skysight-inc/HackerNews huggingface dataset:
"I like to learn; I like to teach; I kill two birds."

I like this tagline on the blog. Congratulations Jeff. Yes there are naysayers and there is always an argument against something. But we applaud your efforts. For people who are criticizing this, just look at it this way. This guy pulled off something by working his ass of (in his own words). The creates hope and inspiration for others like him and I am sure there are plenty even among HN.
Well, there are 2 probable states:

1) Username is not known. No reason the attacker would know this short of a leak / social profile with identical username. In this case, submitting random usernames and getting a hit should trigger a lockout and corresponding alert.

2) Username is known through system compromise. In this case, the account should be locked out and a new password generated just in case.

So I don't really see causing a deliberate account lockout as a primary attack vector other than trying to exploit weaknesses in password reset processes across multiple sites (like what happened to Dan Harmon).

Therefore, I would say that having a lockout mechanism is better than not having one.
A foundation or trust. For example, the Nobel Foundation has operated since 1900 without appearing in danger of closing. http://en.wikipedia.org/wiki/Nobel_Prize#Nobel_Foundation

You could have a foundation established to choose and pay an array of commercial organizations that do the archiving.
So, is there some way of controlling the gain? Hellbanning is one way but thats bang-bang (gain is 1 or 0).

How about, limiting the visibility of comments to a subset of the community. If they comment/answer, then show the thread to more. If they ignore (its a rant etc) then it quietly sinks into oblivion.

Just an idea.
I find it terribly ironic that just as Microsoft starts pushing into the pre-set hardware world (phones, tablets, etc.) they only then offer a license for those who are going to build their own PC's - Probably the people least likely to use W8.
We are not github and that's perfectly fine
Looking at the headers both are being served by CloudFlare. And cdnjs.cloudflare.com is being redirected to cdnjs.com. So, I suspect that that's where the extra time comes from.
That's true, but they're obviously using a multi-tier solution, with about a 90 day buffer before things go to tape:

In addition, there is a pro-rated charge of $0.033 per gigabyte for items deleted prior to 90 days.

So it may just be feasible to organise writes so they end up together. But, yes, ultimately it is probably not worth it to do so.
If you're like me those kinds of comments probably gnawed at you. Don't let it. In a few years you'll have achieved parity in terms of salary and respect to most of these surly commenters, and no one will give a shit about your "origin story". Your work will speak for itself.

To all the negative nancies, take it up with Dr. Norvig. http://news.ycombinator.com/item?id=3278080
Agreed, I've seen this before as well. I doubt it really has anything to do with Apple and likely the HP printer server software instead - being directly related to an nmap scan.
What Do Those Deal Terms Mean? - Part 1
My department (information security) was actually just discussing this service this morning at our morning meeting. We've been looking into backup services for our security monitoring appliance beyond our datacenter and DR site. These backups would need to persist for a year according to PCI/SOX compliance, and if we needed to show data to an auditor, we wouldn't need the entire log. In fact, we'd likely not even need 5% of it. Most likely, we'd only need to pull a day (maybe two) from the logs.

I can imagine our media services group talking about the same thing, how to keep master files of their product pictures/videos where they'd only need to grab a file or two here or there (if at all).

Amazon seems to be pushing this as a file dump where retrieval of the files is exceedingly rare. They don't want you to use it as a hard drive, they want you to use it as a magnetic tape drive.
I too am largely self-taught, though I took a much more convoluted path to get where I am today. I lucked out several years ago and found an employer willing to take a chance on me in spite of zero real-world experience and incomplete schooling. It seems to have worked out pretty well so far!

You know you're still green, and I respect that. Everyone has to be at some point. I don't care if they went to school—I've seen people come out of respectable CS programs not knowing a damn thing about actually writing software.

