skysight-inc/HackerNews huggingface dataset:
Cool. If it was possible to make the processing faster then I think that would help. It took mine almost a minute to show up.
Plus, it would be stupid to "suck it up, work faster and invent something new" since it would likely just get stolen again.
This article would have been a lot better with examples of where that complexity is (particular functions, where the complexity score comes from, etc), and what suggested refactorings help to reduce that complexity. That would make it possible to judge if this is a reasonable metric, or if this is just some overly-strict tool that dings perfectly reasonable code, which some frameworks happen to trigger more than others.
For those interested in a scholarly study of common failure modes for various fashionable Grand Business Strategies of the 80s and 90s, read Billion Dollar Lessons by Carroll and Mui: http://www.amazon.com/Billion-Dollar-Lessons-Inexcusable-Bus...
MOZILLA FIREFOX FOR ANDroid AVAILABLE FOR MILLION OF ARMV6 DEVICES
Hacked is a very loaded word. In some circles, it means "did a brilliant work cleverly and ingeniously using some stuff not always as it was intended to be used", in others it means "did some computer voodoo and stole my data".

Searching for vulnerabilities on a public sites containing live private data is not a business that one should approach lightly. I personally wouldn't do it without being specifically asked for it. But even if one does, taking then massive amount of data is definitely not what a whitehat researcher does.

>>> but does anyone really believe Auernheimer did anything illegal by manually typing in an address?

As far as I know, he didn't manually type an address. He wrote a script that bruteforced ID protection and downloaded a massive list of private emails. Do I have a wrong information? How is it different from bruteforcing a weak password on an email account and copying all the emails - do you think this is legitimate too and that information was public?
delete this thread and make it a SHOW HN: (it will show up here https://news.ycombinator.com/ask )- and submit some other time (you choose a bad time) - then you will have a much better chance for feedback
nowhere to go but up.
Malicious work with the modify-function-return-value hack
If this is in the general vicinity of "Worst. Day. Ever." for you, your life is pretty effing awesome now isn't it. One Thanksgiving a year seems inadequate under the circumstances.

(I respectfully suggest that anyone unable to put death of a startup in perspective invest some effort in rekindling ties with folks outside our little bubble. Again, it's Thanksgiving, so you've got a built-in excuse.)
> Personally, if I'm making a profit (assuming that's my goal) then I could care less what you call me. I'm creating value where there was none before.

Well that's something we can certainly agree on :)
The article's bias is pretty evident where it referred to them as "trolls". The only "evidence" I have that there is more to the story than what this article said is just what I read in other articles. Sadly, I did not bookmark any of them so I can't easily return to them to provide links to you. I'd have to Google for them. So if you would like to read more than just this one account, you would need to Google as well. But if you want to base your opinion on only what you read in this one article AND what some random guy on the Internet (me) gives you, then I won't judge you for that. Carry on.
And the entire point of the article is that this particular law is so full of grey areas that it's at best useless (in the sense of working for its intended purpose) and at worst actively harmful due to the chilling effect.
There is a notable exception: http://thefailcon.com/ "FailCon is a one-day conference for technology entrepreneurs, investors, developers and designers to study their own and others' failures and prepare for success."
I regret that I have but one vote to give. It's disappointing that the actual skills that could be valuable are not listed web and mobile is much too broad for this audience. List your actionable skills. Your normal job probably gives you Thursday to Sunday off (if you're in the states) if you're in a bind, find some work and someone who will pre-pay, or pay on delivery, and make some deliverables.
It is not. As far as I can see in reports, however, this is not what Andrew Auernheimer did. He wrote a tool that bruteforces massive amounts of IDs and downloaded massive number of private emails, which were not public data. The fact the it was easy for him is irrelevant, just as the fact that somebody had weak password is irrelevant if you bruteforce it and access his bank or email account. If you do that - you'll probably be liable for unauthorized access, and excuse "he had a weak password, so it's like public information" is not going to work.
Hounded By Recruiters, Coders Put Themselves Up For Auction
He knew that he was obtaining sensitive information that he shouldn't have been able to access (through at&t's negligence), however instead of following any sort of responsible disclosure, and reporting the incident to the company, he goes to IRC and talks openly about trying to use the information to benefit himself through insider trading and then gives the information to Gawker (again instead of contacting AT&T).

He probably could have had the charges dropped, had he composed his actions differently.
Reading the CFAA, 18 USC 1030(a)(2)(C) says:

<i>"intentionally accesses a computer without authorization or exceeds authorized access, and thereby obtains ... information from any protected computer"</i>

It doesn't say "intent to commit fraud" or even "intent to obtain information". It just says "intent to unauthorized access". Negligence and recklessness count as intent, so accessing a computer without caring whether you had authorization or not is still "intent".

