skysight-inc/HackerNews huggingface dataset:
This is without merit.

Facebook is free to register as many domains as may please it, paying the fee for each. Those registrations are for exact strings. They do not include any strings visually or phonetically or typographically similar to the registered string. Registering facebook.com does not automatically confer the rights to facebook-cdn.com, or facebook-images.com, or any other nearby string. The remedy for potential phishing domain names is to either register all those text-adjacent names first (unlikely), or to install measures on the registered domains that make it harder for phishers to fool the users, and limit the possible damage when those ruses succeed.

You can't break the whole DNS system to protect one company. Do your own danged phishing defense instead of trying to turf it off onto others as an externality.
My assumption is that "instagrambusinesshelp.com" was impersonating Instagram to scam people. Instagramsucks.com probably isn't trying to impersonate them, just complaining about them.
Nationalizing it will politicize pharmaceuticals

You need to keep the politicians out of the pipeline and put physicians and pharmacologists in charge. It's more difficult in a country where the public service has been gutted for 40 years, but it has to be done.

Right now there is insufficient research in antibiotics and tropical diseases and far too much in cancer. The market isn't going to fix that misallocation of funds.
As much as I despise Facebook, it's great to have this kind of pressure put on NameCheap. When I first setup my own website many years back, I made the mistake of listing my email in plain text right on the main page. Fast forward years later and I think I've been added to every spam list possible. If it wasn't for exceptionally-aggressive email filters, I'd get 500+ spam emails a day.

In various times throughout the years, I'll run a WHOIS lookup on the last 1000 emails to have (attempted) to send me spam email. In 99% of cases, they resolve to a proxied NameCheap domain. I have submitted somewhere in the ballpark of ~800 domains throughout the years to NameCheap's abuse department. While they are timely in their "investigation", only about half of them are shuttered, and it's not clear to me if NameCheap is actually attempting to solve the problem as I strongly suspect there's a limited number of individuals behind the mass of nonsense domains used to spam me and likely countless others.
It is their proprietary T2 chip that controls things like FileVault (fulldisk encryption) and Touch ID. So a vulnerability on Mac would not be nearly as severe as on Windows, where the this can eventually compromise the fTMP used for BitLocker encryption (dTMPs wouldn't be vulnerable, but their integrity protection can be bypassed by messing with their physical connections to the CPU).

The T2 chip has its own Secure Enclave and immutable BootROM, and it supposedly verifies the Intel UEFI ROM before it is allowed to load, and then the CPU reads this from the T2 over SPI. So it would seem that this boot process is not weakened by a compromise of the Intel key, as only Apple can sign UEFI updates to be loaded onto the T2 chip.

Source: https://manuals.info.apple.com/MANUALS/1000/MA1902/en_US/app... (long PDF)
I've yet to work on a codebase that was so congested it required such strong delineation between feature/hotfix/release but I can see how it might be required at a certain size. I wonder what that threshold is.
lobbying :)
Sure, but they were literally neighbors back then. The world has changed since then and we don’t necessarily have neighbors from a completely different walk of life. Additionally, non-tech work has a different domain of deep knowledge necessary to properly serve industry knowledgeably.

Just because your neighbors a welder, doesn’t mean you can whip out a materials inventory app for welders everywhere.
They don’t even like you use “book”.
You're glad Namecheap is protecting the registrant of "whatsappdownload.site"?
I implicitly suggest no such thing.

At some point it's up to a competent adult to do with their lives what they see fit under the circumstances dealt them by life. They are not automatically the charge of others just because they don't achieve some nebulous whim of strangers. Each has their own dependents to prioritize.
No, but if you look around Hackernews there are plenty of blogs that have a high quality RSS feed. I'm not sharing my own personal preferences on here with others for privacy reasons. By high quality, I mean the content is exceptional and not blogspam and the content is updated regularly. Bonus points if the RSS feed is not a list of 'summaries' and includes the full content of each post. Even more bonus points if the feed doesn't have ADs and 'share this on Facebook' links :)
The next time you're driving on a highway in the U.S., entertain yourself by playing this game: count the number of pickup trucks (non-commercial) with empty beds, resetting to zero every time you spy one that's actually carrying or towing something. Try not to be surprised when you reach the triple digits!
>> Bureaucracy is rarely as expensive as aggressive profiteering.

