skysight-inc/HackerNews huggingface dataset:
>Marcus Hirn: We had multiple scans and intrusion attempts from malicious attackers using automated software and hunting for vulnerabilities to exploit; this time they were targeting the server's IP. The first attack came on the 5th day and lasted for half a day. The Thruzt team blocked their IPs which appeared to be coming from China and Salt Lake City, Utah. After some battle, they dropped the attacks. But after we blocked, he or she came back and attacked again for four days, brute forcing SSH, brute force password attacks that attempted to get root user access. It slowed the server down. We had to reboot the server to force a new IP in order to get access and be able to block him.

This is really, really common. Look in your ssh logs on almost any internet-connected host with an open port 22 and you will see hundreds, if not thousands of ssh connect attempts per day.

Now, my general strategy is to simply disallow all password authentication, and I force everyone to use ssh keys to login to the infrastructure I manage.

Even so, while this prevents brute force compromises, you can still be fairly easily brute-force DoS'd. OpenSSH allows a certain number of connections in pre-authentication state; I've had people bombard my servers with login attempts faster than OpenSSH could fail authentication. In my case, I've got my own serial console server, so it's easy to login and block the offending IP; but that's what things like fail2ban are for.

Of course, this just prevents ssh logins, it doesn't, say, kill your webserver (and if OpenSSH is configured correctly, e.g. if the last guy didn't crank up the number of users that can be in the pre-authentication state to "solve" this problem last week, it's not going to cause high system load.)

I mean, I just don't see how any of this has anything to do with hosting on amazon; There are programs searching almost all IPs on the web for known vulnerabilities; when these programs infect a new computer, that computer joins the botnet; there are a huge number of computers dedicated to this search for vulnerable computers, so it's really not uncommon for servers running known-vulnerable software to be compromised within days, hours, or even minutes of connecting to the public internet.

Ah. I see what it has to do with hosting on amazon:

"Marcus Hirn: I think many people believe it's like a normal web host where you create an account and then there is a cPanel where you click to install WordPress, or to setup a firewall, or to access FTP, etc. But on a cloud server you have to not only do all configurations yourself, but you also need to know what software to get and run. For a tech geek, it's a dream as you have 100% control of your own server with easy added scalability. Yet to get to that point, it requires days, if not weeks, of learning the Amazon system."

He's comparing amazon to shared or managed hosting. And he's right, but everything he says about amazon or "the cloud" is true of any situation where you manage your own server.
I only think this would be a problem if different coders accustomed to different "browser/collaborative IDEs" want to code with each other.

As long as all of these stick with the standard filesystem heirarchy, everything should still be fine, but it would be awesome to watch them adopt a single backend like the Obby/Infinote protocol or something.
Well, he used the same numbers that the IPCC FAR report's "Policymaker's Summary" section chose to use, which repeatedly uses the term "is predicted" (admittedly, qualified with "based on current model results" or specific scenarios.) The explicit purpose of that section was to suggest possible policy options based on a set of long-term events stated to be found _with certainty_ (their words) by the working group that were going to occur.

Let's say that I am a "policymaker" and not a climate scientist, and I sensibly choose to defer to experts how I should plan for any potential climate change. That's the section that was written specifically to me for that purpose, by the working group--with the same numbers that this guy quotes.
The word "Kickstrapizing" made me throw up in my mouth a little.
Anyone know what the meaning is? I'm curious to know. They don't say, Google Translate doesn't have a clue, and a quick Google didn't turn up anything...
Also look at Obby/Infinote. http://gobby.0x539.de/trac/wiki/Infinote
Why would the lifetime of a $99 console be 5 years? At that price, they could release new ones faster. Also, as it will run on Android, games from previous generations will run on the new one.
Well, actually he has precedent in his favour.

CFTC v. Walsh: District Court Releases Funds Frozen in Civil Case to Pay for Attorney in Parallel Criminal Case: http://www.columbialawreview.org/articles/comment-cftc-v-wal...

Also, how else do you get to have funds released other than through petition? And he has already submitted to the justice system, otherwise he wouldn't be turning up in court.
If the funds are subject to asset seizure the DOJ would never release them in a situation like this. If they got a conviction there'd be nothing left - all paid to his surprisingly expensive legal team based in the caymans. Even the dumbest feds ever would see that coming a mile away.
Great Inspiring jQuery Plugins for Web Development
He's not an idiot. Maybe he has to give up his multi-million dollar house but him and his group of highly-technical colleagues have not a lot holding them back this minute from starting over, aside perhaps initial funding for hosting.
Rudel (emacs plugin), in theory, supports multiple collaboration protocols. They've already implemented one.
Why would you use a human flight expert instead of an algorithm?
Wonder whether its a problem with some DNS servers.

http://www.downforeveryoneorjustme.com/laktek.com
>MU was the hub of piracy on the net

I'd like a source for that. I believe TPB is and was in that position. I also believe that rapidshare and all those other sites had a similar amount of pirated content. In general you'd have a mirror of a given file across 3 or so sites which would indicate MU wasn't that far different from those commonly used as mirrors.

