skysight-inc/HackerNews huggingface dataset:
I wonder how often the reverse happens, i.e. admins sending angry emails to their own users who appear to be scanning other people's networks.

Anecdote: when I was a grad student at AS88, I once got an email asking me to stop port scanning. I was confused because I wasn't port scanning anyone. I asked for details and an admin sent me a report generated by some seemingly off-the-shelf network admin software (forgot the brand), with a bar chart of all IP addresses I was frequenting -- rather creepy, honestly. Turns out I was renting ~20 servers around the world as PoPs for a personal project at that time, and regularly deploying code to all of them at once over SSH (all configured at port 22). Apparently regularly accessing ~20 servers at once over a single port was enough to be flagged as "port scanning". I wonder if people doing actual security research over at the CS department were exempt from nonsense like this.
Message Not Understood: Profit and Loss in the Age of Computing
Show HN: Search and open a Git repository as project or a file by vscode
No, they were forced to act because it became known that the servers were compromised.

"EncroChat sent what it called an "emergency" text to its users on June 13 saying it had been compromised"
I don't really understand the author's stance to be honest. I agree that it's silly to blame them but at the same time the author explicitly acknowledges that the tool is meant to mass-scan the internet and that it's a bad thing:

https://github.com/robertdavidgraham/masscan#how-to-scan-the...

>While useful for smaller, internal networks, the program is really designed with the entire Internet in mind. It might look something like this: [...]

>Scanning the entire Internet is bad. For one thing, parts of the Internet react badly to being scanned. For another thing, some sites track scans and add you to a ban list, which will get you firewalled from useful parts of the Internet. Therefore, you want to exclude a lot of ranges. To blacklist or exclude ranges, you want to use the following syntax: [...]

That 2nd bit is where that "exclude.txt" file comes in, it's not even used by default as far as I can tell.

So basically the author acknowledge that the software's intended purpose is bad, they also decided that it was their responsibility to maintain an exclude list. That's a bit odd IMO. I'd think that in these situations you can either say "I'm not responsible for people misusing my software" and in this case maintaining an exclude file with random addresses as people complain to you doesn't make sense, or you think that you share some of the responsibility if your software is used to do bad things and then it seems like it would make more sense to take the project down or take steps to make it harder for users to do these things.
L2 and L3 are unified caches, they contain both data and code.

L1 code and L1 data caches are separate.
That's precisely the reason why it was meant to be awarded for recent work/discoveries, and cannot be awarded posthumously. It is, and always has been, a grant program.
That should be a decision made by Telegram not Apple.
OK, in that case I'm not a good person to be giving advice since that's not something I've ever succeeded in doing but I'll try anyway.

I think you need to be clear about what it is you're looking to get out of people. Are you looking for co-founders, early employees or what ? I suspect most people won't have much interest in helping you start a business unless they see how doing so could end up benefiting them.

I don't know where you're located but I think most medium-size and larger cities in the US have some communities oriented around tech and encouraging startups, so you might want to look into those sorts of organizations. It sounds like you'll need to expand you circle of acquaintances to find people with more commonality of interest.
Your router is likely to die before you max out 10Mpps. Especially if you have a NAT, that'll probably be more reasonably close to 10-30kpps.
Can anyone be free as long as the STATE , Police and TAXATION exist ?
I was trying to think why mid way the article links to an online casino. Then I remembered how many years ago I took a couple hundred dollars to drop a similar link.

Yes that's right, I think this entire article was written and financed by that one link.

Online casinos need seo juice. They will pay for semi relevant links in blog posts written for such a purpose.

As you can see, none of this is related to gambling itself. The casino just wants website quality points, they have a budget and the author had something to say.
Point 3 is also relevant to opensource/FOSS.
In mainland China, the only examples I've heard of were leading academics. The standard is "outstanding contributions" to China. That's what I mean by "very high bar." Next to impossible is not a bad way to describe it, but next to impossible isn't the same as impossible. Thousands have done it. That's not a lot. I don't think it's even tens of thousands.

On paper, there is also path by which you can marry into Chinese citizenship, but it's exceptionally rare in practice.

"Renounce other citizenships" is complex. Many nations don't provide a citizens with a means to stop being citizen. Which is to say, if you take a Chinese (or any other) citizenship, and renounce your old citizenship, you may still end up with both citizenships.

I don't know specifics about Honk Kong, but I do know the standards are laxer than mainland China.
...and then what? Do they have a massive database of phone images that they can search enmasse?

I've heard stories of DHS taking phones to make copies of them - so it seems like they have a process of taking phone images, and possibly scanning them on the spot.

...but then do they catalogue all these phone images somewhere and are they searched regularly?
You just need to connect GPT3, and the dialogue is taken care of. Lyrebird’s API will take care of the speech synthesis.

