skysight-inc/HackerNews huggingface dataset:
Damn, poor dude. The remote wipe was a pretty big asshole move.

I'm pretty curious about the initial break-in on his .mac account. I suspect that either he's misremembering and he has used the password elsewhere (and it was compromised there -- easy to happen over so many years of use), or it wasn't very strong to begin with and it got guessed after a handful of attempts.

There are a handful of takeaways from this:

- Backups, obviously. A lot of people here so far are mentioning online backup services, but those would be just as vulnerable to this kind of attack, since they're accessible online and use an email account for password resets. Online backup services and physical offline backups solve different problems and it's a good idea to use both.

- Since I haven't seen this mentioned anywhere else: I wonder if it's time to consider keeping a "secret" email account that's only used as the password-reset account for all of your services? Something that you never use for communication, never publish anywhere, something with its own entirely separate password.

- Be careful about owning multiple devices from a single vendor that provides remote access and other kinds of control to those devices. Mobile devices are inherently insecure; they shouldn't carry sensitive personal information, ever. There are a lot of really good reasons for going with a single vendor, and remote wipe is a really valuable tool in case of theft, but the downside is ... well, this.

- Use some kind of password storage mechanism. (I prefer something that's not tied in to a publicly-accessible service.) I've made a game out of memorizing horrible passwords, and can recall quite a few without any patterns or mnemonics or the like. Still, I use KeePass every day anyway.

And maybe most of all: I doubt there's a single one of us that has a moral high horse to ride on this. Everybody always has something better to do than set up a new backup system or dick around with something that will only maybe hurt them someday. I'm constantly harping on other people about backups, but only a couple of days ago got my development machine on our network backup system; I'm pretty anal about passwords, but still I'll panic pretty badly if my laptop is ever stolen, because in there, somewhere, is probably a plain text password stored in a file that I've forgotten about, and there'll be a chance that I'll forget to change that particular password if I find myself having to suddenly change every single password for everything I've got access to.
My wife recently started using this. She wanted to have another source backing up her photography (being a photographer and all...), and this was highly recommended by all her friends with expensive cameras and even more expensive lenses.

I was shocked, mostly because the price was fairly inexpensive, and her lot love to spend lots of money on small things.

I take pictures with my iPhone. =/
The relationship between OOCSS & CSS Preprocessors (pt.1 of 2)
Google + Yubikey would be great. Google + 2 step authentication + Yubikey would be a dream (and a bit over-kill?)
I don't know the details of retail brokers vs HFT, but this writeup http://www.nanex.net/aqck2/3522.html has a lot of charts showing trades with 25 millisecond intervals.

Just looking at things in a big perspective, the fact that the system is designed for allowing trades at such frequencies makes it seem like markets these days no longer exist for the benefit of the listed companies.

Then again, maybe I don't know wtf I'm talking about :-S I guess I don't understand how real value can be created from such a system.
I think that if you settle for a layout that is, from the beginning, relatively mobile-friendly, responsive design will work perfectly and have minimal overhead.

The web is going mobile and that's something designers and developers have to learn to live with - don't think of your interface as a two-headed creature, but rather as a cross-device design which can adapt itself to different resolutions and screen sizes.

Responsive design won't make things easier if what you want to do anyway is two completely different sites. It will probably work better for you if you place the focus of your design at a spot that is slightly more mobile that desktop-oriented (in today's standards). Then it will be all about filling up empty space whenever it's available.
Help your users with autological help text
You can expect more visitors in the next few hours from HN as the day progresses since its almost weekend and all. I would consider those new views pretty valuable. Maybe you could serve a static page untill the 502 situation gets resolved.
Guidelines for using CSS Preprocessors with OOCSS (pt.2 of 2)
Computer Transport Must be Done Properly and Professionally
I think there's an aspect of convenience, too. Personally, I prefer that to, say, configuration stored in some unspecified location in ~/Library/Application Support/Application/* (on OS X).
Custom backups using Duplicity+GPG to multiple clouds. Wuala[1] if you want something working out of the box. I have 18.5 GB of free storage just from coupons found with little Googling[2].

