skysight-inc/HackerNews huggingface dataset:
Thanks. I was wondering what tools they were using to create those effects (openframeworks, cinema4d).
Sony to Release Xperia Tablet Z Water proof and 6.9mm Thick
So he committed a crime and wrote words that characterize the intent behind crime in such a way as to increase prosecutorial interest and sentencing. Now you are saying he was just joking around when he said those things?

Perhaps it's true, but it's stupid and it's hard for me imagine anyone taking that explanation seriously, certainly prosecutors and judges.

If you walk into a bank with a gun and ask the teller for money, then say "just kidding", .... Good luck.
Small world. I remember quitting K5 after it filled up with people I couldn't call friends.

Take care.
Yes. What's more this kind of push is only going to increase the antipathy procecutors have towards what they see as "hackers".
That's correct. With humans, everybody gets cancer sooner or later, if they live long enough.
> Well that's embarrassing. Looks like I need to revamp my searching skills.

Shouldn't be your job, the web site should take care of it.

Then again, Hacker News' code base looks like it hasn't been touched in six years.
We will absolutely not be moving to a commercial vendor with this product. Right now we are creating a not-for-profit society which will be the vehicle to ensure this is maintained as a shared-service dedicated to support IT initiatives in our school districts. We are very tired of being tied to commercial vendors whose sole focus is earnings per share and profitability. In any case please have a look at our business plan and see what our focus is in doing this.

It is a model which could easily be adapted by other jurisdictions whether in Canada the US or anywhere else for that matter.

We are always open for questions, suggestions or comments.

cheers

gregg
i think the semantics in the method in which weev retrieved this data is far overruled by the fact he LEAKED it afterward.

Real people were hurt here by having their PII exposed. Don't forget that.
interesting definition of gaming and its platforms. as if console-makers are the only players in town.

let's see here:
http://www.asymco.com/wp-content/uploads/2013/01/Screen-Shot...

xbox360, ps3, wii ... all child's play. a niche industry. the true gaming platforms are android and ios, with ios users more likely to spend money on apps/games.

serious game "journalists" dismiss casual gaming as beneath them. halo, skyrim, yes, but angry birds? cut the rope? no.

interestingly the industry ignores journalists and goes to where the users are. hence the release of titles like baldur's gate for iOS - taking an old, known game and porting it back. no big budget needed. a lot of turn based games are perfectly suited for touch, from Jagged Alliance, XCOM, Panzer General to all the adventures to RPGs (where are all the Ultima games on iOS? Final Fantasy and Chrono Trigger already are available).

and then you have indie gaming, Minecraft, Torchlight, FTL, Hotline Miami, etc etc etc.

Big budget shit games are dying. Max Payne 3? yes, good riddance.
In Firefox:

Alt+V, y, n
Why are you thinking about this when you're not even sure that your app will need to run on multiple EC2 regions? This smells like premature optimisation to me.
Write 'intelligent' automated tests (you're a HN'er so you have these already right ;) and schedule them to run CI on your production site. That may prevent any adaptive processes from caching.
Tokaido: Making Ruby Better on OS X
another good point. Our district has gone through five, count them five, commercial student information systems because the company has either gone bankrupt, been bought out by a larger vendor or depreciated. We just get our data converted, staff trained and somewhat comfortable and then the rug gets pulled out from under us again and we have to start over.

Anyone who think that commercial vendors are there to support education is dreaming. Commercial vendors are there for two reasons only - earnings per share and profitability.

gregg
Fair point. I wonder if the increasing number of us tech firms setting up in .ie (for whatever reason, being an Irish graduate I know it's not for the skills pool) find the adjustment difficult - 20 days minimum, 25 not uncommon, with the ability to carry some leave across years generally accepted.

edit Anecdotally, even companies based in the UK have had trouble with the difference in employment law when setting up (or wrapping up) here, though I would put that down to lack of diligence rather than any cultural thing.
I hope these policies influence other employers to follow in kind (perhaps even outside of tech.) I'm skeptical that we'll ever see, for example, statutory parental leave in the US.
It was dictated, so not written alone, obviously.
China Blocks Social Coding Site Github
Request To Entrepreneurs
We are also workaholics. Or, at least I am.
Right you are, but I was picturing them queueing up to post an angry reply, so that's probably where the brain fart came from. :P
Sounds like a pretty good replacement to me, considering how scientific progress demonstrably exists, has a stellar track record, excellent prospects, &etc &etc.

