skysight-inc/HackerNews huggingface dataset:
Companies like CloudFlare are contributing to the erosion of user privacy in the name of security. I experience the same kind of issues that the author of the article highlights, just because I take some privacy measures. It's my view that so-called security on the Internet, which implies confidentiality, integrity, and availability, is getting increasingly worse for end users. If I want to give up all of my privacy, the Internet is more convenient to use than ever. But for the privacy-conscious user, the Internet is becoming less usable by the day.
The reason I said Google because I think that if the NSA pulled some strings at Google, this exploit would not have been published. As such this was all in the hands of Google.
Sure, "autistic people are all individuals with different views" is something I can agree with, and it's probably more correct than "autistic people cannot cope with using the word 'her' when asked to do so".
Great! This is helpful :)
The EU have a corresponding case against the US and Boeing as well.

They can also apply tariffs based on the fact they didn't do so last time they won a case against the US and Boeing:

https://leehamnews.com/2019/09/29/eu-ready-to-instantly-reta...
New, oem it could be about $1300 for the whole headlamp assembly. But used from salvage, about $250-350. Which is a no brainer. No need to put a brand new headlamp in a used car.
Yes, can confirm that they pay dividends. I use Robin Hood and get dividends on several stocks. I’d imagine it would be illegal to withhold dividends.
Asia is the #1 attacker of all websites I work with.

Since 100% of the traffic (based on our analysis) coming from Asia is not legitimate business traffic, how would you advise those responsible for these sites security to handle this?

Edit: I have no interest in using Cloudflare...
> Honestly, you probably wouldn't do that, right?

No, and I never said I would, and that example does nothing for or against my argument. So making up a scenario, saying it'd make me <some negative term nobody wants to be associated with>, and asking me "If you wouldn't do X, why would you do Y?" does not sound like it will progress this discussion whatsoever
> web property owners

WTH is this newspeak, just say website owners.
I'm no expert, but I'd assume it's to make good on other trade negotiations the public isn't privy to. In regards to the like of the extra $9b free up for US exporters to Japan, mostly ag. Complete and utter hidden... on the front page of the ustr.gov site. Takes a real investigative journalist expert to find. I mean, who would ever look on the same site on China trade deals to find negotiations opening up with other countries...

https://ustr.gov/about-us/policy-offices/press-office/fact-s...

Hurting Scotch means a better chance for the Japanese whiskey market in the USA. Total random speculation on that. There are lots of other products without Japanese replacement. Especially since scotch is really one of the smallest mattering products in that list. Parmesan, I argue, is a far bigger deal and we'll see that effect more. At least for me.

But, to be fair, after looking into trade relations for a while, Trump isn't as insane as CNN and BBC makes him out to be. I don't understand why everyone makes it seem like he's throwing dice and making decisions in a bubble. I'm starting to think he's making short term pains for long term gains. Which, to be honest, is the thing we should always be doing. Losing in the short term for mid to long term gains is not insane, stupid or crazy. Just... you know, sucks for a while.

On top of that, everyone seems to be a trade-deal expert suddenly because they've obviously negotiated with foreign govs all the time. I'm not and don't claim to be like others on HN and reddit. I just see there's more going on than just China and things don't look as one sided as it's being made out to be. But then again, BBC and CNN, and social media agreed, thought China would dump $1+ trillion in US bonds for pennies on the dollar and lose out on the loan leveraging they get to "punish the US"...by bankrupting themselves? Which never happened anyways. Such great "economic experts" who can't figure out supply/demand market dynamics taught in macro econ 101 textbooks. Same folks are commenting on the trade war. So whatever...
It gets worse. Boing got (indirect) subsidies[1] to the tune of at least $23bln, says the EU (but denies it subsidizes Airbus and most allegations it subsidized Airbus in the past). And the US even used the Echelon system to spy on European companies including Airbus and gave the information to US competitors including Boing (the EU parliament investigation concluded economic/industrial espionage happened, and former CIA director James Woolsey later admitted to abusing Echolon to spy on European companies).

