skysight-inc/HackerNews huggingface dataset:
I’m not an expert, but I think it goes something like this —

You register an AS and get a dedicated server [0] at at an internet exchange point (IXP) and install a BGP router on it. Your router advertises a route to the original route53 IP, with a shorter AS path to the target IP than the route advertised by the “real” Amazon router. You peer your router with at least one provider who peers with the real route53 servers (they accept your route advertisements).

Then you redirect incoming traffic on port 53 to a mitm dns proxy, where you either do nothing or return an IP address you control, which could be anywhere.

At the IP address you control, you run a transparent HTTP proxy that signs HTTPS responses with the valid DNS cert you obtained by spoofing MX replies in the dns proxy. You then either do nothing, or modify the page to return arbitrary content (like rewriting bitcoin addresses).

[0] or you get a VPS at a provider willing to advertise BGP routes on your behalf without validating them
App Store for Acceleration-as-a-Service
"lighter"... not.. by much.

Timezones and locales is a HUGE drain on browser code even with Luxon. Date-fns replace Moment in a much nicer, easily tree-shaken, format but Locales?

... urrrgh.
Technically that depends on the agreements with IANA. If IANA could say "HEY YOU if you're not using 80% of your space actively, by January after next then we'll charge you a an exponentially increasing fee" I suspect they'd get a lot more movement. I suspect that the price of IP space on the market will also change that attitude as people go "Well crap that's worth a lot of money"
Pet peeve:

"A bitcoin has no intrinsic value."

Okay, sure. Along with everything else. Things can be useful, and they can have moral value, but the whole concept of value relies on someone doing a valuation. Nothing has value in and of itself without someone valuing it. Bitcoin obviously has value (whether that value is founded on usefulness or not), because we see people valuing it... and contrary to the author's statements, it's not all Greater-Fool speculation, etc., even if you don't agree with the reasons they're valuing it.
I have leechblock for some sites, alows 20 minutes every four hours or so and then it just redirects to a work/education forum I like instead.
American's concern about nipples is both hilarious and sad.
no lie i would pay good money for an eink monochrome phone with an insane battery life
One thing that grinds my gears is study guides are pretty much useless in the tech industry. They all say the same thing -- literally everything. Leetcode, HackerRank, or very very broad topics like algorithms, data structures, etc.

The worst ones I think are actually frontend engineer interviews because it's a coin flip if they are asking you fundamentals or very focused topics in frontend. I've actually been meaning to make a Youtube series on how to succeed in the frontend interview (which also implicitly sets expectation of what a frontend engineer interview looks like) but haven't gotten a chance.
And on top of all this, many will then turn around and claim to regulators that there is a labor shortage! When it's obvious their behavior is only sustainable when they have a glut of applicants.
While your projects might help generate interest in you and get you an interview, the actual interview process is meant to be an assessment by the Company conducting the interview. So you shouldn't automatically assume you have the jobs simply based on your past projects alone.

That's insane. If you brought me in because you liked what's on my resume, your number one priority should be determining if I really did what I said I did. Your priority shouldn't be arbitrary, unrelated questions or coding challenges pulled off some website.

I'm not aware of any other industry that behaves like this.
I appreciate any effort to make mathematical explanations more intuitive. A couple of thoughts:

1. There are a few grammatical errors (missing word, missing comma) that are forgivable but I find that any imprecision in language is a big detriment for a student trying to understand an explanation. I tend to get hung up on those since, not knowing the material, I can't resolve ambiguities with context. Since subtleties are important in math it would be worthwhile to go over the explanations again with a fine-toothed comb to ensure there are no typos or amphiboly.

