skysight-inc/HackerNews huggingface dataset:
The article notes that the VPS providers indicated that those top API traffic consumers were all a specific cron.php on compromised VPSes, so while in theory your statement is true, in reality the issue here was maliciously-compromises VPSes, not VPSes in general.
But everyone wants the stuff.
> And yet, the Energy Saving Trust suggests that it can save 100 pounds a year even compared with a modern gas system, and much better against all other alternatives

By switching to a heat pump system?
I don't see why Netflix can't provide the best of both worlds.

edit: btw I'm a huge fan of your work with keydb.
> some of them do involve using RSA with absurd key sizes and they'll likely fail the competition.

Only one (specifically DJBs joke Post-QC algorithm), and it did not pass to the second round.
Looks like AgileBits is getting scared.
Note that a binary encoding of json is not the same as a binary encoding. Structured binary encodings are faster than json.
> Should every OS which uses windows be able to call itself Windows, because windows are a quite old thing as well?

> Like it or not, there is an rfc for this and using it for anything else would be code smell at best

No but every OS that uses windows can call them windows....
Or it could just be that their catalog is 99% unwatchable garbage and they keep raising the prices every year anyway.
Some of the common-person comments were fine, not insightful but not that bad either.

But some of them were really inane, like saying a fluorescent orange high-viz jumpsuit looks like a Navy SEAL uniform (how could you confuse a high-viz outfit and camouflage?? At best it might resemble an orange life vest that Navy SEALs might use during training. Why not compare it to something more reasonable like a firefighter's outfit, or even to high vis clothing worn by coast guard rescue teams? If the medium were TV or radio I could write that off as a momentary slip of the tongue, but in text? It really makes me wonder how a statement that ridiculous gets published. It makes me thing the perspective of 'Robin' was being deliberately distorted to play up the "uninformed common person point of view" angle.
I think having the bucket in a different account with different root/MFA might make sense here too. Your production AWS account is more likely to get owned than your account dedicated to backups.
Why do you want asymmetric file encryption?

* If it's to send messages to people, you want a forward-secure ratcheting secure messenger (regardless of your message lengths or the duration of conversations).

* If it's to back things up, you want a secure backup system like Tarsnap, and even if you don't, your system's sector-level symmetric encryption also does this. Asymmetric encryption is relatively high-risk! You don't want it unless you absolutely need it!

* If it's to send files to people, you want a secure file transfer system; you're not looking to transform the file itself, but rather to establish an end-to-end secure transport for the file.

* If it's to do secure package distribution, you want a simple file signing system, and OpenBSD already nailed this: it's called signify, and the portable compatible variant of it is minisign.

* If it's a component of an application you're designing, what you want is a library that encrypts blobs, not a program that encrypts files. Use libsodium.

I'm not denying that there are cases that don't fit any of these buckets, but I'd be interested in hearing what they specifically are.

I'm a lot less interested in hearing things like "sure I want a ratcheting secure messenger but I also want to run my own server" because that's not my point. I want a use case that fundamentally demands a standalone file encryption program, not a argumentum-ad-Rube-Goldberg for why you're duct taping something together with a file encryption program to accomplish backup or package distribution or whatever.
I'd forgotten how much I loved Megadeth, having not listened to them for well over a decade. I realize that Peace Sells and Rust In Peace are phenomenally written, in whatever musical context you'd want to judge them by. There are some amazingly iconic riffs on these two records. I also realise how I got sucked into playing/learning all this other music as I got older, when all I ever really wanted to do was play some Megadeth riffs in my bedroom.
There's a mini-RTOS in my language (2017)
The detector still thinks it's headless even if you spoof the user-agent.
Introduction to Capybara – free online course
No getting around that he sell access to stolen data.

He didn't orginally steal it. He collected the illegal dumps and runs a service on top of that data.

