shaggy

Please if you're going to create stuff like this provide some context and answer questions like "What does this actually mean?". Without those things, this is just another scary looking title and graph that will make people more panicky than they already are. Given the ramp up in testing seen in my state, the large jump up to the cases in the graph isn't surprising. We know that the US has a far higher population than Italy and that testing rates in the US have been very low. Large spikes in confirmed cases are obviously going to happen as the testing ramps up. That's when we can start drawing conclusions and make better decisions. When we have a more clear picture of how widespread this is and what that actually means. What's the R0 and what's the mortality rate? On the other hand, if we accept that there are far more infected people right now than we know, the logical conclusion is that the mortality rate is low, otherwise there'd be dead people everywhere.

Yeah, those are the only two peering points in the area. There are tons of other data centers in the area, but these are also exchanges. Fun fact, Markley Group actually owns that whole building and Macy's is a tenant of theirs. I've had a few super weird and interesting conversations with drunk/high people when badging into the building late at night when I had gear in there.

I wish everyone would stop calling it an analog audio port. Yes it's a 1/8th port, but they haven't been purely analog for quite some time.

Yes, Rio sees many visitors regularly. What Rio does not see is an influx of visitors from nearly every country on earth. It's that spread that is the problem. The financial impact on hosting the games is already negative for host cities. That's no longer debatable without ignoring fact. Your argument that all the experts studying the Zika epidemic and drawing the ever more cemented conclusion that this is a very serious problem are wrong is what is hogwash.

It's pretty well known and well documented at this point that the host cities for olympic games see no financial benefit at all, and in fact they lose money. Most recently, look at the Sochi games, which cost $50+bn. There is a 0% chance that the games brought in that much money. The entities making money are the IOC and the broadcast companies, NBC being the primary. It would be sad if the games were cancelled, but at the risk of a global pandemic it's hard to see how people can argue in favor anymore.

It's important to point out that all the Whisper Systems code is open source (https://github.com/whispersystems/). So if you have concerns, go read their code. Some of the best minds in security have, and they've come away with good things to say. There's a desktop version of Signal coming, which I'd personally be inclined to use over WhatsApp, but this is still a fantastic move.

Thanks for these. Has anyone seen a link from/for CentOS yes?

I don't see an email address in your HN profile, but I'd be interested in chatting.

Even the digital part. There is a thing called the Sails Library Network (http://www.sailsinc.org) that offers full digital catalogs for libraries. They have mobile apps and it works with Kindles or Kindle apps. It's also not back catalog stuff only as is the case with Oyster. Libraries have been the "Netflix for Books" for centuries before there was a "Netflix". Maybe people should use them more, they are wonderful things and you're already paying for them to exist and serve you.

When a PaaS/Cloud provider says private networking, they mean RFC1918 address space. It's not publicly routed IP space which is private. So saying they offer private networking is accurate against that long standard definition. The technology and effort involved in providing the equivalent of AWS' VPC is huge and most smaller providers don't have the scale, man power, or resources to do it. It's a non-trivial solution to deploy.

Not understanding the platforms you choose to use is not an excuse to write something like this article. It's also not an excuse to not understand how to manage the platform(s) you run your services on.

He was not a performer. He was a songwriter and composer mostly for Broadway and he was a great one. The draw would be something like "an evening with Cole Porter and his music" or "Cole Porter and his Broadway orchestra play his hits". You can imagine the marketing around hearing the music live, standing on its own. That kind of stuff makes money today, and lots of it.

Above CD quality has been tried many times. Currently, the service with the most to offer in terms of catalog is https://www.hdtracks.com/faq. You do have to re-buy albums you might already own, but the choices are ever expanding and include a lot of great stuff.

The point in the article about the new format helping lesser known artists really shows just how little U2 and Bono actually get about the current state of the music industry. Artists are getting completely screwed by labels and must tour by necessity to make money. In fact, with the huge growth in the festival industry, small acts (and large acts of old) can make significant chunks of money they otherwise wouldn't. To Bono's point, Cole Porter could tour and make lots of money doing it today. He may not have wanted to, but it'd be possible. A new digital format isn't going to change that.

The linked article is about package management, not configuration management. Whoever set the title of this post didn't understand the point of the article. From the comments, people seem to confuse and conflate configuration management, job automation and package management. To run a successful infrastructure at any scale you need all three.

Yes it is and has been for a long time. What this article really boils down to is a terribly poor understanding of how DNS works and why certain records are use for certain serivces. A CNAME doesn't "redirect" anything at any level outside of a resolver. In the case of www.example.com and example.com you use a web server to achieve the desired result. Even then it's not a redirect, it's a replacement the resolver determines the record is a CNAME, inserts the value the CNAME points to, then resolves the A record. In the case of the MX record for a domain a CNAME is a problem because in the absence of a MX record, the A RR record is used, in this case a CNAME. Would protocol specific SRV records be better? Yes, but since that change isn't happening quickly do what's right now and change in the future.

Somewhere along the line, this concept of a founder/CEO taking a tiny salary got worked into the way start-ups work. Should a founder be paying themselves a huge salary and living it up based on that? No. Should they be able to pay themselves a livable wage that doesn't mean they are spending their nest egg or making drastic cuts in how they live? Yes.

This article is lacking in one key area, which makes the argument valid or not. How much money these startups are making. With out that data, this is just another self fulfilling prophecy that the VCs and their followers can point to and say, see?

