skysight-inc/HackerNews huggingface dataset:
> Perhaps because downloading Tor (or even searching for it / visiting its website) demonstrates an active interest in thwarting surveillance.

Not if you access tor over VPN. VPN hides all traffic from ISP and Gov. Obviously, make sure your browser does not use Google or Cloudflare DNS.
What is the deal with software patterns?
Yes, 8.8.8.8 and 8.8.4.4 are Google DNS resolvers. Sounds like your Chromecast has them hard-coded instead of respecting your locally configured DNS.

In comparison to your current position, where you're black-holing the hard-coded addresses and the app is falling back to your configured DNS: yes you will be able to continue doing that, assuming the Chromecast will maintain the same fallback behaviour. The exact addresses you need to block and the protocol/ports you need to block may change (eg. to port 443 tcp instead of port 53 udp).

The big thing that DoH will prevent is something that you aren't currently doing, which is: instead of null-routing 8.8.8.8, you could be intercepting DNS requests to 8.8.8.8 and responding to them yourself. You would need to do this if the chromecast didn't fall back to using your proper DNS server. DoH will prevent this kind of interception, so your only choices are to allow it through or block it. And if the Chromecast then refuses to fall back, then blocking it will make the device not work, with no viable workaround short of replacing the firmware.

The goal of DoH is ultimately to prevent your ISP doing the exact same thing to you, ie. intercepting (or just listening in on) your DNS requests even when you want them to go elsewhere. Unfortunately, there's no way to prevent the same protections from extending to a malicious local device trying to circumvent you on your local network.
Interesting. As a dev, anxiety can (edit: sometimes) cause stresses to build up to the point where thinking can be hard. Which is exactly the wrong thing for when you need to tackle complex problems. I've found it's easier to get into the zone late at night when I know no-one else is up and working, and I can just let all that go.

It wrecks the next day though, and can easily turn into an evil cycle - even more so now when having a family and there's no opportunity to sleep in to catch up.

The last thing you want to do is commit code at 02:00. Better to leave it to when you have a fresher head to review what you did beforehand, both for quality and perception reasons.

2nd EDIT: Having to be always online on Slack with all the @mentions pinging off constantly and/or just working in a busy and loud open office with meetings every few hours can be detrimental to being able to build up that mental model needed to see things clearly when tackling something new / that I'd like to get done in a better way. I'm probably not a fantastic dev, and showing my age, but I try to make up with persistence and enthusiasm for my work / field..
So our attitude to others should be more like Wally and less like Dilbert and Alice? I like it! And I may add, “Mission Accomplished”, though it took me over 30 years.
> Yes, if you change the words used, you end up with an inaccurate statement. Why is that something that needs to be pointed out?

Because he is criticizing that exactly this mingling of terms happened!

> Pointing that out isn't uncharitable.

I'm beginning to feel that you're being willfully incharitable but give you the benefit of doubt that you could be merely misinformed.
Send me an email with your info.
> Business majors have had ethics courses for as long as I can imagine

I took a business ethics course in undergrad, and it was surprising how many students advocated all sorts of (to me) aberrant ethical views. (Note I’m pretty traditional, morally speaking. The environment was strongly postmodern, and this was before all the modern insanity about “free speech is bad because some people say bad/offensive things”.)

Not that I minded personally, but it was a strong lesson to me that teaching people categories and how to think won’t give them a desire to respect any particular brand of morality.
This is good for smaller tech elites. They know that they can’t competed against FAnG money either. If they get broken up there will be a lot more open executive positions
Xilinx Pitches Open-Source Framework for Heterogeneous Programming
Maybe you misunderstood the saying? An a-hole is the bully, not the victim. The valuable people you talk about are the victims of a-holes.
Having seen what a competent Red team can do that is not much of a barrier if information its valuable enough
I would suggest taking off the watch before starting a revolution or committing a crime.
I think it’s against TOS of YouTube to publish earnings??
The flu is far more common than you're starting though. That the cold is even more so doesn't mean that most people don't know what getting a flu is like.
Wayne, is that you?

