skysight-inc/HackerNews huggingface dataset:
GA is a cog in a much more nefarious machine, no matter how "benign" it might be on its own.

Analytics, maps, recaptcha, and fonts, not to mention all the data siphoned from Android, are pieces of a mass surveillance apparatus, used openly for advertising, but potentially shared with governments around the world.
I am making a point of drinking mine within 6 months.
Never heard of domain.com. If anyone wants a recommendation I use namecheap and have never had a problem. They are supporters of the EFF and Net Neutrality.

Edit: If you are going to downvote, state why. Namecheap is a good service for a good price and supports Internet freedom. When even GoDaddy was supporting SOPA Namecheap took a stand against SOPA.
>Honestly, I can't tell if this is satire just from reading the article.

Perhaps you need to listen to the song? https://dynoroot.ninja/dynoroot.ogg
But they're also not particularly good.

Million+ line codebases got errm made with make. In my experience people most sneering at it have far lesser demands on their tool...
I _think_ TL;DR Domain.com, unless this is common with other registrars?

Is this a common problem in .io?
> Are there anecdotes of non-absolute-beginners failing to understand that? For first-year students, sure. Do working software engineers have trouble with it?

Sorry, I was unclear: I was talking about beginners. My argument was about intuitivity and "it's easier/harder to learn programming this way". Software engineers are already down the road of "I'm used to this, therefore this is the best way" :P

If I understand you correctly, what you say is entirely possible: that some people think best one way or the other, and that there is no universal paradigm that is more intuitive.
How have containers solved maintaining production systems?

It's just moving the abstraction layer higher up the stack.

Also, who will design and build security for these systems? Or care about low-level performance?

A ton of dev's don't care about prod in my experience, and just want to ship shiny features.

Containers and VM's are not very different from a deployment or maintance standpoint. The deployment strategies used with containers could be done with (lightweight) VM's a decade ago. (heck, jails have been used for nearly 25 years)

Also, sysadmins have been automating stuff since forever. Without automation one inherently has a very unstable system.
Well, if you don't skip all the intermediate units there is actually a nice, highly composite chain all the way up. Admittedly, the numbers are variable... but

22 yards in a chain
10 chains in a furlong
8 furlongs in a mile.
The fact this elicits such a strong response is proof that it's needed.
One of the problems here is that given that our "home" numeric base is 2 times 5, we just aren't going to get both convenient unit conversion via moving the decimal point (or appropriate term in base of choice) and convenient divisibility.

So I suppose if metric just isn't signal-y enough for you (in the general sense of "you", not JackFr), you can join the call for the world to convert to duodecimal: http://www.dozenal.org/
That simply not true. The EU data protection Working Party (Article 29 aka. WP29) has being telling them since 2003 that Whois is not compatible with EU law [0]. That's well over a decade.

Even if ICANN only took GDPR seriously, their plan A was awful and their plan B was non-existent, see the thread further up: https://news.ycombinator.com/item?id=17081950

[0] http://ec.europa.eu/justice/article-29/documentation/opinion...
> Ever tried to security update a container?

Wouldnt the approach for security updates be to replace the container?
Terms of Service; Didn't Read (https://tosdr.org)

TOSBack, the gitified version (https://tosback.org)

A new version of ToS;DR is also in development: https://github.com/tosdr/phoenix
I had some fun with NameCheap and the xyz tlds.
Turns out, CentralNic (who actually runs the zones) was not doing proper validation on the glue records, and not removing old ones. NameCheap was sending CentralNic cached records, and managed to foobar my domain glues.

I bypassed NameCheap, because I knew they weren't the ones actually maintaining the records (registrars are just middle-men.) Using the DNS contact in the SOA, I got a response within 12 hours, and it was fully resolved within 24 hours (minus propagation.)

CentralNic contacted NameCheap, as did I, and they got their system fixed within the week.

--Edit--

CentralNic, not Nic. The roots were to nic.xyz.
careful, your dinosaur scales are showing.

make is so bad you need automake to manage it.

there are much better tools. sadly, nothing LCD (least common denominator) so as to gain wide traction.

