skysight-inc/HackerNews huggingface dataset:
This one is pretty nice though: Richard.VorderBruegge@ic.fbi.gov - ilovemydaughternancy
Looks like it was a whole 10 minutes. EVERYONE GRAB THE PITCHFORKS!
what about laughing at yourself?

qwertylol@me
The lights in the Twin Cities are the same for the on ramps. Or were rather but same difference.
Thanks for this enlightening article. I now know hot to make my first million.

Thanks again mate for posting this here on Hacker news.
Also, some quick searches with the emails give results since Oct 2012 (but none of them have server info, the info is easy to fetch anyway).
Dude, I heard even talking about these combinations is considered as illegal, as in effect you're [illegally] distributing classified information. Better delete it, just for your safety!
it costs a lot less to build up than to build out

This is another fair point, but consider the land is massively more expensive. The dynamic is relative scarcity and bargaing power. The more scarcity, the more the economics look like monopoly on the underlying asset. At that stage, the cost of building out is sort of second order.

The other examples, such as London, Geneva, and SF have a combination of massive wealth (in both flow and assets stocks) combined with constraints on the ability to build due to geography/history/etc.

I agree some of ths (like greenbelt and listed buildings in london) is by way of law, but most rent control follows from the combination of scarcity/wealt co-existing prior to legislative means to "provide access". In other words, those laws follow the sort of self-evident understanding that if left unchecked, the dynamic of quasi-monopoly rents being extracted from the real-estate market will lead to all kinds of bad things down the road (social tension, and its variants, primarily).

The other counter-example perhaps to chicago or LA is tokyo (which is pretty spread out). But again, there is a social dynamic of scarcity (JP is very hiercarchial/aristocratic society) and Tokyo is both the financial/business and political capital of JP. Even in the 80's the somewhat absurd cost/ft did not hinder people from needing to be in Tokyo for their careers. Rather, the all just gave up having more than 1 kid to afford the astronomical cost of living. A generation later, the population growth is almost not feasible given the entrnched cost structure of real-estate and the need for the few young (workers) to support the many old (retired).
There is 0 credibility to this claim. I could make up a list of passwords if I wanted to.
Ask HN: I edited the website for my startup. please critique
I posted the site for my startup last month and received some amazing advice. I decided to post again to show the the improvements and ask that y'all critique the changes.

Changes: Reordered the slides, removed the subheadings from the menu bar, slightly changed the copy on the 3rd slide.

The company is called Rentr and acts as a universal rental application to help people land housing.

Thank you!

https://myrentr.com/
I've been looking at this system too. http://matrixrobotics.com Interfaces perfectly with Lego and is more Lego like in the way you can build things. Their holes line up perfectly with Lego holes. Pretty cool.
I really wonder if the user would remember this password, or just copy paste it from somewhere. ;)
Microsoft to Shutter Windows Live Messenger
There's a few ways someone could do this that wouldn't use "store password in plain text". A MITM attack using remote access to a router/server would work if a webmail login didn't require SSL (or if the attacker is sophisticated enough, it would work even if SSL was on). I can think of a few ways one could social engineer their way to that level or just escalate by gathering data.

