skysight-inc/HackerNews huggingface dataset:
NCC Group (formerly Matasano Security, iSEC Partners, and IG) - Atlanta, Austin, Boston, Chicago, Houston, New York, San Francisco, Seattle, Sunnyvale, and Waterloo, ON NCC Group is growing rapidly in North America and is adding some incredible opportunities to keep pace. What does NCC do, exactly? Penetration testing, security analysis, DFIR, and cutting-edge research into current technologies and attacks (breaking things). You spend most of your day thinking about security systems and how they can break. You get to be creative and have a lot of freedom to be clever while learning new technologies at a very fast pace. Engagements are usually 2-4 weeks long and in a year you will be exposed to 15-20 products and technology stacks. Your work will typically initiate person-months of security improvements in products millions of people use.You will have enormous impact in making the software and products people use safer! All of our consultants are also security researchers, with dedicated research time. Not too shabby!

Examples of some of our current openings include:

* Our Waterloo (ON) office is hiring Principal Hardware Security Consultants (https://www.nccgroup.trust/us/about-us/careers/current-vacan...) as well as pentesters, both senior and junior.

* We are looking for experienced DFIR hires in Austin, Chicago, NYC, and SF. (https://www.nccgroup.trust/us/about-us/careers/current-vacan...)

* Experienced, seasoned pentesters, as well as junior hires (https://www.nccgroup.trust/us/about-us/careers/current-vacan...).

* Technical Account Managers for our MVSS team in Chicago or NYC (https://www.nccgroup.trust/us/about-us/careers/current-vacan...)

If you want to learn more about us and our open positions check out our:

Blog (https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...)
Cryptopals (http://cryptopals.com/)
Microcorruption (https://microcorruption.com/login)
If you're ready to apply, contact us at https://www.nccgroup.trust/us/about-us/careers/current-vacan... or reach out directly at na-cv@nccgroup.com. We'd love to hear from you! NCC Recruiting Team
What ever happened with continuations in Scala? A lot of people were excited about them back in 2009, but if I google them now I still only get pages from 10 years ago. I haven't used Scala in a very long time, so I stopped paying attention to any changes in the language.
Peak carbon-sink will probably be a bigger factor than peak oil, all things considered. But the social consequences are not that different - especially since most "enhanced", unconventional oil sources are quite dirty and require a lot of energy to extract.
The site imports a lot of stuff from other URLs.

HN:
ycombinator.com
news.ycombinator.com

This website:
bootstrapcdn.com
maxcdn.bootstrapcdn.com
cloudflare.com
cdnjs.cloudflare.com
embedly.com
cdn.embedly.com
firebaseio.com
hacker-news.firebaseio.com
fonts.googleapis.com
google-analytics.com
www.google-analytics.com
google.com
www.google.com
jquery.com
code.jquery.com
jsdelivr.net
cdn.jsdelivr.net
maps.googleapis.com
mxpnl.com
cdn4.mxpnl.com
unpkg.com
The $300M deal that Taylor Swift claims ‘stripped me of my life’s work’
Security flaws in a popular smart home hub let hackers unlock front doors
War and Peace from Leo Tolstoij is a book that you will have to read once in your lifetime.
Lori Gottlieb was a film & television executive until she returned to Stanford for medical school.

Brilliant interview here with James Altucher > https://www.stitcher.com/podcast/stansberry-radio-network/th...
I believe ICQ used to have this (at least as an option). It never really made the leap to other IM platforms; people didn't like it.
Is 1.1.1.1 affected aswell?
This is important to recognize. Victim blaming is a highly destructive practice.
It's hard to tell now, but Belt and Road seems mostly like a gigantic waste.

Still, if China squanders its wealth by giving away infrastructure to the world, while the US squanders its wealth by bombing the world, I think China is winning.
The GeForce RTX 2070 Super and RTX 2060 Super Review
Mostly a frontend web developer, but with some backend and mobile experience as well. Looking for an interesting development position where I can do some cool stuff.

