skysight-inc/HackerNews huggingface dataset:
> it has to make another query to the server mentioned

Almost. It's the resolver making the query, not your client, and the resolver won't accept the bad records.

---

Your client application uses your host's DNS resolver library to query a DNS resolver for DNS records. It will only ask the configured resolver for records, and only receive them from the same configured resolver. So all records must go through your resolver. ('DNS resolver' = '8.8.8.8')

The resolver will do all the heavy lifting with external servers to find your records. Think of it as the 'gateway': if you are inside a network with no internet access, but you still want to resolve records (say, on a captive portal wifi network), some server needs to straddle your network and the internet to talk to internet-side DNS servers. The resolver does that work so your client doesn't have to, and can be on multiple networks, etc. (On a wifi network your resolver will probably be '192.168.1.1' or some other internal router/server)

So basically, your client [and its resolver library] will never ever talk to someone else's DNS server directly. So it won't talk to an 'evil' DNS server either. It will only talk to your 'good' resolver ("8.8.8.8"). And your 'good' resolver is checking to make sure the responses are valid, and truncating or dropping bad responses so you don't get them.

So no, you cannot just set up an evil DNS server and own random hosts. You need to be the resolver. But your IP probably isn't 8.8.8.8, so you will probably not be able to own random targets.
Hiring Processes, aka Starting to Build a Team
It's much easier for a computer to recognize audio than video content. I'm sure in a couple of years, YouTube will automatically flag violent terrorist propaganda.
One of the coolest experiences I had in grad school at MIT was taking professor Horowitz's Physics 123 class at Harvard, and reading this book cover to cover in a semester. Pain!

FYI, AoE covers BOTH analog and digital circuits in great detail.

You don't need to know how a computer works in that level of detail, in order to program it. But having started my education w/ high level languages like Java, C, C++, etc... it was fun to work back down to voltages, capacitors, buses, clocks, EPROM, transistors etc, and see how it all comes together end-to-end.
Been a long time user of Slack and absolutely love it... I've seriously got a bromance with this company. It's adored throughout the company I work at, and one of our pains is that we do all our communication through Slack, even if we're next to each other, we still have headphones on and we talk in Slack. But we still have to go to Skype to do stand up meetings with our remote users... Would be so much better if we could do video over Slack.
Would it help if an ISP ran a couple of exit nodes plugged into core routers?
Shareholders are the last to be paid in the event of a liquidation (equity is by definition assets minus liabilities) and dividends are not a cost (unlike interest payments).
Read the book or listen to the original radio show. That will help you understand the deliberate and pervasive sarcasm, non-sequiturs, and Pythonesque absurdism (the author actually knew & hung out with the Monty Python crew).
You measure them relative to those who achieve high performance.
I find that Shark Tank is a great learning experience just from a viewers prospective. I think, even with the added dramatic flare, that you can learn a lot from the 5 sharks that are sitting in that room at any given time. It is an enjoyable free class on entrepreneurship, as well as a view inside the mind of a millionaire to billionaire that one does not get access to very easily.

Unfortunately I think a large amount of that education is lost on the general TV watching public.
I understand what you are saying but I think the real value in the kind of perspective he brings is how it makes you think rather than the ideas itself.

The specific connections he makes aren't important. It is getting others to think and make connections themselves that are actually meaningful.

The author of the article does a good job of pointing out the ulterior motives for tech culture elites wanting to get him involved e.g. grasps for authenticity. I like how she also points out there may be positives to these ulterior motives like actually getting back in touch with its counter-culture roots.
Non-Message Flash in Rails
Doesn't that only open it once, and if I want to keep using it I have to go flip the setting in System Preferences? And in Apple's infinite wisdom, that setting now resets if you haven't exercised it in a while, which is pretty crazy.
There already is a Screenhero integration for Slack. If you pay for Slack, you can set it up in like 3 minutes, from slack.com/screenhero.
Once you're on the investment treadmill, growth is everything. Every dime of profit is a dime not reinvested in growing the company. Early investors are making a tremendous commitment - they're not just investing, they're giving up liquidity on their investment. They can't just turn around and resell it to invest in something else, the way they could with publicly-traded stocks. Illiquidity is a largely alien concept to most people.