So both companies are claimed to have received substantial "illegal" subsidies.

This isn't Trump's making btw. This legal battle over subsidies started I think in about 2004, so Trump is the third president involved. But of course, he was eager to jump on it and announce those tariffs now, even before the WTO ruling was finalized.

[1] https://trade.ec.europa.eu/doclib/docs/2010/september/tradoc...
There are many good reasons to hate Cloudflare.

IMHO, them failing to be the prosecutor, judge, jury and executioner for deplatforming inconvenient content aren't quite one of them.
Note that that blog post was published in August 2019, while the vulnerabilities mentioned in the blog post were reported in a wide range of dates from October 2017[1] to December 2018[2] (that's the latest one I found in a quick skim, maybe there are later ones). This Android vulnerability was reported September 2019[3], so it may take 8-22 months before the blog post comes out. The reporter does intend to post a blog post about it[3].

[1] https://bugs.chromium.org/p/project-zero/issues/detail?id=14...

[2] https://bugs.chromium.org/p/project-zero/issues/detail?id=17...

[3] https://bugs.chromium.org/p/project-zero/issues/detail?id=19...
“The US first filed the case in 2004, arguing that cheap European loans for Airbus amounted to illegal state subsidies.“

“The US was given the go-ahead to impose tariffs on $7.5bn (£6.1bn) of goods it imports from the EU following a World Trade Organisation (WTO) ruling on Wednesday.”

The WTO imposed the tariffs against the EU due to a recent ruling.
It's afaik only Cloudflare's way. You don't see that behaviour from Google or Facebook. They really now how to handle the Internet in the "second" and "third world".
Cloudflare is like: we don't care about you, you are too poor or a bot. Here is a extension if you are tech-savvy enough to find and install it.
Movie: Joker See Our Review and Trailer
Presumably you have a method to deter attacks that's better than IP-blocking an entire continent, otherwise you'd be utterly hopeless the moment somebody decides to attack from a North American IP.
Even though it’s a single metric point I like the comparison!
It’s always fun to compare two web optimization companies.
E.g
Fastly and Cloudflare.
https://crux.run/report?domain=www.Fastly.com
https://crux.run/report?domain=www.Cloudflare.com
I was somewhat disappointed to not find Riemann's hypothesis, the Zeta function or even complex numbers involved...

https://theconversation.com/has-one-of-maths-greatest-myster...

https://www.sciencemag.org/news/2018/09/skepticism-surrounds...
Yeah, many cryptographers forget about the XKCD “hit him with this $5 wrench” approach that governments can take.
I think that depends on how you define extravagance. Actual quality aged parmesan-reggiano imported from Italy is of similar cost to filet mignon by weight at the stores I frequent.

Growing up in an Italian household, I often got in trouble for sneaking chunks off the expensive cheese to be eaten without grating. It was reserved exclusively for grating, or served sliced thinly on special occasions.
https://www.scmp.com/news/china/diplomacy/article/2178250/po...

Here is an article which has images of the presentation Meng gave to HSBC.
> Truly, most of us will just switch from scotch to bourbon until this is cleared up (which is the purpose).

I'm gonna pass on that, bourbon is too sweet and tastes gross to me. I suspect if you like Scotch then Bourbon is probably a bad fit.
... then I guess the bet is Boeing took less aid? Seems like a pretty bold move, with no gain.

Honestly, from Trumps perspective it’s probably a win either way. A less integrated world appears to be his goal
“Hokey religions and ancient weapons are no match for a good blaster at your side, kid”
— Han Solo, condemning Luke’s use of VI
I ran into this last week. It's just Google desperately trying to pair phone numbers with identities so it can sell more data.

