skysight-inc/HackerNews huggingface dataset:
> Today the ISP could, with a bunch of effort, re-route the traffic

Injecting a route into your IGP is pretty trivial, any ISP with an engineer with more than 6 month's experience could manage this.

> though I haven't seen any evidence that any of them do that

Unless you've actually looked, and performed pcap analysis of what your dns request/response looks like to try and determine if your ISP is intercepting, you can't be sure.

That said, several ISPs used to do this quite transparently (pun not intended) in the early 2000s, to return advertising pages whenever a DNS query failed. Some of them would do this on their own DNS servers (that were the default pushed to your CPE, which was then the default for your network), some of them would actually hijack anything going to udp/53. This used to be prevalent for a while.

Then again, who's making more money monetising your activity? Your ISP or Google? Given that your ISP can already see every IP you visit and how much traffic you exchange with that counterparty, who would you rather protect your DNS requests from? Them or Google?
Patricia Lockwood is a national treasure. Check out Rape Joke as one powerful example. But it’s strange to see her on hn

Headline really needs punctuation.
From what I understand, the wealthy will rent out their yachts when unused. Especially for people who could barely afford the yacht in the first place. Still horribly inefficient and wasteful, but not quite so unused.
So basically the guy has ~1m followers on instagram, is helicoptered from yacht to yacht and gets paid to hang out with rich people and wear expensive watches, in the most beautiful places.

He also seems like a nice person.

In contrast author looks like a douchebag, portraying him in a bad light, as a lanky lonely person, whose financial security is at the mercy of instagram.

To me author looks like a petty jealous person who wants to gain by undermining others that are successful.
Possibly feasible with local netfilter/iptables rules or maybe userland proxy/rerouter. set /etc/resolv.conf to localhost:53, have that forward to 8.8.8.8:1053 or whatever, but without encryption it could be detected I'm guess with deep packet filtering (hopefully beyond the thoroughput constraints of eyeball ISPs)
https://youtu.be/wFaHArkYLsM

"This animated short proposes what many earthlings have long feared -- that the automobile has inherited the planet. When life on Earth is portrayed as one long, unending conga-line of cars, a crew of extra-terrestrial visitors understandably assume they are the dominant race. While humans, on the other hand, are merely parasites. An Oscar® nominee, this film serves as an entertaining case study."
Just like the estimates for building dams don't include the ripple effect of dying fish, dying fisheries, and the health impact on fishers. (Or the relocation of people to create dam lakes, leading to stress-related deaths just like Fukushima relocations might have...)

My point: Once you go into small and hard-to-quantify large-population effects, your error margins become ridiculous and you can pull out any conclusion out of your hat...
Do you have any estimate of how many buyers actually want to sail around / host parties, and for how many it's some kind of tax evasion / money laundering scheme?

I don't know any details but always wonder about this... an easy-to-move super-expensive asset, physically in Cannes but legally in the Bahamas... there must be many schemes.
I love movies and TV shows about time travel. But I just don't think it's possible at all.

If you could travel back in time, that would mean that future and the past must co-exist with the present. If the pasts exists for us, the future exists, which means events have already happened, which means if time travel was to be invented then it would have already happened and someone would have traveled back to the past.

But if traveling back to the past, and changing something, then any changes to the past would alter the future, but changing the past could prevent time travel being invented which would mean the person never traveled back to change the past to alter the future to begin with...

Unless changing the past splits time into 2 with both outcomes.

If the purpose of traveling back in time is to fix a problem that occurs in the future, but the act of changing the past splits time, then the time you knew would not be altered, only the alternative timeline you created.

But if the past and future already exist, and time travel is possible, then all possible futures have ready happened and all possible pasts have already happened which would mean you have infinite timelines of every possible outcome of time itself. Because any change to the past in a given timeline only splits time to another outcome for the timeline, we would never know if our future changed or not making the entire event pointless.

I only believe it's possible to travel to the future, but not 'skip' in the same way back to the future does. Only freeze ourself and awake in the future which is kind of just pausing and letting time pass by.

^ my opinion.
Video Demo - https://www.youtube.com/watch?v=p7GRGiicO1c
I have a longstanding view that the best personal assistant is one you write for yourself: It can cover your needs and respond to how you'd prefer to interact with it. A lot of sophistication isn't needed because it doesn't have to try to meet a lowest common denominator user.
It's not about rich or poor. It's about whether or not you had them at the time the treaty was written.

China, UK & France are in. Japan & Germany are out, because they were occupied and demilitarised at the time. Both large, rich countries. China was large, but poor at that time.
Yep, there is no reason to ever accept this clause. On the off-chance a company objects to you removing it, you don't want to work for them anyway.
All true, but front page space is the scarcest resource on HN. The approach I explained at https://news.ycombinator.com/item?id=19103247 has proven to work well.

