skysight-inc/HackerNews huggingface dataset:
Right, good luck with that.

2 doors to choose from, 1 price, 50% chance of winning, period.

And I don't care if there were initially a million doors to choose from.
With the TV, I actually feel like I'm seeing colours, even if I don't know exactly what they are.

With the grass example, I'm actually not entirely sure! I mean, I obviously know that green is the correct answer, but that knowledge kind of makes me feel like I'm seeing green.

But colour blindness is kind of weird, because for any given thing/colour it's never just "I don't know" - I can narrow it down to a few options, and usually one of them is the correct one; like for a desaturated green, I might think it's grey, green or pink.
The Green New Deal is an “actual proposal.” It was an actual bill that was submitted. You could just read it and see that it was a laundry list of economic interventions that liberals have always wanted, mostly unrelated to climate change.

I understand that many Democrats purport you support the Green New Deal while advancing much more moderate proposals. Democrats think that “making a big opening bid” and paring it back is a way to anchor expectations. Except how this reads to non-Democrats is that “socialist takeover of the economy in the name of climate change is the ultimate goal,” and subsequent moderate measures are just seen as stepping stones toward that end.

It’s like leading with “Defund the Police” and trying to backfill with moderate police reform proposals. It’s a way to keep activists engaged, but it just makes moderates distrustful off your true intentions.
That seems perfectly reasonable to me. I expect balcony railings to be sturdy, they exist precisely to prevent accidents. As long as there is no regulation mandating railings be made of glass, I don't see any problem. I've only ever seen glass railings on the houses of people who can afford to pay someone else to clean them (i.e luxury housing) so I don't see how that makes it harder to build affordable housing.
https://www.budibase.com
> with an order to stop operations for the company who's facilitating it

So, you want to shut down all manufacturers of phones, GPS devices, and Bluetooth devices? Because that's what you're asking for here.
Right Direction (http://www.rdas.net/)
Why are people up in arms about this? Imagine a transhuman future where we all have superhuman memory and have integrated mind machine interfaces, able to perfectly transfer information between ourselves. Would you insist that people's memories be degraded to be close to the average memory quality? Or would you prevent them from transferring the information via things like degrading their perfect drawing skills? (Or maybe just make drawing people's faces from memory without their consent illegal? Presumably while also making it illegal to do things like sharing a high fidelity memory with a friend or spouse)
Thank you. I didn't notice that you replied. These links are quite helpful. I think that eventually AI will start to incorporate all the new ML stuff into the old symbolic stuff and I think probabilistic models are a good way to link the two
Generally large spikes in upload data usage is the best indicator. Many consumer grade routers are starting to build in per-device bandwidth usage, which helps narrow down the culprit.
> If only we could instead have an intuitive version control system

What makes git any less intuitive compared to svn or cvs? To use either of those or git effectively required reading through documentation to understand what each command did.
That was a mightily impressive performance of looking at the problem through someone elses eyes!

Favorited!
Does anyone know where the video of the crank failing is?
My best friend Sinclair
After fighting with OpenVPN for years, I finally switched to Wireguard a while back.

Wireguard on Linux is simply amazing, been using it for the last year plus to link all of my devices in a single tunneled LAN, it's been a blast (I can access any of my devices from any of my devices, wherever I or they may be physically located).

I do keep one windoze box because I occasionally need to run things that refuse to run on anything but that, and I recently installed wireguard on it ... was expecting headaches ... what do you know, it worked right out of the box, and I can actually securely ssh into the Redmond-spawned contraption from any of my other devices, including my android phone.

Wireguard FTW.
It's not that easy to get 50 million people to download your app and if you pulled that off there are more profitable things you could do.
Alternative energy sources, sure. But alternative stock for plastics? That is going to be difficult.
Because the Apple software product model isn't built to be customizable by the end user.
> With the app you can play a sound on AirTags and find it easily.

