skysight-inc/HackerNews huggingface dataset:
DDoS has two components:

a) complexity: trick your servers into doing something hard

b) volumetric: overwelm your servers with a lot of traffic

c) volumetric part two: overwelm your servers with a lot of requests, so you respond with a lot of traffic

A and C are things you can work on your self --- try to limit the amount of work your server does in response to requests, and/or make resource consuming responses require resource consuming requests; and monitor and fix hotspots as they're found.

B is tricky, there's two ways to solve volumentric attack; either have enough bandwidth to drop the packets on your end, or convince the other end to drop the packets (usually called null routing). Null routes work great, but usually drop all packets to a particular destination IP, which means you need to move your service to another IP if you want it to stay online; that's hard to do if your IP needs to stay fixed for a meaningful time (TTL for glue records at TLDs is usually at least a day); and IP space is limited, so if your attackers are quick at moving attacks, you could run out of IPs to use. Some attacks are going above 1 Tbps though, so that's a lot of bandwidth if you need to accept and drop; and of course, the more bandwidth people get so they can weather attacks, the more bandwidth that can be used to attack others if it's not well secured.
Yeah they're a big deal for me... I don't care about other users ;)

That's what I mean with "iOS is not for everyone". They try to cater only to the average user. Or at least the more affluent subset of those. I'm not everyone but I'm certainly part of 'everyone' :)

In fact this is really what's pushing me away from Mac too as they're heading in the same direction. When I moved to Mac in 2004 they were a great POSIX capable system with a great UI (unlike the mess Linux was at that time) and custom software. Now more and more power features are replaced by on/off sliders that don't do what I need.

Windows and Android are heading in the opposite direction, adding more power features. I really like the power that things like DeX and Termux provide (though the latter isn't necessarily a feature, it's definitely something that wouldn't work on iOS). I can work a whole day on my phone, multitasking and everything. You can't do that with an iPhone.

Still, both with Windows and Android you give up considerable privacy. And that's not necessarily needed. Things like scoped storage should have happened years ago.
A ... soviet film director? I don't get it.
Aside from this one issue, is switching to 1.1.1.1 a good idea in your guys experience? Right now I just realized I hvae the DNS for my ISP which is probably how they inject bullshit 404 pages full of ads. What is the fastest/best public DNS in your guys experience?
The FODMAP diet is a great dietary option for managing IBS but gut-directed hypnotherapy has been shown to be just as effective as the diet for people who prefer a non-dietary option. The study we reference that found this result was run at Monash University who created the Low FODMAP diet.
This is a purely moral judgement - you can argue, in the most extremal case, that every aspect of a person's behavior is purely "circumstantial". After all, your personality and capabilities are entirely shaped by circumstances like genetics and life experience.

Of course, we understand this is a pretty useless way of looking at things.

From a consequentialist standpoint, the incentives work out the best when we use the heuristic of assigning responsibility for low labor value to the person performing the labor, so that's the approximation I choose to use. You could choose to think that e.g. being very stupid is no one's fault, so a very stupid person should get paid as much as a brilliant doctor, but the net social consequences of this are pretty well explored and pretty bad.
"X ~ p(x)" means "X is a random variable drawn from the probability distribution p(x)" or maybe "X is drawn from p(x)" for short.

Are you sure it's a matter of knowing what to say (in your head) vs knowing the definition of the notation in the first place? I am pretty familiar with this notation, but I rarely verbalize it mentally. I can tell because I read and understand it quickly without problem, but on the rare occasion when I have to read it aloud I realize I'm not sure how I should pronounce it.
Nonsense! The lizard overlords are only pawns in a much larger scheme
They point out that different networks have different needs: home network, deep space network, iot network, in-car network, etc. They call these "domains" (bad name, as it can be confused with DNS).

These networks can be isolated, or connected to the Internet trough a boundary. But each of these has specific needs, therefore they argue that interoperability should not not be strictly necessary between new protocols that are designed for a domain-specific use-case (up to now, I think every protocol had to work everywhere and be able to reach, ie, from one home network to another trough the internet[1])

In part 6, they argue that a protocol is needed to (securely/cryptographically) discover what machine belongs to which domain (this is a bit unclear, but likely to determine what domain a new machine is supposed to join, and where the domains boundaries are).

[1] Which obviously wasn't the case in practice: you want to filter some packets to avoid someone on the internet playing whatever they want on your TV, or print something. You could allow anyone on your home network to do so, but not necessarily in a company network either. Such filtering has been done with firewalls, deep packet inspection, etc. until now.
Is nuxt.js planning to upgrade to Vue 3 soon?
What was interesting and scary is that our monitoring system didn’t notify us. Our email was down because we use cloudflare for DNS and our monitoring provider’s SMS gateway was down. So we didn’t get sms messages.
Ranlon's Hazor
For me, it would be the Composition API. I think it will clean a lot of code I have. I'm not too familiar with other competitive frameworks unfortunately. I chose VueJS for my personal projects because it felt easier to learn.
There'll always be someone who has trouble with a solution you can come up with...