Btw, you can see front page stories you might have missed at https://news.ycombinator.com/front.
Stay tuned then. I was already planning to write something about scene graphs and component-based models. Nothing forbids to write also about the rest.
Dropbox ignores how roaming is the new normal, refuses to protect photos
Voterfied: A blockchain-based public survey startup
After clicking through 10 ppc links to porn sites to unlock the real redirect
> Honest question: is there a specific person who is smugly grinning about this at google.

I sort-of understand where you're coming from, but isn't this needlessly hostile? Unlike in the case of "spying innovation" you brought up, Chrome's "Scroll to Text" seems to be intended with the user's benefit in mind (and only indirectly Google's — via greater user satisfaction, but that's exactly the product design model we want).

It would have obviously been far preferable if this had gone through the "proper channels" (discussion at the W3C, standardisation etc. first), but I don't think that there's any evidence to believe that anybody at Google thinks that they're the first to come up with this.
I've been blogging about my life as a software engineer, dad, husband, entrepreneur, and now (new!) youtube vlogger for a long time. blogging 18 years, actually: http://john.do/

my hope is to simply share what i'm working on and share how those things are actually working.
Well, I think there's more than one reason, corresponding to the multiple points in the posts by trimbo and 205guy.

And one of those reasons is political, independent of finance. I agree other reasons are financial.

The reason I think there are political reasons independent of the financial is because I've seen politicians oppose waste incinerators and windfarms in the face of local opposition, even though they were entirely privately financed.
Especially his Tiny Renderer: https://github.com/ssloy/tinyrenderer
South Africa’s Blackouts Are Crippling Businesses
Ask HN: Nature or Nurture
Simple question, but a complicated answer. I’d love to get your thoughts on the matter.
The subject is pretty easy. Just get an old edition textbook for $4 on amazon, and do the practice problems after reading the sections in each chapter. Did that for my college class and got an A.
DNS over TLS is easy to block (it is separate port), that's why browsers are pushing for DNS over HTTPS, so you cannot make them fall back on local DNS so easily.

With DoH, it will be more difficult, but still possible - you will have to run your own proxy. I imagine, that folks that came up pihole, will package something similar that includes proxy.

On such networks, devices that won't allow to enroll custom certificates won't get onto Internet. It is then up to the user, what he or she prefers, privacy and control or that specific product.

I actually like DoT a DoH as protocols, from the privacy point of view. However, I don't like their implementations and the lockdown they are used for, where they try to establish the tunnel out of the local networks, taking control out of their owners.
you can statically link a ui library.
I haven't heard about a cloud company caught spying on its customers, have you?
This actually seems to be somewhat of a trend in C# as of late. Ever since they introduced lambdas, really.

While I use them every day, my favorite is still “replacing” String.Format with string literals. Shorter, sure, but less intuitive particularly for people coming from another language. You can do roughly the same thing in PHP with backticks, but most people avoid them for the same reasons.

I’m not sure how I feel about the trend as a whole. As long as I can continue using the old methods as well I suppose I don’t have much room to complain, but sometimes it does feel like we’re just changing for the sake of change and that’s usually a bad indicator.
The problem is that it's insanely difficult to build a sustainable business in software targeting niche small businesses.

I think Basecamp is not targeting niche small businesses; they're a general purpose project management/team collaboration software, used by many businesses. It happens to be used by some small niche businesses, but in the same way a business checking account is used by many small niche businesses.

To me, niche small business software evokes more "software to automate inventory in a small machine shop", "landscape sprinkler system installation planning software", "antique shop inventory management software", "beekeeper scheduling software", etc.
I think the crux of the others’ point is that Google’s increasingly complex secret sauce for returning search results, combined with its general ubiquity, has perhaps created a monoculture whereby we view the Web almost entirely through Google’s lens. AOL’s “curation” of the web via its portal was a bit more direct for sure, but I can see how the effect could be similar.
This is 100% Cuomo’s fault for keeping everything secret, as he always does, and trying to bully all the stakeholders out of having any say. Local NYC politics is brutal, and nobody is gonna roll over their needs just cause someone else says it’s the right thing to do.
"Warez" is from "software", so it's meant to be pronounced "wares" https://en.oxforddictionaries.com/definition/us/warez
Tackling Zika Transmission with Genetically-Engineered Resistant Mosquitoes
I totally take your point, but I don't think it's inconsistent with mine.

Search engines being 'about' a concept isn't a new thing. Bewlew's book from 2008 is called "Finding Out About". The dream is that the search engine can work out what a document is about, and what I'm thinking about based on the content of the document / query, and match them up.

The new thing in your example is that Google has gone beyond documents into burrito restauraunts, but it's not such a huge leap.