Even something as simple as cracking the home WIFI router of an unsuspecting employee, and use those credentials as a base point to work your way up the access chain. Lots of places spend loads of time securing the border to prevent outside access, but don't spend loads of time preventing users with access from escalating. I know we're talking about the FBI, but really it only takes one small mistake.
Per the article, the school's motivation in adding an RFID tracker was to have more accurate reporting on daily attendance (leading to more federal funding). However, in an attempt to accommodate the student, the school district offered her the choice of wearing a non-RFID badge. I wonder how the school was going to detect her presence without the tag. If they were able to, then they shouldn't do RFID for _anyone_. If they are NOT able to(which I would think is likely), then why ask her to wear the plain badge without RFID? They should have just offered her an exception to make the the whole case go away!
Score over 1MM USD in your next Job
In silicon valley there are hundred of great companies where to work at. And as a software developer you might get harassed constantly by recruiters for large companies with great benefits and salaries.
This article is a great explanation of what I've been thinking all along. The rising tide has been in efficiency and technology but every American is realizing these gains through computers, phones, and access to information. The baby boomers were able to get an education, buy a house, a car, have a kid and go on vacation, and all of those things have been squeezed to the breaking point in the past two generations. On the other hand, you can consume all you want on the internet, and with enough experience, cheat the system and download unlimited music, tv shows, movies, ebooks and software. If you want all the luxuries of the baby boomers, you have to be frugal and prioritize. Education: go to community college and transfer to a cheaper state school. Car: buy a cheap 90s honda. House: save for a down payment, but rent is still the same or cheaper than buying and you have flexibility to move. Kids: that may take more time.
Usually, password managing software are used for creating and entering such passwords.
I was a fan of qwertylolqwerty
The classic trick with such nonsensical passwords is to use a phrase as mnemonic. "I replied to Garbage on Hacker News on the ninth of January" becomes "IrtGoHNotnoJ".
In theory, yes. In practice? Well, so far it's tended to accumulate in the coffers of banks and corporations, to moulder and rot.
Did it ever occur to the girl that wearing an identification lanyard is perhaps a security measure by the school to ensure only people permitted to be on the grounds are on the school grounds? I think the RFID chip is a great idea. It prevents people wagging and as mentioned prevents just anyone from walking into the school pretending to be a student. They presented a compromise of removing the chip and it wasn't good enough, there's no religious belief trespassing here just stupidity and defiance for school policy.

Here in Australia the public school I attended required me to wear an ID card (no RFID though) on a lanyard for security purposes so they could identify people who weren't supposed to be there. I don't see the problem because a couple of places I've worked at have required the same thing and all Government jobs also require a lanyard with ID displayed at all times.
> Yes, they are legally obligated to share their modifications with their customers. No arguments here.

Nope, if you distribute something with GPL code, you must make the source available to anyone that requests it. Not only to your customers. And you can't put any kind of filter on reasons for the request.

One can only charge a "reasonable" amount for the work of making it available (CD, hosting, etc).

The only corner case I see is if they claim that they are selling a device (like the whole car) as a single package and there is only a single package of code along with it.
It would take quite a while to make up that many. They appear to represent a wide range of individual styles, too.
Lecture on how to rip and convert DVD for NDS
Do you want to rip and convert DVD movies for NDS? DVDFab DVD Ripper can easily do this for you. Here is a video on how to rip and convert DVD to NDS with several mouse clicks.
What do they have to gain by hacking the fbi passwords? Don't they know the government never forgives or forgets?
hard to train a classifier for an animal no-one has seen.
The identification would be a security measure I am guessing. I went to a public school here in Australia that required you to wear an ID card on a lanyard, there wasn't an RFID chip in it and I didn't see a problem with it. Many jobs I've had have required me to wear an ID card around my neck as well, this girl and her family are just nuts.
I have passwords longer than that that I've memorized the hard way.
I agree completely. Health insurance from employer vs. health insurance from government is a false dilemma.
Marx, however, was and is historically inaccurate. Both in his understanding of the past and his predictions of the future. Check out Immanuel Wallerstein or Fernand Braudel for more accurate, careful, and relevant histories that're not just glorifications of the ruling class.

Looking at your example, it fails to explain why wages rose for 200 years before the alleged stagnation hit (sure, you can hack some Leninist stuff on about imperialism, but it's mostly unconvincing). Worse, Marx's grand scheme of progress is pretty flawed: even in one lifetime, people readily shift to and from one economic system to another, and each system relies upon and coexists with its predecessors and successors.

Wide swaths of life and economic activity aren't subject to what Marx described as capitalism, and as capital increasingly tries to squeeze more and more value out of people, people increasingly shift to using exit as a means of liberation. Look around you, and you can see it: that's what's most marvelous about the era we live in.
Those could be hand-entered default passwords for accounts that were never used.
So far as I can tell, there are a seriously large number of people paid to work on Java. The security record of Java is way worse than Ruby.

