skysight-inc/HackerNews huggingface dataset:
>And since the 65k servers/appliances (now more like 80k) are located in tens of thousands of different networks, leaking the internal IP isn't bad at all -- especially since there is no way to correlate them with the customer.

Maybe not directly - and I say that as a maybe, since I'm not so sure of this premise - but you're leaking a bunch of data this way that can be used by attackers that have some level of information or access to get additional information about the network, the services running on it, etc. The idea that this "isn't bad at all" is pretty much patently false. "Not too bad in most situations" is probably a bit more accurate.

>For normal "internal servers" within a company, I'd probably recommend using a wildcard cert and an internal DNS server.

Why? For internal servers within the company you can run your own PKI and CA and use an internal cert, giving you much more flexibility and control over things than just using a wildcart cert and internal DNS server would, without much increase in effort.

>We went this route to provide a secure web interface to our appliance.

The far better option is to give the customer a way to provide their own cert. Or, since you are providing the appliance, have them trust your CA on the machines that are administrating the appliance.

I'll be frank: Your choices here and general suggestions around DNS would worry me if I was in the market for your appliance. I would not find it at all acceptable that internal details of my network are leaking out, no matter how convinced you are that it's not bad at all.
One of the major bits of evidence that the FBI used to establish a link between DPR and Ross was that very early on he used an account on stackoverflow that still had links to his true identity to ask a question about configuring servers for a TOR hidden service.
Thank you for a great reply. Really.

It sounds to me like yes, the problems like racism and sexism do exist, but the way they are used to bully and shame one's political opponents is unacceptable.

Or may be I simply have fallen into this exact trap: put my own meaning into a fuzzy article and then hastly proceeded to passionately agree with myself.
I have never not seen it. Non-compete and non-solicitation clauses are almost always non-negotiable and standard in employment contracts I have helped friends review, outside of CA. (Specifically TX, NY, WA, MA are the ones I’ve seen)
Ross certainly seems precocious but there is also an established theory that he had help from at least one heavily involved mentor who may have even shared the DPR handle and access.
The 737 max has multiple AoA sensors.

Having multiple sensors doesn't always help, as failures are correlated. For example, there was an Airbus A321 that had 2 of its 3 sensors get stuck in the same position due to icing.[1] The computer thought that the one working sensor was malfunctioning and disregarded it. It then engaged stall protection, dipping the nose and causing the plane to dive at 4,000ft per minute.

> The captain continued to hold “more than 50%” rearward stick in stable flight for a period, but with help from technicians on the ground, the crew was able to reconfigure the automation into the aircraft’s alternate control law, rather than its normal “direct” law. The action removed the alpha-protection checks and canceled the nose-down input. The aircraft then continued to its destination.

These failure modes tend to happen more with Airbus planes because their flight control systems default to overriding human input if the computer deems it unsafe. Boeing's flight computers will give more resistance in the controls, but they mostly won't prevent the pilot from doing what they want to do. The exceptions (such as auto-trim and stall prevention) can be disabled with by flipping a couple of switches.

1. https://aviationweek.com/commercial-aviation/german-investig...
Because these types of trackpads need special drivers these days e.g. windows precision drivers.

Even basic things like palm rejection is done in software and for this one to switch between keyboard and trackpad in the fly you’ll need very good software that can predict just what you were intending to do.
I believe the author said he used MTGJSON, which certainly does include the colors of a card as well a host of other characteristics.
It is common, but as dns over https becomes standard it won’t be able to be.
Ignoring other benefits like assigning liability, a contract isn't going to be able to force your client to pay under all circumstances anyway. Clients can always argue the work wasn't up to the standard they were expecting, they could later disagree with the interpretation of the requirements, clients can go bankrupt and be unable to pay you etc.

In terms of getting paid, knowing which clients and projects to avoid, controlling scope creep, setting expectations and structuring work to get paid as you go are more important in my opinion. Once you're at the stage of pointing to contract terms the project is probably on rocky territory already where your client isn't going to be happy at the end of it.

