skysight-inc/HackerNews huggingface dataset:
whilst this might be true - I get the feeling this is more of a "targeted attacked" - rather than a target of opportunity. 2factor is surely one of the best options we currently have to secure ourselves?
Better still would be encryption that meant there was no need to wipe data from stolen hardware.
Christ Stucchio wrote a HFT apology: http://www.chrisstucchio.com/blog/2012/hft_apology.html
Wow, I wonder if people realize just how scary this is. Security Questions are a terrible idea.
Or had his password shoulder surfed or something similar.
We don't have a huge malware problem.

Microsoft has a huge malware problem.

Because they are a huge bureaucracy, they are looking for solutions through control.

This is understandable. That's what bureaucracies do. It won't work, of course.

The problem is that Microsoft's huge security debt (by analogy to technical debt) has historically been paid by its customers. The real reason that your bank is running Windows XP SP4 with IE7 (the new browser, they just got it last month) is because their IT folks are paying down Microsoft's debt. If Microsoft Office file formats didn't contain executable code (historical legacy: debt) and the OS didn't inconsistently confuse file extensions with file formats (historical reasons: debt) and email didn't default to HTML (so you can get a pretty blue underlined Comic Sans signature line) piped through 90% of a full browser (historical reasons: debt), then half of their problems would go away.

The other half are deeper and more systematically rooted in their architecture decisions. Still, it's Microsoft being Microsoft. Their products carry hidden costs, just like light bulbs that become toxic waste. The consumer pays the price, one way or another.
> if SpaceX has 100% of the market because of NASAs funding, I fully expect them to stop competing on price (at some point).

Probably, although you should keep in mind that SpaceX == Elon Musk, since he plans on retaining a majority share.
Understandable.. I used it to get something out the door. For launching a v1 and testing a concept, Bootstrap is pretty amazing. But when I redesign it, I'll definitely move away from the Bootstrap defaults. Thanks for the feedback
Easy, just don't use them.
Software: Don't install shit you don't trust. Don't trust shit you can't verify.

This one is pretty tricky. There's a lot of little tools out there that I find invaluable, and haven't screwed me over yet (as far as I know), but fall firmly in the "downloaded it off someone's little personal website" category.

I'd say we need better fine-grained permission systems for software, so people can install programs without needing to trust them, safe in the knowledge that they'll get the opportunity to deny any malicious behaviour before it actually happens.
Don't know if this has been mentioned yet, but Gawker was completely hacked to pieces two years ago

http://www.wired.com/threatlevel/2010/12/gawker-hacked/

The most visible consequence was that the entire user DB was compromised and the site rooted. But other consequences were that the hackers had cracked a large number of Gawker staff accounts and even had access to internal emails and chats.

I think it feasible that enough internal info was linked to compromise Gawker's staff for years. Some of them probably thought resetting their gawker.com account was enough, and forgetting that that password might have been used elsewhere. Also unclear is how long the hackers were snooping around before the hack was discovered...in that time, they could have download dumps of staff email and gmail accounts.

The upshot: someone out there might have several GB of personal gawker staff info. Ever email yourself your ID number to your email account? Has anyone ever emailed you credentials that you forgot in the heat of the moment? How many times does your social security number appear in your Gmail, thanks to attached billing/app files at you originated from there.

And remember that the hackers had root access to everything at Gawker, even the site source code. How positive is everyone there (remember that the owner's laughable password is one of the main reason that Gawker got crushed) that no key-loggers had been secretly installed and have been running all this time? It doesn't even require anything that sophisticated...all it takes is one security-unsavvy staff member...and this is a staff of mostly culture writers...to do something insecure.

I'm not sure if Mat was employed by Gawker all this time but even if he came after the hack, you can see how one massive data breach can have almost permanent implications within an organization.

That said, what an awful incident and thank you to him for writing a thorough account of how he coped...this is a valuable lesson to everyone and I hope they find the punks who did it.

