Ask HN: Why don't publishers serve ads from their domains to thwart ad-blockers? - <AUTHOR> <comment><USER2> Here's how a typical banner/adspace currently works:

1\. The ad/banner space downloads a javascript file

2\. Javascript runs, collects browser+cookie+other identifying information and sends it on up to an ad exchange

3\. The ad-exchange systems cross-reference the information it receives with other information it already has (think huge low latency k/v store) in order to try to identify you further, perform cross-device identification, save more information

4\. The ad-exchange system then rolls all this information together and fans out this package saying "here is a male aged 25-35 who likes ponies and bick shaving cream" to dozens or hundreds of partnered ad providers

5\. Each ad provider looks at their content, finds a close match, and then bids on how much they would pay in order to serve content to this person

6\. Ad-exchange receives all the bids and picks the second highest bidder (no idea why it's the second highest)

7\. Ad-exchange then sends this second highest bidder's ad URL back to the waiting javascript running in the users browser, and ad-exchange marks the winning bid so it knows who won/who has to pay at the end of the month.

8\. From 1 to here usually has an SLA of occurring in less than 170ms

9\. User's browser then loads up the response URL and the ad displays

Asking website operators to host their own thing is feasible, but perhaps not worthwhile. The big money maker in adspace is targeted advertising, and small sites will never have the infrastructure to be able to really identify anybody but perhaps their core users. Others have mentioned reverse proxies to make content appear as if it came from the target site, and that may exist, but the reality is whatever these guys do is currently being defeated pretty handily by community driven ad blocking. Perhaps we will eventually see what you're talking about though

<comment><USER3> > 6\. Ad-exchange receives all the bids and picks the second highest bidder > (no idea why it's the second highest)

It's called a Vickrey Auction. It allows bidders to bid their true value (instead of trying to outbid all of the other bidders, as is what results from a first-price auction).

[https://en.wikipedia.org/wiki/Vickrey_auction](https://en.wikipedia.org/wiki/Vickrey_auction)

</comment></comment><comment><USER4> Generally ads pay up to an order of magnitude more if there is some level of tracking and targeting available, and that's what most ad blockers target. Paying a bunch of money to show ads to who-knows-who who-knows-how-many-times isn't very valuable. Paying money to show ads to owners of Shitzus that make over $100,000/year is worth $12/click.

I'm pretty certain that as ad blockers grow there will be a lot more work- around (doing the work on the backend and serving up static HTML or a lot more native ads), but ad blockers aren't _quite_ to the level that it's worth it to make those changes.

<comment><USER5> Is there that much of a difference? Publishers should have a pretty good breakdown of their visitors demographic distribution.

<comment><USER4> It depends on the publication. If you're ESPN you have a _pretty good_ idea (which, by the way, makes the publication as a whole more valuable)

If you're Yahoo, however, it's pretty much a toss up.

</comment></comment></comment><comment><USER6> I guess one of the "benefits" of serving ads from a third party site is that you can cookie the user on the thirdparty domain, and build a profile as the user moves between participant sites. ("Re-targeting"). Serving ads from a first party domain likely loses this information since there won't be a shared cookie? Also it might complicate installation (you'd need to install some server side software that fetches ad content from the ad network, and probably some custom development to integrate it without being caught by a one-line rule in adblock?)

Also! With more and more ads running javascript based animations, you really don't want shady ad-network-provided JS running in the context of your main site. (XSS)

<comment><USER7> Can't you set a cookie then re-direct to the PNG/JPG back on your own server?

Aynway, I've seen some domains shifting some crucial images like a play button into ad containers/folders just to come around ad blocker. Easy to adjust within ad blockers though.

<comment><USER6> Not sure what you mean; if you mean to point an <img src> at a third party domain that responds with a 301 redirect together with a Set-Cookie then that won't really work because 1. you are pointing to a third party domain which the OP already suggested is blocked so the client never loads it and 2. you would need a complicated image hosting system on the first party domain for no good reason and 3. the first party domain image host won't see the cookie and can't pick an ad that matches the user's profile ("retargeting"). Did you mean something else?

</comment></comment></comment><comment><USER8> We do that but Ad-blockers block even those ads. We have our own text-based adds like Google Adsense text ads which are just <div> tags and those get filtered out as well.

<comment><USER9> I work hard to block all ads, including those. It's super helpful if you can provide an HTML class to your divs so I can more easily block them, but I will keep on working on blocking all ads by all means possible. I'm thinking of building an ad extension that doesn't show the ads but reports to js that the ad is still there, so that websites think that ad is there. It might also help for some cases to download the ad contents but not display them.

I do not think this is any more immoral than you trying to make my computer display things I do not want. If you want my money, just ask for it. Don't tell me via ads to give my money to somone else. Google Contributor is a promising experiment. Bitcoin micropayments are also convenient.

<comment><USER10> Stop browsing ad supported content then. It's a simple solution that works for everyone involved. Everyone says "i'd happily pay" but few put their money where their mouth is.

For the HN downvoters why is choosing not to consume the ad supported content so bad?

<comment><USER11> That's like saying "stop downloading F2P games" or "don't support the RIAA/MPAA". There are really just so few sites that aren't ad supported.

"It's a simple solution that works for everyone involved."

It's literally none of those things. It's not simple, it's not a solution, and it doesn't work for anyone involved.

<comment><USER10> Leaching content is not much different than the early days of MP3s. So I'm hopeful we'll find a new business model that works without me having to pay for every site on the web I want to browse. I can't remember the last time I pirated an album. The ease of streaming services has made it so convenient that I don't want to manage local files.

Still I don't buy the argument that just because you don't want to pay for the content (by viewing ads) that you should still be able to consume it without ads. From a technical perspective I guess the client can do whatever it wants with the data returned but it's still not "right".

<comment><USER11> We're not talking about dodging a toll booth or throwing a hat over the security alarms while walking out of a store. I ate a sample at Costco without buying the product. I got a spray of cologne at Macy's without asking what brand it was. I went to 7/11 on "free slurpee day" and got my free slurpee and nothing else. I'm an extreme couponer who walked out the door owing nothing.

I'm not taking anything from you because you gave it to me for free. Pirating is one thing. You're getting something for free that the distributor expects you to pay for. You're going out of your way to get something for free that you know you have to pay for. My ad blocker doesn't get me into Netflix for free, nor does it get past the NYT's paywall. It doesn't do anything fundamentally different from hitting "Reading Mode" built into my iPhone. Hell, it doesn't do anything fundamentally different from the Chrome extension "Cloud to Butt". It doesn't get me for-pay content for free. It couldn't possibly be any further from pirating MP3s.

<comment><USER12> > I'm not taking anything from you because you gave it to me for free

logical fallacy. You took it for free, but it had a price. If the ad has a $3 RPM it means you seeing the ad pays $0.003 to the content producer.

The price was just to let that ad load. not even to watch it or to read it.

It was free for you because you took it, by using a browser extension that lets you watch the site in a different way than the one that was intended.

</comment></comment></comment></comment></comment></comment></comment><comment><USER13> Counting Impressions.

A different model is needed if the publishers servers have to get the ad first and then give it to the client because the ad server then needs to trust the publisher to report impressions honestly and the publisher has an incentive to inflate that number.

<comment><USER14> A: Drops 'impressions' as the metric for allocating money for ads. Use something else like clicks which take you to the advertiser's site.

<comment><USER15> Welcome to the 90s, when advertising on the web was not profitable. ;)

I totally agree with what is wrong with advertising on the web, which is basically everything, but there is also value to impressions.

Let's say a new movie is coming out. I don't care if you go to the movie website, I just want to get the actors' faces in front of you with a movie name.

Same goes for a political candidate. I don't need you to go to Bernie Sanders' website, I just need you to know that he's running and a couple of things that he stands for.

The problem is that advertising and tracking are inherently connected today. Want to target ads to people who are likely to respond to them? You need profiles on all those users. Want privacy? You need to starve the collection of your data to build profiles.

IMO this is precisely why Google still gives me better results than DuckDuckGo - not _only_ do they sometimes know who I am and things about me, but their data set is based on knowing so much about all of us.

I also find that supremely unsettling.

Having worked on ad-driven properties, I'll say it's pretty common to track things at both ends. The advertiser always wants the impressions / click- throughs / whatever to be as low as possible, and the operators of the site want it to be higher. Much negotiation ensues.

Also, most folks don't have direct ad sales, though this is the holy grail in ad-driven properties, most sites use doubleclick and a suite of others, and often an intermediary inventory management service which picks the ads which pay the most for a given hour or day and maybe switch out providers based on their speed (doubleclick also gets really slow at busy times and will cause your site not to load :/)

</comment></comment></comment><comment><USER16> Ads have many specialized requirements that you wouldn't really want to build yourself. Tracking, tokenization of url parameters, rotating ads to meet impression goals, and typically advertisers have build their ads to be served by major ad networks, so you would have to replicate their systems to support those ad units. Ads are way more complicated than most people realize.

<comment><USER17> I've heard some Ad networks are asking clients to setup reverse-proxys, so they can make the image APPEAR to come from same origin. It's getting crazy!

</comment></comment><comment><USER18> I believe a website is responsible for everything that is delivered and all tracking that happens when they publish a page and deliver it. They don't get to segregate their content from ad content and wash their hands of responsibility for any lies or misuse of data by the later.

So forcing domains to host the ads they insert and all the tracking that goes with makes that more explicit and thus a good thing.

</comment><comment><USER19> The reason is one. And it is because ad blockers actually do not affect both the publishers and ad companies that much. About only less 5% of the internet users world wide have ever employed ad blockers ([http://www.channelnewsasia.com/news/business/in-bringing- ad-...](http://www.channelnewsasia.com/news/business/in-bringing-ad- blocking-t/2128856.html)). I am sure they will move ad serving to the backend when they get better reasons to shun of client side technology. Its just not worth it....yet.

