skysight-inc/HackerNews huggingface dataset:
I think he understood gaming pretty well. The Apple II and the Mac were real gaming powerhouses back in the day. Most of it was 2D; side scrollers but I remember going into the computer stores and seeing all sorts of games for Apple.

After he left, and through a decade of weak management they were flopping all over the place. Windows 95 came out, their competing OS, Copeland, was nowhere to be seen. And when they transitioned to PowerPC a lot of publishers didn't want to expend the effort to port their existing catalog.

When he did comeback they were just a few months away from filing bankruptcy protection. Decisions were made and whole lines of products were cut. And they focused on the things that were working: education, creative, and science. Business, gaming, and productivity were on life support.

But, since those early years they never learned to entice game publishers. Microsoft went out of their way with DirectX, GDC, etc. Apple was, "here are our great game dev tools; use them." And just assumed developers would flock to the platform through osmosis.

Even now, their betting their future on the iOS. The game developers are there, the tools are there, and it's a very healthy ecosystem. Yet, I get the impression they want the iPad, the Pro namely, to be serious productivity tool. And if they have toss game dev to make it come to fruition I have no doubt that's what they would do.
I get roughly the same 45-48ms from the EU for both.
Yes. How come you aren't ashamed of yourselves ? ;)
Sorry man :(

Things are a bit quicker in the US:

64 bytes from 1.1.1.1: icmp_seq=1 ttl=60 time=0.421 ms

64 bytes from 8.8.8.8: icmp_seq=1 ttl=58 time=0.645 ms
"Avoid other pain relievers such as ibuprofen (Advil, Motrin IB, others) and aspirin, as these medications may increase the risk of bleeding."

Wow. Did I misremember and he said Tylenol (acetaminophen)? This is bothering me now, I don't like to carry bad bits of wisdom around!
Except Bitcoin is anything but low transaction fee
I love people on this site. It is literally the only site where you respond to a comment and people start listing fallacies. My answer stands. Numerous people in other comments have explained how Tesla carefully crafted the statement so that gullible people would think it said something different and this guy fell for it. Better start listing some more fallacies in this response! Here is a list if you need help https://en.wikipedia.org/wiki/List_of_fallacies
Ask HN: How do I delete evercookies on Safari?
I have some really annoying cookies/databases that I can’t get rid of in Safari 11.0.3 on Mac OS 10.13.3. Everytime I delete all website data, some entries keep coming back.

I have even deleted the ~/Library/Safari/Databases and ~/Library/Safari/LocalStorage folders manually. I can’t her rid of these zombies. Any ideas?
Google is one of the first ones using DNS over HTTPS.

BTW if you want to use DNS over HTTPS on Linux/Mac I strongly recommend dnscrypt proxy V2 (golang rewrite) https://github.com/jedisct1/dnscrypt-proxy and put e.g. cloudflare in their config toml file to make use of it.
~3ms average for both from Western Europe
Yup, the Subject Alternative Name (often misunderstood as an alias, but "Alternative" here is meant in the sense of this is the Internet's _Alternative_ way to name things versus the X.500 series directory hierarchy that the X.509 certificates are originally intended for) can be one of several distinct types, the two relevant for servers are dnsName and ipAddress. dnsName can be any er, name, in the DNS hierarchy, or, as a special case, a "wildcard" with asterisks, whereas ipAddress can be any type of IP address, currently either IPv4 or IPv6.

The Baseline Requirements agreed between Web Browser vendors and root Certificate Authorities dictate how the CA can figure out if an applicant is allowed a certificate for a particular name, for dnsNames this is the Ten Blessed Methods, for ipAddress the rules are a bit... eh, rusty, but the idea is you can't get one for that dynamic IP you have from your cable provider for 24 hours, but somebody who really controls the IP address can get one. They're uncommon, but not rare, maybe a dozen a day are issued?

Your web browser requires that the name in the URL exactly matches the name in the certificate. So if you visit https://some-dns-server.example/ the certificate needs to be for some-dns-server.example (or *.example) and a certificate for 1.1.1.1 doesn't work, even if some-dns-server.example has IP address 1.1.1.1 - so this cert is only useful because they want people actually typing https://1.1.1.1/ into browsers...

