vonklaus

I look at Tesla as the exception to a lot of rules. I agree with you here-- launching hardware which not only is a value add to users but also Tesla data teams, is so far ahead that this seemed like a dumb comment.

That said, if some company had manufactured bluetooth hardware last year way in advance of the release and full spec, I would argue that it was a pretty bad move. Clearly this is not a perfect analogy, but it should illustrate that this can seem counter intuitive. Building in the cost of beta tech that doesnt fully work and is not legal is a huge gamble. I just wouldn't personally bet against tesla and for the reasons i outlined; it is likely the right call

It is a semi-noob illusion that satire and irony-- which underscore & catalyse discussion about relevant and important issues; should be reserved for Reddit. Often, satire is used when it may be difficult to confront an issue directly/the issue itself (or discussion) could be unpopular.

Not sure what the disagreement is, seems logical. The attack knocked out service and presumably attackers recorded the failure threshold and mitigation attempt. Then recalibrated again to confirm/get more data and pushed another high vol attack.

Curious as well. I didnt see any in the status here nor the original.

> why wouldn’t the first response be action on the part of ISP and backbone providers?

Schneier points out that these have the shape of probing attacks and are executed across multifaceted services at the micro & macro level. I feel like something needs to be done now. There is, I am sure, a fix but with something like Dyn and other major cloud management, infrastructure, ISP and backbone companies are getting seriously worked over. There is a saturation point.

The attackers have capabilities to hit so many different pieces of exposed surface area, that for small networks/apps/services/companies they are unable to be repelled. In between small companies and Google tier service, some can repel attacks, but they still cede some uptime and performance.

Cloudflare has released some insane reports and when you have motivated powerful attackers striking key pieces of core internet infrastructure, to some extent, you have to consider the entire system is under hostile attack.

> but at a point where DDoS has a significant effect on the market share of a company like Google

I am certainly a layman here, but none of the targets made a choice today to be vulnerable. I am sure the entire chain is rapidly reinvesting and hardening the infrastructure, but this should have probably been done years ago. In between when the companies are pouring resources out (I suspect they are now) and when they gain enough of an understanding to withstand these attacks, there will be downtime. I think google will get hit soon. It was reported that a google core outage of ~15 minutes deadzoned about 40% of America's internet traffic. Even knocking google out for ~1-2 hours would show 2008 what too big to fail means. If google DNS, Chrome, google search, gmail, google apps, hosting, dns, ISP all activities ceased for 2 hours things would get bad.

I honestly think non-technical Joe the Plumber hypothetical U.S. citizen would be against this given that Time Warner is villified & consistently ranked one of the worst companies in customer service annually. However, neither I (nor Joe) have the ear of any trade comission reviewing this, nor any power to do anything about it.

While I don't want to put forth a defeatist attitude, clearly a much more robust strategy than "write your senator/rep" must be devised. Ddos attacks at an unprecedented scale are occurring and probing all internet infrastructure. Not only is this a single point of fail, but is anti competitive, dangerous and bad for essentially everyone in the country. I think something like Calyx networks has a good small strategy, but literally short of raising a SPAC and buying a controlling interest, it seems hard to thwart.

I expect google will experience outages >15 minutes for core services in the comung months. This is based on significant uptick in ddos sophistication, this has been referenced by Schneier-- although not in ref to Goog.

If changes like this announcement convince people to move away; I am all for it. This just proves not only their power, but the danger of a single point of failure.

I am not trying to start a flame war, just curious why the 2 jokes about Russian hackers being the origin of breaches are being heavily downvoted. I would assume people think they aren't clever or funny, but hopefully not because they disagree that Russia seems to be the catch-all scapegoat right now.

Really? Guy got a standard spearfishing email and we assume it was the intelligence dept of a powerful nation state.

Edit: ...and they used public bitly links. That is standard Russian Hacker tradecraft right there.

Don't understand the downvotes. Thought this was widely acknowledged.

I think the main issue is that google doesn't accept certain senders anymore. As a generic thread about running a mailserver/mail service pops up here often.

That means users are shoveled into about one of 4 "acceptable" providers which have control of the entire market. They demand, full name and usually gender, mobile, alternative email and more.

So you get pushed into their information pipeline to stop "spam".