I wonder how it does that. Unauthenticated BLE characteristic? This would imply anyone could force an arbitrary AirTag to make a sound. Obvious application: force all AirTags nearby to keep making sounds.
https://youtu.be/pq9LcwC7CoY
Why stop at the Norwegian ocean? I would support such a law in any first-world nation, even if it tripled my cost of living.
I don't know who any of these people are, but if that guy acts like that often, I'm glad he's been banned. I _hate_ when people dismiss questions as simply invalid without any explanation as to why it's invalid. How does that help anything? What are you even doing on a golang slack if you're just going to "troll" people for asking questions about golang?
> The confusing part is that him opening the door doesn't reveal any new information.

It does reveal new information, just not about the door you chose.

> lets say that he opened two doors with goats instead, then what is the probability of A, ie your first guess being correct?

But you can't guarantee that he can do that. If you do guarantee that he can do that then you are giving me more information.

It's always the way, if you change the problem you change the analysis.

> So the argument "your first pick is always 1/3, so you should always switch" is wrong. That doesn't normally apply.

Just because it doesn't normally apply, that doesn't mean it's wrong in this case. It does apply in this case (as you say) and therefore it's right.

Knowing when it's right is hard, I agree.
I think you understand why edpnet.be has problems now.

What they usually do is try to write packet filter rules and drop packets as close to the millions of origins as possible, plus call the networks where the sending devices are and say things like "could you please call your customers and tell them to unfuck their {phones,dsl routers,…}"
Why is this resource asymmetry unavoidable? It seems reasonable that a new protocol could solve it.

Consider augmenting TCP with a "pre-SYN" and "pre-SYNACK". Suppose you have to send a pre-SYN which declares your identity ip X. Then the server sends to X a "pre-SYNACK" encrypted message containing (X, t = timestamp()) based on a server-only key.

Afterwards, X may send the server a SYN for real. But then the server only allows a timeout of length, say, timestamp() - t, as of receiving the SYN back to maintain bookkeeping.

As benevolent cooperating clients, we may want to ourselves wait an exponentially-backed-off amount between receiving the pre-SYNACK from the server and sending our SYN back (such that in log-many rounds we establish our conn).

Then any malevolent actor must then keep a resource on X alive for at least half long as the server does (since the server requires zero bookkeeping after firing off the pre-SYNACK).

Edit: this is simplified, you could just own a machine at X which is far away from the ddos'd server and then have your botnet spoof requests from X; by augmenting this procedure with even more preamble rounds you could verify how long communication takes between the server and client X and subtract that out.
It wouldn't be hard.

If you can examine traffic on a network from which attacking traffic originates, you can see that it's coming from a phone.

Then you could see which app by either limiting or deleting apps one at a time, or you'd need two sources, then just see which apps the two sources have in common.

When you have 250 Gbps, it'd be simple to capture a fraction of a second's worth of traffic, then write a script to fire off emails to network admins of every IP involved and ask them to look in to it. Out of hundreds or thousands of messages, you'll get a few humans who'd look in to it and would be helpful.

I should know, because I've done this very thing.
Tell that to Heroku, GitHub (Actions), Vercel and the whole of AWS, Google Cloud and Microsoft Azure! Running other people's code is a multi-billion dollar business opportunity.
The benchmark clearly must depend on the purpose of the search engine, though. If the purpose is to find a thing you know is out there, but haven't been arsed to bookmark, then my search engine is hot garbage.

If the purpose is to provide links you will find interesting when you click on them, my search engine really actually has its moments. I guess it's almost closer to old reddit, before it was overtaken by astroturfing and bots.
Same on Safari. That's not how one should do it in 2021…

Welp, I'll just skip the article then.
There are a couple solutions to "too many keys".

