skysight-inc/HackerNews huggingface dataset:
Well now that you have a compiler you can rewrite it in clojure-py to make clojure-py-in-clojure-py :)
I noticed that all comments on HN and on the blog post that addressed the issue of venue data were conveniently dodged.

This is unfortunate and reflects badly on FourSquare since it is highly indicative that this decision is almost certainly about the money being paid to Google for its API and not at all about supporting open-source.

It appears that FourSquare is happy taking what it wants from the commons generated by the community, but when it has an asset that would greatly benefit the commons, and that they don't necessarily need to hold close to their chest to maintain an advantage, that they don't donate it.

To me, that's a shame.

The whole world would clearly be better off if one of the Place API providers with a solid collection of POI internationally (Google and Foursquare) were to donate that set to the commons.

It's great that the commons gains another major supporter, but near as I can tell Foursquare is just using information in the commons to its advantage here without truly participating in the commons.
official announcement: http://status.linode.com/2012/03/manager-security-incident.h...
It's perfectly reasonable if that legitimate and convenient method isn't a sustainable business model. Tragically $10 a month for every movie and TV show ever isn't viable. It is in Starz' interest to focus on acquiring expensive premium cable subscriptions rather than collecting a small portion of the Netflix $10 monthly subscription.
Could this have been a vulnerability in Lish, which can be run from a browser using Linode's AJAX console?

http://library.linode.com/troubleshooting/using-lish-the-lin...

I've completely ruined networking and disabled root logins on a Linode VPS, but could still access that same VPS as root using Lish.
IANAL (or QSA)

PCI doesn't specifically say anything about usage of a VPS. It does however speak about access to data.

If you have encrypted credit card information, you'll be asked to list those that have access to the encrypted information, they encryption key, and the key encrypting key. Then you'll be asked to justify their access.

I'm sure I could come up with with several other major violations, but this alone is severe enough that I can't envision a way that you'd pass a PCI audit.
What's with the headline that looks like was scraped automatically from the article? Your account may be new but your submission history so far doesn't look particularly automated.
A note on MKInfoPanelDemo
You don't need to own the datacenter, but you do need your own, secured space in a datacenter.
No, the point is that $50 million and $1 billion are the same for most practical purposes. Aiming for one rather than the other isn't going to meaningfully change how you act; in this context, both are just absurdly big numbers.
All because he used a common word, that laymen use all the time with respect to copyright infringement, and that even lawyers and judges are known to use occasionally.

Common usage does not make an argument or term not hyperbolic. Right after 9/11 we were subject to "do this or the terrorists win" language all the time, for many many silly things, yet that was still a hyperbolic argument.

Moreover, this is not an American issue only, and other languages and legislations make no such distinction against "copyright infringement" and "stealing".

Actually they do. Theft is a different class of felony with different laws than copyright. Further, something being illegal does not make it immoral, which the poster I was replying to claimed.

And who exactly are you to define what the exact "point of this discussion" is? The point of the discussion is whatever is relevant to the issue, and both questions are relevant, as are many more.

I'm not making a claim to be the definer of the point of the discussion, just paraphrasing what the author of the post wrote, when he claimed not to be against copyright nor for kim, but instead asking if the way the situation was handled was government propping up a monopoly, and whether the laws made sense. To go off on a side rant about how bs it is to defend kim, and how this is obviously not a problem because of existing laws is in fact blatant point missing. To defend such actions because you don't like me vigorously defending a point is disingenuous.

5. Wow, I really fed this troll didn't I?

No, you trolled on your own.

Not trolling. Pointing out why an argument is bad and irrelevant is a pretty ok response to a bad and irrelevant argument. It isn't trolling, it is making clear that the emperor is naked.
Why are you looking at it as "X has the same assurance as Y" instead of "Y has the same assurance as X"?

