Hacker Newsnew | past | comments | ask | show | jobs | submit | alexforster's commentslogin

DDG is just repackaged Bing. Always has been. I remember looking into them when I was ready to job-hop many years ago, and they asked for dedication to their search engine as their foremost requirement for employment. It's the "drop-shipping" equivalent of search engines.


hope kagi takes ddg place in terms of adoption. never really liked ddg even though i always care about privacy.


I really don't get that sentiment. Currently Kagi is just as dependent on Google as DuckDuckGo is on Bing. That might only be temporary of course and Kagi does seem to be working on a search engine of their own.

Rather than wanting Kagi to take the place of DuckDuckGo, it would would be better if Kagi could take users from Google, and then when ready, drop Google as a search provider.


DDG used to be the HN darling and you would get downvoted for saying anything negative or even insinuating that they are relying on Bing. Now the spot has been overtaken by Kagi but it looks like it suffers from the same problems. The counterargument that they have their own index as well is the same that was used for DDG, when the reality was that it was only used for widgets and other fluff. Let's see how it plays out for Kagi.


Kagi mixes google, bing, some non-profit small-web SE, and their own index.


I don't think they use Bing, but yes, Google, Marginalia, Yandex, Brave and others. I still fail to see how that's different to DuckDuckGo, who also run their own crawler. It's really weird that people are almost hating on DuckDuckGo for how they run their search engine, while applauding Kagi, for doing the same, but with a different business model.


Only if they changed that (which they might have as part of their cost-optimization). They said they mixed bing and google results back then.


I also assume that Kagi uses some shady residential IPs proxies and similar tricks to scrap Google while DDG has access to the Bing API.


You can buy access to the Google Search API, which is what I assume Kagi does. Building your product on being able to circumvent some Google restrictions seems like a bad business move, if you can buy the same service for a reasonable price.


Where can I buy it?


https://developers.google.com/custom-search

It's been available for ages. We used it to power the company internal search for a large enterprise I worked at 17 or 18 years ago.


Yes this isn’t an API to make a generic search engine.


Kagi should hire the Marginalia author.


We already include Marginalia results in Kagi [1]

https://help.kagi.com/kagi/search-details/search-sources.htm...


I'm constantly DM'd at work about how I'm able to create the "cool drawings" in my blog/wiki posts, and I enthusiastically point to excalidraw.com.

I have a background in vector illustration, which is all about creating subpixel-perfect designs. I'm also a bit of a perfectionist, which I think a lot of people here can relate to. I mention this because the reason Excalidraw really works for me is that it frees me from worrying about design. When you literally can't create something that looks "perfect", you're freed up to just sketch your idea without worrying about the visual representation.


That post was fascinating. You are a model example of what progressive prison reform can accomplish and your story should be getting major press coverage if it hasn't already.


The Maine model of corrections indeed gets a fair amount of coverage in the "space" of criminal justice reform, as they are essentially carving the path. But outside that bubble (linkedin seems to be where a lot of that space is focused, but that could totally just be my perception as it's the only social media I'm allowed :P), it doesn't appear that many people really care.


I don't think it's responsible to replace http/1.1 with either of these protocols. They both seem like complex beasts with poorly understood corner cases and little consideration for the abuse potential.


My feeling is they both suffer “version-2-isms”, ie having added many nice-to-haves that are complex. That said, I think QUIC is a much, much bigger step. We are literally adding congestion and flow control to user space, as well as packet-level routing. This has been done before, but mostly for bespoke purposes (like UDT - or with per-OS batching, kernel extensions or at least kernel tuning). Now, it’s supposed to be general purpose, across hardware, platforms and languages.

Personally I think either QUIC makes it into kernels, or it will have a loooong time ahead of it with language- and vectorized/batched IO in the OS (maybe even down to the NICs?) catching up. Even the more mature implementations struggle compared with TCP today, for things like high bandwidth on consumer hardware. Not to mention CPU overhead and the battery drain that comes with it. (At least from my own high-bandwidth experiments)

Yes, I know a large part of web is already http3. But remember that http is used outside of browsers and data centers. I don’t know enough to back any specific proposals, but to me it sounds a lot easier to fix the tcp handshake, open 2-3 conns for the HOL-blocking issue, than to rearchitect the entire stack (and add new features) under UDP. I’m saying this as someone who is still very bullish and excited about QUIC.


> In fact, there are so many patent farms disguised as businesses I challenge you to sit, think of something, and search for a patent for it.

Nice try, Opposing Counsel.


Heh.

Don't read patents.


I agree, at least for my own mental health.

For the rest of the universe, if you read patents then you are liable for willful infringement instead of accidental infringement, the penalties for willful infringement are much higher. This is why you should never read through patents without a specific purpose in mind if you have any plans of filing your own.


> It’s a MikroTik running RouterOS

https://google.com/search?q=mikrotik+botnet

These things are the absolute scourge of the internet.


