skysight-inc/HackerNews huggingface dataset:
Louis Vuitton Men Bag Cheap For Sale
Yeah that is correct.

There's vic, me and toukka doing any coding and kimza mapping some, jihnsius doing the music, and have pretty good agreement over everything we do, so I wouldn't call us disorganized :)
ArrayList vs LinkedList vs HashSet Performance
i'll bet something as simple as putting up a list of important if not very glamorous tasks somewhere prominently and continuously visible (e.g. large whiteboard on one wall), and then inviting people to choose a task and cross it off the list, would be motivating enough. note that the kind of self-motivated employee valve hires for usually wants to both make better things and make things better.
This is why I use two factor authentication for my email. It's a usability nightmare, but not as much of a nightmare as losing all my accounts everywhere.
How Reddit helped BowBox get 10000 users in a week
> So even though it's event-based

Rails is not event-based. An evented systems can have an n:m relation between workers and clients.

> I may have misunderstood what we were getting in Rails 4, then.

Yeah, or I did. As far as i understood, Rails 4 just adds streaming responses: the client starts getting bytes as soon as you start generating them (by calling `response.write` or whatever). That's not evented, that's just writing to the response stream, you can do that in CGI if you want.
> Well, if you will put complete remote control of all your devices behind a single, weak password.....

From the post:

> My password was a 7 digit alphanumeric that I didn’t use elsewhere.*

It sucks, but when you've got control of someone's iCloud account (email, and remote wipe of presumably their primary devices), you've put them in a tight spot. One of the many reasons that I use iCloud for my phone and iPad, but certainly not my primary machines (or email).

Rough night.
We're looking at updating the Sampler with pushstate, or at least setting the hash to a sample ID to allow bookmarking of samples.
Are You Looking For Garage Clicker?
Find and buy universal garage clicker products online. clicker.net helps you in your search for garage clicker with compatible features that you are looking for by top brands in market.
That's true, but we've parted quite long from the original Q2 sources already - like our renderer is completely rewritten from scratch.
No backup? Seriously? Wow.

What do people like for backups these days? Crashplan seems pretty damn good to me.
We're just starting to optimize for Chrome on Android. It's a quite different code base than the WebKit used on Android 4.0 and earlier.
Of course, buying high and selling low is always the 'reason' for making a loss. In this case, I think the program caught itself out by manipulating the market, which it perhaps naively assumed to be non-manipulable.

In other words, it was creating so much volume that, when buying (or selling), it made the market go up (or down). It was then reading the price as going up (or down) and jumping on its own bandwagon. This, of itself, would create growing oscillations in the market and growing losses.

For this to work for you, you need to first create a trend and then sit back and let the suckers pile in on it and take the losses. You then return only when you want to reverse the trend again, at a profitable level (for you). I suspect the program was just too fast for its own good and not a match for the human Masters of this art.
They said 'type' not 'print.' He could use a manual typewriter.
It was actually made for Quake 3.

There's no relation to Warsow, except couple versions back he did give us permission to include it in Warsow, but we never got around retexturing and fitting it for Warsow due lack of resources, so it ended up in QL.
I have experience in HFT, there are similarities to market making and I have plenty of colleagues who've worked in market making. Just like any company the culture is largely dependent on those in charge. Founders of these companies fall into three buckets - traders, techies, and mathematicians/physicists - and quality control will generally be a function of the founder mix. Mostly techies: strong software culture, unit testing, realtime monitoring. Mostly scientists: strong algos, software that works, monitoring varies. Mostly traders: risk v reward is the driver, software quality is unimportant unless it affects short-term profit, monitoring is unimportant - dollars and cents are sufficient.

Obviously every firm's goals are driven by the goals of those in control. In the case of Knight they are largely a trader driven firm that has arrived late to the algo party. They were looking to get ahead by being one of the first market makers on the NYSE's new retail order matching system and probably cut some corners to get there. From a risk v reward perspective it probably looked like a good bet - with no major competitors customers would flood in and any bugs could be ironed out in live. Unfortunately the 'fat tail' (http://en.wikipedia.org/wiki/Fat_tail) struck and it may have sunk their company.