Maybe new adavances have brought new algorithms that are somehow better at finding and modelling those abstractions so the search engine is no longer a recognisable vector space model with predictable proxies. Even if that _is_ the case, they should be able to answer a query I have made, on my own terms.
Sexy prime
Economics After Neoliberalism: Market fetishism is a perversion of economics
That's a good point. Banning weapons lessens military industries ability to produce them. They tend to be made locally, within the militaries themselves and that often means less/worse... Eg Syria/Assad.
I absolutely agree with you. My optimism is strained by what has already been lost, and the repercussions will be severe. We will have to start accepting some of the rules of nature, death, and population that the rest of the species of this planet live under, and that is going to be extremely problematic.

There will be death and despair, some of which we are going to have to accept as inevitable. But there is already death and despair. We kill 9 billion animals in the United States for food supply each year. There are more humans slaves now than at any time in human history. We've lost so much wildlife. The massive loss of arthropod life fills me with shock and dismay.

And yet, with suffering beyond suffering, I have a sense. I have no proof, it could all very well be hopeless, but I have a sense that people are ready to stop the exploitation that led us here.
Correct, the hierarchical breakdown of services is orthogonal to the scaling unit of code. If every node in the cluster could execute every function, there is no need to split things out.

When deployment and coordination become an issue, that is when _deployment_ needs to get split up. But given our current RPC mechanisms, deployment and invocation are over-coupled so we have to consciously make these decisions when they could be made by the runtime.
Would you also be okay with your cell service provider censoring your calls and texts? After all, it's their platform you're communicating on.
It's got W3C backing, but it's one of those things (like web MIDI) that only Chrome has bothered to implement. The APIs aren't intended to be proprietary to just Chrome.

https://www.w3.org/community/web-bluetooth/
Vividly remember why AltaVista failed -- they monetized way TOO QUICKLY. Everyone was griping about its sluggishness. Then a few months later a friend pointed me to this new google.com thingy, with its minimalist page, and no ads!
See: electric fences
It’s not comparing technical merit or business decisions. AOL for a long time was the window into the web for lots of American users. Google is now a window into the web for users around the world.
You're extrapolating here. Maybe I was not clear enough. I've never found Spotify's interface to be that bad, but have the same sentiment you hold for Spotify towards Google Play Music.
They used to behave in Google as you describe and it was quite reliable. But somewhere along the line, Google changed how it handles search expressions (for the worse, in my opinion).
These tax breaks existed long before Amazon planned on moving to New York. SMEs could and still can utilize them if they choose to do so. There's nothing that prevents them from doing so and they also have more incentives available to them than larger businesses.
I loved this article. Disclaimer, I'm the founder of CodeFund (formerly Code Sponsor). As such, my focus is funding for open source.

To start, you should check out Nadia Eghbal's Lemonade Stand (https://github.com/nayafia/lemonade-stand). She lists many different ways to generate funding, along with the pros and cons. There is no silver bullet. I believe that real substantial funding must come from all directions. Also, funding sources vary based on the personality of the maintainers. Some may prefer to go the fund-raising path with Patreon or Open Collective. Some may prefer the TideLift SLA path. Some go the route of selling merchandise, training or books.

However, most paths of funding require the developer to take on the role of fundraiser, marketer, or even publisher. Developers may not want to do this and would prefer to focus on the code. This is why advertising fits most models. It provides passive, recurring and consistent income that does not require the maintainer to veer from their chosen path. It supports DHH's "fuck you" policy. The maintainer is not beholden to the advertiser with CodeFund, because there is no direct agreement.

CodeFund (https://codefund.app) is an open source platform that helps fund maintainers, bloggers, and builders through non-tracking ethical ads. We only display ads based on the context of the website, not the visitor profile. Our ads are relevant and non-obtrusive to visitors.

For example, go to https://jsbin.com or https://codesandbox.io.
The proper thing to do is to use the DNS settings the DHCP server provided and testing those settings by providing a server the device can lookup and connect to (with TLS). If the server proved it's authenticity, the DNS settings work. (some devices might cache this result, others might do this during startup)

If an error occurs or a reasonably short timeout expires, the device can: if it has UI the user will see, it can report the problem to the user and ask if it's ok to try a common fix (which can be explained in detail in an optional "[technical details]" popup). If the user approves, then retry with the hardcoded DNS server (or any other workaround). If the device doesn't have a UI that could realistically ask this type of question, automatically trying the fix when the DNS test fails might be appropriate.