> Defying death will always be lucrative

As it should be! I'll pay literally every cent I have not to die.

> the actual demonstration of results will always be forthcoming

This is nothing but speculation on your behalf.
That's a nice idea actually. We should have this "I have found a vulnerability, now what" kind of lawyer service around.
If you start a shop or work there early on and you take off - it's about the same as any startup - big highs, big lows, big work, impressive product, big impact, big money.

If you work there after it becomes big - it's like working at any game dev shop for EA.
So do I. That looks insane,
Human Brain Project
I agree, but talking about things like removing supports to encourage others to rely on their children affects everyone. Even among those that had families, what if they had special needs children, or if the parents out-live the children, etc.
Google is losing control of Android in China to no-name brands
Responsible disclosure to the vendor is one thing.
Taking the fruits of your exploits and publishing it for glory and a "I leaked all that information because you wouldn't fix it" attitude is quite another.

I would hope that if you discovered a vulnerability in one of my web applications you would contact me first and allow it to be resolved. Might even be lucrative for you.

If you used that vulnerability to steal my database and publish it to the public domain -- when it has no place in the public domain, i would expect the DoJ to hunt you down.

I never said anything about not being friendly.
But if you are playing with peoples identities, their lives, this is not friendly at all.
What about a program into which you could feed your pre-processed dynamic documents (php, asp, etc) along with the CSS? I could see myself using that.
Excel/VBA and C++
We are currently on budget and on track with our build. Incidentally when it comes to attempt to build an open source package to replace a commercial product this is not entirely correct.

Before we began our build we did a complete analysis of the functionality we required in a SIS using our current commercial SIS as the basis. We found that because the commercial SIS was developed for multiple jurisdictions the actual screens and fields we required for British Columbia schools was only 27% of the complete commercial SIS. So we are not crafting a replacement for the commercial but a rather small subset of the requirements targeted specifically for our environment.

hope that helps a bit.
You're assuming that everyone is making boat-loads of money. You're also assuming that people without enough money have 'squandered' it on 'fancy vacations.'
As am I. I just spend a lot of time working on my own projects. I value a regular (i.e. not too long) working day for being able to actually do this.
You wouldn't need to rely on ten years of experience running your own server. Since you already have that you're in good shape - that doesn't mean your solution will work for everyone else though.
Hopefully they don't try to sneak some censorship/surveillance infrastructure in there, too, but I'm not too optimistic about it.
Productivity: Alone vs Team
All I Want is a Fair Shot - On Meritocracy
The Noel Smith Wenkel Salary Negotiation Method

http://infohost.nmt.edu/~shipman/org/noel.html
The problem is there are often too many variables, i.e. what if a username is "blue" for a boy, "red" for a girl (or something like that).

And PHP etc is too dynamic.

Personally I think the 'best' option is a program which 'records' you using the site, and as a Dev I could use my site for like 30mins, touching each point of key functionality. Then at the end, review what sections of CSS were never used, and pick and choose what to discard based upon that (i.e. I can manually then check for fringe cases I might know of).
> If the only reason to use Heroku or other of its kind is easy deployment - maybe we just need better deployment apps that can work seamlessly across servers.

Heroku certainly thought so. That's why they got a few dozen brilliant programmers into the same building and made it happen.

Of course, with a ~$5M/year burn rate, it's probably also why they charge money for their services.

