skysight-inc/HackerNews huggingface dataset:
- DNSSEC enables and facilitates reflected DoS attacks by amplifying attackers' bandwidth;

That's a problem today, without DNSSEC, and requires fixing regardless, whether or not DNSSEC becomes wide-spread.

- Using DNSSEC allows anyone to enumerate any of the zones of your subdomain, effectively turning on public DNS transfers for anyone who asks (see the paper for attacks against NSEC and NSEC3);

I thought NSEC3 fixed that, but I wouldn't be surprised if there were attacks against it. I don't think that's an insurmountable problem.

- Most importantly, no common resolver validates or enforces the validity of DNSSEC records. Chromium closed the pull request as WontFix: https://code.google.com/p/chromium/issues/detail?id=50874 and Mozilla have no current plans to implement it: https://bugzilla.mozilla.org/show_bug.cgi?id=672600

Chicken and egg. shrug There's no reason an OS can't come with such a resolver built in. Personally I take the 60 seconds or so required to do an "apt-get install unbound" to get this functionality whenever I build a system.
> it seems exceedingly unlikely to ever be a problem on a scale larger than a handful of cases.

All it takes is a "handful" (or less) when child porn is the subject. I wouldn't go anywhere near money transactions given the risks.
Mediamorph Is Hiring Software Engineers – NYC
The Mediamorph engineering team is growing and is looking for a full stack Software Engineer. In this role, you will report to the VP of Engineering and be responsible for working with the development team in the design, development, enhancements and maintenance of mission-critical web-based software for major film studios, broadcasters and cable network providers/operators in a high-energy, start-up environment. We are looking for Software Engineers who considers themselves full stack developers and can work with databases, servers, systems engineering, understands front end development and has some familiarity with each layer, with the ability to quickly learn new concepts and software as necessary.

(Mediamorph Tech Stack)

Java, Python, Spring MVC, Struts, Tomcat, Hibernate, Jersey, Jackson, PostgreSQL, MongoDB, Red Hat Enterprise Linux, CentOS, HTML5, Marionette, RequireJS, JQuery

Contributions to the larger development community, whether it’s on Stackoverflow, Github, through Hackathons or open source projects are a big plus.

Mediamorph pays a competitive base salary and full medical and dental benefits. A key additional component of your compensation plan will be in equity whose value will grow as the result of your efforts.

Mediamorph is based in New York City with offices in Los Angeles and London. We invite you to visit our website for more information at www.mediamorph.com.

To apply, please submit your resume via the following link: http://grnh.se/alpcr1
My biggest concern generally is in-ear comfort. Short of molded customs, every in-ear headphone I've tried causes canal soreness within an hour or two, including the "sound delivery straw" designs with delicate foam or rubber surrounds. Secondarily, it looks like the current model sticks out, causing pressure if one's head is resting on its side.

That said, my ear canal soreness is largely due to canal deformation relating to jaw movement. Perhaps this is not an issue for sleeping. Also, foam earplugs (compared to earphones) are not uncomfortable for me.
These are definitely not the world's first smart earplugs - Etymotic has been offering this kind of technology for quite a long time now.

http://www.etymotic.com/gsp15.html
Thanks! Did you do a fresh install or upgraded?
Are the tips replaceable or can the buds be cleaned to remove wax build-up?
Although it works for that, I feel like that would be more of a carrot for users so that they can transition to a more reputable business model. They can use that for a short time to get the card data, but then begin selling their own goods etc. I would be surprised if they left it at this considering how young their userbase is. Mixing 'cash for pics' with a userbase predominantly under 18 in a multi-billion dollar business does not sound like a good idea to me.
If you want a fantastic graphical frontend for bup, there is kup, which is a kde app: http://kde-apps.org/content/show.php/Kup+Backup+System?conte...

It is really easy to set up what folders to backup and where, and I use it whenever a backup is simply take all files from X, do the rolling backups at Y, and done.
> funded project development, through permanent staff and development contracts

Somewhat of an aside, how do you guys manage the relationship between volunteers and paid work? Mixing the two has a historically poor track record in the open source community (eg. Dunc Tank, etc. etc.)
> The same exact concerns exist in other places and have been dealt with by a large number of companies at this point

Can you identify a similar set of circumstances where this has been successful for more than a brief period?
> a potentially troubling precedent as the court's access to such data increases.