Location: Portugal/Europe
Remote: Yes
Willing to relocate: Yes (within EU)
Technologies: Typescript, javascript, react, swift, iOS, python, django
Resume: via email
Email: plferreira4@gmail.com
Website/portfolio: https://nbpt.eu/ | https://bitbucket.org/drk4/
Cleartext DNS 1.1.1.1 is still up though, thankfully.
I just changed my dns-over-https script to use quad9:

# sudo /usr/local/bin/dnsproxy -l 127.0.0.153 -p 53 -u https://cloudflare-dns.com/dns-query -b 1.1.1.1:53
sudo /usr/local/bin/dnsproxy -l 127.0.0.153 -p 53 -u https://9.9.9.9/dns-query

The bootstrap 1.1.1.1:53 was working but the DoH dns-query url was not. Hence my visit here :)

Edit: Now fixed, it seems. Quick work, if it stays up!
I use namecheap to manage my name servers. It's also down.
By coincidence I was doing this last night because I got a new eReader (non-Kindle). I found the most reliable method was to go the the "Manage Content and Devices" page on my Amazon account and manually download each book. This method downloads a single file for each book to your machine and its in a format Calibre and DeDRM can work with. It took a while even though I only had ~80 books but it was worth the effort.
With a lot of these things, if people can't agree to make a standard system to do all of it just as well then there's going to be a big company that does so. We have had this with e-mail, signed exchanges, DDOS protection and will probably have it with many other things unless people pull themselves together at least after these proprietary solutions are created and create better alternatives.
Cloudflare: Your status page showed "all systems operational" for over 20 minutes while your primary domain was returning a 502 error. Please change this to update automatically, many other engineering teams depend on you.

https://i.imgur.com/qHBM2JW.png
Good thing I switched to OpenDNS literally two days ago.

edit. not that it matters, I'm just scrolling 9gag.
The procedural nature of jQuery just makes for buggy as hell websites as well. Manual DOM updates etc. etc.

React being 'declarative' tends to end up with more stability in regards to UX (e.g. complex search forms). Makes the integration of third-party components smoother too.
From https://www.cloudflarestatus.com's response header, it seems it runs on fastly, so it's not down.
I have to admit, I think the interface is prettier than HN.
I think this article is over-hyping the danger. Sure, the risk of the command module and the service module crashing is nonzero but it's so tiny. They start off being pushed away from each other by the separation and they have different aerodynamic properties. It's not surprising that they continued on similar paths initially since the atmosphere is very thin minimizing the aerodynamic differences. To make an analogy, reentry is like tossing two empty beer cans onto a windswept lake. Sure they might have a chance to hit each other early on but the chances of that are small and if their aerodynamic properties are different (i.e one isn't totally empty) they will get further apart as time goes on. The Apollo program had a list a mile long of bigger risks to spend their time mitigating. This article is just hand wringing.
aah i misread so 7,5% of all websites
There are too many existing terrestrial and space users for this to fly. They're not getting a globally harmonized ham band. Is it April 1?
Or play clash Royale - it’s a lot of fun. Especially if you have a teenager and you can play in 2v2 mode ;-)
Education and positive reinforcement.

Teach people the right way to do things, and then make that behavior self-rewarding.
Yeah, if I had access to the DNS records this would be easy, but like you said, even the dashboard is down.

Ideally, I'd want something where if Cloudflare goes down, I don't have to change anything, but... 502 isn't going to trigger that without some work on my part.

Meh.
Only if you are a paid customer. The free service does not allow this, and this is why I do not use Cloudflare for personal use.
I'm guessing that they're going to be back up again before those changes can "propagate", given the relatively high TTLs most TLDs run with.
EDIT: the static pages load but trying to log in just times out. I think the static cache is back up but the rest of it is still down.

Seems to be back up and running for me.
I just call it agile. It’s the common form.
Problem is not just about using Cloudflare as your DNS registrar really. Even if you have a different registrar, the Cloudflare model is to have the NS (nameserver) records set up to point to Cloudflare, and then they in turn resolve the DNS. You cannot really use Cloudflare without that set up. Changes to nameservers at a registrar level are rarely quick, at least quick enough to mitigate a disaster like this. It's why we've used two completely different domains at Ably (ably.io and ably-realtime.com) for all services we provide.

