skysight-inc/HackerNews huggingface dataset:
It really comes down to if it's going to be a silent default or a verbose opt-in.

Anyone got a link to this announcement?
I use Cloudflare's resolver, but I actually agree with this. I don't want every device in my local network ignoring my Pi hole or my custom DNS entries, I don't want the device of everyone in my country being subject to surveillance requests from the NSA (and Cloudflare is legally (if you call warrantless wiretaps legal) required to comply), and I don't like the centralization this brings.

If I recall correctly, this also breaks geographical-based DNS resolution?
More information:
https://blog.nightly.mozilla.org/2018/06/01/improving-dns-pr...

According to this page:

- you can already test this right now

- you can provide your own server

And some more:
https://en.wikipedia.org/wiki/DNS_over_HTTPS
Until the TRR endpoint is blocked.
Why do you think that? My home router will happily resolve sites that only exist on my home server.
Exactly. In Brazil, there are quite a few big buildings build with this methodology (long wells that cool the air). I can think of one hospital in the northeast, one big factory (printing business) near São Paulo, etc.
It works exceptionally well, but as OP mentioned, glass exteriors are not a good idea.
ps: the https://github.com/jroimartin/gocui ui toolkit used here seems very very nice

if people know an equivalent outside go, please comment
https://github.com/tj/git-extras provides "git undo" (among others).
So yet another step to centralize security with browsers and override any descisions of local admins. Great...
Countries other than the US use Firefox, my ISP doesn't spy on me. Cloudflare might.
Perhaps if you only work for small organisations. Medium to large organisations tend to handle these issues relatively smoothly, with company computers and devices usually having their root CA pre-loaded into the trust store - or requiring users to do it themselves in order to connect to the intranet.

Just because you don't see it, doesn't mean its not there!
Your home router will. However, as the article made clear, you won't be able to open that site in Firefox.

Even if you were, you won't be able to get a public TLS certificate for that site, making you unable to serve the site as HTTPS and locking you out of many current and all(!) futue JS and CSS features.

Yes, you can solve both problems by installing overrides. However, this has to be done separately for every client that you want to use and (potentially) for every app that you want to connect to.

If you want to make an intranet-only web page that "just works" with off-the-shelf clients, you'll have to stick to public domain names.
SipHash (2-4) implemented in pure JavaScript and WebAssembly
The article lacks instructions about disabling it or using some other DOH resolvers.

about:config -> search for network.trr -> set network.trr.mode = 5 to completely disable it (I do not recommend this)

The curl wiki has a list of DOH servers: https://github.com/curl/curl/wiki/DNS-over-HTTPS

It should also point to "the other side of the story", the benefits of DOH over classic DNS resolving, for example https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-ove...
Valid feedback.

Agree that it's unlikely for your Facebook connections to stumble upon the same blog post. The chances could well improve though for your closest friends (and maybe co-workers) as there's a better chance of viewing the same websites due to similar likes and interests.

Although to make Cenchat really work to its full potential, you need to establish your followers/followings. When you do, you'll now be able to tag people into bringing them to the website (and comments section) or randomly stumble upon their comments as you're surfing the web. From there you could continue the conversations if any. This is usually what's happening in Facebook right now with viral contents.

For other cases, having conversations with the author is enough for them.
I don't like the way Cloudflare is centralizing everything, but I would use Cloudflare any day over my ISP. Seriously, fuck my ISP.

I would support this feature on the condition that users are able to choose which DNS service to use by default, especially as more public DNS services begin to adopt DoH. Developers like us will also need the ability to use /etc/hosts or route queries to a local instance of dnsmasq.

Obviously there's a switch somewhere in about:config, because Firefox is also involved with the Tor project which requires the ability to route DNS queries through Tor. This switch should be accessible to the user, just like the choice of default search provider.
Seems like you stopped reading after the second example.
I think it's a nice feature to have but it has to be opt-in, you can't set the precedent that it's fine for a web browser to hijack your web traffic, even if it's for a good reason.
If imperial units are so human friendly, why do I have to look them up every time I need to convert between them? I do it occasionally and pretty much the only one I remember is 1 feet = 12 inches.