* To underscore my point, I didn't realize that Honan is recently a former Gawker employee. Yet he had enough credentialed access for an outsider to break into Gizmodo's twitter account. I bet Gizmodo didn't think that an amicable departure of an employee was enough to warrant a password change to Twitter...but if his emails contained the password, then it's an easy hack. If I were Gawker, I would change EVERYTHING...not just gizmodo info, but all of its sister Gawker site credentials. They should assume the worst and that someone out there has all of Honan's emails, including every time he might have been emailed credentials in plaintext

also, Honan's current employer, Wired, should do the same. Change all the keys.
I have little choice if I want to download Android apps.
But don't you think the existence of regulation influences the culture?
Specially because people are dumb enough to rely important data to third parties, instead of having it at home.
Digital Content Creation and Increasing Entropy
Why wouldn't it be a good idea? It works quite well for the industry cited as the canonical example in the link you gave.
Don't use texts for the two factor auth, use the Google's app https://play.google.com/store/apps/details?id=com.google.and... and print out the one time codes when prompted (for when your phone is unavailable for whatever reason).

As a bonus, you can also use it for when logging in over ssh with password http://askubuntu.com/questions/159727/how-can-i-use-a-passco...

Anything can be hacked but it's a really solid system, even against a targeted attack and motivated attacker.
Olympics Soccer live stream watch here and get football 
You can watch and enjoy here London Olympics Soccer live stream event.
HD online TV station is available and will appear here on the day of
the event. Get HD quality Channel and enjoy this event.Olympics Soccer
live stream watch here and get football schedul/results 2012 at
London,Olympics Soccer live stream watch here and get football
schedul/results 2012 at London,Olympics Soccer live stream watch here
and get football schedul/results 2012 at London,Olympics Soccer live
stream watch here and get football schedul/results 2012 at
LondonOlympics Soccer live stream watch here and get football
schedul/results 2012 at London.
Oddly, that part came mainly from capitalists; the early-20th-century Marxist idea of "scientific management" of a centralized industrial economy was closely modeled on scientific-management ideas from large industrial conglomerates.

There was a period when large industrialists were arguing that having many competing companies is inefficient, and instead managing a large, integrated industrial sector via scientifically/mathematically sophisticated methods was the future. That was one argument against anti-trust laws: that breaking up large companies would just decrease efficiency. The only thing the communists really disagreed with was what should be done with the profits of these trusts.
How to change someone’s mind on the Internet
I'm confused about how this or similar offerings like backbone would fit into an existing web app framework like django. Would you even use this for django or rails? Because at the surface, it seems like I'd have to retype my model definitions in JavaScript (or at least code generate them) and then use some JavaScript templating system instead of django's.

Can anybody shed some light on this for me?
Well, Dalton Caldwell is asking: http://join.app.net/
I have to disagree. Law is complex largely because politicians need to feel like they are doing something. They make changes so they can claim in their next campaign that they've improved things. They make changes to benefit their likely donors/voters. The cruft keeps piling up and it rarely gets wiped away.

Consider tax-advantaged retirement savings. Why do we have: traditional IRA, Roth IRA, SEP IRA, SIMPLE IRA, 401k, Roth 401k, and 403b, all with different requirements and different benefits? The need to have a reasonable amount of savings when you retire is universal, so why this complicated mess? Why are two people doing the same job at two different companies able to save dramatically different amounts based on whether or not their employer chooses to offer a 401k? Why force every taxpayer to do a 10-line (or whatever it is) calculation to determine eligibility to for an IRA just so we can prohibit a few rich people from having a benefit (hint: it would be a lot easier for everyone to make it universally available and just bump the rich people's tax bracket by a hair if you really feel the need to wipe out the pittance in tax savings that they would obtain). This isn't necessary complexity, it is pointless stupidity that we all suffer for (except for the accountants that gain employment from it).
Yes, if you push me like that I'll say it: it's incompetently overdone.