That said, for anyone distributing software, shame on them for not packaging their custom build so as to be runnable via ‘make all’ (just using make to drive everything else).
Indeed. But the guy did some fraud. Not stealing or something criminal (like poisoning a human). Then the guy should have been a good hire for the company? Well, it is complicated. Let's say you need an alpha male for a certain position. Do you pick someone with a sexual harassment history? I mean he might be alpha but then you are exposing your company to risks of this guy harassing other employees.

Same in this situation. He might lie, fabricate, and make facts to push his agenda. This might work depending on what your line of work is doing (ie: maybe you are shady call center anyway). But this might be dangerous if you require complete discipline and this might blow up later (see Uber).

But here is the issue: The guy was rejected based on an emotional response from the hiring guy. He just felt defeated by the skillfulness of the guy. We don't know where the OP operates, so that is that.
Yeah, under "Product" sounds workable too. Under marketing just sounds (to me) bizarre.

Of all the places to put user docs, marketing is not the right one. :)
The most uncomfortable moment of Luis Miguel with a live erection
Yes, these applications are blatantly violating the GDPR: https://www.gdpreu.org/the-regulation/key-concepts/personal-...
That's a pretty low bar for "evil"
This is just theoretical appropriation!
Back in the late 90's before it was Verisign (I can't recall the name), my domain registration could only be changed with an email from my domain. Of course I didn't have my domain up since I switched ISP and had to move my DNS and mail server. Catch 22; what a cluster fuck. Weeks of phone calls with no resolutions.

I was going to Virginia anyway, so I physically showed up at Verisign (I wanted to bring a baseball bat), and explained it to the lady at the front desk. She came back with an engineer who fixed it in 5 minutes.

As a side note, had to do something similar with Garmin. They kept sending me GPS units with horizontal LCD polarization, when vertical is the standard for sun glasses. Showed up and told the clerk to put on my sunglasses and turn her head sideways to her LCD monitor. "Oh yeah, I see". She fetched an engineer, and 1 week later had a GPS with correct polarization.

Sometimes it takes a physical presence; baseball bat optional.
I've uses my fair share of build tools and I think makefiles are horrible. Stringly typed, ad-hoc features, and a really bad language from a PL perspective.

Writing good build systems is genuinely hard, and I think make is not a good build system.
Please see my previous comments on this matter and the additional links provided in those comments: https://news.ycombinator.com/item?id=15910781
It's always tradeoffs.

If by "arrays of codepoints" you mean "each element of the array is a single codepoint", then you get O(1) indexing regarding codepoints, but may use up to 4x the memory as the variable-length encoding.
No need for sarcasm and my argument wasn't that there aren't bugs in programs written in Haskell.

My argument is that people who claim "writing Python is easier" usually ignore that it's writing buggy/throwaway code in Python that is actually easier (aka "look, I can write bugs fast"). Writing large, maintainable and bug-free code in Python is not easier than in other languages -- it's arguably harder, but since that's debatable, I won't argue it here.
That would require an array of 32 bit integers (basically UTF-32). It wastes a lot of space for most characters and doesn't help that much with indexing since user perceived characters can still be composed of many codepoints. Different languages take different approaches.

Python 3.3+, I believe, looks at the string and chooses ASCII/UCS-2/UCS-4 based on the character that takes the highest amount of bytes [1]. Elixir uses UTF-8 for strings (but you can get the codepoints easily), whereas Erlang uses the list of unicode ints style.

[1] https://www.b-list.org/weblog/2017/sep/05/how-python-does-un...
Any time I see ninja or jedi in a job ad I avoid it. Rockstar is borderline because Joel coined the term as far as I am aware and actually has some decent stuff to say about software.
Namecheap online support is seriously kick-butt great. Only complaint is that they don't support Letsencrypt certificates with their web hosting plans.
I haven't found that with any paid Google products. Both Gsuite and Google Adword's support have always been very responsive and easy to reach.
I work for a hosting company and we host our own Openstack based public cloud. We have a hard demand that for production systems we build all binaries we use from source. We actually build these in docker and use that to deploy to production.

