skysight-inc/HackerNews huggingface dataset:
But, in this case - didn't he just spoof a user agent and toss fairly guessable CCID numbers?

Certainly hacking, and given that he doesn't work for, or is associated with AT&T - some type of criminal trespass - but, we're talking community service here, not a felony. Slap the hand, don't cut it off.

I would hope we can all agree that there is a pretty big difference between a pervasive attack where someone spear-phishes a user inside a company, plants a trojan, and uses that to acquire sensitive intellectual property for financial gain, and/or do damage - versus what weev did - trying some pretty obvious numbers on the public website with an iPad user agent.
actually, I'm afraid that they are so outward towards telling the world in telling what hardware they have, I believe that another stuxnet type malware is inbound. (sarcasm)

Step 1: website of govt of India (http://india.gov.in/#panel1-5)

Step 2: front page flash: National Data Center ( http://india.gov.in/spotlight/inauguration-national-data-cen...)

Step 3: Browse down the page, to the line: "To get more information about the new Data Centre please click here"
>> click here >> IDC NIC HQ

Step 4: browse to infrastructure link: http://idc.nic.in/infra.htm

Step 5: Target a hardware, and release a malware into the wild

Tango Down, Game Over :/

Common Seriously?
Faulty logic. If she was an out of control lawyer, then it does not necessarily follow she would have been "taken out".
Agreed. If founders hire people without doing the work, they'll be terrible managers.
Can you post a link? At least according to this link:

http://www.netapp.com/us/careers/your-career/benefits-new.as...

Google's actual US benefits are scattered, unfortunately, but:

http://www.glassdoor.com/Reviews/Employee-Review-Google-RVW2...

NetApp offers a $3000 401k match, whereas Google does $8750 (50% of maximum) with no vesting.

NetApp gives you 25 days vacation a year after 10 years, 15 days after year 2, 20 on year 6. You get 25 days after your 5th year at Google, 20 on 4th year, start at 15.

NetApp offers $5250/year in tuition reimbursement. Google offers $13,000/year.

In addition to all of these, it's well known that Google provides donation match to a charity, gym reimbursement, heavily subsidized massages, sick days as needed.

If Google benefits are hype, I'd love to see data that shows where other companies beat them out.
I spent 5 years in a small city in the former East Germany and I am still spending a lot of time there. The "Ostalgie" is especially the nostalgia of full employment and social bonding. People basically say, we went from communism to hard capitalism without the paternalism social democracy West Germany enjoyed. In 1994, 80% of the jobs in the industry were cut with a few emblematic cases of West German companies buying back the companies, removing the hardware, shipping it in China and resuming the production there. It was not a reunification, it was a take-over without respect for the good things in the East. For example everything with respect to employment of women, women/men pay equality, etc. Nowadays, Germany is figuring out that it was not that bad.

I was not able to find a single person saying, please send back the STASI, it was better with.

You must only accept that early 2000, the bubble crashed, the complete economy went out of track and that just 10 years after the reunification. They did not had the time to taste the good working capitalism.
No, the set of programmers.
Foscam fi8918w | IPCameraLand
If you are building a product, you don't really want to be using rare ICs. When you are making a decent number, you don't want to always be hunting for reliable suppliers (i.e. counterfeited SD cards http://www.bunniestudios.com/blog/?page_id=1022 ). I like that when I'm buying parts from Digikey, I get what I actually ordered. When or if I want to take my chances and cut costs, I have the option to have it built overseas. But prototyping parts cost is a rounding error in any decent product run.

Oh, and spend 'boatloads of money on overnight shipping' -- $65. How much is a programmer per hour in Silicon Valley?

You could also move to Thief River Falls :)

I like buying cheap junk from dealextreme, but when I need something reliable that'll be around for a while, I'm glad to pay more for something from a real company.

Also, SparkFun has a few pick&place and I know a few people with them around, being used to varying levels.
For inspirational purposes- various people working full time on their Forever Project:

The Adams brothers, Dwarf Fortress: http://www.nytimes.com/2011/07/24/magazine/the-brilliance-of...