The simplest and best solution is don't use SSH. For Git remotes using HTTPS, use personal access tokens / API tokens. For each repository you check out, change the git remote URL to include the username, like git remote add origin https://username@github.com/user/repo.git. Then configure Git to use your system's credential keychain and store your token there with the hostname and username. Or use a .netrc file. The correct access token will be selected based on the hostname and username.

If you do use SSH, you can configure a Git repo to use some specific SSH arguments to specify the key file, like git config core.sshCommand "ssh -i ~/.ssh/id_ed25519_clientX". Or you can configure your SSH client to have a custom Host entry for a fake host that specifies the SSH key to use, and use that fake host for your Git ssh remote URL.
That’s.. not what a Distributed Denial of Service does. They come from thousands of IPs.
Doesn't congress make a law saying breaking x regulation carries y penalty and at the same time gives the agency power to decide what constitutes breaking x? I know for a fact that BATFE does this rather frequently.
Also, thanks for the clarification about the secrecy of US mail. I apreciate it
The argument is not about Singapore. You're making the argument that it's not a good idea to have government-run public housing (presumably in Berlin/US/UK) because one government somewhere they did something bad through that they could have done even with private housing.

It's an anecdote for your argument. If the argument was "did Singapore discriminate against people through housing" it wouldn't be. If the argument is "should we have public housing [here]" then it's an anecdote. You'd have to show that this would happen in the place in question. If you want to make a general statement, you'd have to make that clear and make the case that in such countries landlords wouldn't discriminate against you for being LGBT (which they absolutely do).
Unfortunately Facebook is far from the only company that regularly invades and has contempt for privacy.

That contemptuous attitude and attempts to profit from privacy invasion is almost omnipresent among companies these days.

On the subject of glasses that can record what you see, wasn't Google the first company to market them? There was a similar backlash against them too back then.
> Roughly how many criminal groups are active in DDoS ransoms

These days there are groups providing ddos as a service. They control huge iot botnets and for a sum they’ll point whatever fraction you pay for to whatever target you want.
The missing piece is: have the doors been allocated before the reveal and allowing the switch? If yes, then the chance is 2/3 for switching.
> In any case, what we do here won't have any significant impact on global environment.

This is wrong. I agree with and appreciate the rest of your perspective, but this statement is wrong.
The fact is, that was a minor point in a well-received, critically-reviewd book he wrote a number of years before he was offered the job at Apple, and Apple hired him knowing about the book.

And now you, who never read the book but copy-pasta a few quoted sentences, want to destroy this man.

To go back after the fact and fire someone because of this was wrong. (That's why Apple settled for a lot of money, and Mr. Garcia can no longer talk about it.)
>> Since this is HN, it’s 2021 and DDoS’es are still a thing: why are they still a thing? Is there some fundamental “anonymity” to the Internet that makes it impossible to structurally prevent DDoS attacks?

IMHO that is exactly what the problem is. Weather its malware, phishing scams, extortion schemes, the fundamental problem is knowing where stuff comes from.

I propose an IPv6 subnet that routes by using a portion of the IP address as lat/long coordinates as a starting point because routing tables are litterally a form of indirection.
Perhaps it's just because I'm not American, but I do find both positions (Peter's and Tim's, the author of the Report) a bit childish. I do think it's like "Hey teacher, Joe is bothering me!", and I have watched enough American movies to know that the American answer is "You both go to the Director's office now! Parents come later and blah blah, one of the kids is expelled and the other kid is now target of bullying by other bastard kids". Well, at least in great part of Europe and Asia the answer usually is "You two little bastards stop now!" and the whole class just turns to the two little kids waiting for them to stop the scene. The two kids realised the shame and stop.

But perhaps I'm wrong and the report written by Tim is the way to go.
There are many parts to the answer of your question, but one part yet to be implemented in a meaningful manor is BCP38 [1]. The RFC's around BCP38 keep changing and that may be part of the issue. It is still too easy to spoof the source across ISP boundaries. Then of course there is also the issue of getting all the ISP's to work together to detect and mitigate these attacks and that involves cost that the tier 1 providers barely spend towards. There are so many more pieces to this problem and I am barely touching on it.