A little background. There are really three factors to any investment - risk, return, and liquidity. The more you sacrifice with one, the more you expect from the others. Startup investments are high risk and low liquidity, so they should generate incredible returns when they do succeed.

So no, your angels and VC don't want profitability. They want growth. When you finally achieve a "liquidity event" (selling the company, or IPO), it's getting sold to the people who want profitability, and are willing to sacrifice returns for it. Different investors, different needs.

As a business, if you want control, you eschew investment and instead target profitability and stability. But you're greatly limiting your growth. That's fine, too.

Do you want to be rich, or do you want to be king? If you want to be king, avoid investors and build for stability. If you want to be rich, take the investment and grow as fast as you can.

If you want to stand on the sidelines, that's fine too. But don't laugh and mock business decisions by smart and determined people. Maybe they're trying to solve a problem you don't understand.
> probably a bit out of the norm for the HN crowd

That's arguably the best kind of HN post.
We tested Slack some months ago, but rejected it due to lack of solution for VoIP and video conference.

I am not seeing this acquisition is changing this. In order to have a meeting with multiple participants, we will still need Skype/Hangouts/Lync/WebEx.
There's a great chapter about Feynman's role in the investigation in Surely You're Joking, Mr. Feynman. It gives some insight into the process of investigating something like this that isn't always apparent in the reports themselves.
Even if so far everyone has that exact worst case experience, that doesn't mean tomorrow you won't be arrested for somebody viewing illegal material through your exit host. I know people who've sold drugs and never had any problem, it doesn't mean I'm going to start doing it presuming its safe based off their anecdotes.
The theory that people should know everything before doing anything is a) impossible, and b) is what leads to massive, wasteful waterfall development cycles. The best we can do is to try to identify and mitigate risks as quickly as possible, and to handle responsibly the problems that happen regardless.
There is a diffrence between mostly voluntaryly pushing your own data into facebook and wanting to not be detected when organising political rally.
Encrypted self-destructing messages in your email
Are 23andMe Customers Suckers or Empowered Consumers?
According to [1], Riot developers are aware of that and chose to support custom tags without a dash:

> W3C specification demands you use a dash in the tag name. Instead of <person> you must write <my-person>. Obey this rule if you care about W3C. Both work fine.

However using hyphens to be standards-compliant and future compatible would be better.

[1]: https://muut.com/riotjs/faq.html
Here's another:

> Television studios have Nielson ratings

It's "Nielsen".
Code GS – Goldman Sachs Student Hackathon
I'm no longer surprised by any of the foolishness that journalists get up to, but it's still fun to point it out.
Similar tech to tDCS which has a plethora of applications as well.

You will be assimilated! Resistance is futile!
Then it will get tons of likes, and funnel through data aggregation channels to later be part of a bar graph of patriotic support for the war effort.

Who said Facebook's censorship was arbitrary?
Transparency Report: Updating our disclosures for the second half of 2014
(Note: I have an iPhone and so can't test it myself, but I can read the client js code)
My guess is that they are routed through the phone. That's certainly something that Apple would have a hard time allowing which might explain the android onlyness. They are clearly using WebSockets and the phone receives messages but only in so far as the phone. For a E2E encryption they would have to routed through the phone, which it seems they are from the look of their code. Again only guessing, someone should packet sniff it and lmk.
Does your business need Office 365?
the new title is actually incorrect, the "secret" RPG is not the released-to-the-public game but actually "[The] Starlight Lines employee forum" if one is going to be literal about it. I'd personally just keep the article's title.
To be more clear, I'm actually hoping that it becomes a tightly integrated feature within Slack vs. using it as a separate service.
Ask HN: How do you do Docker CI?
I have a bunch of Docker containers all hooked up using docker-compose (previously fig). I have found that services that advertise themselves as "Docker CI" services are usually just talking about using Docker to run their build workers.