<comment><USER20> This is changing fast depending on the audience for your content. Some publishers are now seeing 40%+ of their traffic ad blocked. Some countries are seeing 30%+ of total population using ad block. Ad block usage is up 41% year over year...this is going to be a very serious issue very soon for many publishers.

Some of my numbers are from: [http://bits.blogs.nytimes.com/2015/08/10/study- of-ad-blockin...](http://bits.blogs.nytimes.com/2015/08/10/study-of-ad- blocking-software-suggests-wide-use/?_r=0)

<comment><USER19> thanx for the enlightement!!!

</comment></comment></comment><comment><USER17> Who counts the impressions, to pay the ad client?

<comment><USER21> OP probably means major publishers who can solicit advertisers more directly.

<comment><USER10> Which tend to still use 3rd party ad severs. Probably because they don't want to develop that tech in house.

</comment></comment></comment><comment><USER22> Because advertisers don't trust publishers. They need a third party agency with no immediate interest in the game that could guarantee reliable reporting. For example if the ads are served from the publisher then the advertising network has no way of identifying fake clicks/impressions made by botnets.

</comment><comment><USER23> Tried this once. Ad block maintainers went out of their way to create custom filters for our site.

<comment><USER7> I think the only thing you can do these days is to rotate ad directories _and_ file names constantly, i.e. multiple times each hour just to run around ad blockers and their maintainers.

Or did you go already that far?

</comment></comment><comment><USER24> If I made an ad system that needed to track a user, I would want to use my own domain because then I can save the user's state between websites using my own domain's local storage.

</comment><comment><USER25> Ad blockers don't just block domains. They also block (full) url patterns, which are easily adapted to sites (and there are many) which host ads for themselves.

</comment><comment><USER26> Slightly OT: If more publishers defaulted to SSL, they would thwart lots of corporate ad filtering that strips out Adsense and the like.

</comment><comment><USER27> It doesnt work. If your site is popular enough, ad blockers would still target the ads on your website using site-specific rules.

</comment><comment><USER28>
     		||
     		||
           Sales    ||    Tech
                    ||
                    ||

</comment><comment><USER7> Followup question to some folks within the ad industry which I'm sure are reading:

I serve Google AdSense on one of my sites with 10'000 - 20'000 ad impressions daily. What amount of $ would one expect to make with those impressions if changing ad networks away from Google? Any recommendations?

</comment><comment><USER29> Are you starting from a false assumption? Delegation seems like the logical answer. Content publishers already delegate out a DNS label/domain for CDNs. Why wouldn't they also delegate a DNS label/domain to a third party for ad infrastructure?

</comment><comment><USER30> 1.) cross-domain tracking

2.) ease of integration

3.) independent analytics</comment>


US Government Tracking Journalists and Immigration Advocates - <AUTHOR> https://www.nbcsandiego.com/news/local/Source-Leaked-Documents-Show-the-US-Government-Tracking-Journalists-and-Advocates-Through-a-Secret-Database-506783231.html <comment><USER2> Duplicate of [https://news.ycombinator.com/item?id=19325302](https://news.ycombinator.com/item?id=19325302)

</comment><comment><USER3> Lots of flagged comments here. :)

If I read the assertions of the article correctly, isn't the issue that the border patrol is collecting information (i.e. acting as an intelligence agency) as opposed to its fundamental mission of protecting the border (which is strictly reactionary to breaking the laws).

Is the issue that border patrol is shifting into new territory as an agency? Regardless of the obvious issues around any USA based agency collecting information on its own citizens, is the biggest question just whether this is legal for them under their charter?

Or, am I misreading the issue under argument here?

[edit "USA" to say "USA based agency"...]

<comment><USER4> Their response gave some light on the action, they say they didn't create the list until after the violence broke out. Seems pretty logical that they would attempt investigate who was there at the time. Not sure it's justified, but logical.

"CBP told our colleagues at NBC News that the names in the database are all people who were present during violence that broke out at the border in November. The agency also said journalists are being tracked so that the agency can learn more about what started that violence."

<comment><USER5> >Seems pretty logical

There will always be explanations for such lists. And they will always be criminal activity or terrorism. That no such lists were made in the past is always considered irrelevant. That identical circumstances elsewhere produce no such lists is glossed over.

>Lots of flagged comments here...USA collecting information on its own citizens is the biggest question

The biggest question is why so many people are perfectly happy with this along side "press is the enemy of the people" and an arbitrary declaration of emergency. Perhaps by questioning and studying why a population suddenly accepts things they never would in the past, other counties will adjust.

And it's not really a question, it's really just observing another country following the path of Hungary, Poland, Turkey, Venezuela, Philippines, Russia and India all at various stages along the same trajectory.

</comment></comment></comment><comment><USER6> If this was true, you wouldn't know about it.

<comment><USER7> Oh, so sort of like how all that stuff Edward Snowden revealed wasn't true, huh?

</comment></comment><comment><USER8> >For each person, the documents show their photo, often from their passport but in some cases from their social media accounts, along with their personal information. That information includes the person's date of birth, their "country of commencement," and their alleged role tied to the migrant caravan.

Awfully inconvenient of NBC San Diego and/or the leakers not to release the documents so we could see examples of "their alleged role tied to the migrant caravan". Would probably be helpful context.

<comment><USER9> > not to release the documents

I'm quite certain the crime here would be releasing these documents and doxxing innocent people who are doing their normal, okay, not-illegal jobs.</comment></comment>


Let a hundred Facebooks bloom  - <AUTHOR> http://www.mathewingram.com/work/2008/08/17/let-a-hundred-facebooks-bloom/ <comment><USER2> It's interesting how the slogan of Mao's "Hundred Flowers Campaign" is widely used as a metaphor for healthy competition fueling innovation and progress of a population, while the campaign resulted in violently silencing most of the dissenting voice.

Some therefore conclude that Mao had anticipated this outcome and used the campaign as an entrapment to identify critics and get rid of them.</comment>


Ask HN:How will Bitcoin futures affect the actual price? - tek-cyb-org I don't understand how, since the Futures contracts do not get settled in Bitcoin, the for example, shorting of Bitcoin Futures, will affect the actual price. Can someone explain? <comment><AUTHOR> People who have funds on both the Futures exchange and normal Bitcoin exchanges can arbitrage for free profit.

This could create some 'tail-wags-dog' behavior, but at this point it is anyone's guess how this will play out.

<comment> tek-cyb-org hmm, I still don't quite understand. The bitcoin exchange would have to believe the futures market prices if I'm not mistaken. There wouldn't be an actual effect. Am I making sense?

<comment><AUTHOR> Say Bitcoin is trading at $15K on the bitcoin exchanges, and $14K on the futures exchange.

If someone has funds on both, they can sell on the bitcoin exchange and buy on the futures exchange to make $1K profit without changing their exposure, 'risk free'.

Unlike other kinds of arbitrage, however, because the futures settle in USD value, you'd have to move that USD to the exchange and rebuy to get back into a position to repeat. I _think_ settling in USD will somewhat suppress the effect of futures market short pressure (have to rebuy to sell again, unless on exchange with naked shorts available to users with only USD balances), but only time will tell.

<comment> tek-cyb-org Ok so this is the first time I'm hearing about arbitrage, so I did some googling to find out what it is. Here is what I am unsure of, Bitcoin is Bitcoin, it's an asset that you buy from an exchange (or mine) where as futures contracts are just contracts that don't equate to bitcoin and are not redeemable in bitcoin. This makes arbitrage not possible. That is my understanding.</comment></comment></comment></comment>


Show HN: Easy email notifications for major security vulnerabilities. - <AUTHOR> http://www.vulnerable.co/

<comment><USER2> Great idea! Mind if I ask how you're curating the data that you send out? That is, if you're doing it manually then it's basically a 'better than nothing, probably' approach because the people benefiting from the service would be those who presumably _aren't_ combing the web for vulnerabilities therefore making them pretty reliant on you and your information– whether it's from the dev-core, netsec, or plain-old-HN outrage.

1) Are you doing an automated scrape of data? If so, who are your sources? 2) What do you consider "the most important" vulnerabilities? Any plans for letting this be user selectable (i.e. at signup decide whether you want _all_ or _critical_ , etc.)?

Aside: It would also be nice if you provided a sample email on the frontpage, otherwise people just have to sign up and wait to see if the service is what they expect.

</comment><comment><USER3> Personal preference here, but 5 (!) links to the sign-up page seems a bit much. You could safely drop the bottom three and keep the navigation choice and the hero button - it's pretty clear how to register already.

<comment><AUTHOR> Fixed. Great point.

Btw - the site is being served statically though Heroku [1]. This is the first time I have tried this out, and it worked fantastically.

[1] [http://kennethreitz.org/exposures/static-sites-on-heroku- ced...](http://kennethreitz.org/exposures/static-sites-on-heroku-cedar)

</comment></comment><comment><USER4> Timely, given the recent PyPI breach and Rails/Ruby YAML parsing vulnerabilities.</comment>


OpenTable Buys Ness For $17.3M - <AUTHOR> http://techcrunch.com/2014/02/06/opentable-ness/

<comment><USER2> Does anyone know why Ness sold for so cheap?</comment>


Where the Big Green Copier Button Came From - <AUTHOR> http://athinkingperson.com/2010/06/02/where-the-big-green-copier-button-came-from/

<comment><AUTHOR> the talk: <http://www.workpractice.com/wpt-fest/introduction.html></comment>


Ask HN: How do you cope with routine in your daily programming job? - <AUTHOR> I am currently studying Computer Science and am wondering about how to deal with the daily routine of a programming job in the future. Though I really enjoy programming and contribute regularly to open source projects, the perspective of programming 8 hours a day, 5 days a week seems exhausting.
While learning new stuff is very interesting, I usually experience that the work becomes boring once you grasp the core concepts. For instance, consider building a web application: getting to know a new web framework and coming up with a sensible architecture is very fulfilling; however, after you figure it out, the rest of the work becomes pretty mechanical and repetitive.
This is the reason I am very curious to know: How do you cope with routine in your daily programming job? How do you approach your work in order to find gratification in what you do? <comment><USER2> I don't. It was fun while I was learning how to do new things and discovering solutions to problems, but once I learn how to do something I no longer enjoy doing it. I have not found a solution to this problem, and so I simply don't enjoy my work and in fact resent it most of the time.