> Have you seen the DoD and other gov entity contracting?

DoD contracting seems like worst of both worlds: a combination of bureaucracy, aggressive profiteering, and rare real-world evaluation of the products.

I'm kinda surprised military production hasn't been nationalized. It seems like it's mainly done by a handful of companies that are almost wholly dependent on government contracts, and the government is loathe to steer too much work away from any of these entities in order to preserve their capability.
> We don’t want people to be deceived by these web addresses, so we’ve taken legal action.

I wonder if they reported the issue first unless it's all for show. I've reported phishing domains before and Namecheap is usually quick on taking them down if the domain belongs to that registrar. I think the last report within 24 hours they plugged it out. So makes me wonder what Facebook is on about with this.

Edit: ok, I missed the "despite their obligation to provide information about these infringing domain names, they declined to cooperate." seems Facebook wanted to go on a witch hunt.
No, these aren't rare cases. If you have certain not-uncommon conditions, you can wait years for services.

Please don't presume to put words in my mouth again.
I can't tell if this is parody, sarcasm, or serious.

But in case you're serious: Sure, because that worked so well for the USSR's food supply.

(That was sarcasm.)
Now I remember a friend sending this to me a while back. Thanks for the info and script!
I used to take cold showers when I was in moderate temperature zone, now I am in US/Canada, and recently started having cold showers (for the last 2 months) almost after 10 years.

I agree to all of the things you said, once you get used to the cold showers, in fact you would want more and more cold water running over you. More cold will get to be fine.

However, one thing I find annoyingly bad, given the time of the year is that I feel by body warmer (and feel that I might run a fever) and had to check temperature couple of times to see it is only normal. Not sure if this is going to be a long term thing or I might get used to it eventually.
Almost all front-end development jobs are looking for React or Vue skills.
Increased road usage taxes.

"For your own good."
It sounds like Facebook asked, not a court. Just because you're a big company doesn't mean others need to bend to your will.
The problem is the level of scrutiny. Against some attackers, decoys have very very nasty game-theoretic failure cases.

Specifically- there's no limit to the number of decoys that could be on a disk. So you can get into the situation where you've decrypted every volume that exists, under coercion, but your adversary believes there are more volumes remaining.

By design, you have no way to prove that there isn't more hidden data on that disk. This is unlikely to end very well for you.
No. The ultimate potential of this attack is the complete compromise of all Intel signing authorities over affected models. Naturally, that signing key does not have any value on AMD systems, nor can this vulnerability in itself be used on them.
This is my experience too. I've used smaller-scale tools (such as docker-compose, Dokku, Heroku etc) but I've found them to be a mixture of unreliable or unsuitable in the case of fairly modest complexity.

Eventually I turned to Kuberenetes to see how it compared. I spent a day-ish reading through the 'core concepts' in the docs which was plenty enough to get me started on GKE. It took me a week or two to migrate our workloads over, and once everything stabilised it has been pretty much fire-and-forget.

I have about twenty pieces of software deployed for my current client and I feel that I can trust Kuberenetes to just get on with making everything run.

I've since deployed clusters manually (i.e. bare metal), but I certainly wouldn't recommend it for anyone starting-out. Personally I'm keeping a close eye on k3s.