We wrote about a strategy to circumvent this sort of thing a little while back https://www.ably.io/blog/routing-around-single-point-of-fail.... Given two incidents in a matter of weeks, I think a revisit of that article in light of most businesses who operate on a single domain would be useful :)
we were able to recover by submitting an API call rather than their UX, it was slow but the API requests work
http://flood.firetree.net/
I'm Making AlgoDaily Free
Like the idea. There is lobste.rs. But last time I checked it was "invite only". Keep up the good work!
Seems to be back to normal now.
The lookup is essentially random. If you point DNS to 2 IP's and one of those goes down, then (without going into detail) half of your requests will fail.
No good if your Registrar (Namecheap) is behind CF as well!
As the article mentions, this is a port of the previously-Chrome-only NaCL-powered version of Google Earth.

I doubt the web-based versions (whether JS/WebAssembly/Nacl, etc) will ever have the feature-set of the standalone Google Earth (nor is there much monetary reason for Google to do so).
When pondering progress in physics, do not underestimate the role of technological progress and the impact that has on experimental evidence, which are at the heart of all grest theories. These would not have been dreamt up without certain experimental data as the starring point for a new explanation.

Quantum mechanics required the weirdness of the blackbody radiation spectrum to spring to life. The special theory of relativity is based on the observation that the Maxwell equations are not Galileo invariant and the results of their strange Lorentz invariance can be observed. The general theory of relativity is baed on the realization that despite efforts to measure a difference, inertial mass and gravitational mass always have the same value.

It took time for these things to become measurable and to make people go "hmmm..." and think about nature in new ways. The answers are creative and genial, but they required starting points. And creating those takes time.
I think we're back up!
I’m burnt out, not from stress, but from being “forced” to do a bunch of stuff that I don’t care about with a bunch of other people I don’t really care about for a company I don’t care about, but if I stop at any time the money stops coming into my bank account so I just have to keep pretending I care for years just to keep the game going. The actual work itself varies from stupid easy to relatively challenging, but again, I just can’t bring myself to care beyond ensuring my team doesn’t think I suck at my job so I can keep collecting my paycheck. All I’m doing is running out the clock every single day.

That’s why I’m burnt out.
CYA buddy, CYA

(sarcasm!)
To reply to both you and your parent at once, yes, the reason this is in the nursery is that it's not a complete resource yet. I agree that this particular example is bad; it's showing the right pattern for the wrong example.

The right way is to use rayon, which is similar to OpenMP in this sense. Each thread would get a pointer to the chunk of the buffer it's operating on. You don't need to write any unsafe code to do this.
No, not to work with a running system someone else operates, but to run it in production yourself.
AchieveIt | Atlanta, GA | Onsite | Full-Time | https://www.achieveit.com/

AchieveIt is changing how organizations make decisions. Our mission is to equip business leaders to achieve their most important initiatives. Our team is dedicated to building solutions that give leaders the cross-plan visibility they need to see what's working and where they need to pivot to grow their business faster and farther. We are innovators, strategizers, thinkers, builders, get-stuff-doners, learners, competitors, and pioneers. We are a group of Achievers who are passionate about results.

We are hiring a Software Engineer (.Net / JavaScript): https://achieveit.workable.com/j/903059D9D6
Touché.

On one hand I think "Maybe I should diversify my infrastructure."

And on the other I think "But one of the biggest upsells was convinience."

And it's fortunate I don't have a third hand, because I'd be thinking "Oh crap oh crap I just migrated a client website to LightSail + CloudFlare saying how super awesome and robust it would be."

But it's okay now because it looks like everything is back up!
I'm beginning to see the issues disappearing for me on the East Coast of the US, as of 10:14 EDT.
Ah, used to be an Enterprise only feature. We have access to that, but didn't realise it's now available to Business. Perhaps time for them to consider offering it more widely!
Been deleted, cached is at https://webcache.googleusercontent.com/search?q=cache:RV8OOz...
For me the most obvious mangling the converting process is doing is inconsistent paragraphing, some times a single paragraph in original splits into two at an arbitrary place after conversion, and vice versa, seriously disrupting the readability.
Some people on Twitter are reporting that it's due to a DDoS. http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&... seems to indicate Iran is the source?
Are you sure it wasn't cached? For us it was showing correctly the incident...
Yes, but then next time you will be able to control your DNS.
The Financial Gym | Remote | https://financialgym.com

The Financial Gym is putting the ‘personal’ back into ‘personal finance’. We take a fitness-inspired approach to finances, teaching you to make smarter money choices that add up over time. Train with us, achieve balance, decrease stress, and become empowered by your money.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/the-financial-gym

Here are our open roles, more to come, if you don't see a role here email me and we will see if you can be a good fit for another role:

- Senior Full Stack Developer / Technical Lead: https://fingyms.bamboohr.com/jobs/view.php?id=2&ref=keyvalue...

