skysight-inc/HackerNews huggingface dataset:
not to mention that, historically and intrinsically, visiting a site or using someones application is a voluntary activity. no one is forcing the user to do anything and the user shouldn't be able to force the developers to do anything.
I have the same PC MasterCard, but in the PC Bank website that was replaced by Simplii, I found that the last character of my password, a period, did not matter to get logged in. I could enter it, or not. It worked either way. Perhaps something similar is happening for you.
There is nothing stopping them from doing so though. Maybe they're having a bad day or simply don't like you very much. Some of the data protection authorities have like one to two dozen people working at it total.
This is awesome for a silent disco home party! Or silent disco’s for larger areas where connection is an issue

With that in mind; maybe voting for the next song instead of current?
Wheres the source of this newer Google table? Can not find it nor the announcement of it.
Yeah they can- theres a comment somewhere that explains how. In short: Click the "Playlists" tab, select your playlist, click "Add Playlist to Queue"
If true it means that Cloudflare's DNS server can't be trusted.
I really identified with what he said about Twitter. It's a service that appeals to me, with my love of the firehose of information. Most people just don't want that - and that's fine.
Traffic meant to go to 1.1.1.1 (cloudflare DNS) could be routed elsewhere. Since this is a common DNS server, this could be used to alter domain resolution for people that use it.
Yup, happy switcher from Namecheap to NameSilo for a while now.
America does not have a truck driver shortage.
Ah! That may have been the reason why my site wasn't resolving earlier today. It was the weirdest situation with people from all over the planet complaining without any apparent pattern, a RIPE check of the site from 10 different locations showed no issues in connectivity.

Thanks for posting this.
So what do you use instead of Kubernetes? Docker Swarm? Manually allocating containers on specific machines? Something else?
The World Isn’t Prepared for Retirement
The Closure compiler's optimization baseline is drastically ahead of any other JS optimizer. It's a diminishing returns sort of thing I would think.

I'd be interested in seeing what a large typescript project would look like run through https://github.com/angular/tsickle.
could be a problem for wifi captive portals that redirect to 1.1.1.1, but most of them would never route to begin with.
However, I believe the real issue is that it is a free DNS server, so someone could redirect all domains that do not use ssl pinning.
> firefox has changed this to prompt users before sending the report

Wasn't it always that way? I remember those opt-in crash dialogs from a long time ago – I think they already had them in Netscape, or at least the (pre-Firefox) Mozilla suite.
> One of the easiest way to find meaning then, is to strive to reduce other sentient beings sufferings, and to increase their happiness.

This is basically https://en.wikipedia.org/wiki/Utilitarianism and the simple counterexample to that is https://en.wikipedia.org/wiki/Utility_monster

At any rate - it's clear to me that these goals are self-created, and different between different people, so claiming them to be universal seems wrong.
Great domain provider i second that. Furthermore for us domains they have customer support directly in usa. Namecheap customer support is outsourced to romania. I dont have anything against it but i rather have my us based domains names looked at by us-personel.
That's a perfect study to bring in response to typical comments quoting Richard Feynman's complaints that psychologists rarely replicate studies exactly.
My understanding is that if someone is not a customer, and I hold no data on them, then I can safely ignore any requests. At worst I can automate a response saying "I hold no data on you".

For customers, how many requests would you expect? One in 100? One in 1000? If I store the data securely, and I only use it for the purpose it was intended, I can automate a response that (a) Sends them a copy of their data, (b) points them at the privacy policy saying I don't do anything unexpected with their data, and (c) offer a link to delete their data.

Once set up, these should not place a significant burden on the provider of a service.

