skysight-inc/HackerNews huggingface dataset:
The accompanying email:

A security vulnerability was recently discovered that made it possible
for an attacker to add new SSH keys to arbitrary GitHub user accounts.
This would have provided an attacker with clone/pull access to
repositories with read permissions, and clone/pull/push access to
repositories with write permissions. As of 5:53 PM UTC on Sunday,
March 4th the vulnerability no longer exists.

While no known malicious activity has been reported, we are taking
additional precautions by forcing an audit of all existing SSH keys.

# Required Action

Since you have one or more SSH keys associated with your GitHub
account you must visit https://github.com/settings/ssh/audit to
approve each valid SSH key.

Until you have approved your SSH keys, you will be unable to
clone/pull/push your repositories over SSH.

# Status

We take security seriously and recognize this never should have
happened. In addition to a full code audit, we have taken the
following measures to enhance the security of your account:

- We are forcing an audit of all existing SSH keys
- Adding a new SSH key will now prompt for your password
- We will now email you any time a new SSH key is added to your
account
- You now have access to a log of account changes in your Account
Settings page
Sincerely, The GitHub Team

--- https://github.com support@github.com
Here's my rambling review/experience from a few years ago: http://matt.io/startup/Work_at_a_Startup_Review

(Reminder: I refuse to be held responsible for anything I say that's more than five minutes old, much less 628 days old.)
http://unix.stackexchange.com/questions/2116/given-keys-in-s...

This script is very useful when doing this audit, because you can turn your .ssh/authorized_keys file into a list of key names and fingerprints to check against what github is showing you.
Apple drops iPad 2 price by $100
Some people might be running DSA keys - this covers that case:

`ssh-keygen -lf ~/.ssh/*.pub`
Apple announces the new iPad
IPad with retina display, quad core graphics ships March 16
Anybody have a link to a presentation or PDF of the "inside the glass box" panel that is being discussed this morning?
Interesting. It seems there's never room for non-tech project managers in start-ups. You know those guys with a formal business background, MBAs etc? Well, I don't see opps for them in the start-up space. Am I missing something?
Introducing the new iPad
It appears people who are writing about Bootstrap are not actually paying attention to its development... As of 2.0, you can customize the colors, and that helps a lot:

http://twitter.github.com/bootstrap/download.html

Also, it now has responsive design built in, and I am not going to spend my time building that from scratch; I'm going to use a framework!
Building Better Stories with Location and Friends
Apple Launches New iPad
MyPhoneExplorer 1.8.2: PC Suite For Android Huawei U8100/U8120
KONY 2012 viewed critically
Cucumber/Functional tests for Android and iOS
Apple iPad with Retina Display makes its debut
The new iPad technical specifications
Pagekite free for FOSS
you got balls guys. It is hard to force everyone to do something but you did it. Kudos

also, if we go back few years ago this way would be a bit secure to handle keys
@key.body = params..
@key.title = params..
I am sure update_attributes is good choice when you got 5+ fields and update database scheme pretty frequently.
Just my 2 cents
Employers Asking Applicants for Facebook Passwords
The New Ipad (Video)
"Seeing a default Bootstrap “theme” site makes me leave it right away because I feel the person doesn’t care about what they are doing."

Get over yourself.
No, the price of apple products is never attractive, and paying for a second cell data plan is ridiculous, but for people who are already paying for that 2nd mobile data plan for their iPad, having a 10x increase in speed is awesome. It stops feeling like your using a mobile internet connection and it feels like you're using a real wired connection or wifi.
The Mystery of the Duqu Framework
Poor Singapore people. They don't realize what they have gotten themselves into.
Why are ONLY keys at risk, which this implies?

Presumably someone could have added a key, done evil, then removed the key. Evil includes all sorts of interesting things, like checking in code under the name of an existing contributor. This could potentially be really subtle and would be difficult to find in an audit later.