</comment><comment><USER3> -Continously learning. -Switching jobs frequently. -Contributing to OSS.

</comment><comment><USER4> Get rid of 8-hour stigma and that's it... I'm working part-time (and in charge of my time) for more than a decade.</comment>


[Ask HN]: Where do you read most articles? - <AUTHOR>

Where do you read most articles? On your phone? Tablet? Desktop ?<p>A16Z Benedict Evans says phone is killing both desktop and tablet, and I am just trying to get an idea of relative percentages to see if this is true. <comment><USER2> This place is like the worst possible demographic for asking this question. The technology habits of the hacker news readership are almost completely unlike the vast majority of America, much less the rest of the world.

</comment><comment><USER3> The rise of the smart phone and tablet happened in the same decade as when desktops and laptops reached their saturation point. Where most people are no longer buying a desktop for the first time, but replacing their old desktops. Thus slowing sales.

The Smart Phone isn't _killing_ the desktop, and more then the desktop _killed_ the main frame, we still use powerful dedicated computer clusters for computing, just like we did in the 60's and 70's before the desktop. The desktop just expanded the market of people who own computers, much like the smart phone is doing now.

That being said I do most my reading on a desktop.

<comment><AUTHOR> Thanks! So you think that desktop sales are just slower because people don't replace desktops as often as they replace smartphones? Just trying to better understand your argument.

</comment></comment><comment><USER4> My phone is my primary device for reading, but I find typing a hassle, so it is basically consumption only.

Around Jan-Feb 2013 I read the whole ASOIAF (i.e. Game Of Thrones) series on an iPhone 4, since then I prefer it to laptop or paper, I probably average a book a week. IMO if you're willing to spend money on apps the only real limitation of mobile is input. Output if fine if you have good eyesight.

</comment><comment><USER5> Mobile during commute,and desktop in office and my Laptop in home.. I usually save the articles in Pocket from my computer and will later read it on whenever I have time and in whichever I have access to..

</comment><comment><USER6> If I'm going to bed it's my phone. I usually prefer to read on my laptop or tablet due to the larger screen.

<comment><AUTHOR> Thanks! Follow-up question: between laptop and tablet, which one do you use most?

I am just intrigued about this whole "tablets replacing desktops" thing, and I am trying to get a sense of what other people use.

For developers like me (and you?), a tablet could never replace a powerful computer. But for average users, the tables can do most of what a desktop does (email, netflix, facebook, etc.)

</comment></comment><comment><USER7> Mobile(Gym, bathroom), Desktop (Office Desk, Couch, Bed) - I do not use tablets. To me, they are useless..

</comment><comment><USER8> reading depends on where do you discover articles - i discover them on twitter/zite/teamgum (mobile). While at work, i mostly discover articles which are related to my current work or helping to solve some problem i am stuck at - use laptop/desktop for this.</comment>


OS X Lion v10.7.1 is out - <AUTHOR> http://support.apple.com/kb/HT4764

<comment><USER2> Looks like some normal stability updates...oh wait, what's this?

 _Resolve an issue in which an admin user account could be missing after upgrading to OS X Lion._

Yikes. Let me double-check my backups before this upgrade...

</comment><comment><USER3> Hope it fixes video performance.

On my MacBook Pro, it's horrendous.

Exposé is very harsh, and the RSS screen saver is s l o w</comment>


The American Conservative publishes Sibel Edmonds' story of corruption at Washington's highest levels - <AUTHOR> http://www.amconmag.com/2008/2008_01_28/article1.html

<comment><AUTHOR> To pre-empt to those who will cry "politics!" at this - I claim it's an interesting look at how our government runs international relations. It's fascinating to study and understand for hackers because although seemingly simple in rhetoric, in reality, international relations it is a very complex system, and hence interesting to hackers.

<comment><USER2> +1 for great explanation

+1 for a quality article (non-election politics sure taste better nowadays)</comment></comment>


VW says combustion cars will fade away after 2026 - <AUTHOR> https://www.detroitnews.com/story/business/autos/foreign/2018/12/05/vw-says-combustion-cars-will-fade-away/38677503/ <comment><USER2> I've pointed this out in other discussions, but might as well point it out again.

One of the problems that VW is about to encounter is that its interests as a manufacturer run directly opposite to its dealers' interests. VW wants to start selling pure electric cars because that is where the market is going. However any VW dealer who convinces a customer to buy an ICE car has also sold themselves good odds of a future revenue stream maintaining that car. However if they sell an electric car they are going to see that car less often.

Therefore VW can make electric cars, but its dealers will try to not sell them. This opens up an opportunity for new brands because people in the market for electric cars are likely to try to buy electric cars similar to the ones that they see on the road. Which means that shiny Tesla, those glorified golf carts you sometimes see, and all of the up and coming electric car brands in China and India that would love to break into Western markets.

The history of disruptive innovation suggests that the end result is likely to be that people switch to new companies and most existing car companies will go out of business. So far everything about the transition to electric has followed the usual course (including established companies publicly announcing that they are switching technologies because they know where the future is), so there is no reason to believe that the result will be different this time.

<comment><USER3> > However if they sell an electric car they are going to see that car less > often.

This is something many people don't get. There are far, far less parts (moving ones even) in EVs. Things like spark plugs(and the cables), fuel injectors, filters, alternators, fuel pumps, the myriad of belts and pulleys, valves. They don't even have a crankshaft. Or a clutch. Or much of a transmission for that matter. Power steering is generally electric too (no fluid or pumps there either), as is climate control. Even radiators are not usually present (maybe in the batteries, used far less often, mostly when charging). It does have a bunch more electronics, all solid state. Even the normal lead acid 12v battery they all have lasts longer, as there is no starter motor to pull lots of amps at once (they are also more gently topped off).

Parts that cannot exist cannot fail, and cannot be charged. Were not for the battery degradation ghost, people would be switching in droves already. But they are familiar with laptop batteries, and they think car batteries degrade the same way.

If the day comes where you can just drive to an autozone or the like, give them your old battery and drive off with a new one at a reasonable price, that's when things will suddenly shift.

<comment><USER4> > Were not for the battery degradation ghost, people would be switching in > droves already.

When you say people, are you referring to people who are in a position where they could buy an electric car, but have not yet?

I personally feel the vast majority of people have not switched because:

1) Cost

2) Options (we're a country that loves SUVs/Trucks)

3) Housing / Charging

Funny enough, I could probably afford an electric vehicle, but I have no way of charging that vehicle due to my housing situation.

<comment><USER5> 3 is huge, if you're a renter, why would you buy a car where you have no idea if you'll be able to charge it should you move. I'd also add on the fact that you still can't reasonably take road trips with an electric car in the same way you can with a traditional one.

<comment><USER6> Car rental is affordable and you aren't putting wear and tear on your daily driver. Win/win for long trips

</comment></comment></comment></comment></comment><comment><USER7> Yeah, but they're gonna include a software patch that turns off the IC engine whenever an emissions detector is attached so it will always appear to be carbon neutral.

<comment><USER8> When I read the headline I couldn't help but think "how is VW still in business?".

If you're not familiar with the degree to which they deceived regulators and the public I suggest the Netflix documentary. [https://www.netflix.com/title/80118100](https://www.netflix.com/title/80118100) (Season 1, Episode 1).

<comment><USER9> The issue is a bit two-fold. Yes, they did shaft the regulators to get things green on paper but the owners of Volkswagen cars weren't exactly deprived of anything directly.

Here in Europe there are people who have deliberately refused the VW fix because they'd rather keep the better fuel economy and engine response rather than comply with emissions regulations. Not complying is not exactly unheard of: instead of replacing faulty units people rip off diesel particulate filters and block EGR valves on diesel engines for performance and engine longevity reasons. Reducing pollution apparently isn't valued by the end-user market that much. And European car owners are very much price-sensitive because motoring in general is expensive and taxed high.

Owning a Volkswagen isn't basically a worse experience than before. Their PR image might have suffered a hit, sure. But VW is huge and people in Europe still buy them. Diesel has been a bit unpopular in Europe recently but that's mostly because some cities are limiting or planning to limit old diesel cars from accessing the city centres.

<comment><USER8> At a very micro level it maybe a true statement that someone wasn't deprived of anything they valued.

However, an automaker has a responsibility at a macro level because they sell so many cars.

Here's what seemed exceptional in the VW case.

1) They built cars with software that had a single purpose of misleading (lying is a more accurate term here) to regulators on their efficiency.

2) When caught they denied it.

3) When they couldn't deny it anymore they updated the software to mislead again (lying in hopes they could continue with the first lie)

4) By this point the highest levels in VW were involved.

Not meeting emissions regulations may not be a big deal for everyone but it impacts others and it has direct impact on others.

I'm not saying you are defending VW but I don't think anything they did was remotely defensible.

<comment><USER9> _I 'm not saying you are defending VW but I don't think anything they did was remotely defensible._

I don't think it could be considered defensible at any level, either. But I do maintain that the _market_ really doesn't seem to care: therefore VW are still in business which is what the parent was wondering. If you had bought a VW you really wouldn't have any reason to not keep driving it, as the end-user.

Conversely, I do think people would be absolutely furious if VW had cheated in emissions and fuel mileage tests to make their cars seem to run on very little fuel but in practise the realistic mileage would be _much_ lower for the majority of owners. And I mean much lower than the general gap between measured and actual fuel efficiency. In that case VW might really be struggling to survive if they didn't have better technology to show the market.

