skysight-inc/HackerNews huggingface dataset:
Yep I got it before they even posted the blog post, and my friend in security @ Twitter couldn't yet reveal why. Here's the email:

Hi, dotBen

Twitter believes that your account may have been compromised by a website or service not associated with Twitter. We've reset your password to prevent others from accessing your account.

You'll need to create a new password for your Twitter account. You can select a new password at this link:
https://twitter.com/pw_rst/[redacted]

As always, you can also request a new password from our password-resend page: https://twitter.com/account/resend_password

Please don't reuse your old password and be sure to choose a strong password (such as one with a combination of letters, numbers, and symbols).

In general, be sure to:

Always check that your browser's address bar is on a https://twitter.com website before entering your password. Phishing sites often look just like Twitter, so check the URL before entering your login information!
Avoid using websites or services that promise to get you lots of followers. These sites have been known to send spam updates and damage user accounts.
Review your approved connections on your Applications page at https://twitter.com/settings/applications. If you see any applications that you don't recognize, click the Revoke Access button.
For more information, visit our help page for hacked or compromised accounts.

The Twitter Team
"HACKED BY CHINESE!!!" is the default assumption.

There are moderate numbers of people who use Twitter for online activism. That would point more to Syria or Iran or another Middle Eastern country, since Twitter is more popular there than in China or the Chinese language.
I don't think they would have said "this week" if they could have gotten away with "today". "Today" sounds a lot less dangerous, prolonged, etc.
I'm at 700k and affected.
Why bother with something this elaborate? I ran a Metasploit scan on the /24 network that my Linode is located in and turned up 4 vulnerable servers in a matter of minutes. If someone were hunting for vulnerable hosts, this form would be a really inefficient way of finding them when you consider how easy this is to discover using simple network scans.
I was thinking of disruptive in 5 years and disruptive in 50. This I assume is a 50year scale technology?

However, with apologies to Drexler, hasn't nano-technology just failed to deliver over past twenty years? What makes this trick so different?
True, although I wish it would. This was a stupid case to take and shows a lack of thoughtfulness.
Storytelling Is Essential Companion To Open Data and APIs at World Bank
U.S. authorities can spy on EU cloud data. Here's how
Yup it is! On Github: https://github.com/segmentio/socrates
> According to what? The Social Justice Handbook? king_jester please stop lecturing us on how to behave.

My response was specifically to someone who demanded proof from affected before they would believe anything that is being said. You are free to do what you want, but I of course will call out sexism. There are tons of resources going over the basics a simple Google search away, so there is no excuse for someone to come into this thread and brush off people who are rightly pointing out this marketing stunt as sexist.

> You are not our proctor.

True, but that doesn't mean I can't call sexism out when I see it.

> You clearly subscribe to a post-structuralist/Marxist belief system and thankfully most of us do not.

Actually, I don't. Calling sexism out doesn't make me post-structuralist or Marxist.

> What you are doing is equivalent to a Evangelical Christian going into an Atheist discussion forum and telling them all they must consult the Bible to find out why they're behaving incorrectly.

Except I'm not telling anyone to consult my preferred religious beliefs and implying that not obeying my religion is behaving incorrectly.

The fact of the matter is dismissing people's criticism and experiences is simply moving the goal posts. That commenter could have easily done the bare minimum of googling to learn more, but instead they went with a brush off. I do personally behave that treating people ethically is the duty of folks who could otherwise treat people poorly, but that's just polite behavior.
Hahah, Jack Dorsey was speaking at my school today. Can't have helped his stage confidence to have this on his mind.
Xbox 720 will run windows 8 then?
I watched the video first, and most of that article seemed to be haphazardly and sometimes inaccurately ripped from that video
CBS Bans SodaStream Ad
I took a very hard-spinning glider out of a spin on the first try, using nothing but the theory books. Wasn't really a problem. The worst thing (and likely thing) that could happen is that you freak out.
Wikipedia is definitely on my list of things to do. That's a great idea for the landing page.

