skysight-inc/HackerNews huggingface dataset:
REN-ISAC[0] exists for incidents like this.

Had you known about it, you could've got in touch with the "watch desk" and passed this information along. The watch desk has contacts for security folks at the majority of .edu's (in the US, anyway). I'd guess that about half of these "zombies" would have been offline in less than 24 hours.

I know this doesn't do you any good now, but in the event that someone else reading this discovers a security issue at a .edu in the future, I'd recommend contacting the watch desk before anyone else (either via phone or PGP-encrypted e-mail). They will, depending on severity, for example, call the .edu's security people's cell phones at 3 a.m. and wake them up, if it is warranted.

I was a member of REN-ISAC when I worked at a .edu. It is a vetted and very trusted community. Breaches of trust are dealt with quickly and severely. Any information you pass off to REN-ISAC will remain in good hands.

[0]: http://www.ren-isac.net/
This would have been the best way to learn it, some kind of 'CRASH Eh! MAN your files have been formatted and all this project has been deleted because

i=sqrt(-1)

Sorry for the mess, hope you learn from this...'

But I keep tripping over the same stone...
I think we could liberate North Korea by creating a handheld TV/radio that received South Korean and Chinese stations and distributing them inside North Korea. I think the existing regime would change or collapse in a couple of years. It would cost us a couple billion, but we'd get a better return on that investment than a lot of our military expenditures.
This is where Ars lost all credibility:

"Files and folders, therefore, are encrypted with symmetric encryption. Symmetric encryption means the same key is used to encrypt and decrypt your data; this is less secure than asymmetric encryption (where one key encrypts and a different key decrypts), but it's faster and easier to implement."
Ray Dalio, the founder of the investment firm Bridgewater Associates includes self-examination, honesty and introspection as one of the key ingredients in getting what you want from life.

I take the article as another datapoint to support his theory.

A good read:
http://www.bwater.com/Uploads/FileManager/Principles/Bridgew...
Designer News discussing Hacker News' discussion of Designer News
I'd be pretty comfortable with something similar to the DMCA takedown procedure, where a person can certify that they appear in a photo and that they did not give permission to publicize the photo. It would be fine if photos taken in public were treated differently. I do wonder if 'outdoors' would have to be public, or if there would still be grey areas (I think it would be fine to err in favor of respecting the wishes of the person depicted, but lots of people are pretty set on public is public, never mind wild changes in our ability to create and distribute recordings).

That it would be inconvenient for big companies that host lots of photos doesn't really bother me any.
Bang. This guy hit all the points I was going to make.
Let's remember that several western countries do not want a united Korea either.

Koreans have shown already that they sometimes still think of themselves as one people, with north and south koreans being friendly toward each other and wanting a reunion of the country (the way of the reunion that is the disagreement).

North Korea has the biggest standing army of the world.
South Korea also has a huge army.

Also both of them have huge amounts of military equipment.

And finally, Korea in general (both from north and south) and very belligerant, or was at least, in the past, Korea history is filled with wars that they caused, and crazy conquest attempts.

Other asians are still very wary of ethnic Koreans, in Japan for example it is known that while there are several non-japanese citizens, ethinic Koreans rarely get citizenship.

The united Koreas, maybe will just awesomely advance the world technology... Or maybe they will start another crazy war and attempt to conquer Japan or China.

There are several countries that don't want to risk the second option, and thus every time one Korea is losing advantage in the stalemate, that Korea gets some sort of clandestine or official help, in a way to force the stalemate to continue, and the biggest army of the world divided in half and turned into itself.

I am not saying I agree or condone that, but this is how it works.
Don't trust it too much:
http://cm.bell-labs.com/who/ken/trust.html
Kind of a meta-post experiment :)

See http://news.ycombinator.com/item?id=5091763
If Apple's 4.8-Inch iPhone Is Called the iPhone Math, I'll Eat Paste
Um, the Bailout Bill was signed by George W. Bush - a Republican approving the work of his own cabinet.