Viola! My deep fake can stand in at meetings now while I code.
You need to include a separate actuators module to enable them. IIRC in Spring Boot version 1.5 and older actuators were enabled and exposed as web endpoints by default. The heapdump endpoint mentioned in the article also required inclusion of Spring MVC module – which I guess most web apps do include.

In Spring Boot 2.0 and newer actuator module only exposes "info" and "health" web endpoints by default. Default configuration does expose more endpoints via JMX, though. Also, if your project includes Spring Security module actuator endpoints are secured by default.
The subject of the investigation was carrying a pipe bomb to a political rally.

I'm not sure it doesn't fit the definition of terrorist.
>The most common way I see "technical debt" used is: deliberately code a quick & dirty low-quality-short-term fix to address an immediate problem and we know we'll have to clean this up later for a high-quality-long-term solution that's easier to maintain.

I see this, but I also see all sorts of other things bundled in with it including:

* Code that was written by less skilled developers

* Code that isn't necessarily harder to maintain, but is written with a different sense of aesthetics.

* Infrastructure problems

* Code that the reader doesn't understand

I've almost never seen the origins of the code considered relevant when identifying technical debt either. People don't go "was this deliberately quick and dirty? no? ok, then it's not technical debt". They look at code or work with it and get frustrated and think "TECH DEBT!".
> In current combat deployments, soldiers usually direct their animals with hand signals or laser pointers - both of which require the handler to be close by.

Handlers also use radios with earpieces for the dogs and cameras and microphones to provide feedback to the handlers. This AR system may enable the handlers to give more precise instructions to their dogs.
This looks really interesting, but the website died from the amount of traffic hitting it, seemingly :/
Check out google-ortools which does just this.
So this might be the place to ask this. The list of articles by Matt Levine on Bloomberg has button at the end that loads 20 older articles, when you click on it. Now since Matt is on parental leave I want to read some older articles, let's say from 2014.

Am I correct, that to do that I need to click 6 (years) * 200 (work days) / 20 (articles per click) = 60 times and wait for the page load to do that?! Is there really no other way to access these articles? Aren't they effectively unaccessible for most users because of that?

(I found a way to manipulate a JS variable to get to the older articles, but this is clearly not the inteded use.)

The same seems to be the case for the youtube videos of a very active vlogger. You can easily access current videos or the first ones, but not like from 4 years in the past.

I am asking this, because I always wonder if I am just to dumb to see the obvious easy way to use these sites or if there just is no way to do it?
I'm also looking forward to alternatives. Pico VR seems to be the only standalone headset? Don't worry about selling them, there were no reported problems with switching Quest/Rift to a different account.

I still expect existing devices will continue to work with Oculus account. The FB account will be required for slew of upcoming social features, like using same avatar across different games, group of people moving between games, the Horizon and other social content... If they make existing HW unusable without switching to FB account, they would face class-action lawsuit and media backlash. I think they want to self-regulate as much as possible so they'll try to avoid those pesky court rulings.

As for your original question, FB doesn't care about few hundered dollars across few tens of thousand users that are reluctant to switch to FB accounts. They are playing the long game of becoming the only relevant player in VR/AR market.
If you have something listening on a port that can fall over by someone opening and closing a TCP connection, maybe that special something shouldn't be listening for things on the internet.
They don't serve a similar purpose.

Copyright protects authorship.

Patents protect against reinvention.

It's clear that Oracle needs a patent unless Google outright stole the standard library.
Oh, haha. I’d read that and incorrectly inferred a sardonic reference to the “evergreen” browsers and their endless upgrade treadmill.

But, nope, not a metaphor, an actual treadmill.
Ha ha ha, surely not, it's too hilarious. Must be a top tier troll :)
> I'd argue most bugs are there because the cost of a bug is less than the cost of developer time

You make it seem more planned and reasoned out than it really is. I mean, you can make a meta-argument, that market evolution and pressures push things towards that optimal cost-benefit spot, but on the micro scale it often just happenstance.

Again, the meta-argument can be that even doing the cost-benefit analysis is not worth the cost, but it's quite handwavy.

What counts as "better" anyway? From the engineering perspective it's about efficiency, bug-freeness, elegance. From the company perspective, profits. From the manager perspective, looking good and getting promoted.

You can often game the system by rushing a subpar product out the door, downplaying and not even caring about the defects, wooing customers into buying in with clever sales tactics and marketing, then moving on before things start crumbling down. In some sense this was worth it in terms of your personal costs and benefits and all was done in the best possible way.
When did obama say anything devisive? When did he actively intended to enflame tense situation? When did he say anything outright disrespectful to his opposition ?
Obama may not have been perfect but he was always respectful, always kept his cool.