Thanks!
Metamarkets - http://www.metamarkets.com/ - San Francisco, CA
Looking for: Interns, Full-Time, H1B transfer-friendly

Metamarkets is looking for people who are excited by data.

We have a number of different engineering positions open both on the front-end and the back-end.

On the front-end we're running entirely in JavaScript/CoffeeScript with Node.js for our server-side along with a framework called DVL that builds on top of D3.js.

On the back-end we're using everything from Java, Scala, R, Hadoop, Pig, ZooKeeper, to Memcached. This is all to help run our own distributed, column-oriented analytical datastore called Druid.

Please see http://metamarkets.com/jobs/ for more information about the jobs we have open. Questions please send to hiring@metamarkets.com
One thing I wish I could do is import mesh models into Minecraft. Just so I can write scientific papers featuring Minecraft visualizations and analysis ;)
John's drive, focus, and passion will serve him well.
Nonsense!

Homeschool kids are from a selected group where their parents are extremely dedicated

Look at public school kids who also come from the group of extremely dedicated parents
There is another possibility, which is that they didn't work out what was going on until Thursday.

And anyone whose account has been compromised has received an email, a far more likely way of seeing the message than relying on everybody to occasionally check Twitter's blog for news.
I don't think they were vulnerable to that particular exploit. I know someone who ran the Metasploit Rails XML/YAML vulnerability scanner against Twitter.com almost immediately after its released, suspecting that they might be vulnerable. They were not.
I think @LorenPaulsson would do this. I can vouch for his language, communication, and editing skills—and his work ethic.
I thought that case sounded familiar, the WSJ had a very good article back in 2011 on it and asset forfeiture: http://online.wsj.com/article/SB1000142405297020445080457662...

This story is more than one about a rogue prosecutor, "the government is overstepping its bounds in a practice that has swelled in the past decade to encompass some 400 federal statutes, covering crimes from drug trafficking to racketeering to halibut poaching."

If you don't read the article, take a look at this infographic: http://si.wsj.net/public/resources/images/P1-BD015_FORFEI_G_...

In NY and CO, asset forfeitures have increased 1,000% since 2003. Think there might be a problem here?
But not so in relation to infrastructure. Other than Alaska there are many, many roads which connect our towns and cities.
Retraining Baby Boomers to be Programmers in 6 Months
Cola: combined lambda/object architecture
if 'open' wants to compete, it should do so by being better than 'closed'. The argument in the article tries to outlaw being 'closed'. No one stops anyone from making any 'open' system (OS or hardware or whatever) and why should anyone stop someone trying to make a 'closed' system. If someone wants to make a closed system and someone else wants to buy that, sure, by all means..
The U.S. Attorney's office could end up with a million dollar legal bill

Don't you mean the tax payer? Don't tax payers have a say in who gets to waste valuable tax dollars on frivolous cases?
I liked the "Was this answer helpful?" at the end. Nice touch.
Congratulations on your invention, and a happy Chinese New Year! 恭喜！从西双版纳“新年快乐！” ;) 希望你可以考虑来荷兰参加OHM2013，你会爱那边的风景。
It's not just Indian degrees, it's almost all foreign degrees from institutions that aren't well known. My wife's close-to-MBA-level BAC+5 degree from a reputable French university (ie, good but not Sorbonne) was pretty much not considered when she was searching for employment in the states. After she got an MBA here, she was much more employable.
I wouldn't be surprised if 2% of the crowd at DEFCON was sniffing the wifi at any point. But at the Superbowl? People don't bring laptops to the superbowl.
They actually do condoms as well. Great service.
The official Twitter release was titled "Keeping our users secure". My gut response after reading the first couple of paragraphs was, "Are you fucking kidding me?" That title, combined with the day/time of release really has the cynic in me riled up.

EDIT: It'd be great if anyone willing to downvote would explain why it's OK for Twitter to title a notice involving a breach of security resulting in the exposure of 250,000 records containing sensitive information, "Keeping our users secure". Because it really kind of pisses me off when I read it.

