skysight-inc/HackerNews huggingface dataset:
> The SES team knows about the spam cannibal listings and is in contact with them, they say it's unlikely your open rate drop from 25% to 0.15% is caused by the SC listing.

SpamCannibal can cause the originating mail server to get caught in a 'tarpit' by slowing it down. Given the AWS CUSTOMER was sending a significant amount of measurable email to a given destination server (which was running SpamCannibal) it's possible the sending servers are being slowed down. In that particular scenario, that would affect open rate over a short period of time.
The problem was that they had thousands of tons of this stuff, all of it rather close to lots of people, all of it designed to kill lots of people, lots of it was unstable, and lots of people wanted to obtain & abuse it. The only apparent way to "make it go away" was to dump it in the sea ("out of sight, out of mind"). They knew it wasn't a good idea, but it was a whole lot better than any other solution they could come up with on short notice. Many decades later we're still postulating "what if" rather than dealing with actual consequences.

Most people similarly discard household toxins: they know throwing batteries/CFLs/paint/etc in the general-purpose dumpster is not "ok", but for them it's an easy & effective solution. Disastrous for someone/something somewhere sometime, but not for "me, now".
Captive portals typically only capture A records, but custom servers like iodine will return results for any request type if the request starts with 'z'. As long as the captive portal supports unauthed recursing (which 99% of them do), you can still tunnel IP over DNS.

Almost all captive portals simply use MAC addresses for auth, so in practice it's much easier to spoof a host's MAC/IP and piggyback their authed session. IP over DNS is more useful for things like mobile providers where it's harder to spoof hardware identifiers, or networks that allow outbound DNS or have a DNS recursing resolver.

Somebody mentioned something about assuming networks that have deep packet inspection (really, it's almost always just application proxies on common ports) might not allow outbound DNS. Don't ever assume that the person who set up the network was smart, or that they didn't leave a hole for backwards compatibility with some legacy application. Almost all consumer-oriented networks have some hole you can use to get out to the internet.
The cloud is nothing new, where openstack exists today to run your own cloud, there were ways to do it in the past. Many solutions end up on dedicated servers in the long term as well.
Reddit isn't owned by Conde Nast[0].

[0]: http://www.redditblog.com/2013/08/reddit-myth-busters_6.html (See myth 4)
Are there people who have high-speed internet (i.e. not in remote areas)

How does this equivalence work? Last place I lived wasn't exactly a major city, but there was still cable internet available. Sitting at the bottom of a valley meant no OTA service.
OK, here is why this is one of the worst, yet completely willful deals ever in tech:

1. Microsoft does not need Nokia. Anyone can work with an ODM to develop and manufacture a high quality smartphone, tablet, or PC.

2. Microsoft didn't even get "Nokia." After a short transition, the brand stays with the rest of Nokia.

3. Microsoft didn't get the patents.

4. Microsoft didn't get the ecosystem. No maps. No Music. No app store.

5. Microsoft got only a very short period of exclusivity. In 2016, around the time Jolla will have matured their business enough to spin back in to Nokia, which is still a large telecom company, Nokia gets to go back into making phones. Meanwhile, Jolla is where you will see Nokia's ecosystem on phones.

6. Microsoft gets ALL of Nokia's legacy phone business. Series 30. The briefly prospering and now dying Asha. Old Series 40. And the factories that make these devices. "Here ya go, Satya. Have fun with this. I'm outta here!"

7. Microsoft gets an interesting but under-developed Android -based successor to Asha. Microsoft will kill it. But they should keep it and allow it to compete against Windows Phone. The important thing is for Micrsoft to have an attractive ecosystem, and an internal competitor to Windows Phone that drives development of a Microsoft ecosystem accessible to Android users would be good for Microsoft. Maybe Satya Nadella is daring enough to keep it. But I would not bet on that happening.

