skysight-inc/HackerNews huggingface dataset:
I thought this but after doing some tests the results are pretty negligible.

A windows 2008 server license on 2 machines for fall back comes in at around £700 - £800 a month per instance. The same redundancy on Azure is around £80 - £100 a month. If it doesn't work then we go back to the drawing board, if it does work then we have saved ourselves an almighty chunk of money.

We cache a lot of data in our application too which we are putting into elasticache, which is local to EC2.

We haven't used it in great stress yet but initial tests were very good
I don't get why he thinks it must have been a nation-state either. Why a nation-state rather than any large country?
Actually I do not disagree.... I make the platform choices, so i live with the results. However, IMO an error message that distinguishes between an "hosting" issue and an "app" issue is not only fair, it is in fact, meaningful data to (at least some) customers.
On the other hand, keeping data safe from (known and unknown) attacks is also in the interest of such institutions. So I guess it goes both ways. (See: NSA "suggesting" IBM's DES use modified S-boxes, for (at the time) undisclosed reasons)
Any love for those of us who already bought this? I don't want to pay twice, especially considering the only other game I want that I don't already have is Super Meat Boy.
Steers, per se, lack the (ahem, equipment) capacity to impregnate cows. I think you mean your bull jumps my fence.

Also I believe it could be argued that a specially engineered bull would rise to the level of a "dangerous animal" (such as keeping an elephant or a lion) for purposes of trespass and liability. The owner of a genetically engineered, patent-encumbered, bull would know and have prior knowledge about the unique danger involved in having such an animal escape and be held especially liable.
Probably not. There are people who have the math chops, and the coding chops, and the other knowledge around security, but with so many qualifiers, that's getting pretty rare.

Several smart, determined people capable of it together would be easier to find, and well within the reach of many nations and large organizations.
That's not an isolated occurrence. Most Web projects get it all the time from randoms, sometimes completely unaffiliated with the site in question.
Just don't mention Heroku by name. "Webhost" or something is enough. I'm in two minds about the whole thing though.
Literally kill you?
I think his point, which is a valid answer to your question, is that we now have laws that force law-abiding citizens to carry their documentation with them everywhere they go. While I believe this is more of an immigration issue than a terrorist issue, I do have to say that something like this would have never passed pre-911. This is fine for nice-lookin white folks, but for everyone else, a law like this can and will be selectively enforced.

The point is that we are slipping further and further into the realm of handing over control of our lives to government bodies whose purpose is neither our safety or freedom, but power.
Absolutely. I have very little doubt that it was indeed a nation-state who developed it; but, my main issue is with the distinction of it being a "wealthy" one. Couldn't Flame, perhaps, have been developed by Iran and released on themselves as a means for drumming up anti-Israeli or anti-American sentiment?

I realize something like that is totally conjecture; but, I don't see it as any further conjecture than, "it must be the US and / or Israel"

[Edit] Since somehow this didn't come across in my post; throwing up conjecture at another possible source of Flame outside of US / Israel doesn't mean I believe any of these explanations--my point was merely that both ideas are pure conjecture with little (at least that I'm aware of) evidence to support the claim.
lit·er·al·ly/ˈlitərəlē/ Adverb:

1. In a literal manner or sense; exactly: "the driver took it literally when asked to go straight over the traffic circle".

2. Used to acknowledge that something is not literally true but is used for emphasis or to express strong feeling.
10 Timeframes
For those that have already bought: if you follow the link they emailed you, you can download the additional games.
You talk as though 2003 was prehistoric.
If you grab the bundle link from your email, you should have them now.
They DO love us. If you go to your unique Humble Bundle purchaser URL the new games are already there. Indie Devs are the best!
HN is for blackmailing shitty employers right?
It’s your fault for not having a fault tolerant site that runs on another service provider. This is what happens when you put your eggs in one basket and that basket bursts into flames.

