skysight-inc/HackerNews huggingface dataset:
It was two things around 2004-5: 1) people using GWT to make SPAs and 2) the ability to lazy load content through XMLHttpRequest.

GWT was essentially what typescript is today but java and it handled most of the nasty DOM related stuff and browser incompatibilities.
I trust my own DNS provider much more than I trust Cloudflare to be honest. Also, most DNS requests over that “insecure protocol” happened over a single network hop or two and never left the infrastructure of the ISP.

Cloudflare is now a public company and they need to aggressively monetize their services. Selling browsing data is a lucrative business and becoming “the” DNS provider for most users (while locking out all other players) is a great way to build a data monopoly.

Not to mention that being the number one DNS provider will give them many opportunities to break domain resolution for users that don’t use their DoH service, as they also control the DNS entries for many sites (they could e.g. make propagation via normal DNS slower or start providing only a limited set of entries over “insecure” DNS).
With a plugin, people could bookmark/label/index videos themselves within YouTube in a way that is more powerful than what the playlists allow and without needing to resort to browser bookmarks.

Being able to distinguish between "my tags" and "public tags" would be necessary.
Are you just purposely ignoring them? adequate for most businesses (the JVM and its ecosystem its going to be accepted way faster than a CL runtime).
Yes, it is a martial art, and there are some interesting moves.

Also, if you enjoy that sort of thing and action movies, I recommend:

Tai Chi Master

https://m.imdb.com/title/tt0108281

Man of Tai Chi

https://m.imdb.com/title/tt2016940/

There are also random youtube videos of various ‘push hands’ techniques.
Nintendo Cracks Down After High-Profile Leaks
I agree with you. If it said "black thugs" everybody would go crazy over it. (I believe both things should be okay to be said)
I'm guessing it's a reference to how rich people can end up in more pleasant, less restrictive conditions. This is nominally based on security level, but plenty of people seem to think that social class has something to do with it. See, e.g. the notion of Club Fed [1] and how things go for people like Brock Turner [2]. Or Ethan Couch [3], the "affluenza" [4] kid.

[1] https://en.wikipedia.org/wiki/Club_Fed

[2] https://en.wikipedia.org/wiki/People_v._Turner

[3] https://en.wikipedia.org/wiki/Ethan_Couch

[4] https://en.wikipedia.org/wiki/Affluenza
I was a Go customer for a long time and it just boggled me how they couldn't keep the shelves stocked with some items. I'm not talking about something being sold out for half a day, I mean things not restocked in spans of weeks. I've heard grumblings that Whole Foods is suffering the same fate.

I really don't see how this store has improved any of that.
We've been talking on HN about mDNSResponder for over 5 years. It has un-baked DNSSEC support that macOS has never used. mDNSResponder was replaced by another service (Yosemite's Discoveryd) which had zero support for DNSSEC, but instability forced them to revert back.

The macOS system resolver does not support DNSSEC, has never supported DNSSEC, and the fact that mDNSResponder has/had DNSSEC code is not an indication that they're embracing it. By the way: I have better sources on this than just my opinion of the source code.
Web(& Electron) apps are the worst user experience
I think the most expensive isn't the address translation itself but TLB housekeeping when mappings get remapped or invalidated. This is especially true with virtualization where the hypervisor often needs to do extra work like (un)pinning guest pages, translating guest real addresses to host real and reissuing TLB flushes.
Facebook's Mark Chevillet Gives an Update on Brain-Computer Interface Progress
I don’t like this argument and paints a picture that Lispers are overly concerned by some academic aspect of programming. Many people, myself included, use Lisp because it lets us get something done more quickly, more efficiently, more easily, or all three.