When the CFAA was written in 1986, all access to computers was explicitly authorized. Then the web happened, when people started recklessly accessing computers without caring whether they were authorized, and everyone was in technical violation of the law.
"sometimes REST is not the best way to go. Sometimes an RPC architecture is better."

I think that the full versions of there acronyms make a pretty good job of explaining what is best when.

"REpresentational State Transfer": obviously, it transfers state, i.e. information about a certain resource at a given moment. "Remote Procedure Call": obviously, it calls a procedure, which may involve several state changes and other activities. Of course, a procedure may be masked behind a REST endpoint (e.g. when you POST some data and do some procedure before you end up with a certain state) and vice versa (e.g. a simple getter), but you may pretty much view REST as the SQL of the Web, and RPC as stored procedures.
As has been mentioned elsewhere, they're probably not being sued to get money but rather to freeze the funding. If they transfer that money then the infringing company can just keep going while delaying the trial as long as possible.

And if that is indeed the case, then Amazon could be sued for the same reason.
Yes that's still twice the cost and we're in enterprise license territory and have 4 machines.

That's only a quarter of a million pounds to half a million pounds change...
Sounds like he has serious mental issues. Of course, it doesn't mean he killed his neighbour.
Find a mentor who can help for free, and who will take the time to learn more about you and your startup than HN commenters can in a random thread.
play1.x with scala was quite experimental (play2 is really different and robustly designed) and those benchmarks always generate trolls... Anyway, I can't make people change their mind about those points even if I had numbers to show because everyone sees what he wants to see. This is just subjectivity ;)
Shame the patent numbers were not included in the press release.

A comment below mentioned the patent being possibly related to creating support structures (additional 3D printing to support overhanging sections of a model), and a quick search on Google patents brought up these:

http://www.google.com/patents/US6558606

http://www.google.com/patents/US6797351

And from the looks of it, 3D System has quite the arsenal of patents at their disposal - see for yourself: http://www.google.com/?output=search&tbm=pts&sclient...
I'm not familiar with this complexity metric, but I immediately wondered if the results had been normalized with regard to the number of lines of code or modules in each framework (The wikipedia article doesn't say anything about normalization).
Django does a lot more stuff than bottle or Flask. So if you just sum up complexity of their modules, it's pretty obvious which one will come out ahead.
First World Problems...
Well, we don't know that this lawsuit will lose us any technology. I would hope the point of the suit is that this technology already exists and is being sold but some other company is trying to gain funding using the patented idea.

If you had no patents I have to imagine you'd lose a lot more technology because there just wouldn't be any reason for any non-super corporation to come up with anything. As soon as someone had a good idea, a big corp could just throw 100 human resources at it and create it before the person with the actual idea could.

Having said that, the current system is an embarrassment.
hal is long deprecated and never provided input handling. XInput2 is an extension which you can use to get support for multiple pointers and better keyboard state. The input handling is still done (and was for a long time) by XKB in the X11 server, XInput2 is just a different API.
Absolutely. He was a dick about it. I don't think that anyone would argue differently.

But the fact of the matter is, he's been convicted for unauthorized access to a public computer system. Last I checked, being a dick and a braggart wasn't criminal.

I think he was rather stupid about the whole thing, but criminal? The fault should lie with AT&T, who put their customer data on a public webserver for the world to see.
Kickstarter did profit from the funding of Formlabs' project, which 3D Systems thinks infringes one of their patents, so Kickstarter's inclusion as a defendant doesn't seem especially bizarre to me.

I'm not a lawyer, and this is just wild speculation on my part, but it seems that including Kickstarter as a defendant adds another dagger looming over Formlabs: Kickstarter's Terms of Use, which Formlabs presumably agreed to, includes an indemnification clause.

If Kickstarter chooses to exercise its rights under the indemnification clause, it could demand that Formlabs pay Kickstarter's legal costs (plus damages awarded, if any). Even if Kickstarter is dropped from the lawsuit as soon as a judge looks at the case, they will incur legal costs that Kickstarter could demand Formlabs pay.

The more money Formlabs has to spend on its defense (or Kickstarter's), the less money it has to develop and manufacture products that compete with 3D Systems' products.
nice try, Supercell.
Show HN: Our work: industrial-strength NoSQL
Lotus Notes is the worst piece of software ever written.
There are a number of clues that 3D Systems will be the Big Evil of the coming 3D printing decade. Cube is proprietary, their model store has almost no free content, and they are emulating the standard printer market in their cartridge pricing. All signs point to a mundane corporate mindset that is playing itself out here with a litigious reaction to competition.
What would happen if FormLabs released their blueprints/designs into the public domain?
I am not making excuses for my country, and I am not here to prove that America is unique in that it has to face challenges. I am trying to say that America is not one place or one people, or even one government, and that comparing the entirety of a loose coalition of independent states to single independent nations is disingenuous and ignores specific factors that other developed nations simply don't have to deal with. Yes, all countries have challenges, but all challenges are not the same. I listed a few in my previous posts.