[edited, I have "Servers" on the brain, it's _Subject_ Alternative Name, you can use them to name email recipients, and lots of things that aren't servers]
Just him. Starhub Fiber:

ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1): 56 data bytes
64 bytes from 1.1.1.1: icmp_seq=0 ttl=59 time=3.111 ms
64 bytes from 1.1.1.1: icmp_seq=1 ttl=59 time=3.172 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=59 time=3.301 ms
64 bytes from 1.1.1.1: icmp_seq=3 ttl=59 time=3.018 ms
64 bytes from 1.1.1.1: icmp_seq=4 ttl=59 time=3.218 ms
^C
--- 1.1.1.1 ping statistics ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 3.018/3.164/3.301/0.096 ms

fwiw Google DNS is around the same, 2.942ms average.
Apache Log4j2 2.11.0 released (sec. restrictions)
Wasn't there terror attacks against British and Turkish on the island -not only on Turkish people, Greeks felt like island 'rightfully belonged to them' -? Wasn't there attempts to unite island with Greece at times by the both Greek and Cypriot nationalists ? There was a guaranteering agreement precisely for this reason and Turkey used his rights.

https://en.wikipedia.org/wiki/London-Z%C3%BCrich_Agreements
How to Make a Beautiful Snowflake Christmas Star
Both encrypted extensions are of course inspectable at the end-point, which is the privacy model being discussed.

What is intriguing to me is why Cloudflare are offering this. Perhaps it is to provide data on traffic that is 'invisible' to them, as in it doesn't currently touch their networks. Possibly as a sales-lead generator.

Or is the plan to become dominant and then use DNS blackholing to shutdown malware that is a threat to their systems?
SHOW HN: I made an app which has curated comedy, stand up, fails and pranks
It's just uncommon but supported

https://stackoverflow.com/questions/1095780/are-ssl-certific...
If pings are anything to go by I should probably stay with Google (or my ISP, they ping at 1ms):

Pinging 8.8.8.8 with 32 bytes of data:

Reply from 8.8.8.8: bytes=32 time<1ms TTL=57

Reply from 8.8.8.8: bytes=32 time=1ms TTL=57

Reply from 8.8.8.8: bytes=32 time<1ms TTL=57

Reply from 8.8.8.8: bytes=32 time<1ms TTL=57

Pinging 1.1.1.1 with 32 bytes of data:

Reply from 1.1.1.1: bytes=32 time=6ms TTL=57

Reply from 1.1.1.1: bytes=32 time=6ms TTL=57

Reply from 1.1.1.1: bytes=32 time=6ms TTL=57

Reply from 1.1.1.1: bytes=32 time=6ms TTL=57

(Switzerland)
I am not certain what model you use for reasoning, but if person A says "I never saw X" and person B says "I saw X on occasions Y, Z, and W", then they don't "cancel each other out," unless someone is lying. Literally the entire rest of my comment was not about what I thought I saw, but what people have actually done. E.g. I mentioned what conservatives in Congress have actually done (e.g. latest https://www.washingtonpost.com/news/energy-environment/wp/20...) and suddenly we are arguing about anecdotes and I'm accused of offering strawmen. Uh, no.
Interesting and enlightening article, but at the end it tries to recoin Asperger as hate speech, and twists the mans unfortunate legacy. Dispicable on behalf of the author.
Google's ones are also faster here by 8ms (Cyprus)
Pyfiscan – Web-Application Vulnerability and Version Scanner
It works!

; <<>> DiG 9.8.3-P1 <<>> dailystormer.name @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: -
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 10

;; QUESTION SECTION:
;dailystormer.name.	IN	A

;; ANSWER SECTION:
dailystormer.name.	86400	IN	A	198.251.90.113

;; AUTHORITY SECTION:
dailystormer.name.	86400	IN	NS	f1g1ns1.dnspod.net.
dailystormer.name.	86400	IN	NS	f1g1ns2.dnspod.net.

