never bother learning the easy way of doing things and spend several years inventing something more complex and opaque.

Eventually, I guess enough people got fed up of dealing with the silliness and picked up a book on SQL.
PEOPLE ON THE INTERNET BE LIKE: "Let's rewrite everything in Go."
Not so surprising as we could think.

First of all we have access to less than half of this organism only. What about root mutations?

And second, we have accces only to the 'bad half' in our search for mutations. Trees act in some ways as 'colonial organisms'. Each branch competes with other branches. Some can place itselves in a better place and trive, and other not. Is a well known fact by gardeners that mutated branches are outcompeted and die more often. Mutations in cells of flowers, leaves or fruit peduncles are simply auto-cleaned in winter, and some barks fall also.

Oaks are customed to having several of types of 'cancers' and react actively against, isolating the tissue or nurturing the tumor for a while before 'autopruning' it.

There is not need here of a genetic mechanism to protect cells from mutations. Such system may happen, but not necessarily.
http://www.imdb.com/title/tt3868848/ Stitchers? anyone?
Ask HN: What are some of the best inventions that are services?
K root is operated by RIPE NCC
M root is opreated by WIDE from Japan

http://root-servers.org/

Use DNSSEC, it's pretty tamper proof, keys are in HSM and "geo distributed" ( https://www.schneier.com/blog/archives/2010/07/dnssec_root_k... ), the weak points are probably the facilities themselves in the US (one on the East Coast and one on the West Coast), but the trust anchor is pretty much fixed in the root servers, and it'd be quickly discovered if someone rolled a new one out of schedule.
IBM and Lightbend join forces on enterprise AI
More casualties from BCP 38 failures. This article mentions it but then dilutes the importance of it by suggesting SSDP is a problem. If IP spoofing did not work on the Internet, none of these UDP reflection attacks would work.

A scheme to strong arm the adoption of BCP 38 is key to stopping these attacks from growing. IoT has shown us that expecting device updates to disable these UDP protocols is a lost battle.
This is good: https://www.arilewis.com/blog/2017/6/1/9si827ayimpdnbkzpahpk...

Disclosure: I wrote it.
There are ORM's in functional languages too, but they too have problems. Mainly the problems arises from SQL being structurally typed, meaning you can JOIN totally unrelated tables as long as they have columns with same types.

Practically there are no programming languages that allow to do all set operations on properties of records. Though Elm comes close. If the language has this peculiar feature, it should be possible to write a "ORM" that just works for all queries (given that the language has similar flexibility).
My experience is strongly flavoured by developing and optimizing on the edge of what the database is able to do; and my performance condition isn't scaling up millions of tiny trivial queries, but getting big hairy dynamically generated queries to execute efficiently within a deadline.

No ORM comes remotely close to being able to solve this kind of problem. The kinds of things I need to consider:

- analyzing select / predicate / order / etc. for tables used and selectively including tables

- forcing query evaluation order by creating a subtable query with conditions, projecting out an id, and rejoining in the next query up

- analyzing predicates and rewriting predicate trees to push predicates down into subtable queries, or convert predicates into joins, or replace references to columns on other tables with denormalized columns

- gathering heuristics about query set size and changing query generation technique

- splitting queries into parallelizable queries and composing result set client-side

An ORM doesn't really help me. Even a library tuned for symbolic manipulation of SQL doesn't help hugely; my life is made much simpler when I can freely extend the SQL AST classes with my own analytic and rewrite methods.
Chrome 网上应用店 – 扩展程序
Yes but never forget the $5 wrench solution to crypto problems.
At a time where there is energy scarcity due to increased consumption, I question the economic viability of such an impractical endeavour being carried out under such government support. (Wow I just used so many new words!!!!)

Still this is not a movie where the aliens are on next moon so even if they picked up the signals it would long after the next few generations die off (Light years away - Man they are damn far off). (living in a developing country would give you a whole new perspective on energy scarcity)
Why don't you trust the Government to track it if you trust the Government to enforce it? That is, why do you need "trustless" if you need to trust someone further down the line anyway?
> only a handful of our tech-oriented students had participated in hackatons, contributed to open-source software, had started a personal blog or answered questions in online help communities such as StackOverflow

It's Eastern Europe, so those even marginally competent who haven't left are employed for peanuts in outsourcing centers, working on brain-numbing projects 9-5 or even 8-6. Ain't nobody got time for that.
>This isn't remotely true; it turns what looks like an in-memory access into a network round trip. Navigating your database using an idiom of lists and member accesses is a fast path to n+1 queries all over the place, or ORM tuned to eagerly fetch the whole world when you only touch a tiny piece of it.

Only if you use naive ways of doing this. In .NET at least your overcomplicated expression can be compiled down to the minimum query needed to pull the bits of data you use.
You can "publish notice" by putting a sign outside your front door. The reason the titling process is expensive is because your Government requires it, not because publishing notice in some reasonable manner is inherently expensive. (We publish notice of a lot of things just by sticking an ad in the paper as it is, property is a weird one.)