2. The visuals aren't always clear. For example, volumes don't show edges so it's hard to make out that you're seeing a volume rather than an irregular area (and which volume you're seeing). Also I think a caption to each image could be useful, to describe how the shape demonstrates the concept. Something like "this visual represents a shear transformation of the matrix described above", just to be really explicit and clear.
How much does an Augmented Reality app cost in 2018?
If you are using DNSSEC, hopefully the issuers are validating it.
Agreed. I wouldn't even mind so much if they picked "better for the job". So often, it seems like the criterion is "better at doing things that never actually come up in the job".
Show HN: Krypton for Teams – Simple SSH Key Storage for DevOps
There's probably more than one of these posts :)

Here's the one I found in my bookmarks: http://lambdaops.com/rm-rf-remains/
I got this CSV question at some nameless large company in the bay area.

I asked "Do you want me to do the simple thing, and use a library, or write code to do this?"

They preferred the latter. So I did.

As happy as it might make you to be snarky for the often silly questions you are asked, people are, if they are smart about it, looking to see your thought processes.

I recently got a question that I didn't know how to answer, so I started thinking through it aloud. I think they liked it, because they engaged with me during the process. Redirected my thought processes.

Again, good companies will do that. Look for every question, no matter how silly, as a way to show how you deal with situations, even ones you may not like. These are the moments for you to shine.

And after you get home, tell your SO/friends/etc. how wacky they are.
Hey HN, we’re happy to announce that Krypton for Teams is now available! Thanks for all your support when we debuted Krypton Core, your early feedback strongly influenced the Teams product.

Krypton for Teams builds on Core to make DevOps key management easy and secure by default. We designed Teams to be cryptographically end-to-end verified using signed hash chains. Even if our infrastructure is attacked your team data cannot be altered.

Looking forward to your feedback!
CSV is really fucking hard to parse. There's tons of edge cases. "I'd just use a well-known, well-tested library" is a very valid answer.

One of my go-to questions is "sort this array", and if the candidate types `Arrays.sort(input)` they get bonus points, because it shows they have useful knowledge of the language they'll be writing in.
Just guessing here but it’s only open to the companies and countries that are peering with one another isn’t it?

If so then companies that intentionally advertise routes that are not theirs to advertise would lose their peering agreements with others because other companies would no longer want to peer with them.
BeatCoin – Experts Demonstrate How to Steal Cold Wallet Keys from #AirGapped PCs
Access permissions are part of the inode, IIRC, and not part of the directory entry (basically the same as in Win32?).
You would have to make sure the sum of any combination of all characters was unique. For example, if the code was the character number, a=1, b=2, etc, both "abc" and "bbb" would have the same sum.

So I think something silly like:
character_code = len(string)*len(alphabet)^character_index
should work.
You're way ahead of the game, OP. We talk a big talk in our industry about hackers and meritocracy, but this is still a relationships business -- like every other business. At most companies if you're cold-applying to a position on a job board, you're already behind your competition.

I'd like to propose an alternative job hunt:

(1) Start thinking about your next move before you need a job.

(2) Send an email or DM to someone at a company you like, ask to buy them coffee/beer, and make it clear you don't want anything from them. Ask them questions -- or even better try to do them a favor... promote a side project, make a connection, etc.

(3) When you're ready to make a move, reach out again to all the people you've met and ask if they're hiring. Most people are happy to forward a resume -- especially because so many companies now offer referral bonuses. It's a win-win.

(4) KEEP MAINTAINING THESE CONNECTIONS EVEN AFTER YOU GET THE JOB!
nice article. I came to similar conclusions on my blog as well, searching for a dev job in boulder: http://www.gunkyfunky.com/blog/my-boulder-tech-job-search-jo...
In this particular case, I can assure you that there also is prior art in the research community going back at least 10 years. I wonder what aspect of it they are patenting (the bandwidth savings perhaps)?
I'd guess that they hacked a weakly secured BGP router and spread the new routes from there.
Facebook.com, LinkedIn.com, and Google Sheets ship ~1MB of JS compressed for their main pages, which is 5-10 MB of JS uncompressed. So JS parsing time ends up taking hundreds of milliseconds on initial load.

