skysight-inc/HackerNews huggingface dataset:
Rally.org : San Francisco : Full-Time

Rally.org is an ambitious venture for good - always looking to expand on what the intersection of money and values can mean for the world at large. Our platform today helps users connect and fundraise around what matters amplifying their stories to reach more people. We're proud to have raised the largest round ever on AngelList ($8mm) with a great team of investors including Kevin Rose, Mike Maples, and Reid Hoffman.

We're a small team of developers in the heart of SF that work across our rails stack, from optimizing relational database queries to building smooth javascript interactions. We work together closely, iterate quickly, and deploy to production daily. We're proud of our pragmatic culture and push each other through pairing, code reviews and speaking up. We use tools like Rails, Redis, Chef and D3-js.

We work hard and we have fun, too. Bi-monthly team dinners, in-office yoga & pilates, ping-pong breaks, and an unlimited vacation policy.

We're looking for passionate engineers to join the team. You'll be given a ton of responsibility, wear as many different hats as you want, and have a massive impact on both our technology and business.

Get in touch with us at jobs@rally.org.
Issue is that you don't know which of the tens of thousands of internal IP addresses would correspond to the one or two sysadmins who would have production access.

Which means either the production servers were hacked or there was a widespread compromise of their internal network and systems e.g. email, IM.
i hope oracle blocked all the holes. it's going to be super obvious how people have been writing exploits for Java 7 and if they missed any spots in their code audit there is going to bunch of very easy to find exploits.

it's good to see they fixed the click-to-play bypass as well. hopefully, firefox will fix their's as well.
A brand for sale - Hessian
Those three may be fine (and indeed all you really need for representing most data) in some fields. In other fields though, they're entirely unsuitable.

A lot of people have mentioned scatter plots.

I'd quite like to know how you'd represent relationships between things using only a histogram or line chart.

I realise that it's covered somewhat by the "95% of all cases" statistic, but really, as with most things, if all you're doing is visualising relationships, then that statistic is likely way off.

The general point is a good one - use a visualisation that's appropriate for representing your data not one that's appropriate only for looking nice, but I think the message is lost somewhere in amongst the rhetoric.
After the fantastic post by patio11, I spent all afternoon emailing every person in my network. Letting them know of the huge security risk. The answer I got from most people? "We have backups, and plan to deal with it soon. Thanks for the heads up." Really? This is the kind of stuff that made me delete every simple rails project I had on my workstations, and just push them to git. No sense in risking it.

Oh, and best of all was the response from my webhost (which is well known here):

We've added updated Rails installers to our control panel so that new Rails
apps will be created with the latest secure versions. However, it's our
customers' own responsibility to upgrade their existing Rails apps.

Note that customer Rails apps run as unprivileged users, with resources managed
by the kernel cgroups feature, so its very unlikely that you'd see any issues
on your own sites if another customer's app was compromised.

Hmm, very unlikely but still possible. Not something I want to hear from the people who Im trusting with my projects. I'm canceling my account tomorrow and moving away from them.
I know they are not responsible for their client stuff, but this is a real threat to their servers.
One thing caught me in the article. We need opinionated developers - who follow something they believe we need and tell people about it.

Usually opinionated is a bad thing - you seem to have the good opinionated. It's your opinion that rugged mountainnscenary and the well being of family and friends is worth more to you than salary and fussball.

I am seriously coming to the belief that setting clear tasks and assigning them to developers is a negative - I work much better on an idea I can see being great than I do on some half baked imposed task

I believe google uses an auction / pricing system - the more the boss wants it the more points it gets.

I think I know what I want scrum points to mean now - prizes
"In Israel" isn't quite true.

> The EU's highest court ruled in 2010 that Sodastream was not entitled to claim a "Made in Israel" exemption from EU customs payments because of the companies' primary manufacturing plant location outside of Israel in the Israeli-occupied territories West Bank settlement of Mishor Adumim.[68][69][70]