I've also seen people with plenty of experience—people who should really know better by now—still code trivially avoidable vulnerabilities and make other silly mistakes. School and experience are both lost on someone not really willing to take learning seriously, who already believes he's an expert.
What a pointless article. tldr; Kid used google to do research.
I found that out after my first child was born, too. Yay! Nothing is intuitive. It's all learned.
I agree completely. But I think that both subsets, the degree laden and the "no degrees allowed" crowd both apply the same labeling towards one another. Get's to a point where no one who's hiring for a worthwhile company cares about computer science degrees and cares more about exposure, references, and past experience. I think the industry is becoming more hostile towards both, no degree and degree types all the same. It's hostile towards anyone that hasn't proven they're worth their weight in gold either because of their github account or their past work experience. And that my friend a good thing.
Spoke with a a security guy years ago who got called to a company after they'd been accused of running a warez server. After a bit of digging around he finally found the server on a printer that was running some ancient un-patched version Solaris.
> The issue isn't that people are voting up comments or submissions that don't fit with what HN is supposed to be, the problem is that those submissions and comments are being made.

If people stop voting up such comments, people will eventually stop making them.
I didn't actually follow the link. For the reason I mentioned. :)
Files are compressed. Songs are programs with a simple musical notation. They put graphics and stuff.
Perhaps? I haven't seen a matchbox in 10 years. And even then, matchbox varied from country to country, from producer to producer.
It's so upsetting being a 21yo just getting started in the industry. I finally find this awesome site with like-minded, motivated, and successful people, but all anybody can talk about is fixing it!

It seems like I'm always on the tail-end of communities. Is this just simply a case of the grass is greener for you veterans of HN?
You could have, you know, printed out that the printer was publicly accessible on the printer itself.
> "The problem I have with these sorts of social structures is that it assumes that one person out of a hundred is some how "gifted.""

The point of DE-style positions is to get demonstrated great engineers out of the org chart, to free them from bureaucratic overhead. The key is, again, is that these engineers demonstrated their technical value. It has, in ideal form, nothing to do with anything other than a big pile of really excellent work. The idea that some people are better than others despite such a stack of excellent work is antithetical to the DE position and precisely the sort of mechanism by which bozos infiltrate those positions.
Apple sued by ex-employee who says Jobs pledged job security
Gray hat needed
Easy task, good pay.
realbay@hushmail.com
When I have see that a webpage has 20 or more scripts attached to it from domains differing from the one website I am visiting, I do by default assume they are tracking scripts from advertisers or facebook or similar ilk.

If a website needs scripts, I expect the website to serve it from a domain which belongs to it. For most sites I visit there are at least 30, sometimes 50 scripts from various sites and domains trying to track me, slowing down my browsing experience, and sucking up my systems ram.

Disabling those causes massive speed-ups. Plus it protects my privacy.

Install ScriptNo in Chrome (or similar for Firefox). You will be shocked by the difference. And you will be shocked by the massive script-abuse currently on the net.

And no, I will not wade through that long list for each and every page I visit, to whitelist whatever CDN you have decided to put in the same trustworthyness-group as doubleclick.net.

If your site breaks with those scripts blocked, I leave.
Likely they are losing money on the cost of initially writing data, then profiting from storage. With free early deletion they would lose money.
While I do agree with the side you are arguing for, last winter I bought a pair of brown Lacoste shoes that had wool inside them. I sought out the specific pair of shoes because they didn't have a single logo except in the rubber of the sole and I didn't want to be /that/ guy.
People can last much longer than weeks without food. And Rhode Island is quite near a lot of water.

Simply walking/bicycling you can go hundreds of miles in days. There is no reason everyone has to fly home - America would hold the world's billions without blinking.
You can't fix the HN problem without people.

If pg really wants to preserve the feel of HN, he needs to develop a system that analyzes the behavior of users to determine their acceptance level of other users. This will create a network effect, where the most influential users will drive the site.

He then needs to seed the system with 5-10 users who he considers paragons of HN (I can think of five off the top of my head, but his are almost certainly different), and tweak as necessary.
In the printed stuff it also says 'nmap'

Most probably it comes from someone running penetration testing tools against the printer on the network
There are two different business scenarios and I doubt PG has changed his views radically (and if he has, it's secret sauce anyway).