Elon Musk, Mars colony: http://www.wired.com/wiredscience/2012/11/elon-musk-mars-col...

Donald Knuth, The Art of Computer Programming: http://www-cs-faculty.stanford.edu/~uno/taocp.html

Hiroshi Ishii, Tangible Bits: http://web.media.mit.edu/~ishii/

(this is off the top of my head- I wish the list were longer, but it is late :) )
ember-rest and ember-resource are two much simpler alternatives.

However, neither has the ambition or potential power of ember-data. Transactions are becoming better defined, it's possible to attach a model to a transaction much like you said and to commit that transaction independently of any default transaction.

Ever other library I've looked at for this, and the roll-your-own solution would require that you implement hacks like cloning an existing model before editing, and won't actually gain you much.

Another thing to consider, while the adapter is called the RESTAdapter, it is tightly coupled with a particular way of using Rails models. And unfortunately, at least when I was considering this approach, replacing it gets you back to the "roll-your-own" solution, so much of the state management logic was actually in the RESTAdapter that using a different way to pack multiple models required reimplementing it.

It would be nice if the store would support an API that can update a model offline, or create a savable copy in a transaction, or handle a type of master-master synchronization when connection was restored.
It has definately improved and the vision seems to be getting more concrete.
I would actually also suggest Montaigne. I found this a wonderful help to me in thinking about how to face life:

http://www.amazon.com/How-Live-Montaigne-Question-Attempts/d...
Thorax - A Backbone   Handlebars Framework To Build Large Scale Web Applications
Well using make as an example of anything good is... let's say 'suspicious'. There is more to tooling than make and git (note that I deliberately omitted version control from my list)
Actually, it's usually the case that the customer is forced into using an ancient and unsupported environment which is forced on them, by the custom application. That's why organisations stay with old browsers, not the other way around.
I think the sytnax of Erlang is much more elegant, because it was build around the fundamental idea of pattern matching as a core feature of the language.

When you have a few good ideas put together, you could get an elegant solution. When you just stuff everything inside (like Clojure) or went to extremes (like Haskell) all you got is just a mess.

Erlang syntax, however, is noisy due to all those punctuation, but it is elegant nevertheless.

map(Fun, [H|T]) -> [Fun(H)|map(Fun, T)];
map(Fun, []) -> [].

member(H, [H|T]) -> true;
member(H, [_|T] -> member(H, T);
member(H, []) -> false.

This is intuitive, readable, but noisy.)
The problem with that (for this first generation; OUYA, GameStick et al.) is that the hardware isn't comparable to the WiiU. When they're released in the next few months, and even right now, most high end phones out-spec them. The article points out that the WiiU would be comparable to an iPad 4, which is well behind what any of the announced Android consoles are aiming for. They're generally going for the 'we can use last years hardware and sell it cheap' angle, rather than a AAA console experience.

Perhaps when/if this first round of consoles prove the concept, a second generation high-powered Android consoles will appear.
no. weak typing is exactly what i mean.

> if a.defined?

works, because the returned string type is implicitly converted to a boolean. that's weak typing. at least one (i guess the most common) interpretation of weak typing.
> I feel like these criticisms are just an unfortunate manifestation of HN's tendancy to be contrarian. They're not effective rebuttals

Pretty much. I've learned to read HN comments largely as a source of data, rather than as a community of merit. This kind of pot-stirring has happened every time anyone of significance in the tech community has committed suicide. It's just self-aggrandizing.
I'm not American either. But I'm aware they have a long history of robust attitudes to their politicians. And the politicians to deserve it.
How the Vatican built a secret property empire using Mussolini's millions
Your friendly manatee placeholder service
He certainly hacked it - but that's not necessarily pejorative. Your average individual couldn't just try entering the number into AT&T - weev had to spoof the user agent, and, make some intelligent guesses as to what valid CCID's would be.

It's not the world's greatest hack, but it certainly was using the system in a manner that I'm certain AT&T did not intend. The IRC logs indicated that they knew what they were doing was likely criminal, and if AT&T discovered them, would "sue" them.