If you've got a vault that holds a massive diamond, and a little gold ring, do you become concerned because the diamond "only" has the protection of a little gold ring?
Well handled.
The Quantified Self: Counting Every Minute
In my opinion it is not. Here is the common use case for people: 66% of them use 8 character or less passwords. Forget about the common longer passwords like "letmeinplz" just doing a brute force would give them 66%. In terms of loss, even 1% of passwords being compromised is bad since many people use the same password for multiple things.

Now, how long would it take for people to take down bcrypt? in the scale of time bcrypt is all the way over there -> from SHA1 and cleartext. Bcrypt will protect you even as computers get faster. SHA1 a couple decades from now will be be compromised for 9 or maybe even 10 characters. No way with bcrypt.
SEEKING WORK: - SF -- or remote (USA citizen) Fulltime / Freelance

Stanford CS 2011

I work mostly with javascript/coffeescript backbone.js / jquery / node.js / HTML5 and have recently started picking up Ruby on Rails.

For work samples and git email:
jasoncb [] cs.stanford [.] edu
Not to mention the almost impossible to measure fact that once a work is in the zeitgeist, by wide spread sharing, it also will likely make more money than the same song that didn't get that level of exposure with no piracy.

If this wasn't true, why would the music industry pay to get songs played on the radio?
[Tutorial] How To Publish Blog Posts Directly From Microsoft Word 2007/2010
Letter to My Struggling Baby Business
There's already quite a lot of discussion of this incident here:
http://news.ycombinator.com/item?id=3654110
Nope - they don't have an administrator account and installing unsupported software isn't allowed. You can't really manage or secure a sizable number of seats without those rules.
Update from linode: http://status.linode.com/
1. It costs a lot of money to rename something like a school: new signage, new namecards, new letterheads, etc. etc. Money that could instead be used on education.

2. Once a school is named after a person, that significantly reduces the likelihood of a future donor who would only donate if their name were adopted.

Given the above actual cost and opportunity cost, some might find it reasonable to guess that schools only ever rename themselves after rich but less-well-known (i.e. not Nobel-prize-winning) people if the donation is contingent on it.
Just to note, Flightgear is open source and free. It uses a pretty good flight dynamics engine and the basic aircraft are modeled accurately. The Cessna 172 handles just like a real one. For free, it's great. It's let down, if you can call it that, is the eye-candy is not as good.
I'd like to understand the what actions will be taken to prevent similar attacks in the future. Also, what can I as a linode customer to prevent my host from being compromised in a similar fashion.

Implementation of two factor authentication for your customers and requiring it for a root password reset would go a ways to preventing similar attacks.
There's an underground film "The only building I ever wanted to climb" showing the summiting of Centrepoint Tower after your uncle's attempt. The overhang of the restaurant base was what stopped him from going further, later parties had to pull the blueprints of the building and make up some rings to slot into the rails underneath.

See:
http://brydenallen.com/sandstone_and_clock-towers.pdf
Toshiba to release 'World's Thinnest Tablet' in March
Source Map Proposal - Mapping generated/minified JavaScript to its source
vzw at least is quite fast, but I believe they both throttle heavy users.
I would pay between 9 and 19 per user
It has been for a while, in certain dialects. One of the wonderful things about english is that it evolves.
Two-factor authentication for their support personnel you mean?
i love the airtime for email idea. you should raise a round and get some sales guys to push it!
Agreed. This is in sharp contrast to the Media Temple / Plesk debacle. Which affected how many thousands of sites? How long did it take them to admit it? Meanwhile, Linode reports full details of a hack affecting no more than 8 accounts the SAME day.
China’s One-Child Policy Dilemma for Leaders
"Streaming HD" is usually a marketing pipedream.
How quantum suicide works
Windows 8 Consumer Preview hits 1 million downloads in one day
It should be required for their personnel and an option for me to enable for my account/specific Linodes.
Care to keep going there? ;-)

I'm mostly interested in the realistic WW2 online combat genre, which seems pretty dead. The only things around I know of are Warbirds and its cousins WWIIOL and Aces High. While all of them appear to be actively supported, they all date back to the last millenium.