I think my main learning during this process – at least for my situation – was to run any critical stateful services outside of Kubernetes (Postgres, message queues, etc). I think this applies less now than it did when I started out (v1.4), but non-the-less it is a choice that is still serving me well.
> I would argue that they still pride themselves in the execution of the designs,

Employees maybe but the company strives to be a mobility service provider nowadays.
My personal experience is that the vast majority of slack complaints are solved by:

- Allowing all users to freely create channels as needed

- Raising user awareness of how to use the very flexible channel notification settings (and muting channels that aren't relevant but still things you want to keep an eye on)

- Threading conversations whenever it makes sense

- Encouraging limited usage of @channel and @here (only use when very important)

Humans are remarkably capable at self-organization when given the opportunity.

At the end of the day, Slack is about enabling natural conversations between people. It is not email. It's chat. If you try to enforce rules on how people naturally converse with each other, you are going to encounter a lot of resistance and friction.
This may not be exactly what you're asking for but every re-encode introduces additional noise (generational error). Over many re-encodings (even at same high bitrate/quality) the noise will accumulate in a predictable manner. See [0] for an interesting deep-dive blog post on the subject.

Now, as for whether or not you can distinguish the re-encoding from it's original source.... difficult but plausible in certain scenarios? Perhaps if the content was heavily re-encoded to the point where you can statistically determine the presence of the generational noise. With only a single re-encode it may be impossible to determine.

[0] https://goughlui.com/2016/11/22/video-compression-x264-crf-g...
And likely wouldn't be infringing Instagram tm.
2 wrongs don't make a right.
And sure, FB uses "dark patterns", but that's a lot more subtle than registering obvious phishing domains. There's simply no defense for that at all; it's obviously aiding and abetting criminal activity.
Sounds like it's time to start thinking about what car culture in the US actually is if we need to resort to stuff like this.
> I doubt your experience is the norm

For children with autism it is the norm.

Sorry, but what they did to my children was shameful.
Netflix's infrastructure IS Amazon
"Spend per employee" is not a great metric. Most SaaS services allow companies to hire fewer people as they expand, but this metric does not capture that.
Oh! I read it multiple times, and each time, my brain auto-corrected "is" to "it".
One name implies it’s related to the company, another does not. That’s why there are judges instead of robots in court.
Agreed 100%. I'm a huge fan of removing all PII from whois info. Get a subpoena if you want that data. Otherwise next thing you know they'll be demanding registrant info for "facebookisevil.com" because it "infringes on our trademarks!!!"
I think the issue is verification that an ad has actually been shown to a human. Even print and TV advertisers can have companies do audits to verify ads get run as expected.

Thing is, nobody ever said ad supported sites have to be viable.
Miata
Is
Always
The
Answer

On a more serious note I have been watching YouTube car reviews for a while and eventually they get bored and start reviewing SUVs and CUVs. There is an internal capacity difference between wagons and sedans.

Wagons and sedans lose internal capacity to drivetrain components because the body rises lower. Great for handling and efficiency.

It becomes really obvious when you look at The Straight Pipes box test.

That said just because the difference exists doesn’t mean people know or need it.
(more anecdote) I've known a few people with corollas and drove them for a long time. All of them have been in pretty bad shape after a while. Engines running rough, lots of physical damage, struts and springs busted, little bits and pieces missing / not working etc. In fact all of them were pretty scary to drive and ride in.

In general they were all beaters that barely ran, but they ran. One corolla went for 2 or 3 years without an oil change and had 2 cylinders with low compression. Friend never got it fixed, but the car was still running (although with very low power). I actually think the general reliability of these cars leads to them being in worse shape. They're running so why bother to fix it. The owners also had a drive it until it dies approach, just generally took a long time to die.
According to ICANN they cannot simply delete the domains-
https://www.icann.org/resources/pages/help/dndr/udrp-en

"Under the policy, most types of trademark-based domain-name disputes must be resolved by agreement, court action, or arbitration before a registrar will cancel, suspend, or transfer a domain name."
> The fact that this is found on so many websites is a controversial thing already.