For a closer look at what went wrong see http://www.zerohedge.com/news/what-happens-when-hft-algo-goe...
It's like they handled mandantory driver signing on win64: One of the reasons 32bit wasn't affected is that this requirements breaks old drivers.

Similarily, on x86 you have two inhibiting factors: old systems without UEFI+secureboot that can run windows 8, and new systems that have to run older windows versions for some reasons (business requirements).

In a couple of years, there are only secureboot-capable Windows versions out there (and still relevant), and only secureboot-capable systems to run windows 10 on. That's a much more comfortable situation to pull the plug on non-secureboot boot.
I made a mistake when answering. I should have written "The Sims Social". It was released a year ago and is the one EA claims Zynga copied.
A dollar isn't exactly a lot to ask in compensation for what seems like some significant effort.
Hate to repurpose a cliche, but never put all of your eggs in one basket.
Going Boss-free: Utopia or 'Lord of the Flies'?
>>7 digit alphanumeric

...could mean anything from myacct1 to iS2xd45

Since the password is no longer in use (only assuming), it would be interesting to know what it was - perhaps the reason that it was hacked was that it simply was easy to brute force due to common dictionary words?

Just throwing an (possibly wrong) idea out there.
Two factor is magnitudes better than password only, but it's not foolproof.

Security is only as strong as the weakest link. CloudFlare was hacked recently because the attacker was able to redirect voicemail to another account, then use the two-factor backup recovery phone option to take control of Google Authenticator.

https://blog.cloudflare.com/the-four-critical-security-flaws...
You can get more technical details from nanex: http://www.nanex.net/aqck2/3522.html

Essentially, they were buying high and selling low. Many times a second.
Just one more datapoint. I had an older MacBook with the T-Magsafe and I now have a MacBook Pro with the L-Magsafe. I love the L-Magsafe. With the T type the cable near the connector would fray every year and a half or so. I had it replaced once for free. The second time I had to buy a replacement. Never had a problem with the L type. For me the return to the T type is a regression but I read in this thread that people had fraying problems with the L type. Is it a huge technical challenge to make a laptop charger that will withstand normal wear and tear for at least 3 years?
So poor people that can't get vegetables should not drink milk, and pay more. Gotcha.
There is a word for people who only focus on big ideas: crackpots.

The truth that every entrepreneur has to face is that it takes big resources to pursue big ideas, and very few people have big resources at their disposal. Even Elon Musk had to blow up PayPal before he could pursue truly big ideas.

The vast majority of giant corporations come from executing well on a series of progressively larger operational goals. The trick is figuring out how much you can actually bite off successfully at each stage, and then doing it several times in a row and scaling accordingly. The big ideas can come when you have the money and the influence to execute on them.
What difference does it make how strong the password is? It was a seven-digit alphanumeric password, right? Is iCloud going to permit up to 36^7-1 failed login attempts in a row without rate-limiting, banning, or launching missiles at the owner of the offending IP address?

Assuming the answer is no, there are only two remaining alternatives: 1) Someone targeted and keylogged him to obtain the password, in which case it doesn't matter how strong the password is; or 2) Someone hacked iCloud itself and stole their (presumably unsalted) password file.

In that case, yeah, a stronger password might've helped. Bad user. No cookie.

But if he thinks he's having a rough night, consider what scenario #2 would mean to Apple. The impact of an iCloud hack would be measured in multiple billions of dollars of market capitalization.
I'm amazed that Apple isn't running something to check for brute force attacks on iCloud.
The issue I have is that in this case, your AppleID is (normally, by default) the ID you use for everything Apple related - including the iTunes Store.
I really have problems typing long 20 character passwords comprised of every kind of symbol on the iPhone keyboard. It was annoying enough trying to type my Twitter and FB passwords correctly the first time. To type that every time I want to update my applications for free, is not a nice experience for me.
This means someone could wipe my iPod remotely, but I would note that I don't have (use?) any kind of Apple controlled email, so the impact for me would be limited to my card being charged for iTunes purchases.
I use a mixture of Crashplan (but only locally between machines because our DSL connection is waaay too slow) and DropBox.