8. It was a shotgun wedding. It was all about the downside of Nokia abandoning or de-emphasizing Windows Phone.

Windows Phone isn't worth saving. Bringing the Microsoft ecosystem to many phone platforms is what should be happening.
That's an excellent reference with good explanations. I'll add it to the list to get away from the strong Ivan bias :-). The reason why I had A- only is that my openssl (Debian) doesn't seem provide all the ciphers required.
I'm not convinced many software people have the right to get too righteous about this, and the fact is many of our systems that do work do so because someone at MS, Apple or in the open source community wasted some of their lives swearing at someone's drivers.

Frankly anything close to hardware, up to and through the driver layer, has a real tendency to barely perform as required. It really seems like if it works enough to show someone it looks like it's working they stop, but we've all seen this attitude applied to higher levels of the software stack, except there it's easier to deal with.

The single most telling gadget here is the Chromecast, which successfully nullifies most of the point of smart TVs for <$40, while providing a user experience none of the TV makers got close to.
An engineer's guide to finding work in San Francisco
I would think non-NXDOMAIN answers with very short TTLs (to avoid contaminating the negative lookup cache) ought to be harmless to all but the very sloppiest clients, no?
Meh. I'm fed up of spending hours trying to squeeze performance out of Angular's directives system without breaking existing code, when there are so many undocumented caveats, pitfalls, and subtle semantic differences between this or that solution.

The issue of too many bindings he mentioned is a real one, and the complexity of this solution in general shows what sort of hoops you end up having to go through to get the basic stuff working (i.e. a for loop).

This is part of the reason why I wrote Mithril ( http://lhorie.github.io/mithril ) and the main factor for why I am planning on replacing Angular altogether for our mission critical app at work.
"I can make the same in a week" – or not.
Do not HN also use a very similar list? I know they don't get deleted, but I remember their position decaying faster compared to threads without those keywords.
> knowing your (Open)SSL setup is as important as e.g. knowing your RoR setup

Very true, and yet it's so much harder to know your OpenSSL or other security-related setup.

You learn your Rails setup well enough to make your application work, and hopefully well enough to make it performant. If you miss either of those goals, it's obvious to you. You know something's broken, and you grind away until you fix it.

Not so with security. Your system can be "working" by all outward appearances yet be riddled with vulnerabilities. And you won't know it, so you won't see any reason to go and learn more. Nor would you know what you don't know, or where you need to learn more. That's the scary part.
IP blacklists are the reason Email still works.
It references articles and studies from 2006.
Let people run rampant on your IP range, and this is what happens.

I run a fairly large website, and I block all traffic from the likes of Amazon AWS because it's full of dodgy bastards who think they're entitled to run however many HTTP requests they like. Webmasters, look at your web logs. Don't be surprised if the majority of hits are coming from bots pretending to be web browsers.
Whose bright idea was it to dump chemical weapons in the Baltic sea?

Lets follow the logic here... Leftover chemical weapons from Germany ---> Destroy them, or store in a wearhouse of unknown location ---> No, lets drop them into the saltwater of Baltic sea in metal containers and worry about it in 2014.
How To Find Your Business Leadership Blind Spots
I've seen the posts back then, there was a list of words that were not really relevant to /r/technology OR not about "new" technology.

two big examples : bitcoin, snowden

there were a lot of words on that list but those were the most discussed.
Bitcoin was relevant and it got plenty of article. I'm not surprised that the admin of /r/technology wanted to avoid all the spam and diminish the discussions on that topic after 2 years of bitcoin topics and a huge /r/bitcoin subreddit (which I'm part of).

Snowden? Well it was talked about there a lot. Now is definitely not the time to keep talking about him on /r/technology. There are plenty of other relevant subreddits for that.

I'm sure that they would have lifted the ban if something really relevant would have come around.

Also, a lot of people tend to mix "censorship" and "moderation". I agree with PARENT, this is moderation. You cannot expect "total free speech" in a private subreddit on a private website. Shouting "censorship" at everything you don't agree with is just not relevant.

And if we go down this road, the best subreddits are the ones that are the most moderated. /r/askscience and /r/games. No trolls, no racism.
Possibly, but if Amazon isn't doing enough to secure SES against abuse by spammers(1), it's not unfair for entities intended to guard against spam to treat it as a spam source. This is one of the risks of letting third-parties run software on one's systems.

