skysight-inc/HackerNews huggingface dataset:
This is Hacker News...I appreciate the direct source of the leak. Not some shitty article that someone wrote about what happened. If you don't like it, don't click it.
The iPod Touch is even smaller and has almost the same hardware (lacking cellular radios). Apple still is able to make a nice profit selling them at $299 ($450 cheaper than the 32GB iPhone).
ASK HN: How to intersect two sets of longs that don't fit into memory?
haha, this is the best password.
It's funny you should rail against libertarians when discussing a city that's where it is at least in part because the productive people were driven away through extra taxes and regulation.
It's very common to target ecommerce stores like this. Specifically jewellery stores for some reason. Probably because it's a luxury good and somehow botnet owners link that to wealth of the owners. We host tens of thousands ecommerce stores and sometimes get these forwarded. We estimate that our customers receive at least one a month. DDOS attacks are a weekly to bi-weekly occurance for us.

The internet is a messy place.
Word is already around. Steve Albini laid out how record company accounting works in the early 90s in his essay "The Trouble With Music". The most cursory research would show you that as an artist signed to a major label, you're unlikely to ever make minimum wage.

That doesn't matter to the labels, because there's a sufficiently large stream of starry-eyed wannabes to keep the wheels in motion. The labels simply don't want to sign the sort of band that's happy to have a small but loyal fanbase, because they can't make any money out of it - like tech VCs, their business model is based on signing a lot of long-shots aiming for global domination.
Reminds me of a Zip bomb: http://en.wikipedia.org/wiki/Zip_bomb
They say on the pastebin that one connexion sent passwords in clear text (through asipx-webadmin), so they probably were read there. At least it was probably an entry point.
That's definitely correct: Since you can produce cycles in YAML (it's deliberate choice), programs which don't check for graph cycles and blindly go about traversing a serialized graph are subject to DDOS.
fair enough then.
Of course there will be. We are talking about git. Everyone has a full copy of the repository. Github's data center gets hit by a meteor tomorrow and it's a minor setback, nothing more.
Air Fuel Synthesis shows petrol from air has future
Apple's mobile products haven't carried a large premium. Starting with the iPod Apple has used economies of scale and massive purchasing power to stay very competitive (for high-end devices, they're not chasing the bottom of the market).
This is one of those situations where one is not sure if the subject of the story is incredibly lucky or incredibly unlucky.
Just more blogspam. Calling the person who wrote this a "reporter" is a definitely not right.
It is very common; these scams were the bane of online casinos a few years ago, and hit major financial services companies more recently.

Sorry, did I say "scam"? I meant "digital equivalent of a sit-in".
Are you here Rexxar (in France)?
While it is very true that Unity is slow to launch applications I regularly launch a browser with Logo+1 hitting both immediately and releasing. The browser is launched and the side bar never even makes an appearance. You don't need to wait for the side bar to slide out. :)
Don't think I would buy this for anywhere near $800
I'm sure this comment will be heavily downvoted but I read several times that FBI and similar agencies were 7 years ahead in terms of technology including security of systems.

I didn't believe in those quotes and every time a situation like this happens I'm more convinced that they are no more advanced than the big companies (Microsoft, Mozilla...) and depend heavily on the updates released by those companies every week... Just my 5 cents...
Next step: a tupplespace in Go?
In the US, carrier subsidies distort pricing. The iPhone premium is paid by the carrier. For example, AT&T retail iPhone 5 is $649, while retail SG III is $499. But both are $199 to the consumer with a 2-year contract.

I have no idea how this works out in other countries... $649 is a lot to pay for a phone when you can buy a galaxy nexus for $349 at retail!
Huh? I'm talking in the abstract. Yes, people work on what they think makes sense, but they don't know what makes sense. Therefore an "idea guy" who tends to have good ideas has a value that may never be achieved by an engineer who can execute phenomenally well but tends to have bad ideas. Just because you can't quantify it doesn't mean it's not there.
Maybe they weren't stored in plaintext, they could have been reversed from the hash. A lot of legacy systems still store passwords in something like 3DES which is trivial to reverse.