I suspect we are arguing about how much work will be required. I'm saying that once set up, the administrative overhead is negligible, you are saying it isn't. Certainly the services I run have seen no increase in administrative load, I'd be interested to know who has seen a significant increase (once already set up) and why.
Over in the UK NationWide started sending out the little pin/auth machines 10-ish years ago (from memory). They're pretty smart about requiring it for anything "unusual" but allowing standard stuff (moving money between my own accounts, paying my usual credit card bill) is fine based purely on password login.
If GDPR was an environment law, it would say, "Hurting the environment means you can be subject to a $20,000,000 fine." Which sounds great! Except the biggest thing most people can do to hurt the environment, by far, is international flights. And everyone is wondering if the law meant to cover flights. And lots of people are saying, "You shouldn't be flying far anyway." And one expert is saying, obviously flights are excluded, and another is saying, fines are very likely. Etc etc.
Spill the beans! What are these blogs ? Or are you afraid of retribution from this shadowy cabal?
Ask HN: How to develop clarity of thoughts?
How can I go about developing clarity and organization of thoughts? For example, Given an ambiguous problem statement or topic of discussion, how to break it into coherent rational pieces.

I am looking for books, articles, videos, courses or any resources that might be helpful.

Thanks.
1.1.1.1 is a DNS resolver that does not track activity. A BGP compromise means that someone could have compromised it and redirect/intercept traffic of those trusting it to be Cloudflare.
Somebody other than Cloudflare (the current holders) of the IP is receiving some of the traffic meant for it. Usuall hijack reasons are to point users to fake sites (I point yourbank.com to my own server) and phish.
1.1.1.1 is the primary IP for CloudFlare’s new DNS service. A BGP Hijack is when the destination route for that IP changes from it’s legit target to somewhere else. Often times it’s accidental but could be part of a wider attack.

In the case of DNS it’s particularly nasty as the attacker would control address resolution (say redirecting traffic for your bank to a phishing site) for everyone using 1.1.1.1 without more specific mitigations. Combined with long DNS cache times this could be a problem for a while.
So if American laws (free speech) don't protect Americans in Germany, why should German laws (GDPR) protect Germans in the US?

(note, I fully support the spirit of this law, and am happy they are shutting down the data cartels abuses)
This is something different. The suit is not claiming that there's discrimination in the hiring processes, but in who sees the ads for the jobs in the first place.

Should it be illegal to advertise a job or housing in Black Enterprise magazine, because the readers are overwhelmingly African American? Or illegal to advertise in the Wall Street Journal because they're not?
There's a few nice simulations on momentum here: https://landgreen.github.io/physics/notes/momentum/1-intro/i...

And here on gravity: https://landgreen.github.io/physics/notes/gravity/gravitatio...
e.g.: https://landgreen.github.io/physics/notes/circuits/Ohm's%20L...
How effective is this? Looking at https://bgp.he.net/ip/1.1.1.1, 1.1.1.0/24 is apparently "ROA Signed and Valid". I don't know a lot about BGP. Does this mean hijacking this subnet is a bit harder than unsigned ones because some or all ISPs verify this announcement? Or is it faster/easier to detect?

Maybe a wider question: is there some way to prevent BGP hijacking?
The Oversimplified AWS (Amazon Web Services) Guide
ASN 58879 belongs to Shanghai Anchang Network Security Technology Co.,Ltd (China) according to https://ipinfo.io/AS58879

website: https://www.anchnet.com/
>No, but you are the de-facto DPO, so if you receive a DSAR then you probably should answer it, though with your user counts I think the chances of that are very small.

I think that we might have this view about it right now, but I could easily see a scenario, where somebody targets you for "harassment" through something like this. Maybe you say something somebody else doesn't like on Twitter and they do that to you.
> Yup. Portugal and Prohibition also proved it yet again. Drugs, gambling and prostitution oughta be decriminalized

No, they should be legalised, regulated, and taxed and run as legitimate business.

Decriminalisation is not a good half way step, because it is more of "we tolerate this". It is harder to tax / regulate and manage legitimate businesses. For example, in Holland cannabis is decriminalised, but the coffee shops cannot (couldn't?) buy it legally and still had to get it from criminal networks.

The only way is complete legislation. No pick and choose. Cannabis legal, MDMA legal, heroin no no no. It would still leave a market for the blackmarket to control and those in are perhaps the most in need of legalised services. For example, anyone buying a gram of heroin a day probably needs help / advice / guidance more than someone buying half a gram of coke each Friday night.