(1) keeping in mind that the definitions of "spam" can be quite subjective
5 key insights on the transition from Windows to Linux
Automoderator wiki was posted here: http://www.reddit.com/r/technology/wiki/automoderator. Honestly, it does not look too bad for what was being filtered out.
The most common solution in go is to use cgo[0] when wanting to bind with another language. From C you can then do whatever you'd like. That's how people are interacting with OpenGL[1] or QT[2] for example. Though, it seems like most common use cases of Go are to stay within the libraries supported by the shipping library or 3rd party libraries written in pure Go.

[0] http://golang.org/cmd/cgo/

[1] https://github.com/go-gl/gl

[2] https://code.google.com/p/goqt/
You've got a box full of agonizing death. It's unstable. Doing anything to neutralize it will be both hideously expensive and risky. Over there is, well, the ocean. Your move.
How come if it doesn't use a secure connection?
I know a lot of domains get deleted directly.

HN uses a heavy moderation, way heavier than reddit, and it works.
My gut feeling here is that you will have nearly zero price discrimination between $5 and say $9 a month, and could make yourself 80% more money. If you can show a justification for how this saves me money or helps me make more $ then $9 is worth it.
I wouldn't mind learning how to do this!
A New Approach for Prioritizing Malware
> Yes that's my main point: this plot does not prove the correlation.

I don't get your line of reasoning. Let's go through all the scientific method steps:

The hypothesis is: Videogames cause violent behaviour in youngsters.

The test for this hypothesis is: If videogames cause violent behaviour in youngsters, then we should find a positive correlation between the rise in popularity of videogames and youngster violence.

The hypothesis failed the test. The correlation either is not there, or it is there but is negative. We can conclude, from the fact that we did not find a positive correlation, that the hypothesis is false.
Toward an open Internet of Things
<pedantic>No, actually we lost USENET (although it still exists and is used), and it has been replaced by a website owned by DejaNews(Google).</pedantic> But yeah, I'm with you.

Edit, forgot: https://en.wikipedia.org/wiki/Usenet
"Under an agreement reached at the Potsdam Conference in 1945, Britain and the Soviet Union dumped around 65,000 tonnes of Germany’s chemical weapons stockpile into the murky depths of the Baltic Sea in 1947-48."

What does America have to do with this?
Not my time and my clients'.

By appending in the Posfix configuration file line smtpd_recipient_restrictions = ... spamcop and spamhaus , spam decreases in like 95% without even touching your server further (spamassassin I'm looking at you).

I you add greylisting you get rid virtually of all of spam.
Java isn't back, it simply never went away - it's the modern Cobol. It's a good environment for backend development. Free if you need it, support if you want, no vendor lock-in, no platform lock-in, a vibrant open-source community - there's a lot to like about this old dinosaur!
You have no idea how hard it is to moderate a subreddit that is a default one. This is not "lazy" moderation. This is to avoid all the spam in /new
found the post: http://zachholman.com/posts/github-communication/
Do you consider banning any link that has one of these keywords in the title decent moderation (aside from breaking)?

previous r/technology automatic filter list:

Restore the Fourth
NSA
Comcast
Anonymous
Time Warner
CISPA
SOPA
TPP
Swartz
FCC
Flappy
net neutrality
Bitcoin
GCHQ
Snowden
spying
Clapper
Congress
Obama
Feinstein
Wyden
anti-piracy
FBI
CIA
DEA
Condoleezza
EFF
ACLU
National Security Agency
Dogecoin
breaking
Someone saw me using my Nokia on the train the other day and commended me on Nokia's record with labor and child labor in particular.
You can get a tv tuner for your computer, and storage for what you record, to roll your own DVR for about $100, but it may be less of a hassle to pay $8/month.
The retraction of the wheels happens relatively slowly (due to various engineering constraints); enough time to shuffle around.

Given the fact that they were able to get into the wheel well at all; I suppose they could've either inspected the/a well some time earlier, or even hid during a low-activity timeframe (night, etc.) before take-off (though I'd suspect they would've been discovered during pre-flight checks).

