skysight-inc/HackerNews huggingface dataset:
> 3) The ones that seem to be causing the biggest headaches on YouTube lately are the bigger creators.

You're probably referring to the recent events where well-known youtubers have published questionable content and causing an outrage.

But I think this is about the low-quality spammers and copycat content farms that create videos automatically or semi-automatically or just otherwise with low effort, and aggressively optimize using analytics. To make matters worse, a lot of these target children and some of these have even been approved to the "for children" category.

Even though the outrage hasn't been as loud in the media (but there has been some discussion about it), I think it's a much bigger issue for them than a few high profile makers publishing questionable content.

From their point of view, the spam accounts are impossible to distinguish from individuals who have just a few videos or are just getting started. If they allow monetization with no barrier to entry, there will be spam content.

I'm not sure what other alternatives they would have, apart from manually vetting each and every account eligible for monetization.

I do understand that this is a pain in the ass for niche content production. I've been considering starting some niche video production too (I enjoy activities that others enjoy watching) but now it looks like it would take 6-12 months (at least) to get to the point where you could make a dime. For me, this would mean non-trivial time and money investment in equipment. I wouldn't do it to make money, but I don't want to be spending money with not hope of getting any back either.
Blue Planet II Is the Greatest Nature Series of All Time
Google Chrome extensions with 500,000 downloads found to be malicious
With Amazon and Google et.al cloud computing we are back to pay-per-cycle, so at least some of it makes sense, if you are for example deploying millions of CPU's.
I'm using webpack on a ~60 TS files project now. It takes a few seconds to bootstrap, but then, in watch mode, it only compiles the files that are changed and it's really fast.
While qmail has faded in popularity as it has been sporadically maintained by a random bunch of folks over the years, there has been at least one other MTA written by someone with excellent security cred, and that has been continually maintained and has an excellent security record. We don't really need to mourn what could have been with qmail; we have Postfix, and it's really very good.
Intel has spoken, and for Spectre variant 1 they have said we need to fix it in software (they recommend inserting fences "in appropriate places").
https://newsroom.intel.com/wp-content/uploads/sites/11/2018/...
Ask HN: Whats the story behind Linus showing middle finger to Nvidia?
https://www.youtube.com/watch?v=iYWzMvlj2RQ
That's a very good point
Is there any way this could work with === ?
Happened to me too, but not over my normal DSL IP, but while browsing through Tor. As you note, one CAPTCHA is replaced by another seemingly without end. I gave up after 3 or so tries and switched to DDG, which is what I use when browsing over Tor. It's Google's loss, certainly not mine.

Which shows how important it is for Internet health that we have search competitors to Google who maintain their own indexes. No one company should become the sole practical gateway to the Net.
Perhaps now it maintained and used as such, but when it was built, it was during a conflict. So my point still stands.
I completely agree. But the vendor situation looks very different for software.

Imagine being the sole person responsible for migrating Linux from ip/nftables to ebtables. You don't know how your stuff will be used downstream. So you license it with text in all caps reminding people that your software is provided WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. And people still use it to build oil pipelines that bleed toxic goop when sent a really weird keepalive message.

I hope that the first place we see an uptick is security. The list has grown rather long: consumer/citizen identity breaches, hospital ransomware, digital asset theft, remote vehicle control, etc. Most security people I know are of the mindset that systems will be hacked. It's extremely.. pragmatic. You can't really fault the people responsible when many companies simply require good damage control over actual security in order to be successful.

But that's exactly the point. If the consequences were increased, not so many C[I]SOs would be okay with engineers using hot new software every few quarters. And those old boxes running Ruby 1.87 would sure as hell be patched or isolated to oblivion. Companies or projects with good security would flourish. Maybe some would be pressured to operate more like the archetype they're defending against (more red team, more organizational commitment to physical and operational security).

I worked at a security company that had to get rid of a slack bot screen lock game because it hurt some people's feels. So yeah I think some of the priorities in this industry are messed up.
> So, does it mean FCC in 2015 created some rules in the absence of the law

No, actually, the court striking down the 2010 Open Internet Order as impermissible given the FCCs citation of Title I authority as it's basis specifically pointed to Title II common carrier classification as a basis that would support the kind of rules that the FCC had adopted.

(Why the FCC resisted Title II classification up through the 2014 draft of what became the 2015 order is an interesting question, of course.)
I agree, but I don't retract it.

People still occasionally perform music from 2000 odd years ago, which I would consider to belong to a different civilization to our own.

https://en.wikipedia.org/wiki/Seikilos_epitaph
Never was, and probably won't be there for a long time.