Whereas I'm guessing PG would be fine with you incrementing the number on the HN URL. And I'm pretty certain that's not criminal behavior.

It's important to note, that just because weev was hacking the AT&T site, didn't mean it was a criminal hack. In my mind it barely crosses the line - and he gets punished somewhat, but I'm thinking a week in jail and 30 days community service - not the silly levels that the feds are going to in this case.
Operations Hacker Wanted at Drone Startup
JOB DESCRIPTION

Are you an operations guru? Do you have a deep unfulfilled love for everything in the air? We are a rapidly growing startup that has a unique approach to the expanding world of Unmanned Aerial Vehicles (UAV) - We develop enterprise solutions encompassing autopilot hardware and flexible software architectures that allow our customers to tailor UAVs to any commercial or military application.

We are in need of a talented Operations Manager to become a core team member and spearhead all of our internal operations - from supply chain management, to purchasing, to export controls, to QA/QC, and much, much more.

Our company has a unique culture - combining the hacker, pilot, and laid back beach mentalities. Occasionally witty and always entertaining - You will never be bored and always challenged.
Throughout your time, we will challenge you to wear many hats that will enable us to grow and support customers across the globe such as at conservancies in Africa. From day 1, you will be expected to handle significant responsibility and find creative solutions to challenging problems.

ABOUT US

We are a tight knit team with over 30 years of experience on leading UAV programs. We are located in Orange County California, just a few blocks from the ocean in beautiful Newport Beach. We started shipping our autopilot products in Q4 2012 and have a robust customer pipeline across many exciting UAV applications including - conservation in Africa, vaccine and drug delivery, search and rescue, avalanche detection, rapid response to military threats, guided parachutes, land surveying, and infrastructure inspections.

We are huge proponents of personal development, and we expect each team member to grow rapidly as a person and within our organization. We provide opportunities for each employee to be continuously challenged while growing and showcasing their abilities. Compensation includes salary, equity, and performance based bonuses. Benefits include medical, dental, 401k, flexible PTO, and subsidies to pursue your pilots license.

Please send your resume to bradwschiller@gmail.com if you are interested.
The thing is that we (as a group in this thread) don't have a shared view what productivity is. That you feel more productive when you are allowed to interact with other fellow programmers maybe true or false. If you should deliver something in a short timespan that will allow your company to taker an order of 15M € and you get distracted by two junior programmers discussion C string concatenation I'm sure your Company owner would feel that you are 'not productive'.
Most people outside the programming pack consider turning time at work into money as productive. Programmers usually don't use that definition for productivity.
May we see some proof of the full story. There's nothing to that effect in the IRC logs other than some jokes about how the data is valuable and how they could sell iPad accessories. As if. What did he do? Wrote a bunch of journalists to get press and then deleted the data.
robomartin: A voice of reason in a sea of inane babble.
That's the point, I've been running servers for 10 years with iptables and apt-get knowledge. There is no "ten years of experience running your own server."

My hypothesis is that everything interesting that happens to servers is not covered by Heroku.
Valdeon D.O blue Cheese, delight from Spain
Actually, it was MLK's idea of what activism entails, specifically those who use civil disobedience.
Ars Technica lost a lot of respect with me yesterday when they stated in the analysis of Mega's security that symmetric encryption is inherently less safe than asymmetric.

Also the quoted article does not appear to show considerable insight on internet security.

Sheer directory traversal should never be considered a criminal act.

Of course if they had followed through with the stock manipulation, this would warrant criminal punishment.

Although of course stock manipulation is only punishable if you're not a bank or hedgefund which is sad.
POP User Meetup (1/26) in San Francisco
"I did this because I despised people I think are unjustly wealthy and wanted to embarass them." -- This is what makes weev "not Aaron". Aaron wanted to further the human race, not embarass people just for the sake of it.
So even though he didn't do anything illegal with the data, you think it is criminal that he didn't obey some unwritten rule about using an API in that way? If I wrote a script to scrape 10 million e-mail addresses from usenet, am I a felon because usenet isn't supposed to be used that way? What if I just want to analyze the patterns or show the world how easy it is to scrape?
Indeed, I thought the same.