I think the parent is right that it has mostly to do with what you are used to.
I have never seen the UK press use Fahrenheit, that would be highly unusual. Perhaps in some online publications designed to attract American audiences?
Which is clearly bonkers. Why would Firefox deliberately break people who run Nextcloud on a Raspi at home? There must be something missing here.
Sigh. Mozilla had just made Firefox usable again... And now good reasons for leaving it again are coming up.
Gitup has this for many operations. http://gitup.co/
> Next, you'll want to browse the web from the editor

Well, you're clearly replying to an emacs user. He/she will not find that statement the least hyperbolic.
I think GP meant reasonably acquirable. You can't exactly order a NASA space suit on Amazon, can you?
Where exactly Firefox/Mozilla people say that they plan to enable it by default?
> My local ISP seems more trustworthy to me than a big US-based corporate which acts under the guise of a selfless privacy rights defender.

I have never trusted any local ISP. They’re commonly expressly allowed by law to share roughly whatever they like about you†, and they are known to do so.

Cloudflare has at least promised not to be evil, and is to be audited annually concerning it. If they desire to be evil I have no doubt they could wangle it, but I still trust them way more than I trust any ISP, because they’re already known to be evil under these definitions.

----

† (This is a gross simplification, but it’s broadly true enough in most countries.)
Huge missed opportunity.

Imagine if 1 inch = 2.56 cm
That might be true in the future if and when SNI encryption is widely implemented.
With SNI they also know the domain you're connecting to.
Certificates, not CAs.
That's my point. My parent said that private DNS names have been dead for a while, and I said they aren't.
so true. there are people prosecuted there in much worse ways, but in the international press we only hear about Ai or the HK folks with the subversive bookstore that every already forgot by now.

the folks doing real activism continue to disappear in silence. often drowned in the religious charlatans noise that I will not even name here.
Brainwave Entrainment Sleep Audio – Sleep Salon
From an outside perspective it appeared to me that the leaders in this were actually the physics and mathematics community, rather than ML.
It's a bait-and-switch fraud.
Interesting... thanks for the pointer. I did some testing and the points definitely do seem to cluster along the axis... just increasing the number of iterations of √(r²-n²) seemed to improve it though. At 5, I can't tell the difference anymore:

https://codepen.io/anon/pen/xJJOEq
Markdown isn't perfect, but I find it really weird that you complain about the headers in particular. I never use the underline style, but I don't think you can get more straightforward than the # notation.
I host my own DNS resolver on a dedicated server, Firefox hijacking my DNS traffic without telling me is definitely not an improvement. It can be a nice feature in some situations but having it activated by default without explicit consent should be a big no-no.

I hate this mentality of "our users are complete idiots and we know what's good for them" (I call it the "Gnome" mentality).
I imagine that this just happens an easy way to get a "scaffold" to build the lung on for the moment being.
It's a pretty useless wrapper over "git reset":

https://github.com/tj/git-extras/blob/master/bin/git-undo

It won't help you if you don't understand what the last command did or when it overwrote local files; it'll just make everything worse.
I wonder what kind of ISPs you use? Here in .ch, ISPs can be rather small and you even know the operators personally. So trust ISP >> cloudflare.
That one actually breaks in the new release :-/
Ask HN: How can I contribute to cure aging/death research being a developer?
Poplar?
https://wiki.mozilla.org/Trusted_Recursive_Resolver

>Set `network.trr.mode` to 2 to make DNS Over HTTPS the browser's first choice but use regular DNS as a fallback

So regular DNS entries will still resolve after the lookup over DoH failed.
Can only heavily disagree with this one. The reason why BIND has views is because bigger organisation (like universities) employ different views depending on whether you are internal or external.
I wouldn't say so. Although the reply is only directed to the author or your friends, it's still public and can go viral and influence a lot of people.

