skysight-inc/HackerNews huggingface dataset:
One of the reasons why I left Facebook was because I was tired of invites. I got tired of getting harassing messages from people upset I hadn't yet logged in to Facebook to RSVP yes/no/maybe to events I had zero interest in. No, I don't want to go to your child's birthday party. Leave me alone.
A note on urxvt and colors. Many distros do not compile it with 256 color support enabled by default which may be why the author had issues.
Interns with toasters: how I taught people about load balancers
Here is a raw header for people smarter than me (I've changed my email to "my.email.fake@gmail.com":

Delivered-To: my.email.fake@gmail.com
Received: by 2002:a02:9d5d:0:0:0:0:0 with SMTP id m29-v6csp2463224jal;
Sat, 21 Apr 2018 22:54:19 -0700 (PDT)
X-Google-Smtp-Source: AB8JxZqeE/hqXWlPnOWNRXo4XX3nwZh/+NGaQwquAFr/o2KzBe7Ub8QYDmcPIiZPkY2UoHRI3eOH
X-Received: by 2002:a19:c457:: with SMTP id u84-v6mr6519818lff.109.1524376459326;
Sat, 21 Apr 2018 22:54:19 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1524376459; cv=none;
d=google.com; s=arc-20160816;
b=yNz7pv3/Uh4jUBqrFSpnrhROAQ6bdU0eiolhXCpHXodEBCygkRTsVIZiSPxU1e66PU
+y1dJAT4q911YZE9Qb8jUKZ0yYuamvXY4NHGbN7hQzYR36ocZP4cuqrYZoLzrWzqWMjQ
0PcYbDK5dgKO4yhJj4ymhDMW05YZATsYqmaianc6O4KmG0i1dPCvHu0Rjl4lWFfX1UEX
jQK3/rA4Kqji/dHCqj6mHqiit2yzdj7XJTdoIiTdcBhWGoGOov1oCvpdzwQYRPCGe5qN
A3l5e0qgqYY/aWmEWJ5Ia8vwvbWWQvbe+nH2AxQf0KArHXQ/ktQb8oBackZTljwQivgI
ziIw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=date:message-id:subject:to:from:arc-authentication-results;
bh=e9D0rlZHq51n3B4mRj4EfKnNKsv8i1UrXVRpskBltKg=;
b=QVTaX2wLGCYZzWS7YGqc7Ck1ZiLTbKEVNYjhOJqiJkqKqeR6r7dEhGMUFNpOGAQOYB
Y5X/r0uktROpPceC8EzBnhLXtuVUJP2Q3Uje4QvTYLPrdMx8V1UvqJ4Wx6sxsHZR1tJB
69rtTABGlOC2ZW3dE7uqiVtsIukJmb/HQDOItX5g+ifsyBy4A9KZbKWpU9agqaD1NOpG
Rm7PnBzMAPbD0s02QBCeErZp+Irax0Gk7WzkGsJfO+GWjPMZN6DpWLvgS/vBRN0/Tz+B
xLb3VO+EPN6bG2ZvGqRJZ4LlbQIVFpBQGRFAAqMQLDEZGKTFJxrA4uO3NMMRqbQno5IM
cc6Q==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of reply@telus.com designates 91.203.70.10 as permitted sender) smtp.mailfrom=Reply@telus.com;
dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <Reply@telus.com>
Received: from rine.play-wto.com ([91.203.70.10])
by mx.google.com with ESMTP id b69-v6si4041238lfe.13.2018.04.21.22.54.19
for <my.email.fake@gmail.com>;
Sat, 21 Apr 2018 22:54:19 -0700 (PDT)
Received-SPF: pass (google.com: domain of reply@telus.com designates 91.203.70.10 as permitted sender) client-ip=91.203.70.10;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of reply@telus.com designates 91.203.70.10 as permitted sender) smtp.mailfrom=Reply@telus.com;
dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Received: from gown.ShoppingBrew.com (ec2-13-58-85-245.us-east-2.compute.amazonaws.com. )
by mx.google.com with ESMTP id n59-v6si5794010qtd.116.2018.04.20.00.37.14
for <my.email.fake@gmail.com>;
Fri, 20 Apr 2018 00:37:14 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning nkhpw@google.com does not designate 91.203.70.10 as permitted sender) client-ip=13.58.85.245;
from: Bitcoin Loophole <my.email.fake@gmail.com>
To: <senderus@justvaluerate.com>,<senderse@justvaluerate.com>,<monsl@50-233-80-21-static.hfc.comcastbusiness.net>,<mz@traveldailymedia.com>,<gego@nih.gov>,<iscontact@rei.com>,<mz@wp.com>,<info@chadog.fr>,<info@autotrader.com>
Subject: Are you still alone?
Message-ID: <NkhPw@google.com=Mx.google.com>
Content-Type: multipart/report; boundary="f4f5e80f07d80f991b056a2936a0"; report-type=delivery-status
X-EMMAIL: <@googlemail.fr my.email.fake@gmail.com>
Date: Sun, 22 Apr 2018 01:54:19 -0400
Gaussian Material Synthesis (SIGGRAPH 2018)
musk took over as CEO in october 2008; the height of the recession. prior to that he was board chairman
Some parts of these headers look faked to me, in particular, the bottom most Received is definitely faked, and probably also the bottom most Received-SPF and Authentication-Results.