I would consider hiring a designer to redo your website and launch via kickstarter. You will likely be able to get significant traction there and since you have a working device and have put in the time already, it is quite likely backers will back with confidence. Ideally, you would've wanted to get the demand signal from the market first, but it could be a worthwhile product.

based on that statement and others my read is basically:

We know a lot of important people and they gave us information you don't have, to which we have made business decisions that affect you that we didn't communicate. Did we tell you? no. Now that you know, are we going to elaborate? nope. trust us, our people on the inside will be proven correct soon enough, so you can thank us later.

FINALLY. I have been waiting for this. Once they lock down all of the hardware ports they should take a hard look at the keyboard. Do users even need to be able to enter in text input or control their own computers? The evolution of the mac seems to confirm the persistent rumor apple is working on a tv. If they strip out virtually any ability for a user to interact with the device, it becomes a one-way broadcast medium, e.g. a TV. I know I can't wait, I just picked up $300.00 headphones that ensure I can listen to the apple certified audio for at least two hours at a time. what a time to be alive.

<sarcasm>

I like linux, maybe not as hardcore as many users here, but your point is really lost on me. I run a modified version of mathias dotfiles so provisioning is usually simply ./bootstrap.sh. I like the os x desktop better than linux, and while I can see the value of running linux for your development machine, the extra effort of having to download GNU utilitites a single time with a switch/flag really isn't a big enough reason to jump shit on the entire ecosystem to be honest.

right, I was driving home the point that, even though github didn't build git, they didn't simply copy it.

> git never brought social interaction (issues, pull requests) into coding. GitHub created a lot of innovation in their product.

Many people feel like they stopped innovating here, and thus they choose gitlabs. As a startup, it has to answer the question you asked, and it has to work extremely hard to win developers, add features, and draw distinctions between github and gitlab.

The steve jobs quote doesn't make sense. In your example, if numerous people switched to android right after they offered the features ignored by apple, it would be pretty obvious they were important.

I don't dislike github. I actively like gitlab. You can choose whatever one you want. I personally am a gitlab user for the reasons above. These are subjective, but many seem to embrace them.

I use gitlab because it is free and embodies ethics inline with my own. There has been a conversation that has appeared to be largely one-sided-- developers asking for more features, control, consideration ect; and it github largely seemed to be ignoring these concerns. A large group of popular open source contributors wrote an open letter to github and even then, there was not much change until gitlab responded.

Github is a much larger organization, and it does a lot of good. However, I like gitlab, they are engaged in the community, really love their users (thanks for the tshirts btw!) and they do things like this-- apologise for their mistakes and listen to their users.

So yes, even though they both just copied open source software created by linus torvalds, the great innovation is building a community around that infrastructure, to which I think gitlab is doing a better job at present.

> extraordinary claims require extraordinary evidence.

This doesn't seem extraordinary. I commented the OP should provide more, and I was skeptical, but it doesn't seem extraordinary. In fact, given OPs post and the parent(and numerous others) anecdotes; it seems quite ordinary and logical.

Well, to some extent the OP is an edge case-- not every "little guy" gets his grievance any visibilty. However, twitter, reddit, HN, 4chan, and a blogs of all types make it possible to appeal to the public.

20 years ago the same thing occurred, but with less recourse. A company can have its image litigated in public and that can be good

Unless you work at FB or have other info, I would definitely doubt that. Assuming this claim is legit, FB has not done a lot to instill any degree of confidence(for me) that they are a user-centric organization willing to compromise & work with customers.

FB, much like apple, is a closed off "our way or the highway" type company. It is utterly massive which not only gives it huge power, but makes it difficult to even find a human to rectify an issue. So I hope you are correct...but i doubt it.

This happened to someone using stripe; a similar case where the account was suspended and the user was upset about the inability to capture revenue.

I trust stripe a lot more than FB, that said, PC showed up in the thread as well as numerous suppory staff. The claim was similar, big money rev processing suspended but limited details. It turned out that the user was violating the terms and had been notified well in advance. The user stopped responding to other posters asking for details and it was immeadiately evident that it was a pretty shady & onesided story.

Now, FB is quite restrictive-- but until the user substantiates the nature of their application & facebook's violations & correspondence; I can't really cry foul.

The user said they didn't want to mention the app because it would be "promoting it". Idk, it does feel a bit off. Take Dash/kapeli, they blamed apple for kicking them out of the app store, and while they are well known, they stood behind their name and identity which is all the reputation one has on the internet.