</comment></comment></comment></comment></comment><comment><USER10> Slightly misleading title. VW's last generation of combustion motors will be released in 2026. Basic motor platforms can and do last for decades after initially introduced, so I think closer to 2040 is a safer bet.

<comment><USER11> When you're talking about a "fade" in audio, there's a start time, an end time, and a duration. So it's not at all inaccurate from that point of view to say that combustion motors will fade away after 2026.

<comment><USER12> Things that are not technically inaccurate but give the typical reader the wrong impression (e.g., me in this case) is pretty much the definition of "misleading".

<comment><USER11> Many people are familiar with the media vocabulary of audio production and cinema/video editing. Just the word "after" is enough clarification.

<comment><USER12> "Many" is not enough if most are misled. "After" doesn't fix the key ambiguity that is being exploited.

<comment><USER13> Is the word "fading" really so hard? It's a pretty common word IMO, not even specific to audio/video..

<comment><USER12> I'm making an empirical claim: If you show people the headline, will they interpret it as a claim that there will no longer be a majority of combustion cars on the road by 2030, even though that's not the claim being made in the article. Not sure what else to tell you other than my confidence that a survey would show this.

</comment></comment></comment></comment></comment></comment></comment><comment><USER14> A lot of things about mobility will change over the next decade. And I wrote quite extensively about it in the past. Urbanization will reduce the need of car ownership. Fleet maintainability will overtake planned obsolescence.

[1][https://medium.com/@jsemrau/mobility-illuminates-the-end- of-...](https://medium.com/@jsemrau/mobility-illuminates-the-end-of- ownership-3a73146d1ff5)

</comment><comment><USER15> How will EVs or vehicles running on alternate fuel sources work in areas where there is no fuel distribution system to support them?

<comment><USER16> You know how there is already a divide between people who live in cities and people who live in rural areas?

It's about to get a whole lot worse.

<comment><USER17> I live in a city, I have no garage, an EV is impractical for me.

I grew up outside of a city, with a garage, and electric.

It isn't the 1890s. Cities are less equipped for self-owned EVs than the rural.

<comment><USER3> > I live in a city, I have no garage, an EV is impractical for me.

Here's my heuristic. What are the places your car usually spends parked at, and do these places have at least a power outlet you can plug into(a proper charging stations is better of course)? For most city-dwellers, that's either their home, their workplace, or any other place they spend some time on (supermarkets?). Do any of these places, or places nearby, provide a way for you to charge? If yes, you should be fine.

Failing that, it starts to become less practical, as you'll have to rely on quick-charging (if it is even available).

Honestly, this isn't much of a concern medium term. Yes, it's problem now. But, as the EV fleet increases, so will the market pressures for a proper charging infrastructure. It costs much less than creating a gas infrastructure. Most places have electricity, they may require some upgrades, but that's relatively cheap (compare that to adding more gas stations).

<comment><USER18> Walking to friends that own EV's one metric really is how many days can you go between charges. And the ratio of miles driven vs charging opportunities.

And old lady that drives 1500 miles a year to go shopping might well find all of her charging needs are satisfied by plugging the car in while shopping Petco and Walmart. Because at that rate she only needs the car plugged in for an hour a week.

1500miles/52weeks -> 30 miles/week / 30 miles range per charging hour -> 1hr/week.

</comment></comment></comment></comment></comment><comment><USER19> Isnt VW opening themselves upto the Osborne effect by mentioning this? ([https://en.wikipedia.org/wiki/Osborne_effect](https://en.wikipedia.org/wiki/Osborne_effect))?

<comment><USER20> Mr.Porsche's first car was petrol-electric hybrid, because he deemed clutches unreliable. And he got it right, because clutches wear out so quickly that DSG boxes, after 80 years of gearbox development, need clutch adjustments every five years. He should have developed the Beetle as a petrol-electric hybrid with continuous throttle and resistive brake instead of a petrol car with 4+1 switching gearbox.

<comment><USER21> 1\. DSGs are still relatively new 2\. Most clutches these days can easily go untouched throughout at least one owners use of a car.

</comment></comment></comment><comment><USER22> In Norway, yes. In the rest of the world which is #1 price conscious, cars will be along for a while unless they are near the equator with tons of sunlight and cheap panels + functioning grid.

<comment> Joe-Z Are you arguing that the lead Norway has in EVs stems from Norwegians just being morally superior and not "#1 price conscious"?

Because from what I've heard the Norwegian government is pumping out a whole lot of subsidies to push EVs (including allowing to use bus lanes, which other vehicles are barred from)

<comment><USER22> They are rich and therefore in a position to be 'morally superior' :)

They have some pretty aggressive plans on electric cars, and they're very wealthy (ironically from oil...) consumers can buy them, and buy them at a high rate.

The Scandinavian countries will probably be first to 'no combustion' cars, my #1 bet is Norway, #2 Sweden, #3 Denmark. #4 Netherlands. After that, who knows. Maybe Hong Kong or Singapore i.e. where it's 'small, rich and the economics work'.

<comment><USER23> America isn't rich?

<comment><USER22> Norwegians are per capita significantly richer than Americans.

GDP per capita is a lot higher, and they have a sovereign wealth fund that owns almost 2% of all public stocks in the entire world.

So 'America is rich' and Americans on average have quite a lot of cash, but overall, not so much as they will flip to electric at a $40K price tag.

The Norwegians will flip to 100% electric soon. Also for social/political reasons as well though.

Kuwaitis are rich but they're not going electric anytime soon.

</comment></comment></comment></comment></comment><comment><USER24> It's great to see a car manufacturer taking their environmental responsibilities so seriously, especially since it's in their own interest.

but, i hope electric cars will be more reliable than tesla has been. Tesla's reliability is now 3rd from the bottom, although i know there are a lot of reasons for this: (lots of new tech etc).

<comment><USER25> Well, I think they have to since they got burned so badly with the diesel debacle.

</comment></comment><comment><USER26> headline is 2026, body says 2050.

> After 2050, there may still be some gasoline and diesel models

There will still be plenty. My own estimate is that if electric (battery) cars are still a thing in 2050, it will be 50% that and 50% ICE. But more likely, again just IMHO as an interested but non-expert party, if h2 generation is "solved" sufficiently well by then, it will be 50-75% H2 fuel cell and 25% ICE.

The plan to deliver H2 instead of natural gas to homes by 2032 by Northern Gas is an example of how the H2 infrastructure can take over.

</comment><comment><USER27> The rate at which battery prices are dropping and self-driving technology is being developed, VW plan about combustion engines is right.

Here is the most probable scenario by 2025:

2022 : electric self-driving on-demand FLEET car 1000 miles/month subscription for $350/months from Google, Uber, Lyft

2025: same car 1000 miles/month subscription for $250/month. Individual car ownership will reduce by at least 35% from 2018 ownership levels in developed countries.

by 2023, Google will supply Self-driving OS software to all FLEETs (except China Didi which develops it's own) and discontinue their own fleet running business.

GM, Toyota, VW, Renault forced to run own FLEETS to stay in business like Uber, DiDi

<comment><USER28> That's a pretty overconfident estimate. There's no way there will be fleets of electric self-driving cars at 2022, it will be at least 2030 or later.

<comment><USER27> in 2022 start of fleet cars don't mean fleets should replace 30% of today's car ownership.

If you live in any city or suburb in USA today, electric bikes from Bird, Lime, Skip companies are left on the rode side waiting to be activated by mobile phone from anybody.

Same thing start with self-driving electric cars starting 2022 . It starts with 5% (in number) of today's cars in a given neighborhood. You just activate with mobile phone as we all do TODAY with these electric bikes/scooters in our neighborhood.

As you know google's Waymo just started these on-demand cars in Phoneix Arizona few weeks ago, any pre-registered users can hail this self-driving car from phone. There are keeping a safe driver just sitting idle as of today.

I am confident on January 1, 2020 ( in select USA cities) Google will have No safety human driver and cars will be parked in neighborhood just like these Bird, Lime scooters.

<comment><USER28> The difference is that scooters cost a few hundred to buy, so they get paid off easily. A self-driving car is not cheap, usage costs would be far too expensive. I'm confident that your estimates will be far off.

</comment></comment></comment></comment><comment><USER29> I say VW will fade away before 2026.

<comment><USER30> I say they won't:

[https://www.carscoops.com/2018/09/vw-group-set-record- year-d...](https://www.carscoops.com/2018/09/vw-group-set-record-year- delivered-7-3-million-vehicles-far/)

<comment><USER31> HN seems pretty notorious to me for hating VW while being largely oblivious to the actions of others.

</comment></comment></comment><comment><USER32> But the sound. A carbureted SBC sounds so good.

<comment><USER33> Plenty of ICE cars have artificial engine sound pumped into the cabin today. We could easily do the same for EVs.

<comment><USER34> Not the same thing. Someone who likes the sound of an ICE typically doesn't like fake engine noise.

<comment><USER33> I agree it's not exactly the same, but it can be pretty close. If that is one's lone objection to driving an electric, it's a pretty weak one. It is a very solvable problem.

</comment></comment></comment></comment><comment><USER35> I have nothing in principle against ED vehicles (besides the unfortunate designation "ED"), but I am completely against them in practice. Especially in the US, we have no infrastructure for it. Americans, myself included, love to hit the road for vacations. Electric cars simply cannot handle the rigors of long-distance travel with the engine load of air conditioning or heat, a car full of kids and luggage, and a few amps of accessories (chargers, PSUs for devices, etc.). No one has even proposed anything close to a reasonable solution for these things. The ICE vehicle works so well and has catapulted our economy over the past century because the fuel is so readily available and very quick to fill, and we have built an entire nation on a huge network of gas stations. Sorry, no matter how many futurists want to believe in the Church of ED, the electic car revolution can't and won't happen until we completely revamp our infrastructure. And the country isn't just the idyllic land of California where everyone drinks at juice bars and has solar-paneled houses, and commutes 22.7 miles per day with a hybrid or EV, there is Alaska and West Virginia, where it's as rural as you can imagine where the ICE is the most reliable source of transportation. VW, and Europe in general are delusional at best.