I'd be curious to hear more about other people's solutions.
Microsoft probably wants to downplay SPDY so they can promote their "improved" version.
That's it, I'm disabling "Find my mac". I guess it wouldn't work anyways if a thief is far away from my home or work wifi. So in essence, it's a remote wipe backdoor for when the device is in my possession, and useless if it's stolen.

FileVault2 should take care of the theft problem anyways.

Too bad you can't partially-enable Find my mac for the location service, while disabling the remote wipe and lock services.
Been using Crashplan for couple of years now. For a couple days pay you can backup so much.
A lame, meandering shaggy dog story written by someone who gives the impression he has never seen a programming language before in his life 'Breaking this statement down, I determined that “jnz” was a standard program assembly language statement for “jump if not zero.”'. This guy supposedly does this for a living? This is ieee.org/software not The Sun (a british daily tabloid which caters for the retarded)

More sloppy still, part of the basis for this "investigation" is stuff downloaded from the web, which renders it devoid of any evidential value whatsoever.
If he really hasn't used that password anywhere else and it was not based on a dictionary word, then I highly doubt OP's password was brute-forced.

Brute-forcing the iCloud password is an online attack and would probably (hopefully) be caught by apple.

What is more likely is a keylogger or similar malware at which point even a longer password would not have helped. The days where macs are free of malware are unfortunately over.
They weren't taking long-term speculative positions, their short-term market making had a major bug in which instead of buying low and selling high it was doing the opposite (thus losing a small amount on each pair of trades). For more details read Nanex's blog (http://www.nanex.net/aqck2/3522.html).

So, they launched a busted market making algorithm, lost a ton of money and no one is going to bail them out.
The strength of the password is relevant in the scenario where the password was actually brute-forced through an interface. If it was jesus01 (or something else common - typically religious), then it may be an easy hack for the hacker.
Everyone I know thats in college or below has laptops this is true. But all my family and friends that are ~30+ and not working in IT have desktops at home. I can assure you none of them are power users.
What do you call any old MacBook or iMac?
One nitpick: You can't "kill the power" on a market-making algorithm co-located with the exchange somewhere in New Jersey.
Remote data wipe access to devices from cloud service. What could go wrong?
As am I, considering almost weekly I used to get my iTunes account reset from failed attempts (maybe an old app or suspicious activity?).

More likely the writer erred and reused the password.
Rabbit and Carrot | Web Video Production | Explanation
Or maybe there's a problem with the iCloud auth protocol, and it was snooped? For example, that in-app purchase hack (which involved a MITM attack after installing a custom SSL CA) revealed passwords were being sent "in the clear" inside the SSL transport.

This is just speculation.
Could this be due to the background image?
Everyone's focusing on the security of the password and iCloud, but I just wanted to take a second to say: fuck who did this. Yes he should have backups, but erasing someone's things is such a juvenile thing to enjoy.

Edit: Surprised to see Cloudflare is proxying their website. I understand wanting to be impartial, but I think it's fairly easy to draw the line at groups breaking the law.
Brute-forced through what interface?
I actually didn't even know that enabling "find my X" also enabled that remove wipe option. I just disabled it for my MacBook Pro, Undercover is a much better solution anyway: http://www.orbicule.com/undercover/
Twitter knows when you will get sick
Why do you think it wouldn't work if the thief is far away from your home or work?
Very good point. As a reporter of Gizmodo he might have tried the hack.

I do believe though that sending a password "in the clear" over SSL is totally sufficient. SSL was designed exactly for sending sensitive information like passwords.