And of course, people want to build even richer experiences (live streaming, 360 media, etc) so there is a lot of appetite for loading more code in the same amount of time.
ShofEL2 – Tegra X1 and Nintendo Switch Boot ROM Exploit
Agree. The true story is actually sad.
Yes, sorry. My goal was to lay out the parade of horribles on the other side of the case to illustrate why the question was being asked at all.

You're right that IPR is judicially reviewable and I'd agree that my example would probably not hold up to review if clearly politically motivated and contrary to evidence.

Someone who's worried about this might argue with you that to have a patent invalidated, then the invalidation subsequently overturned is not the same thing as not having a patent invalidated in the first place, if only in the eyes of the market. I don't think it's a meritless argument, though it's not one that sways me personally.
>>You’ll never really know why you weren’t hired.

>That's because they don't want to be sued.

Because it takes far too much time to tell everyone who isn't hired than the few who are.
Putting yourself in the shoes of the company interviewing you: If you collapsed into a puddle of goo under pressure, to the point where you were incapable of performing a task "you could do in your sleep," why are you still a good choice to hire?
> Every company believes they are snowflakes.

And yet...on average, companies are "average"
> I'd even be in favor of a means-tested phase-out of the UBI.

This is a bad idea. A phase-out is indistinguishable from a tax in the same amount, but it harder to reason about and consequently tends to be implemented incoherently.

Suppose you have $10,000 basic income with a 20% phase-out rate and a progressive income tax with a 15% tax rate up to $50,000 and 25% thereafter. Then what you really have is a $10,000 UBI and an income tax of 35% up to $50,000 and 25% thereafter. Probably not what you wanted, right?

Much better to have a $10,000 UBI with no phase out and a flat 30% tax rate. Which has the added benefit of vastly simplifying the tax system -- no need for multiple rates and all the complexity and opportunities for tax avoidance that go with them.
You need to have access to BGP router (hack it for example), then using the router you announce your target IP class as yours and your BGP neighbors update theirs BGP tables. Now when someone that is near those router wants to connect to certain IP it connects to you because shortest path to that IP in BGP tables is you.
I moved to a Sonim XP5 two months ago. It has bluetooth, wifi, LTE, removable battery, media player, expandable storage, and can function as a hotspot. It uses a stripped down version of android for its OS
There's an informal trust chain. You only set up BGP peering with companies you trust, and you implement filtering of it's traffic and advertised routes that you know can be trusted.

You know that if you do something nefarious, or if someone at your downstream does something nefarious, your upstream will identify it and block your traffic, or the part of it that they identify to be the issue.

Thus as long as you need to appear on the internet, you do your best to play nice, otherwise your traffic gets blocked, and you also do your part to identify and block traffic when something goes bad.
Buuuuut.... not if you hijack the destination route. It helps if the DNS servers are hijacked, but if you also snag the destination route's IP then you can still get the certificate and serve traffic. Sneaky sneaky.
> That's insane. If you brought me in because you liked what's on my resume, your number one priority should be determining if I really did what I said I did. Your priority shouldn't be arbitrary, unrelated questions or coding challenges pulled off some website.

There generally is a component where you're asked about your past projects in detail. Its just not the only component.
Hackerrank is terrible as well. The questions are worded in a way that takes ages to think about unless you are a mathematician. The time limit is pointless.It doesn't tell you why things are failing. For the type of problems it gives you a debugger would be really useful but you are coding in a web browser.
I'm not being philosophical but simply pointing out that the fate of a nation is largely determined by the people of that nation. And the driving force there is typically seeking better things for themselves. There have been extensive efforts at externally driven nation building and, to my knowledge, it has yet to meet with significant success.