This is just fear-mongering. The court only has access to this data because the owner of the data has brought it to the court as evidence in their case.
This guy calls it BS. Any thoughts?

http://trilema.com/2014/the-united-states-scammers-service-f...
That's a pretty good article in Polish, tackles the issue from more than one perspective: http://niebezpiecznik.pl/post/problemy-w-pkw-zliczanie-gloso...
Danske Bank has offers that in Finland too, but I've never heard of anyone actually using it..

While we're talking about Danske Bank, here's a "funny" story about it: After Danske Bank bought out a Finnish bank called Sampo Pankki, they switched their online banking application to use Java. And it didn't work properly on Linux. I actually switched my bank because of that bs.
This is just the same as your car, your phone, or anything else that can be tracked being used to suppose that you were at those locations personally. It's not certain, just probable.
Did you mean OpenSSL vulnerabilities? That's a whole different team again :) (neither freebsd nor openbsd, although openbsd recently forked it)
Calling all insider trading "front running" does nothing but muddy the waters.
> perhaps if there was a wider pool of developers, the BSDs wouldn't be so clean and straightforward.

That's exactly how I feel about it. You never want too many cooks in the kitchen. They have all they need for a very successful server system already.

Right now I'm just hoping for some sort of BSD-based desktop environment∗. Doesn't have to be a Windows/OSX/GNOME/KDE killer, just something functional. I suspect the usage of Linux GUI environments is going to become increasingly volatile in the future with so much Linux-only tech being pushed in as dependencies to absolutely everything these days.

(∗ I don't mean something like Lumina, I mean from the display server up. Xorg is moving to Wayland/Weston, GTK3 is pretty much becoming GNOME-only, which is becoming systemd only. I'd like to see a new BSD-style lightweight, modular, minimal display server, widget toolkit, and desktop. Run the whole thing on either VESA or barebones EGL.)
Totally agree. That was my first reaction after reading this. Not cool.
Well, that's the thing about Polish tongue (and many other too). Every single word does have a gender and you can't run away from it - in theory, masculine could represent gender-neutral meaning, but it would be very awkward to say (in Polish) "student" in one sentence and "Agnieszka" (Agnes) in the next one.

I don't find any emphasis on the sex of the person in question in the Polish text. It's only about experience and skill of the poor soul. Translations are hard because cultural context.
"With this donation, and the generosity of all those who have donated this year, we have shattered our 2014, million dollar fundraising goal! But this does not mean we can stop our fundraising efforts. Only by increasing the size and diversity of our donor pool can we ensure a stable and consistent funding stream to support the FreeBSD project."

Is this very, very dry humor?

edit:

So nobody thinks that there's anything funny about reaching a million dollar fundraising goal, but noting that they might want to expand the size and diversity of the donor pool in future after getting a million dollar donation from a single person.

Of course they reached the goal, and of course they might want to raise the size of the donor pool it took to reach the goal [one person] and the diversity [the donors that put them over the top all have the same Social Security number.]

Feel free to interpret the comment as "why donate to them, they just got a million dollars" or whatever bizarre impression people are getting, but if I meant that, I would have just said that.
Would be nice if it fixed computer names on a local network incrementing randomly: hostname (1), hostname (2), ..., hostname (n)
I printed out a copy of the source into a spiral-bound notebook to read/annotate. It can boot on real hardware which is pretty neat. It can even do multiprocessing on multiple cores (processes, no threads).

It uses "ATA PIO Mode" for the disk driver which is very simple and available on all ATA drives, but horribly slow. The console output is similarly naive but easy to understand. It even has a stripped down user-space, shell, C library etc.