Get a contract as well but I keep reading people talking about getting "air tight contracts" as if they're the most important part of getting paid.
Elasticsearch?
> It is worth noting that many of the earlier scholars studying cave art were men, which may have led to gender biases in their interpretations.

It's sad we cannot have a post on an interesting topic not spoiled by the gender war anymore. Moreover this remark is totally stupid: women are as much likely to formulate a biased opinion than men.
A while ago when I was doing a lot of VR I wanted something like this so I could see where my hands were touching the keyboard while wearing a VR headset. Hand trackers aren't precise enough for that, and video passthrough also isn't great for various reasons. Add a Vive tracker to this and you could potentially use it fairly naturally in VR.
but which 300 page guide is the right one to use

I think every one of the 300 page is the right one to use and every page has an use and 300 pages make a ocean of users and casual users and well if you have 300 sailors you will not say a comment in an unpolite manner not unpolite! towards any of the sailor because with 300 hundred sailor everyOne watches his surfboard or standup pad or cayak or bamboo made jangade or little row a boat sail small boat you sail it you say it or you dont sail it free will always everyone

but a small row a boat is not a bot

is a boat and a row and a One who rows and One who sails

And is not a Ship nor a 33 times 3 sailor of the Ship nor A Land Support Sailor even...

Clear as clear water revial by Creedence rain whatever, Clear!

thanks
I like this move.
There’s already a very limited set of exemptions, although most startups definitely pay zero attention to these laws. We’re very careful about them, but most aren’t; frankly, it’s very annoying to our non-exempt employees because tracking is a pain in the ass, but them’s the laws :/
In defense of buying a used Tesla I really appreciate the idea that if your car is 'out of date' in terms of current hardware you can simply pay for an upgrade instead of being told you have to sell your car as used and buy a whole new car. When you think of how much money a lot of people invest in their cars treating it as a disposable commodity doesn't make a lot of sense economically and ecologically.
In terms of turnaround time, obviously your point is valid, but if Tesla manages to disrupt the entire paradigm of an industry in a positive way it may be a minor critique in the grand scheme of things.
https://slate.com/technology/2013/10/silk-road-s-dread-pirat...

Here is the famous SO question, he later changed his username to frosty, but originally he logged in using FB.

https://stackoverflow.com/questions/15445285/how-can-i-conne...

edit: Add link to actual question.
The best fix to wasteful HFT is actually to increase the precision of prices on the exchange. The reason why these races are a thing is that prices can only change in fixed and sometimes relatively large increments, such as one cent, or perhaps more. Allowing prices to change in smaller increments ought to be good for both increasing liquidity, and removing the incentive for traders (humans or automated) to 'rush' to the market so that their quotes will take precedence over others.
This was very insightful and only wish the best. Thank you for sharing.
Please explain it, later. Sounds very interresting to hear.
People desperately want to escape CA but have no choice because that's where the jobs are. Jobs are there because companies are there. Companies are there because it's not their problem and they don't pay the full cost of their egregious location decisions. It all comes down to supply of jobs vs supply of homes: it's desperately out of balance.

Voters think they can actually stop growth by stopping housing development. It's not the housing that brings people to CA, it's the jobs, especially jobs for immigrants and jobs for people outside of CA (in the US).
So while I don't really agree with you (I would be "somewhat disagree" in an opinion poll on that question), I think it's a totally legitimate premise to have.

My objection is to the article's (really, two separate layers of articles!) claim to have clear empirical support for that premise, when the data is anything but clear.
Hotels demand deposits as a kind of insurance, so they can get damages paid without involving the court system. That does not mean that not paying a hotel is legal, or that having a deposit protects you from being sued, it just means that the hotels prefer to solve the "getting paid" problem in a more direct, cheaper way when they can. And of course if it doesn't involve large sums, police are less likely to pay attention than in bigger cases like this one, so they might not actually inform the police either, even if they could (especially if it's not 100% clear it was intentional).