EDIT, EDIT: Highest karma volatility (up, down, up, up down, etc) of any comment I've ever posted on Hacker News. I really am genuinely interested in counter points.
Increasing your chances of entering flow
also java just did a release and are claiming one of the issues was being exploited in the wild: http://www.oracle.com/technetwork/topics/security/javacpufeb...
This doesn't seem to be demanding any censorship, though. I doubt Google would've pulled out of China if the only thing China were demanding was some kind of fee be paid into a media fund.
I agree, and I get endorsed by people I know but who know nothing about my capability of that particular skill (because they've never seen it exercised in my relationship with them).

I can only surmise they endorse me because once you give an endorsement you're encouraged to endorse the endorser right back, and maybe they're hoping for endorsement.

In short, since I get unqualified endorsements from others, I don't put any stock in endorsements that others have. It was a nice idea, but they should really pull the service.
And for people trying to puzzle out who was impacted, several these accounts (all with random strings for passwords, btw) were barely ever used at all, often not for several years. The only thing they had in common was their early creation date, and hence relatively low user ids. My guess is that the hackers simply scanned user ids starting from 1 and worked their way up.
The way I took it is that his degree was valuable to him because he participated in the overpriced college market, the very thing he is criticizing.
People in this thread may also find GmailTex useful. It's a browser plugin which enables using LaTeX syntax in Gmail and GChat.

http://alexeev.org/gmailtex.html

P.S.: This Socrates thing is pretty fantastic. Is there a keyboard shortcut for switching to the compiled view?
I just got the reset email, and my uid is in the 3.8 million range, created 4/2007.
Thank you! The first version of the post DID have the explanation. But it ended up being multiple paragraphs and distracting from the point. It is hard to explain without a lot of historical context. It may become a separate post, though I'm not sure how much appetite there is for that based on what happened here today.
What do you use to do the recommendations? Apache Mahout?
I think Apple's foundational technologies have been fantastically stable since OS X came along. It's been pretty much the same solid core since 2001, from OS X 10.1 through iOS 6.

The only major piece to go away was Carbon, which was pretty much just for OS 9 backwards compatibility to begin with.

I use many of the same classes and techniques in iOS today that I did in the very beginning of learning OS X programming.
What caught my attention -- as soon as I saw the title -- is that while this is in many ways touted as an "original" and a "first" (i.e. by and direct to Netflix -- although as to first, what about e.g. "Lillyhammer"?), I gather from reporting that it is indeed what I suspected: A (yet another) remake of a British show.

I recall seeing the original "House of Cards" on Masterpiece Theater (aka American distribution of British drama). It was quite good and distinctly British including in its snide humo(u)r.

The U.S. production may "pull out all the stops", but I'm not sure they can top or even match the original.

And I'm somewhat disappointed that this "original", "first" effort is apparently not actually creating a new show or opening new territory, creatively.
Sounds like a great concept. But 35% of markup is too high. Margins for hardware goods are low enough already. Then you take 35% of that. I think you'll end up with a bunch of overpriced items with inventors struggling to make a profit.
Be a minority or the top 1% in your class of people likely depending on the same thing?
Don't worry, taxpayers will take care of the tab.
Nearly half of U.S. employed are overqualified for their jobs
so so many organic compounds, inside and outside the human body, contain aromatic rings. graphene may be toxic, but not because it resembles benzene.
White House Considering Response to Chinese Cyberattacks
That would explain the high incidence among hackers, who are more often early adopters. I've been surprised by how many people I've heard of getting the email, including people in this comment thread and myself, considering only 250,000 emails were sent out of their couple hundred million accounts.
Why You Shouldn’t Give a Damn about Apple’s Finances
I'm a Nov 2006 account and I just got the email - since then I have reset my password to be particularly strong - but it seems it's forcing me to do it again (not that I mind, I use a very strong password stored in LastPass)
This. And consider that homeschooling in no way scales, and is not very effective for kids from troubled families (for obvious reasons).
That seems really unlikely - if there is one ancient rule in PR it's