(Remember the stink over OpenBSD potentially having backdoors in the IPsec stack, revealed in late 2010? http://blogs.csoonline.com/1296/an_fbi_backdoor_in_openbsd)
Giveaway: Win 10 Licenses of The Shock Bundle
Today, we have yet another cool giveaway. DesignModo and WordPressThemeShock announce the inception of their new giveaway. Win 10 Licenses of The Shock Bundle from WordPressThemeShock!
I agree with you its silly. But as parody on the various 'syndromes' I think it is humorous. I had a manager at Intel who said "If it was fun it wouldn't be called 'work.'" which is both true and not true. Its true that work implies that there are things to do that are not something you'd rather be doing, but like going skiing which is 'fun', there is the drive up, the lift tickets, the planning. So those are elements that are 'not fun' that lead up to 'fun'. When you are working on something that either you are passionate about, or is really fun, then the 'not fun' parts can more easily be powered through.
I just popped in to say that I'm tired of the "X is dead" linkbait headlines. They demonstrate a myopic view of the world. Visual Basic and COBOL are still around.
There's no easy way to say it, so I would just say it as it is. I would be careful to call the app "beautiful". At the very least it is not consistent with the native iPhone look and feel (nor is it even in the spirit of it). It basically looks foreign on the iPhone.
The new iPad
I think we do. Some of us, anyway.

It's funny to think that 20-30 years ago, Stallman might not even have been allowed into the country. IIRC we used to turn away long-haired hippie types or take them aside for questioning.
Ok, so Cascading has a slow implementation of secondary sort, but is there any reason you believe that couldn't be improved? I don't think you're really comparing architectures there, just how well optimized particular implementations are.

I'm asking because in my experience the extra level of abstraction provided by Cascading, Crunch etc is a huge advantage, and if you're making a conscious choice to operate at a lower level, you better be getting something significant in return; it's not clear to me yet what that is.
I feel these moral rules go out the window the moment you're faced with a life and death scenario. When we're talking about this theoretically, it's easy to say a billion people in the future are more important, but the moment you realize you could die, you say screw those people, I'm gonna save my life first.
Internationalized URIs
>> How much salary and equity should you expect from startups at different stages?

Does anyone have any insight to share on this?

What are the odds of getting a 6 figure salary at a startup?
FUNNY: Friending a coach will have ZERO implication in Google+. Because there's no "Friend" post. It's by circles or with specific people.

Privacy by default.

Also my facebook answer is "i don't have one at the moment" and I wouldn't use my real name on facebook.
It's named "the new iPad" and not "iPad 3". My hunch is they did this so they can release an iPad Nano (or iPad Something), rather than an "iPad 3 Nano", which is semi-confusing.

The final slide "There's a lot to look forward to" has a picture of a subtly curved aurora-borealis shot from space. Hint at the much rumored curved-glass iPhone 5? Aurora bumpiness hinting at "textured" glass (http://cnettv.cnet.com/senseg-demos-prototype-touch-feedback...)?

If Apple can create an iDevice which you can feel tactile controls, like a Nintendo 3DS or Sony Vita, they'll eat much of what remains of their market.
As an interesting side effect, they will have pretty exact stats on how many active users they have; might help them sunset old accounts or move them to the slowest servers.

(Because of the offline nature of most git actions and different habits on pushing/pulling, it's probably hard to otherwise estimate how much a user cares about their github.)
I tested using the login form on huffduffer.com, which does exactly that.
In my case Bootstrap is very handy for prototyping and getting apps to a certain level of functionality before applying the final look. I always end up skinning it to a very specific product requirement, and in some cases I end up using only half of it. To me what makes a project look bootstrapy is the buttons and fonts, so if you can brand your own, that helps.
Friendly suggestion ... alphabetize the lists.
can anyone compare this to read it later (http://readitlaterlist.com/)?
Apple: We support plenty of Languages like American English, British English, Australian English, ..