If reliability is so important, make it a priority instead of just expecting stuff to work or for a more politically correct error message — which leads me to my next point: who cares about the ERROR message? The damage has been done by that point and half the people won't bother to read any further. Queue sounds of people clicking back buttons as fast as they can.
Tried your app. Looks good. But I got "something went wrong" error pages couple of times (sign up). Probably Heroku making you look bad!
Interesting. I don't understand why you would do this though. I understand why criminals or people will malicious intent would love a service like this but I don't understand what makes someone create a business from such uses.

You have in your FAQ, "We will NEVER expose your real phone number or your call history to anyone but you. That is our promise." So you are not going to reveal anything to the FBI, CIA, Homeland Security, etc? That's a bold statement.
I'm not sure about that either. If it was my product I think I'd want a polite on-brand 500 page saying my hamsters are working on it. Seeing something that suggests hosting is down doesn't frankly matter to me, even as a technical user... and to someone in between myself and my mom, with enough knowledge to understand what a "hosting company" is... I wonder if they might feel ripped off as well: "Oh great. I gave this company my money and they don't even have their own servers!"
They sound defensive. That's probably a good thing.

Can someone explain how Microsoft's S+M proposal differs and how well it would work in the real world with proxies, firewalls, NAT etc? (I'm being lazy and haven't read the paper)
Why Bigfoot and Aliens Will Continue to Be a Focus
The New Front Line in the Global Struggle for Internet Freedom
from my main post edit:

edit: Some people have asked why I didn't like XAML. My pragmatic concern has to do with the workflow and design of UI elements. You shouldn't need blend to edit validation styles efficiently. I know you don't need blend, but you can't just go in and add a single line to change the color of a border--the alternative to blend is to (afaik) copy the entire style resource that the element uses from MSDN, dig into it to find the appropriate 10 lines of useless markup that surround one word property.

CSS is infinitely more simple than XAML style resources.

I'm also very partial to the pseudo separation of concerns where HTML is for semantics, and CSS is for style, and JS is for effects. Tying all of those things into one XML based language just doesn't make sense.

That said, the whole MS C# stack has really been great to work with outside of XAML and its default elements.
AFAIK, Spotify's "app" is mostly a Chromium shell on all platforms.
Photovoltaic Cells Tap Underwater Solar Energy - U.S. Naval Research Laboratory
But was it serving _your_ 500 error page? In which case you could make it say anything you want. Heroku platform errors are not 500s; they're 502s (or 503s, I forget).
Boot 2 Gecko - Bay Area Mobile (Mountain View, CA) - Meetup
Why, do your users care?
Yes, but I was talking in context here. The level of patriotism you had in Poland in World War II, is nothing like the (far lower) level of patriotism you get of scientists in affluent modern states in no immediate danger.

Plus, the rest of the context is the target of the attack and precedence. Given those constraints, one can only thing of 2 such states. And it's not like those "30 countries with populations over 40 million" are not spied to death already, or that they had foreign policy autonomy on the level of making such attacks without asking consent from a certain power.
Yeah! I had to choose to wait on Heroku or get the post out I chose to get the post out. I will take a look at the logs and see what happened. Thanks for trying it out though!
I don't get why people are downvoting this - anyone care to chime in as to what he said that was downvote-worthy?
Circle Numbers with CSS and HTML5
I think the amount of OPSEC that went into this project is sufficient to exclude any group but a wealthy nation state.
Buy Fleshlight Girls Online
A list of testimonials from our customers that have taken our recommendations when it comes to purchasing the best male sex toys in the industry today.
From the Wikipedia page on Jacob Appelbaum:

> He has worked for Greenpeace and has volunteered for the Ruckus Society and the Rainforest Action Network

> Appelbaum is known for representing Wikileaks at the 2010 Hope conference.

The US government has a long and well documented history of systematically harassing political dissidents.

Edit: my bad, skimmed the article and thought it was Appelbaum who was detained.
Pretty narrow view. First, it's not "outside of work". What was described _is_ work. Second, it's 10 days out of the year, not 365. It's not meant to replace or displace any other recharging you might engage in. And, wow, maybe work with people you could consider friends?
Well, MD5 attacks are actually quite old news[1,2,3,4]. There even are some open source projects to help you find them[5]. Would love to hear more details on what was the breakthrough that Flame introduced.