I can tell you that "security" is a topic that, unless handled carefully, will make anyone's eyes glaze over.
Man I have never wanted to see a company succeed more than I want to see Curtis' thing succeed now. What a bunch of wangs you all are.

If this is some kind of genius nerd underdog sympathy marketing ploy, I've never seen it done better.
Looks more like banging on a keyboard to me. Perhaps this user just lets his browser store it and has it emailed to him if he forgets it.
I kind-of agree.

Tho, I think if they just asked me to pay what I think it's worth to me, I would pay something. Right away. I'd click the button and pay something, then probably do it again in a couple months.

They should call it, "give Trello a hug", and then I can just hug it with some money whenever it makes me feel happy.

Too sappy? I don't care. I honestly feel like I've found the solution I've always dreamed of with Trello and I could not believe it was free from the day I signed up until now.
i've only used it on linux, but as far as i know it should build easily enough on osx, seeing as how it's unixy under the hood.
Honda made a road that plays part of the William Tell Overture[1]. It doesn't sound right, but the effect was still fun when I tried it.

[1] http://en.wikipedia.org/wiki/Musical_road#Civic_Musical_Road
Ask HN: what JS framework was used to create Kickstarter's 2012 reel?
It's an awesome piece of work, I'm very interested in how this was created. Any ideas? I've scanned through the html and could only find references to Jquery, but none to things like backbone.js or other frameworks.
http://www.kickstarter.com/year/2012
That's not my point....

I made the "understand the framework" statement in response to some mistakes I have seen introduced by sloppy dev's on some rails projects I have worked on...That obviously wasn't the case here.......

If security is important you should periodically try to hack the system and consider incorporating automated penetration testing software against your application. I haven't had a need to go this far with my own recent apps so I cannot speak authoritatively on this, but I think there are some tools that can help with doing penetration testing etc..

In a past life I had to work on some pretty secure systems and did some crazy testing on things. I saw a lot of good developers introduce pretty big security holes....my favorite was when our /etc/password was served up by an application...and this was a well known team of craftsman that did this on a fairly large project. None of these have been limited to Ruby projects....they have included Java, C etc..

In my view security is a moving target. If the cost of a attack warrants the effort to protect against it then you do. If not then you don't. Even if the developers of the framework concentrate on security, there will always be ways to get around it. Safe's are rated on the amount of time it takes to break into them, if someone wants into bad enough they will get in. The same is true with software.

Should I be more aware of the security on my apps? probably. Should we as a community be better with it? Yup.
But unless I've taken the time to really dig into it, offer constructive feedback and be willing to jump in to fix it I have no business criticizing the state of things.

And I say all of this as someone who loves Ruby.
That does not matter.
Take a different list of passwords, do a regex to make the e-mails FBI ones... ta-da.
I had a similar issue when I applied after waiting for a year. The rep I talked too indicated that a ChexSystems report was the reason used by their "bank partner" to reject my application.

This sent me into a bit of a panic. There is absolutely no reason for me to have any negative reports in ChexSystems, and after pulling the report myself online, I found out there is no negative information at on the report. I relayed this information to the rep I was e-mailing asking if anything could be done, since clearly something had gone wrong. There was nothing he could do.

Five days after talking to the rep, I received a form from Simple in the mail for a ChexSystems report request. It was pre-filled with my name, birth date, current address, and social security number. Everything anyone needs to steal my identity in one convenient place.

I'm fed up with banks, but I'll take a bank over a place that can't open new accounts and mishandles customer information any day. I think it will be a lot less costly in the long run.
Guns, Germs and Steel

http://www.amazon.com/Guns-Germs-Steel-Fates-Societies/dp/03...

Life of Pi

http://www.amazon.com/Life-Pi-Yann-Martel/dp/0156027321

Billions and Billions

http://www.amazon.com/Billions-Thoughts-Death-Brink-Millenni...