When your goal is to "reduce clutter" then 2 layers would be the minimum. You make another 4(?) folders in my home-directory and call that reducing clutter?

And when I delete an app then I have to look in all of them?
That is just utterly backwards for no conceivable reason.

Due to the semantics you now suddenly need a cronjob or similar abomination that traverses all home-directories and picks out stuff ("MUST" be blown away). This will by definition be fragile and have funny corner-cases in the first few iterations. Also what happens when ".run" is not blown away, like on a system that does't implement this nonsense?

The definitions are blurry and complex, many apps will get them wrong (.local vs .config etc.).

Unix already has a location for temp files. It's called /tmp.

And what the heck is going in .local anyways? When the user saves a file then he pretty surely doesn't want it buried under some dot-directory.
Good bye Dolphin browser HD, welcome Dolphin browser 8.7
But it doesn't have to be that way. Even with locked bootloaders on Android devices people are finding ways to install custom builds of Android. Why not custom builds of GNU/Linuix, FreeBSD or even Windows.
Check out this TED talk about how these algos. are actively changing the surface of the planet:

http://www.ted.com/talks/kevin_slavin_how_algorithms_shape_o...

The speaker makes an arguement that no one can understand how these algos. interact and are being studied like natural phenomena.
Not disagreeing with you but think of all the times you need your appleID on the go. Carrying around a piece of paper may not be feasible or ideal
Not to be polemic, but I agree that there's something in the current typographic settings that could be improved. I tried to disable the CSS rule from corporate.css::1 on body for font-family (making the font fallback from 'Myriad pro' to the Helvetica family from foundation.css::75) and I think the result is much more readable - although it still has space for improvement in line-height and contrast). HTH
Two-factor authentication should make it much harder for somebody to break into your email account (secret or otherwise) and reset your passwords.

Instead of memorizing horrible passwords, have you tried making a non-horrible passphrase by rolling dice and picking words out of a dictionary? Arnold Reinhold calls it Diceware:

http://world.std.com/~reinhold/diceware.html

It isn't easy to develop these habits, but my data is priceless to me. I know that too well because I've lost some of it, and it still hurts. So I've made it a tradition to chip away at it on daylight savings sundays: update clocks, check smoke detectors, work on backups, shame friends into doing same....
They're somewhat separate, but there is substantial emphasis in current management research on trying to blur them. The worry is that classic executive authority looks increasingly heavy-handed, but the executives still want control. So the goal is to design a workplace such that they get what they want while appearing not to be in hierarchical control. That's a bit difficult since it involves solving a "reverse emergence" problem: how do I set up my workplace so that the emergent authority will tend to emerge in the ways that I want it to? This can involve all sorts of subtle and less-subtle levers: hiring practices, office layouts, perks, "gamification", performance reviews, promotions, etc.
If you get the chance to watch a kid playing with an iPhone it's an eye opener. The 15min no auth required again window after an app purchase is the devil's time.
Search Engine Marketing Services 
No. 1 Search Engine Optimization offers high performance result driven search engine marketing solutions to enhance online visibility to find customers.

http://www.no1searchengineoptimization.com/search-engine-marketing-services.html
Crashplan has a home plan that lets you back up unlimited data for all your machines. It works on Windows, OS X, Linux and Solaris, which is great for me; I back up all my machines to both the cloud and my Nexenta/Solaris NAS, as well as backing up the NAS. In fact, if you know other people who have lots of storage, you don't have to pay for Crashplan at all; you can back up to them, with encrypted data.
XML User Interface for Appcelerator released as Open Source
After months of development, I decided to release the XML User Interface for Appcelerator project as Open Source Software!

With Appcelerator, you can create cross-platform mobile development (iOS, Android, and mobile web apps) from a single code base.

