skysight-inc/HackerNews huggingface dataset:
Actually, I'm in the US and I also get this 404. It's been a while since this add-on has been made, so that the link is broken isn't too surprising.
One possible argument would be that having a false sense of security is worse than no security at all.
No need to downvote this reply. The sarcasm was an effective and appropriate way to communicate a serious point.
I didn't say the actual password. The page wasn't very forthcoming on all the details, but a 2FAT is typically just a very short, temporary password.
This is really cool!

WebGl is so difficult, UI-wise, on a tablet. It's not your fault, but I wish Apple would translate some of the desktop metaphors (scroll/pan/zoom) for this context.
Ugh..hate the 'happy yet melodramatic' music background in the video.
Yup. I ended up ditching front end frameworks and just using Atom to build a desktop application. Atom has so many packages already it makes it just a matter of figuring out how to put everythung together,
Would love to see something like this for Meteor.js as well
Oh? I was hoping that that was one intended use for this. Would such an alert violate the typical terms of an "NSL"?
Am I the only person out there that doesn't display images in email by default? I can't tell you the number of emails I've gotten--from companies I'm a big fan of and I've agreed to receive mail from--with enticing subject lines that contain no content. Just images.

Case in point is REI. A couple weeks ago I spent several hundred bucks on camping gear from one of their competitors and found out later they'd had an enticing discount linked in one of their image-only emails. I guess we both lost out.
I've been getting regular emails from Facebook saying "sorry you've been having trouble logging in to your account". I haven't been trying to login to my account, I deactivated it years ago. Don't think there is anything I can do about it.
I was going to say the opposite. It's awesome that we can spin up boxes and host our own servers, and on top of that, learn from our mistakes. I doubt there's a person here who's never been host to malware, spam or some other malady as a result of some of the experimentation they've done as they learned more about computer systems.
Perhaps not in commercial space, but given liability structures in private and small aircraft, the situation for quite some decades has been that innovative design has largely emerged in kit aircraft. I recall discussion of this when John Denver died in the crash of his experimental airplane in 1997.
Well to be honest on Kindle I've seen the trend of writing articles as books and charging 99 cents to $2.99 for them and then giving them away for free on KDP days when they get the free promotion.

Stuff that would have been a blog post on how to do something that takes up about 15 to 30 pages of typed text that could have been several blog entries now makes up an article as a book.

I became disabled in 2003, and took up writing and wrote a book and saved it to floppy disk. After I couldn't get it published I self-published it on Amazon Kindle around 2010 and sold about 50,000 copies mostly on KDP days when I gave it away for free. It is a short story that I could rewrite into a full novel or trilogy or something if I had help with the editing and grammar.

You have people getting into writing books for the same reason you got people getting into programming, to earn money in a bad economy. Not everyone is good at it, and it takes time to develop the talent and gain the experience to get good at both.

Digital books have stopped evolving because too many people got into it and have written low quality books.

You have the same problem with "Flipping" where people buy things from Goodwill and Thrift Stores and sell them on eBay and now Goodwill and Thrift Stores have increased their prices so they can sell things for more for the people who are flipping items from their stores. As a result the poor now have to pay more for items, almost retail price in some cases.

What they have in common is that people are trying to earn an income from them. As more people lose their jobs or don't earn enough they will try to get into programming, ebook writing, flipping, etc to earn more money. As you get more people most of them are low quality and don't know what they are doing yet. The ones that make the money are the ones that teach them how to do these things or sell ebooks on how to do these things.
People are biased about Facebook for various reasons, including $privacy-issue-of-the-day; no matter what they do they get to be the villan.

That is, unless we're talking about their newest PHP optimizer or ad toolkit.
This video suggests the cranes are automated as well:

https://www.youtube.com/watch?v=WxXZQ7emHC0
> whether a beer had been bottled in a green bottle or a brown one

Most people should be capable of this with a little training. Green-bottled beer becomes light-struck very quickly, and was especially common before beer stores and beer bars began paying attention to the issue.

> the use of oak in making wine that talks a bit about the converse

The converse of resting in steel or glass is not oak, but not resting the spirit at all.
The components look nice but they're not really native like I had initially thought. Are these necessarily better or different than existing styles that reproduce these components?

Anyway, I would love to see these come in native form like reactive-native.
Npm 3 now does some dependency tree pruning by flattening the node_modules folder as much as possible too which addresses that size issue.
Lots of people don't like that engineers are well compensated in the tech industry also. Look at all the company shuttle protests in San Francisco.
I received the alert around Dec 2012, big red bar at the top of my screen (which interestingly enough caused a reflected XSS vulnerability in gmail) just randomly popped up as I was eating dinner a few days before christmas.

Didn't really think much of it, account logs showed no access from outside of my own IP addresses and analysing all the emails I had received in the past few months found nothing out of place. Leads me to believe (Well, hope.) that the attack was detected and blocked by google.

