skysight-inc/HackerNews huggingface dataset:
DNSFilter | REMOTE (worldwide) | Full time, permanent | https://careers.dnsfilter.com

DNSFilter is a protective DNS service that allows customers to configure policies which block DNS requests, based on the type of domain being queried. Plus there's all sorts of other benefits like our global Anycast network, reporting, access policies, all that good stuff. We do content classification and threat protection, and use a combination of AI, external data feeds, and human review to classify domains.

We have a few of positions open right now, but the two I want to post about are:

Threat Intelligence Researcher (https://apply.workable.com/dnsfilter/j/D64DD718AE/)
Business Analytics Specialist (for DNS data) (https://apply.workable.com/dnsfilter/j/2AF95F2892/)

These roles are both on the Domain Intelligence team, and will be dealing with our existing data and threat intelligence, as well as looking at other sources.

Feel free to contact me with any questions - peter@dnsfilter.com. Or just straight up apply for a job!
You'd probably be disappointed. The best you could hope for is a graph of luminous flux vs time, showing the slightest decrease as the planet transits some emission nebulae.
I am no economist, but my understanding is that Alberta's oil sands must be extracted via fracking, which is expensive and only profitable when oil prices are high. That there is lots of oil available is besides the fact if it is no longer economically feasible to extract it.

This quality of the oil makes Alberta extremely sensitive to pricing shenanigans OPEC plays every once in awhile.

A couple years back when oil prices were artificially low, it was due to OPEC pricing oil well below even their cost, purely to drive other oil producers out of the game.
Nope, https://security.googleblog.com/2021/09/an-update-on-memory-...
I quit my principal engineer job in the spring to deep dive on Computer Vision and Machine Learning. Was a 3d production pipeline developer for decades, and then facial recognition dev more recently. Getting a formal education in the area I've been working has been a pure joy, and Machine Learning is so close to low level graphics programming, I'm picking it all up surprisingly easy. I practically have to force myself to bed every night, what I'm learning and doing has my juices gushing.
- It's cheaper than alternative with no subscription lockin
- Faster updates
- Quicker bug fixing
- now works well in the pipeline
- strong ecosystem
Then you tell your children that the wizard is away to rescue someone or something like that, that's what wizards do. Maybe that will teach your kids to be alittle bit more patient, and maybe it teaches you that you don't get everything you want "because you paid for it". Seriously, if i plan a trip to some 88 year old guy and they tell me he is to sick to come to work today, I wouldnt even think about wanting money back or demand that he shows up, you should just let this guy have a break and go on with your life.
Restrict your tunnels with IP allow lists
i doubt that Schindler was weighting his options of joining nazi to be saving jews. it was after he joined he saw whats happening and acted in good faith. so he was saving lives not because he joined nazi, but because he mostly could not be not saving them.

this is tangential to slavery where slave owners where treating their slaves very well, but fundamentally they still were slavers.
Tracing system calls in-process, using a chain loader
Sysmon for Linux 1.0.0 Released
"Dying" is a bit of an under-statement. A white dwarf is to all intents and purposes dead. It has no source of energy, and radiates only because of stored heat.

That heat dissipates so slowly that (AIUI) no white dwarf in the universe has yet had time to cool down enough to stop radiating (i.e. the universe does not yet contain any black dwarves).

So a star that is in the process of collapsing into a white dwarf could reasonably be said to be "dying". Once it's collapsed, it's dead.
Helm is useful if you need your software to run in many different places, and is widely known. This is why you see so many projects offering Helm charts; because you see them, they are set up to run in many environments.

There is no reason to use it for your own software if you just have a single cluster.
I believe he is Canadian, but it also sounds like the US pattern of "We deserve over-representation because look at all this land, or we farm the food, or whatever" is being echoed in Canada.
New Zealand definitely has a refreshing sense of whimsy.