(making up numbers here, but assume 30 developers at $150K => ~$4.5M so I would guess I'm laughably low)
The law should treat both of them exactly the same. But if he was nice and unoffensive, I would go out of my way to help him.
I made the mistake of assuming that labor camps were found in State systems only. I have since found out about Unicor.

http://en.wikipedia.org/wiki/Federal_Prison_Industries
I've actually tried it. It actually mostly works. There was one JavaScript error which I've fixed and the layout is broken but still flows properly.
Translation:

On Sept 21st our site was vulnerable to a simple SQL injection attack.
On Sept 22nd you documented this information for us.

On Oct 26th our site was STILL vulnerable to a simple SQL injection attack.
On Oct 29th you again documented this information for us.

On Nov 12th we expelled you for our discovering our abysmal security.
Great article. This explains succinctly why you never should work at a start-up. Just don't. Let the 'founders' do the work, that's why they're founders.
Just to clarify our staff consists of myself (IT Director for the Saanich SD) - I am the project lead/sponsor for the district. The eight people include: project manager, product tester/quality assurance, stakeholder business analyst and 5 strong Java programmers, including one developer who is one of the original creators of the PostgresQL database.

gregg
Honestly, that sounds like a great social media campaign.

"Judy: I'm so thirsty" "@Judy Here's the story of Jamie in Zambia. Jamie is always thirsty http://link
The perks are an unmatched tool for building Google's reputation and attracting the best engineers to join the company. But once you've been there for a few months, you adapt - that's just what humans do. Pretty soon it all just feels normal and boring.

Case in point - "Noogler" is what a new employee is called. They would often wonder when you're no longer considered a Noogler, and the commonly-given answer was, "You're not a Noogler anymore as soon as you publicly complain about the free food." It usually only takes a month or two.
If you grew up playing console and PC games then yes, iOS games are a joke. If you loves games, touch-based UIs just don't cut it.
Ten THOUSAND dollars per month? You have got to be kidding me. Please tell me you are.
Twelve months ago on this very site it was discussed how a private company named Path was, without permission and certainly illegally, stealing the entire address books of users and uploading it to their own servers. The CEO of that company appeared right here on this board personally (not surprising he follows this board as he has invested in YCombinator projects [http://www.forbes.com/sites/nicoleperlroth/2011/08/25/yc-com...] ) and not only defended his actions but justified them, proud of the fine work of data theft he engaged in. [https://news.ycombinator.com/item?id=3563368] He also said in a comment on his blog that these actions of stealing entire address books was a common practice in industry: "This is currently the industry best practice" [https://news.ycombinator.com/item?id=3563639]. And in fact it turned out that companies as large as Twitter were also engaging in the same type and manner of data theft [http://articles.latimes.com/2012/feb/14/business/la-fi-tn-tw...].

At that time some HN members, possibly some of the same ones here attacking this hacker (perhaps with good reason), defended the data-theft-for-profit actions of these companies.

These two positions are not consistent. People may wish to pick a side of this issue and stick to their position if they wish to be taken seriously, or frame a coherent argument why it is acceptable for corporations to engage in data theft from individuals but the reverse should be severely punished with prison time and other penalties.

Those who genuinely believe that weev should be prosecuted and imprisoned for his actions may wish to consider if the same call should be made for criminal proceedings against the larger scale and more clearly profit driven data theft actions taken by large and well funded companies such as Twitter, Path, Facebook, Apple, and many others.
Moral of the story: Sanitise your query params.
> "all child's play. a niche industry. the true gaming platforms are android and ios, with ios users more likely to spend money on apps/games"

I question this wisdom, and will continue to do so until the day an iOS title breaks Halo 4's first-weekend sales record. Or hell, lifetime sales record.

The core gaming industry moves far fewer units than iOS/Android games (in which case "units" is more ephemeral of a concept), but succeeds in extracting $60-90 at a time, as opposed to $0.99.

We had our love affair with "casual gaming is the future" when the Wii came out - that didn't pan out then either. Attach rates were abysmal, and people soon bored of the platform after one or two titles. It failed to find a long-term place in the living room, that's for sure.

This isn't about some supposed superiority of core gaming vs. casual gaming, it's simply skepticism because every time someone has said that casual will eat core for lunch, it has failed to occur.