I actually am currently voluntarily residing in a "developing nation." I enjoy it for a variety reasons. Regardless, everywhere around me the reasons that this country is a "developing nation" are clear as day, and it is of the nation's own doing. Corruption and cronyism are rampant. And, much like the US is becoming, politics is more about 'us versus them' as opposed to 'how can we best solve our problems'. There's also a complete lack of accountability. Failure is tolerated at all levels (which is something we're also starting to see in the US to some degree). When the electricity goes out for hours because of a glorified sprinkle people just shrug instead of striving for better. And this starts all the way at the school level - children, mostly, are not allowed to fail, which again seems to be the path the US is started down. They get passed along. Next thing you know you have a tenth grader that can't tell you what 9 * 7 is. But that's okay. Since has the right last name, he'll have no problem getting a job, perhaps as an administrator at the electric company.

Capitalism or whatever else is a red herring. Live in both a "developing nation" and a "developed nation" for some time, and you'll see the sharp and surprisingly clear contrasts emerge. And the problems lay primarily with the people themselves. However, focusing on the actions of people is something touchier than just philosophizing about political or economic systems, so it's no wonder our 'aid' generally fails to do much beyond sustain the status quo, if that.

And one quick note on rebellion. Rebellion is driven, beyond anything else, by a lack of complacency. The US is full on Algiers 1954 on internet forums. But in real life people are extremely content. Electronic devices and the internet are like pacifiers for adults.

[1] - https://en.wikipedia.org/wiki/Great_Leap_Forward
I would absolutely use this, and I've even thought of creating it. I've hacked together parts of that functionality several times. I think the problem would be that if anything like this caught on, companies would adapt their platforms to get around it. Tricksy hobbitses!
Index funds, cryptocurrency, really good sushi, and synthesizers and other music software I don't really need. That's pretty much it.
> Number 6: Outsourced Hiring Assessment Services Are Very Much in Vogue

I ran into this a few years ago. I bombed hard when they asked me some specific terminology question about the stages of the ASP.NET request lifecycle. I believe I just said "I have no idea" and the call was over shortly after that.

It was frustrating--why are they hiring based on esoteric trivia instead of general programming skill? This assessment would've filtered out an enthusiastic, genius-level Java programmer!

And is that sort of question actually effective at measuring ASP.NET expertise? I work with ASP.NET every day, and memorizing that information would offer me zero benefit since A) I rarely need it, and B) I can look it up whenever I do need it. It's doubly frustrating to think there's someone out there who believes I'm a weak engineer based on this misguided quiz.
Here is a great article for Davinci Resolve (Industry standard for color grading) https://www.pugetsystems.com/labs/articles/DaVinci-Resolve-1...

The issue is after you have done a few processes on the video for color balance and grade things can just grind to a halt.
Works if you assign prime numbers to each letter and multiply instead. So a=2, b=3, etc.
Show HN: A tool to learn how others feel after reading e-mails from you
On the one hand, I agree entirely. An interview should not make people jump through hoops if they can answer their questions via existing material.

On the other hand, fakers have caught on to the "GitHub is my resume" thing. I have had applicants who have basically fraudulent Github projects, or who have taken group projects on which they did basically nothing and claimed them as their own. So a Github page now requires an expert to evaluate it.
"China's broadening influence over parts of Europe"

Sounds like an assault on Europe. But let me help you look at it objectively.

"Germany's concern about the growing competition from China" <-- Isn't this protectionism? This isn't political influence, but that Germany is shying away from genuine free market competition. Germany benefits at the expense of Greece. Germany is unfair in how it plays the game

"block another EU statement criticizing China's territorial claims in the South China Sea" <-- This is political, yet it doesn't affected EU. Why is EU so concerned about China's backyard anyway. Imagine if China picks sides in Europe's petty fights like Catalan independence, and brexit, etc. To me it's European overreach (just like Americans), and the less of this the better.
I was somewhat surprised by the small number of process startup/libc initialization syscalls in the trace in original article.

On Linux (Debian unstable in my case) you will get order of magnitude more, because rm is dynamically linked (although it seems that only with libc and nothing else), because of libc startup (did you know that linux has amd64-specific syscall arch_prctl(PRCTL_SET_FS), that does exactly what it sounds like?). And then because core utils rm cares about such things as whether stdin is terminal (probably because -f/-i behavior changes depending on that) and does the actual unlink in somewhat convoluted way that involves fstatat() (called twice, for some reason) and only then unlinkat(). Somewhat notably last thing that rm does is trying to lseek() stdin only to get ESPIPE...
Many people, myself included, feel DHCPv6 is a silly idea and should go away. IPv6 was designed to not need it, and continuing to use DHCP is just inertia and a desire to keep doing things in the same old way.