Here in the US, if there was an official government wizard, certain segments of the population would be up in arms.
> Flexible Workload Support

This is Nomad's most underrated feature, IMHO. You don't have to use containers for everything if you don't want to. For example, if you're a golang shop you can run everything as native binaries and cut out docker completely.

Nomad has much simpler networking, i.e. no web of iptables rules to figure out. You can add Consul connect as a service mesh if you need it, but if you don't, you can keep things very simple. Simple = easy to understand, run, and debug.

The main downside for me is a lack of plug and play pieces, e.g. a helm chart for Grafana or Prometheus. You'll have to write your own job for those, though it's very easy to learn. I'd love to see a series of Nomad recipes that people could use.

I think it's the ideal choice for on-prem, bare-metal, or 'weird' deployments where you need a bit more control. You can build the exact stack you need with the different HashiCorp projects with minimal overhead.

I can't recommend it enough! I help people move to Nomad, my email is in my profile if you want to chat :)
Sysmon [1] is a popular monitoring tool on Windows. It is based on ETW and its custom driver and provides great details on what is happening in the system. To make the logs relevant, we need to configure it (SwiftOnSecurity created a good base config file [2]).

Yesterday, MS released the first version of Sysmon for Linux and made it open-source (MIT license)[3]. It is based on eBPF. In [4] they show how they use it in Azure to collect events from the Linux VMs.

- [1] https://docs.microsoft.com/en-us/sysinternals/downloads/sysm...

- [2] https://github.com/SwiftOnSecurity/sysmon-config

- [3] https://github.com/Sysinternals/SysmonForLinux

- [4] https://techcommunity.microsoft.com/t5/azure-sentinel/automa...
> For example: firefox reduces the timestamp precision on your mouse events to prevent fingerprinting

... while sending all URLs you visit to google for "safe browsing".
US Claims First Place in Bitcoin Mining as Chinese Miners Migrate Abroad
The list of authors on this paper is rather amazing. Some of the biggest contributors / "names" within the cryptography community.
The risks of the ultrafast delivery wars
This article hits something in the head: that VC firms value businesses that provide last-mile delivery a few minutes faster than competitors. You could say that they do so because people in general use these services. But is that the kind of culture we want to create for ourselves? Do we really want a sandwich delivered to your home office in 15mins to replace blocks of restaurants, delis and mom-and-pop shops that offer a lively social scene?

Viewed from one perspective: it's a displacement of culture and middle-to-lower class people by a technocratic elite with very specific skillsets that cater to the baser appetites of people (see marshmellow experiment). Would be curious to learn your thoughts otherwise.
In particular, the reddit discussion mentions ASAP, which is a set of static analysis algorithms that can work with mutability, generics (polymorphism) and linear types.
http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-908.pdf

As far as I'm aware, this really only applies to single threaded systems. However, if you implement threadsafe modules and keep the shared stuff internal (use the ASAP algos here), you can fit the majority of use-cases including hard-realtime constraints.

Composita is the module system I'm referring to.
http://www.composita.net/Composita.html
It allows concurrency with managed memory and no GC, through static analysis of the module (component) interface queues.
A “dang-chain”
If we take a human and replace one of their neurons with a silicon chip that exactly replicates its electrical activity, is the human any less "conscious"? Presumably their conscious experience is the same (if not why not?) If the human is still conscious, what if we continue one by one to replace all the neurons with silicon chips in the same way? Where does this thought experiment fail?
VSCode is fine if you are doing .net core. Paint.NET is great though, its genuinely the only thing I miss at my debian machine.
Mao actually agreed to assign communist army under Stillwell to fight Japanese
Joseph Stilwell is still well respected in CCP China. CCP has a museum for him.

https://www.nytimes.com/2016/02/24/world/asia/chongqing-jose...
link please with example of results
Haunted Houses Have Nothing on Lighthouses
Why on earth are people using string concatenation? Surely $wpdb->get_results should be deprecated in favour of something that accepts parameterised queries?