It's a really good top-to-bottom look at a simple OS.
I predicted this here a while ago. Apps like Moves are even worse bundling activity with location.
None of the probes has ever used what could be called cutting edge equipment, the science behind it all is cutting edge but you can't put a camera, lenses or processors on a device going into outer space without having done some serious testing. It's just easier to do it with devices and such that have a long track record of working with radiation, incredible cold and so on.

I totally know where you're coming from though, having Curiosity or Rosetta be equipped with some serious photographical capabilities would've been awesome. But I doubt any of the firms are going to put any kind of cutting edge imaging solution on them any time soon.
Generation XXX: What will happen to kids raised on porn?
I don't see what the free market has to do with this. In a free market, or really any system that has property rights at all, you can't take or destroy someone's property without their permission.

Edit: by "can't" I mean it's not allowed - it's a crime. Not that you physically can't.
> True. But this is an issue for so few people as to be effectively zero.

Why not? Keeping a master copy can be an issue for any user who cares about quality. You can see it as keeping a master tape, so any subsequent copy (=lossy encoding) won't degrade the quality too far.

> and I would wager that most of them aren't Apple customers to begin with.

Why so? Is it some kind of stereotype that Apple customers don't care about quality of music or can't be audiophiles?

> If Apple had infinite engineering resources, then yes, it would be nice to solve every single problem for every person, everywhere.

Adding FLAC support in their QuickTime framework is trivial. Excusing the lack of support for it by lack of engineering resources in Apple should be just embarrassing for them, not even to mention that it simply would be a lie.
Well, the implications are pretty well founded:

- the binary has strings like `C:\Users\Agnieszka\...\Visual Studio 2013\Projects\Kalkulator1`. Agnieszka is a female Polish name -> the programmer is female. Although nobody really is using this as a discussion point anywhere, but hey, the fact is there if it's interesting to you.

- the code logic and layout is pretty convoluted and looks duct taped together, even considering it's decompiled from binary form -> the author is probably young and inexperienced, and/or this was extremely rushed.

Also, I'm not realy sure where anyone is “picking on females” here.
If you smoke DMT and don't have a breakthrough you may feel a lot of discomfort, which may cause anxiety. That's exactly what happened the first time I tried DMT, and I was already pretty experienced with other psychedelics...
I use vim and brackets (in addition to Visual Studio), but is codebox even an editor? I thought it was just a snippet organizer. Also, Atom can't open files greater than 2MB at the moment.
Uhm, no, it is not.

Did you miss the "Pani Agnieszko, naprawdę współczujemy, jesteśmy z panią!"("Ms. Agnes, we're really sorry too, we're here for you")(that's a terrible translation, but oh well) part? There's absolutely no ambiguity here.
Show HN: Say Play is now available for Chrome
Braintree ASCII Arcade
The "making it rain" looks a lot like Stacks. http://rainstacks.com/
In what way is that a problem?

Haskell is certainly a reasonable choice for a markup transpiler.
To date the FreeBSD Project has benefited from the generosity of a number of users of FreeBSD who donate data center space and connectivity. Some examples are Yahoo!, NYI, ISC, and Sentex.

The point about the need for and value of marketing is well taken; Anne Dickison joined the Foundation as Marketing Director earlier this year.
Milk Might Not Be Doing You Much Good
This happens already today not only with Snapchat, as well as on the multitude of cam services out there. (The taboo you mention makes the problem worse, as it can quickly escalate to blackmail.) Is it likely to get worse with integrated payments? I would guess yes.
This is a shame. But as usual, people start caring about environment very late. They should have had that in mind right off the bat when they started using this technology.Sadly back in those days all was going good, nobody cared. Now when it becomes critical, suddenly people start getting scared. Well, too late guys.
How many screw up we will need to stop being late?
This, I think, is a major weakness of the typical conference publication process, which is one-pass reject or accept. Journals have a much more humane process. Take the potential sentence from a reviewer:

"This work has significant novelty, but is lacking a comparison against technique XYZ."

For a Tier 1 conference submission, that's a rejection. For a journal, that's a revision request. Of course, in computer science, conferences are where the action is. But, there are attempts to split the difference. VLDB has moved to a more journal acceptance process (http://www.vldb.org/2015/submission-guidelines.html; rolling deadline at the start of each month through the year, reviewers can request revisions), which myself and some co-authors are currently going through. It is much more reasonable.
Great point.