I'd be lumped into the older founder class and having a family to support I could not take a giant pay cut if I started a business. I save and manage my money carefully but I would pay myself the same salary I make now so that I could at least have the same level of money comfort I have now. Doing anything differently is simply stupid and a VC that is angry about it isn't someone you should do business with. It's a way they keep their power when at the end of the day the people with the idea that makes all the money should have the power. You want 10 or 20% of my company? Great, I'm going to pay myself what I'm worth. The minute people stop letting themselves be bullied by VCs is exactly when this kind of stupidity stops happening.

Is there some mistake in your NoScript item? Installing the plug-in and then using "allow scripts globally" is the equivalent of never installing the plug-in. It provides almost no value at all when run that way.

PagerDuty is a fantastic service. The flexibility in scheduling on-call rotations (they added a custom schedule for my team at my last company), the support for integrating with lots of different monitoring platforms and the generally fantastic support make it well worth the monthly cost.

Very few protocols fully or properly implement the entire 7 layer OSI stack. Most times you see layers 3-5 lumped together. The way that they are looking at it is that the application (a browser, something else?) is being used to generate HTTP requests. So while it's technical accurate to say that because a browser or other application is acting as an HTTP client, the attack itself it not at layer 7 because they are receiving the attachs on layers 3 and 4 on their side.

Where the article says "But layer 7 attacks, where the attacker actually connects to our hardware using TCP and makes apparently valid HTTP requests are another matter"

Those would be layers 3 and 4.

Mis-communication and outright wrong communication about layer 7 in networking has been rampant for years.

Is working remotely an option for this position?

Okay, so does that mean that the various bugs that have been circulating can still hit as it hasn't hit midnight in EDT yet or can I exhale?

Pardon the ignorance if this is a stupid question. I've been looking at some of my hosts and have noticed a message "Clock: inserting leap second 23:59:60 UTC" in dmesg output but each of the hosts is in the EDT timezone so the I was under the impression that the leap second hadn't been applied yet. So what does that mean? That the systems have applied the leap second successfully or have only received it from their NTP servers?

I haven't implemented logstash or graylog2 (yet) but I've implemented Splunk multiple times, at multiple companies since back in 2006 and it's a simply fantastic piece of software. Unless the pricing model has changed significantly since the last time I bought it, I don't see it as that expensive. The licensing model is based on daily volume indexed but the licenses are perpetual. It has all the features you'd expect built-in and the reporting/searching/alerting and other integrations are the best that I've seen. I am curious to see what can be accomplished with open source software though.

There is a fundamental flaw in the argument that v1again is making/supporting. The problem with this argument and the math that's always used to support it, is that it comes from the view point of simply making money. If it were as simple as (number_of_hours_worked * number_of_people = awesome_product) then a company would always be able to throw money at a problem and fix it.

In the real world this is so obviously not the case that it's laughable that anyone makes the argument in the first place. If you're starting a company and you knew that in order to succeed all you had to do was work more hours than the other guy, of course you'd do it.

If your goals in business are to make money, then working crazy hours and ignoring everything else in your life probably makes sense. If you want to build a long lasting, sustainable business full of happy, productive employees who make great stuff then you probably want to make sure the work life balance is as good as it can be.

A vulnerability/exploit like this was only a matter of time. With cloud computing getting ever more popular I think it's only a matter of time before something like this causes a complete and total outage for EC2 or Rackspace or $Cloud_Provider. Security in the virtualization space should be focused on stuff like this because everything else can be addressed with traditional methods.

It's very exciting to see usage of DDG increasing and the service getting more and more recognition. I've been using DDG for almost two years now and love the service. The privacy is what drew me in, but the goodies are what made me a user for life. It's the default for my browser and I use the iPhone and iPad apps regularly. Keep up the good work DDG! I'd be happy to lend my sysadmin skills to help :)

I've found that one thing that was very helpful for me was to keep history per machine. For me having the history make sense in the context of the system function is very valuable and I know that I won't get other commands that I don't need or want to see in my history.

What I do it HISTFILE=$HOME/.history/`hostname`.history so then I have a nice record of what I've done on all the machines I log into. This is particularly nice when you have a central home directory.

I switched to using DDG exclusively when I got fed up with the poor privacy practices Google was continually enacting. I haven't missed google at all since I switched. DDG provides great results, has lots of cool goodies and best of all doesn't track you at all.

I really wish everyone would stop talking about mobile access like it's this entirely new thing that's never been done before. Using facebook from a mobile device is absolutely, 100%, without room for debate using "the web". Sure it's a mobile device, but it's still HTTP and it's still a mobile browser based app. Just because it's not a "desktop" version of a browser does not mean the access isn't "web".

It's not ridiculous but I think it wasn't very well presented. The argument isn't that everyone should have a PhD. That wasn't even mentioned. Access to higher education was mentioned but that means college in this context (most likely even an associates degree).

The argument being made in the article isn't about making everyone above average it's about shifting what average is. Times have changed but sadly education and job training for most people has not. The person who used to stand on an assembly line and pop rivets all day is no longer a middle class wage earner. Why? Because popping rivets "at scale" isn't a problem anyone even thinks about anymore. But for people who don't have any other marketable skills or education past high school this is a big problem.

All countries that have been around for a long enough period of time go through this, the US is young enough that we're entering the phase now and we do have opportunity to try to make things as good as we can for as many people as we can. This is not to say that we'll ever stop unemployment because we won't. Our focus needs to be on education and job training in a big way. If the digital/IT age is driving the global economy and a factory can comfortably employs thousands of people the US should be building those kinds of factories. Eventually the places the US outsources to will become too expensive and jobs (some of them) will move back to the US. This is already happening. The middle classes that have been and are being built overseas will by definition grow past the point where paying them to install glass screens in cases will be good enough for them.

This is democracy in action. If the bills don't get passed now, we must remain vigilant to them being buried in later legislation.