The break-in didn't Dick Nixon, the cover-up dicked Nixon

This is one of the worlds best known sites - everything about this will be hot news. Only a fool would cover it up.
The GP talked about FBI and Hollywood. But to be more specific, the FBI represents the US government, and there are plenty of reasons to hate it.
slightly more idiomatic, though perhaps not quite as clear as the clojure:

def unique_keys(*hashes)
result = {}
hashes.each do |hash|
result.merge! hash
end
return result.keys.map(&:to_s).sort.join(', ') unless result.empty?
'<none>'
end

https://gist.github.com/4695388
Lynx Labs - a new 3D capture camera on Kickstarter.
First post on Hacker News, thought you guys might be interested in a project my company has been working on for the last year or so. Let me know what you think!
Yeah, big deal; assume it's known. Change it; change any other service with something "identical." Of course, if you are smart enough to know the implications of both a strong password and salting and not using the same password, you can make your own decision, but if you are at that point, why not change it regardless?
HN Poll: was your Twitter hacked? 
I was one of the 250K Twitter accounts compromised. Based on the anecdotal evidence of my Twitter feed, it seems like the tech community was overrepresented, as 250K random hacks is just a small sliver of Twitter's user base.

Trying to see if there was any pattern to who they picked to hack (I have more than the average amount of followers, but still pretty modest).
Same psycho freedom stealing prosecutor also had to grovel to the courts a few days ago that her office arrested the wrong guy in a high profile gang case because he kind of looked like who they were after. Innocent guy enjoyed almost a month in prison and legal bills

http://reason.com/24-7/2013/01/30/carmen-ortiz-blew-a-gang-a...
yeap, just got one too.
my id is around the 19000s..

Of note, the apps I have allowed access to my account are:

tweetdeck, twitter for android/OSX and instagram.

(if that helps any diagnosis of potential attack vectors)
> CBS banned SodaStream’s Super Bowl spot because, apparently, it was too much of a direct hit to two of its biggest sponsors, Coke and Pepsi.

An entire article and not a single mention of the fact that SodaStream is controversial because its factory is located in Mishor Adumim? Seriously?
Solatube's Newest Product Solatube Smart LED
The most energy efficient lighting for your home EVER.
Solatube has taken another leap forward by integrating advanced LED technology in to its state-of-the-art daylighting systems.
The result is the Solatube Smart LED System, a 24-hour home lighting solution that delivers up to 94% in light energy savings!
I remember taking the GRE, I got 99 percentiles on quantitative and logical reasoning...and like 69 percentile on verbal. The verbal part was basically a vocabulary test.
They say that they are discreet and appreciate my privacy, but do they take Bitcoin?
I have to agree with PurpleLobster.

Americans underestimate how much more diverse and I mean EXTREMELY diverse Europe is. Even in tiny European countries with just 10 million people, the languages, dialects, traditions, mentality, civility, are insanely different. It's hard to described until you visit a few countries yourself.

Americans who have never left the country will be quick to chime in and say "we're diverse too, especially new york". But they still don't get it.

When you compare the North American continent with the European continent on diversity, you'd be a fool to underestimate Europe. Let me put it this way, America's a melting pot. Europe is a continent with hundreds of millions of people living side by side for thousands of years and they still don't get along, or speak the same lanugage, or see eye to eye on issues, they all have their own separate countries and governments and just recently tried to form a union (EU).

Diversity is a lot more than just skin color.
I don't think the webworker solution would work for something like this, anything that needed to use anything outside of the workers context would break. It seems like khan's environment is much more restricted, so they can get away with it.
Oh, I remember people worrying about the same thing 20 years ago and general purpose computing is cheaper and more accessible than ever. Embedded devices exist because they serve a purpose well. I like a good Swiss army knife, but I also have a bag of specialized tools.