<comment><USER36> Changing our infrastructure is a bit of a chicken and egg problem. But our infrastructure is rapidly changing. Charging stations are everywhere. Even in West Virginia. And we're just seeing the tip of the iceberg as far as changes to our infrastructure go. Yeah, our infrastructure is based on oil. But we're definitely not incapable of building out new infrastructure as needed. And when electric cars become more economical than gas cars over the next decade, the (debatable) fact that they're bad for family road trips and other specific applications won't matter. You can always rent a gas-powered vehicle if you need one, but owning one is going to become less and less efficient.

<comment><USER35> It's not just specific applications, it's more than that. For example, I happen to have a long commute in a very congrsted area, which kills range. My office does not have charging stations. I personally don't have a charging station in my garage, so I would have to charge my EV overnight. Not a huge problem, but these kinds of issues make me and most people pause when considering an EV. That's not a specific application, that's a very common one. And yes, I have seen maybe one or two charging stations in my area of WV, but that's it. You're right, it is indeed a chicken and egg problem, but I disagree with the notion that our infrastructure is changing rapidly. If it's happening at all, it's very slow and sporadic. Nobody in my area has EVs nor would they want one not only because of all the things I've already mentioned, but also for many things I haven't. Tbe pickup truck is king here, for example.

The EV is a superb idea and I will welcome it with open arms when governments mandate, subsidize, build, and generally support it, and when car companies solve the problems inherent to the EV. Until then, it is a fantasy that most people will simply not adopt for pragmatic reasons.

And yes, absolutely we are capable of building that infrastructure, but we are simply not willing. And let's be real - car makes are not even making EVs (and I don't mean hybrids), nor are they interested in making them because there is very little market for them. Again, yes, a chiken/egg problem, but a very real one.</comment></comment></comment>


Magazine to give out 'LGBT-free zone' stickers to readers - sahin-boydas https://www.cnn.com/2019/07/19/europe/gazeta-polska-anti-lgbt-stickers-scli-intl/index.html <comment><AUTHOR> In case you don't know, Poland, even more so than Russia, is experiencing an ultra-conservative renaissance via it's newly elected Far Right government that is also creating issues for Poland's EU membership</comment>


Ask HN: What do you think about mounting a file system over a WebSocket? - <AUTHOR> Interesting idea. Use Websocket to mount a remote file system. The system must be running some daemon.
But what does it mean to "mount" a filesystem to a webpage?
Does the webpage have access to those files? Yes.
But then what's the difference of running a HTTP server?
Hmm....Commands over websocket, programmatic access via script, authentication inline.
I like the idea...it seems interesting.
What do you think? Would this be useful or interesting to you?
Some possibly related prior art:
- https://www.npmjs.com/package/websocket-stream
- http://lukas.pokorny.eu/sftp-over-websockets/
Background:
I just used SCP for the first time to copy a file between two SSH sessions happening in browser windows, and I made the above note to myself. I didn't know more about it so I thought I'd ask here and see if anyone has any useful thoughts. <comment><USER2> I have a question for you, same question I ask myself for every project. You are describing a system/solution. Can you define the problem that you want to solve?

<comment><AUTHOR> No I can't. Good question.

</comment></comment><comment><USER3> It already exists in many webIDEs. Ex: look at codebox.

<comment><AUTHOR> Good link. Interesting code. main.js has File model which uses lib/rpc to call service/fs over a socket.

</comment></comment><comment><USER4> Are you familiar with WebDAV?

<comment><AUTHOR> That's a brilliant suggestion.

I love that it's part of standards tracks.

There's npm and python modules. Some JS clients for browser.

I think I came across WebDAV a long time ago, and I didn't know what it was or think it was relevant then. But now I see. I doubt I would have made the connection so quickly if it hadn't been for your comment.</comment></comment>


Management Consultants Can Save the World - <AUTHOR> http://www.slate.com/articles/business/the_dismal_science/2013/01/management_consulting_how_middle_managers_make_countries_and_businesses.html

<comment><USER2> "In partnership with the consulting firm Accenture, the researchers randomly assigned a management makeover to a handful of Indian textile firms, while at the same time following a set of control textile factories to benchmark the effects of good management."

It certainly doesn't seem as though there was a potential for this report to have been biased.

A more interesting report would have been for those consultants to have been compared not only against a control but also firms where executives had been taught basic management and business practices themselves. They very likely could have made similar productivity gains and perhaps without spending the normally ludicrous management consulting fees.

Of course I might be wrong - the consultants did such a great job running Mitt Romney's Presidential campaign.

<comment><USER3> I don't think that would work although I'm only speculating as well. I think the reason that external consultants can work better is that they exist in a different political situation than most internal managers do. A lot of basic management skills are human nature or basic survival techniques such as being efficient, and even untrained managers probably have those, but internal managers just don't have the political situation where they feel they can propose changes and keep their job secure.

</comment></comment><comment><USER4> The headline is misleading, it should be "Better Management Can Save the World". If a company want to improve it's management practices, perhaps hiring a consultancy isn't the worst idea, but it's the motivation (improving management), not the tool (management consultants) that is important.

</comment><comment><USER5> They conveniently missed the fact that the consulting provided was operational consulting and not management (read: strategy) consulting.

</comment><comment><USER6> You misspelled Entrepreneurs.</comment>


Clojurejs - A naive Clojure to javascript translator - <AUTHOR> https://github.com/kriyative/clojurejs

<comment><USER2> List of languages that compile to JS:

[https://github.com/jashkenas/coffee-script/wiki/List-of- lang...](https://github.com/jashkenas/coffee-script/wiki/List-of-languages- that-compile-to-JS)

</comment><comment><USER3> Does this differ significantly from the clojurescript which is already on clojure-contrib? [https://github.com/richhickey/clojure- contrib/tree/master/cl...](https://github.com/richhickey/clojure- contrib/tree/master/clojurescript/)

You can try it out at <http://clojurescript.n01se.net/repl/> which evals your code via a Java applet.

On a side-note, I'm modifying an older Javascript-based Lisp interpreter to have a more Clojure-like feel, as well as adding in Macros, etc. and running it on the v8 debug shell "d8" (built with readline enabled). The goal is to be write something like Clojure in a way one would write Node.js apps. At some point I want to have it auto-compile the lisp modules to Javascript a la Python's .pyc files.

<comment><AUTHOR> I believe clojurescript requires a patched Clojure implementation, and a JVM to support the generated Javascript at runtime, although I'm not 100% certain that these constraints are still true. And, I'm not sure how actively it's being developed. However, clojurescript is probably a better approach to this, with an appropriate intermediate representation (a nice byproduct of using the built-in compiler) etc.

clojurejs generates javascript which has no other dependencies (other than any in the source Clojure (subset) code itself) and should run on any reasonable browser.

FWIW, clojurejs is a much less ambitious effort born out of the necessity of one developer (me). You can read more about the current limitations and some of the things I'd like to improve on the project's github issues page and the Google groups discussion referenced elsewhere in these comments.

</comment></comment><comment><USER4> There's an small but interesting discussion about it in the Google group: [http://groups.google.com/group/clojure/browse_thread/thread/...](http://groups.google.com/group/clojure/browse_thread/thread/301847ed6ffb1a5a)

<comment><AUTHOR> Also, I posted a response to a question on reddit, which might be relevant.

[http://www.reddit.com/r/Clojure/comments/f125l/clojurejs_a_n...](http://www.reddit.com/r/Clojure/comments/f125l/clojurejs_a_naive_clojure_to_javascript_translator/)

</comment></comment><comment><USER5> Is the title supposed to be "naive" or "native"? The two words mean vastly different things.

<comment><USER4> It seems to really be "naive" (although native is also correct) as it's what the readme and Github description also says. Moreover it's a very simple compiler for now, translating only a small Clojure subset without any optimizations.</comment></comment>


Hugo SSG v0.17 released (2x speed and multilingual) - <AUTHOR> http://spf13.com/post/hugo-goes-global/ <comment><USER2> Hugo v0.17 is now available as a Snap package! (Snaps are a new kind of universal Linux packages.)

Check it out at [https://uappexplorer.com/app/hugo.hugo- authors](https://uappexplorer.com/app/hugo.hugo-authors)

Better yet, install the "snapd" package, and use the "snap" tool to find and install Hugo:

        $ snap find hugo
        Name  Version  Developer     Notes  Summary
        hugo  0.17     hugo-authors  -      Fast and Flexible Static Site Generator

        $ sudo snap install hugo
        4.41 MB / 4.41 MB [</comment><comment></comment><comment></comment><comment></comment><comment></comment><comment></comment><comment>==] 100.00 % 410.06 KB/s

        hugo (stable) 0.17 from 'hugo-authors' installed

        $ /snap/bin/hugo version
        Hugo Static Site Generator v0.17 BuildDate: 2016-10-07T09:27:07-06:00

(/snap/bin is automatically added to your PATH.)

The snaps for Hugo are available amd64 (x86_64), i386, armhf, arm64 and ppc64el platforms, thanks to the automatic cross-building infrastructure provided on Launchpad.

Kudos to Daniel Holbach from Ubuntu and Canonical for laying the framework and guiding us along the way to make this happen, helping Hugo reach more places!

So yes, if it fits your workflow, please go ahead and give the Hugo snaps a try! Have fun!

</comment><comment><USER3> Just wanted to give some big credits to the Go team: We got about 40 percent of the speed increase "for free" just by doing a recompile with Go 1.7.

</comment><comment><USER2> Wow, this is really awesome! I have been really looking forward to using Hugo to host a multilingual website, and now the dream has come true!

Thank you for all the developers/contributors who have endeavoured to make this happen! Time to dig in! Hurray for Hugo v0.17!

嘩!這實在太棒了!我很早就希望能使用 Hugo 來構建一個支持多種語言(如中文、英文、法文)的網站,現在終於夢想成真了!