Anyone know any others?
While the incident is unfortunate, I do give them credit for being up-front, honest, and relatively speedy in their response. Sad to say, I'm not sure a lot of other hosting providers would be as quick to admit culpability.

That said, there's no way that resetting the root password should be something a customer service rep can do. Particularly when Linode are very explicit about not being a service for newbs - and are in general unwilling to provide help setting up a Linux system.
Funny, I just had to deploy an existing site to a PHP4-only hosting environment. After a few hours of re-writing things I've been taking for granted (a lot of timezone code namely) everything worked fine. But yuck, I felt dirty afterwards.
Some basic support for this landed in WebKit recently: http://peter.sh/2012/01/css-selector-profiler-source-mapping...

I'd like to see this hooked up to the Rails asset pipeline!
Last July I took a taxi in Chicago and the driver was using a Square card reader. I take a few taxis every week in various cities, always paying by credit card (so it can be expensed), and it was the first and only time I've seen a taxi driver using Square.

I asked him about it and he said it was personal and he had not seen any other drivers using one. It's non-sensical and as an earlier poster noted, also a bit of a political issue, since the existing terminals force the driver to pay 6% versus 2.75%, with no ad revenue sharing. I talk to the drivers here in Boston quite often, and they have no choice on the terminals they have in the cars. One would think that if drivers are forced to accept credit cards, they should at least have the option of choosing a vendor.
It's good the fast acknowledgement, but I find it lacks in detail. I'd love to know exactly what kind of measures are they going to take so the chances of this happening again are truly reduced.

I share a Linode with a friend and at work we deal with 4 so this is a concern.
Dude, you worked on Close Combat? That's one of my all time favorite games. To this day, I still fire up "A Bridge Too Far" sometimes when I'm isolated with my laptop in some hotel room. :)
I like the comparison of the design themes of relational modeling and NoSQL modeling as, respectively, "what answers do I have?" and "what questions do I have?"
Ask HN: Does the "Call to Action" stand out more on my website
I tweeked the front page of my startup www.Skrittle.com. Will you take a look at it and tell me in the "Call to Action" stands out. Any other feedback would be great also. Thanks

Ben Hall
Seeking Work - Remote preferred, Arizona

My name is Ben Hall from Benerino Studios (www.BenerinoStudios.com). I specialize in helping startups get their minimal viable product out. I am trying to be an entrepreneur myself with my other ventures.

I develop in Ruby on Rails, HTML, CSS, javascript / jQuery, and MySql as the background.

You can find more about my work here:

Website: http://www.BenerinoStudios.com
Github: https://github.com/benhall2121

If you need a designer for a project, I know a few I can refer you to.

I also liked to watch American Pickers, Ink Masters, Shark Tank, and Project runway.

Contact me at benhall2121 [at] yahoo.com
most of twitter's userbase is also confused
Good luck getting people to pay for plastic discs in boxes.
Ubuntu 12.04 LTS (Precise Pangolin) Beta 1 Released.
Yep. Classically, we abdicate responsibility as soon as physical security is breached. With virtual machines the problem is mostly the same, but it moves from "true physical" to "virtual physical" -- once the host environment is breached, all bets are off.

Any sysadmin that claims to be able to protect against a physical access attack or its contextual equivalent is either lying or incompetent. In neither case should that sysadmin be considered "professional".
I would certainly appreciate it if you would share your good links
> While I agree that it makes it easier to hack in that functionality, it would still be very useful to have named parameters for functions that don't implement that functionality.

Absolutely. But PHP devs have repeatedly refused to support named parameters so this is a good enough fix.
Show HN: The best way to discover web comics
I came up with the idea for this site a couple weeks ago and spent a few days hacking together an MVP. The basic premise is that there are two opposing issues surrounding web comics: sharing & copyright infringement. Sites like Pinterest make it easy to share comics, but people share the comics in full with no requirement to link to the original source. Other sites like Reddit are sensitive to copyright, thus only showing text links, but it's a very non-visual way of browsing highly visual content.