So, i hope this is rectified but mire evidemce is surely needed

Hmmm. It does load now. I was previously getting the "blog article you are looking for does not exist" screen. Thanks.

Just came from the Signal disappearing messages thread. This blog post too seems to have disappeared...

I have not had this happen except if you pick project settings instead of user settings, i noticed it generated some files.

Outside of that, i havent had this happen. However, if it is simply annoying in your editor you can put them in .gitignore and either tell vscode to not list anything in the .gitignored list, or explicitly ignore files and folders by default.

I agree, and like a child comment here, used to switch back and forth between other editors(sublime, atom) and Microsofts push to win developers is working.

Huge swathes of code released, azure implementing innovative things around blockchain-- not to mention the linux offerings & other oss plugins. Even porting out powershell as well as bash integration, chakra ect.

To touch on the parebt comment, the vscode editor is one of the MS products i use most often and am most familiar with. The release cadence; compared to the very similar Atom editor, is much different in philosophy.

Atom was first(i think it even came out before vscode) to have all of the features desired in aneditor. They came at the high price of horrible petformance and a wildly unstable product.

Vscode team knew everyone wanted tabs, but they worked releasing tons of things in parrallel and rolled tabs out when they worked properly.

I wouldnt say MS has won my trust, but this product has. I trust the editor will behave as expected and continue to offer awesome plugins and a greT ecperience. I can't afford to have my editor lag snd crash, as well as overwrite or delete data.

Vscode is pretty great and has virtually everything I need with only very minor things.

I agree. However, practically speaking I was just pointing out that if cost & time are extremely important and you are bootstrapping a $10 webapp, $2 for 2mins may be the right choice for the OP and people like him, with 0-500 users.

I do agree though. If the answer to the question, "if this data disappeared, would I be more than slightly miffed?" Is not, NO! Then dumping the data offsite makes sense.

The most inportant thing (which I, and many other make the mistake of) is not only backing it up-- but testing restore time.

If you have your entire database on AWS long-term tape storage, it may not even serve utility. If you can't restore a backup in the timeframe nec, then it is essentially the same as having no backup at all

Thanks, that clears it up. I have never used xcode but if there is a straight forward way for me (and other users) to load it up, that would be cool. If there is no way to add a legacy client to the app store, it might be good for adoption to have a link to docs explaining the process (if it is easy enough) to put it on older phones.

Responding to xxkylexx (child comment)

Only users who specifically enable "show dead" in their profile can see your. They are read only and can not be replied to. It is quite likely most users can not see them, as show dead is opt-in only.

If you as a user; or this post have been flagged as spam/other (likely) you should reach out to HN via their contact info which I believe is listed in the guidelines section.

You shouldn't litigate this in the thread (nor would anyone see it) but, Dang is often quick to respond and both quite helpful and reasonable to legitimate inquiries.

---

Bitwarden looks to be quite interesting. The client on ios does not support the 5c, which is a shame since I have one. Curious if there is a hardware limitation as the service appears cloud-based and it would be nice if a software solution existed for users of slightly older phones.

Good luck!

Is 20% of $10 a $1.00?That said, if you have a small application, I would pay DO to pack it up. They have global servers & imaging/snapshots. Your app would prob be good if you can get away with that kind of hosting.

I do believe you can take images and snapshots and download them, so using the api, a user could prob rig up a script to make it refundant if it was mission critical

I believe this is a symptom or result. I think founders underestimate the complexity of services or over estimate value.

Finding a someone a place to stay in jakarta, indonesia is much different than a place to stay in Boston, London, ect. The person, service, lication and time are all variables. This is complex, hard and valuable. The same goes for uber/lyft. There is expediency and significant variables to account for as each pickup and drop off is dynamic so while it appears to be a commodity; it isnt.

To your point, some ideas sound great and get funding but are not complex, urgent nor particularly valuable. On demand "lunch" competes with either direct ordering, a local option or brown bagging it. Eat 24 provides a directory & information search engine not physical delivery(in most cases). So while it seems like they violate what I said, they dont have huge infa costs. Other "similar" providers will go get you the food and deliver it. A user is not willing to pay a huge premium for that in most cases, and the volume must be significant amd clustered. Eat24 takes a small percentage for a software solution, the other type needs a large percentage for a phys solution.

So they comvince vcs to back them until they get "big" which they wont and achieve economies of scale. However, they cant, because expenses scale pretty in line in those models