感謝多位開發者/貢獻者不懈的努力!是時候研究這個新版 Hugo v0.17 的新功能了!</comment>


Ask HN: What is the best way into a cybersecurity career in 2019? - <AUTHOR> As an mechatronics/research-engineer with great interest in pentesting and cybersecurity I'd like to make a career change. Where do I start? - comptia or cissp certs or is a university degree the only way? <comment><USER3> Don't waste your time and money on CompTIA certs or CISSP. They're basically worthless when it comes to pentesting.

Pentesting is learned by doing. Get your hands dirty and start learning basic methodologies by using Hack The Box, Virtual Hacking Lab or Vulnhub VM's. When you feel that you're getting a bit comfortable rooting boxes, sign up for the PWK and go for the OSCP. This is your ticket into pentesting if you're like me with no work experience whatsoever in IT.

I came from +10 years in finance and landed my first job as a junior pentester two months after I passed the OSCP.

<comment><USER4> OCSP is a hands on test that requires you to break into a system and write up your findings. It's all done in a controlled environment and time-boxed. It shows you have real abilities in a hands-on setting. It's also one of two certs that are respected. The other is SANS.

</comment></comment><comment> valiant-comma None of those are necessary, though it depends on what your desired path is.

Here's one approach:

1) Find several local security meet-ups and get involved. Volunteer, talk, make friends. Network early and often, ask questions and learn.

2) Using the contacts and exposure developed above, find either an internship or contract role doing whatever security-related work you can find. You will (most likely) need to pay your dues, meaning it might be pretty basic security work to start with, but you're looking for experience and further opportunity to grow your skills.

3) On the pentesting side, you'll want to learn the target systems well (e.g., use them in practice), learn the common types of vulnerabilities and how to exploit them, and immerse yourself in opportunities to use your nascent skills (online challenges, capture-the-flag events, etc.). Read vulnerability reports published by other researchers, watch relevant videos, experiment on your own setups, and so forth.

4) As you feel more comfortable with your assessment skills, you might consider entering bug bounty programs.

Again, this is just one approach, there are many options depending on what works for you. Best of luck!

Edit: Line breaks.

<comment><USER5> What you said sounds good but I have never heard of anyone that got into infosec this way.

<comment> valiant-comma They exist; I've hired a few myself who've chosen this path. But it's just one of many approaches to get into security as a career, and there are many.

Along these lines, I highly recommend Rachel Tobac's talk "The Path to Infosec is Not Always Linear"[1].

[1] [https://www.youtube.com/watch?v=rWAeDVo8mXc](https://www.youtube.com/watch?v=rWAeDVo8mXc)

<comment><USER4> My team has hired at least one that way and it's how we encourage others to develop skills.

</comment></comment></comment></comment><comment> jor-el In my personal experience getting started with cybersecurity career is tricky. Many companies want cybersecurity professionals, but most of them are not willing to train one. It creates the dreaded situation - companies dont hire you because you dont have experience, but you need a job to get experience.

A good way to get started is to take up any opportunity you get (and of course, of your interest), so you get a foot in the door. Other comments have talked about internships and certifications, I would like to highlight OSCP certification. It is hands on certification, and it will give you a good feel about the whole pentesting process. It is fairly respected certification in the industry and getting one will surely help you in getting a good starting job.

Also, keep honing your skills on various aspects of security, on job, you might not be dealing with all security topics all the time, but they show up and it helps to know about them. For example, you might be evaluating a C codebase with some applied cryptography. You may have all your focus on improper memory handling, but knowledge about applied cryptography can be helpful to contribute better.

<comment><USER5> I agree mostly except OSCP is hard,there are easier certs for those that are not pursuing a pentester path.

</comment></comment><comment><USER6> I always point folks looking to get into cyber/infosec to this great post by Daniel Miessler: [https://danielmiessler.com/blog/build-successful-infosec- car...](https://danielmiessler.com/blog/build-successful-infosec-career/)

</comment><comment><USER7> In essence, here's a full overview of what will be enabling a career path as a technical contributor with a focus on pentesting / red teaming for you:

1\. Get OSCP

2\. find CVEs (proper ones, not XSS in $random_github)

3\. Publish good, detailed articles

4\. Do talks at major industry conferences

Play some CTFs in between for learning and meeting people in the community.

Good luck !

</comment><comment><USER8> Many years in security - engineering through leadership. The comments here are quite solid. I'd add that CISSP requires documented security experience + a CISSP sponsor to sign off. I started from a C.S. background, but you can start in many routes: if you have CS background, find a small security services company and apply. You might also do a 1 pivot move, where you use your mech/research background and combine it with security to become a specialist in that area (IoT related may be easiest pivot). Also, check out cybrary.it for significant free learning resources. Too exhausted to add more - but other commenters have great ideas.

</comment><comment><USER9> It's bit of a chicken-and-egg problem: You will not easily get security job, because you don't have experience and you don't have experience, because you don't work at security. The same goes for e.g. CISSP - they require work experience, but lot's of jobs require CISSP. Go figure.

Having a solid profile - either on Github or Blog and entry-level certification could be a good start. Participation in events like CFG or other hackathons would also help open some doors.

I don't work at security myself, but based on what i've seen, having operational experience will also gain you more respect.

Good luck my friend.

</comment><comment><USER10> Seems to be a sudden rush of openings in industrial cyber security - <USER2> PLC/DCS and other control systems gear.

You need to have a particular background as well as the IT skills though, there are subtle but significant differences in attitude and implementation in the way things are done, esp where functional safety is involved.

</comment><comment><USER5> No degree and doing well in infosec here.

First, there are a lot of people that know security related subjects well but have never worked in infosec. Those people in my experience give bad advice.

Second,what they keep saying about high demand in infosec is true. But like another commenter said there's the typical catch 22.

My advice:

I have known people from a non-IT background do well but you still need to get your foot in the door by doing intetnships or some other work. Another approach would be socializing at local meetups or cons (which I know little about).

Infosec is very broad. It would benefit you greatly to have done some other IT work prior to infosec. I've met a lot of peopoe who can't code, don't have certs,don't keep up with current security news,can't even name a single malware family to save their lives and they do well in infosec. The thing is you can do complaince,architecture,incident response,vulnerability management,penetration testing,security engineering and my favorite: a generic infosec analyst.

A lot depends on the size,maturity and architecture of the infosec team. I have been at a company with dedicated teams for red teaming,IR,SOC,security engineering,etc... With total of >50 infosec staff. And i have been in a team where the whole infosec team is 3-5 people. The smaller the team,the more they need prior infosec experience and the broader your skillset needs to be. On larger teams, they try to diversify skillset so if you bring something valuable to the team they don't care all that much about your certs and experience so long as they can be sure they don't have to train you extemely basic things. In a big team you are siloed which means you can either be complacent or grow deeper into the area of infosec you picked.

Aim for very large companies first. But before that be good enough at everything. Code something and have an ok github,get certs to show you're serious,know enough networking,sysadmin(especially windows) ,etc...and keep up with latest security news and chatter (twitter!). All that is to help you get an interview. You gotta be flexible with work conditions for entry level work.

Exploit/vulnerability research,bug hunting,pentesting and malware analysis get a lot of press. Before I got into infosec I didn't know about the wide range of jobs in infosec. People even tried to convince me I needed to be great at mathematics,crypto,reverse engineering or whatever.

A lot of people give advice with a survivor-bias mentality. In reality if you have passion and specific areas of interest within infosec it's only a matter finding an entry point that will help you get there.

If vuln management (boring) intetests you for example offensive security certs and a solid IT experience will help. If incident response interests you,finding a SOC job which will require basic IT/security certs and breadth (you need to understand context behind a wide range of security events) is natural. SOC or other entry jobs can also benefit you as a starting point for security engineering or red teaming.

For certs, a lot of people would tell you OSCP (and it is great) but in practice Security+,CySA+ and SANS GIAC entry level certs go very far and teach you a lot of things that are out of scope for OSCP.

For entering infosec, your provable ability to understand formal infosec methodologies and various IT processes,network protocols and applications function is what you need to showcase in addition to "passion".

All that said,study MITRE's ATT&CK framework [1] and use it to develop your vocabulary and see what real life techniques and tactics are seen. Regardless of which area of infosec you pick having an accurate understanding of realistic threats is foundational.

I have also heard linkedin social networking helping a few colleagues. YMMV.

I hope that helped,be happy to answer questions.

[1] [https://attack.mitre.org/](https://attack.mitre.org/)</comment>


Lego hack: Functional sniper rifle (video) - <AUTHOR> http://www.youtube.com/watch?v=H23HDHRVjpA

<comment><USER2> It's sure cool, but I wouldn't call it a hack... after all, he built something out of parts that were _designed_ to be built into something. Maybe not a functional sniper rifle, specifically, but _something_. To me the word hack implies that, apart from making that Something work, you do it using unconventional or surprising tools or techniques.

<comment><USER3> I was going to write an indignant reply about how this is surely the coolest thing I have ever seen built with legos. I was also going to mention that I've never seen anything like it built with legos. It occurred to me, however, that this might be my fault. A cursory search on YouTube validated my suspicion - it is my fault; several other people have built "working" firearm replicas, including longarms.

Indeed, perhaps this is too commonplace to considered a hack... but, after ten minutes of browsing around YouTube, it IS the best implementation I've seen; kudos to the builder for that. (That wicked crossbow is a close runner up though.)

<comment><USER3> No, I take it back. Legos were surely never intended for this use case.</comment></comment></comment>


Ask HN: Recommendations for Good TUI Libraries (Text User Interface)? - <AUTHOR> Anyone seen anything exciting/interesting in the field of TUI's?  Any language, as long as the library is interesting with good examples or screen shots/videos.<p>For those unfamiliar, a TUI is a text mode user interface library, for building user interfaces within character oriented plain text consoles. <comment><USER3> In the node ecosystem there are a few interesting ones.