If you wish to compete with Youtube, consider a feature match of the followings:

1. Fast streaming, everywhere, on phones and browsers.

2. Super High resolution videos.

3. Huge content reserves.

4. Good search and discovery experience.

5. The ability to battle spams and handle external copyright claim to avoid lawsuit.

6. Robust ad platform and sales and the infrastructure to sustain operations.

Youtube has achieved this because they are part of Google, they enjoy all kinds of technological advantage: Storage/Serving/Spam filtering/Video encoding/Machine Learning, and years and years of accumulation of data, losing billions of dollars while getting constant cash injection from Google.

It is hard to replicate Youtube, heck, even Chinese doesn't succeed to copy one of their own. None of the video streaming websites in China is exactly the model of Youtube.
What we liked about The Screen Savers and ZDTV/TechTV in general was that it was the first time somebody was actually talking to a wide audience about the computers, the web, and gadgets. It was ice water in a desert.

Now, there is no premium on tech content. One no longer needs to seek out Leo Laporte to hear what’s going on in tech or roundtable discussions about it.
I used to listen to TWiT but signed up for Audible based on their recommendation of the service and I stopped listening to podcasts and listen to audiobooks!
I was illustrating the point that these bugs are not limited to a cloud vs dedicated server sevicd model. I don’t think OP would risk not patching its dedicated server, then it echoes my point that these bugs are just as dangerous as in dedicated server model too.
Yeah, I missed that, thank you for pointing it.
You can have high-throughout roads into cities, or hypergentrification in urban neighborhoods as people move closer to minimize transportation needs. The existing suburban masses are not going to vanish into thin air.
HitBTC sucks less than a lot of other exchanges IME. It's not my favorite exchange but it's decent enough that I rank it pretty highly.

I have noticed that if you look at reviews for different exchanges, most will have a large amount of negative reviews. Some deserve it but I suspect that a lot of the reviews are not real - competing exchanges may have paid someone to write fake negative reviews.

Not saying HitBTC is the best or anything.

As an exercise, try this: Take the name of your absolute favorite exchange, combine it with the word "review" (sans quotation marks) and do a Google search for that. Look through the results.
Well, that can be sorted out with a background task.
You can’t just green light any known VPN IP ranges though because they’re dynamic, and if you did, bots would just resort to using VPNs to bypass normal IP blocking.
Given a choice of organic vs GM I never heard anyone preferring GM so far. To me it seems all these benefits are somehow always for others to capture.
In section 5.2 of Bernstein's paper, he discusses isolating single-source transformations. His example is locking down jpegtopnm using standard Unix mechanisms so it can only read stdin and write stdout and do absolutely nothing else. It seems this pattern really should be one that is trivial for the programmer to use, without having to go through the process of managing a pool of UIDs, remember about setting process limits, etc. Then it might be used correctly more often. Would be a useful building block for lots of code, especially if it were portable across many versions of *nix.
From what I understand the "cURL" format of the word is popular mostly with users of the PHP bindings. "curl" is what the project uses, but I'm not sure they really care what other people refer to it as :)
You can have a unicode character literal -- and depending on the language there's no distinction between character and string (at the type level), a character is just a string of length 1.
Grimm and Lang didn't have very good copyright lawyers working for them.
Dang stop being a cunt. I get that you've been raped so frequently but just stop
Why+not+build+your+own+Cloud+environment+using+OpenStack?
Something to keep in mind with regards to qmail is that it's extremely feature-poor and it never got features beyond its initial design goal.

This makes it much easier to keep the bugs out, to the point that making software under such constraints is much more similar to traditional construction projects.

I mean: Nobody ever tells you after you have built a bridge that they are now going to upgrade gravity to gravity 2.0 with 100% more pull. And nobody will ever tell you that your bridge will now get a shopping mall in the middle of it where people can purchase products of their favorite brands.

Software starts to break down when it has to be taken above initial design constraints and when there is not enough time to rewrite subsystems (or all of it) but instead when you have to make the abstractions leaky and compromise.

But back to qmail:

qmail itself is so feature-poor that traditionally, nobody was and is actually running qmail. Instead everybody is running "qmail" which is qmail plus some patches. Sometimes home-grown, sometimes taken from third parties.

But more often than not they are unmaintained and very far removed from the high quality standards of the underlying software.

This is the downside. Yes. You have a bug-free core that totally meets its designers (limited) use-case, but in reality nobody is actually running that.
And you can't move whole conversations, for example. That's a huge pain point for me.

It seems to be a totally different thing than the regular message list, and only some actions work in Conversation mode.
Renewable energy sector under the current Indian government
Yeah these things are silly I have played both and they involve very different approaches to practice and performance its like writing an article that oranges have a different effect on the brain than peaches.
The reward of being down voted by you cunts you mean?
I spent a long time wondering about this. Honestly, I think I am (along with Osvik and Tromer) modern father of these sorts of attacks. (See my reply to pbsd for why.)