Sorry I don't have a solution for you. I've just decided to abandon the account rather than play Google's games.
The iOS “deep dive” was a timed media push of a months-old problem right before a major Android release. They didn’t even try to obfuscate the timing or narrative. Blog post or not it’s pretty hard to top that.
Not really, unless you mean it in some sort of religious sense. You still have information asymmetries, power asymmetries, different priors, and bounded rationality. Plus the inherent limitations of any system of decision making.
Or you could just remove cars from the streets and replace them with much more efficient modes of transportation that don't require two tons of steel and forty square meters per person.
OpenDNS used to do this a few years ago.
Why not Tor? Providing more bandwidth to that network seems the most advantageous option. You also get stronger privacy guarantees.
The AI book by the "Yale guys" he mentioned is likely "Scripts, plans, goals and understanding" by Schank & Abelson
it will get worse. Governments choose to fight the people instead of changing their agenda of driving us towards extinction. Expect Extinction Rebellion to grow fiercely and protests to expand all over the planet.
Do the Balrogs issue permits to wake them? How do you prove you submitted the permit - and got approval - before you wake them? Sounds like you're playing with fire.
If the UK leaves the EU while these tariffs are still in place, are they still valid under the WTO ruling against the EU?
How would you get cars up to the roads 20m above the ground? How would you handle maintenance of buildings connected to suspended roads? Are there seismic safeguards for structures like this?

All real questions, I'm fascinated by this idea but clueless as to how it could be implemented.
Not their biggest export, though, was it?

Japanese goods also littered the low end prior to Taiwan, Mexico, Korea, and China.

When they moved away from manufacturing, many of the companies that built their reputations with sophistication and quality licensed their brands to any third party who'd pay to slap on their ersatz and second rate products.

Capability isn't uniform.
Should we treat incels as terrorists?
For months after 9/11/01, everywhere below Canal St was closed to most vehicles. It was wonderful to wander around there.
How many other VPNs are operating out of Digital Ocean?
Using zero-knowledge proofs to get around the "I don't want to carry <content-I-dont-like>" barrier to entry of distributed relay tech, is really very clever. The performance sounds like it might suck though.
The nature of SE is that each site has a very specific topic. The SE company approves which sites / topics are allowed. So yes, by consequence of how the system works they would have to explicitly approve a “Christianity”, “Judaism”, “Islam”, etc. stack exchange.
Yes, nearly all of /r/jailbreak is running iOS 12.x or lower. Specifically, practically no one there has updated to 12.4.1, which fixes Pwn20wnd's exploit.
The EU alleges the US does similar things with Boeing and in the past those crossed accusations have been enough for neither side to call the other over it. The EU's proceeding with their complaint at the WTO and are probably pissed off that the US didn't back down (especially if their accusations have merit) and are trying to get the US to drop this without having to wait for their own WTO ruling, by talking tariffs now.

https://www.bbc.com/news/business-44120525
> without restricting car ownership

Why? This seems like an unnecessary optimization in a city like NYC where the population density already makes it largely unnecessary to own a personal vehicle.

I live in SF which is also among the densest cities in USA and in my 5 years here never have I felt like I'd need to own a car. They're inconvenient and expensive. Most of my day-to-day is easier to accomplish on foot because I'd spend longer looking for parking than it would take me to walk there.

Not having a car saves a bunch of money. Around $8,000/year according to a quick internet search on car ownership. That's a nice chunk of change.

Yes that means I have to get an Uber or rent a car sometimes. Especially for longer trips. About $2,000 last year according to my expense tracker.

Convenience and cost aside, optimizing for car ownership doesn't make sense from an environmental perspective either.
Attacker means what? Serving too much traffic to bots (because that is what this captchas circumvent).
How about that you can measure traffic and reaction times depending on region and also detect peaks? Ever seen a Google captcha on Google search (yes they have them too), it's much much smarter and not saying stupidly to "wrong" countries: here is a captcha.
Do you have numbers that say that 90%+ hacks come from Hong Kong? I mean I run rather popular websites with a lot of traffic in the US, EU and Asia and I don't see that.