What I'm trying to say is that the one doesn't exclude the other.

And we actually use make quite extensively.

I do however see the ops point, building from source hasn't gotten easier.
This is definitely a rant that obscures the underlying point: the introduction of _untrusted_ or _unreliable_ network resources, frequently hidden in a string of dependencies.

I'm baffled how often I see an someone throw this sort of craziness - "go fetch this thing from some random third party" - into very important places, such as the startup procedures of a container. It's something I see in a culture of the two person startup just trying to get something out the door. It's definitely "technical debt", and frequently, it won't get removed. Thus, you try to scale up to meet load, and all these new instances go time out on the same external resource that's randomly having problems... boom! At the worst possible time. Never mind the potential huge security gaps.

But the specific _tools_ aren't the issue here. It's the culture of "ship something now we'll deal with fallout later". A lot of people start using Docker and won't ever look at the Dockerfile, or, will add a Maven dependency and won't even check licenses or security updates for _any_ of the transient dependencies.

Cloud technologies and containerization make everyone just think "we can do things so fast now" and never, ever pay attention to details that can come back to bite you.

On the flip side, it's a good time to be in cybersecurity; because this cultural problem will never, ever, get solved. :)
Because the user experience sucks. I hate copying a URL and have a bunch of meaningless garbage included in wherever I paste it, as happens with pages that leaves UTM artifacts in the query string.

I don't care at all about the tracking aspect of removing UTM, I care about how it makes the internet shittier to use.
Does this do something that Ghostery does not?
Looks like this API will be too expensive for Twitter client developers to afford.

> The public pricing that I’m seeing shows Twitter’s Account Activity API pricing as $2,899/month to get activity updates… for 250 users.

https://twitter.com/BigZaphod/status/996794900208287744
Differs by product. I got excellent support for my Pixel.
Forget hacking! you wanna unhack my constantly blacked and hacked phone line make sure you get a 9/11 movie star to call once you have my IP 146.200.117.18. and telephone number 44(0)1491573890. British mafia think they own a brain they have no idea, i am nice guy family man and they have been blocking my bank account and telephone for 15 years only findout now. so if you know anyone we would appreciate your strength and connections and friendlyness. Lets hope some of you are nice guys
That's what I meant by side channel. So yes, you can split authorization responsibilities into a different entity, but then that entity is going to be able to deanonymize you.

And it wouldn't play well with billing accounts being deactivated / reactivated.

And... now that I think about it, given the tower:location mapping, you'd also have to include bouncing traffic back out to a non-tower-sharing peer and then back into their tower w/ randomized timing, else outer layers of encapsulation would still identify tower association.

Which means latency would be utter crap.
Are you saying that every new black hat is immediately a professional? Or that there aren't any new black hats? In every other activity of human life, new amateurs appear as the older ones become professionals. Where are the visible exploits from the new amateurs?
Bitpress: An Open Protocol for Tracking the Credibility of News
All three of your questions can be answered by either using my own judgement, or reaching out to people more familiar with what I'm trying to accomplish with the product/purchase.

I'd trust a mechanic's opinion on what tools to buy much more than a tool company marketing department. I'd expect this type of thinking (being sceptical of "marketing") is pretty much common sense these days.
Ad Software Dev Sends Threatening Letter to Researchers Who Exposed It
Once again, proving that building a business dependent on other business is a bad long-term idea. I say long-term because Favstar had a good run.

But every app company loses out.
A modern monorail? Literally, looking at the mockup imagery.

This is personal transit, not mass transit and I don't see it solving problems in major metropolitan areas.
Million+ line codebases were written entirely in COBOL.

The world advances.
There are other variables at play in that disparate treatment. Uber has a much longer track record of actively malicious behavior - sabotaging competitors, stalking journalists, building tools that blacklist inspectors and law enforcement, plus the overall toxic culture that got Kalanick pushed out.
Shipboard life was one of the first large scale applications of precise timekeeping. You need it for navigation and for organising shifts and jobs (though I think navigation is the major player here).