It’s true. Importing flask in Python and starting a server takes about 1/2 as much code as in Lisp. Some extraordinarily routine stuff Python has down to a one-liner. A lot of people have also written more Python libraries, so chances are you’ll be able to cobble any random doodad together with a huge dependency tree. But after a certain very short prototyping period, I end up fighting Python’s terrible deployment, terrible efficiency, and slapdash language implementation when trying to build something robust.
Was joke. But yes, tonic water contains quinine, and that medicine is related to the compound used to treat malaria. (I think they're both used, but unclear on the specifics.)
Not apply the same logic to a network-wide ad-blocking HTTP filter and HTTPS.
Threatbutt Internet Hacking Attack Attribution Map
I wonder which fraction of the code actually benefits from these techniques though. Certainly I become suspicious from the fact that examples like in this article always tend to be of a very narrow, specific kind.

In my experience, every worthwhile piece of code outside of certain libraries has enough of what you might call "business logic" that these theoretically clean approaches no longer apply to. This has been true across lots of domains, from games, to CRUD, to compilers, to combinatorial optimization algorithms.

I'd go on to argue that the interesting core of all those problem domains was precisely in the areas that couldn't be solved using cute techniques like OP's.
I think the point there is not that there are a lot of them (how many raping gangs is a lot?), but that they are predominantly of those origins.
I'm not a good data scientist, but does Figure 5 look suspect to anyone else? That trend seems to be the central conclusion of the paper, but the data seems to indicate that there are other, more important factors at play. For example, the column of points directly above 0% change in land use. They vary by a large percentage. Another example is the universal 20% drop regardless of land use changes.
How about flynn [0] and nomad [1]? Both have been described as easier alternatives to k8s. There's also k3s [2] that caught my attention.

[0]: http://flynn.io
[1]: https://www.nomadproject.io
[2]: http://k3s.io
I wonder what precautions they take to avoid pests?

With no use of pesticides, I imagine an outbreak of pests could be very costly. In the images we can see gloves and what looks like a blue uniform/coat they're wearing.
By the way... have you tried buying those red glasses that filter all other frequencies including green?

They make you sleepy on demand.
For home network operators who value controlling the name resolution of devices they 'own' MITM won't be enough once embedded device manufacturers start using certificate pinning w/ DoH.
Fair enough. My assumption was that you would consider a source to bytecode compiler an interpreter (to be fair most people do). The next time I say something about Common Lisp I will list all the implementations instead of saying something as simplistic as "compiler" or "interpreter".
I'm dubious. If someone asked me to run such a thing and offered to pay for it, I'd turn them down:

It's too easy to be compromised (via hackers, including the state funded kind) or ordered (e.g. via an administrative subpoena, NSL, or plain court order) and fail to deliver on the expected privacy. This false sense of security might even get people killed, when they think their activities are private when they really aren't.

You might get a strong selection effect for parties who are less principled, thoughtful, knowledgeable, or even outright less honest. Why should someone trust them more than cloudflare (who is already seeing a substantial portion of user traffic, because if you don't use them-- you get DDOS attacks and then mysteriously cloudflare sales contacting you).

The situation with Let's Encrypt is different-- the SSL CA process is already fairly insecure and bogus certs are already easily issued to any party that can MITM traffic to the target server. Even ignoring that ... Any one rogue CA which is trusted by browsers is enough. So there is little to no incentive to compromise Let's Encrypt.
I've considered filling this gap myself. Perhaps less about specifically programmers and more about regular people who have a regular job that dictates their use cases. Almost all big YouTubers are fulltime YouTubers and when it comes to tech and its impact on my day to day life, their opinions tend to be a bit lacking. Ofcourse, if you weren't a full-time YT, you likely wouldn't become big so it's a catch-22.

Secondly, the review genre lends itself to a race for releasing something first and results in only the most superficial aspects of a product considered which I find could be better served as well.
I was surprised to learn about it as well, but historically, Jewish gangsters were notable figures in US organized crime: https://en.wikipedia.org/wiki/Jewish-American_organized_crim...
The article does a very good job of illustrating why you should never program this way, if you read between the lines. More precisely, here is the damming piece of evidence:

> Finally we’re finished! A little experimentation will convince you that this zoop thing we just wrote is in fact just foldr! Pretty impressive for just blindly filling in holes, no?