PS - "reverse" just means using either rainbow tables or generating the entire set for a given hash(n).
So it seems speed in Python is inversely proportional to readability, in his experience.

One performance aspect of Python often overlooked is its functional programming features, which can make your code both faster and easier to read.
"Benefit of doubt" contradicts the principle of peer review.

No credible working research mathematician (I am one) could look at that paper for more than fifteen seconds and regard it with anything other than uproarious laughter.
How is 'socialist' used in meaningless ways? Socialist in 2012 means someone who believes that wealth should be distributed from wealth-creators to the public sector, with the result that the country as whole grows more slowly than it should. Maybe you are thinking about what "socialism" originally meant, or what it "should" mean. Socialism has been defined by history.
I would have to say that 400% over estimated manufacturing cost is quite a bit of cream on top, at least for the iPhone 5.
I performed a variant of my suggested experiment. I went on facebook and found a friend of mine, who has a B.S. in mathematics and did some coursework toward a Masters.

It took him about 5 minutes to identify it as a hoax. And he was distracted (with facebook, football, and his 3 year old.)

He's how the exchange went:

12:11pm ME: tell me what you think of http://thatsmathematics.com/blog/wp-content/uploads/2012/09/...

12:11pm HIM: How in-depth a review do you want?

12:12pm ME: just give me your first impressions

12:14pm HIM: My first thought: "Holy crap, there's a ton here I don't even remember..."

12:14pm ME: second thought?

12:15pm HIM: Second thought: "Is this legit? It's all over the place..."

12:15pm ME: third thought?

12:16pm HIM: "This is starting to look like something thrown together to appear like a legit math paper."

12:17pm ME: Thanks. That's adequate. It actually is.

12:17pm HIM: Yeah, I was about to say I was 100% certain after one more glance.

EDIT: my wife and I both have advanced math degrees, and we spent the morning laughing at this paper. But since we already knew it was a hoax from the HN post, we weren't valid targets for this experiment. My friend didn't know anything about it before this chat, so he was a valid experimental target. I think his response is adequate to demonstrate that this paper wouldn't pass peer review by actual mathematicians working for a legitimate journal.
I would love to hear more about how you mitigate them.. Or is this part of the "secret sauce" for hosting companies?
Here is the paper in full: http://blog.richmond.edu/physicsbunn/2012/10/19/math-journal...

Well, if they rewrote the abstract, and proved their results, it would have meaningful content..
Seriosly, production cost again?
Or at least should be now.
Just the statement that one's organization is "seven years ahead in terms of computer security" implies a fair amount of technological ignorance.

How can an organization be seven years ahead of everyone else? Do they have Norton Antivirus 17.0, whereas the rest of us are using 10.0?
Actually, they do. It's just that, in the US, the premium is hidden away behind the expensive contracts that the carriers require. See this very insightful article on the subject: <http://ben-evans.com/iphone-pricing-and-us-market-share>;
Show HN: placepu.gs - image placeholders like placehold.it, but with pugs
When Google Voice was new, I signed up and got a number, but my account never got properly activated to send or receive calls. After more than a week of trying to get support, I payed the fee to get a different number. Unsurprisingly, that number didn't work either, but the financial transaction did at least get me a line of communication through which I could dispute the charge on my credit card and force Google to react. Two or three days later, my account was fixed and the number switch and fee were reverted.

Bringing a financial transaction into the mix is always the most reliable way to get in touch. Google may play hard-to-get with their users, but they can't do that to a bank.
Not sure where you get such a conclusion about all the myriad VC firms out there. Founders who are getting a nice income and are able to work on changing the world can do well for the company and its investors:

http://www.youtube.com/watch?v=u6XAPnuFjJc
I like the django documentation but sometimes I find it hard to figure out how to do exactly what I want to do ... the source code however is pretty readable, effectively it is cross referenced since you can look at the imports, and on github you can find the tag for the version you're using and browse it online.