There is nothing wrong selling stolen data provided someone else dumped it first.
It will, actually. It works like this: make the working environment so miserable that the only people who will stay are people who absolutely don’t have any other options and will never speak up or organize against abuse. Bingo, you have a group of people who will never go anywhere!
A surprising number of people in management seem to think "Oh, that'll make us very silicon valley and signal how cool & hip we are!"

And a surprising number of people who haven't had to work in open offices before think "Oh, that'll be cool: social, innovative, and collaborative!"
>Afaik almost everything runs Lucene under the hood, it's 20 years old, no one is going to build something as good any time soon.

Vespa [1] would like to have a word with you.

[1]https://vespa.ai
See also: https://en.wikipedia.org/wiki/Casu_marzu
Sorry to burst your bubble, but Google and IBM are both Samba users. As is Nutanix, Panzura and a whole host of on-prem -> Cloud gateway companies.

You have a strange definition of poor :-).
> That's why exceptions work so well in most languages

But there are many people including some well-known and highly-respect people who believe that exception handling in fact does not actually work well:

- https://www.joelonsoftware.com/2003/10/13/13/
- https://blogs.msdn.microsoft.com/larryosterman/2004/09/10/st...
- https://www.atlassian.com/blog/archives/exceptions_are_bad
- https://stackoverflow.com/a/1736320/102699
- http://xahlee.info/comp/why_i_hate_exceptions.html
- http://www.lighterra.com/papers/exceptionsharmful/

#justsaying
Test Automation U. just released a new online course today: Introduction to Capybara. Here's the link:

https://testautomationu.applitools.com/capybara-ruby/

For those not familiar, Capybara works with Ruby and is a domain-specific language (DSL) that comes with built-in methods that allow you to visit a page, fill in a textbox, click a button, click a link, check a checkbox, choose a radio button, or select an item from a dropdown and search within a section of the page.

The instructor is T.J. Maher. You can read more about his background here:

http://www.tjmaher.com/

Hope you like it!

(Disclosure: my company sponsored the creation of this course, and has a small link to our site at the bottom. That said, Capybara is free open-source software that is unconnected to my company. The instructor is not an employee of my company.)
The chances of error correction being realized in my lifetime are still zero. Quantum supremacy is here in the sense that they can make a giant correlated quantum system--too big to simulate, and do reproducible measurements on it.

Is that science? Yes. An achievement of science? Yes? Do you need to know anything about it? No. :P
What you're describing here appears to be similar to HashCash (which was first proposed in 1997!), but with extra steps. It suffers from all the same problems which resulted in that scheme not being used.
I haven't. Is it any good? I absolutely detest Google Docs. I've used the new(ish) Outlook web interface and it's quite nice, though.
Sorry to hear that, friend.
My compliments on "unauthorized alphabetization".

(and the interrobang, obviously)
Agreed, it is not sustainable. Alaska put themselves in this situation by growing government whenever oil prices were high without any regard to oil prices dropping. There was an opportunity to build Alaska wealth without taxes but I feel the time has passed. If Alaska had instead taken the 75% share of oil revenue allocated to government and invested it the same as the people's portion they wouldn't be in this situation. The entire historical debacle just illustrates in vivid color how horrendous politicians are at managing money.

Edit: 75% for government not 25%. 25% is for the dividend fund.
That typically only applies to IPOs, no? I.e. the lock-up period is between the IPO and something like 6 months after public trading starts.
Yes agreed. People don't realize the magnitude at which we need to change our whole world to get there and how urgent we need to start that change.

It seems that efficiency isn't enough because people will just use up more energy. Growth and how we think about the economy is incompatible with what needs to be done.
Last time I tried a usb switch it would flip out and cause issues (it was doing the monitors too, and it was cheap). I forget what the specific use case was, but at my house we definitely had 2 keyboards on top of each other. It was a temporary set up of two computers at the same station, so didn't warrant looking into a better switch.
If I ran that setup daily in the long run, I probably would have.
Am in the same boat. Have 15 years programming experience, and can literally code circles around many or most of the people I am interviewing with, but because I don't have a degree, or interview poorly, I am getting rejection after rejection. It's funny. I always think about the Frank Zappa sketch: "What's in a diploma? A: Absolutely nothing." It's a piece of paper, but I guess it is a symbol of your subservience to a system, which in kind shows you are good at deferring to authority or something. If I were hiring, I would explicitly go after non-degreed programmers who show they can code. Dogmatic college kids often write terrible code, but they proceed with unchecked hubris because everyone tells them they're great, even though they never paid any dues or done real systems programming.
Who knew that the future could be cooked down into a paste- and squeezed on bread.
Obviously nobody after us- we made sure of that with the cut to the history department.
Just because you have a legitimate reason doesn't mean everyone does.