Yes, that's pretty impressive. Instead of just using foldr, you've reimplemented it, and don't even know that! We also have no idea whether this code we've stumbled into is equivalent to foldr in terms of performance. If I knew you write code like this, I would feel compelled during code review to squeeze my brain to try to see whether there is some library function that does what you just did.

Also, it's absurd to claim that these implementations are the only possible ones and that they are correct, when all you have is the pretty weak type system of base Haskell (even though it is probably the strongest type system in regular use!).

Sure, for a->a there is a single possible implementation, but as soon as you have a list, for example, among your parameters, there are now arbitrarily many possible implementations, which differ either in meaning or in performance characteristics.
If you are going to that level of effort then why not just block the IPs of the marketing servers themselves?
"It's not the fault of this horrible product, it's simply that no one should have been stupid enough to trust it and go on vacation!"
Neither higher ed nor government services require DNSSEC. It's understandable why you'd think they do, because for several years the federal government did require it. They rescinded that requirement. CLOUD.GOV doesn't even support DNSSEC.

By the way, .APPLE? New gTLDs are required to be DNSSEC-signed. It's no surprise that ICANN supports DNSSEC.
I'm not convinced about almond farms. Yes, I've seen the claim that it takes 1.1 gallons of water to grow one almond.

But 1.1 gallons of water has about 3500 times the mass of 1 almond, so almost none of that 1.1 gallons is actually in the almond when it is exported from California.

So how much water is actually consumed to produce that one almond, and how much remains available to go on to be used to produce more almonds or other crops?
> BTW, I've used a similar technique to create a pool of worker goroutines in Golang. Had good performance from it too.

Do you mind telling more about this? Or link, if it’s on Github
We actually built in the concept of "display names" for exactly this purpose. You want to keep the actual field name in the schema so that ingestion works properly, but you also want to describe the field as helpfully as possible. In another comment, Steve mentioned that we are trying to tackle the first problem you mention (how much overlap is there between my dataset and other external factors) with the concept of creating dataset intersection or relevance scores.
Meta is the set of viable strategies GIVEN the strategies that your competitors commonly employ.

Here's a concrete example:

Soccer fundamentals: passing, dribbling, etc.

Soccer strategies: formation, player roles, etc.

Soccer meta: viable formations, player roles, etc.

No one is out there playing a 8-2-1 formation because it's not a viable strategy, i.e. it's not part of the current meta. The current meta in soccer is largely 4-4-2 and 4-4-3.

3 in the back is relatively rare, because it's weak to the player roles that we currently see being employed by competitors. It's not part of the meta because it's a weak strategy against the currently common strategies in the meta.
How dare an application use a socket to make a network request using an application layer protocol for its own use.
They sure do, but it’s a Linux instance that the manufacturer has control over rather than the user. (Which is the real problem, more than just what tech is being used.)
> EDIT: Based on the comments here, I just need to have a kid.

My 3.5-year-old wakes up at 9AM, takes 1 nap, and goes to sleep at 1 or 2 AM.

Most kids are on an earlier schedule, but don’t count on it.
Strange. I'm also in Canada, but TRR is marked true for every domain.
For existing configurations, it makes it a bit trickier to implement. If you ad the aforementioned rules to your DNS and/or IP block list, then Firefox will default back to using the system configured DNS.

But DoH is not targeting ad-blocking specifically, but rather intermediaries that are outside of the local network. There is evidence of ISPs injecting traffic (Comcast/Xfinity) or selling user traffic (AT&T) and this was designed to close one of the last gaps for a fully encrypted flow.

It's possible to setup a DoH server for your local network's DNS resolver, so that all of your traffic leaves your network encrypted, even if not encrypted on your local network.
> You can just disable the feature as well

For now. Where's my option to disable complete blocks on domains with funky/invalid SSL certificates? Gone, for the past few years.

