skysight-inc/HackerNews huggingface dataset:
Censys has some really great data. If you find this kind of thing important or useful, I'd invite you to participate in a project happening right now in the Caddy web server where we're trying to observe the Internet from a server-side perspective (rather than having clients scan servers) to gain insights and understanding as to the health of the Web and its clients. We seek to answer questions like, "What is being advertised in TLS ClientHellos?" and "Which clients fail to adhere to HSTS?" and "Is this surge of traffic possibly a rising global botnet or a DDOS attack?" and "How many HTTPS connections are being intercepted?" (this one builds off work by some of the Censys team) -- with many more (almost 100 questions). This data set will be unique in that it will be collected from many diverse networks rather than a single proprietary/corporate network, and will be made available to the public for research.

I really encourage you to get involved and participate in this project by submitting feedback, especially if you are a researcher or work in this field. We're at the early stages of choosing technologies, but we'll need more voices to refine the ideas and help with the implementation. The more who contribute, the better. More info: https://caddy.community/t/the-caddy-telemetry-project/3224?u...
Similar story for many other H4 visa children who came here as dependents of H1B parents. They are here as children, lived here, studied here - after they turn 21 they are being phased out of the immigration system.

Why does coming here illegally is a required qualification for dreamer bill, while children who followed all the rules, stayed decades in immigration queues are excluded?
Well, sure, but Microsoft wouldn't have chosen to promote C if not for the success of Unix. :)
You don't get how shoplifting works. One person doesn't shoplift enough to drive a shop out of business. 1000 people taking small crap they think doesn't matter drives the shop out of business. It is a cumulative thing where many small crimes build up to one crippling one.
"Requesting Results Removal

If you would like your host to be excluded from the Censys results, you can block traffic from the following subnets: 141.212.121.0/24 and 141.212.122.0/24. However, we would encourage you to consider whether this actually accomplishes what you are intending. Internet-wide scanning is pervasive and others will still find your host even if it's not listed in Censys. We will not censor specific hosts or certificates from the Censys results or historical datasets."

If I notify them that they are unauthorized to scan my networks, and they continue to scan them, have they violated the CFAA?
It seems like the speaker in the video is on stimulants
That's not my experience with owning a phone...
And if you read yet further:

> Most scientists will object to this application of their work, but the illiberal challenges to scientific scholarship, perhaps now more than ever, seem destined to come not just from creationists and neo-skinheads, but from self-styled hyper-rationalists, too — from people who adhere to what they consider a “science-first” worldview, who often ignore history and social context, and who are predisposed to drawing troubling, and sometimes patently racist conclusions based on otherwise dispassionate science.

> In other words, they’ll come from people who sound a lot like Razib Khan.

My critique is that there is only one demographic in the US that attacks with the term "MSM" and then leads right into referencing this guy. "Mainstream media" used like this is a fingers-in-your-ears right wing in-group catch phrase and has been for probably more than two decades. And when a person using that secret handshake references something like this, it leads the observant to wonder.

The question isn't whether a scientist should drop work if racists like it, but rather whether a scientist would work diligently to associate with racist publications without aligning motive.
I get what you're saying, but your point is also self-defeating for your argument. I would posit that someone who goes out of their way to install Puffin for its benefits would also be aware enough of the ability to change search providers. I have difficulty envisioning the user interested enough to research alternative browsers that are not Safari/Chrome/Firefox who also is not aware of changing default search settings.
> In any case, a "not-java" language that can talk java is freakin amazing

I don't understand why this is such a big draw for people when literally any jvm language[1] has this feature. Languages like jython, ABCL, clojure, jruby, groovy, and perl6. Kotlin is certainly not unique in this regard.

1: https://en.wikipedia.org/wiki/List_of_JVM_languages
If you're doing React, you should look at a tech shop. It's a smaller one, but we've done work with http://g2i.co/
People would just have an alternative choice.

All you say can be said for any other app on the app store.
Why HubSpot’s Building a Centralized Platform
AWS Lambda – fewer monolithic functions vs. many single-purposed functions
I wish so much that linker arrays were part of the c and c++ standards! They are much more flexible than pre-main static constructors, and could be used to implement them at the user level in a less magical way!
Good thing they didn't say "impossible."
I saw Lou Reed do this in 2003. It might have even been about cameras at that point and the issue was the flash, not audience experience. But he was not. Having. It. Stopped playing both times and really was about to walk off. It seemed a little too much at the time. But now I get it, and I feel a little bad that the current generation, at least the phone addicted ones, are never going to experience the level of emotion you get with fuller engagement. This is even more acutely real in the theater and it will probably wither in the current... attention economy.
Also a good feeling during the read and after. Always nice to read serious hobbyist work with a lot of science. I've read additionally an article mentioned in the comments regarding amateur spy satellites detection. Didn't happen until now that I came across this topic and was kind of fascinated about how it works and the people behind it.
My only regret is that when we started our current project, I did not commit 100% to gRPC, so now we have a mix of services. If I had of gone all in, it would be easier to integrate upcoming things like conduit [1], and I would not have to generate Swagger files but could just ship the proto files.

[1] https://conduit.io/
Essentially because it isn't a bug in the usual sense. It's a vulnerability that is present even though the processors are doing their primary job correctly.
The relation between DNA and programming is extraordinarily messy and complex as far as I know, and I am far from knowing lots.

Certainly, ordinary programming as it exists now can't be applied with ordinary tech to cells.

But if cell do all sort of computer-like-tasks, if they can be recursive or whatnot, what is a richer paradigm than programming that expresses their qualities. From the video, simply hear vagueness like "evolution" and "curing" and etc.

It like cells and biological objects are on the other side of what Paul Allen calls the "complexity brake" but I don't see how that implies they're not like computers, just that they are computers that we will have to develop a variety of distinct tools to program.
LINE 2018 Activator and Crack Free Download
Not claiming they are competent. However it may be the case that the real screenshot would be exactly as shown, but also includes few extra lines of "buttons" that have captions not meant for public audience. This ban may be coming from federal level. Or reveal they are using IE5 or something. Just a far-fetched theory.

However, I'd still stand with Peter here [1] and think they just could not get the "screenshot tool" installed to the machine.

[1] https://en.m.wikipedia.org/wiki/Peter_principle
No need for malice when ignorance (or bad design in this case) will suffice.
I find a mix of working on premise and remote the best - on premise keeps you in touch with the company and your colleagues, remote is the best to get stuff done.

They introduced it a while back at my workplace, and tbh, I would not take a job these days where remote work isn't atleast partially on the table.

Saves me between 1 and 3 hours of commute (depending ont he location).

If you'd expect me to come to the office every day... either it has to be somewhere where commuting to is really easy, or pays significantly more. And I'm not even sure I'm willing to compromise on the remote work part.
Bike helmets and safety: a case study in difficult epidemiology
The death threats are probably more than a little traumatic though.
No, because it’s not against the law to scan servers on the internet. If you don’t want people to scan listening services, don’t let those services listen publicly on the internet. If you were to log into the server, though, that would violate the CFAA.
Yeah, I'm definitely like that at times too. Give 4 solid hours, take long break, then gun it when I'm at my most focused, which is often after 6pm.
Hotspot Shield 7.5.0 Premium Crack and Keygen Free Download
The true value of a PhD
Brasil VPN
No. I get more work done at the office, and since I am fortunate to work for a company that doesn't prescribe to an open office plan, it's actually fun being at work sometimes. It's no fun working at home when there's so many cats and dogs that need hugs, Netflix shows to watch, and everything else
Right, but server-sent events work only one way: from server to client. gRPC allows you to create bi-directional streams, where both the client and server are pumping data.

Chunked encoding allows to do something like what gRPC does, but it's my understanding (I might be wrong) that the data needs to be base64 encoded, whereas HTTP/2 supports raw byte arrays to be sent.
Big shout-out to Keith Fiske for developing and maintaining pg_partman. It makes Postgres 10's native partitioning really easy to use.
He could just be like that. He's got a bit of a carnival barker quality to him. Not that carnies don't love their cross tops.
> And what is there to say, really? "I clicked the wrong thing."

There are many things say. That's probably why they want to talk to him. Was it a random mistake? Did anything else contribute? Was he on Hacker News writing a comment at the time? Was he tired, sick, under the influence? There were other people including a supervisor, did the supervisor approve, did they double check later? Did they distract him somehow?

They might conclude it was the stupid user interface but they'll still do the legwork of investigating and getting all the details. One thing they definitely don't want to do is answer the question of "Did you try to talk to the individual?" or "Nah, we saw online how everyone was jumping on redesigning the UI and assumed it had to be that so never talked to him".

> You can always make a careful statement later on advice of counsel. Nothing is lost by remaining quiet at first.

That's what he did it seems: released a written statement then STFU. Hopefully he got a lawyer cause it seems he'll need it.

> Nothing is lost by remaining quiet at first.

True. Ideally it is the best strategy. But here it is drawing more attention to the case. It's in the news again. And he is also getting death threats.
Penetration Testing TechyTalk.Online
Australian of the Year 2018 - Quantum Physicist Michelle Yvonne Simmons
does anyone know what is their revenue model? i found this in wikipedia:
"The company makes money from interest earned on customers' cash balances and margin lending."

is that possible in cyrpto currency?
Maybe cut Lead Developer James Gordon some slack. He may not have wanted this attention, which came from Ben Welsh. Welsh describes himself as a "data journalist" and a "hack computer programmer". Perhaps he just thought this improvement made by the developer was really cool, and wanted to blog about it, not understanding the snark's nest he was stepping into.
In a duopoly condition, telling companies who want to sell products that can only be sold in the markets of two companies, putting "don't take disputes with us to the press" is rather insidious. It might not help. But Apple already has so much leverage against app developers. Yes, individual app rejections are likely not due to Apple being evil. But Apple doesn't have to be evil, just capricious and unresponsive, to turn their dominant market position into bullying smaller developer shops.
Dünyanın en iyi hakemi ezanı duyunca maçı durdurdu – Actualtr
https://www.youtube.com/watch?v=I2l8xkjTUh4
Same thing here :-(
Don't try to tell me I don't understand obvious shit.

If you're shoplifting from someone who's experiencing a shoplifting epidemic, you're doing more damage than you would by shoplifting from someone who wouldn't even notice. The severity of the crime is context-dependent. Not all shoplifting is equally bad. That's what I'm saying.

Feel free to engage in some black-and-white thinking and disagree. But don't tell me I don't "get how shoplifting works."
Security Now 645: The Speculation Meltdown
There was a guy who scripted himself a huge number of the facebook giveaway airdrop. I have vague recollections of his hoard being invalidated via a hard fork or some other method!
I can see why they're concerned that they can't update the app, but they're playing in a walled garden and they knew that from the get-go.

I think this is a pretty weak complaint and it lacks any real substance.
Redshift doesn’t have column level access permissions but it does have schema/table level access permissions. That is more than sufficient to prevent this kind of issue.
Manage in what way? Like Zeplin?
Show HN: Jq alternative built on top of JavaScript anonymous functions – fx
https://youtu.be/I2l8xkjTUh4
I know that current caselaw holds that it's not a violation of the CFAA to portscan in the general case[1]. I'm not asking in the general case; I'm asking specifically in the case where the scans are regular and ongoing, and the scanning party has been explicitly given notice that they are unauthorized.

[1]: https://nmap.org/book/legal-issues.html
I've always wanted to do this but couldn't justify the time as my business partner didn't value user privacy as much.

It would have made GDPR compliance waaaay easier.

Could you write it up as a blog post? I would love to know more.
It's not exclusively a benefit, but it does have some powerful upsides:

* Less commute time and cost (I save 8-10 hours a week, plus a few hundred a month in parking, fuel, and insurance)

* More freedom and flexibility (not every gig offers this, but many do)

* A bunch of focus time

* Communications (oddly) are greatly normalized as everyone has the same handicap. I find a fully remote team easier to manage than a mixed one, as no one has an advantage over another (as happens when part of a team shares the same office).

On the other hand, you're maintaining your office space and much of your setup (internet, wifi, heating, desk, chairs). Again, some jobs offer some compensation here, but some of it will be on the employee to maintain.

You're also more isolated, and team culture takes a bit more work to create and maintain.

Personally, I value the option to work remote as a net gain. I love my home office, I save time and money on the commute, and I have more time to focus than in the office. I understand the company benefits too, as they pay less rent, own fewer fixtures, and get more of my time. But I still see it as a net win for me.
This reminds me of how constantly rushing to fill the client tickets and accumulating technical debt eats into a development team's ability to ever address the core problems in their software.
>the desire to preserve the inferior status of blacks has motivated policies against all members of the low-wage sector.

So your belief is, the dominant economic-political movement in America regards "preserving the inferior status of blacks" as an end goal in and of itself? Or is this an instrumental goal that somehow serves some other purpose?
I know it is easy to assume that people are tricked. Perhaps the obvious alternative is that they are evil. If you want to understand these people, consider that they instead have different values which do not derive from a fight against other poor people.

People will vote against government benefits for many reasons, even if at first glance it seems to hurt them.

One reason is self-respect. Many of these voters feel terrible if they are getting government help. They might feel a need to take it if offered, but also feel that it isn't right. It can feel like stealing and it can feel like being treated as a child. Some people value independence and do not want to be tempted with dependence.

Another reason is a concern for the economy. If a bit of welfare is good, then lots of welfare must be extra-good... but then nobody works (except under treat of arrest) and you have an economy like that of Venezuela. So if that is what we'd get, voting to go the other way is the safer choice.

Some people feel a religious opposition to taxing the wealthy:
https://en.wikipedia.org/wiki/Prosperity_theology
AFAIR JRuby creates a Java class for each Ruby method. Classes were part of the Permanent Generation, so sometimes this generation was too small escpecially when using Rails. It was enough to just increase the size of this generation with -XX:MaxPermSize (-Xmx doesn't increase the permanent generation's size).

The Permanent Generation was named that way since objects in there were never collected. For most applications this isn't really a problem. Running JRuby+Rails just allocated a lot of classes in this generation, so the default size was too small. But still, the permanent generation was quite small compared to the heap size.

I wouldn't really call the GC bad because of this, IMHO they were already quite good back then. And in Java 8 the permanent generation was replaced with the Metaspace, objects in there can be free'd and the Metaspace can be expanded at runtime so it's less likely to get these OOM errors for the permanent generation.
Yes, but you can only choose to own a car (the logistics of this are hazy, but you still have the option of not buying one). You didn't choose to be an organism that gets sick.
Bold would be if he would donate his entire net worth if Tesla fails to meet goals. This is not bold because he would still be a billionaire if Tesla failed.
Is it a "structural" issue? Or is it just the fact that, statistically, poor people are really unlikely to pay back loans, so loaning to them profitably means charging really high interest? Or is that a "structural" issue?
A Government of One
Concurrent Programming Errors of Therac-25
No doubt he's under a lot of stress, be he shouldn't be blamed for a mistake that he was set up to make by a poorly designed system.

Choosing the wrong menu item should be expected and there should be safeguards to prevent an errant alert. If I click the "Close" instead of "Save" menu item in my editor, it asks me to confirm that I really want to close without saving. A civil warning system should have at least the same safeguards.
Yes, but there is no need to spawn them all the time.

A parser service daemon, or a pool of them can be used instead, getting requests from the main application process.
I haven't seen a major project written in C that _didn't_ use some magical macro-foo.

PostgreSQL source code for example, has a foreach() macro that loops thru a linked list.
COPY of course is single threaded. If you can split your input data and run multiple copy operations you can get similar increases although I would never suggest hundreds of threads. Depending on your IO system something like twice as many threads as CPU threads is probably going to work better.

On a one for one basis COPY IN will be faster than inserts:

- COPY uses a special optimization in the access method: instead of running the full insert logic (find a target page, lock it, insert, unlock page) per row, it batches all the rows that will fit on the target page.

- COPY overall has shorter code paths than regular inserts.
It's not the first some time some one has thought this. Probably, one of earlier studies regarding that point:
http://www.drianwalker.com/overtaking/overtakingprobrief.pdf

I think it would be interesting if conducted with multiple riders, and different areas. Combine this with the fact there are studies showing increase car and bicycle crashes with helmet wearers. It definitely plausible.

There is also an other study I remember seeing that noticed helmet wearers took more risks. So there could be more variables at play.

http://journals.sagepub.com/doi/10.1177/0956797615620784
How effective are most of the things mayors do?

Trying to steer the ship in a less shitty direction might be the best use of their time
I have the schneider unity PLC programming software and was able to connect to about 12 out of 16 of the PLCs I tried that were shown on censys. of the ones I could connect to, two had 'security' enabled so that I couldn't see the program, but still could have stopped it from running or downloaded an entirely new program. 6 PLCs didn't have the program stored in them, so same situation. 4 PLCs I was able to download the program. One was a hydro electric power plant, one was some kind of food factory that used barley, and two were some kind of pumping stations, one of which had a bunch of logic for controlling pH and chlorine. The last modified date for all the programs was in the last 3 years.

None of the programs had any contact information for the programmer or the company that owned the infrastructure.

It is hard to believe people are still putting their plants straight on the internet. Anyone can control any of the outputs which then control real equipment like 200 kV circuit breakers and disconnects, turbines, valves, conveyors, mixers, pumps, etc. If interlocks are implemented in the software as opposed to electrically or mechanically then they can be bypassed which could easily result in equipment damage, injury to personnel, or death.
Wiki reference has a longer explanation: http://www.ccnr.org/fatal_dose.html
In China, consumers are becoming more anxious about data privacy
That's the thing I miss most about Microsoft's dominance though : no walled garden.

Now apple has a heavy handed walled garden, and Google has a heavy-handed one (chrome/chromeos) and a "light" one, in android. All ... well, suck.
True. But I think Kotlin strikes a nice balance of seamless interoperability, convenience, and apparently few compromises. The java interop feels natural - far more natural than it does in most of those other languages you mention (I don't have experience with them all though) - but the language is more concise and convenient than java, even though its very similar. It also has static typing.

Some of the languages you mention come with serious compromises when used on the JVM, like Jython and Jruby - decent portions of their ecosystems are implemented in C - and hence won't work on the JVM.
I did see that in the abstract, but then the only follow-up in the actual body of the paper was:

Meaning your original comment was disingenuous. Good job.
> I could also write "The Founder's Guide to Selling Your Company When You Have Few Options" based on my experiences.

I hope you do this someday. It would be highly valuable to many founders.
Windows XP? Even Deus Ex, which is compatible with Windows 95, runs on Windows 10. Note that such compatibility is also dependend on the game developer. If the used undocumented methods or undefined behavior it may not run on more modern OS. Especially games like The Sims have this issue - and ironically, some relative newer AAA games.
Ah interesting suggestion, will consider it, thanks dsl.
Short faces and rounded braincases would affect the surface-to-volume ratio. This would help with cold-weather survival.