As I recall originally everyone was supposed to use well-known addresses like ::1, 2, 3 on the current network or multicast DNS.

But nooo. Was that too hard? DHCP or nothing! And then DNS was added to SLAAC.

The rest of DHCP was always useless. Once you have DNS, it can be used for all other service discovery.
NAT does nothing meaningful securitywise that a firewall cannot achive, and causes a lot of stupid problems.
I suspect the real motive is to make an H1-B less attractive to the holder. If your spouse wants to work but can't, it's a hard sell to get them to move with you.
Hi!

Communication is hard. People mostly get bad vibes from e-mail. Combine these to and your get a lot of unnecessary misunderstandings. I think the world needs more emotional intelligence and that requires healthy feedback.

https://xn--du8hsrobxe.ws is a simple tool to get feedback from people you communicate with.

1. You get a simple HTML code you can paste into your e-mail signature.

2. The code contains one question ("How did my e-mail make you feel?") and seven emoji.

3. People can click emoji to give you feedback.

4. You can see results for last 30 days.

I made this MVP during last weekend. I coded it only using left hand... right one was busy holding my baby daughter.

I'd be grateful for feedback. Thank you!

PS. Actually the URL is all emoji and .ws - too bad you can't post emoji in HN comments :(
Disorder and Tolerance in Distributed Systems at Scale
> When I was recruiting, in years past, my HR department always strongly warned me against administering coding tests on the grounds of legal issues / fairness. Now that these are outsourced, I suspect that HR departments aren’t concerned at all about legal issues since they come from a vendor not themselves.

This kind of crap needs to stop. I think that some level of legal liability needs to pass through outsourcing companies and land on the company that uses them.

I also suspect that if legal liability started passing through outsourced companies, you would see outsourcing collapse very quickly as companies begin to see outsourcing as riskier than an actual employee.

Unfortunately, I'm not sure that we have the legal precedents to pull this off without new laws.
>I can't think of anything more I'd rather not do than some arbitrary company hiring project. I simply pass on these now and politely pull out from consideration.

Yep. If you're gonna throw crap at me like that NOW ...it's only going to get worse LATER
And that's why we should make sure that newspapers and TV aren't the go-to alternative to Facebook.
> The ability to understand the underlying need behind a request is important to being a good employee. If a candidate fails completely to understand the purpose of a question during an interview, and in fact continues to argue against you as you explain it, they aren't a good candidate at all.

I agree with everything you've said, but that still makes it a bad and equally obtuse question. If they don't actually need a CSV parser, they don't need to know that you can parse CSVs, either (if you can - which is the other point - you might be a pretty good programmer if you can quickly parse a CSV, but there are tons of excellent programmers who can't).
"Can" vs. "should."

The bottom line is that the user specifically requests not to be located, and this is a way to do exactly the opposite of what the user wants.

Being technically capable of doing something is not an excuse for violating trust.

Here's a web page that may help you wrap your brain around the concept: https://en.wikipedia.org/wiki/Ethics
It's always felt like the most disciplined of his books to me - Snow Crash is almost there, but just a little too formulaic as a story. I enjoy the digressions and length in his other work, but they can get a little dull after the first reading.
Yeah, but they're not talking about bakelite models.
Note that if you're using this load balancer behind a CDN then the results can be incorrect, although probably generally within the same region.

Also MaxMind does have completely free databases down to the city level, just with lower accuracy compared to their paid products: https://dev.maxmind.com/geoip/geoip2/geolite2/
Show HN: Cookiecutter Python Package Template with Pipenv
Amazon had 1300 IPs hijacked for two hours