I wouldn't even stop at legislation. In some cases, the drugs should be prescribed freely in the most severe cases of addiction to either help them taper off, or just to accept they will need to maintain a drug dependence until death to leave as relatively normal and productive life as possible. Which ends up better and cheaper for all
Cloudflare operates a public DNS server on 1.1.1.1 that has gotten a lot of attention since it was launched a few months ago. If a bad actor hijacks it, they can answer DNS queries with malicious answers, similar to the Amazon Route53 hijack that was used to redirect an Etherium wallet site to a fake server: https://www.internetsociety.org/blog/2018/04/amazons-route-5...
personally im not super familiar but i found this recent article from cloudfare that gives some background information https://blog.cloudflare.com/bgp-leaks-and-crypto-currencies/
The only response this would get is 'you have been confirmed in our systems and your right to be forgotten has been processed. Thank you.'
It is not open sourced yet but a presentation was given in cppcon17
>this just shows how lacking cnns quality is nowadays.

Do I _really_ need to link to all the other news companies saying the same thing? There are lawsuits started already.
Why are we down-voting this post? The argument seems logical. Respond with counter-points instead, please..
this is totally illogical and false with a basic understanding of economics. by definition the new startup is DOA without capital for compliance/proof of compliance/mandated features whereas the bigger business has capital.
> It is only a matter of time before you'll sit down in a citizenship interview, and they'll have a print out of your social media posts and a bunch of questions about any that seem to criticize the government.

What you describe has been the case in the US since the early 2000s. The "matter of time" is about negative 15 years or so. People on HN often seem to think the government is insanely slow-moving and incompetent. While there are various snags, the whole system moves constantly and is staffed by many perfectly competent people who ask questions like "why aren't we checking the social media accounts of citizenship applicants to weed out the terrorists and commies?" and before too long, they are.
Your Recycling Gets Recycled, Right? Maybe, or Maybe Not
> or where some distrust is warranted

There have been enough data breaches that distrust is always warranted when a company has my data.
I doubt that this is a genuine hijacking attempt. All it takes is a Cisco router and some IT admin making up an address.
Ask HN: Is there an industry where older age is a positive?
I'm beyond the median age in the tech industry. I still love it but I'm facing facts. What industry (or industries) actually values the wisdom and experience of older workers more than the malleability of younger ones?
so like Wile E. Coyote, Genius?

Also can't ignore that this is on a domain wiley.com hahaha
DNS flag day: stop working around broken EDNS servers after 2019-02-01
When asked, "what will make you stop looking at other jobs and join us today," my response is always, "a $500k salary." We laugh, but I'm not kidding.
There is a lot stopping them, namely the law itself and the courts.

But that is irrelevant in this thread.

There is no lower floor. That was a lie!

The authorities can easily fine someone a thousand Euros or a million Euros.
FWIW my wife and I have been running Debian on X-series Thinkpads for years with no problems except for having trouble some printers and with the occasional WiFi hotspot. Linux on the desktop Just Works in our experience.

I have to run Windows 10 on a system for work and I have to say the Linux install and setup experience is way nicer.
This only happens if SMS get's used in the password-recovery workflow. I don't think there is evidence that TD is using SMS to replace password reset.

So I really don't see how this makes security worse.
In other words, some entity that is not cloudflare claimed to have the best route to (some of?) cloudflare's IP ranges, including 1.1.1.1.

If malicious, this could be someone trying to redirect 1.1.1.1 traffic elsewhere.

There have also been a lot of historical examples of misconfiguring BGP (the way big internet networks talk to each other and discuss where to send packets), such as a florida ISP accidentally claiming the best route to some major internet service and getting flooded with everyone's traffic until it died.

BGP is also really insecure (back in 2008 pakistan effectively brought down youtube for instance through BGP -- which doesnt require any authentication to claim you have the best route to X).
Here: https://m.youtube.com/watch?v=ncHmEUmJZf4

Recommended watch. Matt is a fun presenter.
> Any good suggestions?