I think people in the field recognize my credibility and expertise here, and for them that paragraph is superfluous; but I was aiming this blog post at a wider audience (hence the effort spent on non-technical analogies to help them understand the issues) so I thought it was important to explain my background to people who had never heard of side channel attacks before.
Kinda pointless though
Would you say that all short selling is parasitic?
> Starting today we’re changing the eligibility requirement for monetization to 4,000 hours of watchtime within the past 12 months and 1,000 subscribers.

Is this an annual check? Or is it a one-time enrollement eligibility?

The 4000 hours is a big entry bar... it’s already hard enough to gain subscribers. Indeed the small creators - those who get maybe 5k views per video + 1000 subscriber + 5 mins videos won’t be making money??
Where does the privacy advantage come from? Once you resolve a hostname privately, don't you still need to use its IP address publicly for your traffic to be routed there?
"When Microsoft abandons a platform you better as well."

This is one of the reasons why I am deeply skeptical of UWP. It looks like a Microsoft-only show, and Microsoft frequently strongly support a platform right until they change direction and flip it into maintenance mode to pursue the Next Big Thing. Why invest in it if you don't need to?
I think the most glaring oversight in the headline is that Miles Davis was a trumpet player.
They still have a better track record than the competition regarding supporting technologies, or changing direction on a whim.

So I am definitely betting on them, even though I also suffered some delusions since Windows 3.x days.
It’s mentioned in the article. GNOME (and KDE) supports it, but has the same problem as Windows where they only let you configure it from major branded providers. You can open Evolution, configure it there, and have it work globally in all GNOME apps, but this is poorly documented.
That is what XAML Standard is for.
> "can you explain the business value added by doing this, so that I can be sure my implementation achieves that?"

100% this - "Have you considered that our long lead times on inventory means we increase our holding costs?" is a good lead-in to exploring how to reduce that.
I think you're missing something if that's what you got out of qmail. The main idea I internalized was, if you find yourself making programming mistakes, take some time to write an API that does not allow you to make that kind of mistake and commit to using it everywhere.

The licensing stuff, I'm not super clear on. If memory serves, DJB did not want to worry about bugs introduced by patches he'd never seen or approved, added by package maintainers for OSes he didn't use.

As for the somewhat weird ecosystem (daemontools), I think it wasn't that it wasn't good enough, it was just that people always find reasons to be dissatisfied. I can't even keep track of the latest reinvention of whatever people are using instead of daemontools, but I bet it's a hundred times as complex, and much less reliable.
You’re actually talking about the same open protocols here. macOS/iOS lets users configure it from any provider, but Windows has limited configuration to a handful of branded providers. Even though they’re all using the same set of protocols.
This is basically what Capsicum (FreeBSD + Linux) and pledge (OpenBSD) are for. I agree that it would be nice to have a standard interface, but the functionality provided by those is sufficiently different that it's hard to imagine how a single API could be created which usefully covers both.
Most of them took down their videos by now
Just stick the address of the DNS resolver in /etc/hosts.
XAML is closer to the metal than Winforms.

Forms uses GDI+, while XAML uses DirectX.
I'm trying Luna under a non-admin account in Windows 10. I tried to install it for the first time and forgot to turn Avast antivirus off. It blocked tar2.exe execution, so I had to turn it off and reinstall. It downloaded and installed fine, but I can't figure out how to run it: there's no shortcut in Start menu. Does Luna create one, when installed normally?
The article is about the CalDAV and CardDAV protocols which is the IMAP equivalent for syncing your calendars and contacts.
When I visited Atlanta a few years ago, I was the only white guy on the train, and possibly also the only person with a professional job.

A couple of people asked me what I was doing!

If that's changed, that's a great improvement for Atlanta.

Although I would walk or cycle the mile to the station.
I have a GPD Pocket too, and I concur with you - the keyboard is one iteration away from being acceptable. But, is it not still a kick-ass machine? I really love mine, and I look forward to any revision we may see from GPD in the future - and/or competition along similar lines. Finally a decent unibody not of Apple heritage!
> …highly opinionanted/unusual setup…

That setup contributed to security.

It also made qmail very easy to extend: I operated a medium-sized mail service a while ago and qmail's pluggability meant I could add features that didn't exist in other mail servers (like postfix or exim) without forking the entire project.

* I had SMTP AUTH when the only other mail server to support it was Netscape; before RFC2554 was written.

* My qmail-popup proxied to another machine so it didn't need root (making me immune to the Guninski vulnerability) so my users only needed to know about a single hostname regardless of where their mail was stored, and without needing to use something icky like NFS.

* I had a web interface with auto-enrolled client certificates for authentication and confidentiality for SMTP, POP, and IMAP.

* My qmail-remote recognised certain suggestions our IP was being blacklisted and would retry immediately with a new IP.

* My qmail-remote recognised certain greylisting error messages and rescheduled retry for that time.