We can't blame Apple for not designing a protocol (it might be just plain HTTP basic over SSL) with people in mind that turn off SSL security in order to get access to paid content without paying.

I was voicing this exact concern here: https://news.ycombinator.com/item?id=4240124
I got their number of employees wrong. They "only" employ 9000 or so.

You may not have heard of them but I am sure you have heard of at least one of their products: Gore-Tex(R).
"Brute-forced" was a bad word choice.

Typing-the-most-common-passwords-with-numbers through the interface style. Basically guessing from the top password list.
Why isn't automated high-frequency trading banned already?

Does it not go directly against the spirit and purpose of having a stock market with proper investors?
Actually, you make a good point, there's no reason profanity must "stand in lieu of reasoned argument". In fact, a persuasive case can be made all the more impactful and compelling with a bit of coarse language, tactically applied to convey emotional context -- consider some of the content on, say, Cracked, or the Oatmeal.

So, on further reflection, I guess what irked me more was that the original post contributed nothing to the conversation, rather than the profanity therein; it's just easier to notice things present than things absent.

I suppose there's a "quality hierarchy" of sorts in my mind (loosely corresponding to upmod/abstain/downmod):

- well-argued comments, in which case manners are incidental
- poorly-argued comments, but at least they're polite
- neither well-argued nor polite
How would it connect to the iCloud services? The mac doesn't have a built-in 3G connection, so the only way it can go online is through previously-stored wifi associations.
Well, I was allowed to play 3rd party games 1 hour per day max; the rest of the time I was allowed behind my computer but not playing games. So what else to do with that great machine than make games myself? It worked well for me and still does.
Plastic Bags Manufacturer
Manufacturer and wholesale supplier of plastic bags and packaging. Custom Printing and unprinted bags are available in many sizes, shapes and color available like resealable plastic bags, printed plastic bags, clear plastic bags, plastic bags with window.
I haven't tried Crashplan, but I recommend either Backblaze or SpiderOak. I used SpiderOak in the past when I had both a Windows and a Linux PC I needed to keep backed up, but now that I have one Windows PC I use Backblaze.

Backblaze really shines if you have a single Windows or OS X PC with a lot of data. For $50/year, it will allow you to backup unlimited data for a single computer. As far as I know there is no student discount.

SpiderOak really shines if you have multiple Windows, OS X or Linux PCs with a small amount of data between them. For $100/year, it will allow you to store up to 100GB of data between as many computers as you want to back up. If you're a student, it will only cost $50/year.
I'm sure most feel bad for the guy, but although the hacker's actions were malicious, that doesn't allow the victim to just get off the hook for having a silly password - if that was the case.
On your primary machines, you should have at least some form of local backup. I'm using Time Machine with a network drive. If my primary machine fails or gets wiped (whether I did it myself or someone obtained my iCloud password), I can still recover everything from the backup.
But again, why would iCloud allow that many consecutive failed login attempts without locking the account?
I love the idea of the printed book being sent out each quarter - that's very cool! Scrapbookers would love that.
In this case you are betting on captured SSL traffic never being able to be cracked in the future, offline. (Consider: Someone logs SSL traffic and waits for the next Debian OpenSSL bug (DSA-1571-1) to be revealed)

I think it would be a great improvement to have some kind of challenge-response nonce/timestamp hash thing going. So that even if the plaintext of an SSL connection were to be revealed at some point, you couldn't deduce the password-equivalent.
Instead of only disabling Find my Mac, please make sure your backups are functional and enabled. That way, if your machine fails or gets wiped (whether it's by you, a thief or someone with your iCloud password), you can still recover everything.
Researchers Turn Home Wi-Fi Router Into Spy Device
User Experience Design Collection
Meaningful thoughts and flubdub about user experience design and interactions. No cat content, promise.
Folyo - Find the perfect designer for you - The Industry
"supported platforms" being a couple of emulators. That is, without any need to do hardware initialization.