Here's a link to one of many articles that addresses your statement, for those uninformed [1].

Just imagine how many Apples products exist today that go back to FreeBSD roots (Mac, iPad, iPod, iPhone's, etc).

[1] http://www.macworld.com/article/1018184/apple.html
Day 12: Closing up on launch – Have any tips for us?
It does seem odd that they don't release the name or price of the winning bid.
I really like this idea! Combining isolation and masking in a standalone in-ear device is very clever.

Personally I'm less interested in the ability to be interrupted by alerts from a smartphone. When I'm sleeping I want to sleep. When I'm working, I can get vibration alerts from my phone.

Have you considered a 'dumb' version with just pre-recorded masking audio and no wireless features?
https://github.com/wybory2014/Kalkulator1/blob/master/Kalkul... - if you can't connect to https://syswyb.kbw.gov.pl/, try an unencrypted connection to http://klk.kbw.gov.pl/.

It also looks like (unless I am missing something) 'liceneses' (signatures of authorised officials as far as I can tell) are checked for common name / organisational unit, but there is no check that the certificate trust chain is anchored on a trusted certificate.
GP's concern of proprietary modules seem valid IMHO. Based on your track record and plans ahead can you confirm this is not a risk?
This video must have cost a pretty penny.
Couldn't agree more. I love linux for servers and work with linux servers all day long but I don't like linux desktop or app selection as much. I think there is something to be said for using a beautiful interface and apps everyday and I haven't really seen anything in the linux world that come anywhere close (without HOURS AND HOURS of playing with configs). I bought into Apple for *nix environment that "just worked (tm)" if they push another bad OS X release then I'll have to seriously consider linux again...
betable.com perhaps? They pivoted to being a betting payments platform.
Meet the Gardening Robot That Could Grow Food for Astronauts
Thanks for the link -- I never knew of http://www.iana.org/assignments/http-methods/http-methods.xh... before. :-o
Jelly launches a new app called super
If you read the commit messages you will often see a "Sponsored by:" line, and it's not uncommon to see those companies referenced, so they are supporting FreeBSD, just in the form of developer time. And I believe they also donate to the foundation as well.
Tell me again how property rights prevented this from happening.
Looks like the mantle has passed from Yahoo! being FreeBSD's biggest advocate and sponsor (not in direct cash donations, but employing their maintainers) to WhatsApp. Nice to see the Y! alumni are keeping the tradition alive.
Somebody should contribute a Dockerfile to Pandoc upstream, so jgm can provide an official Pandoc Docker image (ideally as an automated build done by Docker Hub). Now, let the bikeshedding begin on which distro to use as the base. I vote Debian Wheezy, if it has a recent enough Haskell Platform.
I'm most certainly not, miss/mister.

The point holds for 10.1. A bug in 10.1 will only be fixed in 10.2.
I meant the “(female)” remarks in the grand-grandparent post.
download iOS 8.1.1 for iPhone ,iPad and iPodsiOS jailbreak
Any reason to omit NetBSD from that list? It might not be as popular, but the code is good too..
Here: http://www.convalesco.org/blog/2014/02/11/on-the-matter-of-b...
Anecdotally, as a college student on the east coast, I know a ton of people who use Venmo (I use it myself).

However, this same group of people uses Snapchat as well.
Sure. Nothing is guaranteed. All you can do is be insistent on echoing the best advice possible going forward to lift revenues and attempt to remove the roadblocks towards your objectives.

Sometimes you win. Sometimes you lose. Sometimes you say "I told you so" and they say "fuck off" and you part ways.
The sad reality is the most corporations are pure leechers, they never give anything back, for those companies open source is just a means of not paying for software.
Could the power/charging issue be handled by a rotatable handle/component that can charge up a battery if it goes flat and leaves you outside? A bit like the wind-up torches you see around the place?