I would like a continuous integration service that preserves the Docker build cache between runs, instead of spinning up a completely new worker/filesystem/build context. Otherwise, builds take absolutely forever. Ideally managed (unlike https://github.com/groupon/DotCi, which doesn't come with CircleCI's ready-to-go per-build database).

The only thing I've found is TeamCity (old, you can't version build tasks in a yaml file easily like you can with CircleCI, you have to maintain infrastructure, etc). Quay.io doesn't provision a database like CircleCI and Travis do, so you have to bifurcate dev and prod and install one inside the container and run unit tests during the container build (ew - you can't spawn into an unbuilt container to debug things!).

How do you run continuous integration on your Docker container cluster?
They were using Ember at one point yea? I think I recall them contracting a pretty core Ember member, maybe ebryn, to work on a project.
It is probably no coincidence that this was around the time ANSI C became a standard.
Our entire company uses Slack for most communication since everyone works 100% remotely. It has been fantastic. Finding a good tool for screen sharing has been difficult, though. I pair almost every day, so I need a tool that is stable and has a good quality-to-speed ratio.

For people with good connections, Screenhero works well; only downsides are that we get a lot of crashes in the beta app and sometimes the mouse sharing changes window focus or mouse position for the other user, but in general it is the best tool we've found. For those without good connections, we have to use GoTo since it sacrifices refresh rates for quality.

Overall, I'm excited to see how this works out. Right now it's a small subset of people in our company that use Screenhero, but I expect to see that number jump with this announcement.
The Next Front of Wearables
Immutability was never incompatible with OOP, just the opposite in fact. Even Alan Kay often criticized languages like C++ and Java for encouraging the use of setters and, thus, “turning objects back into data structures”.

C# is still one of my favorite languages (even though I use F# most of the time now), but I do admire Java for making it significantly more painful to write mutable rather than immutable classes; it's too bad that fact was lost on so many programmers.

Kudos for sharing the Rich Hickey video; it's one of my favorites of all time.
My assumption is Apache POI to "parse" native Excel files was never considered because OLE2 is famous for being an inception-like file format.

http://poi.apache.org/casestudies.html
I still find the supposition that Facebook was supposed to defy a court order hilarious. Yes, I understand it's a court order from Turkey, not America, but you can't just flagrantly break the law in other countries simply because yours believes differently.

I think you're missing a major point: unless FB has something like a CDN physically located inside of Turkey -- or has some other corporate presence there -- then it is under no legal obligation to comply with its laws (or court orders) whatsoever. The reality is that FB is complying with the Turkish government's requests for no other reason than that it chooses to, because it considers the (perceived) business advantages to be more important than the social and human costs of doing so.
That explains it, thanks. To me this makes the focus on non-blocking code in PlayFramework2.0 a bit more strange to me, since the JVM isnt single threaded.
The thread is full of "flash sucks, good riddance, poor performance, etc", so he was not at all adding anything new to the equation and his response was in direct reply to mine, as if any repose other than one which was in lock-step with the thread's general opinion required instant rebuttal.
We did and still do use Ember and Angular for various internal projects. The Netflix UI has never been Ember-based.
Programming systems can be treated scientifically, but they can also be treated deductively (like math). It's possible to have full knowledge of what's going on if you treat it like a deductive system. If your primary way of learning is through experiment, then yes, you will be wrong a lot of the time. But then I would never claim you had a good reason for believing anything.