It doesn't suddenly become non-criminal to defraud someone just because they didn't insist on the money in advance. She obtained services under the pretense she'd be able to pay for it, and didn't pay. That's basically the definition of "theft of services", and only in scale different from you jumping out of a cab at the end of the journey and running away without paying.
Unfeasible? Simple, just call it unfeasible. It's a undefined word, perfect for manipulation.

There are no circumstances where online political voting should be used. Ever.
Thanks! Yes, the risk is acceptable because the appliance can’t generate a key pair by itself. All machines involved (including the DNS server) are on the same LAN and physically under my control.

Took me a while to figure out that Lego indeed supports BIND (via the RFC2136 DNS provider).
I like the simplicity of a warrant canary. Such a great way to stick it to the government, I love it.
Same for node packages, and same for rubgems. Some package managers are just better than others.

Seems to me like either snap or Homebrew Linux are the way to go. ArchLinux also has a reasonable packaging experience.
NLP is a possibility, but bear in mind that HFT is all about optimization. The confidence levels desired can vary significantly based on what you intend to do with the information.

Acting on M&A news by taking a more aggressive position generally requires more confidence than, say, backing off based on ‘bad’ news. In the first case, you want to be pretty sure of the headline before taking action. In the latter, the mere presence of words like ‘fraud’ and ‘investigation’ might be enough to play it safe and say, “we’re going to back off trading this underlying until a human has a chance to look at this.”
New Line Tavern is the only bar I've seen that has drink/food specials on Friday and Saturday.
I recently purchased an electric mower after my old gas powered one died -- repairing it was going to cost as much as just buying a new one.

It's so good. It has turned a dreadful experience into a long slightly noisy walk in my yard.

I used to have a number of minor breathing problems when mowing my lawn, mostly due to the exhaust. No longer having to deal with smelly, burning chemicals is absolutely awesome. I ended replacing almost all of my other yard tools with an electric equivalent as soon as I could.

This is a major change since I last tried electric (and especially battery powered) yard tools, which were flimsy, low powered and died quickly. The modern ones are quite good for most things and since I'm more inclined to use them, I end up dealing with easier to mow/chop/trim yard stuff than before.

Upon reflection, using the gas powered equipment today feels like barbarism.
Newver understood the fascination with e-votes. E-votes are great when you vote for reality shows but for a normal election I think walking to the local booth and vote is a much better idea because it is hackers proof and also only citizens with enough motivation will vote.
Are you saying parent is not doing his own thing, or that the people who think he's a sucker aren't doing their own thing?

I agree with the latter :)
It's probably not reasonable to assert that tracking is the reason we have cross-origin requests; that feature was avidly requested by developers across the spectrum for many years, and the fact of JSONP is a pretty good illustration of just how badly people wanted it.
Austin is just as good 9 months out of the year, I hear.

Albuquerque NM, is every bit as good (i'm told) as the bay area, with 8 times cheaper housing. there are many more examples you can find in the US that have nearly as good weather.
Following up on this... The blog post Islands at the Speed of Light ( http://www.bldgblog.com/2011/03/islands-at-the-speed-of-ligh... ) with a "global map of 'optimal intermediate locations between trading centers,' based on the earth’s geometry and the speed of light"

There's a similar article at When The Speed Of Light Is Too Slow: Trading at the Edge ( http://www.kurzweilai.net/when-the-speed-of-light-is-too-slo... )

The paper that both of these articles are based on: Relativistic statistical arbitrage https://www.alexwg.org/publications/PhysRevE_82-056104.pdf which opens with:

> Recent advances in high-frequency financial trading have brought typical trading latencies below 500 􏰒µs􏰃, at which point light propagation delays due to geographically separated information sources become relevant for trading strategies and coordination 􏰀e.g., it takes 67 ms, over 100 times longer, for light to travel between antipodal points along the Earth’s surface􏰁. Moreover, as trading times continue to decrease in coming years 􏰀e.g., latencies in the microseconds are already being targeted by traders, this feature will become even more pronounced.
I'd say that you need a certain amount of trust around to make society work, and maintaining that trust requires that there be some real consequence when you go too far outside the lines.