So I had the idea that showing only the first frame of each comic serves the needs/wants of both creator and audience. The audience gets a fun visual way of browsing all of the latest web comics. But only getting the first frame, they must click through to the original source if they want to enjoy it in full. Thus, the creators receive 100% of the deserved traffic, which comes with their own ad impressions and anything else they are promoting on their websites.

To me, that's kind of a win-win. I'd love to hear any thoughts!

Link:
http://www.justthefirstframe.com
Heh, 4 years since my son was born, and while at the begining HBO was ON, later as he grew up and was bothered by the TV noise, we switched to Netflix, but watch only movies with captions - and these are... well non-english ones :) So here ya go!

Oh, And I have to watch with him Yo-gabba-gabba, Franklin and the Upside down show (which is great btw)
Clickable link: http://www.justthefirstframe.com
The only excuse for this incident is if they did have 2-factor for their admin portal (which, from the discussion, is presumably separate from manager.linode.com) and someone conducted a targeted attack on a linode employee to compromise/steal both her token (either separate or a totp oath app like googleauthenticator or similar) AND her password.

If someone went to that much effort just to steal some bitcoins, they set their sights too low. Linode must host more valuable stuff.
It's also usually better than "Streaming SD."
Further comment is indeed warranted, but that part can come in a few days, when there's more clarity on the scope of the incident and a fully-hashed plan of attack for closing the vulnerability.
Is Path the Future of Social Media?
Well... I've been involved quite a bit with World War II Online, and they are not exactly growing by miles and bounds. The customer base for a hardcore sim seems a lot smaller than for more arcade-style games, so I don't know how you get funding for a large, complex piece of software with quite a limited payoff. I'd love to work on it, though...
Unfortuately, this method of passing an array as a single parameter, rather than actual parameters, is not very self-documenting and leads to more difficult to understand code.
Play Live Online Casino with Real Dealers
Liveonlinecasino.org is a complete guide to the world of live casino games on the internet. Here you will find everything from live blackjack information to the more rare games like Live Casinos and Live Dealer Casinos.
The main impression I have surrounding the "premium nature of their brand" is when I go to a Residence Inn and enjoy free movies.
Great project. I really hope Elixir takes off. I can try to convince my bosses that the transition from Ruby to Erlang isn't going to be syntactically hard :)
Recursion in Escher
3 good movies, 997 shit ones. "Lets try this one." ... STARZ PLAY .... "Oh. Probably not then, but lets give it a try" ... ... ... <back to browsing>
Because it's unusual and smart brains crave unusual information?
Entrepreneurs need to be more aggressive
I don't think this goes far enough.
To illustrate my point I am going to take the extreme case. Let's say you have a genial leader, with great skills in sales, manageman and business in general, a real hustler, with great taste, a world changing vision and a practical plan. This is our ideal MBA ( a rare bird). On the other hand we have a bright technical guy, with no talent for business matters. This point is important because the more rounded the technical founder, the less he sees any value in the MBA guy. In this ideal setup, even with a perfect starting position for the MBA guy, there is no rational reason for the technical guy to enter the partenership.
Because for the whole initial phase, when a product at the center of the company must be created, the technical guy is 110% of the company. Whatever the talent of the biz guy, they are yet to be proved.
Just to give an example, as far as we can tell, the RDF of Steve Jobs would not have made any difference, if he couldn't convince Woz to cofound Apple. Not just any engineer, but someone able to hack his way around hardware and software limitations. Remember Folks, Jobs had to cajole, even beg Woz to join him. And I am not even taking into consideration the fact that Woz had far more rewarding, more stable and technicallly challenging, options available right away, whenever he wanted.
My point is the biz guy, at the founding moment, must convince the tech guy of giving him 50% of his company. Any particular tactic can be used, enrolling the tech guy's girlfriend might do , but if he loses sight of his "strategical" position and its inherent disadvantages, he reduce drastically his chances to close the deal.
P.S:
Since then the situation has not gotten better for the biz guy. ( cf facebook saga)
Show HN: No ads, no social media, no comments - just the news.
Forget global warming, it's Cycle 25 we need to worry about
I also built something similar recently http://fit.io

Amazing how an idea can be implemented by a bunch of different folks all at the same time.
So, to be good according to your standard, there must be a big net gain for the beneficiary, and that beneficiary must not be or include you, correct?