They're a powerful tool that lets you shopt off your foot and half your brains with the same bullet. However, this my router isn't compromised. MikroTik routers can easily be misconfigured to be insecure or misbehave. It's a Cisco clone, so that is the product you're buying.

I don't recommend them to anyone who doesn't enjoy and are familiar with the lower-level intricacies of network operations.


Give several hundred thousand dollars to ICANN.


You may also need a time machine. I don't think they're taking applications right now.


May I know if you are speaking from experience/knowledge?

Thinking to have root domain for a holding company, wondering the cost.


This is easily searchable, so... I doubt you're seriously looking, but...

> The evaluation fee is US$185,000. Applicants will be required to pay a US$5,000 deposit fee per requested application slot when registering.

https://newgtlds.icann.org/en/applicants/global-support/faqs...


I accidentally ended up running one of the new gTLD registries for a while. It’s a lot more than $185,000 - that’s just the ICANN application fee. It’s all the other stuff that surrounds running a registry that is expensive. Might be cheaper if it’s “private” registry but you’d probably be looking at as least as much again on top.


thank you. Maybe you can help to narrow down the definition "a lot more" to some rough approximation so I can sense the number?


We spent well over a million dollars on the various bits and pieces that were required to get set up - this was legals, consultancy fees, and all the paperwork and so on necessary to comply with the ICANN registry agreement terms, as well as our registry back end infrastructure provider - but that was for a registry selling domains to end users. That included putting a substantial sum in escrow for “registry continuity” - so if your registry goes bankrupt ICANN can ensure the registrants of domains are not left high and dry.

A big part of my role was to try and moderate costs as much as possible because the registry owners had been talked into the whole project by a consultant who had convinced them that their particular registry was going to make them $100m a year in registrations and renewals.

My job quickly became persuading them that spending $100k on some crazy thing was not going to achieve anything and trying to stop cash being burnt before they realised the whole thing was a crazy pipe dream.

I don’t recall the terms for private registries, but I’m pretty sure the detail will be on the ICANN site somewhere. Searching for “private registry operating agreement” or something similar might surface the relevant documents.


Thank you for the response. Quite interesting.


CBS Austin is a Sinclair affiliate.


I'm not saying I'm surprised. I'm just noting the, uh, lack of a full picture of what might be behind the "hottest May in history."

Also, for anyone who's not familiar with Sinclair, they're essentially the Fox News of local news broadcasts. https://www.vox.com/2018/4/3/17180020/sinclair-broadcast-gro...


This is extremely dangerous to our democracy.

(in case someone missed this, it's incredible: https://www.youtube.com/watch?v=ZggCipbiHwE)


This is only if you have _no_ idea how to use very basic open-source tools to wreak havoc via some open proxies. The real cost of launching small-scale attacks like this is $5/month on your favorite VPS provider.


For anyone reading this: Alex knows about the attack and has my permission to talk about it publicly.


Open proxies? I heard about this more than a decade ago, but why would anybody in 2022 run an open proxy? Or are these open proxies unintentional, i.e. misconfigured?


Some are misconfigured, but others are just honeypots to sniff out some traffic. https://www.youtube.com/watch?v=0QT4YJn7oVI


Many of them are unintentional: a device sitting on the open internet has some vulnerability and gets exploited. Bad guy sets up a proxy on the device and uses it to click a bunch of ads using bots, or crawl Google results, or launch attacks, etc. Or, as mentioned below, they could simply be the result of misconfiguration.

Some of them are very intentional: https://www.torproject.org/


Misconfigure your squid/privoxy and you’ll probably end up on an open proxy list within hours. Been there.


I imagine your VPS provider will gladly give your info to law enforcement whereas a DDoS company might not.


Unfortunately, this type of abuse is essentially only acted on if you either (a) cause some kind of problem for ops at the VPS company, or (b) the victim tells on you. Even then, the absolute worst thing that will happen to you is your account will be closed. There is just no way on the modern internet to investigate/prosecute these kinds of things. That's why one of our primary goals with the free Cloudflare plan is to invert the problem: make DDoS go away by making it it free to mitigate.


Isn't the problem to find enough of these open proxies to do meaningful damage?


Author here – you are correct, I tried to golf a relatively long script down to one line, and I failed :) The post has been updated.


If the update is:

set -e -u -o pipefail

(dos-make-addr-conf | tee config.toml) && dosctr set template_vars config.toml

well....

`tee config.toml` will still produce a empty config.toml

(set -e - u -o pipefail;false | tee config.toml) && cat config.toml

But you can use the '>' operator, that will create the file only if the command runs successful:

dos-make-addr-conf > config.toml && dosctr set template_vars config.toml


> But you can use the '>' operator, that will create the file only if the command runs successful:

It will still create the file.

Run this in bash, zsh or fish:

    false > falsefile
It will create an empty file called "falsefile". This is because the shell opens the file before the program runs.

What fixes it in your script is the `&&`. That causes the `dosctr` to only be run if the `dos-make-addr-conf` succeeded.


You are right. My bad! Thanks.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: