skysight-inc/HackerNews huggingface dataset:
The same way you defend them against all other sorts of attacks: you make sure the attackers don't get close to the target. Ie: good law enforcement and intelligence work. For a drone to attack and kill in seconds, you need to basically launch it from the parking lot. If you are bringing weaponry to the parking lot, there are plenty of other (much simpler and cheaper) non-drone-attacks available to you, yet these attacks are really quite rare.
haha. I wish :)
Simply classifying on UDP port 443 would cover most usecases I'd guess?
And you dont have college debt and your kids will be able to study at college without debt.
It's very simple: with HTTP, ISPs can see your traffic and direct target ads to you. If everything is under HTTPS, they will need to resort to Google for ads since almost everyone uses Google Search Engine and it's products.
You're in a LAN. You can not trust any device there anyway, and stuff like DHCP is unencrypted, and anycast anyway.

Trying to add security in such an environment is... useless.
It's native, super fast, clean and beautifier. DBBeaver is esclipse + plugins.
No, and it makes perfect sense because
1. Container size is a minor issue, docker images are layered so you only fetch the diff of what's on top anyway
2. Standardization simplifies knowledge sharing, i.e. someone else can help you
Some people like bureaucracy, when you organize an event with more than 10 people, that can help!

Even if you're just 5, that would be n(n-1) = 5*4 = 20 messages to send!
As someone that got introduced to ML via Caml Light, I really don't have any issue with OCaml's syntax, which seems to be the only reason (no pun intended) for ReasonML's existence.
Chrome will talk QUIC to anyone else who talks QUIC
Now imagine your state funded public highways were vetted by some private company, let's call them "Elsewhere, Inc", who wrote a 3-line review of each highway and then charged taxpaying members of the public $30-$50 per journey to use those highways. And then Elsewhere, Inc managed to convince most civil engineering companies to gauge employees' performance solely by whether or not Elsewhere, Inc has reviewed the roads they built.
I think the GP wanted to know how a firewall can tell quic traffic from other UDP traffic.
Hmm, it's not always 'up to London'. I've lived in a lot of different places and the ups downs and across's are almost universally linked to geography.

Anywhere south of the M4 tends to say 'up to London'.

Anywhere within about 1 hour drive tends to use the geographic position interchangeably with 'into London', with increasing use of the latter the closer you get to the city. This is also affected by commuter popularity and transport links. Cambridge seems to use 'into' more than its location would suggest for instance.

Those in the West like Bristol or Wales tend to use 'across'.

Birmingham is kind of the middle ground but from about Sheffield up its almost universally 'down' in my experience.

Having lived in Scotland it mostly just 'to', nothing about up down or across. You really feel the distance up there.
I don't even try to read most of it. Just let it flow past.

On a work-day morning while I'm drinking my coffee and waiting for my brain to boot-up, I go through the current pain page and open the comment pages for any interesting posts/articles. I read the comments to see what the community here thinks, and then maybe flip to the article itself. The decision to do this is mostly based on how the comments look, so I'm using them to get a precis, but sometimes I go to the article anyway. Then I dip-in several times during the day, treating the main page like a twitter-style firehose. Just snack on a couple of articles and reactions, then back to work.

I sometimes read HN at the weekend - when in my experience it has a different vibe, with more thoughtful, longer content. Then I find myself spending more time on the articles and less on the comments.

I mostly just try to let what I read filter into my kind of ambient awareness of HN-type subjects, rather than remembering it. I occasionally flag something a favourite, and even less occasionally bookmark something, but I very rarely go back to old content as there just isn't time.
I think he meant wearing a w.beater under the shirt.
This does not help against attacks that are already being done[1]: Attach grenade to drive, fly over target, release grenade.

[1] https://www.popularmechanics.com/military/weapons/news/a2751...
take start-up time for example. I'm not sure about DBeaver but Navicat takes 6 seconds, TablePlus takes 0.5 seconds
> You can create basic good looking iOS or web or android app without all those years and be extremely useful.

We obviously have differing definitions of the word 'useful'.
Node.js PKI management library inspired by EasyRSA
Data-First Architecture
Few if any of the 300 applicants were overqualified for that garbage opportunity. Can you describe on how they were overqualified? List a bunch of certs and techs? Good programmers aren't fighting over scraps for underpaid government positions working with JBOSS, they get snapped up immediately when they hit the market. Five years to saturation? Yea right.

Readers who just deleted emacs in despair should keep in mind that parent is hiring for Danish government position, not exactly the hotbed of software development or skills demand.
Yeah, mainly because in most OOP languages, classes/interfaces are just a kind of glorified modules anyway.
I feel the headline is too attention-seeking.

It is natural that if one side starts to develop a new technology and employs it successfully, that the other parties will follow as well. This changes the landscape, sure. But it's not threatening. That's the normal process of development.