[1] https://www.wuala.com/

[2] http://static.deno.pl/pub/wuala-storage.png
And we are back online...Glad I randomly woke up at 3am
Josh Bloch moving on from Google
Access Linux GUI From Windows - Freeware Implementation
There are a variety of tools for accessing linux console from windows, ie using telnet,ssh etc etc… but to access GUI of Linux (of course X ) from windows , unfortunately there is not a good number of solutions available, following is the ultimate solution for the same Here Utilities needed to accomplish this [...]
If you hack into my email account, you still can't read any password reset emails that are sent to it: https://grepular.com/Automatically_Encrypting_all_Incoming_E...
There are people on the other end of the email who are doing this for some rational reason, not specifically to piss you off. Generally, acting nicely to people you don't know well will get you a lot more than being hostile.

Hi Quora team,

I'm not very happy with the recent changes to privacy settings on Quora and I'd
like to delete my account. My email address is ...

I've heard from others that, in lieu of their account actually being deleted, their
followers and username were just reset. Could you ensure all the content I've
created is fully *deleted and gone from your database*? I'd do it myself but all
you can do is hide it.

Thanks again for your help. It's unfortunate that it's come to this, but I'm just
not at all comfortable with your new policies and so I want to make sure my
persona on the site is truly and completely gone.

Best

(Also, "deleted permanently without a trace." is absolutely impossible in the current age. Even if Quora did manually remove everything from their databases, cache servers, logs, etc, they'd still have to figure out some way to remove it from search engine caches, API clients, and anything else which is, in all actuality, totally beyond their control. Whether regular users realize this or not, as a member of a community called "Hacker News", I fully expect everyone here recognizes the state of things, and the irreversibly of creating something.)
Top wordpress themes for free
Word press, due to its unique feature of free themes, is the most favorite blog space provider for bloggers all around world. This facility by a blog space provider, of top WordPress themes for free, attracts many bloggers and thus makes it popular among bloggers
> considering that the survival of the company could be at stake

It's at stake either way.

QA is not risk free. Time spent in QA is opportunity cost lost. Many things are very time to market sensitive. One must balance "perfect" against "shipped".

This is even more true in (electronic) financial industry.
Forgetting is a blessing, not a curse,
> but still I'll panic pretty badly if my laptop is ever stolen, because in there, somewhere, is probably a plain text password stored in a file

You really should consider using using whole disk encryption like FileVault or PGP-WDE. Encrypting a single directory or a home directory is not a good solution.
Find Profitable Niches with ClickBank Gravity Divramis Internet  Blog
Is there some background concerning the author that I'm not aware of?
Asking because some comments (at Emptyage, not here) seem unusually hostile.
One reason may be tabnapping. The risk was described by Aza Raskin while he was at Mozilla.

http://www.azarask.in/blog/post/a-new-type-of-phishing-attac...
> I haven't seen anyone who owns an Android tablet. And I know 40-50 people with iPads.

That's why there is no "tablet" market where the iPad is a high-end player. There is an iPad market, which is huge and where US$499 is a reasonable price, and then there is a tablet market, where you'll find the Nexus 7, Kindle Fire, Nooks and others fight each other (but not the iPad) for a lower price point. In this second market, an entrant above the US$ 300 range is doomed to fail because it won't compete with the iPad. Microsoft has some great people working for them, but they have no product that can compete with the iPad.
Use FileVault 2 and remote wipe is no longer necessary.