About 8 months (had to double check that, since it sure felt like less) later I flew over to defcon and the FBI searched my hotel room, seizing my throwaway phone and laptop. On my way out of the country I was again stopped at JFK by a bunch of agents holding a grand jury subpoena.

Ended up being asked a bunch of rather silly questions regarding some ORNL hack(and others) that I couldn't really answer.

Wasn't arrested, got to spend an extra day in the states and flew out.
Shocking Emails Expose Bush and Blair Plotting Iraq War a Year Before Invasion
It's not an appeal to fear. It's an appeal to testing and verification.
First, I was out of line in my edit. It's not for me to say how you should post on HN, so I apologize. I'll stick to the addressing the content of what you wrote.

The difference in our viewpoints seems to be that you have an "adversarial" understanding of the political system, where different interest groups try to get the best for themselves. On the other hand, I think that politics is mostly driven by ideology, not self-interest. If I can state an ideal set of laws, that should be sufficient and I don't need to concern myself with how special interest groups might try to manipulate the set of laws.

I also think you conflate self-interest with what is right/wrong when you say " If enough people like strong worker protection laws, well, that's democracy, why shouldn't that stuff get encoded into law?". Do they like it because they think it's right, or because it's good for them? That's an important difference.

On the specifics, I mostly believe in the free market. I don't consider the free market to be anti-worker (redistribution through taxation/welfare handles that aspect) or arbitrary. Classical economics shows that the free market should be considered the default position. I also support limited rights for unions, e.g. I don't think an employer should be able to fire you for joining a union, because the employers control of how people communicate in the workplace could be considered an unfair advantage.

Re violence, do you disagree that union members do sometimes commit violence against so-called scabs, when they attempt to enter a worksite? And do you think that in general these acts are punished in the same way that other violent acts would be?
I just pooped my pants. How excite!
I think this alert is sent when they can sense you're being surveilled before they themselves get a NSL. "Targeted by state actor" != "obeyed lawful request for data".
Sincerity does a better job than sarcasm in communicating, usually.
If the actor is not sponsored by a state that would have easy access to your telecom (e.g. you live in the US but the attack is from a hacker sponsored by China) this is still very helpful.
The phrase "[my blog] was being hosted on another port because apache was taking up the internet http port 80" sounds like the reason they were trying to set up a reverse-proxy.

Apache docs have an obvious warning about ProxyRequests and security: https://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxyre... .

This config snippet looks like it was copied/modified without understanding:

<Proxy *>
AddDefaultCharset off
Order deny,allow
Allow from .example.com
</Proxy>

Example.com? If you read the docs on Order (https://httpd.apache.org/docs/2.2/mod/mod_authz_host.html#or...), you see that Deny,Allow defaults to allow, so that's why it's an open proxy.

Above that, there is a comment "turning ProxyRequests on and allowing proxying from all may allow spammers to use your proxy to send email", so I guess it was somewhat safe originally, until ProxyRequests was changed to On without reading and understanding the comment.
"due to lack of money..."

There's actually billions of dollars being spent on projects like the 2nd Avenue line and the recently completed extension of the #7 train. For some reason, the powers that be consider this more essential than updating the ancient signalling infrastructure and maintaining the crumbling stations.
I don't think it's absurd to imagine that something so completely beyond what they could have even imagined might have hit them on a deep, irrational, emotional level.
I'm not assuming either way.
Are you sexist for wanting only partners of one gender? Are you agist for wanting a partner of a similar age to yourself?

Seems a very dubious argument.

All preferences are prejudices in one sense, but it cheapens the politics by grouping it into that bucket.
The focus seems to be on "state-sponsored actors", not the states themselves. My guess is this is targeted at completely illegal and disavowed actors, not those that have the luxury of being able to issue a NSL.
Thanks for actually doing the calculations!
Depending on how good are your side projects. They should show to possible employees all your knowledge.
So why demand access to the source code? Reverse reverse reverse reverse reverse psychology I guess.
James Mickens' "Mossad/not-Mossad" threat model comes to mind: https://www.usenix.org/system/files/1401_08-12_mickens.pdf
Memory Layouts for Binary Search – V2
I had to look up "didactic" to remember what it meant, and I learned that it has a negative connotation (according to this one dictionary, at least)

http://i.word.com/idictionary/didactic
Not in the same way a state actor can. Especially if it's your own state. An FBI agent won't go to jail for ending your life/personal freedom; he can act in the open.
7 VR Headsets Turn Crazy Idea a Reality
Did you go back to the states afterwards?
Yes, but the majority of hacking attempts against Facebook accounts are probably just trying to post ads for knock-off Ray-Bans.
I run snort and from its alerts, the bots come from all around the world not all from CN. Though the CN sources are largest.
Instructable: Pop-Up Solar Generator: SunZilla 3.0
Your email address in your profile would lead me to believe you're Russian, but you speak very fluent and informal American English. Don't suppose you'd admit to being a Fin and having a name of Julius, would you?