The bailout wasn't the issue, by the way. Faced with a catastrophic crisis, propping up a criminal enterprise that we are utterly dependent upon is very much a lesser of two evils choice. The real problem is with sparing these bastards from even a hint of prosecution after the fact.

If you want a more accurate view of where the GOP stands today, consider Eric Cantor (i.e. their leadership) who actively courted Wall Street during the election, promising that the Republicans would provide "better service" and getting a highly disproportionate of the bribes (ahem) contributions in return.

And don't get me started on Elizabeth Warren. She was actively and articulately opposed to the criminal class that's developed in banking. And the agency she designed (the CPFB) was the target for the most vitriolic rage that the House Republicans have managed to date, and that's saying something, given who we're dealing with.
> You obviously don't know anything about the French academic system and grandes écoles. Or you are being hypocritical.

Well i obviously know some, i've done two master degrees in French university, one in Computer Science and one in Sociology, and i've found the GP's post to be pretty accurate.

So please feel free to post a real rebuttal, i'm ready to argument at least as to why i think french university education prepares very badly to anything practical and creative that isn't in the domain of pure academia.

This for example :

> are in completely different schools from the people with actual know-how , who get forced into consultancies mainly, to write Java enterprise code for the rest of their lives.

is actually pretty much 95% true. When you get out with a french comp-sci degree, you are presented with the following choices (by your professors and the businesses linked to the university) :

- Either go into research

- Either go into very specialized industrial work (high safety embedded systems, mission critical components)

- Either go into big consultancies doing Java (Cap Gemini and such)

This does not arise from maliciousness, but only from the fact that those are the three main areas in which there is work for comp-sci students in France. The area of consumer oriented innovative enterprises, be them big or small, is pretty much nonexistent.

The courses in my university (which is supposedly the second best french university for computer science) are quite difficult, some of them are even good (most notably in the domain of logic/semantics, programming language research and the likes), but most of them are either:

- Highly theoretical, based on subsets of domains that have seen no massive practical use in decades, still being taught because they are the teacher's PHD subject.
- Supposedly practical, but using outdated/horrible/both technologies.

For example, i have had two introductions to web development at University, one using bash scripts and C (no kidding), by some sort of mad teacher who thought reimplementing libC with more ternaries was the way to go about life, the other using such things as JSP/Spring Framework, obviously designed to target those students who were gonna go in the "Enterprise world". Both made me want to kill myself (figuratively).

On a variety of more "academic" subjects where we are actually supposed to have some experts here in France, be it systems programming, embedded systems, highly parallel programming , the quality of the courses when compared to those of top american universities (which are as of now widely available for free on the interwebs) is so low that it is really, truely depressing.

This is obviously a complex problem, and there are no black and white, but if you are really able to argue that there is no truth to the statement of the GP, then you are the one who doesn't know a lot about french university, or being hypocritical.
I've never worked on a project where my job was to create 256 threads. Instead, I would be tasked with processing lots of requests or datasets in parallel. If Haskell provides convenient and idiomatic ways to do this with lightweight threads that C does not, then C is effectively slower. If C has a commonly used and available library to implement this same approach - then maybe its faster. The whole point is we are comparing implementations of a programming task.
You have a point I agree, we did have an option before but opted to take it off at the last minute. Reason for that was we thought, hey its a name, were not linking it to their page or anything. Lots of people have the same name.

But I see where you are coming from. Time to make some changes :)
What privileges? It was Windows in the 90s.
Parsing and accessing are two different tasks. Even if you have an entire JSON (or XML) data structure in memory, getting to the right pieces can be difficult. “Return all of the order entries contained in an a shipment of type ‘Billable‘ whose total price is less than $500.” In the JSON world you’d typically write some imperative code to loop through the data. XPath allows you describe things like this without having to get into the nitty gritty of how the traversal is actually performed, similar to how CSS selectors work with the browser DOM.

