xraystyle

That's interesting. Suppose it doesn't do you any good if you're looking for subdomains that don't have certs though.

So is it a thing in security distros? Is there a github for it?

What's this 'subs' command being run to enumerate subdomains?

That's the thing though, is that it's not hard to make a good antenna for a single frequency. We already know exactly how to do that. And when we're talking transmission and reception of radio, tiny incremental gains that might be eked out through some wacky design generally don't move the needle very much.

I can talk to the astronauts on the ISS on 2 meters with an antenna I can make out of a PVC pipe and a metal measuring tape using a 5-watt transmitter. Improving that design by 2% doesn't really mean anything useful in this context.

It would usually be vastly cheaper and easier to just increase the transmit power. Or sometimes it's the available power that's the limiting factor, and a 2% increase to the antenna isn't going to matter.

Point is, trying to chase tiny gains in one dimension or another over a thoroughly tested and well-understood antenna design is kind of a waste of time outside of an academic, beard-scratching context.

This comment really sums it up well. Literally everything with antenna design is a trade-off. You can design an antenna to radiate very well at a given wavelength. The better it is at doing this, the worse it tends to be at every other wavelength. You can make an antenna that radiates to some degree across a wide array of wavelengths, but it's not actually going to work very well across any of them.

Same thing with radiation patterns. You can make a directional antenna that has a huge amount of gain in one direction. The trade-off is that it's deaf and dumb in every other direction. (See a Yagi-Uda design, for instance.)

Physics is immutable and when it comes to antenna design there really is no such thing as free lunch. Other than coming up with some wacky shapes I don't really think AI is going to be able to create any type of "magic" antenna that's somehow a perfect isotropic radiator with a low SWR across some huge range of wavelengths.

Glad I'm not the only one who was bothered by this. No subnet masks in the diagram, and I'm supposed to assume that 10.0.0.1 and 10.0.0.2 are not in the same broadcast domain. So my default gateway is what, 10.0.0.0, and that router has a route to 10.0.0.2/? with a next-hop of 10.1.0.5?

Wackiest network I've seen in a while, and I've seen some real winners.

I don't get it either. Systemd units are so much more powerful and flexible than init scripts. Writing those bash scripts for everything was a complete pain in the ass.

You may disagree with the architecture or design decisions made with systemd, but I don't see how it's possible to argue that SysVinit was in any way actually "better".

It's not a TMBG song, they just covered it. It was originally released by a Canadian vocal quartet called The Four Lads in 1953.

I keep seeing replies like this. Insurance is not the point. Come to Venice Beach in Los Angeles and you'll quickly understand that you'll be calling the insurance company once every couple days to replace your bike if you leave it locked up outside for more than a few minutes at a time.

Around here bike theft is a sport. If they can't get the entire bike, they'll strip every single part off the frame in under 5 minutes.

On top of that, I have quite the emotional attachment to my bike. It means something to me. A cash payout doesn't replace what was lost if it were to be stolen.

Bike insurance is a nice consolation prize if you get ripped off, but it's absolutely in no way a viable solution to the problem of widespread, organized bike theft.

This is absolutely a massive issue with it. Apple did this with retail employees back in the day and it was terrible. Employee reviews were based on it, managers had to call customers and apologize if the customer didn't leave a 9 or 10 rating, it was absolutely awful.

One of the biggest problems with it is that an average person, unaware of what NPS is, doesn't understand that giving any rating less than a 9 is essentially giving a rating of zero.

If I have what I would consider to be an average interaction with a business, e.g. I just buy something and leave, no need for support, no problems to deal with, etc., that seems average to me. Based on a non-NPS understanding of a 0-10 scale, I'd say that's what, a 7? But the business now considers this as a failure on the part of the person that helped me at that store.

This is why sales people and phone reps are constantly now asking you to give them a 10/10 rating if you receive a survey, because even if they literally just took your money and handed you change, their jobs depend on you acting as if you had a heart attack and they saved your life by performing CPR or something.

It's honestly a terrible system that produces no meaningful feedback for the company and causes employees to do whatever they can to game the numbers. All you're measuring with NPS is how good your employees are at juking the stats, nothing more.

> Show HN: Ensure all car crash articles are biased against the driver and vehicles generally using NLP

Seems like a better title for this.

In the analysis of the first article, under the "recommendations" about counterfactuals, it's literally telling you to remove relevant context about the incident, to ensure the readers can't possibly come to the "wrong" conclusion about who's responsible.

Distrust of news media is at an all-time high[1] and if people can't see how this sort of thing contributes, I really don't know what to say at this point.

1. https://news.gallup.com/poll/321116/americans-remain-distrus...

Agreed, this would be ideal. Most people don't understand that literally every access point on a given channel is part of the same broadcast domain even if they're totally separate networks. Every AP that yours can see on the same channel slows down the network for all of them, because wifi is half-duplex. Everyone needs to shut up for a second while one host on the channel transmits.

Your static site would still probably be better on AWS. Whack it into an S3 bucket, put cloudfront in front of it, and you have a globally scalable, CDN-enabled static site with at least five 9's of reliability and it costs you peanuts.