Curiosity, that's all.
I figure the reason is because you've been charging too cheap prices for a long time, or rather always, and it's reflected in your job history.

If you've always charged $20, why would anyone pay you more now?

Some freelancers get paid $50-80/hour only, but you probably are going to be stuck with your current rate.
I came to this thread to argue exactly this - pleased you did it for me! My issue is 1) They do not acknowledge the need for this "initial minimal abstraction" and 2) I'm not so sure that it would be so minimal.

The issue comes when you try to define "safe multiplexing". Take for instance a spinning disk drive. If we took this at face value, every application would know about things like sectors and seek times. Presumably this would permit some sort of domain-specific optimisation (that, say, a database engine might use). Perhaps we posit that programs that don't need such specialisation use a library for disk access. So far so good.

Now what is it the OS is trying to multiplex? No longer abstract, high-level concepts like "write this data to this file", which it can safely mess about with because it knows what they mean; no, it has to multiplex read head seeks. It cannot have any awareness of the meaning of these seeks (that was the point of the exercise!) so it can't really be more intelligent than a "dumb multiplexer". So your finely tuned database application has its clever read head optimizations all shot to hell whenever literally anything else touches the disk.

In order for an OS to multiplex hardware resources efficiently, it needs to have some idea of what the applications are trying to accomplish, so it stands the best chance of giving it to them.

For what it's worth, I also find the paper rather hot headed and light on concrete examples.
I think this is the problem Others was referring to with the xkcd. Anaconda might be the best one in your opinion, but there's a bunch more, like pip's `requirments.txt` and virtualenv
I don't think you have to comply with NSL before you get it. If Facebook is able to detect pre-NSL surveillance (I doubt government just sends batch NSLs as a prelude to investigating potential targets), they can alert you before an official gag order tells them to shut up.
You might be surprised. Many loyal drinkers of a particular macro beer can pick out if their favorite beer is out of date or swapped for a supposedly identical beer.
Research suggests that grit and perseverance aren't as important as we thought
Nope, and I don't think I'm going to be trying that any time soon.
That's no good either, because then they are just giving it to you so they can sure you later and steal your startup due to the PATENTS file.
You still need to pass quite a bit of regulation for private aircraft because you know if they fall they can kill more than just their pilot.

Kit aircraft can only be licensed as "experimental" under FAA rules AFAIK which quite limits the potential customer base which is quite small to begin with.
From Wikipedia:

NSLs typically contain a nondisclosure requirement, frequently called a ''gag order,'' preventing the recipient of an NSL from disclosing that the FBI had requested the information.

...however:

The nondisclosure order must be authorized by the Director of the FBI, and only after he or she certifies "that otherwise there may result a danger to the national security of the United States, interference with a criminal, counterterrorism, or counterintelligence investigation, interference with diplomatic relations, or danger to the life or physical safety of any person.

So it seems this is regulated to some degree, though it is unclear what counts as "interference with a criminal, counterterrorism, or counterintelligence investigation".
But every CRUD app can links in its own OS as a standardized library.
One thing that is direly needed in pip is a way to specify system package dependencies. The way packages fail right now if you're missing something like libjpeg is cryptic and nasty. Users need to know that they need to "apt-get install x" or "yum install y" without googling for that cryptic error message.

Compared to that, I'd consider the overgrown setup.py interface or need for a MANIFEST.in file to be barely even a problem.

I tried writing a package that took care of specifying unix packages in a distro independent way (https://github.com/unixpackage/unixpackage), checked for installation and asked politely via sudo to install if the package wasn't installed.

However, in pip, the "ask politely" approach became impossible after v1.5.6 because of this bug/decision:

https://github.com/pypa/pip/issues/2732

(a sudo prompt came up but it was not possible to give an indication to the user of why it was there, so I gave up on the idea)
The comments (on Facebook) are surreal.
I wish this wasn't marketed as a 'personal transportation' device, but rather as what it is, an improved wheelchair.

Having said that, it is also important not to ignore the foundation of the Segway came from iBot, which was a wheelchair designed by Dean Kaman. https://en.wikipedia.org/wiki/IBOT, It was not a commercial success. Maybe it was too early and the market wasn't ready, or maybe there isn't a large enough market to support this type of device (which would be a shame).

Best of luck in this endeavor, I hope to hear about your success in the future.
It is a welcome move if facebook wants to be a true social platform, and increase its acceptance within me than rejection. But this particular change must come with a degree of transparency, which is required IMO to address your humorous but serious comment, and address larger value of this move.