I've used every major email platform and every single one manages to endure despite having emails on one line. Even Outlook does one line these days.
Puppeteer recorder: Chrome extension that records browser and generates script
Cloudflare DNS goes down, taking a large piece of the internet with it
Super happy to see this come out. My wife (of the MIT Museum) did a ton of work on obtaining and preparing the props for it and it was neat seeing her and some of her coworkers in the credits!
You’re doing God’s work. Thanks for all the effort you put in, and still making time to tell us about how you do it.
Exactly. These behaviors seem to be context dependent, rather than engrained in some people vs. not others, and the context seems to be shifting right now.
This is something I did with fast.ai - https://deeplearningmantra.com/
Modern Layouts in 1 Line of CSS
I don't know why anybody ever cared about logging policies. How would you even know if they keep logs or don't, or what they do with them if they do?
Eisenstein seems to have been a pretty interesting soviet film director.

https://en.wikipedia.org/wiki/Sergei_Eisenstein
Nobody is saying Germany is a horrible place, but pointing out problems is the only way one can fix them.

That's why "complaining on a high level" is a rather German thing.
That's great to hear. It's actually one of the areas we're looking at building a product into due to the effectiveness of hypnotherapy with it.
Even to the extent that we’ve long ignored the constitution on these issues, we still haven’t put the federal government in a primary role for public health. The federal government is not supposed to be the front-line response to a pandemic. CDC’s own documents make clear, for example, that it is supposed to provide expert advice and deal with patients that cross state lines, while states are supposed to handle actual testing and intervention: https://www.cdc.gov/phlp/docs/phl101/PHL101-Unit-5-16Jan09-S....

Same thing with FEMA. It’s not supposed to be front-line disaster response. It’s supposed to be a backstop for when a particular state is overwhelmed. That’s why FEMA is legally not allowed to act until a governor declares a state of emergency and asks for assistance. But every state is supposed to be prepared to handle their own disasters. FEMA is a backstop—it’s not supposed to have the resources to help every state at the same time.

The NIH is a research agency. It doesn’t have an operational role in public health.

Even if we overlook what’s “explicitly enumerated” and we look at the structure that exists today by historical accident, the federal government is still relegated to an advisory role, and dealing with travel. But those aren’t the things that went wrong with the pandemic response. Lockdowns are an operational role, and entrusted to the states. PPE, testing kits, having people in place to do tracing and isolation? All of that is operational, and was assigned to the state governments. Mask orders are an exercise of the general police power, and entrusted to the states.

Again, this is not an ideological point about how things should be. (Although, they are this way because that’s how the constitution sets things up.) It’s a point about whose job it was to be prepared. The states were supposed to be prepared for this, and they weren’t. By the time the pandemic hit, there wasn’t much the federal government could do. It could advise states about tracing and isolation protocols, but it has no boots on the ground to actually do any of those things. The states were supposed to be prepared to do all that.
The public schools are only one part of our civilization. The ineffectual and incompetent national response has left no good options on the table for public schools. No matter what happens now, we're sacrificing some children because the assholes in power couldn't be bothered to care about things other than themselves.
DNS worked just fine throughout this. You're barking up the wrong tree.
It's certainly not an insult, more of an everything old is new again type thing.

Universal commenting has always made a lot of sense to me. As applied to casual web-surfing, the concept reminds me of the logbooks I used to see hiking the Trail and whatnot. They get a little noisy after awhile would be my one comment.
You can already get some of these benefit by going to Settings -> Privacy -> Advertising and turn on "Limit Ad Tracking".

This sends an all-zeros IDFA to all APIs that request it^1.

iOS 14 begins the new prompts, lets you toggle this on a per-app basis, and, by being in front of users is just about guaranteed to dramatically increase the number of users who are opted-in.

[^1] https://support.appsflyer.com/hc/en-us/articles/115003734626...
"Pink" also brought us Dylan, Kaleida and Taligent. The old Mac team was pretty core to General Magic w/ IBM, Motorola and AT&T as partners. A lot of it was pretty good! But it suffered from a top-down "from on high" market introduction, and somehow never got traction. Which is too bad. (General Magic's mobile agent model also had some unfortunate dynamic security effects when an agent "traveled to a 'bad neighborhood' to compute on the results of a query, it wasn't allowed back into the gated-community good neighborhoods to deliver results. Large distributed systems got pretty unusable pretty fast. Unfortunate - because I liked the vision - and some super-smart people worked on it - and I was surprised they didn't catch that early on)
Didn't the feds hack a lot of Tor exit nodes some years back?

https://arstechnica.com/information-technology/2014/11/law-e...