Once there, you don't need much spatial awareness to determine places to position yourself, IMO: http://cdn-www.airliners.net/aviation-photos/photos/1/8/8/17...
SpaceX Makes Strides Towards 1st Stage Falcon Rocket Recovery
These Guys Met On Craigslist, 2 Yrs Later Their Startup Raised $37 Million
How Sales Hacker Max Altschuler Networks
The death of USENET was uncontrollable spam, and that it was coopted into a binary media distribution network. For a decentralized discussion forum, the overhead was absolutely massive, and nobody wanted to pay for that and receive no direct revenue.

Websites, while still spammable, are able to control it a bit better, and if you can't figure out any other way to monetize your forum, you can always slap some ads on it.

This stuff doesn't exist in a vacuum. Someone has to pay the bills, unfortunately.
I feel disturbed by short-sighted comments made by activists (Greeks or others) such as this one highlighted in the article:

> “We will not let this happen,” said Yannis Haronitis, an activist and protest organizer. “They want to destroy these weapons — well, let them turn Syria’s back yard into a toxic waste dump, not ours.”

So dumping the wastes in Turkey the black sea would be fine?!?!?

In order to tackle a problem you need to understand how it starts. Every time a war like this one starts the countries involved should at least save some money about the side-effects which will involve everyone else. Examples of these side-effects:

* How the chemical weapons used will be destroyed.

* What will happen with people and populations affected by the war.

* What will happen to all these immigrants who will overflow other nations, especially Europe.

So I think the organizations, activists and the countries involved (Greece, Turkey, Italy, Marocco, etc.) should start pressing at an international level the countries who fuel these wars (US, China, Russia, the NATO, etc.) to start considering the side-effects A PRIORI and have a couple of plans and money ready.

Of course in an ideal world, no kind of war should be justified, but the truth that people don't care what is happening 2 blocks away. That's the root of the problem... Because a fire starting 2 blocks away will eventually hit you too sooner or later, one way or another. We're not as disconnect as some believe.
That is correct. The service discovery is called ServerSets and is available here: https://github.com/twitter/commons/blob/master/src/java/com/...
ShowHN: HuddleHR – the simple and free way to manage HR
Yes but if everyone using SES is getting blacklisted then you will also have a lot of legit emails being blocked.
Dropkick Your VC if They Don’t Make Introductions (10-Point Checklist)
I may be wrong, but I think you misunderstood the 'stripping the messenger app' bit. It's not referring to the web app, just the ios app. Facebook stripped the messenger app from the main iPhone app a few months ago. I don't think there are any additional TOS.
Are you asking me or sycren or us both?
It's already established that without one-antenna-per-stream, it is considered a public performance of copyright content, and therefore the content must be licensed. This is how it works with the cable TV providers.
This is a paper from 2007.

http://link.springer.com/chapter/10.1007/978-1-4020-5528-7_1...
That headline is a good example of a garden path sentence. I thought reddit was making a technical change to their website for a few seconds.
Buy and Sell Bitcoin Securely with a Coinkite Mobile ATM
You're always going to think "hardware companies can't do software" if your definition of a hardware company is "a company that makes hardware with bad software".

Last time I checked iphones and xboxes and tivos were hardware. If every hardware maker with good software is a software company, and only the hardware makers with bad software count as hardware companies, it's by definition true that hardware companies can't make good software.
Right, but how is that different than JNI?

For instance one of the major complaints about the JNI is that adds a pretty high performance penalty to any native calls (and typically you want native calls when performance is important). Does Go's FFI not have this performance penalty? If not, why not?

Like with the JNI, Go's garbage collector needs to understand life cycle semantics of objects coming in/out of the native binding, how is this accomplished and does it do a good job? Does it complicate the garbage collection of other unrelated parts of the system?