The current SPF records for telus.com don't seem to allow sending by 69.64.35.11.

Did someone figure out how to trick gmail into accepting bogus headers indicating the SPF passed?

Also, the timestamps on the received headers differ by a lot. This one:

Received: from gown.ShoppingBrew.com (ec2-13-58-85-245.us-east-2.compute.amazonaws.com. )
by mx.google.com with ESMTP id n59-v6si5794010qtd.116.2018.04.20.00.37.14
for <my.email.fake@gmail.com>;
Fri, 20 Apr 2018 00:37:14 -0700 (PDT)

appears to be identical (except for the email address) for the two sample sets of headers in the thread.
Yep - I received precisely the same message, among 3 others. They all had the same "Message-ID" header as your example.
This part is interesting:

Authentication-Results: mx.google.com;
spf=pass (google.com: domain of reply@telus.com designates 69.64.35.11 as permitted sender) smtp.mailfrom=Reply@telus.com;
dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

I had thought that as of early 2017 that had changed the DMARC policy to p=REJECT which would basically reject any attempts at spoofing gmail.com in the From: field. It seems as if someone suddenly (maybe accidentally) reverted that change?
Although growth is slower, the crypto market is rallying back to it's true value.
IBM outlines the 5 attributes of useful AI
Can you suggest any book ?
I find it interesting how many varying definitions for empathy I'm seeing in this thread. I always thought of empathy to specifically be "feeling oriented", not simply taking someone else's perspective. Not saying anyone is wrong here, seems like we have yet to fully come to a consensus on what the word empathy really means.
Empathy is indeed powerful. And, if people understood each other better, I do think it would mostly be used for good. Conflict is rarely a constructive outcome, so even the self-interested would probably try to use it to broker peace.

The problem is that empathy isn't evenly applied. We can more easily gather empathy for people who are like us than for others. Asking people to be more empathetic may very well exacerbate the lopsidedness rather than reducing it. That uneven distribution of empathy makes it very difficult to make good, impartial decisions when their interests are in conflict.
Perhaps they meant when the engineers decide the the priority of the features and maybe even define some features themselves
It's curious that this it is interpreted as a lack of trust of engineers.

> Trust your engineers to do the right thing on their own and they might just surprise you.

Yes, they might surprise you. That's potentially quite terrible because there's a whole ton of other people & roles involved in the success of a product... and of course that's assuming that the project is what the customer wants, requires no marketing message for the customer to understand, and sells itself.
I remember when my mom's machine started sending spam with my name in the address field. Clever Trojan.
I'm not sure how any methodology would work in such an environment. It isn't the norm for any successful engineering team.
Weight vs. Volume
I wonder if the drug would work on felines, combined with the technology/approach here https://www.youtube.com/watch?v=AnpJBI_502U you may have an ethical way of dealing with what's a huge problem in Australia. I've been keeping an eye on this technology for a while now.
>groups of hackers have actually been much more on the homogenous side

>it's overwhelmingly white, male, able-bodied and middle-class, straight). And IMHO, a lack of diversity

Nice job. I think you managed to touch just about all the bases in the buzzword lottery.
Same as the others that have been posted.

DMARC failed and SPF shows that Telus.com was an approved SMTP relay for Google.com

Edit: posted into my original comment.
Crazy, I'm glad it's not just me. Looking in my spam and there's dozens of them.
It appears to be validating the envelope sender (reply@telus.com) rather than the from address, per the spec.