- How would facebook detect nation-state attacks?
- How do we make the policy around it participative and open?
- Etc.
CoreOS is hiring engineers to work on Kubernetes and etcd
CoreOS is hiring talented engineers that are into solving hardcore distributed systems problems. Our primary area of development is advancing the capabilities of both Kubernetes and etcd.

Ideal candidate has a background in distributed systems, is comfortable with development in the go programming language, and wants to push the limits of distributed computing while building solutions that are easily to adopt. You should be familiar with open source, as you will become a contributor full-time to Kubernetes and/or etcd.

Currently we are hiring only full-time candidates based out of San Francisco, CA. Apply by sending your resume to jobs@coreos.com.
Last time I was really, seriously confused about the code was when going through a Scala codebase written by a person deep in love with traits. My problem was less of the syntax or "denseness" and more of nonlocality - every conceptually "whole" algorithm was split into 10 or 20 files and 2 class hierarchies, each having their own hierarchy of traits.

It made some sense in the end, but it took me a lot of time to figure that one out - not because it was complicated, but didn't fit in my head. That the original author was uncooperative and didn't want to explain things too much didn't help either.
In a manner of speaking. Even a self signed certificate prevents you from passive eavesdropping and traffic injection (a thing we know the US government is doing right now) if not an an active man in the middle (something which may or may not be happening to you on the plain HTTP connections you use every day)
I haven't naysaid yet, but I'm always wary of big companies that take actions that clearly fit into some geo-political agenda. E.g. in this case, I suspect that the aim might be to embarrass and critique nation states such as Russia, China, and whatever country the US wants to replace the leadership of (Syria right now). These countries tend to use fairly obvious and naive attacks, as opposed to the US that might be able to demand information by an NSL.
What part of "Baptism by Fire: A New York Firefighter Confronts His First Test" did you find unclear?
Please don't post dismissive comments to HN, especially in response to new work.
Don't forget to post that the next time there's a Facebook tech thread :).
Imagine if this alert system were too liberal at labeling things "nation-state" and a significant proportion of users saw this notice: I imagine the general populous would be much more concerned about internet security than they are now.
This is a good move by facebook and does have the potential to save lives, but the fact that they don't provide any details about the attack or the supposed attacker definitely makes it significantly harder for potential victims to act on this information.

Imagine getting a message like this out of the blue, not even knowing who's after you. What are you going to do?

It's hard to fight a faceless enemy, especially when you can't even be sure if they really exist.
Url changed from http://www.smithsonianmag.com/smart-news/origins-of-the-king..., which points to this.
Which blog post? Perhaps you want to post a link to it?
Can you elaborate on what the big red bar said? At least I'm assuming it had some message.
Product Review: Kinesis Advantage Ergonomic Keyboard
That's quite slick. Love the series of prototypes in the thesis.
> I haven't naysaid yet, but I'm always wary of big companies that take actions that clearly fit into some geo-political agenda.

Personally, I'm beginning to feel Google and Facebook are getting more and more open about US politics going against their interests.

> These countries tend to use fairly obvious and naive attacks, as opposed to the US that might be able to demand information by an NSL.

I don't think I agree with that point. Isn't the exact opposite the case? Russia, China, et al. have to actually do the work and hack the US citizen, while the US GOV can just send the NSL and have the data delivered on silver platter by US companies, who are bound by law to comply?
Thanks for that, it had honestly never occurred to me that murder for the purpose of buying someone's stuff at an estate sale might be a thing. I have updated my will accordingly.
"The poor reliability, poor adaptability, and poor performance of operating systems would be acceptable if applications could just ignore the operating system and implement their own abstractions."

My first thought was that it seems like we have this these days with VMs, although that can still be fairly complicated to set up due to the way that VMs reliably partition hardware resources. Skimming a bit further I see this is in some ways the opposite of what they have in mind, which is to even be able to save registers in a different "process".

I tend to think that operating systems don't provide enough isolation rather than too much. I don't care too much about how they go about implementing that. I can see the appeal of a more flexible OS implementation, but I don't agree about what the OS should ultimately provide.

I wouldn't mind seeing default-available VMs that are treated more like applications in terms of resource availability and scheduling. It seems like this would at least partly address many of the concerns within a monolithic kernel design.

Can anyone recommend other good papers on exokernels? I feel like I'm not really getting it yet.
Thanks for the link to my service! (PhantomJsCloud)

FYI, I have a public preview of our new version, totally free. Check it out if you find this kind of service interesting! http://stage2.phantomjscloud.com
"autodidactic" is "autodidact" + "-ic" rather than "auto-" + "didactic"; this is not a pedantic distinction because "autodidact" has mostly positive connotations, whereas "didactic", as you note, often has connotations of unwanted moralising.
Spiral into Control: Using Success Spirals to Achieve Anything