I don't appreciate your belligerent discourse, putting words in my mouth, or typecasting me as a brainwashed patriot. I am well aware of America's problems and I recognize that the United States as a whole is falling well behind in many important metrics. You are not buying my argument that these metrics are skewed greatly by historical and regional concerns that are outside the control of the federal government, and that is your prerogative. But please do not belittle me and accuse me of being ignorant of the world's problems.
If he had to write a script to take the addresses and bruteforce the IDs, there was a lock. A weak one, but still a lock. If there were just a public page that lists all the emails and IDs, the case would be different. I can see no legitimate reason to download a massive list of names - if you wanted to show a vulnerability, one or two emails would be enough. If he stopped when he found a hundred emails or found an algorithm that can generate an ID and guess an email and published that - this would be very different. Even if he created a demo script that would find emails but would not record them (or record sha1 hashes of them - so it can be proven they were true ones but not possible to actually use it for any malicious purpose) - it would still be different.
> How is it different from bruteforcing a weak password on an email account

It is different in these ways:

* Brute-forcing the email password is an attempt to circumvent a system designed specifically to keep unauthorized people out. One can not claim this info is public or that authorization was implied.

* Repeatedly making a call to an open, yet hidden, API is simply using it as it was designed. IMO, at most this dude violated some AT&T TOS by scripting the requests.
A lot of bills can be paid by card, which solves the cash advance problem. (either these $1-2k in expenses, or the bills he'd otherwise pay).
http://en.wikipedia.org/wiki/Cargo_cult_programming says:

Cargo cult programming is a style of computer programming that is characterized by the ritual inclusion of code or program structures that serve no real purpose. Cargo cult programming is typically symptomatic of a programmer not understanding either a bug he or she was attempting to solve or the apparent solution (compare shotgun debugging, voodoo programming).[1] The term cargo cult programmer may also apply when an unskilled or novice computer programmer (or one not experienced with the problem at hand) copies some program code from one place and pastes it into another place, with little or no understanding of how the code works, or whether it is required in its new position.

I think that applies here.
"Scientific Gossip" from the 1870s
I think the fact that he was a known troll is just a fact. He himself called himself a troll, one quote: "Trolling can frequently have large economic repercussions as, as I learned when I trolled Amazon.". This is not an evidence of bias. Of course, being a troll does not mean being a criminal, but the fact that Auernheimer was a troll is well established and confirmed even by himself.

The problem with Googling is that you know what to Google for to provide evidence. I have no idea what evidence you have, so how I can Google for evidence that only you know what it is?
Suhail, I am new to mixpanel but dont you identify a user already via a cookie of yours and all I need to do is create an event that the user has created an account for it to show up in the now new activity feed?
If you've read the reports, then you'd know that what he did was write a tool that performed gets of URLs with an incrementing ID component. Like, http://news.ycombinator.com/item?id=4812496 has an integer component of "4812496". You can change that to "4812497" and get a different story. That's what he did. AT&T published a bunch of customer data on a URL endpoint with an integer component, and he wrote a script that just iterated through the integers.

It's a "brute force attack" only in the loosest sense of the term. It's an insult to actual brute force attacks to call it that.

A password-protected system is, by definition, protected. A URL - "Uniform Resource Locator" - is a string that identifies how to reach a given resource, which may or may not include access control. And in this case, didn't.

This was not protected information. The fact that anyone could consider this technically-protected information long enough to get a criminal conviction flies in the face of the entire structure of the internet.
Being a dick in general is not criminal. Being a dick by stealing 100K private emails and giving them to press, apparently, is criminal.
You could attempt to find a vulnerability in a major system for a vendor that pays bug bounties.
You might enjoy my attempt. No jQuery dependency and binding to an input field is optional.

https://github.com/dbushell/Pikaday
URLs are not a lock. They are a mechanism for locating a resource. AT&T made no attempt to obscure the resource location, or to mathematically hide the location of a given resource like the rest of the sane world does. Publishing something on a predictable interface and then saying "oopsie, that's private, you're a felon for looking at it" is insane.
I made a fanzine (Xerox copy produced magazine) covering bands that were due to play in my town.

I'd print the whole thing except for the cover, and I'd then print the cover on the day of a gig with the headline band on the front.

I could produce these fanzines at 30p, and sell them for up to £2 (exact price depends on the people in the queue I was selling to). I could also sell over a hundred at each gig. Which means £170 profit per night.

Gigs only happened 3 or 4 days a week, so I could only bag around £600 per week from this.