Sure, most people don't need that. Most people don't care about DoH being enabled by default, either. I do.
Yes and No design studio
The reward function does not necessarily hit the fundamentals while you do not focus on them.
I predict that DoH will break many enterprise infrastructures that rely on custom DNS servers. Unwary sysadmins that update Firefox will be in a lot of trouble when they switch this on by default.

We ourselves have a custom DNS setup with an only internally resolvable TLD as a security measure, so this change will break our infra for all Firefox users (thankfully we’re in the EU so we’re spared, for now).

Good thing that Cloudflare wants to centralize DNS and access control anyway, so those enterprises can just switch to their proprietary DNS service and VPN replacement, I guess ;)
https://downdetector.com/status/github/
Fair question - I'd say those at the bottom tend to dislike the system.
At the risk of you being accused of shilling (a risk I'm happy to take ;) ), would you mind sharing the model of the lamp you have found to work well?
If someone asked me to run such a thing and offered to pay for it, I would do so in a heartbeat (build, staff, and move on). You don't get progress without pragmatism and compromise. The benefits far outweigh the potential downside. You want people who care leading the charge.

We should endeavor to build something good enough today, so someone in the future can build something better on our shoulders.
Awesome thank you, I was just trying to figure what the current state of your mental model on the subject is :)
Online vigilantes and private security companies are policing the Internet
Safer protocols don't care who or what they protect. Even if browsers didn't use DoH, other devices could. And any protocol Mozilla can use to protect their users will also work for other devices.

I don't think it makes sense to bemoan the newfound existence of safer infrastructure for everyone just because devices you don't like can also use that infrastructure.
All 50 Adobe apps explained in 10 minutes
That's like saying the existing business model is "crime". What I'm talking about is all the support code and processes that go into operationalizing a vulnerability. Again: it depends on what the vulnerability is, and we don't know, but if it's an elaborate serverside vulnerability that requires user interaction specific to this vulnerability, I'm comfortable out on the limb that says nobody is bidding against anyone to buy this on any black market.

You're also only responding to a fraction of my argument. Even for clientside RCE, alternate market buyers don't pay full freight in a lump sum: they tranche payments because they know vendors will eventually kill the vulnerability and nobody is sure how long that will take. Here, you have a vulnerability where you'd more or less have to get paid royalties from direct fraud, because, again, Paypal can presumably kill the bug instantly.

If you have more specific details on the vulnerability that will enable you to make a clearer case for how this could drop into a system of repeated profitable attacks, provide them. I'm interested in hearing them.

Otherwise, my default response to people saying "this bounty is too cheap because the black market would pay 10x for it" is "yeah, sure, and for logout CSRFs too".
Yeah, I see way too many people watching an hour of tv on their phone or iPad in bed before going to sleep and then complaining they cant go to sleep. I find that I sleep a lot better if i put away screens for an hour before sleeping.
hello, i am in the same boat for the last 7 days.
ive been a Night Owl, for the last 10 years.
now for the last 7 days...
i moved to live outside the city, but i didnt expect that i have to wake up with the village at 4-5-6am
it is killing me.
no sleep for the last 7 days.
and even i try to push myself to go to bed 20pm or max 21pm i just cant sleep well.
i used to work 6-12h a day.
now i barely do 3-4h per day.
i never thought about early riser or night owl...
He's not identifying a minority and labelling them criminals though, he's identifying other criminals that come from a particular minority.

All Romanians != Subset of Romanians in UK prisons.

He also mentions gangsters. It's quite within the bounds of what he's written that Romanian criminals in UK prisons that aren't gang members might also not want to associate too closely with the gangs.
Robert Zubrin Case for Space Talk
Issues with GitHub Today
The articles I have read have generally been history / geography. They tend to be okay.

Can't speak to tech / science / art in the Visayan space.
Which is why I have always (well for the last 5 years or so anyway) said that you want both because they catch different issues.
React doesn't bake CSS into JavaScript and Vue is hardly standard HTML.
99th Percentile Latency at Scale with Apache Kafka
I would suggest you to look into FreeCodeCamp. The content is really good, and they have a nice and helpful community.