I hated you at first for modifying the core libraries to break standard fuctionality, writing 500-line SQL statements full of string concatenations and using mutable globals all over the place, but now I see your point. Thanks, I have been earning an above average salary fixing your bugs and I will have a job for life. Still, fuck you man.
What I fear will happen in several years is that local ISPs will also begin offering DoH by default (if you can't beat the competition, join them) and continue snooping on your traffic, just like Google or Cloudflare could do now technically, if they wanted to. Ultimately this boils down to which entity you trust more, your ISP or some other provider. Today Google/Cloudflare et al are by far the more trustworthy options for DNS at least. But this may not remain forever this way. The price for privacy/security is eternal vigilance, something end users don't (or can't) want to do.
Its a combination of common law and executive privilege.
> If you're using your ISP's DNS service

Or you can directly ask a domain's authoritative nameserver directly. Using an intermediate caching resolver isn't required. Recursively resolving the DNS query locally only requires asking a centralized nameserver for a domain's authoritative nameservers (the NS records) which can usually be cashed locally for a long time. Every other request is compartmentalized to different servers by domain delegation.

Or do both; configure your local resolver to try recursively resolving a request, and fall back to the ISP (other) cache if needed.
This is easily solvable if you're using dnsmasq -- which isn't altogether unlikely as it's in basically every free router firmware (OpenWRT, DD-WRT, etc) as well as, until recently (replaced by systemd-resolved, but still an easy option to go back) used by default by NetworkManager on Linux desktops.

Basically, you just give it the bad IP addresses and it will replace every query result containing them with an NXDOMAIN.
What did you have to whitelist? I've had third party cookies disabled for a few weeks and it seems to work.
Fun facts:
Average radius (from city centre) of top 20 US cities by population [1]: 15km

Top speed of the latest racing drone [2]: 265 km/h

Top speed allowed under FAA rules [3]: 160 km/h

Average Flight time for a delivery (7.5km @ 160 km/h): 2 min 48 seconds

Assume additional time for loading, take-off, speed ramp, speed slow, landing and unloading: Door-to-door in less than 5 minutes (average).

Sources:

[1] https://en.wikipedia.org/wiki/List_of_United_States_cities_b...

[2] https://thedroneracingleague.com/racerx/

[3] https://www.faa.gov/news/fact_sheets/news_story.cfm?newsId=2...
I'm a firm believer in work-life balance.
If I spent almost every day in the office till night, very highly there's something wrong with my self management.
GO.Exchange | QA Engineer | Bangkok, Thailand | Onsite | Full Time | VISA SPONSORSHIP | https://go.exchange

At GO.Exchange, our goal is to build a cryptocurrency exchange platform that is used and trusted by people all around the world. We are committed to pushing the standard for what a trusted exchange should be.

We’re working hard to build something great: creating a beautiful and intuitive interface, engineering a rock-solid infrastructure, treating our customers right with a world-class support team, and engaging with our community in novel ways.

GO.Exchange is building a state of the art crypto to crypto exchange with a focus on user experience and security. As the team continues to build its platform, quality assurance is an integral part of ensuring that GO.Exchange maintains a level of excellence that our users deserve. We are looking for a strong QA Engineer with technical background and strong Test Engineering or QA experience. The QA Engineer will work alongside the engineering team to continue to provide an excellent product for a global user-based platform. As a QA Engineer, you will help test and find errors by creating and implementing creative and effective strategies for quality coordination and testing as well as suggesting solutions to identified quality problems.

https://omise.breezy.hr/p/4e58330cc086-go-exchange-qa-engine...

GO.Exchange and it's parent company Omise has many more job offerings, please check https://omise.breezy.hr/?#positions for the full list.
I am proud when I complete a long-term project. All nighters are detrimental to that. Anyone truly committed to a long-term project inevitably comes to the same conclusion
I worked on an international team with non-native speakers and we found proper casing and punctuation easier to read.
The article responds some of your concerns:

“Machines have been making frozen pizzas for years, but Picnic’s robot differs in a few respects. It’s small enough to fit in most restaurant kitchens, the recipes can be easily tweaked to suit the whims of the restaurants, and — most importantly — the ingredients are fresh.“
I have to agree with @toomuchtodo -- the "bio" part gets gamed by the industry.