The Ancestor's Tale

http://www.amazon.com/Ancestors-Tale-Pilgrimage-Dawn-Evoluti...

Sorry for suggesting so many, I couldn't help myself
They are certainly great at self-promotion, I'll give them that.
Where did you guys get that info?

As far as I know, it's always been that if you distribute something with GPL code, you must make the source available to anyone that requests it. Not only to your customers. One can change though, for the costs of making it available.

The thing you mentioned is applied to licensing. A person is only under obligations by the license if he/she distributes anything that uses GPL code. If people only run a piece of GPLed software, or if they make changes only for personal use, they're not under GPL license obligations.
Ken Burns is a historical documentarian known for using slow pans and zooms over still photographs accompanied by voice-over narration.

http://en.wikipedia.org/wiki/Ken_Burns_effect
I thought some come of the core committers had their work sponsored by their employers.
> due to the fact that the dominating factor is the network stack (and not the event reactor model or implementation)

Good point. Sometimes it is necessary to tweak OS network settings (increase # of ports, file descriptors etc).

> Arithmetic benchmarks are a proxy to measure the distance to bare metal.

Presumably node is to be used in a heavily IO concurrent environment. Multiple connections coming and going. Single arithmetic benchmarks don't matter much or how close to the metal they are, that is not what node is mostly used for (if it is used for that those block the whole process and make for a pretty bad server). So a better test is to see how node handles 100000 connections, so maybe a mix concurrent connections and arithmetic benchmarks? 100000 users connect and do some arithmetic operations.
Thank you for those links. Interesting analysis.
It breaks YAML deserialization in other places. You could enable and disable it on demand in the XML parser, but a more sensible solution is just to get YAML the hell out of the XML processor. Trying to make YAML safer is probably not the right approach.
I hope Alicia's husband/SO's name is Mark, or she has some explaining to do.
But a lot of them look like they have some relation or similarity with the account name.
I guess my point is there is more to it than just geography. Clearly the availability of cheap land lowers the price of housing, but Chicago is more densely built than say Seattle or Portland while also being cheaper. The downtown core is comparably dense to San Francisco but much cheaper.
Change it to

gem 'rails', '3.2.11'

and run

bundle update rails
Where do you draw the line as to what can be considered to be a fair religious objection? Any thing can be interpreted to be the "Mark of the Beast".
I've had a similar experience with their support. They asked me why I wasn't using the account and I mentioned no ATMs near me and no Android app and they directed me to the web site and didn't address the ATM issue.

IMO their online banking is pretty cool but the so far their customer service has been worse than every other bank and credit union I've used.
oddly enough they declined my application due to "negative" or "closed" bank accounts. I have been a member of federal credit unions, big banks, have a job and credit cards yet they also denied me. super weird!
Cloud of atoms goes beyond absolute zero
You should go read some Donald Knuth source code, or use a Donald Knuth Design (try TeX).

Seriously I love this crazy guy, incredibly smart, but he can't code _properly_ for his life.
This sums it up:
He applied his intelligence in unconventional ways, winning a contest when he was in eighth grade by finding over 4,500 words that could be formed from the letters in "Ziegler's Giant Bar"; the judges had only about 2,500 words on their master list. This won him a television set for his school and a candy bar for everyone in his class.

[Wikipedia]
If you had simply stated that you didn't believe in the concept of "objectives", instead of singling out my precious emergent systems, there would be no rabbit holes to run down. :) Also is 1 thing that has an objective too much to ask for?
A Bad Month for Boeing’s 787 Dreamliner
This article broaches an interesting topic, but is really poorly written and doesn't do any real analysis of the situation besides summarizing an interview. I'd love to read an article that did those things.
Yes, it's been around for awhile but the general public hasn't been able to develop apps for it until now.
I suspect that the most used pattern in the HN community is the ActiveRecord pattern although many who use it probably are not aware that they are doing so.
Um, thats a misreading of the old Bloomberg report that invented the $7.7 trillion figure. Actual loans appear on the Fed balance sheet. The Fed offered 7.7 trillion in loan guarantees over a period of time, many of which were quickly wound down, which is a very different matter. The Fed currently has a balance sheet of $2.8T: 1.6T is government loans, about 1T are mortgage backed securities from the 2008 crisis.