Seriously only Apple can get away (even get applause) making such kind of statements.
drchrono codesprint on 3/10. Join the most advanced tech company in healthcare.
What's the metric for "purely crap"?
Unity is really not less than a total 3D environment for developing games .. you can definitely use it to do 2D style games (or 2.5D games, where 3D models are locked on the Z-axis, as you say) but in my opinion if you want flat bitmap-style 2D games you'd be better off getting into something like MOAI (http://getmoai.com/) or Corona or LÖVE2D to get the job done .. (my pref is MOAI right now, its just so fresh and fun..)
Despite the short term confusion of the name change (Not "iPad 3" just "iPad") it does make sense. Afterall you have iPod Touch, Macbook, Mac Mini, etc. Better than eventually having iPad 7, etc.

Wouldn't be surprised to see the iPhone 5 just be called the iPhone.
Nice list. I was surprised how none of the ones who email me are on it, so I'm assuming recruiters are mostly by area.

One question, though: why are you archiving these in GMail instead of trashing them? If you trash them, you still have 30 days to correct your mistake, and no recruiter email is worthwhile after 30 days anyway.
So it sounds like this slots in like so, in order of abstraction:

HIVE -> Pig -> Pangool -> Cascading -> MapReduce

Nice addition!
I think that's probably because there just isn't much work for non-tech project managers in startups.

If the founders aren't fulfilling this role, they probably should be working for someone else.
Oh, I agree, it's not so much that either country is a bad choice per se. And pointing out that a country subject to various bilateral treaties might provide problems down the road is also fair.

Just thought i'd point it out for those that might not know about their degree of international collaboration.

However, especially Sweden is ambiguous at best in my opinion, given their recently enacted strong wiretapping laws. They might not be a problem yet, but they provide the basis for future trouble.
Medical displays have one problem: they are in many cases grayscale only. So is that Barco too. And I thought that those T22x displays were almost unusably slow (both refresh rate and response time wise), and needed special purpose hardware to drive them (instead of eg displayport). And there is the problem of being discontinued.
Android too offers excellent forward compatibility! It is easy, as API changes are generally additive. I challenge you to find a few different apps written for, say, Android 1.6 that don't run on 4.0. I am sure some examples exist, but they are rare. In fact, I would even argue that Windows apps fail more often to be forward compatible than Android apps, because of the sheer complexity of the Windows software stack compared to Android.

As to backward compatibility, just like on Windows, it is the developers' responsibility to ensure he refrains from using APIs that are too recent. For example, if you write a Windows Direct3D 10 game, it won't run on XP because this API is only available on Vista and up. Same thing for Android: select the right API level when developing your app! http://developer.android.com/guide/appendix/api-levels.html How is Windows better/different than Android in this respect?

I speak from experience. I have developed on both Windows and Android, contrary to most people in this thread.
White House Works With Startups to Push QA Positions
Apple releases Ipad 3
The new iPad Unveiled
That's a very related note!

The classic hierarchy ("URLs and URNs are distinct subsets of URIs") wasn't as neat and useful as originally thought, so "it's just URIs now, with their own scheme-specific qualities" is the modern thinking, as reflected by this passage from RFC3986.

The modern answer to "What's the difference between a URI and URL?" is thus very nearly 'Mu.'
Why is this more effective than say "number of push / pulls in the last month"?
The USE Method: Linux server performance checklist
PENNE ALLA CARBONARA-RICETTA VELOCE
Once you get off the low-hanging fruit like cities, small countries, and civilizations (SimCity, Tropico, and Civilization, respectively), simulation games require domain knowledge in order to be fun. Since commercial games are aimed at a mass market and require higher costs for things like 3D graphics engines and game assets, this means that anything that narrows the addressable market, like requiring tons of domain knowledge to play the game effectively, makes it a less profitable investment. So you have to go for things that lots of people have domain knowledge about already, something like professional soccer. Which is why one of the best selling time-intensive, slow, thinking games out there is Football Manager.