That said, I own a "biodiesel" vehicle and hope to find the time and opportunity to actually make my own fuel.
Drepper has been gone from glibc for many years now.
I met Prince. He had no trouble getting dates. I did notice the attractive woman he was with at the time was about his height.

One tall woman I knew complained about the same thing - in reverse. She was maybe 5'10" or 11" and always complained that guys wanted short women. I was confused because she was tall and very attractive. I think she had just psyched herself out.
use-application-dns.net [0]

[0] https://support.mozilla.org/en-US/kb/canary-domain-use-appli...
The boot-loader injects randomness into the kernel before starting the kernel (using the saved random seed file), so you can have randomness from the very first bit of initialization.
I'm one of the author of the post, happy to answer any question.
When I worked as a corporate lawyer, I remember some associates would send emails late at night in order to give the impression that they were working through until that time.
Turbulent | Game platform back-end Developer | Montreal, Canada | Ideally onsite, Remote Possible |

Turbulent builds & deploys technologies to connect game developers and their audience.

I am actively looking to fill several positions in our game services team working on Star Citizen. The tech stack is composed of Node, Typescript, Kafka, MySQL, Redis, over EKS but our team also mingles in C, C++ (game client and server), NNM and launcher.

We strive to build highly distributed systems that power the social elements of the MMO including services like voice, chat, groups and others.

We are looking to expand the team with qualified members to tackle even more aspects of gameplay services as well as the connectivity of the game world to the real world.

Feel free to email me directly.at b at turbulent.ca.
Forget about developing nations, there are plenty of parts of the US where mobile Internet is unreliable or altogether unavailable (I live in Utah, ask me how I know).

Google doesn't even care if you're a paying customer -- they sell phones without expandable storage with the explanation that customers should just use the cloud (i.e., Google Drive) instead.

Laughable.
Call me a cynic, but it feels very typically hypocritical for the author to be a feminist and proponent for women’s social change yet repeatedly post half naked pictures of herself and partner on social media and Instagram. You have to admit the absolute double standard and conflicting message there.
> Cloudflare and Google pay ISPs for the latency they get, FWIW. If I made my own resolver service today I would not be able to compete with your ISP without forking over $$$.

I think the main reason for this is even if your competitor grew like a weed, it would be a decade or two before you had the scale to justify rolling out a CDN/caching infrastructure like that of cloudflare. That's not a matter of simply paying ISPs money.
My intention wasn’t to judge the position, just pass along the data point.
If you want to actually get a pretty decent idea of how much you can make, someone made a good video about it: https://www.youtube.com/watch?v=do1VLjNg6AE

Your earnings vary a lot based on what kind of video you make so it's somewhat complex.
What is the conflicting message there?
I typically go with "Linting". "Formatting" could mean something different in some contexts.
All of Google's large scale plans have strong centralizing effects. The benefits are not worth it.
I mean routing traffic to Tor entry guards through VPN services. The Tor Project does indeed not recommend that. They argue that using a VPN service is risky, because it can log everything. Where access to entry guards is blocked, they recommend using bridges (of one sort or another) run by Tor volunteers.

I don't agree with that argument. Because ISPs can already do that. And for most people, their ISP is far more likely to be cooperating with their local adversaries than some random VPN service is.

And for what it's worth, one of Tor's inventors (Paul Syverson) has agreed publicly that there are reasons to access Tor through VPNs. Basically, when you don't want your ISP to know that you're using Tor. Indeed, if I were a CIA agent using Tor in Iran, I probably wouldn't want the ISP to know that I was using Tor.