Why in the hell are people still injecting strings into queries? In 2021??!
No, you're defining marketing in a way so broad as to render the term meaningless, as a way of avoiding answering the actual criticisms. An extreme example of this kind of argument would be "murder is doing stuff, here is an example of people doing stuff and it's fine, so murder is fine". This is fallacious (and, if done deliberately, dishonest) so I won't engage in that line of debate further.
Lockdowns Coincided with Record-Breaking Drug Overdose Fatalities
I did use the qualifier 'almost'... and I don't see you actually disagreeing with what I meant.

There was something called Eckhart Seminar Training or something which took people through decades of training in the more cumbersome system in a week. Similarly, a lot of cultural impedance has been removed in the teachings of Western sages.

Teachings need to be updated and modernized as we progress as society.
So does it kinda depend on what sort of searching you want to do?

I'm currently trying to decide between ES and PostgreSQL. As I have read replica's for PG and the plan is to flatten the data into a single table, there's only ~4 fields that are text betwee 1-256 in length. While the other ~30 fields are int/decimal/date fields. There's prob ~8m records roughly that grows by 2-3m / year. So I feel like ES might be overkill for this and PG would be totally fine.
LWN is a nice site, but to save you a couple of clicks,
this is the original post by Trinity College Dublin:

https://www.tcd.ie/news_events/articles/study-reveals-scale-...

And this is the paper it talks about (PDF):

https://www.scss.tcd.ie/Doug.Leith/Android_privacy_report.pd...

"Key findings from the study:

- With the exception of e/OS, all of the handset manufacturers examined collect a list of all the apps installed on a handset. This is potentially sensitive information since it can reveal user interests, e.g., a mental health app, a Muslim prayer app, a gay dating app, a Republican news app. There is no opt out from this data collection.

- The Xiaomi handset sends details of all the app screens viewed by a user to Xiaomi, including when and how long each app is used. This reveals, for example, the timing and duration of phone calls. The effect is akin to the use of cookies to track people’s activity as they move between web pages. This data appears to be sent outside Europe to Singapore.

- On the Huawei handset the Swiftkey keyboard sends details of app usage over time to Microsoft. This reveals, for example, when a user is writing a text, using the search bar, searching for contacts.

- Samsung, Xiaomi, Realme and Google collect long-lived device identifiers, e.g., the hardware serial number, alongside user-resettable advertising identifiers. This means that when a user resets an advertising identifier the new identifier value can be trivially re-linked back to the same device, potentially undermining the use of user-resettable advertising identifiers.

- Third-party system apps, e.g., from Google, Microsoft, LinkedIn and Facebook, are pre-installed on most of the handsets and silently collect data, with no opt out.

- There may exist a data ecosystem where data collected from a handset by different companies is shared/linked. Notably, the privacy focused e/OS variant of Android was observed to transmit essentially no data."
Can't you just use Varnish?
The paper contains figures like [1] or [2], which I think do add something to the written description (and obviously the paper authors thought so too, otherwise they wouldn't have included it in the paper). These visuals are quite useful when talking about what we mean by "spotted" (though the context is important and the article only spends maybe two paragraphs on the actual observation method, so there's some danger of misinterpretation)

1: https://www.nature.com/articles/s41586-021-03869-6/figures/1...

2: https://www.nature.com/articles/s41586-021-03869-6/figures/7
I've tried Vivaldi on all my devices for several months but it has several annoying quirks:

- Videos are jerky compared to Chrome. It doesn't matter if hardware acceleration is on or off, and it's at least on macOs and Windows.

- Scrolling is either slow (if hardware acceleration is off) or shows a blank page as you scroll (if hardware acceleration is on). Chrome works fine with hardware acceleration.

- Caching is weird. Often it would show me an old version of a page, and I have to refresh to get the latest version. For example at some point it shown me a version of a Docker Hub page that was 2 months old. The same often happens on GitHub too (I think it has something to do with caching pages that are fetched via JS). Happens on both mobile and desktop. Never seen this problem on Chrome.