>statistical sample of 10,000 random accounts, and correlate ... pirated content

Why? That shows that people downloaded pirated content (which makes the downloaders guilty, not MU). I don't see how that makes MU guilty.

>Anyone with access to the Apache or nginx access logs and the hosted files could do that in their sleep.

uhhhhhh no. Not at all. How the heck to you figure out if a file is actually legal or not? How do you tell if a downloader of a file legitimately owned that file or not? An artist once distributed his album to me via MU after I paid (I wanted it in a different format than was avaliable via automatic download). I was a legal downloader, but if I gave the link to my friend he/she would have downloaded it illegally. To do such a thing they would have to first catagorize all the content, determine the copyright holder, ask the holder if it was a legal download, wait on the copyright holder to look through his/her probably nonexistant logs, and so on. This is not easy.

> idolize this man who's entire history for the last two decades revolves around criminal activities and lawsuits.

His past doesn't matter in this regard. I don't actually see how any of what you posted matters. Sure, there's piracy on MU. That doesn't mean it was illegal since they apparently obeyed the DMCA.

>It's not something that was going to be ignored

Indeed, it looks like the US government isn't ignoring it even though it was likely legal and are using underhanded methods in order to destroy the business, probably due to the lobbying money from the entertainment industry. If the government not following the law to persecute someone who's not breaking the law, and isn't even a citizan of the united states, doesn't make you sick to your stomach then I'm not sure what our government could do to do such a thing.
It's not going to be fully free probably. They're using it to bootstrap a game marketplace for their currency or whatever. They're probably going to have a facebook credits equivalent and that's how they'll make their money. Also whatever they can make from hardware.
Have you considered upgrading to stumpwm by the same author? It has all the features ratpoison does plus support for floating layout via gnew-float, among other things. And it's written in Common Lisp, so you can hack/customize/extend it as easily as [if not more so than] emacs.
This is an amazing interview with Chris Sacca and Kevin Rose: http://www.youtube.com/watch?v=Q6NpHbMFaQ8 Chris talks about being $1 million+ in debt at one point. Keep going!
They have 29 more days to go, and are currently at $1.7M. Based on the # limits that they set for their pledges, I think it would be safe to assume that they hit about $3M. I am sure that this changes the equation quite a bit.
Yup, I still work at Google. I set up feeds.mattcutts.com years ago, and my hope is that anyone who cares enough to configure Feedburner in the first place would click around to find the MyBrand feature and set it up.

I'm not trying to take away from your fundamental point about corporate APIs, by the way. At this point, any time I use a product/feature I'm thinking about how I would export my data. If the answer on data liberation isn't what I hoped, I often avoid that product.
Here's the link to the actual abstract/paper.
http://www.pnas.org/content/early/2012/06/29/1205653109
Wild. I'll see if I can test that out myself. It's possible that Yahoo was marking the email invites as spam, which would be a separate issue.
The default action on our support system (which we did not develop) is to "Reply and Close".

I believe Tender designed it this way because, at least in our experience, 99% of the time after we reply, we never hear from the OP again. So by always closing the discussion after we answer, it keeps our queue clean and lets us clearly see what discussions are still open awaiting our response.

Anyone can always re-open the discussion if they feel they have more to add. It's not meant in any way to try to discourage discussion. We could just delete it if that's what we had wanted to do. :)
http://en.wikipedia.org/wiki/Travelling_salesman_problem
Couple the nodes with AI that learns what the user is interested in, however, and the user can create meaning for themselves. No 'authoritative source' has ever created -that- kind of freedom.
The Garden Gates – An Emerging Lifestyle Store
they use still use a similar principle in India for a lot of travel -- its called a travel agency. I suppose flightfox is just making it very clear who the best travel agents are.

Gluck, I'll give this a shot during my next international travel.
An earlier story quoted his lawyers saying that a delay was pretty much inevitable, they totally saw it coming and expected it. Kim then went whining to twitter about how the US is using "delay tactics".
If there are so many strains of cancer for each patient, those patients do have multiple diseases and we should treat them with multiple drugs.

There's a medical device that lets you test the response of the patient's biopsy to multiple drug combinations.

I wonder if scaling this by:creating huge libraries of cancer drugs that only passed animal safety trials, using this test device to find the most effective combination of large amounts of drugs(maybe even combine drugs that fit the genetic profile of the biopsy strains) and using the combination but carefully managing dosage not to create toxicity , could be useful and practical to fight those mutation rich cancers ?
Can I pay a small fee and see all the results? I would even pay a monthly fee for that. I would be very interested in that.
Also, an observation about marketing copy: The main headline for Kickstrap describes it as Twitter bootstrap with "with themes, enhancements, and other goodies."