But I don't trust VPN services either. So I use nested VPN chains. That's basically the same approach that Tor itself uses, routing traffic through multiple (three) relays. So no one relay (or for me, VPN service) knows both who I am, and what I'm doing online.

There's also the issue of trusting the Tor network. Some argue that it's compromised by US TLAs. So with a nested VPN chain between me and entry guards, I'm less concerned that some TLA is running them. But even if that's just paranoia, there have been bugs that deanonymized users.

For example, some years ago, CMU researchers exploited the "relay-early" bug to allow malicious entry guards and exit relays to exchange information, and so learn that they were routing the same circuit. That allowed said CMU researchers to deanonymize Tor users. The FBI learned of this, and subpoenaed the data. And lots of people went to jail over it. Mostly drug dealers and child pornographers, but whatever.

However, routing VPN services through Tor is a totally different matter. If you do that, your anonymity depends entirely on how anonymously you've obtained, paid for, and used the VPN service. If you used an email address that's linked to you, you're screwed. If there's a money trail in paying for the VPN service, you're screwed. If you ever use the VPN account without Tor, you're screwed.

And even if you manage all that anonymously, the very fact of using a VPN through Tor decreases your anonymity. That's because Tor by default switches circuits at ten minute intervals. But when a VPN is connected through a Tor circuit, that circuit is pinned. So by using a VPN through Tor, you've blocked one way it increases anonymity.
This is a boon for Indians.
Another favorite:

You integrate a "service" by creating and linking a library that implements the entire service, including data access. Now try tracking down everything accessing the "service" database, or rolling out an upgrade to the "service".
The top firms all recruit heavily from biz schools with the #1 criteria of billing a crazy amount of hours. I'm not surprised they're trying to market themselves as "less ridiculous" than the competition but don't really believe it. We would work until 7 or 8, go eat dinner and drink on the company dime (purposely with only other consulting team members) then go back to work, drag ourselves to (most likely) a hotel room for a few hours of sleep (because they prefer to keep you on the road) then back to work and repeat. Low utilization was 2200-2400 hours annually with many (most?) billing substantially more. It's hard to believe that a business built on taking a piece of every hour worked would be serious about cutting back the number of hours.

They treat young workers like oranges, squeeze out all the juice and pitch the rinds. The math says not everyone can make partner so don't worry about keeping people happy, just load the funnel with new grads.
I applied a few weeks ago and haven't heard anything. Any idea when I could expect to hear something back?

I'm very interested in working for Aptible. I've built software for a health tech company for the past few years and dealt with compliance daily.
A work environment so demanding that people keep leaving the company to seek better work/life balance is a feature, not a bug. Accounting is really not that hard, and neither are consulting, or banking, or law, or any of the other 100 hour week industries. If basically everyone can do their job competently then how do you decide who to promote to partner? The answer is to work all the juniors to the bone until most of them burn out and quit. Problem solved.
50 chars seems pretty arbitrary to me. I'd rather have a useful commit message. I've seen some pretty contorted messages conveying no real info in order to meet an imaginary character limit.
i suspect they somehow throttle this traffic -- i used to use 1.1.1.1 for a while and had to repeatedly switch out b/c my dns resolution times would be terrible after a while
along the lines of “Men objectify women and treat them based on their looks...” Proceeds to post sexy and half naked pics for exposure and thus advertising revenue.
No they fell out of my pocket. After I found them I knew exactly when I lost them — when I got out of the chair. And either way it should have at least registered the last time I used them.

The last know location was from two days before I lost them.
There is virtually no DNSSEC deployed on any major sites on the Internet and, because DNSSEC is a terrible protocol, it's unlikely there ever will be. I'm a broken record on this; you can just search "author:tptacek DNSSEC" in the bar below to get lots of different reasons why.