> Sodastream has been criticized for operating a manufacturing plant on land in the West Bank by the Israeli non-governmental organizations Coalition of Women for Peace[71] and Peace Now,[72] as well as other human rights organizations.[73]

https://en.wikipedia.org/wiki/Sodastream#Controversy
I used to think this way too - I would make a lot of money, and then go do something good for the world. It's a great altruistic motivation. The thing is, I want to make the world better today. I don't want to wait. The great thing is that there are lots of opportunities to do both at the same time. My passion right now is making the internet faster and better. It's both my job and something I care deeply about. That sense of purpose makes it a lot easier to keep going when times get tough.
Salted and hashed passwords? Companies emailing affected users? What is this the future?
CBS didn't refuse SodaStream's ad because of their politics. They refused the ad because it makes fun of both Coke and Pepsi.
They got money from pre-orders (300 units at $1300 each). The Avalon team published their partially obscured contracts with TSMC which showed that the NRE costs were much less: about $200-300k total. And their chips are 110nm.
The Most Influential Brands in Canada
chemically its not likely to be any more harmful than graphite, though because of the nano scale of it, if it were to be inhaled (unlikely probably), it could be as harmful as asbestos or other sharp, irritating, harmful particles.
Why Tweaking Your Career Vocabulary Can Radically Improve Your Life
But its usually just the door that is hard to get into, once through the door its usually smooth sailing. Actually, this occurs in many exclusive programs/institutions over and over again. But in reality, they have to be selective: the world doesn't need that many engineers, especially ones that aren't that smart, just like we really don't need that many doctors (especially ones that aren't that smart). Computer science is the same: sure you could double or triple the size of your program to except just anyone that wants to program, but then you would flood the market with substandard talent and your reputation goes into the trashbin!

Now, would we prefer a hard program where students would fail out instead of being stopped at the door? This also seems like a waste of resources, but it could work given the right technology (e.g. online courses).
New Nike Air Yeezy 2 Mens Black Red Grey Cement Cheap
Good point. I just copied the version numbers from the linked website - I guess it was outdated. Although I checked again and they are correct now.
Okay here's a few counter points:

1) There is no evidence that all of the records were compromised. So Twitter is keeping users secure by proactively resetting passwords.

2) People need to get over this Friday afternoon release. Twitter is a global company so it's not Friday everywhere and regardless it could purely be coincidental.
How to Make Mathematically Perfect Nachos
There's no way this only hit 250k users. I have a bunch of Twitter accounts for testing and whatever, created over many years, and they all received this email.
I think I might have been the person who first told Cliff Mass about your app. Of course, I wouldn't have known about it had it not been for Hacker News. I'm really happy to see that this has grown so much! :)

From: Aaron Brethorst <aaron@xx.yy>
Subject: Announcing pressureNET 2.0 | Cumulonimbus
Date: February 14, 2012 10:45:50 AM PST
To: cliff@aa.bb

I'm not affiliated with this project, but figured
you'd find it interesting.

http://www.cumulonimbus.ca/announcing-pressurenet-2/?
No. I suspect their email template was out of sync with this particular incident.
And all I can do is be surprised that SodaStream is still around.

My parents had one in the 90's but it became harder and harder to get CO2 canisters to refill it with.
Or more likely the database is sharded and they just compromised those physical machines.
I've been suspecting the same thing. Two of my accounts received the email, both created several years ago, while none of my newer accounts have been compromised.
Reverse-engineering the algorithms of romance
This is bullshit. I just got this message, and until I signed into HN I had no idea if Twitter was hacked or if there was a problem on my end. Which would be alarming, because all of my passwords are 30+ random characters, and I never reuse passwords across websites. Fuck you, Twitter.
Everything needs to shift to MFA...

http://news.ycombinator.com/item?id=5149023
It is by no means the first application and certainly not the one Nokia will focus on. They will continue basic material science research into flexible electronics, LEDs/LCDs, and power storage.

Graphene's uses are many more, however, including water filtration, transistors, meta materials, sensors, etc.
Companies regularly do things to keep good relations with their sponsors. Isn't that assumed? I'm not in the ad space in any way, shape or form - and maybe I am jaded - but this seems like something I would expect from a multinational corporation
I'm sure more than 2 people at twitter have production access.

And identifying the senior staff isn't probably that hard, they probably have quite visible twitter accounts.

As someone mentioned in a completely different thread, it'd be enough to have a vulnerable rails running on localhost:3000 on your laptop and "accidentally" being hit with a CSRF, for example.

Get a shell on some staffers laptop and stay dormant, I'm sure you'll catch a live ssh session soon enough [with access to that ssh client's process memory] (in fact you'd get quite far just with a copy of the id_rsa + known_hosts files)
Oops: BlackBerry's Alicia Keys is an iPhone user, has an iOS app
Visualized: a fish brain lights up while on the prowl
Why You're Talking Past Each Other, and How to Stop (2012)
There are tons of resources going over the basics a simple Google search away
Actually, I don't. Calling sexism out doesn't make me post-structuralist or Marxist.