Edit: The breakthrough that Flame introduced can be read here[8, 9]

SHA-1 is not yet broken, as MD5 is, but fortunately we are having the SHA-3[6] competition (like we had for AES[7]).

[1] http://www.springerlink.com/content/d7pm142n58853467/?MUD=MP

[2] http://www.computer.org/portal/web/csdl/doi/10.1109/CIS.2009...

[3] http://eprint.iacr.org/2010/643

[4] http://stackoverflow.com/questions/1999824/whats-the-shortes...

[5] http://code.google.com/p/hashclash/

[6] http://en.wikipedia.org/wiki/Sha3

[7] http://en.wikipedia.org/wiki/Advanced_Encryption_Standard

[8] http://www.cwi.nl/news/2012/cwi-cryptanalist-discovers-new-c...

[9] http://news.ycombinator.com/item?id=4080240
I just checked my download page, and the new additions are showing up even though I bought several days ago.

According to the front page, the new ones are for people that paid more than the average. If you have bastion but not the new three, then perhaps they were based on the average when added to the bundle. That's likely gone up, so if you paid less than the current average but more than the average when you paid you might not have gotten them.
People should just learn to use bcrypt to season their food.
Who says they didn't know? The attack was non-destructive and primarily targeted at Iran, which is something the NSA is probably not too upset about.

http://en.wikipedia.org/wiki/Flame_(malware)
Not what? That you've suggested a completely different scheme (single algorithm with a key) to the one described in the comment I replied to (combining multiple algorithms)? :)

(Note that even using a standard block cipher requires a separate evaluation for different purposes -- you can't claim that your hash function/MAC/mode of operation is as secure as AES only because it's based on AES.)

If you read my replies in this thread, I emphasize the point that if you really need a custom function with secret parameters, use a single algorithm with a secret key (I even gave a link to one such scheme with HMAC.)
It looks like that is what LinkedIn claims to have done.

http://blog.linkedin.com/2012/06/06/linkedin-member-password...
The Ford of the future can tell when you need to poop. lol
You can play skyrim on xbox.
anyway that is not the point. You have games on your laptop, you have games on your phone and you have games on your tv.
Pro tip: make sure there's a link to your home page from your blog.
Me either. Just part of the long trend of diluting intense words and chasing after new ones I guess (see: awesome, incredible, epic, etc). Kinda wonder where the language will go next.. doubleplusgood?
> I have no idea what it was like for SPDY, but given that the "innovative" header compression feature somehow survived, I'm guessing not good.

Considering the overwhelming majority of HTTP requests are nearly all headers, and request headers see 88% compression with SPDY [0], you seem to have an awfully negative view of header compression.

[0] http://dev.chromium.org/spdy/spdy-whitepaper
How Cloudfuji (S11) uses Cloud Foundry to make open source Apps big business
The US is not a nation-state.
I like the idea of independently replaceable boards, but the drying rack isn't the answer. It may be great for heat dissipation, but you'd be surprised how many dangers are present in an apparently empty room (dust, ceiling leaks, your hipster keychain, etc.).
LevelUp raises another $12M from From Highland & Google Ventures
There is always the possibility to make a paid version then without ads. Or to upgrade via in-app-billing to remove the ads in the free version.
The people who care that it's a Heroku issue not app issue (hint: not many) have probably already heard about the Heroku outage.

Everyone else will be confused about what the hell this "Heroku" thing is.

That said, if they don't use appropriate error codes (maybe 502 or 504 for Heroku issues and 503 for app issues?) they should. But I don't think error messages should mention "Heroku" by name.
Were you targeted?
For future reference, Humble bundles have always worked that way... :)
And yet sadly, these reports are probably good for Flurry's bottom line.

"Flurry? Do they support Android?"