The question to which PG responded [http://news.ycombinator.com/item?id=3893783] was along the lines of "Why not open up YC to crowd funding?" The answer was that there nothing for YC to gain by encouraging a rabble of investors jump into YC's pudding. In other words, PG believed that accepting crowd funding would be a distraction to YC companies (and implicitly therefore lower the value of YC's investment).

On the other hand, funding a startup through YC which makes money by providing services to people who think crowdfunding is a great idea (and perhaps solving some of the problems along the way), may be a profitable investment for YC.

In other words, PG didn't advocate crowdfunding as a better source of capital than the sources of capital YC has been using for YC companies . However, this does not mean that crowdfunding services are not a potentially sound investment for YC's partners.
Another approach is to limit submissions via some manner. Metafilter still retains a similar level of content as it did when it started around 12 years ago, and they accomplished this by a) Requiring signups to pay $5 b) Maintaining strong, public moderation where deletion reasons are clearly shown and frequently discussed ad nauseum on a section of the site clearly designated for talking about the site itself.

It may not be everyone's cup of tea but the site has grown leaps and bounds and hasn't yet strayed from its original goal, which is albeit more open-ended than HN. I'm not suggesting users pay $5, but there are more nuanced approaches than trying to squash the problem with the math hammer.
Yeah, that was part of the lolcats image. I can't quite remember what I did but it wasn't malicious.
I think the idea that car ownership is falling due to income inequality is staggering - that points to one direction only - enclaves of super-rich in a sea of poverty. It is not the way anyone expected USA to meet its Kyoto targets.

But the evidence of increasing income inequality is persuasive.

My favourite quote from somewhere recently:

A society is fair if you are willing to enter it at the top or the bottom.
If you dont want to join Western society at the bottom of the pile,
its not a fair society.

Edit: far too snarky.
hi there, here is a screen shot of the programming language set: https://dl.dropbox.com/u/3737990/Screen%20Shot%202012-08-21%...
I've never been on a site where the jerk flag wasn't abused.

If the majority of a site has $opinion_x, chances are people with $opinion_y will earn jerk points every time they express themselves.
I'd agree with this. I think too many people think HN should be startups or technology or whatever. But it's a community aggregator, with a community of voters deciding what matters. By definition, HN should be whatever it currently is. But I'd agree it should at least be interesting, if not also a tiny bit of entertaining.
At some point I thought about a different approach. When page is rendered it is possible to get the resolution. Now all you have to know is the screen size and you can render an image (from high-resolution image or vector) that will have screen size very close to the actual physical size.

I found a site that does just that but cannot remember URL from the top of my head. EDIT: It is http://pective.com/
Could this be related with Trojan.Milicenso or Trojan.Eorezo? This is the latest (although its from June/July) threat I know of that prints random stuff

http://www.symantec.com/connect/blogs/trojanmilicenso-paper-...
http://www.symantec.com/docs/TECH190982
http://isc.sans.edu/diary.html?storyid=13519
Győr - eladó lakás, családi ház | Q7 Ingatlan
Q7 Ingatlaniroda - eladó lakások, családi házak Győrben. Honlapunkon számos győri tégla és panel társasházi lakás illetve családi ház található. Kedvező, akár már 1,5% közvetítői díj. Mindig építészmérnök munkatárs segít Önnek. Adyváros, Bácsa, Belváros, Gyirmót, Győrszentiván, Kisbácsa, Marcalváros I, Marcalváros II, Ménfőcsanak, Nádorváros, Révfalu, Szabadhegy, Sziget. Quality7 Ingatlaniroda - Minőség a 7 minden napján!
ThinkGeek apparently uses Gildan shirts, which are cheap, baggy shirts made out of thick cotton; you were probably buying shirts of similar quality when you bought plain shirts.

Since it seems you're spending more on shirts now, you're probably getting a better quality product. Plenty of stores from Target to Gap to American Apparel and so on have better-fitting shirts made out of lighter-weight material with no visible logos, likewise in a range of prices.
remember, it's a cycle. I'm 10 years older than you, and when I was 21, newsgroups were where it was at. Then I found Slashdot ... these exact discussions happened back then. Those communities spawned the diggs, reddits, stackoverflows and hackernews(es?) of today.