What issues is the titling process solving that cannot be solved in any way without a blockchain?
What's a Diaspora?
Was it ever about avoiding SQL entirely? I thought it was about avoiding fragile SQL that's hardcoded to your specific data structures?
The designated commissar could also use twitter too.
Unfortunately that often doesn't work well for optimisation passes, as many passes end up relating to each other.

However, you can still keep removing sets of optimisations and hope the bug remains, and do a final pass where you remove each optimisation one at a time.

Another problem is that in the past I found compiler bugs from running unusual sets of optimisation passes.
It's just me, I don't like it.
Oh, yeah I missed that. Cheers!
Master Ada Programming with Free Books
I mean, "much cheaper" doesn't mean much. I pay $199/year for Safari. It's more expensive than Netflix or Spotify, sure, but still only $17/month.

And regarding Safari being an "also-ran side platform", I'm wondering if maybe you were thinking of the old SafariBooksOnline platform. They switched to Safari a couple of years ago which is definitely more modern and cheaper, although it does do away with the tokens you would get every month to download whole books or chapters.

For me, this doesn't trash their reputation or otherwise make me think less of them. They've obviously decided that direct fulfillment was too much of a hassle and that other retailers could do a more efficient job. I guess I might feel different if I bought a lot of books from them, but having used their subscription service for around 8 years now, I just don't need to buy tech books anymore.
It was a rhetorical question to make you think. In reality, if I finish my task, I take a new task from the task list.

My point is just that there's no real incentive to work more efficiently (eg by automating or by smartly planning ahead) and my employer is happy as long as I stay ahead of milestones and generally work well, and its somewhat demoralising knowing that there's an infinite stream of work and no matter how hard I push myself, this doesn't get smaller, I don't get to leave earlier etc. This can be especially frustrating when other people on my team who are being compensated roughly the same as me are not pushing as hard. Why should I?

(In case someone who knows me is reading: this isn't actually the case, I'm asking hypothetically for the sake of this discussion)
Security Testing Strategies
An introduction to functional programming in JavaScript
https://news.ycombinator.com/item?id=14657061
Data shows that most websites are too cluttered
This only works until it gets too popular. Reddit was pretty awesome back in the day too, specifically because it had an HN-like crowd.
this is what you want: http://www.jooq.org/
People on the Internet Be Like: “Let's Rewrite Everything in Go.”
I don't want to sound negative, but considering we have so many problems with racism already, think of the problems we'd face when there would be another intelligent species around! There's probably a reason why there is only one intelligent species on Earth, and it isn't pretty.

Finally, by the time we'd be able to visit another planet, we'd probably prefer sitting in our Holodecks all day.
True and I don't dispute that.

I'm not even sure if what I posted makes much sense, I was somehow stuck in the context of using alternative search engines to evade censorship and figured that parent suggests that these links may have something to do with it.
But they're unnecessary baggage, because your top six reasons all work in reverse.

If you define your schema in your database and derive your data layer from that, you get everything in your list (apart from that thing that totally always happens where you switch your underlying database technology every few months).

But then you don't have your database defined in two places. And if anybody ever does modify the db by hand, your build will break and it will quickly surface itself as an issue at compile time instead of via an obscure error message somewhere 40 levels deep in the call stack.
How is "being denied to enter a country" not "loss of freedom"?
Let 1000 people in worth 1,000,000 dollars or let on 1,000,000 people in with 1000 dollars, which group will on average create more jobs?

Look I'd like to take the high road too and say everyone is equal, but we only begin that way.

(Note: I'm from the second group in this mind game)
Nimiq, a web based blockchain, raised more than $10M in less than 24h
List of Top Dog Multivitamins
It's not being done because anyone thinks its economically viable. And anyway it's being paid for by private donors, not the US government.
A great number of my Romanian programmer friends have already started to realize this and have stopped emigrating to other European countries.

Yeah, moving to a place like London would most probably get you 2 or maximum 3 times the salary you are now getting, but you'd also have to pay rent which is 8 to 10 times higher in London, going out is outrageously expensive (7 pounds for buying a beer in a pub after a day's work is pure robbery), the general geographic area is quite nice around these parts (we have mountains, seaside, nice rivers for fishing), all in all they're doing quite ok. They won't ever be able to buy a $100,000+ car, a small boat or a small air-plane, like I see many of the SV engineers doing, but that's not that huge of a sacrifice to make. What's letting me down, personally, and what would convince me to finally take the plunge and emigrate to a Western European country is the health and the education system, which right now is in shambles in Romania (and I guess in Bulgaria, too).
Smart IoT Solution for Insurance Companies [Infographic]
My point is: whats in it for the employee if that throughput increase takes more energy/effort on the employees part?

I usually hear that you get rewarded with more responsibility and such, but the increase in responsibility is rarely matched with a fair increase in compensation given that more responsibility usually means some combination of greater workload, more effort, longer hours, more stress.