What's to stop them from doing that today or simply running their own? It would be a minor expense and effort for them.
Yes, me too! Ended up using libpcap which was displayed in a Java Swing GUI. It's amazing that it was less work that way but we were able to get it working in a couple of days that way.
> Having read the Tesla website myself and understood its claims, they are not false.

"The driver is only present for legal reasons".

Really? That's a direct quote from Tesla, a claim. I don't think it at all stands on itself.
Maybe New Relic shouldn't do silly things like charge for monitoring development environments.

I used New Relic, and its a pretty great product. But that left a bad taste in my mouth.

They also kept deprecating services causing more work.
It looks obvious when you write it like that but I think many people are surprised by just how much slower distributed computations can be compared to non distributed systems. Eg the COST paper [1]

[1] https://www.usenix.org/system/files/conference/hotos15/hotos...
I recommend taking the State of CSS[1] survey, it is a nice way of keeping up with the latest features. Other then that I use PostCSS with the postcss-preset-env[2] plugin. There you can enable various future features of the language and have it compile down to a more supported version. If your really want to dive into the future of CSS you can read the issue board for the CSSWG[3] (beware, it can suck hours out of your days). Smashing Magazine[4] and A List Apart[5] also sometimes have articles about a new(ish) or upcoming features.

But the CSS community could really benefit from the spec maintainers having more active bloggers among them (e.g. like Rachel Andrew[6]) and provide a regular update of the language like 2ality does for JavaScript[7].

1: https://stateofcss.com/

2: https://preset-env.cssdb.org/

3: https://github.com/w3c/csswg-drafts

4: https://www.smashingmagazine.com/

5: https://alistapart.com/

6: https://rachelandrew.co.uk/

7: https://2ality.com/2019/12/ecmascript-2020.html
Your employer is not your family nor like your family. It isn't your parent, nor brother, nor cousin. It isn't your friend, in the sense that even if your boss may personally be your friend - the company has an interest that's contradictory to yours: Making more profit off of your work.

---

As for AirBnB - I really dislike them. They eats away at the supply of apartments available to people for actual rent - you know, to live in - in favor to catering to rich(er) tourists. This naturally drives rents up. So, the employees were part of a somewhat nasty "family".
> I don't use cloudflare DNS but google DNS and got the same problems thant everyone else

Cloudflare is also the authoritative DNS server for many services. If Cloudflare is down, then for those services Google's DNS has nowhere to get the authoritative answers from.
That’s really cool, its taking self-hypnosis to the next level. I personally dislike hearing the sound of my own voice haha but glad to hear you’re finding it helpful.
School districts should give at-risk teachers the first pick for virtual work. When they run out of virtual teaching jobs, they should offer voluntary furlough. Allowing teachers the flexibility to temporarily leave would allow younger and healthier risk-takers to step up and do the job during the pandemic. In our current economy, there are tons of young healthy workers willing to take these teaching jobs.

Any worker is free to quit if they don't agree with the risks. The real problem, that I don't see mentioned anywhere, is that teachers want to continue being paid the same salary and benefits to teach virtually, despite virtual learning being a disaster. They want to have their cake and eat it too.
Worth noting that you can already get some of these benefits today by going to Settings -> Privacy -> Advertising and turning on "Limit Ad Tracking".

This sends an all-zeros IDFA to all APIs that request it^1.

iOS 14 begins the new prompts, lets you toggle this on a per-app basis, and, by being in front of users is just about guaranteed to dramatically increase the number of users who are opted-in.

[^1] https://support.appsflyer.com/hc/en-us/articles/115003734626...
What is this GPT-3 all about?
B) is the only one that really needs a solution and traffic is breaking two or three levels above you.
https://news.ycombinator.com/item?id=23872836
I'm not very familiar with DDoS protection strategies. Can you please elaborate on what is meant in (c) by "make resource consuming responses require resource consuming requests"?
Their APM interface is pretty good, but has some weird issues.

Infrastructure & Insights are terrible. Just terrible.
They're not perfect for everyone. It's usually a huge blackbox for advertisers who don't know what they are getting until they've dipped 50-100k into it and tracked the resulting conversions later in the funnel.
I dunno... $8000 builds a 64c/128t 256 GB RAM workstation with the same GPU these researchers used (https://pcpartpicker.com/list/P6WTL2). That's arguably in the realm of home computer for just about anyone making $90,000 and above, I would think; I would also think anyone working in those fields could command at least that salary or greater, unless they're truly entry level positions. Seems it would be a reasonable investment for someone actively working in the area of machine learning / artificial intelligence.
For $10k a day, you can hire a lot better than two burnt out junior devs. If you want that money to keep flowing, plow some back in into getting several more senior people on it.
Given their new "4-6 weeks and its done" schedule it's now just a political mouthpiece neutered to prevent any negative messaging near November.
> as fast as you can get packets between the machines

This seems like a really big limitation
The new Composition API for components is a simpler, more imperative, low-level way of defining components compared to the older Options API that required exporting an object with fields like 'data', 'computed', or 'watch'.