"Conqueror of worlds". Robert Conqueror of Worlds Smith sound like you know what you're doing when handling a nuke.
Please post the list of all sites you visited in the past year and you'll get an absolutely serious answer.
> But the redux actions and reducers are all pretty much the same (small changes depending on how to store state but that could definitely be abstracted away).

Are you using a monorepo? The reducers/actions are copied/pasted for each version? Thanks!
They could also simply log all the information and have made the server appeared to continue to operate as normal, since most fooling with the DNS packets would yield certificate errors for many sites (Google, YouTube, etc.) Most of the time someone comes out and says the BGP hijacking was an accident.

A bit of a Hanlon's razor situation.
Do you think that's the same thing as is alleged in the submission?
Show HN: Twitter Bot for Taking Screen Captures of Tweets
How to make a paper table?
The difference is WSJ doesn't have an option that says "only show this ad to white readers".
> subject up to a $20,000,000 fine

Up to 4% or 20Mill. A small startup won't get slapped with that size of a fine. If you are worried about those numbers, you should be able to hire a lawyer and ensure you are in compliance.
No, parens are parens, used for grouping. The rest is true, though: brackets `[`, `]` are essentially two flavors of identity function (dyadic) and `{`, `}` are indexing operators (not sure I remember right, but I think `(<1;2) { A` would be `A[1][2]` in more common languages).
Just for the sake of comparison, the same proof in Coq might be written:

Theorem and_commutative (P Q : Prop) : P ∧ Q → Q ∧ P.
Proof.
intros [HP HQ].
split.
- apply HQ.
- apply HP.
Qed.

"intros [HP HQ]" separates the two conjuncts of the hypothesis into separate hypotheses (P, and Q); "split" breaks the goal (Q ∧ P) into two subgoals (Q, and P), and the two applications prove the two subgoals.

It could also be written:

Theorem and_commutative_2 (P Q : Prop) : P ∧ Q → Q ∧ P.
Proof. tauto. Qed.

...as the proof tactic "tauto" is capable of proving this (simple) theorem immediately.
I'm not sure I agree that it's Facebook's fault that people use its platform to target ads illegally, but clearly you shouldn't be targeting job ads to people by age.
Great work! The design is appealing, and the content is displayed in a way that’s easy to digest - even on mobile.

Do you have any plans of adding the functionality to view prices in alternate currencies? AUD would be awesome. BTCMarkets.net[0] may also be another exchange worth looking at adding to your exchanges section.

Small side note: The link in the first paragraph of your “about” section currently contains a typo (httsp://numb3.rs instead of https://).

Good job!

[0] https://github.com/BTCMarkets/API/wiki/Market-data-API
I was reading a book[1] on bacteria phages aka viruses that attack bacteria and they mentioned that in countries that used phages (e.g. Soviet Russia due to a lack of antibiotics), the sewage plant is the first place they would go to look for phages to combat intestinal diseases. There were large amounts of the offending bacteria so it was a prime place to find viruses that had evolved to fight them.

[1] Viruses vs Superbugs https://amzn.to/2IZXZiJ
Share any tweet via DM to @screenshotguru and it will reply with a high-res screenshot image of the tweet.

Website: https://screenshot.guru

Chrome Extension: https://chrome.google.com/webstore/detail/twitter-screenshot...

Video Tutorial: https://www.youtube.com/watch?v=u8u1nCOk9oM
I'm assuming this would/could be done by a malicious party in order to substitute different IP addresses for some sites in an attempt to direct traffic for nefarious purposes.

If my host is configured to use DNSSEC would that prevent sites from resolving?

If DNSSEC is not employed and a connection is directed to a malicious site (using https) wouldn't that prevent the connection?

(I'm afraid I'm out of my depth on the implications of this aspect of networking and wondering about the security implications for me since I'm using Cloudflare DNS servers.)
So, where do the veterans go? https://news.ycombinator.com/item?id=17179054
Organizations Failed to Wake Up to Security Issues
Looks really great. As a developer I would be way more motivated by this than some free credits for my companies account.

How do you handle fulfillment? Seems like it could be a real time suck if it is manual? Also do you ship internationally?
Would be great to give the user an option to send statistics or something like that to do just that.