;; ADDITIONAL SECTION:
f1g1ns1.dnspod.net.	70157	IN	A	58.247.212.36
f1g1ns1.dnspod.net.	70157	IN	A	61.151.180.44
f1g1ns1.dnspod.net.	70157	IN	A	180.163.19.15
f1g1ns1.dnspod.net.	70157	IN	A	182.140.167.166
f1g1ns1.dnspod.net.	70157	IN	A	14.215.150.17
f1g1ns2.dnspod.net.	70157	IN	A	61.129.8.159
f1g1ns2.dnspod.net.	70157	IN	A	101.226.220.16
f1g1ns2.dnspod.net.	70157	IN	A	121.51.128.164
f1g1ns2.dnspod.net.	70157	IN	A	182.140.167.188
f1g1ns2.dnspod.net.	70157	IN	A	52.220.136.67

;; Query time: 550 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Sun Apr 1 -:-:- 2018
;; MSG SIZE rcvd: 265
Yeah, that works. A best effort of actual deletion is good enough IMO. Maybe even notification it is actually done being sweeped out of a storage system.
If you’re on macOS and would rather do this from the command line:

sudo networksetup -setdnsservers Wi-Fi 1.1.1.1 1.0.0.1
They are NOT saying Google is lying and collecting the data. They are saying the business model of Google inherently provides such incentive.

Cloudflare is somewhat right: Means, Motive and Opportunity - but for a conviction you have to prove someone acted on the Opportunity. The Motive of Google is tampered with severe risk for loosing trust.

Cloudflare can make an argument they are fundamentally better positioned and that is all they do. As with all US based operations the NSA may cook up some convincing counterarguments and we may never know.
Apparently, you need to provide it as a Subject Alternative Name (SAN).

This is the entry for the cert used:

DNS Name=*.cloudflare-dns.com
IP Address=1.1.1.1
IP Address=1.0.0.1
DNS Name=cloudflare-dns.com
IP Address=2606:4700:4700:0000:0000:0000:0000:1111
IP Address=2606:4700:4700:0000:0000:0000:0000:1001
I did not wrote these things for fun. I had a real need for each one. The STL is fine for the average case, but it is also limited. I hit these limitations.
You can get performance stats over here https://www.dnsperf.com/#!dns-resolvers
C Mangler: a 15 line solution to a 40 year old C problem
NASA studies cosmic radiation to protect high-altitude travelers
It looks like any other TLS connection? Just a guess.
Short code isn't automatically more simple. For example, you put your secrets directly in this file instead of environment vars or memory or a config file.

Then what if you want to add a Twilio library? But then the original author updates the single file, and you want to pull the changes? Very complicated.

Every good software project is concerned with maintenance, not writing the fewest lines or having a single file.

Also, as someone who has written PHP for 20 years, I don't know what "idiomatic, old-style PHP" could mean other than "bad code".
Im probably being naive, but maybe altruism? At least if you buy into their making the internet better rhetoric
Standolier portable standing desk by Twelve South

https://www.twelvesouth.com/product/family/standolier
I guarantee there will be fraudulent sellers though.
It's clear what you meant, but for whatever it's worth, I think the word you wanted was "tempered", not "tampered".
RaD-X (Radiation Dosimetry Experiment): high-altitude balloon mission
I'm guessing less "sophisticated reinvention" and usage of existing TLS connection technology. You can use both (even at the same time) with DNScrypt-proxy V2 https://github.com/jedisct1/dnscrypt-proxy ;)
> Frankly, we don’t want to know what you do on the Internet—it’s none of our business

In the DNS resolver space, what is their business?
Place the IP into the "Subject Alternative Name".
I find it slightly amusing that they do not need to register a domain name for that one.
> Think a little more deviously: you block someone but your personal data, slanderous fakes, etc. is still out there. They can’t message you directly but can send it to everyone you interact with.

Also known as "please don't pull this idiot out of my killfile" problem known
on the usenet for decades. Maybe you won't see the messages directly, but most
probably you will see the quotes of the messages.
Does anyone here know of a native linux drawing toolkit? Something like the apple pencil? I've wanted a portable not taking device and all of the native Linux not taking software is not up to spec with OSX/Windows counterparts.

It's kind of a tangent but it's somewhat related.
Recursive drawing
Interesting that https://dnsleaktest.com/ does not work with Cloudflare's DNS... that's a first one for me.
The Keepassxc-Browser plugin works really great and has security improvements if you compare it to the old Http plugin that you used to connect the database to the browser.

What it's still missing is the possibility to have (almost) concurrent edit on the database, if you sync that on the cloud. Talking about the KeepassXC browser, they are close to a release where multiple users will be able to edit the database without breaking everything.
Snapchat throws shade at Facebook with Russia bot filter
An ESA study in 2006 [1] estimated total energy payback including launch and manufacturing at a year or less, depending on various assumptions. It's similar to ground solar; launch energy is offset by the higher and constant solar flux in space.