[https://github.com/vadimdemedes/ink](https://github.com/vadimdemedes/ink) for writing TUIs with react. Here's a project I wrote using that: [https://github.com/zephraph/solitaire](https://github.com/zephraph/solitaire). It's not as powerful as ncurses, but it works rather well.

If you want something more on par with ncurses try [https://github.com/cronvel/terminal-kit](https://github.com/cronvel/terminal- kit)

<comment><AUTHOR> [https://github.com/cronvel/terminal-kit](https://github.com/cronvel/terminal- kit)

This is the one that most catches my attention.

Currently actively maintained plus it has something analagous to a document object model [https://github.com/cronvel/terminal- kit/blob/master/doc/docu...](https://github.com/cronvel/terminal- kit/blob/master/doc/document-model.md#top)

Also Ink is incredibly interesting as it enables ReactJS for creating TUI apps - mind bending!

[https://github.com/vadimdemedes/ink](https://github.com/vadimdemedes/ink)

I can imagine the things above being combined with a sandbox plus Fabrice Bellard's QuickJS [https://bellard.org/quickjs/](https://bellard.org/quickjs/) into a new type of application ..... the "pure text mode browser".

A "pure text mode browser" would not be designed to render ordinary HTML web pages, but would instead be a minimal browser designed only for text mode.

<comment><USER4> So, lynx? [https://en.wikipedia.org/wiki/Lynx_(web_browser)](https://en.wikipedia.org/wiki/Lynx_\(web_browser\))

<comment><AUTHOR> No, I meant a text mode browser that does not use HTML. Lynx, and all the existing text mode browsers are intended to render HTML as text.

This would be a browser that targets only text mode user interfaces. So pages would need to be written specifically to be rendered in such an environment.

Why? Because text mode browsers are really trying to do the impossible - <USER2> render modern web pages as text is essentially not doable in all cases. Instead make a browser for the text mode use case specifically designed for the medium.

A mashup of a web browser and ANSI/VT100/teletext. It would need a sandbox and a JavaScript interpreter.

Maybe call it the "Trowser".

<comment><USER5> I do not really understand the need/want/wish for something like this. There is no real _textmode_ on contemporary hardware anymore. That is all emulated to get the _legacy_ during startup going, until _some_ graphical environment takes over. Keyword is _framebuffer_ here.

</comment></comment></comment></comment></comment><comment><USER6> Turbo Vision, this is TUI perfection.

[https://en.wikipedia.org/wiki/Turbo_Vision](https://en.wikipedia.org/wiki/Turbo_Vision)

<comment><USER7> I recently added Unicode support into Turbo Vision: [https://github.com/magiblot/tvision](https://github.com/magiblot/tvision)

<comment><USER8> Wow! What an awesome and pleasant surprise! I have such fond memories of using Borland IDEs from that era and some of the applications built with TV. Thank you for making it modernized and available on Linux!

</comment></comment></comment><comment><AUTHOR> This looks pretty impressive:

Terminal.Gui - Terminal GUI toolkit for .NET

[https://github.com/migueldeicaza/gui.cs](https://github.com/migueldeicaza/gui.cs)

Written by Miguel de Icaza.

Hanselman wrote on it here:

[https://www.hanselman.com/blog/Its2020AndItIsTimeForTextMode...](https://www.hanselman.com/blog/Its2020AndItIsTimeForTextModeWithGuics.aspx)

and here:

[https://www.hanselman.com/blog/DotnetDependsIsAGreatTextMode...](https://www.hanselman.com/blog/DotnetDependsIsAGreatTextModeDevelopmentUtilityMadeWithGuics.aspx)

<comment><USER9> I'm curious about what other people think about this one. I tried the demo in a few terminals a couple months ago and it didn't work well in any of them.

<comment><USER10> It is ok, but I would not recommend it. It got off to a great start but I ran into problems/limitations with some fairly basic stuff.

I can't recall exactly what my issue was with it however, it has been a few months.

</comment></comment></comment><comment><USER11> [https://github.com/fdehau/tui-rs](https://github.com/fdehau/tui-rs)

Liked using this. I wrote a TUI for my company's api with it. I dont use the website much any more.

</comment><comment><USER12> My favorite is the python-based Urwid library at [http://www.urwid.org](http://www.urwid.org). It was a little hard for me to wrap my head around it at first, but once you get it, you can write TUI applications without a lot of code. Easy to install, many examples to work from.

<comment><USER13> How popular is it in the Python space? I loved the large text widget and would love to contribute with a font using the Teletext 2x3 mosaics that got into Unicode 13 (which are fully supported in VTE)

<comment><USER14> You can check out download stats stats for Urwid on PyPI Stats [1], that should give you a decent idea of its popularity.

Also check out the list of applications built with Urwid [2]. Probably the two most popular applications that use Urwid are bpython [3] (an alternative Python REPL that is really nice), and PUDB [4] (a nice Python debugger that is reminiscent of Borland's Turbo Pascal). I use bpython all the time, it's a lifesaver, and I occasionally fire up PUDB when I am really stuck on something.

I've used Urwid in a couple of projects (most notably Zeitzono [5]), it's nice in that it's fairly high level and gives you a number of helpful widgets to work with. Starting with it from scratch is a little daunting, so you should look at existing projects to see how they are using the library. Also, I believe Urwid development has slowed down somewhat in the last few years (although other folks maybe stepping up to take over from the original author, I haven't follow up on this in a while).

Also definitely take a look at Python Prompt Toolkit [6]. They started off as library for writing line-oriented command interpreters, but now can also be used for building full screen applications. I've not yet built an application using it, but it looks really good and is actively developed. ptpython [7] is a REPL built using this library and gives bpython a run for its money.

[1] [https://pypistats.org/packages/urwid](https://pypistats.org/packages/urwid)

[2] [https://github.com/urwid/urwid/wiki/Application- list](https://github.com/urwid/urwid/wiki/Application-list)

[3] [https://bpython-interpreter.org/](https://bpython-interpreter.org/)

[4] [https://github.com/inducer/pudb](https://github.com/inducer/pudb)

[5] [https://zeitzono.org/](https://zeitzono.org/)

[6] [https://github.com/prompt-toolkit/python-prompt- toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit)

[7] [https://github.com/prompt-toolkit/ptpython](https://github.com/prompt- toolkit/ptpython)

<comment><USER13> Thank you. I completely forgot about 1.

I realize, with abit of shame, urwid is thousands of times more popular than my own pip-chill tool.

</comment></comment></comment></comment><comment><USER15> Python includes bindings for curses and includes some pretty good documentation: [https://docs.python.org/3/howto/curses.html#curses- howto](https://docs.python.org/3/howto/curses.html#curses-howto)

</comment><comment><USER16> You can't go wrong with Ncurses. Ancient, bindings to literally every language, stable and works everywhere including the kitchen sink.

The terminal is not meant to be existing. You are emulating 80 year old technology at the base of it.

<comment><AUTHOR> When I saw this message I was reminded of a post I read recently:

[http://xn--rpa.cc/irl/term.html](http://xn--rpa.cc/irl/term.html)

Here's how it starts:

"so here's a short tutorial on ansi escape codes and terminal control, because you philistines won't stop using ncurses and oh my god WHY ARE WE STILL USING NCURSES IT IS THE TWENTY FIRST FUCKING CENTURY"

</comment></comment><comment><USER17> I wrote a Python library to draw graphics in a console using Braille dots, with a fallback mode to ASCII:

[https://github.com/dheera/python- termgraphics](https://github.com/dheera/python-termgraphics)

I used it in ROSshow, which visualizes robot sensor data inside a terminal:

[https://github.com/dheera/rosshow](https://github.com/dheera/rosshow)

<comment><USER13> Teletext (also TRS-80) 2x3 mosaics got into Unicode 13. I hope Kaypro's 2x4 mosaics get into version 14.

</comment></comment><comment><USER18> Also take a look at Repl.it's "CLUI"[0] which they released fairly recently

[0] [https://blog.repl.it/clui](https://blog.repl.it/clui)

</comment><comment><USER19> I like termbox. I'm the Ada binding maintainer. A quick search and you can find many other language bindings. [https://github.com/bmsauer/termbox- ada](https://github.com/bmsauer/termbox-ada)

<comment><USER20> Looks like the project is no longer being maintained (as of two weeks ago?), so it kind of pours water on that idea (unless you or someone else is going to take over the main library maintainer work).

<comment><USER19> There is someone that is picking up the work. They emailed me a few weeks ago about how they are starting a new termbox org on Github, but I haven't checked into its progress yet.

Either way, it is an extremely minimalistic library that has well documented code, so it's very possible to tailor it to whatever needs you have.

</comment></comment></comment><comment><USER21> Oberon. :-)

It's the granddaddy of all of them.

Overview: [http://ignorethecode.net/blog/2009/04/22/oberon/](http://ignorethecode.net/blog/2009/04/22/oberon/)

Academic paper (but highly accessible): [https://pdfs.semanticscholar.org/d48b/ecdaf5c3d962e2778f804e...](https://pdfs.semanticscholar.org/d48b/ecdaf5c3d962e2778f804e8c64d292de408b.pdf)

Yes, it's an OS as well as a language although a tiny one that runs under MacOS, Linux and Windows if you want. So does the bare language of the same name. (Think of it as Pascal 3.)

The inspiration behind Plan 9's Acme.

</comment><comment> aaron-santos [https://github.com/chjj/blessed](https://github.com/chjj/blessed) is a curses-like library with a high level terminal interface API for node.js. It also has impressive demos.

<comment><USER22> Now that is a clever project name

<comment><USER23> Check out blessings - [https://news.ycombinator.com/item?id=24423590](https://news.ycombinator.com/item?id=24423590)

</comment></comment></comment><comment><USER24> Don't know why, but I have imagined a CSS framework for text only.