Or would it require minutes and minutes of manpower to realistically charge?
"I was paying big bucks to Apple to solve this for me"

Agreed. I don't want to have to worry about shit like this. When I use Windows I would ALWAYS do a clean install and almost always do a clean install every few months because I run my machines hard (installing tons of stuff to try out then removing it). With OS X I didn't have to worry about this and have saved a TON of time not having to rebuild my computer with each release. I expect better from Apple.
The guy who did the C4 compiler also has a more fully featured one that does support structures:

https://github.com/rswier/swieros/blob/master/root/bin/c.c

It's part of an OS he's building based on xv6
Although amusing at first, if this practice would become widespread everyone would just wait for cracked release of proper version from respectable cracker team. This game is in unique position though because it is itself about making games.
I don't know, NetApp has been a sponsor for as long as I can remember. If I were running the foundation, I'd probably be happy knowing every year I was getting over $100k from NetApp instead of a one-time thing. It's tough to budget off of one-off donations. Not that they'd complain, but you make it sound like none of those companies help at all.

for reference:
https://www.freebsdfoundation.org/donate/sponsors
I actually thought the video was a bit too old for their primary users. The whole glitz and glam of a over produced Vegas style show probably doesn't connect well with 18 year olds. They also had a large abacus, do 18 year olds even know what an abacus is?
TL;Dre-read: did any of the Bellhead ideas prevail? The Netheads seem to have won rather thoroughly. Was it less than complete in any way?
Given the potential impact of the results, and the incentives in place for the final tally to be something other than the correct sum, the problem is not quite as simple as counting your sheep.

Think of it more like counting your sheep as lean and hungry gentlemen shout random numbers in your ear, dump disguised goats into your flock, continually jog your elbow if you try to write anything down, and toss sheep over the fences in both directions.

And then, just for fun, they stab you in a kidney and take your wallet.

The hard part is not the counting. It's dealing with the potential attacks and still being able to verify precise and accurate results.
Except the industry as a whole makes itself look bad when it opposes the kind of (admittedly brutal) regulation that would terrify the corner-cutters out of existence.

The degree of recklessness and criminality at the fringes of an industry is directly proportional to the contempt in which the public is held by those at the center. If the "leaders" are continually pushing the limits (e.g. BP), it's not surprising when the more marginal players overshoot them entirely. This is doubly true when the same "leaders" have spent more than a decade lavishly financing a public disinformation campaign (read: systematic lying) to downplay the environmental safety risks of their product, while twisting the arms of any elected officials who dare stand in their way.

And remember, "standing in their way" goes beyond the imposition of effective health and safety regulations. It also includes efforts to curtail enormous public subsidies for what would remain an exceedingly profitable business with no subsidies at all. It's like a Gambino family shakedown run by people with the political clout of the U.S. military.

It's true, stuff like the (potential) destruction of aquifers does make the industry as a whole look bad. But if the OP thinks this represents the extent of the PR problems faced by the oil and gas industries, he needs to start paying much closer attention to the political agenda of the business in which he makes a living. It's...not pretty.

The best thing we could do with our oil and gas resources is to use the amount we can safely burn to make the massive infrastructure changes that a sustainably low-carbon economy will need, then write off the balance of the planet's known reserves, and peacefully and voluntary close up shop once the transition is complete.
How to capitalizing just the first character in JavaScript
Very cool product. You can get a similar effect to these isolation+masking plugs by wearing normal earplugs and then playing loud masking sounds externally (either over speakers in the same room, or through over-the-ear headphones).

On planes, for instance, I wear headphones over my earplugs and crank up the volume to watch movies. It's the poor-man's noise-canceling headphones! If you can, also turn up the treble to try to flatten out the combined frequency response of the plugs+phones.

Obviously my hack doesn't solve the same problems this product does, but it's a trick I've found useful.
Yes and I'm assuming the business is paying for this team - so effectiveness would be measured by whatever the business goals are at that moment. Constant steering and alignment w business is therefore crucial.
I'd rather write a blog post and use it as reference. The topic is been discussed in very long detailed on HN, but I'm too lazy t find the link.

The only advice I have is: Take haircuts and dancing lessons as often as you can.