I do look forward to the JSON community (re?)developing schema and transformation languages to go along with this.
Richard Branson on Dealing With Setbacks
map updated. normalized by tweet flow. Thanks again.
Maybe I misunderstood the post but my first reaction is "I hate this sentiment". I refuse to listen to anyone trivializing the good put forth by Google, Apple and Facebook. They may not be perfect (no entity is) but it is simply ridiculous to suggest these 3 companies are wasting human brilliance on things of comparatively little import.
That's "Threat" mode, not "Thread" mode.

Do you want to defend against:

* ... someone in their office reading the email if your accountant's computer is left unattended?

* ... your ISP storing the email and reading it?

* ... their ISP storing the email and reading it?

* ... someone sniffing the packets through a router?

* ... the NSA reading the emails?

If you want your accountant not to have to do anything, then you need something like storing the emails and/or documents on an "https" only server, and then sending them a link. Given your comment about not wanting them to have to do anything, this will be one way only, and they won't be able to reply securely.

Sending them an encrypted email and asking them to read it will, I believe, require them to set something up, and you seem to have ruled that out.

You could use something like a password in a standard document format, and then phone and tell them the password separately. I think you can password lock Microsoft Word files, for example. Not very secure, but secure enough against idle sniffing. Probably not secure against a full on attack by someone seriously capable.

So, again, against what, exactly, are you defending?
If they did that to you, you should sue them. They are a bank like all others
> Note that there is no theoretical bound preventing an Haskell compiler to generate code equally fast than the one of a C compiler for any program.

And there's no theoretical bound saying that C is faster than Brainfuck. But no Brainfuck implementation will ever catch C for, say, parsing, and I'd be willing to put money on that.

This "all Turing-complete languages are on equal performance footing" is nonsense. Just because you can't write a proof that shows a result mathematically does not mean that a difference does not exist.
Simvla Network
7 billion are alive today, while 100 billion have ever lived.

haven't i already beat the odds of being born amoung the 93 billion who lived before today?
I just saw that and facepalmed as well. Beyond the sheer number of attacks you can perpetrate on RSA versus AES (never mind in the browser), MEGA is using 2048-bit RSA, which has a 112-bit security level, versus 128-bit AES.

Symmetric ciphers are used almost exclusively for the encryption of large files. They're more secure, faster, and easier to work with.
I think we are agreeing - it is rare that a senior board member has seen how effective and competent IT embedded through out a organisation can transform that organisations flexibility, responsiveness etc etc.

Most CEOs think IT is a commodity like electricity - you cannot buy "better" electricity. But this is crap - way back when you could buy better electricity - the debate ranged from power smoothing to DC/AC - and your smelter or your lights could depend on the Chief Electrical Officer

...

oh hell I don't care anymore - anyone dumb enough not to think that an IT literate workforce working on IT-enabled processes cannot out perform an illiterate company (just as we now know a reading and writing literate workforce can) deserves to get Schumpeter-ed
That goes without saying, at least from the lawyers' perspective. I think it's possible that the victims are also just lashing out because the site would not exist if hosting providers refused to host it.
Adding some extra on to my previous reply.

"2. Rapidly changing business requirements. This is everything from state and federal reporting requirements to the expectations of end users. It's hard enough to maintain these core systems and keep folks around who are good enough to do it".

In mid 2011 our state passed some new laws as to how funding would be applied for virtual school enrollments across the state. We had a model in place, then code rolled out, within a few weeks - we had one bug that reared its head a few months later that was patched in a day and it's been fine since.

I'm not convinced the 'commercial player' that's taking everything over even understand the concept of our funding model, much less will be able to reliably integrate it with their existing systems, in the next 6 months. That's after handing over the code (with some, but certainly nowhere near complete, tests).