For example, I recently re-did the login and password management pages for a site and I found it easier to just look at contrib/auth/views.py , especially since all the views are heavily parameterized, and it is only ~250 LOC: https://github.com/django/django/blob/ff6ee5f06c2850f098863d...
http://blog.richmond.edu/physicsbunn/2012/10/19/math-journal...

Rewrite abstract, explain your expressions, prove your results basically.
Note that the entire raison d'etre of the GNU project was and is to build a compatible work-a-like of proprietary Unix. I'll never get why it seems some people have such a bee in the bonnet about Mono doing the exact same thing with .NET.
Hashing passwords (so you can never get back to the original password) has been used for decades.
You need to wait if you want the numbers to pop up on the icons, if you just want to switch programs you can do it instantly.
Estimated prices on 13-inch Retina MacBook Pros: Starts around U$1,699
Sounds like Kropotkin's mutual aid theory is still kicking!
Author here. Glad to see that this post was useful; I wrote it a while ago when I realized that people weren't password-protecting their Github private keys because it was "too complicated".

I've been meaning to start writing again, and my post showing up on the HN front page is a pretty good motivator. Thanks for that, everyone :-).
pg, not only are you right about this, but there is a greater mistake in the assumptions here -- namely that there can only be two outcomes: $100M with 0.002% chance, and $0 with a 9.998% chance. In reality, there is so much in between, which raises the expected value quite a bit.
Show HN: Minimalist hacker slideshows using JSON
What about counting while typing them? :)
Because Apple set prices for normal human beings, rather than geeks.

The clearest example is the iPod Touch vs the iPhone. From a geek's perspective, they are the essentially same product, differing only in the presence or absence of a cellular radio. The iPhone is more than twice the price of the iPod Touch, which is a scandalous mark-up for the addition of what we know to be a relatively inexpensive component.

From the perspective of nearly everyone who has actually bought an iPhone, the two devices are completely different - the iPhone is a smartphone, the iPod Touch is just an MP3 player with games.

That's why Apple are the most valuable company on earth.
Yes, in fact, it implies technological illiteracy. But I can imagine what kinds of people would say that.
I think Detroit could have an economic revival if they just took a portion of the city build walls around it and made it an anything goes zone where you can do whatever you want.

But why would you hire armed guards when you can hire off duty police officers who will wear their uniforms while they work for you? Yes, you can do this legally!

Also the local police, as part of a labor action, are now WARNING people Attention: Enter Detroit at your Own Risk
Not only whether one is good at something, but whether they are in a good position to try. If you already have lots of traction, or investors, or smart people around you, then it's a good opportunity.

Having said that, what were the people who funded Color thinking?
This guy seems a bit mislead. There are definitely not 15 million people in metro Detroit. There are only 5 million people in the census area that includes Detroit, Ann Arbor, and Flint, and has an area over 15000 square kilometers.
According to a quick look at Wikipedia, the only apparent difference is that Eurostat requires an unemployed person to be able to start work in the next two weeks, while the US BLS requires an unemployed person to have been able to start work last week.

Is it your belief that the difference between "are you able to start work in the next two weeks" and "if a job were offered, could you have started work last week" is 3-4%?
Because we all know that product development, distribution, and retail are free, right?
Only 14 users, poor quality and a developer can build the same in just no time.
Not a single sentence, can it be that they allow characters like ( and % but not whitespace? Boggles my mind that people don't use more sentences.
This is very interesting indeed. It goes a long way towards displaying a view of organisms as an ecosystem composed of a very large and diversified family of symbiots (cells), themselves composed of synergistic molecules, with all the chemical reactions happening in a joyfully probabilistic & dynamic equilibrium.
Onerous ride regulations are usually the flip side of requiring cab companies to service everyone.
Since it's just the FBI then I would make it a retraining issue. And the sysadmin with such pathetic password policy should get some ass chewing.

Whoever wrote the code that stored these values in plaintext (if that is indeed the case) should definitely get the boot.