Some new community is brewing somewhere as we speak, just participate wherever you still enjoy while you still enjoy it. And when you find a new community that you enjoy, simply participate ... in ten years, I guarantee that you'll make a comment exactly like this to some young gun ;)
European Positioning System at launch site, fourth Galileo Satellite
Pretty awesome. One thing that puzzles me is that the preview is showing a fish prompt, but it only outputs an Xresources file.
I've wanted this for a while for reddit. It would be so nice to '-snark -circlejerkery -meta -karmawhoring' something like /r/askreddit and see an actual discussion.
Really, we're all self-taught. The practice of development is so far removed from college courses as to make us all essentially even at first hire.
Saw title, thought it was referring to the Thinkpad pointing interface. Was immediately disappointed.
Freemium Is Not Shareware 2.0
One poster said his/her printer did it on a machine not connected to the network, so it may not be a print server scanning thing.
I'm also very glad that I will use my brain extensively for the rest of my life... keeping Alzheimer away :P
Learn Python aided by the Mechanical MOOC
First Evidence Discovered of Planet's Destruction by Its Star
What do providers get for access to these type of files? Can they capitalize on the information gathered from file requests? Adding to their knowledge of traffic patterns etc...
Comcast Injecting Javascript Warning Message into Non-Comcast Websites
Sweden: If Assange faces death row in US we won't extradite him
Make payroll delightful. Well-funded YC W12 start-up is hiring Rails engineers.
About us:

+ We love unsexy, core, foundational problems. Current payroll products haven't changed in decades and customers deserve better.

+ We're a small team of second time entrepreneurs who have had two prior exits. Our founders are Stanford engineering alums and everyone in our company is a builder. We started our pilot in April and we'll be expanding it soon. We're hungry to build something truly great and we're in this for the long haul (we're well-funded by some of the best CEOs and investors in Silicon Valley).

Things we're looking for:

+ Experience with Rails | Backbone.js | MySQL is a plus but not a pre-requisite.

+ Interest in employing a test driven development process. We also pair part of the time.

Perks:

+ You'll be a core member of our team as we grow the company.

+ Competitive salary + significant equity stake.

+ Housing stipend if you live near the office, three meals a day, company retreats, gym/sports club stipend, dream work set-up, and more -- including copious espressos brewed by one of our co-founders. ;)

--------------------

Above all, we're looking for individuals who are yearning to do the best work of their lives. You'll be amply rewarded for the work you do.

--------------------

If solving a real pain point for millions of people gets you excited (plus the chance to build a significant, meaningful company), we'd love to speak with you.

To apply, send us a note at jobs [at] zenpayroll [dot] com and include your LinkedIn, GitHub, and/or any project pages.

This job is located in San Francisco, CA. You must be local or willing to relocate (we'll cover the cost).
`ssh -D 1337 me@mysite.me` <-- Does dynamic port forwarding (SOCKS proxy)...
I thought the same thing, probably because of this: http://xkcd.com/243/
Just curious, how was using vagrant a hassle for you? I've always found it really simple to use.
Wow. SO now Europe is a hotbed of productivity? Not the image I call up when I think of overseas Engineers I have worked with (American talking here). I've had a hard time getting anything out of Japanese, French, German colleagues. Everybody wants to manage the process; nobody wants to actually do the process.
All I can say is do a few queries and look at the SERPS and come to your own conclusion about the keywords.

Bing and Google will nuke a content-free site with good keywords, but if you make a good site with clear quality indicators the keywords definitely give you a tail wind.
They're not using tape storage. The ZDNet story confirms this: http://www.zdnet.com/amazon-launches-glacier-cloud-storage-h....

There are any number of reasons why deletes would be discouraged. One is packing: if your objects are "tarred" together in a compiled object, discouraging early deletes makes it more cost-effective to optimistically pack early.
Thanks. Buying facebook and twitter followers is something I considered as well. Will keep this in mind!
1.) K [1] is shorter than Clojure, if LOC is a metric you love.
2.) Scala 8x more LOC than Clojure, I'm not believing this.