[1] Peter Ongaro, Leopold Summerer; "Peter Glaser Lecture, Space and a Sustainable 21st Century Energy System"; (57th International Austronautical Congress, 2006)
Microsoft CVE-2018-1038
Cloudflare, are you planning to support the OpenNIC initiative with this later on, rather than just being a regular, alternative DNS resolver?
11 Best Fitbit Bands for Kids Which Will Encourage Them to Move
I actively avoid games as a general rule due to the amount of time one can sink into them, and how relatively unproductive that time is... but wow I’ve fallen deep into Factorio on a few occasions. Fantastic game.
You’re probably going to get both a faster and more thorough answer on [1] or [2]. They’re both sites made for discussions of this nature while HN generally has a different focus.

[1] https://apple.stackexchange.com/

[2] https://superuser.com/
Thanks for the clarification. I did know it was possible when setting up CA's for VPN servers, they can use certificates with DNS and/or IP as identifiers. Somehow I never thought about certificates for public IP addresses.
Introducing DNS Resolver, 1.1.1.1 (not a joke)
Arguing with his lack of subtlty or deeper understanding is arguing against the nature of Oliver himself. He will choose bombast punditry over substance at every opprotunity while claiming the opposite. Using human interest stories, bad puns, and nazi refrences to hand wave away any actual discussion. Don't waste your breath.
Nah, plenty of overlap :) building networked services that deal with lots of data.
You're speaking way too strongly. Email is a huge success, it's potentially the most successful network. I've had my email address over a decade and get less than 1% spam, handled by gmail spam filtering.

You can say that you personally want moderation in your networks, but you have no basis to make general claims about moderation being necessary.
Buy your next meal from your neighbour
MacOS High Sierra 10.13.4, Security Update 2018-002 Sierra, 2018-002 El Capitan
No discussion of legality can be complete without mentioning the July 1974 coup, and the Greek government's role in it. This willfully provocative act destroyed any possibility of consensus.

[1] https://en.wikipedia.org/wiki/1974_Cypriot_coup_d%27état
$10,000 US Doller Reward Lisp Hackers
http://theschemer.org/t/200

The Schemer Foundation will invest $10,000 US Doller in 2018 to reward LISP hackers who have made outstanding contributions to the community.

The deadline for this selection is December 31, 2018. The selection time is January 2019. All the Schemer community members (must be natural persons) have the right to vote for supporters.

About half of the bonuses will be divided into three parts.
One part will awarded to one hacker who contributed the most codes to community official surpported projects.

One part will awarded to one of 10 hackers who contributed the most codes to community official surpported projects. (random select)

One part will awarded to the best Chez Scheme language project author in 2018.

This bonus will be paid in cash or equivalent.

About half of the bonuses will be awarded to one of the best hackers qualified in the above three selections. Or a hacker who has made outstanding contributions to the Scheme community.
This bonus will be paid in cash.

As the founder and investor of the community, I do not participate in the selection and have the final power to interpret this activity.

Community official supported project definition:

1.Raven package management system.

2.Igropyr server and its attached libraries.

3.ANN librairy written for Chez Scheme.

4.Cisco's Chez Scheme compiler project.

5. The migration layer for Chez Scheme library for R6RS implementations.
Announcing 1.1.1.1: the fastest, privacy-first consumer DNS service
Not Sun Tzu. Thomas Schelling.

His books "The Strategy of Conflict" and "Arms and Influence" are essential reading. They were influential bringing game-theory into the nuclear strategy, disarmament and foreign policy.
https://docs.datomic.com/on-prem/excision.html
It isn’t that hard to combine soft deletes with delayed hard deletes: generate a new encryption key every day for “data deleted today”, and encrypt deleted data with it. After X days, destroy the decryption key.

If you use asymmetric encryption, you can keep the group of people who who can recover “deleted data” small. You could even have an independent party generate your encryption key pair, give you the encryption key, and your customer, on request, the decryption key (I think there is a business model for a non-profit here).
https://keepass.info/ratings.html

As you can read on the keepassXC site, an audit checks only a limited snapshot of code. You can have flaws in the implementations on in plug-ins, for example in the http KeePass plugin (https://github.com/pfn/keepasshttp/issues/258).
I am getting ERR_CERT_AUTHORITY_INVALID because my ISP-provided router is intercepting the connection and trying to show me a "helpful" configuration wizard. No Cloudflare DNS for me.