If this was the NSA or CIA I would fire them all and shoot the person who coded it. :o)
> People forget that keypairs are not like passwords – if Github gets compromised, nobody can do anything with the public key you gave them.

Oh, I'm well aware of the difference between a public/private asymmetric encryption scheme and a symmetric one.

My concerns are more along the lines of my laptop/desktop being stolen, or my home being robbed and my backup disks/USB keys being taken, or even my computer being seized at the US border. There are ways to mitigate those concerns (e.g. full-disk encryption), but I'm very much a proponent of defence-in-depth whenever possible.

I should probably clarify that in the post itself, so that readers aren't misled as to the reasoning behind password-protecting your private keys.
I've seen it. They'd have to rewrite the abstract, state an actual result, prove it and rewrite everything in between. The "paper" is just grammatically correct but non-sensical glibberish from start to end.

If a referee accepts this paper conditionally, he might as well accept a blank page on condition that the author will put something there.
- accounting and financial statement analysis (useful in pricing and fundraising)

- quantitative marketing models (useful in forecasting + modeling)

- market research techniques (probably the most valuable skill to building products)

- VC from two internships @ early stage funds (useful in understanding how VC's think)

- negotiations

- entrepreneurship classes on opportunity analysis, fundraising, and valuation (useful in helping to avoid solving the wrong problems; articulating the business to investors; building with the end/exit in mind)
Or whoever is in charge of tech security, yes. I think the whole Wikileaks-State-Dept. episode showed how a global system can be undermined by the weakest link.
Caveat, though, is that this will force connections to break if you have a transient network outage that SSH could otherwise cope with. Which can be annoying if you're somewhere with a flaky connection. Putting it on the specific hosts you need rather than globally keeps it from causing you grief anywhere you don't need it.
CS infrastructure is quite a bit different from Zappos (Amazon doesn't provide live chat support for example from what I understand), and as entities, both their customer service philosophies (while focused on keeping the customer happy) are quite a bit different - Zappos is very high-touch, and Amazon is not.
Which app provided the story? This format is not very clear, IMHO, at least on this here iPad.
Ah, very cool. I remember stumbling upon ProxyCommand in some SSH docs, but didn't really see an immediate use for it. Thanks!
It is true that Google has no support for free (or mostly free) services but they do generally for paid services. When I have issues with my google hosted (and paid for) domain a real person answers the email and follows up. At some point I expect them to just flip the bit and bring up a customer support service for 'real'. I suppose they could buy zendesk or something like that but here is an interesting question, how much would you pay for your Google stuff? A gmail account, a hosted domain, docs, etc? $10/month? $100/month?

At NetApp I got a chance to sit in on some meetings where support costs were being evaluated and there is a pretty clear calculus that can be done. (I recommend all engineers at an enterprise products company experience it since the 'cost' of s bug (and thus the value of testing) is pretty clear) So I wonder if Google decided to add revenue from all of their products in this way (clearly they do that right now for Google Apps) would folks sign up? I know a number of Youtube 'publishers' who would if only to have someone to call up when they get a robo-takedown.
we spent the morning laughing at this paper

And how. I still can't breathe quite right. I still think differentiable category theory was my favorite bit, but I'll admit the recent paper by Pythagoras has appeal.
The "productive people" were driven away because they didn't want to live next to black people. The Detroit metro area isn't any smaller than it used to be--people just moved to the suburbs. There aren't appreciably fewer regulations in the Detroit suburbs, and taxes aren't any lower either (what you save in sales tax you more than lose in property taxes).

It's also a little funny considering that 27% of US GDP comes from just seven heavily regulated, heavily taxed metros: NY, LA, Chicago, DC, Philly, SF, and Boston. And it's not just population, these cities only account for 20% of the US population.
well, to put it a different way, it allowed those working through the book to make small updates to compensate for django updates :)
Would we be surprised if someone got fired from Google or Microsoft for making internal information readily available to the first idiot who tried?
Python on Android? First impressions of Kivy
The link is in the leak. It's currently timing out.
I use ZSH, which if configured properly will also do this for you. Huge timesaver when I need to connect to a half-dozen hosts.
effectively shutting down someone's livelihood, in this case.