[1] - https://www.rfc-editor.org/info/rfc8704
> i think a vast majority of it is people who want to stream content, pirate torrents, etc, without getting a strike letter from their ISP

This use case is definitely very underrated, people usually associate VPNs with higher latency but if your ISP has bad peering to certain locations, which many of them do, a good VPN can do wonders.
That's the first 'D' in DDoS - distributed.

Most robots participating in this are unwitting. It's incredibly unlikely someone is paying... even with stolen funds.

Often a sort of malware that more or less sits dormant until command/control sends a target to attack

edit: To the individual machine, not a lot. The sum total is where the denial of service comes in - everything has a tipping point.
When I came across this I already had a pristine copy of the font, so I just compared the program for each character to determine the mapping. (I was automating the decoding.) I agree that there is little to no security there.

But the point that I was not so clearly trying to make was that sometimes the messed up encoding is intentional and not a bug.
What was in it that made him more sympathetic to you?
If your nontechnical neighbour's ISP calls and says "you're participating in a DDoS, will you please find out which device behind your NAT is sending the traffic and fix whatever the problem is", do you think your neighbour can fix it in five minutes?
Cause it's Facebook... Any other company, sign me up... But fuck you Facebook....
It's not expensive if you have a botnet, reflective attacks or L7 attacks. It's also not just one type of attack (overloading the target), the only thing in common is that it's a denial of service, and if you distribute it amongst many sources it's a distributed denial of service.

Distributed can mean different things, especially if you can spoof addresses, in which case you can do fake distribution (causing src based filtering to be useless). If you know it's just a single bad AS that is doing it, then you can block the AS, but if it's distributed amongst multiple AS'es that's harder. Same with reflective attacks, the source of the traffic might not be the source of the attack and might be a legitimate source which you cannot block because your internet wouldn't work anymore (i.e. when it's DNS servers or NTP servers doing the reflection, or a GCN address which would completely take an ISP's section offline).

It's not as simple as sending a large volumetric load from A to B. It used to be that way a decade ago and it can be effective today, but it's not the only way it's happening.
Why would you care about the risks of being a parasite on vulnerable people?
I’m not making any argument about whether it’s a good idea to have government run public housing. I think you have me confused with another poster.

Your definition of ‘anecdote’ seems way off to me. We’re talking about an objectively verifiable data point. Just because it doesn’t fully confirm some argument that someone’s making doesn’t make it an anecdote. Check the dictionary definition.
Full context:

> Anyway: Chaos Monkeys contains scenes from Antonio’s private relationships. Characteristically, they’re painted as comedies, where his personal life is depicted as an unpredictable third party over which he has little control — only occasionally, it seems, does it even listen to his suggestions. He meets a woman via Match.com whom he calls British Trader, “an imposing, broad-shouldered presence, six feet tall in bare feet, and towering over me in heels.”

He’s enthralled, but everything about her is a surprise that keeps him off balance, from the fact that her “strapping and strutting” South African ex-boyfriend docks a boat next to his not long after their first date, or that she sleeps on “a cheap foam mattress about the width of an extra-jumbo-sized menstrual pad” above a floor covered from detritus from a recent renovation. She did such work herself because, Antonio explains, “she made Bob Vila of This Old House look like a fucking pussy.” Even this side of her life has him tiptoeing. “Postcoitally it was all I could do to balance myself on the edge of the pad and off the drywall dust,” he noted.

At one point, as a means of comparing the broad-shouldered British DIY expert favorably to other women he’d known, he wrote this:

Most women in the Bay Area are soft and weak, cosseted and naive despite their claims of worldliness, and generally full of shit. They have their self-regarding entitlement feminism, and ceaselessly vaunt their independence, but the reality is, come the epidemic plague or foreign invasion, they’d become precisely the sort of useless baggage you’d trade for a box of shotgun shells or a jerry can of diesel.