Every army is better of if they can use machines to do their attacks for them. At least between both armies this should also decrease the overall casualties I hope. I'm not so naive to assume that this would decrease civilian casualties, though.
There is this approach of using airplanes taking pictures every second. When a crime like drive by shooting and putting a bomb in a bin is commited, this technology allows the investigators to rewind time and fast forward to discover where the car/person come from/went and eventually catch it. It was used to figure out location of drug cartel head quarters.

This wouldn't be efficient against a swarm of drone attack though, as they can be operated remotely from miles away.
C#

It has all you mentioned:

- C++ (Strong OOP + Static typing)

- SQL (LINQ)

- Java (Well, no comment here)

- JS (dynamic, async/await)
Why not get a wildcard certifiate for you domain and then put the local services in internal-only subdomains ?
It depends on what you are building. If you are .NET developer you pretty much don't need anything else but Visual Studio.

If you need some unix tools you should just go for Linux Subsystem for Windows.
Simple and editable Doughnut Chart for react components
I did that and to be honest I am not quite sure why.

I think it's due to lack of reading the question properly and impatience.

But it also might be due to how programmers sometimes think/work. Often, when I am trying to solve a problem I like writing something (anything) down in broad strokes first so that I can then go back in and 'fix' each smaller part of the larger problem.
There are really good web frameworks, both frontend and backend, out there. So, I would second the opinion that the best framework is the one you feel most productive with.

However, I'd like to highlight ASP.net Core + Angular + Visual Studio here. Microsoft appeasement towards Open Source and cross-platform made this a solid choice. As web apps grow steadily in complexity, a modern strongly typed language like C# (and TypeScript) might be helpful for architectural patterns. And, last but not least, the tooling around the Visual Studio product family is maybe best in class.

I am saying all this as someone who has not touched any Microsoft product for years.
Yea, I was indeed thinking that could be the best idea, yet I read an article (somebody commented in this thread) and made me re-think this idea. But that you for the comment.
> A Faraday cage around the electronics would go a long way towards eliminating the effects of an EMP.

Perhaps if you made the Faraday cage out of superconducting material. But that would currently require huge cooling equipment, so that's not really an option.
Figma Raises $25MM Series B
Clojure. Almost infinitely extensible.
Ask HN: Two co-founders meet in a bar.. what next? Seriously
Hi Guys

So I posted a question on a more local business forum about how to go about partnering with a stranger who approached me for a startup.

I have been saying that we go 50/50. I do the engineer and he does the business. I was asking about how to practically go about forming a relationship that protects us both etc but I got completely flamed about being naive and getting abused by the "biz guy with the idea". Their argument was that I would put in all the work, my time was valuable and I should get paid for it thus not build his app for free.

I'm having a hard time agreeing with that to be honest and I just ditched the conversation. Am I being totally naive?

I think the non engineer has plenty to bring to the table with regards business development, sales, domain knowledge etc. I personally feel we are perfectly paired and I would much rather partner up with a stranger than friend/family member.

The way I see it is that we will both go out and take a punt on the concept and see what happens. I am really stressing a "LEAN" approach with short feedback loops so I don't get burned building out a product that nobody wants.

What is the take of engineers on here who get approached to co-found with engineers? I am sure that insisting on getting market rate for your efforts is a non runner if you are ending up with 50% equity in the company holding the revenue/profits/IP.
> I feel like there must at least be anecdotal stories of people reading, exploring and making connections they otherwise would not have been able to because free > $35/paper.

And I wonder how many of those people don't know about DeepDyve.com? It's essentially Spotify for journals. The $49/month ($30/month if you buy a yearly subscription) plan gives unlimited online access to most papers from a huge list of journals [1] from a huge list of publishers [2]. (There are also group plans available, but they don't list the prices for those on their website, as far as I can see).

You can also buy 5 packs of rental tokens for $20. A rental token gives you access to an article for 30 days. People on the free plan get 5-minute full text previews, so you can at least skim an article to get a better idea if you want to consume a token to rent it.

Open access is much nicer, of course, but most cases I've seen where someone says that the cost of non-open access, such as the $35/paper so many publishers charge if you buy directly through them, was a serious issue to their research would have been able to get those papers through DeepDyve at a cost well within their budget, but for some reason very few people in the wild seem to have heard of it even though it has been around for quite a while.

[1] https://www.deepdyve.com/browse/journals?page=all

[2] https://www.deepdyve.com/browse/publishers
Facebooks crawls every page recorded by its tracking pixel
So yesterday we figured out that facebooks Facebot crawler will crawl _every_ url that was recorded by their tracking pixel.