* I had multiple mail queues based on the number of retries the message had seen.

And so on. I didn't start out to make those features, they just grew over a decade or so organically. At no point would I have forked postfix or exim to add any of those features because once you fork it you own it unless you can get your changes upstream. I had shit to do, so the real alternative was simply buy more servers and/or pay for commercial software.

I wish the model had caught on, because it's a superior way to develop software. I didn't understand why though until fifteen years later...

> …and unwillingness to share and collaborate on its development…

Dan absolutely collaborated, and I certainly was using betas back in 1996.

If my memory/anecdote isn't enough: There are a number of explicit points of evidence in the changelog distributed with qmail.

What he doesn't do is let people save face when they say something incredibly stupid and then try to backpedal when it's obvious how wrong they are. This bruised more than a few egos, and contributed to a campaign to actively smear his name and discredit his software.

> It could have easily dominated the market…

I think if Dan had let the peanut gallery have their way, we probably wouldn't have gotten postfix, but then qmail wouldn't have been qmail except in name. What's the value in the qmail brand if it isn't secure anymore?
Or monero or hundreds of other currencies.
Totally agree, this is a case of "intellectual property gone too far". Twitter didn't become big because of riding on the back of the TWiT trademark, and if people have heard of TWiT, no one confuses it with Twitter.

It's usually the case that the property owner is some big multinational company (like Disney or something) and the supposed infringer is some small artist. This time, it's reversed: Twitter is the 900-pound gorilla and TWiT is the plucky underdog. But the principle is the same, this is an absurd lawsuit only possible because of the modern legal system's screwed up obsession with intellectual property.
The desktop bridge is only thought as a way to package legacy desktop applications as a stepping stone to port them into fully UWP ones.

That is the workflow all Microsoft sessions about it focus on.
Firefox configuration hardening
If your server does eh scraping, it'd better not have access to your network.
Ask HN: Anyone knows a good room/meetingroom booking FOSS tool?
There's no way you can keep your genome private in the long term. Even today anyone can get DNA samples from you without your knowledge or consent, but in the near future it will be trivial to collect and sequence anyone's DNA using an iPhone.

Besides, the same knowledge that makes attacks possible also makes defense possible.
[2017] What’s a Service Mesh? And Why Would I Need One?
PrimeNG 5.2.0-RC1: Featuring the all-new lightning fast TurboTable
Comparing Cryptocurrency Trading Companies
Or create jobs with it to clean up the environment or service people that need help.
>We never get paid anything for posting on Stack Overflow or Hacker News yet here we are.

Speak for yourself.
If you read the comments on this blog, it's interesting to see youtubers asking for subscribers in return, "sub for sub".

I won't wonder if we see a solution soon to provide fraudulent subscribers like Instagram/Twitter ecosystem has. (not sure if it exists)

And then I will wait for Google to fight the subscriber (vote) ring pattern.
Bitconnect, which has been accused of running a Ponzi scheme, shuts down
One Ponzi scheme down
What do you think about prpc, which is our version of "gRPC for http/1.1"
https://godoc.org/go.chromium.org/luci/grpc/prpc
Yes, 'active' (JS-running) web scraping is an obvious exception.
This is similar to the situation where some people notices that born again Christians are more religious than people who've been Christians their whole lives. And this makes sense on some level, to have to actively seek out membership (religious or national) implies a greater degree of effort or commitment than someone who has never known non-membership.
> Every response is return asynchronously, we can achieve nonblocking.

same goes for UDP which DNS runs over normally.

Like the original commenter, I fail to see how stacking DNS over HTTP over TLS over TCP over IP is going to be faster than running DNS over UDP over IP.

Also, you still need to resolve the address of your DNS-over-HTTP server, which you'd probably still do over traditional DNS-over-UDP.

This feels like doing nothing but adding complexity for zero gain.
But it's comcast (I had comcast in MD in DC Metro). So having that speed doesn't mean your service will actually will work. Dealt with them at home and as a business. Awful. Just awful.
Youtube itself is a loss making company. With this announcement youtube has effectively told they will only give advertisement on selected videos vetted by youtube.

what about the expenses incurred for youtube for hosting small/niche channels? If its reputation that youtube is looking for, they can ask some third party to advertise on the smaller contents with a 33/33/33 split of revenue with content creator/advertiser/youtube.
>UWP will evolve

Or maybe it will be replaced with something completely new next year.
Simple Habit Is Hiring Our Lead Product Designer
"much smaller today" meaning literally smaller: Navier didn't know about atoms, 10^-10 m, but now we know about things at 10^-18 m or so.

Sure, our awareness of how much we don't know has grown over time.

The point I was trying to make is that theoretical models (like N-S) not only don't have to be perfect to be useful, but more, are useful precisely because they are not complete. By ignoring irrelevant details we get theory, not just simulation.