To be explicit: This is not Cloudflare's fault and we should blame the manufacturer of the router, or the ISP for deploying their custom "friendly" settings. But it is what it is.
Well. Time to reconfigure all my Meraki gear.
Tokyo, Japan:

[mason@iMac-Pro-No-5 fubastardo (master)]$ ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1): 56 data bytes
64 bytes from 1.1.1.1: icmp_seq=0 ttl=56 time=2.310 ms
64 bytes from 1.1.1.1: icmp_seq=1 ttl=56 time=2.287 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=56 time=2.103 ms
64 bytes from 1.1.1.1: icmp_seq=3 ttl=56 time=2.785 ms
64 bytes from 1.1.1.1: icmp_seq=4 ttl=56 time=2.276 ms
64 bytes from 1.1.1.1: icmp_seq=5 ttl=56 time=2.646 ms
^C
--- 1.1.1.1 ping statistics ---
6 packets transmitted, 6 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 2.103/2.401/2.785/0.236 ms
[mason@iMac-Pro-No-5 fubastardo (master)]$
[mason@iMac-Pro-No-5 fubastardo (master)]$
[mason@iMac-Pro-No-5 fubastardo (master)]$ ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: icmp_seq=0 ttl=56 time=2.217 ms
64 bytes from 8.8.8.8: icmp_seq=1 ttl=56 time=1.837 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=56 time=1.838 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=56 time=2.010 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=56 time=1.827 ms
64 bytes from 8.8.8.8: icmp_seq=5 ttl=56 time=2.056 ms
64 bytes from 8.8.8.8: icmp_seq=6 ttl=56 time=1.807 ms
^C
--- 8.8.8.8 ping statistics ---
7 packets transmitted, 7 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 1.807/1.942/2.217/0.145 ms
[mason@iMac-Pro-No-5 fubastardo (master)]$
Guaranteed Jobs-For-All Program Gaining Traction Among 2020 Democratic Hopefuls
Google Maps can find wheelchair-accessible routes
And for the ones that don't, there is third party services that can monitor a site for changes and create a custom RSS feed from that.
Mm, what about deactivated accounts? You can reactivate them, which would involve undeleting data.
Modi's approach to solving a real military crisis was elegant:

-----

Modi: "Today is actually my birthday, but I never thought I would receive such a present."

Xi: "What do you mean?"

Modi: "Don't you know that your troops have crossed the border and moved on to the Indian side?"

-----
Both are not fast in China. :(
Edit: I had not realised what the parent comment here meant, that you can coonect to an IP address without getting an error by adding the IP to the SAN. My explanation bellow is about finding certs installed for a given IP/hotname, typically with openssl.

Yes, but...

This only works if they don't use SNI[1]. If they use SNI then you just get the default cert. They might have more certs for other hostnames served on that IP address.

1: https://en.wikipedia.org/wiki/Server_Name_Indication
I'd be content to have a feature where I give the network a salted hash of my name (i'll hash it myself on my own machine), as a lookup. This way I can be discovered by only people who I want to discover me (I give the salt to my email contacts, put it on my blog, or use no-salt if I want).
I've never yet had the luxury of working in a language that admitted formal proofs of correctness. Do you mean informal "proofs" like unit tests?

When a bug occurs (perhaps because your tests did not anticipate every edge case) how do you determine where the problem code is located without a stack trace?

I know that it doesn't usually point to the line of code that is problematic, but it usually gives you a starting point for your deductions...
I'd like to see a twin study on this. Maybe the direction of causality is that academia attracts depressive people.
Just curious: can somebody shed light on how they got the 1.1.1.1 IP address?
You should be right imho, but neither you nor antagonist knows how the laws of various countries will eventually rule on OB. Is it a platform or is it just software? ... TBD
Well, OpenWRT, DD-WRT, pfSense and OPNSense eh.
This is in response to the 'medium of exchange' problem, which posits that if your token doesn't have a sink built into it, it will slowly lose value over time.

See this post: https://vitalik.ca/general/2017/10/17/moe.html
Chances of you being in car crash is low, so will you advocate not wearing seat belt either?

the chances of "it hitting you" is low, but chances of it hitting some place on earth is 100%. Hence precautionary measures should be taken,
>> But hey, to each his or her own.

Then build a system that supports both. Let people opt-in to a lookup directory (phone-book), but make it anonymous by default.