- Mid-Level Full Stack Developer: https://fingyms.bamboohr.com/jobs/view.php?id=3&ref=keyvalue...

- Junior Developer: https://fingyms.bamboohr.com/jobs/view.php?id=9&ref=keyvalue...

Tech Stack: We are not married to staying with rails, so if you are a great engineer and leader please apply :) Rails, PostgreSQL, Docker, Heroku, AWS
Someone needs to turn Cloudflare off and on again.
Seems like your saying application threads are “green threads”, when the jvm has used system threads one to one for a long time now. So for the jvm at least there’s no difference between a jvm thread an an OS thread. Some jvm impls may still use green threads, but the major ones haven’t for many years. Apologies if I’ve misunderstood.
You'll get the overhead of a non-inlineable vtable-based method call for each pixel. How badly that hurts you depends on the ratio of expense of that call vs. how expensive the pixel is to generate. If you've already got all your pixel values manifested in memory and you're just indexing into an array, it's going to be fairly expensive. If you're generating noise with a random number generator, it's going to be noticeable but not necessarily catastrophic (since "generating a random number" and "making a method call" are somewhat comparable in size, varying based on the number generator in question). If you're generating a fractal the overhead will rapidly be lost in the noise.

But I'd also point out that the Go standard library does not necessarily claim to the "last word" for any give task; it's generally more an 80/20 sort of thing. If you've got a case where that's an unacceptable performance loss, go get or write a specialized library. There's nothing "un-Go-ic" about that.
https://www.digitalocean.com/ frontpage working for me: https://i.imgur.com/8yJRXVI.png
I had it airplane mode, but I could see an argument that the GPS is receive-only (it is not transmitting, so not affecting the airplane), so it is not disabled in airplane mode. (I saw comments on the Apple discussion site that they used to turn off GPS in airplane mode but no longer do so on recent iPhone models or versions of iOS.)

Though I didn't mention it earlier, I also had location services disabled:

- Go to Settings -> Privacy -> Location Services -> Off

The above supposedly disables the GPS or use of the GPS data.
Good to read! let me know that pillow has lot of space for optimizing.
You know how large organizations tend to be poorly run and non-responsive to their constituents? Well, large cities have large school districts, whereas suburbs have small school districts...
Make sure that DNS provider offers an API and that none of their infrastructure is hosted on CF. :D
Seems like even other registrars might rely on Cloudflare (e.g. Namecheap) so now people have to continuously ensure there’s no cross-pollination between their infra providers...
Both can be true. Portland has some nasty parts (inner downtown, anywhere near a trail or a body of water) that are riddled with needles or feces, but there are also some very nice parts like the suburbs or anywhere that can afford private security.
Throughout this outage, https://www.cloudflarestatus.com/ continued to show green - all services operational, with almost all services marked 'operational' and some vague cryptic message about users in this region being affected:

Investigating - Cloudflare is observing network performance issues. Customers may be experiencing 502 errors while accessing sites on Cloudflare. We are working to mitigate impact to Internet users in this region.

It seemed very much like a global outage affecting all services. Is this status page not automatically updated with service status, or is it just manually updated by humans? Even if manually updated, surely when posting that status message, the status of all the services should be set to degraded?
I find lib.rs mentioned in the article a good tool. Here on concurrency: https://lib.rs/concurrency
Can confirm that we had the same view. Operational while not working.
>if for no other reason than to allow the core organization to focus better.