They just lost a phone number on their cheap service. The fact that losing that phone number endangered someone's livelihood is not their fault.
This is true. You can find the reference here (search for "Detroit"):

https://en.wikipedia.org/wiki/List_of_United_States_combined...
Watch YC Startup School 2012 Live
Oh wow, this is great. I had no idea that existed.

Thanks!
If the core includes sound drivers and a sensible structure to sound then bring it on...

...I know this is a niche area but the application of cheap touch tablets to sound synthesis software could open up a huge realm of activity.

Then there is the use of a stylus for accurate work...
Taxi companies are required to service the whole city. If you allowed jitney service without that requirement in popular areas, the taxi services couldn't compete.
This passes the smell test. All signs are go for Apple to make an extra couple billion dollars this Christmas.

The 7" form factor clearly has value to customers over the predominant 10" form factor. Every review of them touches on how much nicer they are to read on and carry around.

7" tablets will be kids first computers, they'll replace the full iPad for lightweight POS installations, they'll be the go-to for portable employee applications, they'll sell into schools like crazy, and they'll make good purse-able travel iPads.

Plus there's that media ecosystem, that OS, that app stack, that customer familiarity, and that third party universe. No readily identifiable competitive weaknesses.
That doesn't make much sense. If the products are losing money and Google's fiduciary obligations to shareholders consist only of maximizing margins, Google should shut down those products. Not supporting paid products for businesses(!) will hurt more than just the reputation of those products, as a shareholder I would consider it irresponsible on behalf of Google (I'd assume that they're also pissing off some shareholders who use those products).
so, how do I protect myself against this?
Especially considering that they already have a massive government enforcement apparatus defending their turf (the FDA and friends).
The title is "FBI got Hacked, Reveals Hundreds of Passwords" and while it does point to pastebin, the title reads like the title of an article. So it's hard to know not to click it until you click it. If the title did a better job indicating what the content was, you could both be happy.
I know $5 for an all day pass is not bad, cta in chicago is 5.75 for an all day pass but that is all the buses and the l train, but it also is bigger and subsidized. I only hope that they quickly add a 30 day pass.
Ask HN: How have you asked for a raise? 
What has worked? What hasn't?
Well, they could for example invent RSA years before the public knows about it. (British intelligence did this). Or they could invent differential cryptanalysis before the public knows about it. (NSA did this.)
In the UK, lottery winnings are tax-free and paid in a lump sum. It may be the same in Australia.
NoobNinja: Day 1 Recap + Vision
Copybar Cofounder here, we support drag and drop images upload as well.
What if people want it for being 7" and not for being a cheaper iPad?

I bought my Nexus 7 because it fits in my pockets. Everywhere I would have a bag with a bigger tablet with me I would have my big notebook anyway.
My guess would be a hack of some kind (eg compromising a popular project's code or downloads) and then using the DDOS as a smokescreen. This is something bad guys are increasingly doing with banking hacks - steal the money and then divert everyone's attention with a DDOS. That makes it a lot harder for the victims to find out what happened and distracts the financial institution.

More info: http://krebsonsecurity.com/2011/11/ddos-attacks-spell-gameov...
I don't see how they could possibly justify their iPhone prices

Two totally different markets. Carrier subsidies inflate the price of SmartPhones because the consumer is not paying the full price up front. They don't even know what the real price is. The carriers would certainly like to negotiate prices lower however the iPhone owns enough of the market, by itself, that Apple has the upper hand. A carrier who doesn't offer the iPhone these days is in trouble. This is true of other types of SmartPhones too. Having the latest and greatest Samsung phone is valuable to the carrier as well. So they pay a bit more to lure in customers with nicer phones. Don't feel too bad for the carrier's though because they still make quite a lot of money in this arrangement too.
Breakthrough offers new route to large-scale quantum computing