Tianocore "just implements" the UEFI spec, but that's what is overcomplex and ugly. Also, Tianocore picks the ugliest possible way to implement things (or at least, they really try to).
Law is complex because the world is complex. We're talking about "essential" complexity; it exists in the domain and it can't be wished away.
Woah, you are right, thank you!
So far, the beta driver seems to run somewhat smoother than the nouveau-version. 3D is certainly faster.
Sure. But should something like this happen, I'd prefer to not waste time having to sit through a complete reinstall before I can start damage control by changing passwords online, etc.
iCloud would surely block consecutive, failed login attempts. From the post, reading years and years, opens up the possibility that it may have been something the hacker was following for some time. Therefore, he would have been blocked, but may have come back in 1 week to try again.

The possibility is a bit far-fetched, but it exists. The likelihood that this was actually the case is extremely low.
We're working since 2001 on a b2b software. While it might seem boring, it's not in the least (minus some rare low points, but you get these everywhere).

It's also very rewarding to see users be productive with the software and be grateful for making their lives easier. In fact, many of the end users are to this day computer illiterates and making great software they can use is a very interesting challenge.

Also the technical stuff. Just because it's b2b doesn't mean you can't make it interesting for you. Whatever new technology comes around, I make it a point to try it out and apply it in production where it helps.

We've done AJAX before it was called that. We've been running node.js since the 0.2 days and we've solved interesting scaling problems.

There is nothing we can't do that makers of consumer products can do. The difference is that we are getting paid handsomely ever since and that we don't have to deal with advertisers or, god forbid, VCs.

Thanks mainly to our product Switzerland was and still is one of the countries with the highest percentage of electronic orders among dentists (I only have numbers there. The restaurants numbers might be even bigger).

Combine that with the cool technical challenges to solve and you are left with a very interesting job that just never gets old.
It's a good point actually - does iCloud in any way prevent multiple account logins?

There's another possibility: he re-used his iCloud password on another account, that was compromised, and someone tried that successfully against his iCloud account.

The bigger issue, as someone else has said, is putting so much remote control behind a single point of security.
This is one of the reasons why I have different Apple ID for app purchases (with weaker password which I'm more comfortable to type over and over again when purchasing apps) and different for iCloud (which I need to type only once, configuring the device).

I saw many people buying their apps in public and the password input in iOS isn't really secure from bystanders. As a Gizmodo reporter he probably went to dozens of events where he was pitched to try someone's app and maybe even given App Store codes. If he used to download apps on such events that might be the source of his leaked password. Someone could simply see what password is he typing.

As long as Apple requires you to type the password with each purchase, it is wise to separate your sensitive data/services with the App Store credentials.
clipper chip didn't materialize.

TPM was widely misunderstood (thanks to the Anderson "TCPA FAQ", which went into hyperbole real quickly). It was also defused a bit due to public pressure.

With the Windows Logo Requirements (which are the real issue surrounding secureboot), there are some indications that things will end up bad, but that's speculation (but on a better foundation than the TCPA FAQ back then IMHO).
What's going on now is public pressure - and it already worked to some degree, since the Logo Requirements went from "has to provide it, disabling optional" on x86 to "must allow disabling secureboot".
How To Win HackDenver
The Jerry Pournelle/TWiT thing struck me as extremely odd. Is it really okay that someone who's a reporter makes statements that "he wrote the command down but has never shown it to anyone"? I'm not about to believe anything to do with him, anymore.

Other than that, I was surprised at how little the author seemed to actually know about programming. One doesn't have to be an expert in low-level languages to be a fantastic programmer nowadays, true, but if you're running a computer forensics firm?
Passwords: Don't try to remember them. Use a service like passpack to generate and store random ones for every account. Two pass authenticate into it.

Data: Back it up. Backup your backups. Stop fucking around. If you don't get hacked, your storage will fail.

Software: Don't install shit you don't trust. Don't trust shit you can't verify.

Passwords: Don't try to remember them!!

It's 2012, not following these simple rules is inexcusable.
Behind the Scenes - Build with Chrome