How do you decide what constitutes a benefit that's great enough? Where do you actually draw the line? Is it moral to go out to the movies, when that same money could change the life of an impoverished child (for a month or two) in some faraway land? Is it moral to selfishly pursue a college education (college benefits the student first and foremost), when the money spent on tuition could be spent on charity, and the student's time could be given to service?

Also, why do you think that doing something morally good (though we obviously disagree about what constitutes the good) is any different from doing something that's practical (a "smart move")? I hold that the purpose of morality is to enable a flourishing life in the here and now, as opposed to something that's "tacked on," only theoretical, or somehow optional.
LabVIEW! I, too, recall my mixed feelings when I started with it. It's much easier for people who have never programmed before--there's no weird syntax to learn (why can't I use = to compare?)--but I've found resistance in said users not wanting to move on to a language with widespread, real world use (like C++).

Is it worth starting with it? I'm not entirely sure. I'm under the belief that such "difficult" hurdles from which a visual programming language protects one are best learned while still learning the simplest concepts.
Editorialization of headlines is usually discouraged.
Climate skeptic sponsors new climate study, confirms global warming is real
Yeah. Basically you can divide people into two groups:

1) Those who know what's going on and treat it as a sign of respect.

2) Those who don't and where you have to show externally that there is respect involved.

For the first group, getting into an argument on technical merits doesn't have to involve a whole lot of pleasantries. It's largely informal. I try to save this for groups I am a long-standing member of.

For the second group, you are right, a softer approach is necessary.
I'm far less worried about threats to the web's openness from Apple/Google/Facebook than I am from the United States government. If people want to lock themselves into curated services, so be it. None of those players "control" the web in any sense of the term. As long as TCP/HTTP/DNS are open, the "Web" is as open as it needs to be. Sadly the US continues to assert that they control DNS, etc.

If you don't like how Google filters results, use a different search engine. Don't like Apple's walled garden? Welcome to Boot to Gecko. If anything this is an article about getting ensnared in increasingly restricted and curated platforms. I think we all understand that trend and the risks associated with buying into them.
Fine I'll bite,

it is INTERESTING it is different it sparks debate and it gives life to a conversation about bonuses and compensation in our industry. Lots of people here are also founders (or plan to be) so form that perspective it is interesting to contemplate the effects of such a move on early employees, it isn't so different from talking about vesting for early employees in that regard, something which is also a common topic here. I'm not sure why you would choose to make this a personal thing about notch, HN (for me at least when it is at its "best") is a place to come for NEW and INTERESTING perspectives, this absolutely falls into that category - for a number of reasons.

Your response seems to be "wow look at notch trying to draw attention to himself" the impression I have from the rest of the comments here isn't "wow look how generous notch is; he's so awesome" it seems to be more like "wow this is cool/different/unexpected I wonder how this will play out".
Wow, Bitcoinica lost 43,554 BTC from Linode compromise! - https://bitcointalk.org/index.php?topic=66979.0
Clickable: http://recikeep.com
Also, is this customer service portal available via a public URL? Shouldn't some sort of VPN access be required to even get on the network hosting these things?
"even taking paycuts in some cases."

Then they are fools and or don't have a family. As a developer with around 10 years of professional experience, I've been conned so many times by this when I was young and foolish. "Work here because we have fooseball table, free beer on Fridays, and cool projects." (But please ignore the fact that you are being paid $20,000 below market value.)
I mean more "why should anyone care?" It's really not that unusual, and honestly tastes more like gossip, to me :/

I'm not saying that it shouldn't be on HackerNews. If someone posted it and it's receiving upvotes, clearly it's worth being on HN. I just don't understand why it matters at all