I don't think anybody would like it if, say, every hotel in the country wouldn't give you a room without the full cost prepaid in a confirmed bank transfer ahead of time, plus enough of a deposit to cover any mess you might make. Particularly the actual high-roller customers that they really want. And so people generally get a certain amount of trust extended to them, generally with various bad consequences for violating that trust.

Not a lawyer, but I think you can technically be charged criminally for most such thefts. It's just not commonly done for single acts and small amounts, because the process is expensive for everyone, and more modest measures are usually good enough for everyone involved. But when you run around like Anna did, constantly juggling bank accounts and credit cards and making promises all over the city but never actually paying anyone, and keep it going for months and months and do it to like a half dozen hotels, eventually, there needs to be some firmer consequences than just trying to get money out of a stone.
The move to GitLab was a glimmer of hope that one day I'll be able to help contribute to the project which I'm a heavy user.

I wish they went all in and used GitLab Issues for bugs and GitLab CI/CD to auto-build packages for both validation and pushing new packages into the Debian repositories.
Fermilab is literally a couple of miles from the CME datacentre in Aurora. They must have some old accelerators they aren't using.

The original Kamiokande detector is still in the ground at the Kamioka Observatory, as far as i know. Hasn't been used for science since the '80s. That's about 300 km from either Tokyo or Osaka, so you probably still need microwaves at that end.

Now you just have to think of a trade with a signal in Chicago and an instrument in Japan. The CME has Nikkei futures, but they follow the ones in Osaka. Osaka has Dow Jones futures, which presumably follow the ones in Chicago, but the volume in Osaka is pretty small. Your best best is probably FX - both Chicago and Tokyo have dollar/yen futures with good volume.

So, who is already doing this, and how long have they been doing it?
Not sure I see the link between the two and one doesn't preclude the other. Since you bring up Elizabeth Warren, she has brought up Monsanto a few times [0].

[0] ://www.motherjones.com/environment/2017/12/elizabeth-warren-just-let-loose-on-trump-and-monsanto/
> If I wanted to start being a contributor to a distribution, which one would be the best to dive in to?

I tried to contribute a package to Fedora once upon a time...gave up in frustration after a while since it went nowhere after a bit of hoop jumping.
Liquidity dries up very very quickly when the shit hits the fan though. And HFT is the first to stop buying.
It’s been said many times on HN, but if you freelance and in case you missed it: 1. Double or triple your rates (if you are fairly new to this you’re likely not charging enough. 2. You are now a consultant. You don’t provide a service, you provide solutions (if you are not sure what you are solving, figure it out). Forget the term freelance and anything associated with it. 3. Stop charging hourly. Try day rate, week rate, bi-weekly. Experiment. 4. Be picky. Fire clients if you have to. You are not a tool, you are a business, act the part.
>> or you misread the headline, price reverts and you end up with losing position.

Yes, you might misread here or there. But this is a game of statistics and the real win/loss is whether you read correctly more often this read incorrectly. You want your net wins to be positive.
There's also a quote in the article about the farmer sitting indoors on a miserable day flying the drone. Firstly, it's unlikely it would be safe to fly in rain and or high wind. Secondly, in most countries it's illegal to fly beyond line of sight without a lot of paperwork (which basically nobody except the military, possibly law enforcement, and some large companies have). You would need to be in the field, watching the drone.
The original problem with reporting bugs to a mailing list was mails for many bugs were mixed and you couldn't easily get the state of individual bugs. Debbugs, by automatically creating a new mailing list for individual bugs, does solve this problem admirably.

The new problem is that new people hate emails. I think the merit of this problem is debatable.
It is misleading because "parts per million" is perceived like a very small number by the average human, while in reality one part per million is a rather substantial amount of a substance in the water.
Correct.