There are no bad guys just selfo serving people.
Technology means "the application of knowledge." A lever isnt tech per say by itself, its a tool. But knowing how to use a lever, and applying leverage to create force is technology.

A better word to use is tools. Microsoft and Apple both sell tools but Apple tools are a fashionable consumer tool sold at retail, and Microsoft are business tools sold to enterprise.

Google and Facebook give away free tools in exchange for attention.

Netflix more correctly fits your example, they dont create public tools used to accomplish something else, their tools are built internally. Same with Uber.
Generally for illiquid stock banks require significant overleverage, but it is something they do quite regularly, especially for startups with perceived future value.
Even if weren't possible now, it may be possible in the future because Slack (in practice) owns and controls that data without any oversight from you. Anything you say might be deleted after a while, or might be held indefinitely.
I don't agree with your point at all. A high margin business should then be able to get away with massive data breaches compared to a low margin business going bust? It's not about fairness, it's about actually achieving your goals.
My understanding is that Selenium injects Javascript in the page, whether you're using a headless browser or not. The best bet would be to switch away from Selenium and write the code using something like Puppeteer.

If you do want to stick with Selenium, you're better studying the chromedriver source than Chromium itself.
Steve would eat them:

http://www.thesneeze.com/steve-dont-eat-it/
FaceApp Download Estimates (US)
Universal Bypass on AI Endpoint Security Product – “Cylance, I Kill You ”
Nobody was ever fired for using DJB. Meanwhile I would gladly fire someone for using AES128 or the NSA-sponsored curves, despite being in Suite B.
I learned about Xss mitigation 3-4 years ago through google gruyere, a tutorial that came with a sandboxed environment to practice in [1]

Where did others learn about XSS mitigation? Any resources to recommend?

[1] https://google-gruyere.appspot.com/
what took you so long? Oh, and add quantum computing to the list.
> If video streaming subscribers don’t know what they want to watch, they’re almost twice as likely to tune into their favorite broadcast television channel (58%) rather than browse through the menus of their streaming services (33%), according to the research from Nielsen.

> Research by behavioral psychologists has shown that too many choices can overwhelm consumers, create the unpleasant feeling known as “decision fatigue” and sometimes leading them to shut down and walk away from a potential purchase.

> Television viewers also need to choose what channel to watch. Yet part of the allure might be how television just beams whatever’s on the channel instead presenting viewers with even more options on what to watch.

Maybe Netflix hasn't missed this at all. Maybe this is the functionality they're after with the auto-start/preview of any show you hover over.
I think you're probably wrong, but I consent that the article didn't present any information on the illness.
You may be joking but it's true. This is essentially the core of why companies hire H1-B workers.
I still don't understand: what is the difference between calling it WA 38 and Cosmic Crisp?
If you were OK with S3, then I'd recommend backblaze. Very affordable object storage. I used rclone to back up my home server to it every night.
Walmart's profits are a fraction of amazon's, though.
Facebook doesn't use Mark Monitor anymore. I beleive they own their own entity to manage their domains. RegistrarSafe
Sounds like a sh*t job.

But interesting to see how the job transformed into managing money. Not sure how you get from A to B...
Following up to myself (bad habit I know :-) here are the Samba related talks at the upcoming 2019 Storage Developer Conference at Santa Clara (full disclosure, one of them is mine in conjunction with Steve French from Microsoft).

https://sniasdc19.pathable.com/meetings?query=samba&with[lab...