It's in my opinion more costumized for the European market - they can handle credit cards - but they also have setups where they buy the invoice from the merchent and handle the payments and stuff like that.

It's extremely widely used in the Swedish online merchent business world. And they're available in most European countries it looks like.
What this post's title is forgetting: a 'Z'
That's when they turn into Entitled Googlers.
Where was he openly declaring unlawful intent? The court transcript is on the web.
We are visiting SF and would like to meet up with POP users for feedback :)
That was the first thing I thought of. And I still wish things had turned out differently (both because of what it said about the community and how useful it was).
I advice everyone to read the original expulsion letter. It is just one page, and the parent's post completely (and I must assume intentionally) twists the facts as mentioned in the letter to make the student look better.

In particular the letter claims that the student has in fact attempted to exploit the SQL injection to gain unauthorized access, and that both notifications to the IT department were made after they detected him and blocked his account.
I don't like your attitude.

God says...
C:\Text\2CITIES.TXT

nded by
the shining Bull's Eye of their Court, a glittering multitude of
laughing ladies and fine lords; and in jewels and silks and powder and
splendour and elegantly spurning figures and handsomely disdainful faces
of both sexes, the mender of roads bathed himself, so much to his
temporary intoxication, that he cried Long live the King, Long live
the Queen, Long live everybody and everything! as if he had never
heard of ubiquitous Jacques in his time. Then, there were gardens,
courtyards, terrac
With such a long response, one would expect there would be something said about the damning part of his post:

"For the record, why would you post http://news.ycombinator.com/item?id=4807691 titled "Show HN: I'm 16, and I made a thing" if you are so irked by people using their age on hacker news?"

vs

"For the record, I am of a similar age and always refrain from giving my age."
Remind me never to file a bug report to any company you work for.
Basically he did something he shouldn't have/ He Scanned them again after reporting the bug to "see if they had fixed it" (per his claims).

It seems like he had no malicious intent (At least I believe him) but his school and the vendor basically went nuclear on him.
EC2 High Memory Cluster Eight Extra Large Instance (244 GiB RAM)
I also live in Shenzhen (originally from Canada). Would be cool to hang out some day.
"If IM wasn't mentioned during the application or interview process, how reasonable is it to expect YC to have known about it?"

It's listed on the LinkedIn pages of both co-founders as their current business, together with AdMonetizer as a previous business. I assumed that checking the LinkedIn pages of applicants and taking a brief look at the websites of their businesses would be a minimum background check, but I guess I assumed incorrectly.
Weev direct marketing iPad accessories? That's the funniest thing I've ever heard. Go read the IRC transcripts. It's so clearly a joke.
Hm. I actually have four things that qualify as a "Forever Project", and I've sunk a decent amount of time and money and energy into each one. Results... nothing worth noticing.

But I like the idea of a Forever Project: just a thing that's been in your head since forever and that you can't stop thinking about. Mine have gone through many different permutations over the last 15 years, including attempts to start a company.
That's exactly what it looks like from the outside. But it isn't. It's just human beings adapting to their environment. This tendency is why maintaining a sense of awe and gratitude toward life is such a major component of spiritual thought.
Some more twists;
- If you do distance selling(=mail order, ecommerce) from UK
and lets say you've got lots of Finnish customers

1. B2C to Finns using UK vat up till 35000 euros of sales

2. Once you pass that 35ke distance selling threshold you
need to register for VAT in Finland and start applying Finnish VAT to your goods.

(http://ec.europa.eu/taxation_customs/taxation/vat/how_vat_wo...)
Can't read on iPad
Having the same issue in Firefox, Safari and Chrome on OSX 10.6.8
Not bad, just potentially deluded.
According to the expulsion letter (linked somewhere in his thread) he only reported the issue after he was detected and his access was blocked. That doesn't prove either sides version but shows why one should get authorization before attempting such a thing. After getting caught anyone can say that they were just trying to help.
It's not very cheap for what this user wants to do - he wants web processes up all the time, so he'd have to pay heroku the price for that. He is paying for things which are not required (db cache etc) and trying to skimp on the thing which is (dynos). Heroku is not cheap, but it's a great service if you can afford it and want the service they are offering.