The solution I suggested above is for home/personal use. But if you're doing anything for production, you really shouldn't be using LB ssl termination anyway, and might even benefit from running your own internal CA service.
Highly optimized, reproducible, multi-language build systems, such as Buck [1] or Bazel [2]. With that technology around, I can’t believe how developers still put up with slow builds.

[1]: https://buckbuild.com/
[2]: https://bazel.build/
“It hid any patterns that might have alerted us customers weren’t being billed.” Haha. Not being billed by the software owner...
And that alarm has constantly been going off. CAs have consistently failed to abide by BR policies which would have otherwise gone unnoticed.

Things like certlint have come about to help prevent misissuance, but I would wager that most CAs have not added it to their issuance pipeline.

I agree that CT is not the solution and ideally it would not be necessary, however, the number of issues found and still being discovered justifies it. Trusting CAs to just issue proper certificates has been a failed policy.
Running Proxmox? Interested in Kubernetes? Ansible Project to Build a Cluster
Hi all, OP here with some more context.

I've recently been working on an Ansible project to declaratively build a 4 node Kubernetes cluster. I feel like it's getting to be stable and I would love some testers and some ideas for how it can be improved.

My goal in all of this is to help get people started with running Kubernetes in their bare metal homelab environments as I feel like the learning curve to create a fully functional environment is quite steep at the moment. Especially since the Kubernetes ecosystem is so fragmented.

The project is currently capable of configuring the virtual machines through cloud-init and provisioning them with a custom networking definition so you can put them on specific VLANs. It uses Calico as the CNI and has support for provisioning an array of additional deployments such as an NFS Storage Class, MetalLB Load Balancer, NGINX-Ingress Controller, and DataDog Stateful Set.

If you're interested in contributing, there are two big things I could use help with right now.

1. Adding multi-node support as I only have a single Proxmox compute node.
2. Working out how to dynamically build the MetalbLB configuration file based on whether the user wants to use BGP or Layer 2 and how many Address Pools the user wishes to configure.

More to come in the future, as soon as I better understand what the community is looking for. :)

PS: Here is another repository containing my other Ansible projects for deploying common home server applications to Kubernetes. Currently I have support for Unifi Controller, Plex Media Server, Deluge, Radarr, & Sonarr. All of which work well with this deployment method. https://github.com/zimmertr/Kubernetes-Manifests
This seems overly optimistic, supposedly we were also supposed to have woolly mammoths by now. I think these articles are more a fundraising attempt, biotech is incredibly expensive and I don't see a clear path to monetization even if it was feasible.
Article: https://singularityhub.com/2016/08/17/scientists-hoped-to-ha...
Thank you for your swift and comprehensive reply.

I wasn’t aware plastics could be burned and the exhaust contained / treated / whatever.
We didn't just contact them before regarding a rate limit increase, we are also a silver sponsor and pay/donate yearly. See https://letsencrypt.org/sponsors/
Dark Mode Webdev
It’s hand waving, and possibly orthorexia: https://www.eatright.org/health/diseases-and-conditions/eati.... Remember, the human immune system was designed to drink water out there in the world, which has animals pissing and shitting in it. Heavy metal pollution likewise occurs naturally. (Bangladesh, where I’m from, naturally has dangerously high levels of arsenic in the water.) Your immune system is designed to handle the “strain” of dealing with all that. We’re drinking the cleanest water humanity has ever drank (and have the highest life expectancies in human history).
This story was printed earlier (first?) and details the court case with the writer as an individual:

https://www.vanityfair.com/news/2018/04/my-misadventure-with...
I have to say I agree with the regineering part, i don’t get PET bottles with hard plastic lids and labels. These things can’t be recycled as is it seems as a lot of times I see a seperate bin for the lids.

There are a LOT of places where people don’t need to use plastic, it’s just how things are done and it’s convenient. Small example, individually wrapping fruit in plastic at the grocer. Fruit comes with its own packaging!