The thing is, telus.com doesn't have a DMARC record, and thier SPF record doesn't include 69.64.35.11. This header might be fake. Gmail does currently have a DMARC record that says p=none sp=quarantine. The 'sp' value only applies to subdomains, so the "none" (no action) policy should be used.

Edit: I just verified that gmail's dmarc has had p=none for a long time.
> But nothing about the process fundamentally change the problems with software estimation.

I'd argue quite the contrary.

> scrum acts as a place to hang paperwork & as a process to hide bad project managers. All while lying to management with charts.

So weird. The "paperwork" tends to make bad project managers all too transparent.
Virgin Mobile Memo Says Apple Will Announced on Monday
From the way the emails are sent, I bet it's an Android security hole.
You could make a filter like this:
The email is spam if FROM and TO address = my.email.fake@gmail.com AND Return-Path is not = my.email.fake@gmail.com

So you could still send emails to your self and they would not get flagged as spam.
Relevant security issue Gmail declined to fix over a year ago: https://www.zdnet.com/article/spammers-delight-gmail-weirdly...
Ask HN: How to transfer a peruvian domain name away from punto.pe?
Hopefully someone here will have done this before and can lend a hand?

I have owned a .pe domain name for close to 10 years which I bought from punto.pe originally... and the low quality of their website is starting to worry me... (It hasn't been updated since I purchased the domain 10 years ago, and it was a poor quality website already).

I have translated numerous sections of the control panel and I cannot seem to find anything regarding transferring away from punto.pe

It seems as though I can only transfer the domain to another punto.pe customer, but that doesn't seem right, does it?
This strategy seems odd. If they had simply omitted the spoofed sending email address from the To:/(B)cc lines, we'd never had seen them in our inboxes... right? Why call early attention to yourself?

I had 24 in my Inbox starting as 6:13PM (GMT-7).
It makes it pretty easy for an engineer to understand what is needed to achieve success, communicate about obstacles in order to get assistance, and have transparency about how their work fits into the larger organization.
The thing is I've used Gmail for nearly 10 years (give or take) - and I've never once had a spoofed email reach my inbox. Ever.

Something must have changed, most likely in the past 24 hours (give or take) to allow this to suddenly occur? Or someone's worked out a way passed the gmail spam filters or something.

Either way - this is clearly "new".
I was lucky enough to be on one of our pest free island when the only resident rat was caught. The effort and expertise of the rangers was truely amazing. They knew the rats favourite foods (a particular brand of peanut butter) and habits (avoided traps, went through monitoring stations). They tracked it over several days with cameras and monitoring stations.

They customised a monitoring station and killed the rat with a trap in the middle of it. The crack killer team spend their time tracking down and killing hard-to-get pests in truely remote locations like Little Barrier Island.
https://i.stuff.co.nz/environment/100925042/eraticated-roden...
Yeah.. I see that all of them say: Mailed by telos.com
I think Apache Ignite distributed KV store is much better choice as it has 2PC, indexes, distributed computing idioms and can be embedded as library in JVM app. Plus it supports SQL engine, thanks to H2 SQL parser engine.

You can also create graph layer over it using gremlin in a day or two.
telus.com
Who leaked the email ?.
I had the same issue tonight. It did not appear in my sent folder, however, and was sent from the same “reply@telus.com” account that everyone else reports. The most recent one (of 5 sent so far) was sent 2 minutes ago. I changed my password an hour ago - but as I suspected that didn’t help because these aren’t being sent via compromised accounts. Someone is using an SMTP server and just spoofing the sent from address.
50 Most Popular JavaScript Projects in 2018
mxtoolbox indicates that SPF for telus.com redirects to "_spf_telus_com.nssi.telus.com", which designates "_spf.google.com" as an authorized sender.

That's why the SPF check doesn't fail.

However, in the year 2018 I'm shocked that Gmail would put messages that fail dmarc into users' inboxes.
Thanks. The entire text is also not completely visible in a resized browser, you have to horizontally scroll to read the entire text.
Yep, based on those headers it's the exact same thing discussed in the ZDNet and LinkedIn articles.

----

ETA: Just tried it myself, through my own mail server, and the headers are pretty much the same: the IPs are different, of course, and I didn't bother including extra forged Received: headers and such). This works beautifully -- message is in my Inbox (flagged as "Important according to Google magic.") and shows up under "Sent" as well.

After opening up "Show Original" in a new tab and then returning to the message, there's now a small banner (with a yellow background) at the top that reads:

> This may be a spoofed message. Gmail couldn't verify that it was actually sent from your account. Learn more.
Over 400 Startups Are Trying to Become the Next Warby Parker
No anger. Only demanding responsible handling of users' information. If Facebook or any other social platform doesn't deliver, users could go elsewhere.