Edit: found one [https://github.com/vinibiavatti1/TuiCss](https://github.com/vinibiavatti1/TuiCss)

</comment><comment><USER25> [http://hackage.haskell.org/package/brick](http://hackage.haskell.org/package/brick) is popular in the Haskell world.

<comment><USER26> Can confirm that it's awesome for getting something small and useful done quickly.

I was a beginner Haskell programmer when I first used brick, and it's great exposure to building a real world application (something a lot of Haskell beginners crave learning). Docs are very good too.

Code for anyone that might find it useful: [https://github.com/2mol/pboy](https://github.com/2mol/pboy)

edit: forgot to mention that it's very "Elm architecture", so if you like modern frontend development, then you might feel right at home in that paradigm.

</comment></comment><comment><USER27> For anyone who want to do it without a library it's actually really easy to get started with

      #include <stdio.h>
      #include <termios.h>
      #include <unistd.h>

and follow the beginning chapters of the great "Build Your Own Text Editor" tutorial[0].

[0] [https://viewsourcecode.org/snaptoken/kilo/02.enteringRawMode...](https://viewsourcecode.org/snaptoken/kilo/02.enteringRawMode.html)

</comment><comment><USER28> Check out the Interactive Fiction competition, it's text-based video games.

[https://ifcomp.org/comp/2019](https://ifcomp.org/comp/2019)

Two libraries for writing these games:

[https://en.wikipedia.org/wiki/Inform](https://en.wikipedia.org/wiki/Inform)

[https://en.wikipedia.org/wiki/TADS](https://en.wikipedia.org/wiki/TADS)

<comment><USER29> If you want a Terminal Nintendo Emulator check out [https://justine.storage.googleapis.com/nesemu1.html](https://justine.storage.googleapis.com/nesemu1.html)

</comment></comment><comment><USER30> TView is popular and active in the Golang world

[https://github.com/rivo/tview](https://github.com/rivo/tview)

<comment><USER31> I prefer cview, it has added many fixes and PRs not in tview.

[https://gitlab.com/tslocum/cview](https://gitlab.com/tslocum/cview)

</comment></comment><comment><USER32> You could check out AsciiMatics. [https://github.com/peterbrittain/asciimatics](https://github.com/peterbrittain/asciimatics)

Here are some examples how it can look in action: [https://github.com/peterbrittain/asciimatics/wiki](https://github.com/peterbrittain/asciimatics/wiki)

</comment><comment><USER33> For nim i like this one: [https://github.com/johnnovak/illwill](https://github.com/johnnovak/illwill)

It is immediate mode so you render the entire UI every tick, though it is smart enough to not actually redraw things that didn't change.

</comment><comment><USER34> For small CLI tools, I find the following nodejs packages pretty helpful:

\- [ _commanderjs_ ] lets you easily build ergonomic CLI apps (wires up --help and usage descriptions) --- [https://github.com/tj/commander.js/](https://github.com/tj/commander.js/)

\- [ _chalk_ ] colors in the terminal --- [https://github.com/chalk/chalk](https://github.com/chalk/chalk)

\- [ _figlet_ ] big splash text --- [https://www.npmjs.com/package/figlet](https://www.npmjs.com/package/figlet)

</comment><comment><USER35> I like [https://github.com/bpython/curtsies](https://github.com/bpython/curtsies) by @ballingt. It was used to implement bpython, one of the best python REPLs imo.

</comment><comment><USER36> python prompt toolkit [0] and click [1] are used to create tools like pgcli [2], which is utterly wonderful.

[0]: [https://github.com/prompt-toolkit/python-prompt- toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit)

[1]: [https://click.palletsprojects.com/en/7.x/](https://click.palletsprojects.com/en/7.x/)

[2]: [https://www.pgcli.com/](https://www.pgcli.com/)

</comment><comment><USER37> notcurses - [https://github.com/dankamongmen/notcurses](https://github.com/dankamongmen/notcurses)

</comment><comment><USER38> I've been looking for something similar that either has a markup language associated with it or is easy to add one to. I wish to prototype a GUI markup standard with it as a proof of concept so that we can have GUI-over-HTTP instead of live with the ever failing & bloated HTML/JS/DOM/CSS GUI emulators. So far, Terminal.Gui looks interesting, but I don't know if it's cross- platform yet.

</comment><comment><USER23> I blogged about blessings here, also briefly comparing one of its capabilities - saving and restoring terminal state - to that of C's curses:

Blessings, curses-like Python library:

[https://jugad2.blogspot.com/2012/08/blessings-curses-like- py...](https://jugad2.blogspot.com/2012/08/blessings-curses-like-python- library.html?m=0)

</comment><comment><USER39> I've often thought I'd like to spend some days writing ncurses interfaces in Guile.

[http://www.gnu.org/software/guile- ncurses/](http://www.gnu.org/software/guile-ncurses/)

The documentation always inspired confidence. Sadly haven't written anything more than hello world.

</comment><comment><USER40> I haven't used it but since it hasn't been mentioned, I recalled that Visidata's rendering library vdtui.py could be used for these tasks. They say so in their readme

[https://github.com/saulpw/visidata](https://github.com/saulpw/visidata)

</comment><comment><USER41> I'm not really sure any TUI I've ever seen could really be classified as "good" but the one I like best is probably urwid ([http://urwid.org/](http://urwid.org/)).

</comment><comment><USER42> I'd to try out [https://github.com/ggerganov/imtui](https://github.com/ggerganov/imtui) Looks like a lot of fun.

</comment><comment><USER43> aerc[1]'s design is the main reason why I use it over mutt, even though mutt has more features. No idea what they use behind the scenes for their TUI, but you could take a look at their source code[2].

[1] [https://aerc-mail.org/](https://aerc-mail.org/)

[2] [https://git.sr.ht/~sircmpwn/aerc](https://git.sr.ht/~sircmpwn/aerc)

<comment><USER44> It looks like Tcell probably, assuming I've understood what Tcell does correctly.

[https://github.com/gdamore/tcell/](https://github.com/gdamore/tcell/)</comment></comment>


Suits Seek to Force Lyft and Uber to Treat Drivers as Employees - <AUTHOR> http://www.buzzfeed.com/johanabhuiyan/suits-seek-to-force-lyft-and-uber-to-treat-drivers-as-employ

<comment><USER2> And a win for the "drivers" would be a win for the taxi cartel.</comment>


Study showing decline in dog fertility may have human implications - <AUTHOR> https://www.theguardian.com/science/2016/aug/09/study-showing-decline-in-dog-fertility-may-have-human-implications <comment><AUTHOR> Link to the University of Nottingham article (I should have submitted that one in the first place):

"Study demonstrates rapid decline in male dog fertility, with potential link to environmental contaminants"

[http://www.nottingham.ac.uk/news/pressreleases/2016/august/s...](http://www.nottingham.ac.uk/news/pressreleases/2016/august/study- demonstrates-rapid-decline-in-male-dog-fertility-with-potential-link-to- environmental-contaminants.aspx)

Link to the publication:

[http://www.nature.com/articles/srep31281](http://www.nature.com/articles/srep31281)</comment>


What interactives can do that articles can't (2018) - <AUTHOR> https://ejb.github.io/2018/06/03/interactives.html <comment><USER2> Here's my favorite recent example:

[https://www.pollbludger.net/2017/11/15/sex-marriage- survey-6...](https://www.pollbludger.net/2017/11/15/sex-marriage- survey-61-6-yes-38-4-no/)

One thing I like is that it's so simple. There's a scatter plot of Australian electorates. One axis is how they voted in the same-sex marriage plebiscite, and you choose the other: average income, percentage over 60 years old, how many speak a language other than English, etc.

As you flick through the options, you get one amorphous blob after another. Then you choose "percentage of atheists", and you see the kind of straight line that usually comes from a physics experiment.

<comment><USER3> I'll be honest -- this graph gives me a headache to interpret -- I wish there was at least a single sentence elaboration of what the dropdown values indicate.

For example, selecting "Secular/No Religion" I see that Sydney scored about 83 on "Yes vote for SSM" (meaning 83% of those voting in Sydney voted in favor, right?). It scored about 44 on "Selected indicator" (in this case "secular", right?).

So -- 44% of Sydney self-reports as "Secular" \-- right?

</comment></comment><comment><USER4> Here's a great example, popular on HN just a couple of days ago:

[https://www.meltingasphalt.com/interactive/going- critical/](https://www.meltingasphalt.com/interactive/going-critical/)</comment>


People don't care how your product is built - <AUTHOR> http://dopeboy.github.io/people-dont-care/ <comment><USER2> They may not care about the particular technology you use, but they do care if your product does not work very well. They may not know one framework or library or language from another, but they do know what crap is.</comment>


System Internals of Windows; OS X; Linux; ARM - <AUTHOR> https://github.com/rmusser01/Infosec_Reference/blob/master/Draft/sysinternals.md <comment><USER2> Looks like a good resource. Can someone more knowledgeable comment on the quality of it?

<comment><USER3> it is a draft work in progress. its really great that there are people willing to take the time following breadcrumbs and compiling them into a reference such as this.

</comment></comment><comment><USER4> Wow, this is pretty awesome, thanks.</comment>


405 petabytes of storage in a modern supercomputer, most of it in tape drives - <AUTHOR> http://arstechnica.com/information-technology/2012/05/tape-lives-supercomputer-to-be-built-with-380pb-of-tape-storage/

<comment><USER2> I'm interested to see how this stacks up against the Backblaze Pod:

[http://blog.backblaze.com/2011/07/20/petabytes-on-a- budget-v...](http://blog.backblaze.com/2011/07/20/petabytes-on-a- budget-v2-0revealing-more-secrets/)

Edit: You'd have to build about 2882 Pods to reach 380 petabytes, but this cluster will be using _380,000_ opertons, which implies about 1 terabyte of tape per CPU. For the Pods: _The newest cabinets squeeze one petabyte into three-quarters of a single cabinet for $56,696._</comment>