As a result I just went back to Chrome. I don't like the tracking and all, but at the end of the day I need basic features like loading pages, playing videos or scrolling to work. In fact, I'm surprised they don't simply try to use Chromimum more closely - they probably add a layer of "optimisations" which only creates more bugs than it's worth.
Do you mean Nomad Enterprise? Which actually exist
https://www.nomadproject.io/docs/enterprise :)
Oil prices aren't high. $150+ in 2008 was high.
Show HN: An updated cheat sheet for F#
Personally I think most people who argue consciousness is an emergent property of complicated physical systems would believe that the machine would still be conscious after replacing every neuron with a chip
You have to admire the repeatability with which they get it wrong. It's almost like they copied their homework.
I’m quite firmly in the “do not feel the incongruity” camp.

What I'm about to say might make no sense at all, but I seem to remember (or at least think I do, it might be a false memory arising from thinking too much about it) slowly gaining consciousness in early childhood.

I have a birthmark on the back of my hand and some of my earliest memories are triggered by noticing it and realizing I’m a separate being from other people and can influence my actions, stop being a mere observer of my body running on “autopilot”.

I have only passing knowledge of lucid dreaming, but from what I’ve read I’d say becoming a lucid dreamer is not at all dissimilar to developing consciousness in childhood. So maybe that’s a potential avenue for consciousness research.
>Nothing you can find out about wavelengths, cones, rods, neurons and so on will tell you why you see red the specific way you do

Or maybe it will, but we just don't have the neurological and information-theoretical tools at this moment in time.

>and whether my perception of red corresponds to yours or my "red" is actually your "green".

And maybe (at least this is my personal guess right now) it will show that this question is incoherent.
Well, you can just Google it these days. If know what you are looking for.

Check out http://www.SHWEP.net (the secret history of western esotericism) for a rigorous review of occult history & scholarship. It is fabulous podcasting. Start with the podcast introduction then dive into the Pythagorean-Platonic tradition.
> You can even continue to have hardware separation between highly sensitive and fully untrusted jobs by using taints and tolerations, if you feel that's necessary. You still get one control plane instead of five different ones.

How much have you had that setup audited? It seems like a lot people aren’t comfortable saying that the internal boundaries are strong enough, which leads to the proliferation of separate clusters.
This one is Oracle free :)
> Teachings need to be updated and modernized as we progress as society.

I don't think there's any way to do that without understanding them, but to understand them fully you basically have to become a Buddha...so it is not clear how to do this without removing essential parts of the teachings, as are often done when surgically transposing bits of eastern philosophy into the west
Show HN: Seeing Voices: 1 – Intro to Spectrograms
I'll take that "no one" badge. I've never used Helm, always used kubectl.

Well, until now, when I'm using Terraform (particularly helpful relative to kubectl when I need to provision cloud resources directly), but I've still never used Helm.
I'll get downvoted for this: Religion and Capitalism.

Religion is the ultimate vaporware. Nothing there but air and community.

Capitalism is 100% dependent upon an unfair exchange: unless there is an unfair exchange generating profit, no capitalist will accept such a deal. Capitalism relies 100% on individuals in no position to refuse the offer, because Capitalism creates and relies on a population of people unable to refuse such offers.
So basically, by lowering the barrier to entry and making it easy, they've actually made it difficult/impossible to write even slightly secure code whilst simulataneously encouraging the level of developer who has no idea what they are doing.
From the Carp docs:

Memory management is handled by static analysis, a value is owned by the function where it was created. When a value is returned or passed to another function the initial function will give up ownership of it and any subsequent use will lead to a compiler error. To temporarily lend a value to another function (for example to print it) a reference must be created, using the ref special form (or the & reader macro).

and

achieved through a linear type system where memory is owned by the function or let-scope that allocated it. When the scope is exited the memory is deleted, unless it was returned to its outer scope or handed off to another function (passed as an argument).
Are you being deliberately obtuse, or do you actually think I said he was a court jester?? Do you think that $368,000[1] of public money for a small local government is a "paltry sum" , or that the amount of money changes whether a politician should have to follow proper processes?