See http://m.washingtonpost.com/blogs/wonkblog/post/no-the-fed-d...

and

http://www.econbrowser.com/archives/2011/12/777_trillion_in....
Shrink your browser window.
Alright, I just compared it to the hack that was posted about 3 months back and this seems to be a repost of it.

When it was posted back then, it was called out to be a repost of an older one. * Sigh * [1]

[1] http://news.ycombinator.com/item?id=4678064
The funny thing is the linked article shows an Android screenshot. But from googling around, it looks like no such app has been released yet.

http://www.nytimes.com/imagepages/2013/01/09/business/SIMPLE...
This sure fits an interesting middle ground sort of journalism. I don't think I'm quite qualified to describe it, anyone up to help?

For one, it tackles the same insecurity subject conspiracy theorists like Alex Jones approach. However, he keeps it in the realm of rationality. What is the "It"? The main subject seems to be a description of the position and orientation of classes in USA society, and how they're changing.

Now, why is this so different than what other publications publish? I've heard before that Class in America is a touchy subject, and I don't see it mentioned much in The New Yorker, the New York Times, on TV, or in any of the sites I read online.

It seems like something in the idea of Classes conflicts with the Left/Right narrative you hear in 'the media'. Classes should have interests within themselves, not necessarily 100% split among party lines. And the media mostly tells the stories from party perspectives. Does that make sense to anyone? This is confusing to me.
I was positively surprised by the amount of good passwords in that list. If you look at any other leak incident the amount of 'simple' and non-randomly generated passwords is much much higher.

In fact I think that is a testament to that this is actually a list from the FBI.

BTW everyone immediately assumes that these passwords were stored in plain text, but that does not have to be the case at all, this leak nowhere states that these passwords are from a database.

If a host gets hacked, there are plenty ways to obtain passwords without looking into a database.
If this kind of stuff interests you, you should check out the lecture videos from Harvard's Stat 110: http://stat110.net. Prof. Blitzstein is hilariously nerdy but still has a very clear presentation style (he had kind of a cult following back when I took the course [1]). If video isn't your thing, the article here is basically the first few chapters of the textbook [2].

[1] http://www.youtube.com/watch?v=iAwS7vzvLnY http://www.youtube.com/watch?v=TQvVLhWOiis

[2] http://www.amazon.com/First-Course-Probability-7th-Edition/d...
> The value of a parameter id was reflected to the HTTP response

The link you posted illustrates that it is unfortunate that Java supports reflection, and even more unfortunate that various "enterprise" software stacks abuse reflection in ever more creative ways. Stay away of Java reflection and/or use C/C++, and you'll avoid this kind of vulnerabilities.
Explaining Closures in Javascript
I'm sort of with you. I've never really understood what the objection was to RFID badges in schools. My kids already wear ID badges in public schools. Why would I be upset by better ones? It's not like they're being tracked at all times. They're in school. They're not even allowed to go to the bathroom without asking.
There's nothing wrong with writing COBOL. It isn't new and shiny, but is that all everyone looks for in a job?
Fantastic Elon Musk Documentary
Just go on #rails and try to ask for help with a fake code example.
This doesn't stop instantiating with !ruby/object
That is exactly what I would have guessed. It's basically "I'm feeling lucky" for coding questions.
it isn't so hard to understand if the said person uses a password manager program like LassPass or 1Password.
surprised the corporate agility theme doesn't explicitly include globalization displacing former US-based middle class jobs? globalization has positive economic consequences for the US as a whole, but not to key parts of the displaced middle class, at least not yet?
I wonder fbi.gov uses rails and XML. lol.