I'm counting Football Manager over other sports games because in other sports games you actually control the players, whereas in Football Manager you only get to be the manager, and most of what you do in terms of buying and selling players, dealing with contracts, selecting players for a match, designing tactics and so forth are all classic sim-game stuff with lots of going through menu systems and toggling switches and moving sliders and none of the arcade stuff. Even matches you just sit there and watch (in abbreviated highlight form, or with an eye on match data), and occasionally make substitutions or tactical adjustments. If you didn't actually like soccer a great deal, you wouldn't really care; if you did, you might be willing to pay for new features and roster updates every year or two.
> All third-party recruiters are awful and need to find a real profession.

Wow, I'm not the biggest recruiter fan but this makes the site pretty hard to take seriously.
The Single Chart That Proves Tim Cook Is Right About the Post-PC World
You can add cybercoders to that list.
It's interesting that Wesley recommends both Dive Into Python and Learn Python the Hard Way.

Zed Shaw, the author of the latter, actually has a big rant on why he doesn't recommend Dive Into Python.

http://oppugn.us/posts/1272050135.html
You can't remember everything. The real test is how well you can function once you hit "here be dragons" - can you figure it out reasonably quickly and then be back on your way?
Thanks for this. I found it kind of weird that the email they sent didn't include any instructions on what to do. The linked webpage didn't have any guidance either. I guess they assume we all know what to do.
Ask HN: Best place to learn stuff I didn't learn getting CS degree
Self taught programmer and my boss said I need to know more programming theory - what are some good books to check out?
7 Things You Never Have to Do
But note that most commenters there accept discounting based on risk, uncertainty, opportunity cost, etc. - which are exactly the grounds that most ordinary people, even in this very Hacker News page where you would think people would understand & accept things like expected value or probabilistic reasoning, claim to ignore the future based on.
> how many natives died when colonizing forces spread them diseases or outright committed genocide.

Are there really people thinking the Native American Genocide was somehow worth it? That's despicable. Tell me because I'm not sure, you classify the genocide as "transient effect" or "meaningful policy"?

> [...] would the world really be a better place if America were limited to some traders on the East coast?

Irak war anyone? That's how USA makes world a better place.
Apple iPad 3
Rule of thumb: Never play audio on the web before the user interacted with your site.

Opening that link loads a 'Start here' screen of the game and lots of web content around it. I don't expect (and - quite frankly - like) sound here.

IF I hit 'Start' or somesuch thing on a web site, THEN I probably expect some audio.

Go to a URL? No. Click on something on a site? Maybe.
I suspect that since they only closed the hole late Sunday or early Monday, that they decided the number of new accounts was so small, it wasn't worth introducing the complexity (and potential bug/insecurity sources) to handle such a small percentage of the user-base. A reasonable tradeoff since getting this audit done in a timely manner is more important than waiting to handle edge cases such as yours.
I'm not sure they're comparable. I did the same evaluation, one of the many criteria that I had is a system that can handle many, many data points from many hosts (at the peak we had 50 production machines) and provide robust flexible queries over them; with almost 0 maintenance/configuration.
Metrics are created dynamically, the Graphite database is optimized for this problem (more optimized than RRD - although it seems that recent versions of RRD closed the gap), and it can take a beating in terms of scale.
A single Graphite instance does this effortlessly.
From the way their servers are laid out in the presentation I saw they wouldn't want to move them all to a slow server, but would want them evenly distributed to help decrease load on the servers.
We've been using Unity for the past year to develop a couple of games and we've had very good success with it so far.

The best part, for us, is the fact that it uses Mono as its scripting engine (if you want to call C# scripting). This unlocks things like LINQ, iterator coroutines, .NET sockets, etc. It also allows us to share code between client and server. We can reference the same core DLL on both, as well as share game logic between client (for offline play) and server (for multiplayer anti-cheating).

We tend to do most of our development in VS, but we deploy to Linux servers and will be deploying clients to web, iOS, android, and possibly steam. The way we use the actual Unity editor, it ends up being just an asset pipeline on steroids; but many other users use the drag-and-drop scene building features.

We've found Unity to play nice with git, especially with the 3.5 release which lets you use a textual format for asset metadata. They were previously binary making merges impossible.