On current Macs, a live USB stick might be a better idea than a live CD. Or even better a bootable backup created with Carbon Copy Cloner (CCC) or SuperDuper.
Sorry gang for the site going down. Working on it now.
Wuala is great but not recommendable for backups if you care for Mac metadata and an app running silently in the background. I have no idea why Wuala has not implemented these features after all the years. Crashplan is Java-based too and has both features.
Depending on the polling method / frequency, he could have created some problems for them. As to automatically popping people off the stack registration is often a complex issue where I want the CS101 10am-12am session vs CS101 8am-10am session, but only if I can also move my Math 10am-12am to TR at 2pm - 5pm etc. (And that's a simple change vs some of the optimizations I did.)
Why does the safety of manned space flights get so much attention? Last time I checked the AIDS or malaria weren't cured. Perhaps those interested in fatality rates should divert their attention to Africa and give SpaceX more breathing space. It's not like there's going to be a shortage of astronauts.

Elon Musk: There must be some ability to experiment to advance the state of the art. In the early days of aviation there was a great deal of experimentation and a high death rate. We don't want that — the public would not be accepting — but by the same token we can't have a situation where no deaths are ever allowed, because that would put innovation in a coffin too.
http://www.latimes.com/news/opinion/commentary/la-oe-0801-mo...
My first impression is that either a session token or password was intercepted from iCloud either via malware or MITM. But the post mentions that the iCloud password was reset, which means the account may have been hacked via Apple ID security questions[1]

When I just did this for my own account, the first security question is your date of birth, which is easy to find for anybody via Facebook. The second was a generic security question.

These are easy to guess or to find out via social media. You could spearfish a user by sending them a free account to a web service and asking them the same security questions on registration.

The security isn't adequate, considering the data that is held behind an Apple ID. I also can't believe they have a delete feature that can not be undone.

For my own account I have done a few things. First I have a secret email address for online accounts that require higher security. These emails are unique for each service and are not published anywhere. I have also removed all of my personal information from my social accounts, such as date of birth, name of school, etc. and my security answers are always random strings.

The other option is that malware was used, or a transparent proxy. If iCloud doesn't verify the server certificate it would be straight forward to proxy the HTTPS requests. iCloud will also always send out connection attempts every x minutes, so if you accidentally connect to a public WiFI hotspot or personal network with an intercepting proxy setup, you can have your password stolen in a matter of minutes.

I am also not super-confident about two-factor auth. I noticed that with Google Apps the verification SMS messages can be read using the web interface for my telco provider. A web interface that is protected by nothing more than an email address and password with the same weak security questions.

I think it is very feasible to hack around second-factor SMS notifications by first hacking the telco provider web interface and reading then deleting the SMS alerts. You are only as secure as the weakest link in the chain.

[1] https://iforgot.apple.com/cgi-bin/WebObjects/DSiForgot.woa/w...
3D slider jQuery plugin
"We think the two periods of time when there was a sudden drop in trading (9:48 and 9:52) are when they restarted the system. Once it came back, the Tester, being part of the package, fired up too and proceeded to continue ..."

Ouch!
Top Apple Executive Saw Market for 7-Inch Tablet in 2011
Dedicated attackers routinely bypass two-factor auth. If your second factor is your phone, then they simply attack via the phone carrier first.
> Setting up a challenger to QuickBooks does sound dull.

FWIW I find Freshbooks to be a pretty exciting product as a user. I'm sure I would enjoy working on it as a developer, at least for a while.
Vector Graphics in the browser with Haxe
That's why google let you use multiple phone numbers to verify.

Lose your main phone? No problem, login to your account using the two factor code from your landline (or partner's phone).
Another thread here has a link to a blog post with (admittedly speculative) evidence that, at two different times, they tried rebooting the system only to have it come back up and start making random trades again.
Thank you for this comment, this explains quite well something I have not been able to put clearly myself. Whatever organization a firm decides to follow, it needs 'something' to coordinate efforts within itself. Hierarchy is one way, having very clear focus (and a culture shared by all) another one.