All the best!
Yeah, that's why the company I work for lets me use Clojure occasionally; we have a metric ton of libraries written in Java and being able to interop with them more-or-less seamlessly is a huge selling point for Clojure.
I respect this opinion, and some of my neighbors feel the same way. For me it is a matter of assessing the relative risks, and there has not been a violent crime in my town in anyone's living memory. I am certainly not opposed to gun ownership, but a biathlon rifle is not exactly made for self-defense.

There is a benefit to living in an area of trust even beyond the mental benefit of being free from worry and stress. A great bonus for me is that I do not have to be home when someone needs to come service the heating system or look at the pipe under the sink. Local tradespeople know that the doors are generally open in our neighborhood so they can come and go as needed without anyone having to take time off from work to let them in. It is also very helpful for our neighbors who can get into the garage to borrow a tool or leave something they just baked on our kitchen table.

There are definitely places where I would probably not feel comfortable leaving everything open, but I am glad that most of my life has been spent in a community where we do not need to worry about our personal safety.
Do I think it's possible PayPal had an incomplete fix or had a regression or an organizational screwup of some kind? Absolutely, that is possible.

Do I think your 'motivated googling' approach to analyzing either story is likely to produce worthwhile insight? Not really. We've already seen it be remarkably inaccurate.
I read the comment in its entirety. The adequacy of tools is most often measured by their ability to solve the problems at hand. If the problems are primarily social or legacy, then I could see a completely valid argument that using something JVM-based is most adequate. But one might argue Lisp isn’t adequate at all at that point, and one ought to simply use Java.
"12 beats" makes no sense, they're talking about melodic phrases of 12 notes or less. You can also have a same sequence of notes, but different rhythms or starting on different beats and it'll sound totally different. And then there's the non-diatonic, or borrowed chords - doesn't even take into account Lydian or Mixolydian mode. I dunno, first pop melody that comes to mind that is an example, Michael Buble's "la la la" line in "Everything" is not in this collection.

Also, for actual complete melodies, I'm not even sure Happy Birthday would fit their restrictions. It's diatonic and within an octave, but the range is from V to V rather than I to I. So if they're assuming I to I, it wouldn't fit unless they supported mixolydian mode.
I can’t get pass the poor variables naming, though.
I'm not sure the traditional self-checkout kiosks logistically fit into this model, though. In a "normal" store, everyone needs to pay somehow, and security (in person or in LP) can monitor/flag/stop people who try to leave without paying.

In Go stores, you authenticate as you enter the store through a turnstile, which ensures that even if you were to bolt for the door you'd still pay for what you have and there's no reason for anyone to stop you (besides potentially for suspicious activity).

However, once you start letting unauthenticated people into the store, that entire system flies out the window and you now need to once again monitor who needs to manually pay and whether they actually have or not as they're leaving. You need to worry about when they pick up a can of soup and put it in their pocket, but not worry about it for most other customers.

On top of that, accepting cash (even to a machine) requires additional hardware installed (which comes with its own challenges like how easy it is to integrate into whatever Amazon's using on their backend for inventory tracking, etc) as well as manpower (to track/refill drawers, handle issues if the machine has problems, etc). I imagine there could also be a potential need for more security in a store that contains registers full of cash and goods versus a store full of just goods. Lots of stores around here (in KC) are cashless specifically for the safety argument.

Just seems like a lot of extra work that Amazon wouldn't intentionally commit to for a store built on automating employees away.
Social engineering to stay relevant seems to contrast having a solid business model, product or service.

Some Kodak moments last longer than others, but its going to be funny if Netflix is the 1st to drop from FAANG.
But this would be trivial to fix, no?
It's not complicated, but that's also going to take more time , cpu power, and memory bandwidth to do so than just recording dns packets. When you need to do that to millions or billions of connections per second the costs start to really add up.