The core organization doesn't want to focus better, if they did they would shut down every subsidiary that wasn't Google. Instead they're maintaining all of these bets because they realize that Google is about as big as it's going to get, and they need to go to the stock market with a long-term plan that isn't just stagnation.
What is a high level example of why I'd use this?
In 2016, Software AG announced that Adabas and Natural would be supported through the year 2050 and beyond. I'm not sure MongoDB will be there in 2050.
Germany fines Facebook for under-reporting complaints
Age 23. $30 cash with $6k credit card debt.
That number matches what I am seeing on StatusGator: Of the 438 status pages we monitor, 52 of them are showing some kind of warn or down notice right now. That's almost 12%.

Though some of them might not be because of Cloudflare, the ones I spot checked all do appear related. Medium, DigitalOcean, Shopify, CodeShip, Pingdom, and many more. The impact is staggering.
Their free CDN is my biggest draw to their service: I can handle millions of requests per day with a $5 VM, sane caching headers, unoptimized code, and Cloudflare free tier.
They came off that way in this blog post:

https://blog.cloudflare.com/how-verizon-and-a-bgp-optimizer-...
I think this is the correct answer.

Since I'm mostly thinking about static sites, I could also have something local that pings the site, and if it goes down, it could update my nameservers to point elsewhere on its own.

Probably more trouble than its worth though.
WAS designed to withstand a nuclear attack. These days, not so much.
Facebook News Feed changes downrank misleading health info and dangerous ‘cures’
The issue with the branch delay slot is that it assumes there is exactly one clock cycle (I.e. one stage) between fetch and execute. This was true on some of the early 5 stage in order riscs, but hasn't been true for a while. In an high frequency in order design there are maybe a dozen stages/clock cycles which would be hard to fill with delay slots. OoO is even more complicated.
Open Sourcing Continuous Fuzzing CLI
All I saw was a vague message at the top, all services were marked green and operational throughout.
We saw an update within 5 minutes of our sites going down. Are you doing caching somewhere?
"Concentration camp" is not limited to the death camps like Auschwitz, and it is a label used by the U.S. for its own camps in past times:

https://en.wikipedia.org/wiki/List_of_concentration_and_inte...

https://www.smithsonianmag.com/history/cave-markings-tell-ch...
If cloudflarestatus.com isn't serving text content as Cache-Control: no-cache, that's itself an egregious bug.
Bankers rush to take Oxford’s fintech courses before robots take their jobs
I didn't know that, but it makes sense.
2B Records Exposed in Smart Home Device Breach
Chances of Building a Billion Dollar Business Are .006% and He Has Done It Twice
Nelder-Mead Optimization with F# and Fable
My opinion on that is about the same as Kirk and Spock's: https://www.wired.com/2016/09/punk-star-trek-iv-vulcan-nerve...

edit: while searching for that, I discovered that Kirk Thatcher is reprising the role in a cameo in the new Spider-man movie: https://www.startrek.com/article/trek-ivs-punk-on-bus-return...
> I feel the word "Enlyte" will be PROBLEMATIC to some religious fanatics.

I don't get the context here, do you mind dropping a link.
9.6% not 50%
that's bad news, i like 4chan being up because it keeps them all in one place and they don't start wandering around.
I think this is the major reason for the difference in volume of posts between the two threads.
Location: Enschede, Netherlands
Remote: Yes/partial - open to discussion
Willing to relocate: No
Technologies: Java, Python, Docker
Résumé/CV: upon request
Email: boet@dewilligen.net

Hi! I'm Boet, a young self-taught developer who has been working professionally for about 1.5 years now. I'm looking for a challenging job with the opportunity to learn a lot while building something great.
Good reminder for us of why you want to mirror all code dependencies required during autoscaling :/
Love this idea. Anyone know if there are similar sites for other parts of the world besides US?
Back up and running!
If the research organization grows one division that is 95% of the research division due to its success (made up number, not claiming that's where Waymo is), some kind of restructuring will be necessary or the research division won't be a research division anymore.
I often wondered while seemingly 20% or more of a small apartment's floor plate would be dedicated to the bathroom. Turns out the answer is simple: ADA requirement.
yes(1) takes a custom "expletive", so in the performance context it's usually used for flood filling in situations where e.g. /dev/zero or /dev/urandom are not appropriate sources for some reason.
This is resulting in build failures in our AWS CodePipeline as we can't pull some Docker images from Dockerhub