The most important thing for this thread though is that DNSSEC provides zero privacy and, in ordinary deployments (where you talk to a nameserver rather than directly running on on your computer) no protection against injection between you and your nameserver.
It took me over 10 years to overcome this. For the longest time, I needed fatigue to kick in to overwhelm the anxiety and enable productivity (albeit at nowhere near my potential).
Came here to post this. I cannot recommend this book highly enough. For one thing, the quality of the author’s research speaks for itself:

“The book is based on more than 50,000 documents, primarily from the archives of the CIA, and hundreds of interviews with CIA veterans, including ten Directors of Central Intelligence.”

https://en.wikipedia.org/wiki/Legacy_of_Ashes_(book)
ThoughtWorks Technologies | India - Pune, Bangalore, Hyderabad, Chennai, Mumbai

We are passionate technologists who believe in the power of software and technology as tools for social change. We contribute to a multitude of open source projects. Primarily we are a Technology Consultancy Company. We look for zealous Technologists who are keen to learn on job. We value Object Oriented and Functional Skills. DevOps and Agile are a normal way of working here.

Skillsets/Platforms/etc.: C#, Java, Ruby, Scala, JS, AWS/GCP/Azure, Python, Node.js, React, Angular

Requirement: 4+ years of programming experience.

Interview process: Take-home coding assignment, Pair programming interview, Technical Interview(s), Leadership

More about ThoughtWorks: https://www.youtube.com/watch?v=MBqquBtwaNM

https://www.thoughtworks.com

Contact: siddhark[at]thoughtworks.com

Please send email with 'Hacker News' in subject line.
As a night owl, I have to think that at least some of those people are just showing up in the morning because that’s what’s expected, and then spend most of the early part of the day spinning their wheels until their brains kick in later and can actually get something done.
I've used your store a bunch of times, thanks for making it! :D
Difference between Google and Amazon towards customers (2011)
It’s almost 2020, not 1940. We have major cities that are majority nonwhite. We have entire statewide school districts that are mostly nonwhite. We have huge metropolitan areas that are mostly nonwhite. You can walk into an expensive luxury apartment complex in an immigrant heavy city and find tons of nonwhite people.
You don't. Buy WiFi cards that are supported for your distro. The USB dongles are worthless IME, get a PCIe card.
https://wiki.debian.org/WiFi#Availability_of_compatible_WiFi...
Michel Foucault: Power and Struggle
Peloton prices IPO at $29 per share
That’s not the primary purpose of government in the United States. And that’s not how government derives the right to execute laws in the United States.

We govern ourselves. The government is given the right to execute laws by the people who vote. The Bill of Rights clarified that any other rights are reserved by the people.

Additionally, most federal information is public domain and owned by the people. That’s why Freedom of Information Act requests are effective.

Freedom isn’t free and things might not always be this way if we don’t protect our freedoms.
I saw that from wastes of space Product Owners. They weren't even sending anything useful, it was just "Thanks for getting back on that!" or similar, via email or Slack, just to make it look like they were busy late into the evening.
This article is utter, asinine garbage:

> the fact that a company has gotten so vastly powerful it feels able to threaten to fight and defeat its own government should give pause for civilized thought.

Would you write a similar article about the ACLU when it threatens to fight, and defeat, the federal government in court? Does it violate "civilized thought" when an NGO is able to challenge the federal government when it... breaks the law?

The whole point of a constitutional, rule-of-law democracy is that individuals, businesses, or other organizations can take the government to court and win. It’s not abuse. It’s how the system is supposed to work. This journalist needs to think very carefully about what they are saying, and whether they actually understand the implications, or are just leaking mindless snark.
SwiftUI now supported in Swift Playgrounds app
As a reminder, here is Google's privacy FAQ for DNS.

https://developers.google.com/speed/public-dns/faq#privacy
I may have been faking it and making it till I caught on.

I was faced with a trade-off I don’t know how to make.

Do I prioritize urgent work or important work when not doing either has tragic consequences along similar timelines?

Oh! We invented two words that mean the same thing so we can fake our own inability to prioritize?

sigh
Completely misleading hyped headline. It's not like I'm a big Zuck fan, and Facebook has indeed done harm to our democracy, but this article is over-hyped trash writing with an even more over-hyped headline.

Flag bait.