Out of context, you could, I guess, read this as bloviating from a would-be macho man beating his chest about how modern “entitlement feminism” would be unmasked as a fraud in a Mad Max scenario. In context, he’s obviously not much of a shotgun-wielder himself and is actually explaining why he fell for a strong woman, as the next passage reveals:

British Trader, on the other hand, was the sort of woman who would end up a useful ally in that postapocalypse, doing whatever work—be it carpentry, animal husbandry, or a shotgun blast to someone’s back—required doing.

Again, this is not a passage about women working in tech. It’s a throwaway line in a comedic recount of a romance that juxtaposes the woman he loves with the inadequate set of all others, a literary convention as old as writing itself. The only way to turn this into a commentary on the ability of women to work in Silicon Valley is if you do what Twitter naturally does and did, i.e. isolate the quote and surround it with mounds of James Damore references. More on this in a moment.

https://taibbi.substack.com/p/on-the-hypocrites-at-apple-who...
----------
But Berlin is in east Germany.
AC 130 has a looter time measured in hours, multiples more air time than A10.

The F35 gets additional loiter time from fuel drones, delivering fuel autonomous ly to the battlefield.
But you did say that it was "False" that additional supply would put competitive pressure on housing prices.
This method is basically already in use for DOS mitigation using a technique called a SYN cookie. But as the parent said, there is a huge spectrum of different ways to produce a DOS and so there is no single method of addressing them. The problem tends to be much harder as you get to higher levels, for example, requesting things from an HTTP server - there are mitigations available there as well such as Cloudflare's approach of capturing DoS like requests and subjecting them to CAPTCHA, but once again no one size fits all.
But don't only a few languages/frameworks/library collections have such a repository of "PR"s, with diffs and review comments and everything?
Sure, in the military, where disobedience is severely punished, you can think of your team like that.
"Concepts of privacy, data usage, and such didn't exist before Facebook and others."

They did exist before Facebook.

But not before "others", which include every company and person who ever existed. Not sure why you added "and others" to that sentence.
What if you have a building full of enemies taking cover? Can’t you just riddle the whole thing to pieces with an A-10?
There was a time when id just rawdog firefox and not stress about my privacy or what data was being colected. Then I had to start trimming it down as it became an ever bigger advertisement for other mozilla products, and its data collection ever more concerning. The worst part was the articles presented by pocket on every new tab page. This sounds like a great way to influence thought and show blatant advertisements. Shady shit. Now I use a fork, librewolf, because it’s already set up usable out the box with ublock installed. You’ll have to pry my computer from my cold dead hands before you get me to switch to chromium
If there are two doors, and one prize, and you can choose one door, then you're right, it's a 50% chance.

That's not the situation, and the chance is not 50%. I don't care if you agree or not, you are mistaken if you think the chances are 50:50.
I don't think the constraint is like normalization.

Yes, this is different. I was thinking of a 3DOF trackball setup. There are 3DOF trackballs (you can both roll and twist) where a big trackball rests on three small ball-bearing balls. Two of those balls each have 2 axes of rotation sensing; one is just an idler. It's all friction-based; no gear teeth. So you have four incremental data signals coming out, which resolve to the three motions a sphere can do. That approach is homogeneous; no position of the trackball is special.
"without your knowledge"... is there a way to check if my IP was participating in the DDoS? If they are filtering the traffic, they might be able to create a list of IPs that I can check. Or perhaps, an IP can be associated with a contact info so the if any of my devices would be infected and participate in DDoS, I would get notified by the victim and could take action.
There's a big advantage in raising capital... he would literally have people throw money at him with just a slick presentation.

But the problem is that he would be the only non-Chinese speaker in a room full of Chinese investors. Also IP protection is fairly weak over there. Ah, the promise of riches.
Ways to Improve at Any Programming Language