Thinking about it in a different way. In real life, you mostly just eavesdrop into someone else's conversations then keep your criticisms to yourself or discuss it among your friends rather than confronting the other group. If you truly need to speak up, there are other platforms well suited for that.
It sounds like you're arguing that because China has extensive propaganda operations, it follows that the U.S. doesn't, or that they're ineffective, or irrelevant?

It would be helpful if you could clarify your point and your argument.
The arguments you made don't challenge what the article says one bit.

The loss aversion hypothesis is the hypothesis that given the choice between either of the following two scenarios:

- Having an object x and then risk losing it.
- Being offered an object x but risk not getting it.

people are more "motivated" by the first than by the second. The claim moreover is that:

- This is a universal motivator, which means it must explain "economic behavior" (which you mention) as well as anything
else. The fact that -- as the article says -- people prefer *keeping* a stock which is just as likely to lose in value as
to gain, is a *perfect* example to illustrate that it is *not* a universal motivator.
- That it is not rational. There are cases where losing something, like for instance money, is *truly* more damaging
than gaining the equivalent amount of money. For example, if I lost $100,000 it would be much more devastating than if I
gained $100,000 -- in this scenario, it's not a psychological *bias* but in fact a completely rational belief. This example
is in the article. You can not use examples like this one to argue in favour of "loss aversion", because there would be no
evidence of an irrational bias.

Also, the fact that you keep applying the "loss aversion" hypothesis as broadly as possible, to things like wars and arguments, suggests you're assuming it applies everywhere. What about the stock example, which is mentioned in the article? That ought to prove you wrong, no?
For now, yes. There are efforts to get it into the Linux kernel, see https://lists.zx2c4.com/pipermail/wireguard/2018-July/003176...
SEEKING WORK

watchOS development

Mountain View, CA - local or remote

austinconlon@icloud.com

github.com/AustinConlon
I disagree.

Whether we record a temperature on earth or estimate the temperature of the big bang, we are dealing with the same class of rules and laws, of physics, and performing the same basic task of coming to a conclusion about the some hidden property based on some other observable properties.

The machines we make to measure temperature come from the same stuff as the universe does, so there isn't anything special with regard to reading a value from a machine vs. calculating a temperature based on the properties of the stars and galaxies in the universe. Therefore, regardless of when the temperature has occurred, or where it happened, we are still measuring it. And as long as it was written down, it has been recorded.
I really wouldn't count on that being the case. Even if it's the case now for a specific service I don't think they take as much care of those blacklists as they do of active accounts.
That depends. Cloudflare probably (did not check) uses anycast and thus their DNS servers are actually in the specfic region. This however does not change the problem of the legal authority still being in the US, as you pointed out.
Google does not use gRPC internally it, like k8s, it is an open re-implementation of an internal google technology. Also, like k8s & Bazel, it is less advanced and lower performance than their internal technology.

At a high level Google is open sourcing things that have genuine value, but also make integration with their money making services easier.
Yeah, can't edit now.

{(q%x),z%q:-.5*y+signum[y]*sqrt(y*y)-4*x*z}
It is especially surprising, because so far Mozilla could always be trusted.
Follow the Yellowbrick Road to an All-Flash Data Warehouse
> I have never trusted any local ISP.

You are forgetting that the author is from Switzerland.
Fully agree. I was also about to take the final move chromium -> firefox. Maybe it's time to fork firefox?
Bangladesh govt disables mobile internet after alleged rape/murdered protesters
I live in Australia; ISPs are basically all big entities, altogether unworthy of trust. The US is broadly similar. In both countries, you do get some obscure tiny ISPs, but they’re fairly rare overall.

I’ve also spent time in India with a small ISP, and I hated their DNS: they actively intercepted all DNS and replaced it with their own OpenDNS arrangement, involving the horrible NXDOMAIN replacement that was still a thing at the time, and in such a way that you couldn’t opt out of it! I don’t know how trustworthy they might or might not have been (I didn’t personally know them), but I do know that I loathed their technical decisions and would fain have bypassed them.
This feature will break dns-based geo-lookup, so as a user I might get directed to services that are 130ms away from me instead of 1-5ms. For any client application, this will likely have strong negative effects on user experience.
Ash HN: What has your experience been with Toptal, 99designs or Dribble?
Where has the design quality been the best?
Nothing against Cloudflare, but I don’t think it is good in general for the Internet that they are getting so critical.