"Who cares? Nobody is developing for Android because it's so fragmented."
per-user salt.
Could see some great healthcare applications for this using legacy hardware.
I must remember this excuse.
I think one has to consider the reasoning for not supporting it any more. The shift from 32 bits to 64 bits is a pretty big one. Prior to this being a requirement it was totally normal for Apple's older hardware to run the latest operating system version, and for people that have 64-bit capable machines, I assume that the same longevity will be seen. The change to 64-bit also affects the amount of RAM which may come into play here as well.
> there's more value in publishing it, than sitting on it until you just blow it all away on one exploit anonymously

Value is a subjective thing. Some people want money and fame, and for them it would be better to publish. But if you want to get rid of Iran's nuclear program because, well, you don't like nukes, or you don't like Iran, or you Just Want To Watch The World Burn, then well...

> At least, you would _hope_ criminal enterprises don't actually have the means to fund and recruit their own secret, cutting-edge math research labs/networks :)

Why not? Big business is big business.
"Hmmm. Would love to say but worried abouthttp://www.jacquesmattheij.com/So+you+are+making+good+money+...

----------------

I thought you're not making money.

Post your app here. I bet a lot of people would be able to point out why you're not making money on Android.
> And submarines and cell phone networks are pretty standard technologies, well understood,...

But what about, well, drugs? Don't drug cartels employ chemists to refine old drugs and develop "better" ones?
>I mean, if I had the capability to screw up Iran's nuclear program in my spare time I probably would, because, y'know, fuck Iran.

Fuck Iran why exactly? Because toppling their democratically elected government and establishing a puppet in the fifties wasn't enough? Or arming Saddam's Iraq to fight them in the eighties?

Or maybe because, say, TX can execute 15 year old "criminals" and ban abortion and/or gay marriage, but Iranians don't get to decide how they want to live? Or maybe because what's OK for Saudi Arabia is not OK for everybody?

Or is it because they haven't harmed anyone in the region, where other nations have already invaded 2 nearby countries?

Or just because, you know, muslims are bad in general? (I don't like the religion myself, but they have the right to do as they damn please in their OWN country).
I see the error, bad link on my part :)
Facebook to release ID of users who abused woman online
Big raise from these guys. Plus they've lowered their processing rates to 0%. It's a race not only against other mobile payment startups, but also against the Walmarts and Targets of the world.
Did you read the article or the mailing list threads? This attack is hardly old news.
Let's hope Apple eventually adds a depth sensor of its camera. It may be because there is movement directly behind me but I just tried it out and it went a bit haywire (most likely because of the movement behind me). And once I really want it to pause/play and I raise my hand I have to kind of go back and forth to activate it.
Ask HN: App idea for travellers
While on holiday last week, I went on a day trip to see Antwerp, Belgium. There was no way we were going to be able to look up and discover all there was to see on our own, so we decided to do the touristy thing and take the one hour tour bus.

As we were driving around, the tour guide was telling us about each sight and providing a little info about each attraction. At some point during the tour, I thought to myself how nice it would be to come back and see all these places my self, while riding around on a bike or walking around. But there was no time to write every thing down. Then I realized it would probably also involve looking up each attraction on the web and plotting my trip on a map and would eventually become this whole to-do. I thought to myself how nice it would be if I have my own little tour guide to guide me around - I just pick the city, arrive and he takes me through it. He tells me where all the nearest tourist attractions are based on my position and provides me with directions and a brief overview of each atraction so I can walk / cycle there and take a look if I want.

That's when it dawned on me, this would probably make a good app. It's kind of like GPS, but more for tourists walking / cycling around. I could just rock up in a city and start browsing attractions based on the suggestions from the app that sounded good to me. It could give me a brief history / overview of the attraction, directions and even a link to the website if I wanted to research further.

So, before I pretend like that I'm the only person to ever think of this, let me ask - are there any apps like this already? Any good ones? Recommendations?
As a new but regular traveller, I really hate planning every little stop or checking maps before the time. It would be great to just arrive somewhere and start exploring from there, with some knowledge of what was around me and take things at my own pace with my virtual tour guide (audio preferably so you dont have to have your head buried in your phone the whole time) helping me along the way.