I also think that there is not much honesty in your question, by the way.

Read the EFF post again.
The strange thing is the article is a year old? Why would it suddently be exploited now? I find it difficult to believe no one's tried until today?
The one doing the estimate should obviously not be the same doctor doing the surgery.
> Isn't the error rate and the disagreement rate in the latter so high that any attempt to quantify it would end up in flame-wars and bicycle sheds?

Yes. Still much better than counting papers/journals/conferences/citation/degrees/students/PhDs.

> That is, do you have any point other than to express a sort of personal cynicism?

I believe that measuring science quantitatively is damaging. It creates a situation where those who game the system do much better than those who do good science.

> do you believe there is less growth in "real rigorous knowledge about the world" being done now than 100 years ago when the Nobel Prize was established? Because I would disagree with that assessment.

As a lay observer, I'd say that theoretical and particle physics is not advancing very quickly compared to 100 years ago. Late 19th century and early 20th century were magical times - 1905 alone brought special relativity, the photoelectric effect, and E=mc^2 (and that's just Albert Einstein).

Other fields, such as the more "mundane" areas of physics saw and still see a lot of progress, but Nobel prizes are rarely awarded there. Medicine had a great period in the first few decades after the war. Nutrition has gone backwards in recent decades.

Math, computer science, software, a lot of electrical engineering also saw a lot of progress, but it's irrelevant to the discussion. There's no Nobel prize in those fields.

BTW, Einstein never got a Nobel for special or general relativity.
As a user the value is not in the technology, but in the 'other users', yes, the old 'network effect'. So the essential question is ho to get overnight adoption of one of those alternatives by all your friends, which means, by extension, everyone.
Since this is unlikely, regulating Facebook into a privacy respecting business, hard and erring on the safe side, is the true alternative.
It's not being sent from any of the IPs listed under _spf.google.com, though.
> I find it interesting though that the right type of vegan diet will basically make you hypertension and heart attack proof

A diet making someone heart-attack-proof is a pretty strong claim. Have a citation?

I think the only thing one can say with near-certainty about a well balanced vegan diet is that it has much lower environmental externalities (i.e carbon footprint, water usage) than a meat-based diet, while being no worse for you than any other comparably healthy diet.

That alone is a great reason to be a vegan, without having to rely on possibly hyperbolic claims of health benefits.
If they block Wikileaks (=Putin's propaganda), they must be good.
Subjectively, charging stations are "everywhere" in apartment complexes here in Las Vegas.
I don't think there's any more water power being converted into rotational force ( via the vortex ), then there would be using any number of conventional [water turbine](https://en.wikipedia.org/wiki/Water_turbine) designs, like those used at, for example, the [Hoover Dam](https://en.wikipedia.org/wiki/Hydroelectricity).
If you look at https://en.wikipedia.org/wiki/Comparison_of_open-source_wire... you can see that a few of the atheros chipsets have both OSS firmware and OSS drivers, the intel ones only seem to have OSS drivers. Perhaps they are using one of those that have the OSS firmware/drivers combination?
You could use https://oxylabs.io/ or buy some regular VPN accounts and build a http proxy wrapper around that. Extremely cheap and works well. There’s a lot of existing projects on Github for that too.
And? Just because "smoking creates cancer" stickers on cigarettes they don't kill people anymore?

Just having that suggestion burried somewhere on page 300 of a documentation is worth enough to mention it.

It's not a question of free choice but a question of how we educate people to develop software.
Don't freak out about them being in your Sent folder. Remember that Gmail doesn't have "traditional" mail folders -- just a huge pile of all your e-mail messages with "labels" attached to them. Apparently Google decides that if the From: address is yours, then you "sent" the message.

Note that in SMTP there are two "from addresses": the envelope sender (which you don't see) and the "From:" address/header (which you do see) that everyone is familiar with. In most (but not all) legitimate e-mail, they will be the same.

In these cases, your e-mail address is being used in the "From:" and "To:" headers but a different address is being used in the envelope sender (which is the one that the MTA uses).

Google does seem to be checking SPF correctly (i.e., according to RFC, which says to use the envelope sender) -- since (it seems that) the result of check_host should be "softfail" and the RFC says that one "SHOULD NOT" reject a message based on that... but Google apparently logged "pass". Odd.