Comparing Trump's hateful rhetoric of his opposition to
How obama conducted himself is a bad joke.
I recently got my son a chair from DXRacer. When homework due to Corona first started, one of the first things I did was to buy a proper Herman-Miller office chair for myself. He immediately wanted one too, but splurging $1000 on a fancy chair for my son was a bit much, so instead he got a much cheaper gaming chair, and he now considers it a better chair than mine.

I'm totally aware it lacks the range of motion my chair has, though.
Related 'Price Bumps: Tactics for Stocks that can be Used for Cryptos' https://medium.com/@gaetanconsulting/price-bumps-tactics-for...
Try listening to his addresses and speeches over the last couple years, and look at the policies he's implemented. Look at all the dishonest coverage, and yes his blunt way of talking doesn't help, but it's still hard not to conclude that the media is the primary source of him being considered divisive.
As another security professional, I'm laughing my ass off. Imagine wondering what targets might be nice, and reading the comments in this file. How nice of them to email and tell us exactly which IP ranges are sensitive!
A Simple Ransomware Protection
My favorite columnist even when he wrote about me. He always takes the time to return my emails. His voice and wit always bring a bit of happiness to my day. I can't wait for him to return to writing and I hope he's enjoying his new kid.

I actually met his wife when I was going through the SDNY. I was hoping to meet him, but the attorney did not recommend I talk to the "media".
Friendster did sell its patents to Facebook, and I believe Friendster could have ‘lived on’ as a patent licensor.
Ask HN: What did you achieve last month?
Getting excommunicated whilst going through a messy divorce with kids is a problem. It could benefit from waiting until the divorce is concluded, particularly for the sake of the kids' stability. Those events can have repercussions for a long time if antagonised.

You could pick any situation where a process like divorce is started, proceedings or repair of the relationship has yet to begin and an automated service alerts people without immediate knowledge, who in turn pull the levers behind the scenes.

Also the King Henry the 8th parallels are interesting.
"pre-Roman Empire peoples"

Do you mean the Bible?

"Only in the cities of these peoples that the LORD your God is giving you as an inheritance, you shall not leave alive anything that breathes. But you shall utterly destroy them, the Hittite and the Amorite, the Canaanite and the Perizzite, the Hivite and the Jebusite, as the LORD your God has commanded you,...? Deut. 20:16..
>2. Should an API be considered eligible for copyright, wouldn't that enable opportunities for language and library developers to restrict others from developing competing (via performance or utility enhancements) languages/libraries by forcing anyone who wished to implement enhancements to either purchase a license or flat out deny them the ability to do so (assuming the product --including the API isn't open source)?

It would be a software patent except not by name and it would last significantly longer. I can already see both software and hardware patents being abandoned if this court sets a precedent that APIs can be copyrighted. The next day people will want to add everything patents do simply because copyright has a longer duration and it is effective immediately.
Sure, that scorpion chair is utterly ridiculous, but man does it look cool. And a chair that switches between upright and reclining position, while adjusting the position of your screen to match; I can certainly see the attraction in that.
> For some reason the US Department of Defense has 13 /8 blocks.

I did a bit of digging and looks like they're looking to sell:

https://datacentrereview.com/content-library/opinion/1522-th...
>the concept being undermined is that USSR was a superpower

If Time magazine is bragging about having installed the puppet president that came on a state visit to your supermarket I would have thought that concept was well and truly undermined already.

I don't see how that supermarket having a fancy fish counter really contributes to that other than as a publicity stunt.
The person you are replying to just gave an example of a research application. What's not valid about it?
I don't see anything in the article close to implying that you should drop people who are down on their luck.

All I read is: If you talk a lot with finance oriented people, don't be surprised if you start thinking in finance oriented ways.

To give a different example from me personally: For a while I read red pill material, because I thought I could take lessons from it, while dismissing all the women hating parts as I had no reason to be angry with women. Guess what: if you read about a lot of anger towards women, you become angry towards women yourself as well!

So the lesson I took from that was: pick your peer group wisely because you’re giving them write access to both your conscious thoughts and your entire worldview.
In my opinion: If a term is starting to be mis-used, the correct solution isn't to invent a new term that means what it originally did. The correct solution is to teach people not to mis-use it.

We have had plenty of words that have drifted in meaning, only to be replaced by a new word that means exactly the same thing as the original word originally meant. There are several circumstances that cause this to happen. One is if the meaning of the word is mis-understood. There isn't any reason to believe that the replacement word will be any better-understood, so it will likely drift in meaning as well. Another is if the word becomes seen as offensive in some way. Then a new word replaces it with the intention of meaning the same thing, but in a non-offensive manner (which the original word originally had anyway). The new word will also soon afterwards become seen as offensive, and another replacement will have to be introduced.

It would be much less confusing if words just kept meaning the same thing.
> How many people are using Bluetooth with their computers?