With XML-UI, developers will be able to separate the view from the code; develop user interfaces using a familiar syntax; store and update the user interface remotely, which opens the way to exciting new opportunities -- developers will be able to fix the interface without releasing a software update, or even A/B test changes before the deployment to everyone.

Here's a video explaining the module:

http://www.youtube.com/watch?v=MZvgKGor1D8

And here's the source code:

https://github.com/nferraz/xmlui
find .local/ | wc -l
618

So I guess it depends on your Linux flavor. Mine is Ubuntu 12.04.
Actually, it doesn't appear to have been against any policy, or it would have been cited as such.

This is basically what happens when bad administrators are made to look bad after they over-react to someone providing the community a service that the university chose not to. They find some flimsy excuse to punish the party they irrationally blame for their own actions.
Think of the trade off: what's the likelihood that you won't be able to find a computer...ANY computer...to login to your accounts...versus the likelihood that someone can compromise the stolen computer's entire HD?

(this is less of an issue if you're encrypting everything)
The founders starting "dipshit companies" are not the same types of founders who would be starting the next billion dollar companies.

Didn't Google try to sell, unsuccessfully, for a few million dollars? I don't think building a multi-billion dollar company was the original plan.
Sure, that's one source of complexity in legislation.

But really, seriously, the world is complex. Every day people stumble on combinations of circumstances that have never occurred before in human history. Some fraction of those people get into an argument about what happens next. Some fraction of those go to a judge and ask her what the answer is.

The judge takes the existing principles, cogitates a bit, then extends the case law to cover the new scenario based on analogy with older scenarios.

This creates a new piece of law. It's never been seen before. But it might turn out to have profound consequences.

Before switching to computer science, I studied law. It's complicated because people are complicated.
Crashplan does not require you to use its cloud storage, FWIW.

And after you've logged in to Crashplan, it's not clear to me that you can do a whole lot of damage via the website; the password used to encrypt your data is specified on the client side, and there is no reset mechanism for it. I mean, they could update the credit card settings, or modify the configuration options like excluded directories or send rates, but not a whole lot else.
yea! There are many people in the current batch from Europe.
Huh? Knight Capital lost a bunch of money, and will likely go bankrupt. Essentially, Knight's software bug transferred a bunch of money from Knight to everyone else. This poses minimal systematic risk to anyone else, and they will almost certainly get no bailout.

The markets have already recovered. The S&P was down a little bit on thurs and recovered by friday. Knight is down 60%.

http://www.google.com/finance?q=INDEXSP%3A.INX%2C+NYSE%3AKCG

This is ultimately a situation of the market being a robust and stable dynamical system.
"Weekly" resets? I've never had a rest in the years I've used the same password. I would be paranoid if I were you
Google Chrome would like to access your contacts
Your assumption is pretty right, with backbone and this you would normally receive the model data from your server via JSON, and handle display and interface on the client side
(coding the UI in Javascript would be the major advantadge, because you can get a speedier UI).
I messed up for a minute there, sorry about that :)
My guess is they used brute force to get the password

How can a system allow login attempts so fast and often that a 7 digit word with numbers can be hacked?

That's hundreds of thousands of attempts.
Cbazaar Exclusive coupon-10% Discount On All Clothes 2012
This is one of the best programming books I've ever read. In terms of C# it's an eye opener. It explains a variety of rather advanced issues with a straightforward and easy to understand way. I really enjoy the step-by-step examples that show how various features evolved from each previous version of the language.
Like was suggested earlier, Crashplan. It can do both local and remote backup, and remote backup to multiple locations if you know other people who also run it and have free space for you to use. Home plan is multi-machine unlimited; however, in practice, I only use about 800GB or so.
Wow. I mean, you have all the answers!

I did know what ketosis is. But ketosis DOES NOT induce acetone breath in 99.9% of the population*time - which is what I understood you asserted. Look it up. Really, look it up.