For them this sounds like a good deal (is money involved here?). Having more control of DNS should mean they can provide better service for their customers.
Updated my parent comment to more precisely say what I meant.
I get the point. If your ISP is also not trustworthy, the situation probably does not change much for you. Then again, maybe the right solution is to look at how to get back trustworthy ISPs.
What did Earth look like X million years ago?
That sounds good, I've learned how to do SPF for outgoing mail but not yet DKIM - one day!

I saw a talk a few years ago on aggregating DNS lookups for insight into many things, spam included. The presenter said he had great results from simply blocking mail from domains that were less than 24hrs old.
Violent protests are ongoing. There is a protester running a live Reddit thread who claims to be in danger for his life: https://www.reddit.com/live/11e4mknpbhjqr/

Also see https://www.reddit.com/r/worldnews/comments/94ivyd/school_st...

None of the major US news outlets seems to be covering this story. It's incredibly brutal.
Agree - cloudflare probably does a good job here, but again: centralisation is making the Internet weaker. Also hands even more control into one entity's hands
Nice, but the README suggests it only does commits. I already have a simple alias for that. The parent comment wanted to undo anything.
> - you can provide your own server

Nobody will do this except for maybe 5 individuals and a few dozen cooperations simply because there are no other public DoH servers around.
It might (completely guessing here) also mean that lungs that wouldn't be suitable for normal transplant due to health or condition, might be suitable to be used in this way.
Most country switch to Right side of the road because they hated the Brits. Japan uses the left side of the road because that is simply the right UX.
Game of Life and death
I somewhat doubt cloudflare have overlooked that
Firefox is still great. You can turn this off trivially or provide your own server. This is, however, an excellent step towards securing the web.
> Does anyone know the process that would take this from pig to human?

Pre-clinical studies on animals, then the usual clinical trial series from Phase I to III on humans. And depending on the sample size required by authorities for approval, and how fast they can produce and transplant lungs, it could take 10 years or likely longer.
78F (25.5C) is not that hot.

On my A/C unit, 25C is the factory default setting in cooling mode (20C for heating). I don't know why but in the US, people tend to set their A/C to arctic mode.
Mobile apps built using Docker  Does it exist
> For them this sounds like a good deal (is money involved here?).

There is a lot of money involved. When you resolve DNS only over Cloudflare, all Cloudflare sites will have a much lower DNS resolution time than any domain that is not hosted by CF's DNS service. CF can also do geo DNS more efficiently, potentially saving millions in edge nodes.
> They’re commonly expressly allowed by law to share roughly whatever they like about you†, and they are known to do so.

Why would this not apply to Cloudflare as well?
> Also, like k8s & Bazel, [gRPC] is less advanced and lower performance than their internal technology.

Are you sure about that?
As far as I know gRPC is literally just as good as Bazel, which is why Google is even migrating to it internally.

For instance this comment agrees with me: https://news.ycombinator.com/item?id=12348286
I switched from vim full-time to using vscode with the vim plugin for most things. The plugin has gotten better over time and at this point all of my familiar bindings just work as they do in vim. Changing the font is easy.
Server room maybe?
Oh god yes! I see it often in our perceptions of "the other" as well. Other cities, other societies, other places....
This gets tricky with things like blockchains.
I turned off everything, autocomplete (the auto drop down menu style), the status bar, line numbers, git gutter, color changes from git in the tree view, live linting. Main thing enabled is auto format on save, and a bunch of 1-2 letter aliases for common commands. My editor is a sea of calm tranquility now.
> (This is a gross simplification, but it’s broadly true enough in most countries.)

Seems like you forget Europe and e.g. GDPR.