Sales for iOS/Android games are terrible on a per-title basis, and even including only the top titles don't come close to console sales numbers. The only real corner of that industry making eyebrow-raising amounts of money are microtransaction-based, treadmilly, slot-machine type games, and I have my doubts as to whether or not it's a sustainable trend.

> "a lot of turn based games are perfectly suited for touch, from Jagged Alliance, XCOM, Panzer General to all the adventures to RPGs (where are all the Ultima games on iOS? Final Fantasy and Chrono Trigger already are available)."

"Re-releasing old games on mobile" is a profitable segment, but it won't last, mostly because we will very quickly run out of games people actually give a shit about.

And once you start contemplating development new adventure games, RPGs, and strategy games, the economics of this falls over. Even without the notion of modernizing graphics and gameplay, developing something like Chrono Trigger would hardly be worth it when the market bears $0.99 a copy, or less.

More likely, we'll see Chrono Trigger, where enemies are overpowered and you pay microtransaction credits to revive your party members when they die. This is, after all, the only way mobile devs have found that generates any substantial revenue. What a marvelous progression of this industry.

The future of the indie gaming scene lies with the PC, and potentially surprise core-gaming-targeted platforms like the Ouya. These are the only platforms where users are prepared to spend any real amount of money on gaming. Revenue extraction on mobile platforms inevitably involves fairly unscrupulous (and simply not fun) mechanisms.
IT supports NTLM but not credential transfer from the current user session i.e. you have to enter your username and password each time.
While Hamed was honorable and didn't try to abuse his exploits, I think it is a stretch to say "Hamed helped". I doubt he tried to get into the data for the purpose of helping make it more secure, it is more likely that he just had the "hacker drive", where he just wanted the challenge of beating a system.
I see.

Will some kind of distributed file system work here? If you can clustered your NFS server you'd (hopefully) end up with more localised nodes for your client to connect to (a little bit like how a CDN works). For what it's worth, I wouldn't even run 5000 simultaneous HTTP requests on a single node in any of my web farms, let alone on a single NFS server.

Also have you looked into kernel level tweaks? I'm guessing you're either running Solaris (being a former Sun shop) and while I am a sysadmin for Solaris, I've not needed to get this low level before, but certainly on Linux, there's a lot of optimisations that can be made to the TCP/IP stack that would improve the performance in this specific scenario.

I do agree with you that 400->5000 active NFS connections does push the realm of practical use, but I don't think that dismisses NFS entirely; it still outperforms all other network mounted file systems.
Thanks for this japhyr. Our project is proceeding on track and on budget and we are going to be piloting in elementary schools by April of this year. Our primary focus now is reporting and business intelligence which will not only produce embedded reports but allow for Ad Hoc and true BI capability so schools and teachers can get real analysis capabilities in a user-friendly dashboard.

gregg
there you go, scientific proof that the whole microsoft enterprise stack is counterproductive. every debugging step involves 20 distractions.
I beg to differ on the iStock art issue. I have seen people build large streams of revenue by starting with iStock art as a base for their games (Sure remixing etc and being handy with photoshop does not hurt)

In any case the issue of iStock art took away from my main point and that is publishing with you guys gives away the most important ingredient of becoming successful as an independent developer in the app store. That is the network effect of having a bunch of your games installed on peoples phones and computers. When someone publishes with you they are trading a potential short term boost in sales for a long term disadvantage in the market while at the same time growing makegameswithus own network and brand instead of your own. As an indie dev it's a foolish tradeoff to make if you truly want to have a sustainable app business and not get squeezed by yet another third party.
Rrrretry. Ruby exception handler
if you ask these non-technical end users whether they rather have the free software that comes with some crapware, or have to purchase a paid version (of the same software), i think you would find most would choose the free version.