That's also one of the reason most big and successful open source projects manage to get away with much less explicit organisation.
But, but, it must be in the CLOUD, don't you know?
Numbers: ~20% of undergrad CS majors are women. 23/51 hacker school students are women. Assuming that people applied in proportions roughly equal to the undergraduate degree ratio (a large assumption, I am sure), that means that 4 times the men are applying to only 1.2x more slots - that is, the average woman has ~3.3x better chance to get into the school than the average male. Why is it that balanced gender is worth (apparently) far more than the other qualities? Why is it that even with the large admission boost you offer financial aid - surely the former would be enough to attract enough women (or things are worse than I thought!)

Note that all of this is just curiosity. I'm happy to see such proactive courting of women in CS, but I've never seen anyone else push so hard for it without being explicitly for the advancement of women in CS.

EDIT: reading the site, one segment sticks out at me as seemingly answering my question:

>We're not going to lower the bar for female applicants. It frustrates us a little that we feel the need to say that, and we think it underlines the sexism (intentional and not) that so pervades the programming world.

It's simple statistics that implies this, not sexism. Consider the following assumptions:

A) There are fewer women programmers than male programmers in the world.
B) Women programmers and male programmers have an equal skill distribution.
C) People apply to the program in ratios reflecting the "real world".

Therefore, the enrollment should also reflect the real world. Clearly, this is false, so one of my assumptions is false - C is the suspect one.

Anyway, I'm extremely happy with what you're doing. Keep up the good work.
"I'm sure Cory would have given a talk in 1970 on "The Coming War on General Purpose Hardware" where he bemoans the rise of the integrated circuit"

Well, Erich Fromm criticized the death of rationality and the rise of the purely manipulative and blind intelligence a decade before that. Bleh to integrated circuitry: we're so far away from ourselves that even we became a black box, accepting a neverending, meaningless stream of impressions which we compare with other impressions, but not ever understand.

So yeah. That this now takes on physical manifestations isn't exactly surprising if you've paid attention.

IMHO they're both right, and "they're criticizing something I assume to be beyond criticism", isn't an argument. Neither is "this could have been extrapolated before".

"he's just grabbing headlines with this nonsense."

Ahhh, sweet complacency, and the peaceful dreams of those who don't.
Indeed. I know several young developers and designers whom any games company worth its salt would hire on the spot (and actually, they're all employed by such) who have "come back and talk to us in two years time" memos from Valve. They don't just want great people, they want great people who can self-direct.
I wonder why the article author was (seemingly) targeted? And who else might the criminal be targeting?

Or could this be completely untargeted? That might mean that anyone with a password vulnerability is at risk of having their digital life wiped out. That seems pretty extreme for lulz.
Indeed:

http://williamedwardscoder.tumblr.com/post/24949768311/i-kno...
That 'deniable' part is a bit thin. Say, law enforcement finds this device at your home. Even if it is not plugged in, a case could be made that you have been videotaping. It would be more useful if this thing had a secondary function, say as a file server, and if it were priced like one (this box is US $5999.00 for 500GB)
Internet can be an enabler or a catalyst for big changes. "Another social website" is likely the first step in rethinking the government. Social online education sites can push more people to physics and chemistry to solve energy production and storage problems. They might be even instrumental in that they allow e.g. smart sw entrepreneurs or hedge fund analysts to learn new skills and domains and apply their capabilities where it is most needed.

What big problem are you solving?
Delhi Weekender – Celebrate Friendship Day with Food Festivals
I think it's more likely a failure on the part of the 'better' institutions. Whether through valuing something more than intelligence and an enterprising attitude, or through perception, or simply through old school mentality. There are a large number of reasons why this man would choose UCF over these other schools.
Google is also unlike many tech startups in that its founders invested several years in academic research before founding a startup around it. It's a bit closer to biotech startups in that sense, a spinoff of research that was initially grant-funded. That allows for more of a focus on blue-skies research, because there's no pressure to produce any revenue during the initial research phase (their work at Stanford was NSF-funded).
http://www.aaronsw.com/weblog/acsoi last two paragraphs might help explain discrepancy.
Yes. My facebook account got hacked by a someone who pretended to be me, stuck in a foreign country; they asked my friends for money.