Or in other words, show some code.

[1] http://en.wikipedia.org/wiki/K_(programming_language)
If you want to learn C check out the CS50 from Harvard. It gives you the basics of programming (which you obviously already know), but focuses on C, and will teach you a lot of the basics. Watch the videos and do the problem sets, it will give you a broad understanding of algorithms, sorting, and C
https://www.cs50.net/lectures/
It happens. If you're a risk taker and willing to be a part of multiple social networks at once, you can be on the bleeding edge of good communities but how much are you really losing out on? The next good community will spring up sooner rather than later, and we'll all visit it, for a while.

Communities seem to have a 2-5 year lead in cycle, followed by 1-3 years of good, healthy community. Then they get mainstream, bloated, and meta.

But they never really die, which is the saddest part. I can go to social networks I signed up for over a decade ago, and people are still stomping there.

And they are angry. Angry at being deserted, or angry because they put all their eggs into one basket, but either way you wind up with little hovels all over the Internet that are remnants of the gold rush for good discussion.

Some day, the Internet as a whole will find its El Dorado. One thing's for sure - it's probably not Facebook.
Very nice book. I use it often too. Highly recommend it.
> ... printer panopticon ...

Oh "BBrother" what an ironic comment this is .. /takes off paranoid hat
Boy I was half asleep when I wrote that comment, all I was saying was that since github lets you reference previous versions of files by crafting the URL properly to include a tag/branch/hash, it should be possible to link to previous versions of the documentation straight from the latest version, eliminating the need for someone to clone the repo to access them.
The guy on the other side must have had an interesting day. Suddenly lolcats.
Alternative this is much more sneaky: run an obfuscated tunnel. Most firewalls will allow egress DNS for example, so tunnel your TCP over DNS. This will also allow you to sneak out of pay-for wifi setups like at the airport. http://analogbit.com/software/tcp-over-dns
Data tide turns in consumers' favour | Opinion | Marketing Week
But then you can't blame silent truncation on varchar(15) fields.
I'm double your age. It's fairly inaccurate to say that all everyone can talk about it fixing it. Sure, some people gripe about it, and some aspects of the community might have shifted over time, but you'll still find the highest quality comments of any online community out there.
Mind telling us why?

I haven't read any reviews or stats which suggest it will degragate gaming performance.
Okay that makes sense,thanks Paul.
Some years ago I wrote "Is Java 10x more verbose than Python (LOC)? A modest empiric approach" [1]. The most interesting comment quoted "PROGRAMMING LANGUAGES ARE LIKE GIRLFRIENDS: THE NEW ONE IS BETTER BECAUSE YOU ARE BETTER"from [2].

[1] http://codemonkeyism.com/comparing-java-and-python-is-java-1...

[2] http://www.oreillynet.com/ruby/blog/2007/09/7_reasons_i_swit...
> If people stop voting up such comments, people will eventually stop making them.

That's like saying, "If we start putting people in jail for using illegal drugs, people will eventually stop using illegal drugs." Unfortunately that's just not how it works - some people comment (or use drugs, etc) because they can't help themselves, rather than for karma/recognition/trolling/attention. Idealism is a good place to start but but, long term, you have to recognize it as such.
Maybe it's time for something similar to the IPv4 Evil Bit -
http://www.ietf.org/rfc/rfc3514.txt
You can't really generalize, there are some good gigs, some bad gigs. Most of the "most popular" work either temporarily or superficially. I would not recommend using fiverr unless you have a solid understanding of SEO (you can HARM your rankings if you are not careful). Also, the good gigs I mentioned are good, not great. In other words, they are worth $5, but probably not $6. Good luck!
When nmap scans port 9100 it doesn't send anything (at least as of nmap 6.00 using -sV). It is probably a higher level vulnerability scanner, possibly metasploit, using nmap to discover open ports and then probe deeper on its own.