skysight-inc/HackerNews huggingface dataset:
This strikes me as a really good point. The onus for proof of merit is on the decentralized currency.

Simply put, people trust Visa and MasterCard to safely manage transactions, for better or for worse. Regulation like PCI helps ensure that this trust is sound.

The Bitcoin community at large could really benefit from a set of published best practices for managing transactions. Anybody possessing an insecure wallet is ultimately a liability to the credibility of the currency.
My apologies for my poor explanation. You're entirely correct with what you've said. The model they employ certainly is broken if it doesn't account for the possibility that not everyone falls into their ideal customer. When I said that "it is not malicious" I really should have stated that it is not with malicious intent. A marketing manager doesn't create offerings that they feel will piss off the customer base because a child could tell you that unhappy customers == churn and by extension churn == less marketing jobs as the company shrinks.

I merely wanted to provide a perspective as to what sort of train of thought is followed regardless of how logical it may be.
There are special agencies that can take down this article for you.
But all that regulation is evil and it's the freedom of bitcoin that gives it the power*

*for hackers to get away with the entertaining virtual train robberies we've seen in the last year
Again, you mean the intersection of your and my followers.
The OP's tone clearly indicates that he expects some compensation, Linode's TOS are pretty clear:
Therefore, subscriber agrees that Linode.com shall not be liable for any damages arising from such causes beyond the direct and exclusive control of Linode.com. Subscriber further acknowledges that Linode.com's liability for its own negligence may not in any event exceed an amount equivalent to charges payable by subscriber for services during the period damages occurred. In no event shall Linode.com be liable for any special or consequential damages, loss or injury.

This also provides an interesting dilemma when it comes to such events. In this case the damage is relatively easily quantifiable, he got X bitcoins stolen so the damage is X times the bitcoin value at that time. Still, it could have easily been user personal data or credit card information, which would have made an evaluation harder to make.

One of the risks of using such a platform I guess and something that anyone who does it should consider.
If they had guessed his password then their login would have shown up in the activity logs for his account, which he indicated was not the case.
I agree many of the class names are well-chosen. But maybe they're not fine for every application. And Twitter may change them between versions (as they already have).

The point is not to completely avoid using their naming scheme - the point is to avoid unnecessarily depending on it throughout all your HTML files, when you can easily isolate the dependency to a single Less file.

If you're using something like Less or SCSS, there is almost no need at all to depend on the class names, you can use them or not use them as you see fit. We wrote the article because a lot of people are not aware they have a choice.
The First Ad Network For Instagram
How did the attackers know what they were looking for. I'm going to assume that it's a small minority of linode users who have bitcoins on their machines. How were just these users targeted so accurately? What tied together knowledge they used bitcoins to those VMs and their linode accounts?

Also, was the nature of the attack just that the were able to login to your linode admin panel and from their root the machines and then loot your wallets?
The response from linode says that it was a "a customer support interface" that was used to access the account. This seems to indicate an error in their support system rather than someone guessing slush's password.
"Seek first to understand, then to be understood." - Habit 5 of Stephen Covey's 7 Habits of Highly Effective People[1].

Trusted, influential and successful communicators are trained to engage with people this way. It's less about "thinking" before you speak, than what the intentions are behind your interactions with others... are you seeking first to understand or to be understood? Everyone wants to be understood, and when you consistently give them that, you get much more in return.

Another case of common sense being not all that common. If you're like me, then you too need to make this a conscious pursuit.

[1] https://www.stephencovey.com/7habits/7habits-habit5.php
Glooko in Palo Alto, CA is an innovative Silicon Valley startup with a unique solution for people with diabetes. Our products enable users with smart phones to easily collect and view the information needed to help them successfully control their blood glucose levels. Our mission is helping people with diabetes live life while effortlessly managing their diabetes.