I find this highly concerning since:

1. they are crawling potentially sensitive information granted by links with tokens

2. they are triggering potentially harmful and/or confusing actions in your website by repeating links

3. they are repeating requests in a broken way by not encoding url-parameters correctly, for instance url-encoded %2B ends up just as a "+" thus becoming a whitespace (same goes for slashes etc.)

4. I could not find a warning or note on their tracking-pixel documentation that pages tracked would be crawled later
There are also other cost to consider:

- How much time (=cost) do you need to start running (enterprise)
- Time you need to access the cloud, starting up and closing vms, and getting shared GPU resources.
- The cost of lock-in. Ecosystems are great; but sometimes you need the basics working.

Some providers are much better than others at this.

Mandatory Joel on Software mention:
https://www.joelonsoftware.com/2000/06/03/strategy-letter-ii...
I'm a pretty much happy user of Feedly
It's been 50 years since the movie, “Planet of the Apes” was shown
Let's talk about terminology now. First is households. A household in the US is a bit more than 2.5 people. You can go ahead and bump up your costs to $41k a year on transport alone. The next is wealth. Let's hit on two points:

- Wealth is not renewable, which is why income is vastly more important. If you have $100 of wealth and you only spend 10% of it a year. You're completely broke a decade. 'Only' spending 5% of your total wealth on transport per year is a path to very rapid ruin.

- There's nowhere near the amount of 'real' wealth as there is 'paper' wealth, which is the number you're indirectly citing. Most wealth is tied up in the form of various investments, stocks, and so on. When you liquidate these assets, it results in a decline in their value. If you were to liquidate large amounts of market assets into spendable money, simultaneously, you would find the total wealth in the US to be a very small fraction of the numbers stated.
Realistically, Python. Not because it's the best, but because it's the only language that I feel confident will have libraries/bindings for everything I need. Or as I've heard someone else put it, python is the second best choice in any situation.
I also submitted it to Product Hunt to get some feedback: https://www.producthunt.com/posts/secured-fyi-alpha
I stutter, it ranges from almost unnoticeable to horrible, depending on the situation.

I think it does not limit my performance or capabilities, definitely not as much as I was fearing when growing up. There are times when I can't explain clearly what I need, but it's not a big problem, there are other ways. I have no problem with meetings in person, but despite learning to overcome this my entire life, I still hate conference calls.

The general rule for dealing with it is "not giving a damn". It helps you mentally and improves the stuttering at the same time. Programming is a technical work, you don't need to say much and when you do, it's typically in between close team, so that helps. And if you have something important to say, people will take the time to understand you.

The only problem I have experienced are interviews. I make a very bad first impression and usually the rest of the interview is based on that.
Yeah, that seems to work too.
If you _only_ care about the number of users, then I see a point. However, at least for non-commercial programs, why care at all about the number of users?

The scenario you are drawing is not a proper comparison. There is no reason why a native toolkit couldn't support rendering the program before it's fully loaded, so I see no reason a native program would need more data transfer upfront than a JavaScript one. Though I think too that being prompted to download the program, then install it and find the way to run it can be cumbersome, but the solution to this is to not do it this way. Why not integrate with the native way to obtain applications and make it transparent and convenient for the user?

After all, I think there might be fundamentally different goals when developing a software, and that explains the difference. If one has accepted advertisement-based financing of projects, then them and I would probably disagree in many ways. I think users devices must only and exclusively work for the user.
I've always had the feeling that Angular is the better choice for .Net, since it's TypeScript by default and far more opinionated than React (as well as .net core mvc is an opinionated framework).

How is React superior to Angular in your use cases?
thanks for the succinct explanation, I also found these two bits:

https://ac.els-cdn.com/S1877050915016853/1-s2.0-S18770509150...

https://www.callstats.io/2017/02/03/web-protocols-http2-quic...
Escaping Data from Faraday-Caged, Air-Gapped Computers via Magnetic Fields
Why do you think you need to finish all of it? There is a lot of content out there that you haven't seen, and I presume you don't worry about that. The fact that some of it has been posted to HN shouldn't mean that not seeing it suddenly becomes a problem.
Effective Use of Classes in .NET
Looking inside a Linux powered slot machine
Been using it for months and love it! Great work :thumb-up:
Which isn't really "an immediate problem" right now for anyone. Also, the "solution" isn't particularly good.
> The first byte of the clear data was a flags field which, he said, was promptly ossified by a middlebox vendor, leading to packets being dropped when a new flag was set.

That was a classic example of why changing network protocols is hard and what needs to be done to improve the situation. Middleboxes are the control points for the Internet as we know it now. The only defense against ossification of network protocols by middleboxes, he said at the conclusion of the talk, is encryption.

So apparently we're now at a point where any middlebox trying to make any use of a protocol higher than IP counts as "ossification"? No matter if the middlebox is well-behaved or not.