This doesn't tell me how I benefit from using it over bootstrap or another framework. I had to spend 15 minutes reading their site trying to figure that out.

A better line might be "Twitter bootstrap with more icons, animations, and 5x the page performance."
There's something I don't quite understand. If you're accused of a crime in the US how can all your assets be frozen by the government and your website taken offline? Aren't you innocent until proved guilty?

If the answer is that it's suspected that all the money comes from illegal activity and therefore frozen until a judge rules on whether this is the case or not what would stop the US government from prosecuting, for example, Larry Page, take all his money and shut down Google until he has been to court? Which he can't pay for because he doesn't have any money.

Can you really just indite someone and convince a judge to freeze all his accounts before there has even been a trial?
Here's my suggestion.

Pick a niche market. A market that you don't have to create and a market that is already lucrative. At this point you are not building a product to test a market/theory because it already exist, and proven. Then build something that's better than what's out there and compete on features/pricing because you can obviously build products fast and this can give you an edge.

Personally, as much as I like building products for consumers I learnt (the hard way) to avoid them (for now) because they will most likely fail for reasons like: audience is hard to reach, requires viral-lity most of the time for people to hear about it and use it, and requires a very well polished UI. Not to mention that they whine and expect things to be free. :)

Before you create a product, answer these two questions accurately: 1. How will I reach my audience? 2. Am I solving a real problem? (don't kid yourself)
What's the difference between your post and its parent?
The FBI wanted him extradited. He didn't want to be extradited. So there was going to be a hearing about whether the FBI got what they wanted, or Dotcom got what he wanted (or some court-mediated compromise, but that seems unlikely in this case). Kim negotiated with the FBI so they no longer disagree about whether he will be extradited, so the hearing is no longer required.
If the country you are in agrees.
"Just do it" is a pretty shitty lesson.
Last Call: Content Security Policy 1.0
The Titanian Seasons Turn, Turn, Turn
I didn't post anything in the original thread, but I had a negative initial reaction to the original article.

For me, at least, it has to do with three things:

1. The framing of the product. They make it sound like it will change to landscape of the video game market, not that it could. This type of grandiose posturing reeks of snake oil to me and turns me off completely. The device be a moderate success and sell a couple of million of units, but there's no way that Microsoft, Sony, Nintendo, and Apple (yes, Apple) are going to see it as a threat to their current gaming ecosystems. Each currently have an installed base of at least 60 million (with the admittedly dead-end Wii coming in at almost 100 million and iOS at over 200 million), and more importantly, household recognition thanks to millions in advertising spend. What needs to happen for this device to end up in 50 million living rooms? How likely are those things to happen?

2. Being wildly successful on Kickstarter is one thing, having social proof in the form of professional funding (VC, angel, and/or otherwise) is another thing. After all, it's easier to get 10,000 people to give you $100 than it is for one person to give you $1 million. I am strongly opposed to the "raise money now, make money later" approach to startups and wholeheartedly believe that it is possible to build a software startup by bootstrapping. That said (and this might just be due to my inexperience with hardware development), I don't know that it's possible to build a successful hardware business that requires significant capital outlay to get started without outside funding. Are these things profitable at the $99 price point? If not, where is the cash going to come from to mass produce these. Is 10-100k purchases enough to swing a Series A, even if those 10-100k were sold at or below cost? Kickstarter seems like a great way to sell small-batch, niche products, but not necessary any huge mainstream successes.

All of it boils down to this: I used to like innovative products just because they're innovative, but I've seen too many "great" products burned by a lack of a viable business behind the product. If I'm going to commit to a product or service, I need to know that it will be around for the long haul. I can no longer judge products on their own, I have to judge them based on their viability on the marketplace.
Just talk to some scientists, maybe? Here's the Australian CSIRO's take: http://www.csiro.au/Outcomes/Climate/Understanding/State-of-...

They produce a nifty State of the Climate report every so often, which is pretty easy to understand. There's one just been released, in fact:
http://www.csiro.au/Outcomes/Climate/Understanding/%7E/media...

Disclaimer: I currently work for the Bureau of Meteorology in Melbourne - as a programmer though, not a scientist.
Then blame it on the economy gas use fell(or at least growth fell) significantly with the recession.
I believe MySQL's working directory is on EBS, so yes, even temporary tables would be on EBS -- don't quote me on that, though.