Headline: "Is there a global epidemic???????"

Article: "No."

This is where I closed the tab. GTFO with your clickbait, Guardian.

The problem here is that Evan isn't Steve Jobs so much as he's just cargo-culting Steve Jobs without really understanding why Jobs was successful. Steve was able to see untapped markets, holes that could be filled by new products, completely different ways of doing things.

Most of Apple's biggest successes were had by coming up with something completely new and novel, not by ignoring user feedback when iterating on an existing product.

> That is not necessary, but once you play enough music, you learn the theory in practice. Or have enough data in your head to make that realization.

No, you really don't. You literally don't even need to know a single note name to be able to play a song from memory. You just need to know which keys to push or strings to pluck and frets to press in what order.

>I challenge you to play 100 pop songs on an instrument - any pop songs, any instrument - and not at least know things like major/minor chords, basic chord progressions (like the endemic I - V - vi - IV, aka "four chords").

Just because you're playing these progressions doesn't mean you have the slightest fucking idea what they are, or why they're numbered that way.

When I was about 6 years old I started learning piano. My parents took me to a teacher who used the Suzuki method. For those unfamiliar, it's a method of musical training that focuses solely on learning by ear with no discussion of theory or sheet music. I did this for years, and I absolutely hated playing the piano for reasons that had nothing to do with the piano itself.

Early in high school I picked up the electric bass, and did what you mentioned above, i.e. I learned a whole pile of pop and rock songs. I also played a bit of guitar around and between all this as well.

This constituted years of experience playing music. And yet, I did not suddenly and independently discover and understand the circle of 5ths. I couldn't tell you why a 7th chord was called a 7th chord. I didn't wake up with an intuitive understanding of time signatures.

I wasn't exposed to any of this stuff until I took a music theory class in college. It was at that point that the 'why' of what I had been doing to make noise on these instruments started to make sense.

And once I did start learning these things, there was still no intuitive sense of where to put my hands on the instrument to play the notes I wanted. I had to fumble around with it to figure out where the notes were.

And now, having spent years after high school playing in live bands in front of paying audiences, I still don't think I'm anywhere near what someone might call a 'great' musician, and my understanding of music theory is really far from complete. I still play all the time and can't sight-read, for example. I have to sit and puzzle out a piece of sheet music.

Additionally, I've read about this particular guy before in greater depth than is discussed in the linked article. Something unusual really did happen in his brain. He somehow gained knowledge and ability far beyond what we would consider normal.

I don't think that's really it at all. Most of us have to sit in classrooms for months or read and study to understand the intricacies of music theory. None of that is necessary to learning a few pop songs on a guitar or piano.

You can learn to play songs purely through muscle memory as long as you have a basic sense of rhythm. That doesn't mean you understand anything about musical composition, scales, chords, modes or anything else that underlies what you're playing.

The epiphany described in this case seems like it's suddenly and intuitively understanding all of that, in addition to the layout of the piano (why it takes the form that it does) along with the ability to actually play the thing competently.

I've been playing music for years. I understand a good chunk of theory. I wouldn't consider myself an expert by any stretch, but I understand the layout of the piano. I can't play the damn thing. Waking up one morning and having that ability would certainly be surprising.

When someone accidentally announces an incorrect prefix, they're pretty up-front about it, and try to correct it as soon as possible. It's not something you really see that often either, as you don't change the prefixes you announce very often. Really only when you acquire new IP space. Otherwise, the router config is largely set-and-forget as long as the peerings are up.

So if someone does fat-finger a prefix announcement, it's followed by an email to the IX mailing lists and transit providers with an apology and a quick fix.

It starts to become apparent who made an honest mistake here and there and who's acting maliciously.

Cars are a completely different thing. No one really thinks about it like this, but one of the most appealing things about a car is that it's an extension of your personal space. It's almost an additional room in your house or apartment that you can take with you.

When I get out of work and get into my car, it's like I'm sort of almost home already. Driving sucks in traffic, but I'm in my own, fairly comfortable space I've customized to my liking that I'm in complete control of. When I take any kind of transit, I'm not done with my day until I'm literally all the way back to my own apartment. Additionally, I actually quite like driving when traffic isn't bad.

I'd much rather sit in traffic in my own car than on any kind of public transit. That statement holds until the transit option cuts my commute time by better than 2 to 1. The reality is (at least here in Los Angeles) that taking public transit usually doubles the travel time vs a car. I don't see this changing.

The issue here is that the attackers were advertising more specific prefixes, and when doing route selection, routers pick routes to these over less specific prefixes that cover the same ranges.

e.g. if Amazon was announcing 205.51.192.0/21, that would cover all the /24s that were announced in the hijack. Not sure what Amazon actually announces, this is all just examples.

Say I'm trying to get to 205.51.192.12, for example. If I have two routes, one advertising 205.51.192.0/21 and another advertising 205.51.192.0/24, the router will forward the traffic to the next-hop advertising the /24, all else being equal.