TL;DR - don't make assumptions about the user's situation, even if you think it is "market-smart". Test for the required behavior and fail-safely by enabling the common workarounds.
Well, no, actually it turns out there’s only going to be one HQ2 after all. NYC got complacent.
Most here seem to know that the motivation for adding DLLs to unix was to make it possible for the X windowing system to fit in the memory of a computer of that time, but many comment writers here seem not to know something that the participants in the discussion that is the OP all knew:

Plan 9 has an alternative method for sharing code among processes, namely the 9P protocol, and consequently never needed -- and never used -- DLLs. So for example instead of dynamically linking to Xlib, on Plan 9 a program that wanted to display a GUI used 9P to talk to the display server, which is loosely analogous to a Unix process listening on a socket.
Unless you're Norwegian PM posting Pulitzer-winning photos.
Absolutely. Scale and diversity applies not only to ingested documents but users. I'm under no illusions that Google has said "here are a chunk of users who may want precise search, at a cost of X, but this other demographic can bring us revenue Y".

That's fine, it's their business, but it makes the virtual monopoly even more painful.
Show HN: Fake back end from visual GraphQL diagram (video)
Absolutely. I think hackability is the best part of open source.
Feature author here.

The CSS timing attack actually influenced the design process heavily. The original design was to use a stripped down CSS selector but we found this too large of an attack surface.

There's definitely still concerns around making sure a 3rd party can't exfiltrate information from the page using this but we think we've found a set of restrictions that should prevent this: https://github.com/bokand/ScrollToTextFragment#security
If a city like New York can lose anything because one company doesnt want to headquarter there, we all have a problem.
Mind if I talk to you offline? My contact is my profile. Thx -Kapil
I think they were being stupid. Their terrible rhetoric around the issue certainly doesn't imply that they grasped the situation.

If they publicly bemoaned the shakedown from the get-go, but claimed they hsd to participate abyways, they would have improved their negotiating position, and maybe diffused blowback too.
Would this not become more of an issue if nuclear actually was embraced on a global scale? I mean, eventually we would run out of safe storage - the question would then be whether that would be in 20, 50, 100 years (and whether some better option would exist by then).

Disclaimer - I have no idea of the numbers involved so aware this may be a ridiculously trivial issue
Why Google Needed a Graph Serving System
I highly recommend Rasa Core (https://github.com/RasaHQ/rasa_core) if you are looking for an open-source virtual assistant. Very active and helpful community, and lots of input channels for integrating your assistant with messaging platforms (https://rasa.com/docs/core/connectors/).

I am not affiliated with Rasa, just had a really good experience developing a few projects with it.
does it work well if you put the individual words in quotes? It seems to rank popularity above exact match, and a word in quotes forces it to be present.
Every taxing district I have looked up property in shows the actual amount billed. They always show all applicable credits the property or its owner qualify for. I haven't tried to look up NYS records, but I don't think it's any different.
It's interesting that you use retail coupons as an analogy. Are you familiar with the idea of a loss leader? What happens if that revenue isn't earned elsewhere?

It's not at all clear that New York would come out ahead on this deal, given the infrastructure costs and Amazon's well known tendency to avoid paying taxes.
@fmxexpress you are showing up marked dead here.

Yes, they have it on their roadmap for 2 years now. Doesn't offer a lot of confidence in that it will actually show up on time. Right now you cannot release a 32 bits app anymore in the apple app store.

So I'd argue that they are very late already. Who is going to invest time into a product you cannot release, but that -pinky promise- will be delivered before you can not even run existing 32 bits apps anymore.
It also means that it's probably not practical to deploy it yourself as it relies on a big infrastructure deployed in a particular way.
Have you tried searching with verbatim mode? Also, keep in mind that google removed the + operator, but you can achieve the same results using double quotation.
I'm not sure what this accomplishes over a normal ugly switch.
The old Penn Station, mentioned in passing in the article, was apparently incredibly beautiful and aesthetically a rival to Grand Central Station (which itself barely escaped becoming the home of an office tower [0]). For those interested Mashable had a great article that featured some spectacular photographs of the old Penn station [1].

[0] http://gothamist.com/2016/05/25/fred_papert_grand_central.ph...

[1] https://mashable.com/2015/07/20/original-penn-station/#NAhQI...
I know it's wares with a z, but I've always pronounced it "Juarez" in my head. Never gave it a thought until now!
I don't know if they're the worst, but psychology certainly is one of the first fields that pops into my head when we talk about hard to replicate results. I find it incredibly ironic that the results that they may or may not have found are now used as an argument in favour of changing actual science.
I think string interpolation is one of the best things they did to C#. String.Format is pretty error prone.
What would you hash though? Content on a page changes frequently and dynamically so the hash would mismatch very frequently.
Ask HN: What is your favorite tool and tutorial for cybersecurity?
Ironically we just ripped out a whole bunch of scalability features from one of our Node.js apps. It was not worth the increased cost in complexity.