No idea about the numbers, but my n=1 uses Bluetooth a lot. I use my Airpods Pro on my laptop all the time, for calls and music and watching videos with others in the room, the noise cancelling is really good and I don't have to drain my phone battery as much. I really like the Magic Mouse, which is Bluetooth as well, and I have a keyboard with 3 Bluetooth IDs that I can switch back and forth between my phone, gaming PC and laptop with a single keypress, and I use that a lot and would use it even more if it could handle five devices instead of three. Apart from that, I have a stationary bluetooth speaker I often stream music to from my laptop to conserve my phone battery, and, finally, one of my electronics projects that I never seem to get around to finishing is a lipo-powered glove-shaped bluetooth midi controller.

Macbooks do retain their 3.5mm jacks, but I hate that I have to be mindful of the cable (i.e. can't move around the room), and good wired headphones tend to be bulkier. I don't really mind a 10-15 minutes charging break every couple of hours, and sound quality and noise cancelling are really good for my standards.
>Let’s not pretend like there are legitimate use cases for scanning ports of networks you don’t control.

You can ask Ebay about that.
Dear Google: the annual $15k-$75k pentest fee to use your API is killing us
For those who don't know: if your app uses Gmail API, you must pay for an annual security checkup that can cost anything from $15k-$75k. Each year, no matter how big or small your company is.

More info here:
https://support.google.com/cloud/answer/9110914?hl=en
https://www.gmass.co/blog/google-oauth-verification-security-assessment/

Let's be clear: the security of our customers, who gave us access to their emails via API, is extremely important. We believe in this tremendously. We must not take any action that would compromise it.

Having said that, we request to bring some balance to this decision. The security checkup includes three buckets: policies, infrastructure, and pen-testing. Since the last checkup, 11 months ago, we did not change anything in the policies. Nothing changed in the infrastructure. And virtually nothing changed in the code base. As such, it does not make sense to incur the same high cost every year on something that has already been very thoroughly tested. This is painful because 1) nothing changed, and 2) the cost is really high and detrimental.

Some suggestions:
1) Increase the checkup period to be every two years instead of every year, and/or
2) Subsequent checkups should be smaller in scope. For example, no need to review policies or infrastructure. Pen-testing can also be limited to in scope.

We love the spirit of this decision and the high-bar Google is holding to protect our and their users. We want to maintain that while being balanced not to punish those who choose to build on top of their platforms.

Ideally this would have been an email to the owner of Google Gmail API product, but there is no such channel.
Mine got disconnected for about 30 minutes. Then I just calculated the rate I needed for the duration I found acceptable (one week for a single country) and let it run at this rate; no issue then.
Pretty sure he has a Substack called Big that's about monopolies, but I don't think it's paid.
> It's like someone took their personal notes, formatted them in a pdf and called them a book.

Why is that such a bad thing? I like condensed, reader's digests versions of things. Not every text has to break new ground; some of it can be, well, purely educational.

Or do you dispute the educational value of the text?

Legitimately curious; I haven't read any of the books, but I actually like the way you described the author's text process.
Why such a sour tone in the post? The author obviously has different needs than 99% of the population that doesn't know what `ps uaxww` is (me included) and doesn't want to know (me included). Get a machine that fits your needs and don't badmouth the others.
I was thinking outdoors use for the hare-chasing idea.
Has anyone made available the exclude lists they have compiled?
One thing a lot of people don't realise is that Trump is the first president in a long time that hasn't invaded a country. Sure he's authorised bombings, which president hasn't?

But I can't remember the last time a president didn't put troops somewhere. Ironically he's getting a lot of hate for pulling out of Syria/Germany.
It is a pattern, and even places like Twitter and Reddit are affected. Many of them, you can't even click 60 times, you're limited to X items and then that's it after that, even if it is your own writing! I think it is laziness and incompetence in systems design more than anything nefarious, although a lack of regard for the user can be considered a dark pattern in itself.

HN and dilbert.com are shining example of how to do it RIGHT. They provide calendar archives, filtering by tag, predictable URLs.

I keep this in mind when designing my systems. Because I think it is important for the user to own their data, my forum systems makes user profile downloadable by default, in the smallest possible format readable by both software and humans: text (with some tokens).
it's a hyperbole
Most things do not work because of the government, it's because you have long standing organizations within the government that is being run by people that do not want to lose their job. These people keep our countries working. But politicians... they sell their power and in general work for their own interests. This where people lose their trust. It's not mobile internet that declines government trust, it's just the internet. Because on the internet, you can have discussions and truth wins.
Could You Do This?
I had an on-site interview in your San Francisco office in 2019 and did not receive a CSAT survey
Actions speak louder than words.
Obama did nothing to receive the prize but being a puppet of George Soros.
Trump achieved something historical in the Middle East.
The networks that would have surpassed in Facebook in reach were either bought i.e whatsapp instagram or copied i.e snapchat and many others
What Should Not Be Scaled?