While i dislike the idea of crapware, if it funds useful pieces of software, perhaps its a nuisance that could be tolerated.
Actully as a China ruby developer, I had to use ruby.taobao.com instead (rubygems mirror synchronized every 15min) for ruby is hosted on Amazon servers which is somethimes unreachable
I'm sure this is common knowledge. But this is his "troll" organization - http://en.wikipedia.org/wiki/Gay_Nigger_Association_of_Ameri...
Excuse me, but I am paying her salary, and granting her immense power. She owes me a better explanation if she wants to keep those things.

Aaron had a right to his freedom until convicted. Ortiz does not have a right to her job.

Sure, maybe I'm jumping to conclusions. Maybe she will clear her name tomorrow. But "business as usual" and "all the other prosecutors do it, too" doesn't cut it any more.
More to it than that...

lets say you exploit that bug in the internet banking application and you access my account.

Then you start logging into other peoples accounts and copying their address, balance, transaction lists.

Then you publish all this information you have stolen and say "Oh dont use internet bank -- they don't protect your private information"

the bank should have done better to protect that information, granted, but you have also performed an unethical and criminal act by publishing this information.

both the bank and the person that leaked that information should be punished.
Deep Space Industries sending 'FireFly' ships to prospect for mineable asteroids
If I'm not mistaking, he discovered the vulnerability while developing an app for its university, then he sent it to the system administrators.

His troubles began when he checked later if the security hole was still opened.
Slash n
The problem with your logic is that if these ethically grey business models are profitable, you have to agree that the less morally demanding VC will indeed fund them (after all, profit is profit). Eventually, YC might still have their high ethical standards, but its the unscrupulous VC that makes the most dough. And the market selects for those who makes the most dough, not those who has the highest moral standing.
Mega Testdownload
random stuff in a little file

https://mega.co.nz/#!h1IjjJRR!dv9lRUyCCmbkZ9drqnrw_y3GWYUPXSSdm8N4Fbyhrxw

greetings...
Before you invest three hours to watch these lectures you should know that the title is terribly misleading. These lectures are not about QM at all, they are about the history of QM, albeit told by someone who was actually part of it. But the coolness of hearing the history of QM firsthand is undermined by the fact that Bethe is clearly well past his prime, and he's not particularly good at telling stories.

If you want a video that is true to this title I'd recommend this:

http://www.youtube.com/watch?v=2rqd8Oa-sA4

EDIT: And if you want to really understand QM, there's this:

http://www.youtube.com/watch?v=dEaecUuEqfc

:-)
Sadly no, nothing I can show yet :(
> What "expertise" you are speaking of, apt-get?

One night, working for a CMS design agency, and running a launch for a new Rails app, I tried installing nodejs onto our dedicated server so Rails could compile the new coffeescript stuff we were running with.

Of course Node then tried to update NGINX or something (I'm a little fuzzy on the details, but this server had been around for a while) and then NGINX complained about something being misconfigured and wouldn't let us restart it, and so then we were stuck with 100+ rails apps sitting on this server, and we couldn't change the configuration for any of the apps, or launch this new app, and it's 11 PM, and I just want to drink a beer and go to bed, and the client's yelling, and

— so, I'm perfectly OK with not having 10 years of server management experience. Heroku just works. Almost 100% of the time. And every app's isolated.

I got into this business to ship products for customers, not figure out how to make dependencies of 3rd-party libraries on 4-year-old-server-builds play nice. If that's what you've gotta do, that's what you've gotta do, but I'm not really inclined to pick up 10 years of experience managing servers unless I have to.
You don't have any contact info in your profile.
I'm white and I can tell you it's generally normal here. However we are bit backwards, so it might disappear with progress.
I kind of agree. However if you put up an advert here saying

" three years in a dorm in SF - running your own Shanzen style mini fab company, no time wasters".

You will get hundreds of genuine people willing to do the sweatshop thing.
"You don't know what you don't know" — my mentor
It's MLK day today.
Definitely agree. The only unfortunate thing is that they haven't taken the past 4+ years to develop a JSON/REST/anything API that is easy to use for developers. Their current API is full of holes, issues, bugs, random error codes, etc. They could make a wrapper API that they absorb 99% of this headache from and it'd be a much better service.