Setting up a vps and automating deployments is not very hard, it would be useful experience if he plans working on startups, and it would also be massively cheaper and could host tens of sites like his. If he wants to pay heroku to deal with all of that, he should accept that it will be costly, and reasses his priorities and direct resources where they are needed. heroku gives you the tools to do that - ditch crane db for example and other caching add ons, and buy dynos rather than trying to use the free dyno for a proper website.
> Actually read it.

I am capable of reading, and have been for quite some time, thankyouverymuch.

And it's still not rage, is it?
I haven't had a chance to read the article yet, as venturebeat seems to be down, however to your last point -

I feel like to some extent, yes - and I sort of doubt it's a good thing. One of the founders where I work actually asked me why I hadn't tried to start my own company. In truth, there's a myriad of reasons. What stuck in my head though, is that - if anyone with a modicum of talent is viewed as slacking for not starting their own thing, then who are we left with to actually work for and help develop the companies that DO get started?

Given this current culture (at least, how I perceive it) - I feel as if it's leading to many companies that, though they may end up getting bought and putting a nice chunk of change in its founders' and investors' pockets, they're really not making important break throughs, and will eventually be forgotten. Whereas, if getting a company off the ground were substantially harder, the ones that did make it off the ground floor would need more people, be working on bigger problems, and ultimately more progress would be made.
have a look at typed clojure

https://github.com/frenchy64/typed-clojure

https://news.ycombinator.com/item?id=4697634
Major step toward an Alzheimer's vaccine
It's odd to lump categorise. Some Jews are white, and some are not.
There is no caveat. They made a crappy Android version and paid the price.
When dealing with a dynamic site or complete web application I think this would work best when tied into Selenium tests (or a similar integrated test framework).
Actually the letter says nothing about detection and all other sources[1][2] about this matter agree that the 'detection' took the form of a voluntary disclosure, which was rewarded with an NDA demand under threat of arrest.

So it seems you are the one twisting the facts for reasons unknown.

---

[1] "Al-Khabaz immediately alerted the head of information technology for the school about the breach in the Omnivox software used by the college. At first he was thanked for the discovery." -- http://www.thestar.com/news/article/1318163--montreal-studen...

[2] "they discovered that by exchanging other student numbers in the encrypted links, they could easily obtain information such as the social insurance numbers, home addresses and phone numbers of more than 250,000 students. Al-Khabaz said he informed the school’s head of information technology immediately after discovering the vulnerability in the school’s Omnivox software and was congratulated for the discovery." -- http://www.cbc.ca/m/rich/canada/story/2013/01/21/montreal-da...
If he found it and then sold it to a government agency, he'd be rich and not in jail. Selling exploits to the government is a lucrative business. Google "CIPAV", for one.
Fatwood made the stupidest analogy I've ever heard next to Paul Graham's comparison of 9/11 to buffer overflow: http://www.paulgraham.com/hijack.html
You might be interested in http://www.haxlr8r.com. From their website: "HAXLR8R is a new kind of accelerator program.
For people who hack hardware and make things.
Join us for 111 days in Shenzhen, China and San Francisco."
This instance was announced at RE:invent 2 months ago, and is now available. You can try one out for $0.34 / hour with spot instances.
What's not even true here?
Obesity isn't a problem, it's an effect. People eat crap and don't work out and the media doesn't help.

Whether problems are 'real' is a point of perception. Obesity and the high rate of diabetes are only a problem in ignorance of the cause. That's yours to fill in. The same goes for the banking crisis, political scams and the facade we call democracy (http://plato.stanford.edu/entries/democracy/).

I totally agree we should be addressing real issues in our society, however, addressing effects is like duct taping a drain - temporary.