And the only solution naturally is to make any stack parts higher than IP completely unusable by middleboxes by encrypting them. I guess this is make sense if you already fully control both clients and servers and get annoyed by middleboxes restricting your freedom to change the protocol on a whim.

However, this seems like a major change in the vision of the internet to me. So has the internet community at large now agreed that we want to get rid of middleboxes completely? What about middleboxes I want to employ myself, e.g. to watch my own traffic?
> It's rare for people to make enormous improvements or experience enormous depredations in performance one experience to the next.

Not a golfer, I see.
Here's a lidar map of the cache location https://houseprices.io/lab/lidar/map?ref=TM1723675711 - right on the edge of coverage unfortunately. Lots of evidence of medieval field systems in the surrounding area. I bet there's lots more to be found around there, although I'm sure the area has seen plenty of detectorist activity since this find.
Wait until the IETF-version is finished and build on that? (it's a bit confusing it is named the same, since it is not just a version of Google's)
The real solution to this would be something like TLS-SRP where you can authenticate both sides of a TLS session with a zero knowledge password proof (devices could ship with a piece of paper containing the generated password, no need for central servers, remote connections to the mothership, gateways, or certificates, or exposing stuff to the internet, or even any internet connectivity at all).

In simple terms it allows you to setup a TLS session by both sides proving they know the secret password, without either side exposing it, thus MITM is unable to capture it, it is an alternative to the cert model that works very well for network local devices.

But of course Chrome and firefox both have zero interest in supporting this use case despite TLS-SRP kicking around for ages now, they'd much rather have you connect to your own devices via a mediated cloud gateway server, for your own safety of course.
The quality of the comments might make me read the article, but that is 1 in 10. I admire the fast groups of subjectmatterexperts who will quickly prais or debunk the content of the articles and post links that are even more interesting.

Further, I use https://theoldreader.com to subscribe to the RSS feed, makes all my "monitoring" a lot easier.
> I define insecure as a machine/user getting compromised

So a bank using plaintext HTTP doesn't qualify an insecure?
PeerJ is different, though, in that you pay through lifetime memberships rather than a new fee every time you want to publish an article. Their fees are also substantially lower than those of the traditional publishers.
Obligatory reminder that money != coinage != barter != banking
You SHOULD use both of them at the same time. HTTP/2 intertwines your data by using different streams, except all of that is on top of TCP and one stream blocking (because a packet was dropped for example) will block the other streams. This is called head-of-line blocking and you basically can't do much to fix this in TCP unless you create multiple TCP connections for your different resources. But this has a bunch of other issues, you will need to figure out congestion control for each separate TCP connection even if they're connecting to the same service :/

QUIC also has multiple streams, but it doesn't have this head of line problem and other streams will continue to work fine if one stream blocks. So QUIC was made for HTTP/2, where your HTTP/2 streams are basically replaced by QUIC streams which are not affected by loss of packets at all.

If you want to see how loss of packets affect an HTTP/2 connection over TCP, it's pretty bad. In general if you're on a lossy connection you should just use HTTP/1. Check this awesome talk: https://www.youtube.com/watch?v=0yzJAKknE_k
Well, it does matter somewhat: authors still publish in journals at the traditional publishers, and universities still subscribe to it, wasting research funds in developed countries and making the barriers to participation higher for researchers in emerging economies.
Ask HN: What a great ecommerce PWA should do?
We are building a product to help to change the way ecommerce experience is built and our next step is to make Front-Commerce useful for building PWA. What do you think are the most important features ? Thank you
Modularise your iOS Apps
Please do not use "autistic" as a slur. That is unkind and uncalled for. Autism is a real disease.

The change means that the person who submitted the post was in error. HN guidelines call for using the original title, with a few exceptions.

The page's title when the posting was made was "Julia v0.7.0 Release Notes", which you can confirm from this snapshot of 4 days ago: https://github.com/JuliaLang/julia/blob/eb94b8c3d8e8ee2294ed... .

This suggests that you did not even click on the link to learn more about the project before complaining about the lack of context.

The practice I try to do in situations like this is not to complain about the problem, but to figure out the solution to my complaint, and post that. For example, you could have written: "The submitter used the wrong title. It should be 'Julia v0.7.0 Release Notes'. Julia is a programming language for technical computing. More at http://julialang.org/"

That would be helping. Complaining about such a basic topic is not helping.
My former ex-gf doing some anemia cellular research for her phd was saying exactly the same thing some 10 years ago.

I understand for us laymans this is obvious and freakin' scary to think about. But in reality its not.

One example I can think of - malaria & quinine. It used to be #1 go-to medication for it for a very long time, then malaria grew resistance to it, and we got malarone and whatnot so we cut usage of it. Now it's getting more effective against it again.
The Open Access movement (making articles openly available) is a smaller part of the larger Open Science movement, which encompasses among others making code and data open, registering research plans in advance, publishing null results, etc.