That said, it was quick and non-traditional. Requiring only A4 paper, a pen, and snippets from other music magazines (photos).

I did this when I was homeless and had no skills.

Now you have skills in web and mobile development, skills worth way more to people than me selling fanzines at a gig.

If you want to make some money, get the yellow pages and pick up the phone. Go find a local business park and knock on some doors. Walk in and tell them what you can do, what you offer, and explain your situation. Offer to fix their networking, their printer, their website, to add a feature.

MOST SMALL BUSINESSES HAVE NO TECH PERSON.

They pay over the odds and always have nagging little problems that they will pay to fix.

More, once you've done your role as an odd-job techie, you'll be on their books as someone who can fix something. Allowing you to tap into a little future stream of money too.

But ultimately, how badly do you want the money? Because this money is there, if you want it bad enough. But it does take some leg work to find those small companies who don't know how to find you (this is why they pay a premium).
I also have any accurate answer regarding this issue. but I must say Stick it on a disk or server and leave it be for someone else to find and decipher.
But it's not stealing if AT&T was just happily giving them away. Which they were.
I find that Twitter does pretty well for communicating with my fans, and the people I'm a fan of, without any of the modifications this guy would like to see. YMMV.

On the other hand I've really never used Facebook much. Mostly because I really hate its symmetrical following model. Which supposedly doesn't actually apply any more… IF you can persuade people to hit the "subscribe" button instead of the "friend" button, and good luck doing THAT. But people are in that habit of friending EVERYONE back to broadcast their content, so they set things up to spam themselves.

I really need to start pushing my content to Tumblr. IMHO that seems to be where a lot of the action is nowadays. At least in the circles I'm interested in selling stuff to.

(Disclaimer: yes, I know that anecdotes are not data. This is my experience with getting the word out about my artwork.)
My suggestion is to charge at least $49 for it, at $19.99 it's still very low and you won't be able to sustain that price. You need to sell A LOT of copies to make any money :)
That doesn't mean he can code.
Great point. As G+ allows people to choose the filter settings for each circle. Just add all musicians/artists into such a circle.
I don't think BritRuby had to be cancelled because "it would be nice to have more diversity". Of course this is an attack - and since I am a white male, it is also an attack on me.

I would actually welcome more diversity, I just don't think people should be blamed for not making the extra effort. It's nice that some people have figured out how to attract women to IT, and I am sure more and more people will learn from them. In the meantime, the people who don't know how to do it yet are not evil, they just were more concerned about other things.

And I am sorry, but laws that prefer a specific gender or race just seem unfair to me (that is what is bein pushed in Europe), so that makes me angry.

As for black parents and so on discouraging their kids to go into IT: how about educating those parents then, instead of blaming "white males"?
I have been using http://kippt.com for quite some time now and it is great not only to organize your bookmarks but to find new interesting links as well.
Why does Superman wear red underwear over his costume?
While udev can be built from the systemd sources, it still requires building dependencies that are NOT needed by udev.

So patch the Makefile.in. Maintaining one patch requires a fork?

I am testing and throwing in suggestions for using it on ARM devices where it doesn't make sense to have everything systemd provides, but the devices are more powerful and busybox's mdev is underkill.

Yep, when I use an embedded ARM device, I definitely want a sluggish sysV init boot process. And a crusty old standalone udev with brittle hacks to handle sleep, suspend, and other power-related state transitions.

Because, you know, it's not x86.
You don't Google the evidence. You Google the guy. You have his real name. You have his online name. You have the name of his security firm. Those things alone will provide days worth of reading material. Read some. What I read described his actions a little more. And talked more about the vague language in a 30 year old law. And talked about how the Feds used a very self-serving interpretation of that language.
If you break the law, make sure it's not worth fixing.
I downvoted him. This is ignorance that shouldn't be tolerated.

He's acting like the Taliban is a personal threat to him when traveling by air. They are not, and citing things like Richard Reid (who was British), do not support the argument.

There are repressive regimes all over the world, many that commit atrocities much worse than the Taliban, yet I still feel that I should be able to board a flight without someone putting their hands on my penis.

The whole Taliban argument seems misplaced as well considering nearly all of the terrorists that attacked on 9/11 (the cause of the increased airport security) were nearly all from Saudi Arabia.

So while we do nothing to Saudi Arabia, this person wants to feel safer flying by dropping bombs on Pakistanis.

Stupid on many levels.
Jeff Wise: The Invisible Psychopath
This, a thousand times this.

Everyone is incompetent in some way, which is fine. In fact, I'll help someone out repeatedly if they are really interested in learning something but failing for some reason.

Then there's another level where some people seem to enjoy being incompetent. It is particularly infuriating when someone who is self-admittedly incompetent in an area waves their incompetence around like it's something to be proud of. At that point I just walk away.

A little effort goes a long way.