So if you have the ability to advertise routes over BGP to the internet, you advertise a more specific route than what someone else is already advertising, and your peer has no filtering in place with regard to what they're accepting from you, you can potentially hijack IP space like this.

ETA: Anycast DNS generally advertises the exact same prefix to multiple peers. That way, the best path to that IP will be dependent on where your traffic is coming from, and will hopefully come in over the closest peering to you.

This guy networks.

But yes, generally the actual physical location and routing of fiber optic cables is not made public by the companies that run it for a number of reasons. If you're leasing fiber you can request maps of the circuits from the company providing it, but there's generally no way to obtain this info outside of this type of business relationship.

Additionally, when purchasing a long-distance circuit, the provider selling you the circuit may not be the company that actually ran the cable. You might have to go several layers deeper until you get to whoever actually owns the fiber. For example, connections like MPLS VLLs present as a direct layer 2 connection but can pass through numerous other network providers' core networks underneath.

This all means that keeping track of layer 1 is pretty much impossible outside of the circuits you pay for yourself.

> But here's a proposal: raise the gas tax, but refund the increase in costs on a means-tested basis. Poof, there goes the concern trolling, but the middle class is still on the hook and they really don't like it, because it might mean that they have to make different decisions about their lifestyle and location and habits

The theory is sound, but the devil is in the implementation here. Some of the largest metropolitan areas in the US (and by extension the entire world) were built around the car, not public transit. The cost to implement effective transit in such suburban sprawls is exorbitant when compared with densely packed urban areas such as NYC or Vancouver for example. There's just too much pre-existing residential area to cover effectively. I don't think it can actually be done in such an area in a way that wouldn't be exponentially less convenient than a car.

Additionally, due to the size of these cities and the number of people living in them, you're talking about completely upending the lives of quite literally tens of millions of people.

If gas is $8 a gallon, should I move closer to where my office is? What if I get a different job? In Los Angeles for instance, there's not one central business district where I can generally expect to find work. The difference between Downtown and Santa Monica in Los Angeles is over an hour during rush hour.

What about my spouse, if I have one? What if their job is in the opposite direction? Should we split the difference? What if there's no suitable housing in between the two locations? Are we going to move every time one of us changes jobs (every 3-5 years on average)? What if we have children? Do we put them in a different school every time we move? What if the schools in the area we're moving to are worse then where we are now? What about after-school activities? These are all very real issues for most lower to upper middle class Americans.

And again, you need to multiply these problems by literally tens of millions of people. It's just not feasible to price people out of their own vehicles without giving them a reasonable alternative. The demographic we're discussing here usually votes, and there's no way they'd sit still for that. I know I wouldn't, simply because Los Angeles would become unlivable overnight.

No, because social media is purpose-built to be as addictive as possible.

You could exploit it with remote desktop. If it's enabled on the client, you can just connect with root/no password.

The stated purpose of the H1-B program is to allow companies to fill vacancies with international applicants if they are unable to find US employees qualified for the roles. I've never heard any sane, rational person object to this use case.

The issue most people have is that the program seems to be rampantly abused. Companies are replacing US workers with H1-B's sourced from companies like Tata and Infosys at much lower salaries than US employees would normally command. In some cases, they're just bringing in foreign workers for the time it takes to train them, then having them work remotely and paying them even less still.

Disney even made their US employees train their replacements before laying them off: https://www.nytimes.com/2015/06/04/us/last-task-after-layoff...

Southern California Edison was another company that did the same: https://www.computerworld.com/article/2879083/it-outsourcing...

It's this type of abuse where US companies are simply looking to fire US citizens so they can pay slave wages to foreign contractors for the same work that people are up in arms about.

> The only thing that is making me want to retreat back to an iPhone is its inferior Bluetooth audio quality.

The S8 has AptX, which in my experience is really quite good. Once Android O drops for that phone you'll have AptX HD and LDAC as well. I've got a pair of Sony headphones. Running LDAC from my Pixel XL on Android O to them, sounds CD quality to me.

"Worth more" in the sense that they probably charge more for it, but I doubt it would cost Equifax as much to provide that service as it would if they actually were forced to cough up real money.

They've already built out the infrastructure necessary for the monitoring product. The marginal cost of every additional person they add to it is probably quite low.

The Ti-Books had a lot of issues. The biggest one was broken hinges. There were a lot of physical problems with those machines that didn't manifest until after about a year's worth of use.

Too bad, they were really cool at the time they were introduced.

> You're swiping to talk to someone.

The key word in your sentence above is 'someone'. Not a goddamn bot whose raison d'être is to spam you with an unsolicited political message.

How anyone can look at this and not see it as anything other than spam is beyond me.

I think it's pretty hard to argue that their decision would have been any different regardless of the ethnic makeup of the band.

Whether or not one agrees or disagrees with the political views of any of the Supreme Court justices, I think you'd be hard-pressed to argue that any of them are unintelligent. They're very clearly aware that this ruling sets a precedent that will apply to future trademarks regardless of the background of the applicant, and yet still ruled unanimously in favor of the band.