If Samba is terrible and only used by poor people, why are there so many Samba related talks at SDC ?
The order-of-operations is that it checks RocksDB first, writes to Kafka, and then writes to RocksDB.

If the write to Kafka fails, it re-positions itself in the input topic stream based on the offset annotation in the output topic's last message. The write never went to RocksDB, so it won't be considered a duplicate.

Recovering from a failed RocksDB write is more complicated. The output topic's last message will have an offset that will effectively be beyond the accumulated state in RocksDB. Transactionally the last input topic offset for each committed message is written to RocksDB alongside it. The recovery process uses this offset as a starting point when consuming the input topic. During this process, messages aren't published into the output topic until the offset read from the output topic is reached.
For those here to find out how relevant server rendering is for SPAs in light of this, I think the answer is still very much 'better if you do'.

Some relevant excerpts from the article (emphasis mine):

> Keep in mind that server-side or pre-rendering is still a great idea because it makes your website faster for users and crawlers, and not all bots can run JavaScript.

> Once Googlebot's resources allow, a headless Chromium renders the page and executes the JavaScript.

So, there are still no specifics on what extra delays might be involved, but this seems to suggest what I've heard about JS-rendered content still taking much longer than static content to update in the index (i.e. days to weeks) might indeed be the case.

I.e. seems they are implying that while this works, static content is still preferred by them and takes priority.
> Swap allows you to deal with peak workloads more gracefully for many applications.

This is almost always false in practice though. Peak workloads means more than just lots of memory, it means high CPU and high IO (disk and network). If you under-spec your servers such that they need to hit swap during peak loads they are going to generally cause more problems than if they just die. A server dying is something you have to prepare for and deal with anyways, and is much simpler to plan for than the weird latency issues you'll get with a server hits swap.

Think of it as similar to Erlang's fail-fast model. Better for things to just die and be recovered than to continue on in a bad state.
Well... Yeah. I didn't intend to imply that it will never be a feature (it might already be in higher tiers), and I never intended to imply anything about Slack's data retention.

I was just stating that at the moment, at my tier, I am unable to see private messages.
"I’m not all tinfoil hat or anything" - To be honest, you'd only be a tinfoiler if it wasn't the case. We can guarantee in this information age, your information is collected, potentially by multiple parties. You can rest assured that if your internet traffic hits US network nodes, they are collecting at least some data.
A good example is the Kazakhstan mitm stuff going on. We know the US tries to backdoor encryption algo's. They are just less blatant about it. You can guarantee that China, the UK and numerous other governments are at least trying to listen.
Selenium injects predictable Javascript in both situations.
Having worked with Brian while integrating ring into Trust-DNS, I concur with the assessment from pcwalton.

But, yes, the name isn’t the only thing, but the discourse on the development of ring through the issue discussion on Github is high quality and very conservative in what is accepted. The library is high quality and has decent test coverage, with a diligent review process. All of that stems from Brian’s effort in maintaining an amazing project.
I wasn’t questioning LinkedIn as much as gaming and Bing. But diversification based on revenue doesn’t decrease risk. If in the unlikely event that Windows and Office profits crater, revenue without profit won’t help.
Do you know why in particular 8621 is still in AUTH48? Usually when there's a family of new standards they all get issued essentially simultaneously that I've seen.
Yeah, obviously. I meant "beyond" in terms of fashion. One might work at Facebook destroying democracy and the fabric of society, but hey, they follow some food taboos so it's all good! To really go "beyond" veganism would be to follow a traditional Jain diet where roots and some fruits are also banned.
Nashville advert!
What’s Vivaldi’s Business Model?
hn is one of the few places on the web with a community that notices changes like these and that can contextualize them just-in-time.
He gives a cost breakdown showing that he's almost guaranteed to lose money off it. Azure is charging him 3.5$ per 1 million calls to ratelimit/charge people for using the api. He's charging 3.5$. Consider that Stripe will be taking another 35 cents or so... lets just say if this was a monetization method it's not a very good one.
Compost costs ~$50/ton vs fish meal (a comparable protein BSF is trying to displace) costs ~$1,500/ton. Why? Compost is a very low level of organization, whereas protein is a very high level of organization.
The parent comment was unsubstantive. It served no purpose, but to falsely paint the author as a victim. I disagree that calling someone a "drama queen" is flaming or name-calling.
My VPS (Digital Ocean) gives me a whopping 25GB for $5/month. Are you saying you can get a TB or more of storage included with your VPS for $5? Please tell me where!
For avr-libc, probably this: http://tool.oschina.net/uploads/apidocs/android/guide/topics...