I really like VSC. But things like this really question all the positive experience. I doubt product management is going to help here.

Will now scan network transfer VSC is causing. In many other cases I wouldn't even bother anymore.
It has little to do with statistical understanding.

All psych students are required to study stats, and review the study design before starting.

It has everything to with a more systemic problem - publish or perish.

Students and professors alike are basically forced to run new studies. Conducting psych studies takes a lot of money and time because you're dealing with people. And that money and time isn't always available - so your standards drop a lot so you can just graduate or keep researching.
Hah. Everything needs to be data or an algorithm these days. Sentiment analysis of journal entries, oh boy...
Show HN: Benefits of Email Drip Campaigns
Email drip campaigns are automated #email sequences that send pre-written content to leads at pre-defined time intervals based on actions the leads have taken. Know how to create them.

https://www.engagebay.com/blog/8-simple-steps-creating-power...
Wouldn't be surprised to see some blackhat services come out that offer to drown competitors with these requests.
Do you mean it can't ever be trusted? Or just right now? BGP hijacking isn't that difficult to pull off.

I hope you're not trusting 8.8.8.8 either: https://twitter.com/bgpmon/status/445266642616868864
If I were you, I would try to go through the vue tutorials first and then probably try something like https://bootstrap-vue.js.org/.

The bootsrap itself [2] is kinda industry standard among saas applications (and reason why they look kinda similar ;)

[2] https://getbootstrap.com/
I like this work. We should be seeing more exploratory posts like this one.

I find it interesting that both google's and skarupke@'s hash map have exactly the same name: flat_hash_map. Maybe boost-inspired ?
Skimming the bucket code, it appears that the rate-limiting information is stored in a map. It doesn't appear to implement an LRU or attempt to clean up stale entries.

If I feed this user-supplied keys such as IP address or cookies, doesn't this mean it will grow without bound?
Can confirm. I also got ones from RBS around the same time.
Ask HN: Its ok if we mention in our TOS that we are not GDPR compliant?
ALso, as an optimist that misses a high goal, you may still end up in a great place. A pessimist that achieves his may not end up where he really wanted to be.
"If you keep doing what you have been doing, you're going to keep getting what you've got"
Let me tip you off about something people with actual business experience know: if you don't get your stuff in front of reviewers, flawed as it may be, you fail. Hardware has long lead times. To get design wins, you have to sell on promise. Even some of Intel's own foundational products were objectively worse than contemporaries (e.g. even the IBM PC designers knew that the 68K was a better chip than the 8088) but got better over time. They got better because they had the wins due to selling on promise, and therefore have the funds. Any Intel competitor who waits until their product is better than Intel's on every metric, beyond any doubt, before they show anything to anyone, will run out of funding and quietly die.

As I said, one has to make educated guesses about what kinds of problems are likely to be fixed before full launch. Dogmatic statements based on experience limited to irrelevant domains aren't useful to anyone, and plain old pro-Intel FUD even less so.
How gender bias affects healthcare
Gloo – The Function Gateway
Very cool! I'm impressed! Even just as a replacement for the Spotify UI.
Third Time’s a Charm: Verge Suffers 51% Attack yet Again
This is all good, but as a Canadian I don't want to be forced to buy a TV license to cover the CBC's budget.

The UK essentially taxes households with a TV in order to prop up the BBC. When I was growing up in the UK in the early 2000s we didn't watch broadcast TV but we had a TV. A couple of times a govt license officer came over and demanded to be let in the house to inspect our TVs. I loved how my dad stood up to him and told him to basically fuck off.
reminder: never enter your email on one of those 'have i been pwned databases' . Find a way to download the database offline and then check it.
This is what you get by leaving the invisible hand of the free market to "regulate" itself. Companies have enough rope to hang themselves dozens of times over with the way they collect and handle personal information (startups included), so it's no surprise that strong user-focused data protection is now law.
Loblaws sold their interest in PC Financial last year sometime. CIBC took it over.
I suspect if you tried to start up a broadcast TV network without purchasing the appropriate spectrum (which isn't available), you'd be arrested and charged within a week.