I can't view the stackoverflow link right now, but the top answer basically claimed "I feel strongly about my reasoning, but nevertheless, I could be wrong". How could that be unless you made a mistake? The system is logical!
Don't make the mistake of thinking I don't understand the humor. I've read the books, all five of them, and the humor in them is great. I just don't really care for gating that humor behind the obtuse "puzzles" of this game. I don't have the patience for that, and having to follow a step-by-step walkthrough defeats most of the purpose of it being a game in the first place.
I don't read this as saying "a series of failed projects". I think it's more about orthogonal improvements. But I don't work on this team (I do work for Netflix) so my knowledge is only slightly less indirect than anyone else.

For what it's worth, we do use Angular on some internal tools.
My bad, she covered 2 topics after 2 years and recently she covered the third from her list on the Kickstarter. So, by now after ~2.5 years she made "Damsel in Distress", "Ms. Male Character" and "Woman as Background Decoration".
For me that is taking way to long to fulfil kickstarter promises, knowing that she even got 25x amount of money (and more from other sources and asking for more all the time), because she is actively engaged in other public activities (conferences, activism, giving speeches, lectures, etc.). She basically converted this to her full time job and not one time project.
She can do whatever she wants of course and you can back her even if she do not fulfil her promise ever, I just find problem in the fact that whenever someone puts out some valid criticism of her work and methods he or she (yes there are many woman gamers or non gamers who disagree with Anita) gets silenced and labeled as hater for no proper reason. And those people are also harassed on the net and get threats but you never see that in the media, I do not get why, problems can not be solved without honest look on both sides of any argument.
Yup. As I've said before, I've considered leaving because this place generally seems to accept utterly reprehensible behavior. I don't understand why aggressive sexism (and racism too, though that's not this thread) is tolerated on Y Combinator's doorstep. I told dang when I spoke to him about this that I think not eighty-sixing racists and sexists will self-select out the people who aren't, and that's a real bad look for YC.

I've flagged more posts in this thread than I have at any point on HN, by a lot. It's kind of amazing.
I have owned dozens of Macs (personal and work), from the clamshell iBook, TiBook, White iBooks, to the latest MacBooks and a few iMacs too. I'm very familiar with the platform ;-)

Most of the time they are above the average PC/Laptop, I do give you that, but recent models have reduced functionality (non replaceable batteries, memory, HDD, dongles for ethernet, etc) all in the name of Form over Function.
> If you have a VPS spare bandwidth, I encourage you to set up a relay, too. It is very easy to do and a great way to contribute to the Tor project.

I run three relays right now. I agree that it's pretty easy to setup, especially on Ubuntu, but the documentation could really use improvement. It makes it sound much harder to setup than it actually is.

To anyone who is thinking of running a relay, here are the basic steps:

1. Add the Tor repo to your package manager [1]

2. Install Tor

3. Edit the config file to set a name, your contact info, bandwidth limit, and exit policy. This is all pretty well documented in the config file.

4. Start Tor (eg `sudo service tor start`)

If you want to run an exit node you should read the Tor docs about the topic and decide which ports to open.[2][3]

1: https://www.torproject.org/download/download-unix.html.en

2: https://trac.torproject.org/projects/tor/wiki//doc/TorExitGu...

3: https://blog.torproject.org/blog/tips-running-exit-node-mini...
I recall choosing Lux over Twilight based on features and reviews, but that was a couple years ago. Let me knowwwhich you prefer!
Looks like they're using it for the initial profile switcher on desktop, I wonder if it will be making it's way over to the main list soon

Pic: http://i.imgur.com/cj9tD1p.png
Jean-Luc Pickard is our last hope...
Do you know of a great resource for actually doing that self hosted email, based on your experience?
I had something similar, 2 days, took me 12 hours of thinking/programming/etc.. time. Didn't get the job, didn't get paid for it!
To the extent that the collateral value of the purchased item impacts the lender's overall risk, all lenders have an incentive to drive down the purchase price to reduce risk (since this reduces the difference between the loan amount and the collateral value).

The value of that risk reduction is relatively insignificant to the lender, but some offer services like that (car buying services) to help attract desirable borrowers.
> Which just means content owners will continue to use proprietary plugins or push unstandardized extensions.