They may still pull it off, but I've yet to see them react quickly to 'changing business requirements'.
I made a similar error once working in Adobe Air (if I recall):

for (x = 0; x < thing.length; x++) { }

I didn't put a "var" before the x- so Air used the window.x object, and shifted the entire contents of the window to the right by a seemingly random number of pixels.

To look at it like that, it's blindingly obvious. But it was in the middle of a whole lot of other code, and of course, the for loop ran perfectly fine.
"Simvla cultivates a premier network of creative people"... "Unlike other networks, we are open to everyone would like to join..."

I don't see how both of these can be true.
Processing 100 Million Pixels a Day
Do you know of any European based company accepting bitcoins?
You don't need graduate level math, but if you want to use machine learning it's basically mandatory to have a solid understanding up to calculus, linear algebra, and probability/statistics. At least if you want to understand the underlying algorithms, which in my opinion is essential to being a good data scientist.

I did a masters in machine learning/computer science, but I think I could have learned a lot of the stuff on my own. The value of the masters was in projects, interaction with professors/other students, and the ability to do research (which I think is very underrated). FYI: a lot of jobs will discriminate against people without technical degrees and graduate degrees. Independent projects or relevant work experience will help.

My career predates kaggle, but I did do a machine learning competition to practice and apply my knowledge. Winning these will look good on a resume, but only to a point: there's a lot more to being a data scientist than what these competitions test.
That's what Mega seems to be doing in their initAll() function, although since it's being audited with Javascript, it's still insecure.
Because GoDaddy shouldn't have the power to censor content hosted on their servers.

It is up to the courts to decide what content is legal, not the corporation.

If the site is legal, there is no reason to take it down. If the appropriate institutions decide that it is illegal they should take it down the moment the court order arrive and not a nanosecond earlier.

I don't think that a world in which corporations are allowed to be gatekeepers on their own is a good one.

That is why we have court system and rule of law.
I'd be curious to see these questions. Somehow I suspect the engineers chose options that were 'coldly calculating' and lead to better end results - frankly, I'd prefer that in more doctors.
AppSurfer adds tablet apps to web-based try-before-you-buy Android app demos.
A lot of the points outlined by commenters here have already been brought up by the Designer News community in this Feature Request thread: https://news.layervault.com/stories/126-feature-requests-let.... If you're already a member, that's where you can add feedback.
as far as i can see -- no. they haven't. (i'm in china, obviously, and not using a VPN or other such.)
PayPal: 'Aggressive changes' coming to frozen funds policy
Very interesting article. Thanks for sharing.

Anyone have advice about salaries/commisions for salespeople in startups? Will candidates expect to earn less relative to larger, more established companies?
All states have privacy-related torts that could be leveled directly at the bar owner, as the publisher of the pictures.

See: http://blog.internetcases.com/2012/05/21/social-media-legal-...

Specifically: http://blog.internetcases.com/2009/10/07/group-sex-photos-ca...

Disclaimer: this is not a legal opinion.
It seems the site is using WEBrick as the webserver. Replacing it with Thin should help a lot performance wise.
Heroku has as section in their docs on how to change that: https://devcenter.heroku.com/articles/rails3#webserver

Also, letting the application serve all the static assets has an even bigger impact on the number of dynos you need.
I'm not a heroku user, but it seems there are some good solutions to this problem, like https://devcenter.heroku.com/articles/cdn-asset-host-rails31
Honestly, my first thought is that your logo looks like a guy sitting on the john taking a crap.
I agree in general with what you write here, with a big caveat: Korea is at the cross-roads between China and Japan, and throughout their history have been the battlefield between those two. Most recently, Korea suffered under a long and incredibly oppressive Japanese occupation up to the end of WW2. While Koreans are militarily ahem enthusiastic, it's not that Korea is the crazy man of Asia, prone to belligerence and expansionism. There's a long history there and a lot of justified anger on the part of Korea towards her neighbours.
Their servers are their private property. They have both power and responsibility over what's on their servers, just as I do over what's on my lawn.
Fixed, thanks. https://github.com/swanson/swanson.github.com/commit/81c14ed...
Governments around the world have been suffering the "Not Taxed Here" syndrome for a long time. Companies making money across borders can pay their corporate taxes elsewhere, wherever is more convenient, sometimes in the US, sometimes in Ireland, etc. This is not specific to Google or Facebook. There are many evasive tricks, most of them legal, like having headquarters charge branches a high price for "services and goods" therefore drying up local profits. [1][2]