For most people at that time there was no need for even hourly timekeeping, much less minutes or seconds. You woke up in the morning and ate your breakfast, milking the cows took however long it took, then you gathered the eggs from the hens, probably around that time you had lunch, then depending on the season you'd do whatever was needed in the fields until the sun started setting and then you ate supper.

But with navigation you had to know how far to sail in any given direction to not get knocked off your course.

I'm certain that the use of 60 and 12 base systems came from the Sumerians and Egyptians, but their application for timekeeping is probably influenced heavily by sailors.
With the current setup, sure, but that's by design. The cellular modem could stay off until you decided to take the call if there was a nationwide page circuit listening, the user would get the ring, see the number the page sent, and if desired, answer, which powers on the modem, hits a tower and connects to a backend system that sent the page which took the incoming call.

Page messages are in-the clear, but that's fixable by (gasp) OTP.
If a company has a threat model and a list of business goals then they would have at least a risk matrix and they might decide what to do: either go the slow way and build software they can trust or accept the risks, backdoors and all the rest. Most companies skip all of that and hope for the best. Not always a conscious decision.

Sometimes they get their unpatched servers encrypted by some ransomware, remember they don't have any backup, close shop and move on to the next business idea. I've seen that happen.
Switter: My six week rollercoaster ride
A Conversation with RIPE NCC Regarding Quasi Networks LTD
From Felix Wilhelm, the original reporter: https://twitter.com/_fel1x/status/996388421273882626

> Thanks to @0dayMarketing this bug has a name, logo and theme song now: http://dynoroot.ninja #dynoroot
This is absolutely hilarious. This dude owns company that builds an array of products around identifying your users, storing as much information about them as possible, and then making that information as actionable as it can.

>A national privacy law would require that companies disclose how they collect your information, use your information, and offer a right-to-be-forgotten, Benioff explained. “If you want to delete your information, you could hit that button and be sure your data is gone forever.”

Okay, want to start by adding that button the Salesforce DMP Page? Right now, it looks like the best I can do is get an opt-out cookie that expires in 6 months [0]. I'll wait.

[0] https://www.salesforce.com/products/marketing-cloud/sfmc/sal...

Edit: I was being facetious. I know exactly why he said this and I don't expect Salesforce to do this until they legally have to. I just hope the irony wasn't lost on anyone.
It's because he's a dick, and not in the good way.

It's not about his opinions, it's about his ineffective and misguided leadership. Why is GNU still fighting the same battles from thirty years ago when new ones have emerged that they're not even paying attention to?

GNU is becoming the PETA of software, and it's not a good look.
It’s ironic. I love python but the syntax for make files was a pain. They’re rather cryptic. I guess they’re a staple time to conquer them once and for all.
The type of organizations I work on, node.js is only used as requirement for Web frontends.

Which I anyway avoid thanks the bundlers in Java and .NET frameworks.
Did you read all those lines yourself? Did you even confirm checksums matched before running them?