Which will provide a worse experience, making it easier for competing content owners to provide a better experience.
GitHub Security Bug Bounty program turns one
Thanks. I'll check it out. Invariably I go through these cycles where I'm tempted by $5-10 subscriptions and the stuff just piles up unread especially when I travel.
This guy's video titled "Chris Kyle was a pussy" is not censored on YouTube.

Maybe it got flagged off temporarily by his adversaries, but it's fully available now.

https://www.youtube.com/watch?v=0Iypq11_n2I
No, once you open it that way (on an admin account) it's supposed to allow you to open it normally from then on. I beleive you if you say it has bugged on you though.
I agree that is is the standard way of doing things. I was just curious why the trend moved towards this approach. Not a long time ago Concurrency based on a lot of threads had an upswing.

http://www.mailinator.com/tymaPaulMultithreaded.pdf
I traded the perfect job, for no salary. All to solve knowledge discovery
I too posted Courbet's painting to Google+ a couple of years ago and it was removed. I contacted Google on the subject but never received an answer.
Primer I wrote a while back: https://www.zerotier.com/blog/?p=226

Skype has abandoned P2P, though I'm not sure why. One possibility is that MS now has middle boxes deployed at so many interchange and peering points that there's no benefit in maintaining the added complexity. Another is that it was to comply with surveillance/tapping requirements.
Yes this is my recollection as well, on an A/V cart. I was supposed to be at recess, but my teacher said I could stay in the classroom to watch it. It was me a couple of other kids. I remember saying "huh, it blew up" and the other kids got very mad at me saying it didn't, and I was very very sad to be correct. We then just went back out to recess.
(Ionic creator here). One thing people don't always realize is that many apps are already hybrid. They have a web view and display dynamic content in that web view. I think that meets most definitions of "hybrid."

When it comes to the question of what hybrid apps can or cannot do, Image processing is definitely something they can do. If the JS layer isn't fast or featureful enough for image processing, you can always drop down to native through Cordova plugins or something like ngCordova (http://ngcordova.com/). We always advocate full utilization of the platform, just like we would if you were building a node-webkit app.

I do agree that Hybrid is growing, and more people are finding it a good solution for what they need. That will only continue, and we hope to be helping them for years to come.
Kids and dogs: If you’re having a baby, do not get a puppy
New Rules in China Upset Western Tech Companies
"But I also had $17 in my bank account, $65,000 in debt to my name, and $800 in rent due in 24 days."

..and who's fault is that? Achieving $65,000 in debt for a degree that likely has dubious market value isn't necessarily among the smartest things one could do. With an internship at a public radio station, I'd be willing to be her degree is in something like "Mass Communication" or some other nebulous field. If she incurred $65K to get an engineering degree from Stanford, that's one thing, but allowing that much debt, then having the audacity to complain about it -- that's kind of silly. She could just as easily got a mass communication degree from a state school for far less and would still be just as unemployed as she is now, but with far less debt. Or, she could do what people often do when they want to buy something -- she could have worked while in school.

She claims "good" jobs are one that requires a degree. That's nonsense. I know welders and plumbers that make $140K+ per year. There's always opportunity for those willing to look beyond their "privilege" and actually get one's hands dirty.
"One reason is that employers can easily be flooded with hundreds, or sometimes thousands, of applications"

We're told our immigration policy has caused a drought in programmers, yet employers are flooded with applications from the nonexistent workforce.
Emacs microhabit: Switching windows with windmove, ace-window, and ace-jump
> matching up programmers with side projects, with sysadmins that are looking for side projects to help manage.

That sounds like a fantastic idea. Even in my case, I do "OK" as a sysadmin most of the time, but would love some occasional guidance or assistance.
I've used several of these boards but I'm still not sure what "Internet of Things" actually means beyond marketing hype, unless it is just a new name for what we used to call "embedded computing".