The online advertisement business is just another disruption on the "tax industry". Taxes on a global market are a doomed business. Bring these corporate practices effectively into the public eye and negotiate from there. Foster competitiveness. But don't push yet another distorting set of laws onto an already high pile of bureaucracy.

[1] http://news.cnet.com/8301-13579_3-57544873-37/apples-taxes-o...

[2] http://www.ifoapplestore.com/2012/05/23/spain-retail-financi...
I don't think its a particularly awesome filter.

I said "hotmail" but what i really mean is "any free service OTHER than gmail". I understand if you have myname@mydomain.com

Outside of that though, I use google docs and spreadsheets a lot, and less friction to get people i work with to use the tools i use is a good thing.
I agree with you, letting people think they can change society as they wish by civil disobedience might easily be destabilizing and a bad thing, yet, the opposite is also true. From time to time we need to protest, voting doesn't change shit.
I'm no sure how much it'll help, but:

h: move left
ctrl-h (which is backspace in ASCII): move left a space while doing something

j: move down
ctrl-j (line feed): move down a space while doing something

Unfortunately, this doesn't extend to k (vertical tab) or l (form feed), but... maybe it's helpful?

If you need to practice, play robots or nethack...
window.crypto.random() will be able to do this once WebCrypto has widespread adoption
MC Plus+: Hacker Hip Hop
What we discovered about InstallMonetizer
Last week there was some controversy online about a company we
funded called InstallMonetizer. IM makes software that companies
can put in their Windows installers that offers other software to
the user as part of the install process.

It's unclear exactly how much of a right we as investors have to
tell the companies we fund what to do. But on the other hand we
don't like the idea that someone we funded might be doing something
illicit, so we felt like we should at least investigate the claims
and if there was a problem, try to convince IM to fix it.

Here's a list of things people said about IM or similar products,
and what we discovered about each:

1. They make "drive-by installers." A drive-by installer installs
software without the user's knowledge. This accusation is false.
Other companies in this business do such things, but IM doesn't.
Every IM install screen has a decline as well as an accept button,
and if the user declines, no software is installed.

2. The apps that get installed are "crapware." This one seems a
matter of opinion. A lot of the world's most popular apps and sites
seem like junk to us. But the users are choosing to install these
things.

3. IM "monitors and uploads user’s ongoing usage activity of the
bundled crapware." This fact is disclosed in the IM EULA (which
admittedly probably no one reads), but more importantly isn't used
for any money-making purpose. The usage info is (a) collected only
for the first 30 minutes and (b) is only used to prove to the
advertiser that the install is by a human and not a bot.

4. "This surprisingly includes not only IP but the globally unique
MAC addresses." This information also isn't used for marketing
purposes, only if advertisers request it to clear up discrepancies
in dowload figures. We asked IM to switch to uploading hashes of
the IP and MAC address instead, and they are going to start doing
that.

5. Comments on HN mentioned that a lot of companies in this business
wrap OSS in violation of the license terms. When we asked IM, they
scanned their publishers and found that 6% of them were doing this.
Those publishers have been banned from using IM, and all future
publishers will be thoroughly screened for ownership of their
software.

6. Comments on HN also pointed out that some apps installed by this
type of installer are excessively hard to uninstall-- e.g. because
when you try to uninstall them, they re-install themselves. This
again is something that while common practice in this industry, IM
won't do. They ban advertisers who do such things.