Re: outages, we use multiple replicated servers in different availability zones -- an outage is usually (though not always!) limited to a single zone. For a region-wide outage, we have emergency backups being sent to a different AWS region (east -> west), and if shit completely hits the fan we have off-AWS backups.
Because an algorithm probably hasn't been written that is smart enough to do the complex tasks required in these cases. It would probably also need the ability to scrape websites for latest prices.
Ballmer could be right. If iOS 6 or the most recent MacBook lineup is any indication, Apple seemed to have pulled the brakes on innovation.
If you'd have filed a ticket with Dropbox support, they'd have fixed that and restored all your files instantly, no hassle, no questions asked.
Acer AL10D56 Accu
Dit Acer AL10D56 Accu is compatible met de Acer AL10D56. De prestaties en capaciteit van dit vervangende product is vergelijkbaar met die van het origineel. Op onze producten wordt 12 maanden garantie verleend. Originele producten hebben 6 maanden garantie.
Really? I've done a lot of data importing into MySQL, and it always gives me a warning that tells me the invalid Unicode code point. It doesn't generate an error, but it definitely generates a warning. You need to make sure whatever client/library you're using is passing that on to you, though.
I always find it troubling when someone with a computer science background assumes that their knowledge naturally transfers to something like climate science. Climate science is about probability and huge multi-factor models - and most importantly - models that change as new knowledge and data appear. It's just my opinion, but that seems to me to be the opposite of what most computer scientists are taught. Obviously computer scientists incorporate new data and new thinking - but I don't think it's quite the same as constructing a statistical model of how climate works. And obviously there are exceptions - but in general, I think it's just a different mindset.
San Francisco, CA
Code for America Fellow (Developer)

Are you hacker with a huge heart? Code for America is looking for developers to join its 2013 fellowship.

In previous years men and women left companies such as Google, Apple, and Microsoft to use their skills to give back.

Cities are under greater pressure than ever, struggling with budget cuts and outdated technology. That’s why Code for America is connecting talented technologists with city governments to harness technology, and innovate. Code for America is helping cities keep pace with the communities they serve by creating and implementing new applications and by demonstrating new ways of resolving local challenges. We’re making cities better, and you can help.

Join the “Peace Corps for Geeks.”

Code for America is now accepting applications for its 2013 fellowship program. If you want to write code while making a difference, this is your opportunity to build apps that will make city governments work better.

Why Become a CfA Fellow?
During the 11-month program, you will not only receive a living-wage stipend, travel expenses, and healthcare, but also the training and mentorship to be a leader in business, local government, or both. You'll get:

Gov 2.0 Training
You will start with a crash course in municipal government and gain practical understanding of the vital intersection of government and technology.

Connections
The biggest names in the tech industry and the Gov 2.0 movement will provide you with unparalleled networking, mentoring, and support.

Professional Development
Working closely with other talented individuals, you will develop lasting relationships and learn new skills and language in a fast-paced, startup atmosphere.

The Code
Not only do you decide what language to write in, or what technology to use, it’s all open source, and you’ll be contributing to non-profit GitHub repos.

A Labor of Love
You’ll not only accomplish a lot and make the world a better place, but you’ll have a lot of fun working with other passionate people. To borrow a line from the Peace Corps, it will be the toughest job you’ll ever love.

Code for America fellows are an elite group of individuals using their skills to make a difference.

Applications are due July 29, 2012. See codeforamerica.org/fellows for more information.

Apply online at: codeforamerica.org/fellows/apply
And the XKCD version is even open source:
https://github.com/chromakode/xkcdfools

They could've just forked it and added or removed commands.
It read to me more like it was annoying for them. They want to get rid of ads so they can quit spending time writing reports for advertisers/vetting ads, and spend that time working on new content instead.
I tend to give people the benefit of the doubt, and read economic arguments like that in the sense of "we will need to spend a large chunk of our civilisation's energy/material output to do this", not "Oh noes! My small, green pieces of paper!"

The thing that I worry about with the economic arguments is that the climate and/or ecosystems will reach a tipping point before we get to the point where we need to do something, and that chunk will be > 100%.
One litmus test that I use for this: If there experimental design would also vett bleach, it's still too early.
Yes, exactly. Travelling Salesman with distance being measured in dollars.
I just have a comparable question: What do I do with my new betseller novel, the writer went AWOL.
Your people costs are accurate but irrelevant. Cyanogenmod, MIUI and XDA has proven the viability of global, Android developer groups.

I daresay that they will be able to hire a bunch of Chinese android devs (e. g. the MIUI project) for less than 0.5 mil as opposed to 6 mil.
Dereferencing NULL Pointer, without a Seg Fault
Absolutely, but it's cool to see how folks constructed it :)
Global directory across organizations

It sounds like a good idea- I used to think so, myself- but I've steadily been convinced otherwise by the (quite sharp) IT guys managing our directory.
We actually did the exact same thing (concept from Slickgrid but modular rows using backbone models and what we call Modules for the view of that row).