After that I turned on 2FA for gmail and facebook.

Sure, it's not perfect - but no security is. But is is definitely better than using passwords alone.
Export your Facebook contact list with emails
The SEO Firm Delhi A Team Of Professionals
Therefore, why don’t you hire SEO firm Delhi that is an essential platform with great and cheap seo packages based on cheap seo services plans and promote your cause online.
Apples vs Oranges: Apples taste like apples and oranges like oranges. if you want apples take apples, or else oranges..
It's also a permanent change in response to temporary problem.

If the email said we have a significant problem with X, we are considering our options, but it a big problem so for the next 3 months we are going to do Y, and while we work out a better long term solution.

And then 3 months from now they say: Core work hours are 11:00am-3:00pm and you are expected to be online and available then even while working from home. Each team is expected to come up with a mandatory 1 or 2 days a week where everyone is expected to be here for core work hours. You no longer need specific permission to WFH on non mandatory days.

Then yes, it's a big change, but it's more likely to seem reasonable AND it seems like people spent a while deciding on a reasonable solution vs. someone randomly sending a quick email.
GetUserMedia API lands on Chrome
One problem is that with SaaS apps, the GPL isn't "viral" in the same sense that it is with desktop apps. It doesn't provide protection against a competitor taking your code, adding proprietary extensions to it, and then running a competing product that's an improved version of your product without sharing back the improvements, because they would only be "internal" improvements that don't have to be shared. You can stop that with the Affero GPL, which considers hosting the app to be equivalent to "distribution", but enough people seem to hate the AGPL that there's not a lot of incentive to bother releasing at all.
Half of U.S. Smartphone Owners Find Mobile Data Often Slow, Study Says
The Higgs wasn't the only predicted particle that evidence has been found for recently. It looks like the Fermi gamma-ray telescope found some decent evidence that cosmological dark matter is composed of neutralinos, which have a rest mass, oddly, about half that of the Higgs:

Evidence for gamma-ray halos around galaxy clusters: http://arxiv.org/abs/1201.1003

Evidence for a 130 GeV spike in gamma-ray emissions in certain locales: http://arxiv.org/abs/1205.1045
Paras Tierea
Paras Buildtech presents a new residential project Paras Tierea located at Sector 137 Noida Expressway. Paras Tiera Noida offers Studio, Low Rise and High Rise apartments with the range of 2/3/4 BHK in affordable prices.
This is where a business co-founder is just as valuable as a technical co-founder. The trick is that business co-founder has to have equal respect for technical crafts of programming and design. If they also have startup experience, or at least good intuition about where to focus when you have extremely limited resources, that's gold right there.
Twitter Bootstrap header cheapens the whole thing for me. It's fine if you're designing the documentation for an open source project. It's not fine for a commercial product.
have you ever heard of a AAA indie movie?
they're not doing it from within the feminist movement for some reason, whereas the feminists trying to get them banned are part of the feminist mainstream.

You claim that the sex-positive people who you agree with don't call themselves feminists, but those that do things you don't like are called feminists, and hence it's OK to dislike all "feminists".

Except that's not true.

Example: "SlutWalks" ( http://en.wikipedia.org/wiki/SlutWalk ) are protests where people walk/march around in revelaing/slutty clothes to protest at people who blame rape victims for getting raped based on they dress. It started in Toronto. What do the organisers of this call themselves ( http://www.slutwalktoronto.com/about/who ): "Heather Jarvis is a queer feminist activist. … Laura McLean is a feminist who … Erika is a sex-positive feminist who … ".

Sorry, but "feminism" can be pro-sex (or anti-sex or pro-porn or anti-porn, it's like trying to argue if GPL is less free or less free than BSD licence).
Why a Ubuntu user would want to switch to Arch Linux
Yes but he didnt realise what was happening. Ran for the computer not the wifi router.
Venture Capital Firms Beta Test Brazil
London Olympics Pictures