And you better read about b12. You are radically misinformed. Not that I care - it's your health that will suffer. Really. Look it up.
It is not much of an exaggeration to say that they do. In many (most?) other professional fields decisions are made based solely on interviews, including finance, accounting, sales, middle management, etc.
As someone who likes to build things but without any design chops, it would be great to have a place like this to find designers. How much should you expect to pay?
It might seem odd that Parag Khanna would turn his attention to the world of technology. He established his reputation as a wannabe geopolitical theorist, something of a modern-day Kissinger, only wired and cool

I don't find it strange. Having followed TED for years I have noticed the political under current become more obvious over time. The technocratic political elite like having a forum to promote their agenda, no surprise there really.
That's one thing I think is good about the California state system. I know some very intelligent people who went to community college first and then transferred to a UC to finish, because they didn't have the high-school grades to get into a "good" school directly, but the public university system is designed for that kind of transfer to be possible (there is a specific transfer process, and in addition the 4-year college degree programs must be designed so that transferring in is possible, with prereqs fulfillable via community college courses).
Who said hackers are only from CS majors?

There are many hackers from Engineering background and even dropouts or without formal education alltogether.
They had >= $300m free cash as of June, that's how I arrived at the $100mish deficit.
Actually, I know a couple of damned good coders who came out of UCF. Judging from a sample of two is risky, but these guys know their stuff.
Isn't this MySQL memcached thing just a memcached in front of MySQL where the 'key' is the expanded SELECT statement?
That's not what happened, according to nanex.

It just kept making markets in reverse (instead of joining the bid and the offer, it bid on the offer and offered on the bid).

Nanex speculates that Knight ran their tester software on the real market (the tester losing money on purpose to the main algorithm). Alternatively, it could simply be a bug that sends a bid instead of an offer and vice versa. One bit flip at the wrong place could cause that.
Instead of selling RentATrashCan.com you should just let that one expire. I found many of the domains I owned were not even worth the annual registration fee.
True, but I doubt that changes much.
I understand i may be a bit late on this, but here is some kind of data (not sure about its reliability):

http://www.nytimes.com/2011/12/14/us/14iht-letter14.html?_r=...

...
And a study shows that in most U.S. cities, single, childless women under 30 are making an average of 8 percent more money than their male counterparts, with Atlanta and Miami in the lead at 20 percent.
...

Still, society-wide, gender gap still exists. So it must be due to the rural workers (more manual work the kind of men are naturally a better fit for -> not a discrimination), and mainly, parenting. So it's a question if there is a discrimination here at all.
Do you really need to buy some linen clothing on net.
Linen clothing is the first choice of men on the other hand even women prefer to wear linen wedding suits which looks tremendously great. For more info visit http://www.justlinen.com/
...Today TED is an insatiable kingpin of international meme laundering...

I liked this article a lot, even though I don't have as much experience with the TED community as the author does. Applying a acerbic wit and cynical eye to what we do as technical people is sorely needed.

And the author has a point: at some point the language gets so conceptual and fuzzy that it becomes more of a performance than a knowledge-sharing exercise. It's like a carnival for the wannabe Bill Gates of the world.

For a couple of years I've been fascinated with the idea that as intelligent people many of us are drawn to activities and consumption that makes us look more intelligent, whether or not we actually learn anything of value from them or not. So we listen to the right music, have the right opinions, and banter on about the right topics in the right way, all the while doing more than just a little social posturing and signalling. Vast segments of intelligentsia are little more than echo chamber. We are giving up independent analysis for pre-digested bits of feel-good junk food.

Good to see that argument gaining more traction. Healthy communities require introspection and honest conversations.
The strong password has value. Credit cards and cash have value.

Write the strong password on a credit card sized bit of paper, and keep it in your wallet.

People tend to keep their wallets safe.

Most people can learn complicated passwords after a few days or weeks of use, so you can keep the paper in a safe place at home once you've learnt it.
I like diceware a lot. The only drawback is that the pass phrases are too long for some sites.
A calendar based connected approach to finances