Senior UI Engineer

You’re a talented front end web developer with a passion for implementing awesome interfaces and creating the best experience for our users. In this role you will:

•Architect and optimize client side code using Javascript, CSS, and HTML
•Collaborate with peer engineers, designers and product managers to define and implement new features
•Collaborate with backend engineers to optimize scalability, network efficiency, and deployment procedures
•Assist in designing user interfaces with strong social media integration
•Stay up-to-date with client side web technologies and proactively suggest architecture changes and new coding practices

Your Skills

•5 -6 years experience in JavaScript, HTML and CSS
•Development experience for a consumer-based website highly preferred
•Able to create clean and maintainable code from mock ups
•Work closely with and incorporate feedback from other engineers, and product managers
•Keep up with evolving web standards (HTML5, CSS3), and best practices
•Strong communication skills including the ability to communicate complex information to diverse audiences both speaking and in writing
•BS degree in computer science/engineering or equivalent experience. Graduate degree is a plus

Please email resumes to: kathy@glooko.com
"As a currency it is not as critical that the value only goes up."

True, but to be a practical currency it is critical that the value remains relatively stable. A currency capable of dropping from $1000 USD to $150 USD in a very short time is clearly not stable.
Um... of course they do. XS is a translation library and the domain you're translating to (C) has no (well, no sane) native encoding handling. So you pass byte buffers. That's not a ding on perl though, it's an inherent impedance you get when you cross interface domains. JNI libraries tend to have most of the same problems, either forcing the user to do the UTF16/UTF8 conversion or doing it in the library.

I guess I'm surprised that Python and Haskell don't have equivalent messes when dealing with native libraries. Are you sure they don't?
Yes, the writing is a little incoherent. Maybe that's the reason that caused you to miss that, in fact, someone used Linode's 'Customer Service Representative' interface to get access to his account.

Don't stop reading and comment with 'I call bullshit'.
i think bitcoin could use another layer of authentication to verify the person is indeed the owner of bitcoins.
Am I imagining things or has there been an increase in the frequency of releases of gcc (I understand that this is a bugfix point release) since clang started to become popular?
This is unfortunately untrue. Bitcoin has been subject to huge 30% swings in a matter of minutes.
OK, agreed. It's not a bait and switch. AT&T honestly believed their pricing was sound. I believe that too.
I just did some testing on Twitter for Mac:

* Having the @username anywhere in the tweet preserves the pointer.

* Deleting the username clears out the pointer.

* Deleting the username, and retyping it (at the end of the tweet) restores the pointer.

The last scenario makes me think that the validation is server side. It seems that Twitter ensures that the tweet still mentions the author of the replied-to tweet or it will clear out the pointer.
San Francisco, CA (SOMA) - Full Time
Mobile / Front-end engineers, Full-stack (node.js) engineers

Stealth - consumer web and mobile

--

Do you find yourself using Google to navigate websites that you commonly use, or end up with many browser tabs trying to accomplish some task? We're innovating along how people interact with online services and designing a new web-based experience that allows users to accomplish tasks in a more usable, efficient, and social manner.

We work mainly with Javascript (jquery and node.js) and HTML5. We also need mobile developers familiar with iOS/Android. Our office in San Francisco overlooks the Embarcadero.

Curious? Contact [my username] at alum.mit.edu.
Morgan Missen Says "Recruiting is Often Too Transactional"
"We hate ads, and our last goal is to spam Instagram and destroy the fun and authenticity of the network for everyone. We want to push bold new ideas and develop inspiring and tasteful ways for companies to interact with their audience. "
This is somewhat off topic, but just because the TOS says something doesn't necessarily make it true.
Meaning of most common used Facebook/Skype words
What exactly is the REAL meaning of some words that you usually receive during a chat? :)
If this was sensitive data why was it not encrypted?