I personally prefer the older API since its more declarative, but I can see how the new API can help to keep reactivity logic in a single function, rather than across computed properties, watchers, etc. (not to mention the annoyance of having to remember what type each property should export -- function returning object? raw object? object with function fields?).
I don't understand why the big companies don't always have at least two CDN providers, so they can failover to another one if something like this happens.

I know a lot of big companies do, but I am always surprised when you see ones that don't.
> Management performance is, and always will be, mostly but not exclusively explained by "I was around in the right place at the right time to concentrate returns on capital in my hands."

I agree with this statement. [1] seems to agree with it as well, finding no correlation between CEO performance and quality of MBA program or past successes as CEO.

Obviously those aren't the only two factors to consider what makes a successful CEO, but it's what a lot of people in society think.

[1] https://www.institutionalinvestor.com/article/b1db3jy3201d38...
This is just my own vague experience, but I don't think this specific to Twitter, nor does it really have to do with pricing people out.

I think that public APIs in general are a thing of the past, mostly because of bad actors, security problems and scale. Look at things like Clearview AI, just slurping up every photo they can get their hands on. All it takes is one or two abusers and then everyone has to be limited.

The simple instagram API that I used to just get my own most recent post 3-4 times per day, now requires me to submit an application, with multiple size app icons, justification for my use, privacy policy, ToS, etc. All to I can fetch my most recent post from my own profile.

It's just ridiculous how every large website is clamping down on their APIs, but with abuse left and right, they don't really have many options.
No, I changed the setting back and forth while it was down to confirm that the issue was that I could not reach 1.0.0.1. All the entries I tried from my host file were responsive (which is how I ruled out an issue with my local equipment initially and confirmed that it wasn't a complete failure upstream -- I could still reach my servers). Changing 1.0.0.1 to 8.8.8.8 allowed me to reach websites like Google and HN, and changing back to default DNS settings (which reset to 1.0.0.1, confirmed in Wireshark) resulted in the immediate return of failures. 1.0.0.1 was not responsive to anything else I tried.

Again, it may not have been the only issue -- and there are a number of possible reasons why 1.0.0.1 wasn't reachable -- but it certainly was an issue.
“narion-state” is frequently used to denote independently and supremely sovereign participants in the Westphalian system, the principal actors in and subjects of modern international law, to distinguish from other uses of the term “state” alone, which can also refer to subordinate political entities (such a those within the USA or México.) “Soveriegn state” has a similar problem to “state” alone (US states are described as “sovereign”, as well.) “Westphalian state” would probably be somewhat more clear than “nation-state”, but the use is so well established that I don't imagine it changing.
The next logical step from paying SodaStream for weirdly proprietary CO2 is to simply buy a real tank of CO2 and a bottle-top adapter and make your own. I'm not sure how that could be "disrupted" without carving out a niche for a slightly-more-convenient but equally unnecessary middleman.
Applied context that fits your narrative is not sufficient justification for action, and if it is then black/white pieces should be changed also, as you pointed out this your self, black/white - good/bad. Furthermore terms literally applied same way on chess as master/slave in technology, and importantly both terms are applied on inanimate entities. Words pawn is offensive world when applied to people, same as sheep. We are not changing this words, but I guess you are arguing that because world slave through history has only meaning of person that is controlled by another person it is a bad word and should not be used. But then word, master, kings, queens are equally bad words and should be banned also, as is pawn. I am not philologist nor willing to put effort in my own research, but if I had to guess there are many unacceptable words by such unreasonable standards.

I am not sure what would you like me to see in links you provided, since both discussions are in agreement with what I am saying here to a large degree.

I am not sure how you can't see that changing names do not change actions, master/slave will be an action does not matter what terms you use, and how it is wrong as long as it applies on inanimate entities, is beyond my understanding. Furthermore, I do not think word slave should be forgotten, it should be healthy reminder of how evil we where, can be in future, and that slavery exists today.

I am sure you would agree; that it is ignorant behavior forgetting or suppressing an issue, instead of making issue more visible to attack it directly.
https://www.servethehome.com/investigating-implausible-bloom...

This is a good explanation. This article is weird because it's paginated. Make sure to use the paginator below the body to read it fully.

There are many good arguments in that article but the simplest one is that there's simply no modern lithography methods to produce a chip of that size with processing power, signaling interfaces and networking, which are all required to create a trojan ship like the one described by Bloomberg. Additionally you need to provide power to this hypothetical nano-chip so you need more components like capacitors which of course is never mentioned in the Bloomberg article.
It is fairly simple to host, as long as you run on a single machine. (Host volume mount in Docker for eg).