I know lots of people wouldn't think it's a problem and I'm an old curmudgeon. Lots of people are fine with low level corruption and poor practices that can lead to corruption or the appearance of corruption. I acknowledged that the very first thing I said, if that also wasn't clear.

[1] Sure its NZD but come on that's got to be at least 80 real dollars.
For the history buffs:

Pre-Scheme: A Scheme Dialect for Systems Programming
Richard A. Kelsey, 1997

Abstract

Pre-Scheme is a statically typed dialect of Scheme that gives the programmer the eciency and low-level machine access of C while retaining many of the desirable features of Scheme. The PreScheme compiler makes use of type inference, partial evaluation and Scheme and Lisp compiler technology to compile the problematic features of Scheme, such as closures, into C code without signi cant run-time overhead. Use of such features in Pre-Scheme programs is restricted to those cases that can be compiled into ecient code. Type reconstruction is done using a modi ed Hindley/Milner algorithm that allows overloaded user-de ned functions. All top-level forms in Pre-Scheme programs are evaluated at compile time, which gives the user additional control over the compiler's partial evaluation of a program. Pre-Scheme has been implemented and used to write a byte-code interpeter and associated support code for a complete Scheme implementation.

https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.3....
I can't wait for the first deep field results from JWST
What did I just read? GPT spotting here guys?
That's not a viable option for me as my IPD is not between settings but at the outer extreme of the widest setting (Quest 2 only goes as far as 68 mm while Quest 1 went to 72 mm which is close to my IPD).
It's still usable for games without any headaches, but I wouldn't use it for reading text or long gaming sessions.
In nature, there are many instances of systems which change drastically as they pass a tipping point.

I suspect the human (and many animal) brain has an information density sufficient to pass such a tipping point. That could even explain why observating quantum phenonema changes the outcome (due to multiple extremely-low-entropy states being unstable).

There could, of course, be many other explanations. Which camp is "I'm unlikely to figure out the answer, and I'm unclear on how it would help me if I did, so I'll continue to disregard the question".
> When I started with k8s

But that's the problem right there. Shop after shop has invested in kubernetes with a team that was just learning it. And then they layered tool after tool to help massage pain points -- of which kubernetes has plenty. That leaves us at today where every shop effectively has a custom stack of kubernetes infrastructure cobbled together of various tools and philosophies.

It's the same problem as JavaScript. There's nothing terrible about the technology -- on the contrary it's amazing stuff! But the context of how it gets used leads to a type of gridlock of opinionated tooling published just last week.
The FAA oversees every flying object in the US. Not just new models, but also config changes to existing models, continued airworthiness, all the design org and production org certification of manufacturers (per site) and suppliers (again, per site). Which is quite a workload, especially in a world as complex as aerospace.
So how is memory fragmentation avoided?
I always find it funny when they accuse people who point out glaring flaws and obvious truths of whataboutism. People should freely point out incongruences and hypocrisy. There is no better way to fix things, or at least to be buyer aware.
94.3% net profit margin?!? I am in the wrong business.
Can you expand on this?

My experience with Go has just been making small changes to small programs. So, I don't know what the normal experience is.

My experience with logging varies from:

print (works fine I guess)

import logging (this is pretty good - means I don't have to parse my logs before deciding where to send them)

import slf4j (6 logging frameworks and a logging framework disintermediation framework)
As someone who knew Ian Channell at university, I'll mention two things about him, the first is his overwhelming enthusiasm for whatever he's involved in; second, he attempts to get people to think outside the box and to figure things out for themselves (remember he used to be a uni lecturer).

He'd often say that anally-retentive thinking was a major problem with the world. So don't be fooled into thinking that his true persona is what he's demonstrating during his wizard performances. His seemingly outrageous hyperbole is deliberately meant to make you think.

The world needs more people like him.