Replace "bitcoin wallet" with "medical history" or "credit card numbers".
Simplest answer is probably the right one in this case:

Someone at Linode did it. Ran a script to see how many bitcoin files there were on all the machines (they probably do these types of queries for anti-virus/whatever anyways) and took a customer support password to log in and get the coins. If he did it right he still might be working there, as it is easy to get credentials from friends/coworkers (even though it should be really really hard).
They could have looked at the ip's of bitcoin services and noted those running on a linode. Or collected ip's from bitcoin nodes that their own node has seen and looked up those allocated to linode.
Other great little changes:

- you can now do function()[0]
- <?= always on despite what you say in the INI
- safe_mode always off

Seems like a return to sanity for the PHP team, at least temporarily.. I even kinda like the traits!
That is very interesting indeed. Holding Bitcoins in a wallet on your server is the equivalent of having actual cash on your server. When someone takes it, there is a definite value of the damages vs. ID theft where the damage could be drawn out over a period of time.

As I consider launching my own Bitcoin business, I have wondered about where to host the bitcoind that serves as my business bank account. This event certainly makes me reconsider just any VPS.
Clones are generally very fragile beings. They die soon. Also, they're not that easy to make - a whole process has to be discovered for each species. It's very, very time consuming and expensive.
They also improved the zend engine, CURL extension, added Tokyo cabinet abstract and Berkeley DB Support! Added a couple of hashes, Improved JSON Extension (JSON_NUMERIC_CHECK!) and a whole lot of bug fixes. The UTF-8 part was long overdue, glad they fixed that.

I spend a lot of time programming in PHP. Its reputation is pretty bad, but updates like this keep me going!
This especially seems hard to certify. Bitcoin aims to be quasi anonymous. Users could just log into their own systems and transfer coins to another anonymous wallet elsewhere and then try and claim robbery. Or be rooted (by say script kiddies) and then take advantage of that, transfer coins, and try and claim for them.

They end result is something like bitcoin would seem nearly impossible to insure for in any reasonable way.

Isn't this akin a bit to storing a bag with $12K in a storage locker in a public space and then asking to reimbursed after robbers broke into the locker and stole the bag.

I think the author is hoping for way too much. The world doesn't work that way, nor probably can or should it.
Well, one of the tablets certainly folds...
It's always good to see something from the folks at Leiden. It's also nice to see that M.C. Escher was hesitant to recurse at such small length scales, and to see clever folks use computers and holomorphic functions to solve the problems which he himself found puzzling.
Added callable typehint.

Nice
I'm a Linode fanboy, but we need maximum transparency on what occurred and what's being done. What support interface? How compromised? Who's credentials, etc.
Santa Barbara, CA - Full Time and Intern - Engineering and Business Development - http://findthebest.com

WHY WORK FOR FINDTHEBEST?

FindTheBest is a rapidly growing Internet start-up lead by DoubleClick founder Kevin O’Connor and backed by Kleiner Perkins—the same venture capital firm that has invested in Twitter, Zynga and Square. Michael Arrington at Tech Crunch heralded it “A winner!”

FindTheBest is a powerful tool for making quick and informed decisions. Our unique data-driven content platform curates and distributes high quality content across over 700 categories, ranging from sports to gadgets to education.
Working for FindTheBest gives you a ground floor opportunity to experience a start-up with a huge idea and impressive traction run by successful industry veterans from game-changing companies like DoubleClick and Google.

Our combination of an experienced and dedicated management team, our mission to help users make quick and informed decisions, and a hardworking—and fun!—team, ensures an exciting and collaborative work environment.

If you're the type of person who thrives on working on massive ground-breaking ideas, is smart, highly passionate and prepared to work hard—but also loves to pull a few pranks—you'll love working at FindTheBest.

All positions can be found at http://www.findthebest.com/jobs

Looking for:

Web and Graphic Designer
Front End Web Developer/Engineer
Software Developer/Engineer
Front End Web Developer/Engineer
Software Developer/Engineer Paid Internship
Product Management Paid Internship
Business Development Paid Internship
This quote FTA extrapolates the definition to include all kinds of data:

"So opening the diary found on the suspect whom the police have arrested, to verify his name and address and discover whether the diary contains information relevant to the crime for which he has been arrested, clearly is permissible...
De geschikte BH- maat: hoe kies je de juiste sport BH
The Body Counter
Sorry about that. I've put it in my profile now. I didn't know it wouldn't show unless it put it in the about section.