As for hackers being 'the new witches,' people aren't exactly scared of computers. If anything, they take the complexity of the digital age with too much complacency.
Really? That doesn't sound very effective. May you shed more light into it? I'm really curious to learn more. In my experience, people who can sell are better off tested with actual selling and not the administrative side. They can always learn how to do the things you describe, but not everyone can sell.
https://github.com/davidcelis/recommendable
Rebooting autonomo.us, reassessing "free network services"
Nobody hacks Twitter just to get valid emails or impersonate someone. That's ridiculous.

Pretty clearly this was the work of governments e.g. China, Iran who are trying to find out more about political dissidents or the sources of leaks. They are the only ones who would use lucrative exploits against Twitter, NYT, WSJ etc.
I think it's a great start. I'm working on a related project. But one thing that may cause confusion is that at least in my mind, wines are related to wineries or producers, and through a winery to one or more vineyards, rather than directly to vineyards. Often a winery is also a vineyard, but at least with cult wines there's a symbiotic supplier relationship, wherein, for example, a winemaker will produce a wine made from grapes grown by a particular vineyard, which is owned by someone else. The winemaker will then "vineyard designate" the wine, to both the winery's and the vineyard's benefit.

So the quick fix is that I think from looking at what you've built here, that maybe you should have a big list of wines, and another big list of wineries, rather than vineyards?

Hope this helps :)
That seems a dubious analogy at best.
I had a great research experience at UW in my Junior/Senior year. My work even made it into the New York Times (fuzz testing Java's bytecode verifier at the time to find security vulnerabilities). But it was something you definitely had to look for.
Today could be really bad if they discovered later that the attack had been going on longer tomorrow... never know which way the spin or reporting is taking the real story once it hits print...
Ambiverts, Problem-Finders, and the Surprising Secrets of Selling Your Ideas
The hint about a persistent Google Hangout is very interesting. It sounds like you just create a Google+ event, attach a hangout to it and the URL is persistent forever[1].

Is it really that easy?

https://plus.google.com/+CheeChew/posts/RmPerogdhrB
I didn't claim it solves "roughly the same problem", only a very relevant subset of the problem (integrity) closely related to the unfortunate situation rubygems is in right now.

What you call background (docs, tooling, education) is an argument in favor of the simple approach, which is already implemented and just not enforced - in contrast to whipping up new infrastructure of significantly higher complexity from scratch.

Also I didn't imply the maintainers are ignorant or lazy, they were merely oblivious.

So I'll repeat: The PGP approach is obviously superior, but comes with serious complexity and implementation concerns (there is no native PGP-library in ruby). Consequently it might make sense to add basic security right now, in a minimally intrusive fashion, while a more complete solution is developed. This, by the way, is part of the discussion that the rubygems team is having right now[1].

[1] https://github.com/rubygems-trust/rubygems.org/wiki/Overview
Do Not Type "File:///" in OS X
The first software patent
They did in the movie Battlefield Earth lol
The UX of Super Bowl Ads
Had to look that up... apparently Mishor Adumim is a factory area located near Jerusalem in Israel.

Um... my guess is that it was not mentioned because it has no bearing or implication as to the reason why the advert was blocked by CBS.
~1.9M here, got the email.
Here's a first-person response from the person
who posted the receipt and was fired:

http://www.guardian.co.uk/commentisfree/2013/feb/01/fired-ap...
Minecraft is the closest I've gotten to my beginning days of gaming -- which was all about building things (SimCity, SimFarm, Civilization) and exploring (Moria, MUDs, and the joy of discovering easter eggs in any number of games.)

Commercial video game studios produce what are effectively interactive movies. Building and exploration take a back seat if they exist at all. I hardly game anymore, but I have high hopes for 0x10c.
HN meta: It would be interesting to see per-comment volatility as an indicator of moderation convergence. Anyone know if the HNSearch dataset is rich enough to do this?
any chance it was through an app that you allowed access?