Unsure about mingw/go, but they are likely deps for some Android ecosystem project.
I'm in the same boat as you. But maybe we aren't the target here--if we were to feed this to our children from a very young age, maybe they wouldn't have the same reaction as us.

When I saw a video of how sausages were made much later in my life, it didn't have the same queasy feeling since I have eaten and enjoyed sausages from childhood. My brain says that the way sausages are made is _far_ more disgusting than the way these larvae are produced, but my stomach doesn't feel the same way.

Let's help guide the next generation's stomachs in the right direction. In the meantime, I'll see if I can get used to eating some kind of ground-up bug meal.
Who cares? Carbon doesn't have an effect on the environment. Fools.
Pointer Tagging for Memory Safety
> Where do I start? Study the chromium source?

I'm curious why you'd jump straight to browser detection as the most likely culprit. When I was doing scraping, the far more common case was bot detection by origin and access patterns. It's just very difficult to make an automated scraper look like a residential or business user.

Where do you run your scraping operation? Is it in AWS or some other hosting provider, because that will get you blocked quickly by a lot of sites? Do you rate limit, including adding random jitter to mimic the way a human might use a browser?

There's scraping services available that essentially use a network of browsers on residential connections with their extension installed to get around scraping detection. It's much slower, but it's much more reliable. We also had some success by signing up with a bunch of the VPN providers (PIA, NordVPN, ExpressVPN, etc) and cycling through their servers frequently. Anything to avoid creating patterns that look automated or being tied to an IP that can be blacklisted. I'd start there before I'd worry about hacky javascript detection like in this story being what's tripping you up.
In the scenario I mentioned, it doesn't always involve waiting for someone to always ask you to speak before you say anything, It's primarily the art of holding back on saying anything until everyone else wears out their voices, or until they turn towards you for your opinion.

These days a lot of people feel the need to be first and last to talk. This way, you're in the middle, but not overly invested in being heard, but choosing times when you speak, and choosing your words carefully for relevance, for best overall impact.

Eventually after a while of practicing this, people grow into the habit of looking forward to your input, and they always ask you for it, provided you don't screw up things too often.
I'm a tax lawyer, dude, I deal with the IRS on a regular basis and have successfully managed an IRS challenge to a client's (sports memorabilia) collective appraisal.

The IRS does not have the right to override an appraisal.

What happened was this: taxpayer valued art at $0 without any supporting evidence. IRS special panel for appraising art (comprised of professional appraisers and art museum curators) valued art at $X million without knowing that it was illegal for taxpayer to own said art (because the law allows museums to own such items). Taxpayer challenged, saying they couldn't actually sell art for any amount, and the IRS agreed and waived the assessment in exchange for the taxpayer relinquishing ownership of illegal item to a museum.

The only reason the kids in this situation even "owned" the art was a special dispensation given to their ancestors--not them--allowing them to "own" the art (a stuffed eagle) while it was in the possession of a museum. The dispensation didn't actually give the ancestors the power to transfer ownership to their children and there was a legal question that it could even be inherited.
I wake up at 4:00 am Every Morning
My setup at home is a 3-foot monitor that I sometimes split-screen Mac and Windows on. I don't like to use Mac keyboards on Windows (and vice-versa), so rather than using Synergy I have two keyboards / mice at the desk -- one on a tray, and one on top.

It works nicely for me.