I do see that with traffic from China (but then blocking ASN from Aliyun and other cloud provider is enough to stop most of it) but I don't really see that from HK. I would say that blocking all traffic from a region instead of just blocking ASNs from cloud hosts is like using a hammer to kill a fly. It might work but you get collateral damage.

And regardless when I do block ASNs, I block uncached resources. What's the point of blocking static pages?
When has building more roads for cars ever resulted in fixing traffic. The solution isn't to try and make the city more car friendly, it's to remove the cars entirely. Move to streetcars, subways, trains, busses, anything that moves crowds of people rather than 1-5 people.

Cars are such an incredibly inefficient model for moving people around in dense areas -- every person gets their own engine, several chairs, storage areas, and a couple tons of metal?

> If you want to reduce traffic in large cities, without restricting car ownership.

You don't have to restrict car ownership to make people stop owning cars. Just make the alternative much better -- why would I need to own a car if public transit served my every need and I could take a zipcar/car2go/taxi for those rare, rare cases when I needed my own vehicle?
You've been downvoted for saying something positive about the president of the united states. He never does anything good only acts with class and humility!
> Honestly I wonder if even an unusual setup like a static IP

I have internet at home through Comcast, a huge and universally hated ISP in the USA. I also run a home server (though it only takes incoming connections, and does not visit websites itself). I purchased a dynamic DNS service that would update my domain's DNS whenever my home internet's public IP changed.

In over 5 years and through numerous modem reboots, my IP address has not changed once. A year ago I transferred my domain to another provider; I did not bother setting up dynamic DNS again and my website still works fine.

I have not purchased a static IP from Comcast. When I initially set up the server I had read that my home's IP address can change anytime the modem reboots, or possibly anytime at all, to any IP in Comcast's pool - which is why I subscribed to dynamic DNS.

So a static IP may not be as unusual of a setup as you say it is.
Terra partners with Korean convenience store chain to conduct offline payments
Discrimination by country/region often makes tremendous sense.

I tell Cloudflare to block all traffic from China because my services derive zero contribution and zero potential value from the Chinese market. The maximum potential positive contribution from China is near zero. The overwhelmingly likely contribution from China is attacks from within the country.

So, to summarize, in my particular case China provides nearly zero positive value and China is simultaneously one of the biggest attack origin countries. It would be the wrong decision to not aggressively discriminate against their traffic: I lose, in real terms, absolutely nothing from blocking all Chinese traffic.
Yes of course cars now are vastly superior. I was responding to the claim that the shift to electric will reduce gross revenue which reduce the sticker price and so explain any workforce reduction.

So we clearly agree, sticker price has not gone down since the assembly line. So to say it is happening now is not really justified. Especially since, far from say the Yugo approach, electric currently is very much billed as an improvement over petroleum (correctly imo). But while cost of ownership maybe less, nowhere is the sticker price pitched as a cheap alternative to petroleum. And this is what affects manufacturers and the point I was addressing.
The US did not have to impose the tariffs under WTO but chose to.
My comment was deliberately extreme as I believed the parent comment to be. The activities/devices I mentioned can be appropriate in certain locales, and inappropriate in others.

To suggest this new vehicle has to operate at a level to not drown out birds before it can fit into society is silly. It's reasonable to place restictions on their use, e.g. you shouldn't be able to takeoff and land in quiet residential neighborhoods, instead limit them to landing on the tops of very tall buildings or transport hubs.