It's controversial to you, it's not controversial to the vast majority of people. Given that, the downsides of e.g. not being able to retarget advertising, not being able to understand effectively how users are using the website (with minimal effort), etc aren't worth the costs.

Say they were to just have those trackers pre-login and post-login there is nothing, they probably lose more business trying to emphasize this arcane fact that only extreme privacy-nerds care about on their homepage versus simply just ignoring them.
Same here. It turns out west Europe doesn't differ that much on these issues. In fact your answer only strengthens my conviction this is a major underlying reason. You think the French government would take it on the chin and just accept for example not being able to pay pensions?

From what I can gather off frenchproperty.com the 'social charges' tax rate employees pay is very very big (29% employee, 50% employer, total would be something like 65%) while self employed pay 12% to 23%.
Building a live flight tracking app in React Native
> but it's also effectively subsidized by Matrix's patreon backers, such as myself.

I think that's the wrong way of putting it, since that Patreon money is clearly paying for the open component of Matrix. That's work that needs to be done anyway, whether Slack exists or not, and whether businesses choose to host their service instances via Vector or not. And it's definitely a Good Thing that FLOSS suppliers can now get funded via those crowd-based mechanisms - both for aligning incentives and for enhancing the overall "community"/"bazaar" aspect that has helped make a lot of FLOSS software successful in the past.
Stalin spent the latter half of his career killing all the talented politicians, whereas the engineers got left alone. Then the not-so-talented politicians that got left over (some of whom were not so bad) had to fight against a culture of fear, compulsive ass-covering, and magical thinking.
Wiretapping is only illegal if you don't give permission for it. By having a device that's always recording audio, you're implicitly giving permission for what you describe.
Not often age, buy it's the experience and circle that comes with it
And why is this a problem? In some cases it's more of a solution.
Well what's the point of protecting the domain owner if anyone who comes by and asks can get that info?
What if GitHub Actions is just Microsoft TFS?
> A common approach is people believing they can be their own bosses.

Want to sell essential oils for me?
> My experience is that many of the younger folks in my industry are incredibly materialistic. I suspect that's par for the course. It didn't start with this generation.

I suspect that is selection bias. IT and programming have been reliable ways to make north-of-median-income for decades now, since the .com boom in the 90s. This ties in with the rise of the Bro Programmer meme for the same reason -- it's where you to to make money.

Hell, you're posting this on HN, which is the news site for a startup incubator -- which is ultimately about making founders and investors tons of freakin money. Obviously you're going to see a bias to getting that $$$ here
Startups that are founded by people that don't have a lot of skin in the game are exactly the ones that will close up shop after a year, leaving their customers high and dry. It's a meme now about startups with their "Thanks for joining us on our journey, stay tuned for our next startup!"

If you are a company looking for a problem to solve, it's not going to work unless you get lucky. Find something you're passionate about and that is what will drive you to keep going, so that you don't just abandon your customers when things get tough.
This sounds suspiciously identical to a tweet Elon posted last year that went 'viral', including the bit about how people working 9-5 (like that even exists at most corps today) as somehow being 'weak'.
I may be wrong but this is a "MeToo" workflow automation app/engine. It's nothing that can't be done with open source tools, for much less than $400/year per user.

Just research "Open source workflow automation engine" to see it for yourself.

Good luck guys, WORKFLOW AUTOMATION IS A SOLVED PROBLEM!!! You'll make a buck, it's a big pie, but not from everyone.
But the language on Facebook's press release implies that the names themselves are misleading. They don't mention the content.

I'm not disputing that the sites themselves are scammy/phishing, but what Facebook is saying here sounds like an overreach that amounts to "using Facebook trademarked names in a domain name is misleading and inherently untrustworthy".
There are of course insane cases of abuse but there is also tricky part where the cost of the medicine in total will be very high because the population suffering from it is small and the medicine is very complex to develop.