I think that's the parent's point. You can build from source, but how do you trust the source? Is it any more egregious to trust a prebuilt binary from a specific website than it is the raw source? If you can't trust the binary being hosted by the author/caretaker, can you really trust the source being hosted or maintained by the author/caretaker?
I'm greatly in favor of the syntax changes. Working with the idiosyncrasies of data in JavaScript used to be a huge pain in the ass. Underscore/Lodash improved that story quite a bit. But ES6 goes a long way towards increasing the expressiveness of the language, such that code doesn't get bogged down in tedious data manipulation and language noise. Unfortunately, the space of possible improvements is a bit limited by the need for backward compatibility (e.g. they couldn't achieve expression-based programming, outside of single-expression arrow functions), but it's still quite good.
This seems slightly ironic from Salesforce. I am pretty sure companies that use Salesforce will also be doing as much tracking of their users as they know how to and feeding that data into Salesforce.
Installing a browser extension so I can read someone's blog post sounds like overkill. :-)
Ghost is looking dated today with those templates and their script tags. Technically speaking, today, I'd rather use Gatsby as a Wordpress front-end.
It's not about being allowed or disallowed. It's about having priorities as a startup. And every random person on the Internet has the right to say that his priorities at this stage would be very different.
Also means fat fat contracting gigs for us luddites to clean up after the move-fast-break-shit-gtfo kids.
In a way, there are parallels with a type system. Yards, a measure taken from a human limb, are for fabric, furlongs are for arable land, and miles (a thousand paces) for roads. Prior to the need for exercises in teaching arithmetic to the masses, it might have seemed rather pointless (if not exactly a type error) to express the measurement of one thing in the units for another.
Also keep in mind that police must have reasonable suspicion that a crime has been committed in order to conduct a search.

While to me it is obvious that using a trained drug-sniffing dog in a suspicion-less search on unopened bags cannot be used to generate the probable cause required for a human to open the bag and search it manually, for some reason, the judges have so far seen fit to dance around that and come up with legal excuses to allow it anyway.

The problem is not that the dogs are bad at identifying drug bags. The problem is that dogs should not be employed in the first place, unless the cops already have a good reason to search the bags. I.e. they saw a suspected drug/money mule go in with a bag and come out empty-handed, but are having trouble identifying which bag was his. They then have reasonable suspicion to perform the search with the dog, and the dog gives reasonable suspicion to open the bags the dog marked. Just going around with a dog, sniffing every bag that comes within range of that nose, should not be allowed.

The face recognition and license plate scanners are the same to me. They may not technically be a search, but they are still breaching the pseudo-anonymity one enjoys by being out in public. Strangers know you're there, but they don't necessarily know who you are, what you are doing, or where you are going. You are likely unnoticed or quickly forgotten. The cops are using this technology to fight crime, but they end up harassing a lot of innocents in the process. They are essentially using the mechanical assistance to follow everyone, all the time, and remember the details for a long, long time. And that sort of behavior is precisely what prompted the 4th Amendment in the first place. The technology has brought back general warrants, worse than ever, and the cops are concealing or lying about what they are doing with it, because it has been illegal in the US for over 230 years.
> A chilled red wine tastes and smells completely different from a non-chilled red wine. Go ahead and try it yourself

I believe this, but it's not what I said. I also assume a room temperature white smells and tastes completely different from a chilled one.

If there is nobody in the world who can, with significant accuracy, sort a set of reds and whites held at the same temperature into a set of reds and a set of whites, then it is reasonable to say that a lot of the conventional wisdom around wine tasting is probably wrong.

If wine tasters are too far up their own butts, use regular people instead, or people with more generally refined palates (e.g. chefs). Train somebody specifically for this task, even. At this point it's a hypothetical exercise.

Claiming e.g. "only trained wine tasters are qualified to make this distinction, and serving wines at 'incorrect' temperatures makes it impossible for trained wine tasters to tell the difference because they've 'overfit their classifiers'" is absolute hogwash.
RMS = Richard Stallman?
I feel like I was just nerd sniped, but this drove me crazy until I thought about it for a bit.

If we treat Earth's orbit as a perfect circle, then the number of milliseconds in a year would be its circumference. To get to pi then, we just need to divide that by its diameter or 2*its radius. In addition, we have the circumference in ms so we want to convert that into a distance or the radius into ms so we need the speed the Earth is rotating around the sun.

The average radius of the Earth to the Sun is 149,600,000 km so the diameter is 299,200,000 km. Earth's average orbital speed is 30 km/s or 0.03 km/ms. Combining these two numbers to get ms, (299,200,000 km / 0.03 km/ms) = 9,973,333,333.333 ms, which is very nearly 10 billion.
> it becomes usable [...] for interfacing with the web browser

As soon as you add DOM integration... all the things people hate about JS in terms of architecture and compromises will show up in WASM.