Also, if people are allowed to use lawnmowers and loud exhausts on motorbikes, and have been doing so for years, suggesting a new technology has to be subject to more stringent restrictions is a little unfair.
I talked about it in the 90s and the only tin foil hat accusations were against those who used it as a jumping board for fantasizing about conspiracy theories. It’s the same with any juicy fact involving the government - there’s a core of truth which is widely accepted, surrounded by a halo of speculation generated by people who want to believe they are party to secret knowledge.
Is it possible to have a "Cloudflare-like" service without using Javascript? I have Javascript turned off by default (no script) and run into the Cloudflare wall all of the freaking time, so much so, I refuse to use it on my websites.
To open the home page? True... But to view search results? I get captcha demands from google all the time depending on the search query (sometimes a query I make looks like something a bot might supply, like searching for a few IP addresses in a row) or if I'm using a VPN or Tor.
EU or no EU, Britain is a prominent member in the Airbus consortium (https://www.airbus.com/company/worldwide-presence/uk.html), and that's unlikely to change despite Brexit. Although I wouldn't put it past Trump to ignore that in order to encourage Brexit, of course...
NameBase Book Index
I bought a Kitchenaid last year and was quite disappointed at some of the "value engineering" they have done to them that is visible to the customer. The paddle attachment was no longer coated, they removed the handle from the bowl (this is the worst and I wish I had access to a spot welder to fix it), and they removed the spring loaded washer that holds the paddle on. The stupid part is that these changes maybe save $2-3 on the COGS (and that is mostly the bowl handle).
Reach out, I’m connected to funding. We may be able to help.
List of things to learn for a uni student interested in back end development?
* python
* django
* postgresql
* aws
* docker
* bash
* apache
* linux

i plan on getting into either data engineering or devops later in my career. for the moment, im just a college student.

what things should i add/remove from this list?
I think it's not excellence, but perfectionism. And different nations, broadly speaking, have different notion of "perfect".

I read it in an article somewhere and can't remember the source, but:

For Americans, something is perfect if it's the best.

For Koreans, something is perfect if it's new.

For the Japanese, something is perfect if it has no flaws.

And it isn't a huge stretch to say for the Polish, something is perfect if it's inexpensive.

Anyway, speaking of the Japanese, an abacus might be seen as perfect if it's a perfectly crafted abacus. They might even be very proficient at using it (A pop science book I read mentions competitions between Americans armed with first electronic calculators, and a Japanese master abacus user, and the abacus user won). The rather extreme example is not to say the Japanese are backwards, but for illustration purposes. They may not always have the same priorities. It doesn't matter much you have superior ways of working with wood and paper if your towns regularly burn down and you have to settle on very, very wide streets to limit damage.
Meeting Spaces and Private Club in Palo Alto
Dont forget trade negotiations. Everyone here instantly has experience setting up macro economic trade deals with foreign entities. They know what the best move is because it's soooooo simple.
Sure, but that doesn't change whether you're giving out a number of shares or a percentage, because both are the same, just expressed differently. There's no common theme where somebody says "here are 0.1% of the company" and implies anti-dilution. It's just easier to talk about percentages than shares, because it's easier to calculate if you know the total valuation. You'll dilute in both cases.
Recently opened a collection of meeting spaces in Downtown Palo Alto. Looking for tech companies of all sizes to join our club. Each member will pay a monthly fee and will receive a number of credit hours for access to private meeting spaces. Pricing details on our site, but if your team needs fewer/more days on average, let us know and we can customize offers.
They explain that in the first paragraph or so.

This allows edit nodes to decide what types of content will be routed to their node.
Yeah but data aggregation and accounting aren't linked.
Tor is funded by the US government, probably as a way of disseminating US propaganda during government overthrows. When conducting psyops, governments sometimes block the online channels the US uses. With them also controlling so many nodes, they can use Tor for surveillance.
You can set the security level to “essentially off” and the vast vast majority of your users shouldn’t have to face the JS browser check. That’s what I do on all of my sites.

The default is medium, and the sites where you run into checks all the time are probably on high.

Ref: https://support.cloudflare.com/hc/en-us/articles/200170056-W...
It seems pretty fortunate that New York was built in the way it has to me. Your entire premise is backwards bud.
On one hand, you have a sclerotic political establishment that at best hasn't figured out that the '90s free trade playbook doesn't work on China and at worst only cares about the WTO for its handy role in policy laundering.

On the other hand, you have this ridiculous flailing, which actually makes the establishment look good. There really is no alternative.

Makes me want to start drinking. But since tariffs are up on scotch, I'll have a bourbon instead.