Even IF the healthcare company did not spend tons on money on commercials there will be those drugs that if you want to develop them they will cost a lot of money for the one paying (government, insurance company or individual) if the company wants to get back it's money and ideally make some kind of profit (even if it is very average/low).
Article is written by someone who does not own a truck or SUV and consists mainly of him sneering in superiority at those who do.

Aaron Gordon, whoever you are: mind your own damn business.
First they came for faceb0ok.com and I did not speak out
Curiosity Just Gave Us Its Highest-Res Panorama of Mars, and It's Incredible
I've read that one of the symptoms of ADD is the reaction to stimulants. Specifically, they tend to have a calming effect instead of the typical jolt of awareness.
That’s way it’s funded just Norway funds their social programs from oil revenues and tosses the extra in their sovereign wealth fund like Saudi Arabia. Alaska is listed on the wiki page for basic income.
The rant at this link is mostly holier-than-thou word porn. Try visiting the referenced article instead for a slightly more informative piece: https://www.usatoday.com/story/money/cars/2020/03/05/suvs-pi...
>ICANN has an established process for handling these types of disputes, and Facebook should avail themsleves of that process. https://www.icann.org/resources/pages/help/dndr/udrp-en

Facebook wants information on the registrants. A quick skim of the link you provided suggests that the process only results in the domain being taken down, not information revealed.

>Under the policy, most types of trademark-based domain-name disputes must be resolved by agreement, court action, or arbitration before a registrar will cancel, suspend, or transfer a domain name.
They're glad that Facebook isn't being handed information just because they're a big company. Want private registrant info? Get a subpoena. It should be very easy if you have a legit reason.
So cool that something Linus Torvalds made to solve his own problems, spread all around the world so quickly. I guess great dev tools can only be made by great developers, who have been through a lot of scenarios/problems themselves.
I think it's less culture and more specifically that humans are squishy and wet and incredibly complicated and hard to separate into obviously separate pieces. The body has a kind of almost fractal complexity that makes it devilishly hard to cleanly separate things from each other in many cases.

Also dead bodies (easier to study and dissect) are very different from live bodies (you can get a quick look during surgery, but that's nothing like detailed dissection).
To paraphrase Bill Clinton: "the best candidates never run" with the implied [for good reason because it's a shitty way to live]
> Against what threat? We can think of many ...

The ones we don't even conceive off, or if we do, don't protect against at all.
Dashboard of reported cases of cholera (1949 – 2016)
Our society is so focused on productivity that we forget that the foundation for improved productivity is sleep, exercise and diet. Mind & Body, one system.
In the US you wouldn't be able to write that bill off as a legitimate business expense. The auditor would ask "What legitimate business purpose does this represent?" and they wouldn't have an answer.
This is really good feedback! I HOPE that most of the work we have to do is in communicating what we do rather than actually what we do. But without trust we've got nothing )given this is about a parents kids) and so it's a really important thing to get right either way.

I realize this doesn't change your first impression, but the website is our 'business frontpage.' None of the service (which does definitely include sensitive information) takes place through the site.

Our PP is a bit boiler plate and I think the main thing is to make it clearer about the things you've mentioned and separate the service from use of the website. So for example we do track who clicks on what on the website using things like Segment, but we don't do that in the tech product you use to communicate with the expert.

I'd love to chat more about learning if it's in the communication or if it's what we're doing? If you're willing, could you email tom@trustle.com? (And of course no expectation to do so! You've been so helpful with what you've shared so far.)
It’s about there already being a process for this, and not being cool with Facebook using lawyers to do it.
The phishing sites should be taken down no questions, but
what's the obligation for WhoisGuard to provide information to an Internet company? Shouldn't they provide information only to legal authorities?
> UBI just takes risk out of this equation so A does not have to lend to B in order for this to happen.

For society, the risk is that A is more efficient at investing money than a blind redistribution scheme. That's a multi-trillion dollar gamble.
Actually all PII information is already removed from whois info. I think it was a consequence of gdpr