It would be a big no-no in Denmark: My bank has one division for normal accounts and another for mastercard. The 2 divisions are separate companies, so I have to sign a paper to allow the MasterCard division to know about my normal account.

So Danes have no hesitation giving out personal information as they know it’s protected by law. “We don’t sell your info” is redundant in Denmark.
What's the source for the rapes/murders? Is this confirmed?
But which user will be able to figure that out?
Make It So: Patrick Stewart to Reprise Jean-Luc Picard in New ‘Star Trek’ Show
Don't rely on it though.
Yahoo made a large number of disused addresses available.
anycast is the solution here
If they can get in to your laptop then they can view your webmail.

Also disk encryption.
For reference, the privacy agreement between Cloudflare and Mozilla: https://developers.cloudflare.com/1.1.1.1/commitment-to-priv...
I think, the scaffold is an extremely important part of the process, it has chemical and physical signals which allow stem cells to develop properly. I haven’t heard of a plastic scaffold being used except in Macchiarini scandal, where the patients either died or had to have their artificial windpipe replaced. And that was for a windpipe which is a layered 2D structure, not something like a lung with an enormously complicated 3D vasculature. I suspect artificial scaffolds will be far more difficult than the process covered here.
I don't find the listed examples convincing. Especially:

> And people are not particularly likely to sell a stock they believe has even odds of going up or down in price (in fact, in one study I performed, over 80 percent of participants said they would hold on to it).

How naïve is that? We're not interested in what people said they would do. We want to know what they did!
The Explosive-Carrying Drones in Venezuela Won’t Be the Last
I was precisely trying to explain why "it's hard", not "it's impossible".
It looks promising, thank you very much.
I wonder how much this process reverses the age of the lungs, if you take the lungs of an 80 year old, wash them, reseed them and put them in a 20 year old, what’s the result?
I think he forgot to write the part about how it is dangerous or not 'more secure in general' after explaining why it is for the average user who is likely to connect to any open wifi network without setting static DNS.
It seems like you are right. On the company's pages I find "... Instead of doing this, Cloudflare will make the request from one of their own IP addresses near the user. This provides geolocation without tying it to a particular user. ".

Still, my concern is that this is no longer a function of the technology, but by a service that is maintained by one company, limited to the coverage that they provide in different parts of the world.
That s just a feature. You can choose not to use it. Why so much noise?
http://blog.geomblog.org/2013/01/a-sampling-gem-sampling-fro...
There are people working on encrypted SNI: https://huitema.wordpress.com/2017/09/12/cracking-the-sni-en... it'll take some time, but we'll get there hopefull soon.
DNS over HTTPS is a great idea. There's nothing wrong with the protocol or Mozilla's implementation of it. This article is all about Mozilla's default choice for a DNS provider. I think Cloudflare is actually a reasonable choice though I'm not a big fan of their annoying captchas that I get served whenever I use vpns.

There's nothing sneaky going on here; which the article seems to imply.

Currently there is no UI to configure any of this yet (other than about:config) but you can trivially select any DNS provider that implements this in the same place where you turn this on. The relevant setting is network.trr.uri. Also, you need to opt in to this to turn it on so you'd be reviewing this setting as well. Also you can configure how this is used, how and when it falls back to normal DNS, etc.

You can run your own server if you want; or use the one from your provider if/when they implement this. For obvious reasons, there are not a lot of usable servers yet but it seems Google has implemented this as well. So I assume they plan to roll this out for Chrome at some point.

The premise of this article seems to be that you should trust your provider to do DNS and do it well. I'm sorry to say but for the vast majority of providers I have experience with the opposite is the case. I've had providers redirect dns failures to advertising pages in the past, shitty performance (600 ms or worse), and generally trying to rip me off with bad network infrastructure related outages while charging me a premium for bandwidth clearly not delivered via obviously very congested infrastructure. I have no reason whatsoever to trust them, at all. The less they can learn from my traffic the better.
Google Cache link: https://webcache.googleusercontent.com/search?source=hp&ei=A...