Thanks!
David Cheriton and humble in the same sentence? What a joke!

You realize that the Waterloo CS school is called the "David Cheriton CS School", yeah? Take that for "humble" :-)
Announcing dedicated servers for Browserling 
It looks like the awesome service Browserling just got dedicated servers! From the post, "We're super excited to announce dedicated plans for Browserling. With a dedicated Browserling plan you get your own Windows server with all the browsers pre-installed, plus you can install any software that you want, any browser plugins you want, and do absolutely anything you wish with it as you also get full administrator rights to your server."
The (Re-)Rise of Start-Up Culture
As recounted in Carnegie's classic book: When General Meade squandered a great opportunity to capture General Lee and his army after the Battle of Gettysburg, Lincoln wrote a harsh letter to Meade. The letter was found after Lincoln's death, still in his desk drawer, never sent.

http://www.lettersneversent.com/pages/about/index.php
I've found this view_class_decorator and MultipleFormView particularly helpful with class-based views: https://gist.github.com/1953579
To give you an example of the sort of stuff we do behind the scenes at Yammer, here's what my team has shipped:

* a realtime message delivery service which handles hundreds of thousands of concurrent clients

* an activity stream data store serving just shy of a billion requests a day

* a distributed database serving well over a billion requests a day over tens of terabytes of data with ~10ms response times at the 99th percentile

* a realtime search indexing pipeline, complete with a denormalized entity store, index replication and an autocompletion service

* a data export service which basically performs a diff of the state of millions of business objects and sends it out as a streaming ZIP file

* a user account synchronization service which handles streaming JSON dumps of companies' LDAP/AD server data

* an affinity prediction service which provides ranking of arbitrary objects based on past interactions (e.g., who you're most likely to CC on a message)

* an OAuth2 token service for 4MM users

* a collection service for the user events pipeline of our analytics system, handling hundreds of thousands of user events a second

* plus a grip of open-source libraries

And this is a team of seven people (now). The other teams at Yammer ship just as much as we do.
Ah crap. Fixed.
He said getting them without a contract brought them up to ~$699, whereas the iPad without a contract is $629. That's not a big difference.
Well, no. Currencies as we know them are not only for exchange, but also are supposed to be reasonable stores of value. If a currency loses 85% of its worth in a period of weeks, it has failed at this fundamental task.

Now, for merchants this might not seem to matter, as they might be able to always convert bitcoins to a real currency immediately and never hold them long enough for depreciation to matter, but if the currency is excessively volatile there will never be a buyer at the exchange besides speculators, which prevents the currency from ever being really useful.
on the homepage the most unimpressive news are, hacknews
everything else looks better
maybe newsblur can grab the first page of wherever hacknews is pointing to?
Not necessarily if the reset tool is manually driven and audited. The vulnerability we're worried about here is an automated attack against many customers of a single hosting provider.

There will always be ways to human-engineer your way into any single host. Having a hosting provider just increases the attack surface a little.
Pretty sure there is a default port that accepts connections as part of bitcoind, so you can just portscan for it.
It reminds me of a poster I saw in the Occupy group.

"Reform or Reveloution?

Societal change just doesnt happen without a very large delta inducing that change. For example, we can view the changes from 9/11: creation of TSA, creation of Department of Fatherland.... Homeland security, breakdown of freedoms of travel and search.

Change can also go the other way. We only have a large chunk of the Middle East to look at, starting with Tunisia.

What I have studied a portion of is how the United states got where it is today. And time and time again, corrupt laws are passed for the reason of knee jerk or 'security'. Those politicians also promise never to use those laws against us, which in 5 or so years undoubtedly are.

Perhaps the base Constitution is correct, although I think clarifications are in order. Perhaps not, considering the claim I have read that it was written solely for white landowners.

I don't have the answers, but I can spot corruption when I see it. And when it's this endemic, revolution is the only way to fix it. Gods hope it's a peaceful one.
Are you sure? I think that you may be mistaken. The bar is just set higher in a "virtualized environment"...