---

ETA: See a comment from ryan-c below about the funky "exists:" mechanism in Telus' SPF record; it explains why check_host() passed.
Again, there's a ton of wrong here...

If you really have a fleet of web servers burning CPU and you arne't tracking the costs, then I guess "it works" until someone figures out there isn't any money left in the coffer.

There is a lot of value in working software, and unless your engineering infrastructure expenses seriously outweigh your engineering payroll costs (which does happen, but is hardly commonplace), CPU efficiency isn't the be-all to end-all and focusing on it may well prove to be counter productive. If no one actually cares about your page load times, it may very well be that it doesn't matter. You can spend a near infinite amount of time & resources trying to get optimal performance (talk to someone who does high-frequency trading to get a sense) well past the point where the costs pay off.

There is tremendous value in "it works" that engineers generally struggle to fully factor into their thinking (I come by this wisdom honestly). People have written about this extensively (e.g. https://www.joelonsoftware.com/2000/04/06/things-you-should-...). That said... the notion that you can't fix actually serious and counter-productive problems with the product because "it works" sounds not only counter to Scrum, but really counter to any software development methodology I've ever heard of.
Yeah, I am also thinking app or phone
I just attended an event I had two lucky ways of knowing about:

1) Find out through Facebook as if I'm friended to "the right people" like it's 1987 [my "usual network" would never have heard of these people, not even a little bit]

2) Find out through an acquaintance live and in person by them randomly inviting me simply because I was around the right place at the right time like it's 1987

I'm not on Facebook, even if I was it's still 1987. Perhaps this is "the discovery problem", but even so in "current year" it still exists if only in ever-smaller measures. Choose your intensity of flavour, I guess.
git check certificates to make sure the source is (more likely to be) legit. And as far as I know it doesn't randomly executes downloaded files without giving you the opportunity to review them.
These are not buzzword. The words have a precise meaning.
I don't ahve anything sent form my account but I do have some spam messages in my spam folder from a telus account

<PmNxl@nieywdufb.telus.com>

Posing as the Gmail service team, they are saying I requested to have my gmail account deleted and to reply to them to stop the process.
JM-6089A / B / C Type 45in1 Multi Power Repair Hand
Deaf drivers are far less likely to be distracted. The only safety disadvantage is that they can't hear sirens.

I'd take a road full of deaf drivers over a road full of drivers with earbuds in (or headphones on) both ears any day.
My mother went two years with a horrible stomach condition and couldn't get anyone to treat it until she wound up in the hospital and they were legally required to treat it. It was for exactly that reason: risky surgery looks bad, even if it's necessary. When there aren't a lot of doctors who can perform the surgery in question to begin with, say only two in your state, then you might just die.
> But it does depend on the quality of the peers, and should go beyond whether the story met the criteria or not.

Peer review is a good way to improve the quality of peers, either though the natural education/knowledge sharing, or simply the transparency that helps you remove low quality peers and find better ones. It's not a cure all, but it's hard to imagine a successful team that wouldn't benefit form it.
A black female software engineers experience with racism in the US
The CCC Congress would be a counter example from what I have heard.
I've always hated clickpads in general including apples. Dell
XPS is by far the best I have ever used. And I actually use it now instead of just disabling it.
Careful. Using open proxies could be considered unauthorized access in some jurisdictions. Some of these proxies were installed without the user's permission.

This is my favorite consensual alternative: https://github.com/mattes/rotating-proxy
Agree with all of that except the last sentence, some Eastern religions believe the death ceremony of cremation and it's associated ceremonies are required to help the individuals soul move onto its next body and not be trapped
while it may be possible, its frowned upon. The docker way is immutable containers, so you want to edit the nginx config you 'cant' just do it in place, you need to make a new container with the new config and a new process and kill all the existing containers(and hence processes/connections).

docker is basically at the point today where mapreduce was a few years ago. while it may solve some problems, its not a thing that solves everything.
> I haven't found another terminal with such definitive protection against the attack described by Horn.

It's not available on Linux, but iTerm2 does this!
Silicon photonics is changing this dynamic some, right?
Canadian Authorities to impose the tax on Cryptocurrencies
There was an attack going around many years ago that was basically a spam email that had code embedded in it, which would hack your browser, causing you to send out more spam email when you logged into your account. I assume this is the same sort of thing.
If we want to consider the business world, there is frontend vs backend people, dev vs ops, sales vs development, blue vs white collar, management vs employee, ...
Link to the mailing list?