If there isn't anything along these lines, what do you think of the idea? It would mainly be for travellers so I'm not quite sure non-travellers would see the need (I may be wrong). Does this have merit?
if furniture is more dangerous than terrorists, then the bar isn't very high for border checks
http://en.wikipedia.org/wiki/Sarcasm ;)
This is simply a case of border control agents going
overboard

Again, and again, and again, and ... ? It's not an accident that these are the people being harassed. Again and again people involved in computer security, certain political campaigning and other 'dangerous' occupations are harassed. Far too often to be incidental.

Suggesting it's because of something they said is ludicrous and aggravating. That's the same argument as suggesting that if someone didn't want to get raped, she shouldn't have dressed skimpily. While you don't even know what she was wearing.
That's why my door locks aren't easily opened unless you bring TNT.

But you got the question wrong. There is no metaphor involving doors and locks about seller being unable to sell and thus losing money.
There's no brand change.
You do realize that it's a 6-figure investment to hire an engineer comfortable with all of those things plus more to deploy a multihomed setup?
That's correct. I certainly am not pretending to speak for all consumers in all situations, which is why I stated it can matter.

My primary point was that since it can matter, the information should be presented. An underlying assumption being that it can't hurt, but could help.

However, you brought up a point I hadn't fully considered : namely that this information could be directly confusing to some users and by extension undermine their faith in their service provider.

That said, I think the sample error message in the OP is sufficiently clear for the broad spectrum of users. Therefore, I believe presenting users with that message, or something similar, would do more good than harm.
If it's open source, then git/svn/cvs pull a copy of the repo and read the code. No need to interrogate the guy.

While I understand what you're saying here, I can't help but think of how many times my co-workers asked me something they could have easily looked up via Google. I can easily extrapolate that to a border guard, especially if there's an added benefit of harassing a guy you don't like.
Are you comparing developing Flame to cooking meth or freebasing coke?
Your email is not visible in your profile. You may want to change that before the two of you are not able to connect.

You have to put it in the text field where your linkedin/ website are listed to be public.
Carmageddon: Reincarnation is coming to Linux
No, they aren't entitled. They just take. They are doing what they want and having entertainment.

Don't you think it is symmetric?
HBO is doing what they want and making money.
Torrenters are doing what they want and having entertainment.

So why blame people for stealing even if the owner doesn't? Who are you to blame anyone if the "victim" doesn't feel affected by "crime"? Who are you?
This seems specious. Correctly assigning blame won't matter to readers; most people couldn't care less. Sticking a different brand name on the failure is side-stepping the issue: nothing stays up 100% of the time. Create a custom page that treats the situation with a little bit of levity.

If legitimate downtime happens often enough that someone would actually internalize the difference between your failures and Heroku's, you have bigger problems than your error page.
I get the feeling we can judge the amount and timeline of investment by Western governments from these releases.

Like any other new capability /weapon these things will be used when they are ready (No president is likely to wait and see if bombing Iran works first)

So 2006 Bush gives the nod to ramp up the program, 2010 and stuxnet gets into the wild. Four years of development by serious people.

The md5 attack was made known in 2009 and now three years later a similar attack. We have reports of viable hardware attacks and fab-based alterations. So 2015 - the year a secure server gives up it's secrets via hardware ?
Not to be ungrateful, but any chance that we'll get soundtracks with these as well?

The addition of FLAC soundtracks was great..and for anyone who hasn't checked it out the Superbrothers: Sword & Sworcery EP soundtrack is _amazing_, as is Bastion's.
Minimum Viable Brand?
It may be easier than small claims or sending threatening letter. Something along these lines happened to me in New York state. I consulted a labor lawyer who pointed out that this was in fact illegal in the state of New York. He actually suggested I contact the state AG office. Once I explained to my former employer that they could be fined they paid up quick.

Check your state laws.