Basically, if you are going to claim that the JNI is awful (and I think that is a valid claim) and then imply that Go's isn't, I'd like to know why that is.
Urgency is demanding attention. Attention is achieved by raising interest in other humans. For products, this raising of interest is known as 'marketing'. There is a very fuzzy line between passive marketing and active marketing in products. If you turn on a notification in your app just so the user uses your app again, you've crossed the line and are contributing to a global 'arms race' of marketing behavior that is slowly eroding everyone's joy. Please stop what you are doing and just make your software great.
Reddit had another moderator scandal that happened son after the /r/technology incident: On Reddit, it was recently discovered that a moderator on r/hearthstone was upvoting links to a certain Hearthstone fansite and flagging all others (even when the other sites have better info). That site was owned by gaming network Curse, and it was discovered that said moderator was employed by Curse. It wasn't pretty. (more information here: http://www.reddit.com/r/SubredditDrama/comments/23cf60/blizz... )

The "first-dibs" system of selecting moderator for subreddits may not be the best system nowadays.
If my understanding of model checking is correct (which I believe is the primary method of formal verification) I don't think this would help much in the case of Heartbleed. The Heartbleed error had to do with an expression being in the wrong scope if I recall correctly. (I think someone forgot to put brackets around an if statement that contained two expressions).

In this case the model would be correct, but the implementation would be wrong. So I don't think formal verification would be of much help. That said, I think there are a number of static analysis tools that would pick up on the error, so a combination of approaches would work.

And of course, it would be great if we could verify that our security critical code was sound in theory, even if we can't necessarily verify that our implementation is free of coding errors, so I agree with your main argument. Of course, whether we're at the point where doing this verification is feasible in practice is another matter unto itself.
ShopKeep seems to be the preferred OS at a number of the small independent shops in my area, too. Getting coffee shops and restaurants and their kin to migrate to newer software and technology is extremely difficult, so good for them.
I know these ones are available in Munich airport and many other places.
http://www.napcabs.com
I have been managing email servers for over 10 years, and it has gotten to the point that I feel like blocking some of the most common ISPs. Seriously.

I am following all the best practises, hell, I even advocate them. It is just that these days it seems not to matter if you have SPF, Sender ID, DomainKey and DKIM, PTR, proper MX and even a normal to good IP reputation. There is still no guarantee what you will be able to reach the inbox of the likes of Gmail, Yahoo, Hotmail, etc.

I have been filling out huge forms for each and every major ISP for the past year because one or two users mark a newsletter as SPAM.

Conclusion: There is no common standard because every major ISP can set their own standards. This will eventually force everyone to use the same services worldwide.

Where's the freedom of choice here?
This is slightly off topic but I spend a lot of time on /r/bitcoin (I have done for about two years now). Over the past 60 days there has been a sustained attack by some group or entity, I am sure of this. The subtilty of attack is really astonishing, I never thought that I would witness something with coordination that seems on a scale of a nation state. These users are employing advanced techniques to trip up and stall discussion, causing in-fighting, promote other agendas (really gently) and just generally destroy the group. In times like this we need heavy moderation to stop it in it's tracks until everything clears up.
>5. Microsoft got only a very short period of exclusivity. In 2016, around the time Jolla will have matured their business enough to spin back in to Nokia, which is still a large telecom company, Nokia gets to go back into making phones. Meanwhile, Jolla is where you will see Nokia's ecosystem on phones.

If only. The thought of this possibility will cheer me up all day today.
Joe Rogan recently had alexis ohanian (4.11) and then David Seaman (4.16) on his podcast and David Seaman brought up the fact that the technology subreddit was using a bot to censor certain keywords. With over a million listeners listening to that podcast I think that may have had some influence in getting more people aware and eventually leading to this decision.

http://podcasts.joerogan.net/
EBay’s Devin Wenig on Tech’s Destruction … and Humanism
Actually back in 2012 Java wasn't that popular. Here's the language stats for the 200 teams 1.5 years ago:

Ruby 28.4%
Python 27.5%
Clojure 10.1%
Java 9.2%
CoffeeScript 8.3%
Haskell 6.4%
JavaScript 5.5%
Scala 1.8%
Go 1.8%
Groovy 0.9%

This year Java rise and Ruby's drop are quite obvious when compared to the old stats.
Deleting all stories containing the word "Tesla" is lazy moderation. That policy was in place for at least some period of time.