"In a public cloud environment, additional controls must be implemented to compensate for the
inherent risks and lack of visibility into the public cloud architecture. A public cloud environment
could, for example, host hostile out-of-scope workloads on the same virtualization infrastructure
as a cardholder data environment. More stringent preventive, detective, and corrective controls
are required to offset the additional risk that a public cloud, or similar environment, could
introduce to an entity’s CDE.

These challenges may make it impossible for some cloud-based services to operate in a PCI
DSS compliant manner. Consequently, the burden for providing proof of PCI DSS compliance for
a cloud-based service falls heavily on the cloud provider, and such proof should be accepted only
based on rigorous evidence of adequate controls."

From: https://www.pcisecuritystandards.org/documents/Virtualizatio...

Amazon:

http://aws.amazon.com/security/
> screwing over your children

Let me get this straight, Warren Buffet won't fork over his $$$ to his kids because he wants them to learn the value of a dollar and that makes him a hero. But this guy is screwing them over and is greedy? Are you his divorced ex-wife? How do you know what his motivations are for withholding the moola?
There are some around like http://news.php.net/php.internals/57760, seen a couple more but forget where. The trend does seem to be towards far better performance across the board though which is good.
You were gullible and invested at the peak of the bubble at $30/BTC (now worth $5/BTC). Any bubble would have crushed you, eg the dotcom stock market frenzy. Your fault.

Bitcoin is up 400% over the last year (from $1 to $5/BTC), which has made it an excellent investment for other (smarter) investors not swayed by a bubble.
One of the features of the next release of the bitcoin protocol is to allow things like multi-factor authentication (e.g. require a signature from the private key on your computer and your mobile phone before the bitcoins can be spent)
I am very excited to see how you grow NewsBlur. It's a really great looking take on RSS feeds.

As someone who had a large social group sharing items on Reader before their last round of changes, I would love to hear what your plans/timeline on adding social features are.

(fyi, Samuel mentioned adding social features in his 2011 year-in-review blog post, http://blog.newsblur.com/post/15993667293/2011-year-in-revie..., and there is a social branch on github, https://github.com/samuelclay/NewsBlur/tree/social)
I'd be very surprised (and suspicious) if they were running any kind of diangostics over their customer's data without an explicit signed contract. The liability worry there alone is scary.
Cats come with their own problems. They were introduced on Kerguelen Island to eradicate introduced rats. The rats are left, and the cats eat endangered bird eggs.

http://www.btinternet.com/~sa_sa/kerguelen/kerguelen_species...

http://en.wikipedia.org/wiki/Kerguelen
You can see the release history at http://gcc.gnu.org/releases.html

Here's number of releases per year (from all branches):

- 2011: 6
- 2010: 7
- 2009: 5
- 2008: 5
- 2007: 5
- 2006: 4
- 2005: 6
- 2004: 7
- 2003: 5
- 2002: 5

So at a high level, it doesn't look like the GCC release frequency has changed much in the last decade.
A Lackluster "Hack Cluster": Practical ARM Exploitation Hardware Lab preview
Me too, I've been recommending them a lot and really like their service. I just checked our 2 boxes uptimes just in case.
Chrome to be deployed by US State Department
Contributors to several open source data science libraries for Python will be gathering to discuss how to do a better job of coordinating the community at PyCon next week. If you're interested, please leave your name on the open space and check back for a final time & location: https://us.pycon.org/2012/community/openspaces/pydata/

There's a seed of an idea for "PyData" we hope to flesh out and decide if it merits pursuing.
Wow, this is great!

I had to `npm install` the following modules in the lib directory:
connect-assets
irc
bcrypt
socket.io

I'd love to be able to connect to multiple servers and auto-signin with NickServ and such.
Aggressive control freaks make great programmers
It sounds like Bitcoin is doing much better in the "Medium of Exchange" side of the money coin than the "Store of Value" side.