In all, this offer is very worth checking out if you are interested in game development.
I don't think anyone is complaining about the structural similarities between bootstrap sites. If 50% of the sites out there had fixed top-bar navs and responsive content made of three columns under a hero panel, everyone would win. The question is why everyone has light-black Helvetica Neue text on grey and white backgrounds with blue accents, with aqua-blue gradient pill buttons everywhere.
You don’t understand. I’m not talking about the price of the device (which is extremely attractive), I’m talking about the price of the data plan.

I’m not sure how it is in the US but in Germany you just get a second SIM card. Not a second data plan. That would be stupid. But LTE is extremely expensive and has little to no coverage. You wouldn’t get more speed, you would have to pay more first for a very limited benefit.
SEEKING WORK - remote

Seasoned rails dev with knowledge of design fundamentals.
Strong generalist ranging from architecting and scaling crawlers
on aws to implementing HTML5 mobile websites.

Contact: nicolas@couchcontrol.com
Again, that's why I prefer comparing unsubsidized costs. My Hero may have been hundreds cheaper but perhaps some of that cheapness was from being on an inferior carrier.
Any ballpark figures on timescales to introduce the new API?Also is it your intention to add to the existing one or rebuild it from the ground up?
1) Almost all civilizations like ours go extinct before reaching technological maturity.

2) Almost all technologically mature civilizations lose interest in creating ancestor simulations: computer simulations detailed enough that the simulated minds within them would be conscious.

3) We're almost certainly living in a computer simulation.

It seems like there's a fourth possibility here, which is that a full simulation of the universe is not possible. Anyone care to comment on the computability of something like that?
It also created a shock wave measured at over 5 on the Richter scale, despite being detonated 4km above the Earth, that travelled at least three times around the globve. What would it have done if it had been detonated at touch down. What would happen if you detonate 10 of those at the same time?

I think it would take worse than that to kill the species, but our civilization is more fragile.
"The New iPad" Announced; Price Details; Available on March 16
Thanks Colin
It would be great to see an example of the bad recruiter e-mails received from each domain. I think this would give the list some more authority.
> Some people might be running DSA keys

Yep, or use a non-default key name.
They also added a audit log so you will be able to track and address any future issues.. https://github.com/settings/security
My guess is the last thing github want to do is make its users aware of that distinct possibility.
I think it should be more important. That is not to say that it should not also be functional but within that very loose boundary there should be plenty of room for wide varieties of design.
you should work for gizmodo or something.
New Apple TV Launches with 1080P iTunes and Netflix
Standardized toolkits were a boon when the Mac came out - they were confining enough that the average programmer couldn't produce a really bad interface. Today however, and after quite a struggle, the idea is finally taking hold that software should have an _actual_ design phase conducted by _actual_ designers that understand how people _actually_ interact with software.

The disquiet some people feel is that frameworks like bootstrap make it very tempting to drop this design phase in favour of snapping widgets together and assuming the end result must be a good UI because users are "used" to the individual widgets. This would definitely not be step forward in software construction - web or otherwise.
As a designer that works primarily with Rails devs on large-scale applications, I feel the pain of developers that need UI/UX/application designers and can't find/afford them (for personal projects, startups, etc).

Bootstrap fills that very interesting and apparent need in the web community. It feels like a coping mechanism for devs who can't find good design/frontend resources, so I don't have a personal need for it, but I hesitate to dismiss it entirely as I personally know many developers that wouldn't have anywhere to turn without a tool like Bootstrap.

That said, the author's attempt to push it forth as some sort of a framework for all web language is a bit much. The best UI and UX will always be at the service of what the specific website requires, not skinned out of a modular system.

But this knowledge/resource gap is a growing problem, and I don't see enough of the design community becoming aware of it and stepping up their game to make things like Bootstrap less necessary.
Awesome bash one-liners, shell script tips and tricks
I'd like to point out that this is not a rails vulnerability, but a mistake Github engineers made, which happens to the best of us. Mass assignment is a feature and I guarantee the problem has been know for years and Github engineers were probably well aware of it.