From one of your other comments:
Gender is a performance, not a thing. You act in alignment with what you portray to others as your gender.

Oh bullshit. People that think "Gender is a performance" and that there are "basics" that have to be learned have clearly been steeped in post-structuralist thought or perhaps maybe you should Google more about the origins of your beliefs. And you're not just "calling out" sexism you're clearly instructing people how to behave and think.

That commenter could have easily done the bare minimum of googling to learn more, but instead they went with a brush off.

See what I mean.

I do personally behave that treating people ethically is the duty of folks who could otherwise treat people poorly, but that's just polite behavior.

Right.
Soviet Spy Who Outwitted Einstein
I'm inclined to give them some benefit of the doubt. It seems like they could have found out on, say, tuesday, started investigating (post-intrusion analysis is very lengthy to do thoroughly) and the boss said "we need to release a statement by the end of the week, so find out what was taken and how users are affected."

They'll likely be doing forensics for months after this, so alerting the public a few days in to the investigation is actually pretty good.

What you should be concerned about is all of the companies who got owned in this campaign and will not be confessing. This is big, and a few more companies will admit it early, a few will sneak vague statements in their SEC disclosures, and a few will cover it up completely.
We're hiring at CrowdFlower! Lots of positions but I especially like the "Everything Web Engineer Extraordinaire" position http://www.jobscore.com/jobs/crowdflower/everything-web-engi...

Intern, Remote, H1B all fine.

Ask about our unlimited Otter Pop policy.
I received this same mail earlier. Very glad that I have a policy of strong random passwords for each site. Not affiliated with them other than being a user, but I recommend Lastpass + Yubikey for two factor (you can Google Auth as well with Lastpass).
Traffic and Weather - Virtualized API Stacks
Numbers of Asteroids Near Earth
I wish this was true.
Hey Twitter, make public the hacking details
It seems like the pace of cyberattacks is accelerating...will be interesting to see how the US responds, and especially if it's even possible for massive government organizations to adapt quickly enough.
23 year old releases new chips that 'mine' Bitcoins 50 times faster
>> The BBC show it is originally based on is, for real, one of the finest pieces of television ever made.

You might say so, but I couldn't possible comment.
sorry about seeming flippant, I was actually in one of your betas and appreciate verold for what it's doing (and it's a fantastic service for a modeller) I would also love to have some way of doing ACTUAL web based 3d modeling. but the material editor is quite useful for setting up a displaycase for the model.
How to deal with a masked narcissist
Imagine is IBM had stopped the Apple 1984 Super Bowl ad...
It's been 30 minutes. Are we really at the point that we need to make a petition?
lol, I posted this a week ago on HN and it didn't seem to get any traction. Strange the submission didn't combine on submit seeing how they have the same url.
http://news.ycombinator.com/item?id=5115302
I can see why you might think 35% is high. Compared to Kickstarter or Esty who only charge ~5%, we do take a larger percentage. But at the same time, we are not just a platform like they are. We are actually a retailer, and we take care of payment processing and fulfillment to consumers. Most retailers charge 50% of the retail price for these services (which cost real money).

Though Kickstarer only takes 5%, you pay another ~5% in payment processing fees, and then you must set up and pay for fulfillment yourself, which is time consuming and expensive! We think it is inefficient that every Kickstarter or Etsy creator has to come up with a solution on their own, often at a large expense. We want the creator to focus as much as possible on building the best product they can, not on fulfillment, website, video, PR, etc etc.

You can read more about our wholesale pricing thoughts at: http://swish.com/wholesale
Really this is a big deal? I remember soda stream from the 80's in the UK. I'm sure they even eventually had official coke and Pepsi syrups that could be used with them. Didn't kill the market there and I'm sure it won't here.

Seams like they've been in business since 1903.

https://en.wikipedia.org/wiki/Sodastream
Don't they offer free licences to people who contribute to open source projects? The did for ReSharper and (something else I've forgotten.)
I personally prefer http://JSFiddle.net
They need to make public the details. How was it done? They left that out of the announcement. You guys know better public disclose of hacking techniques prepares much less tech savvy (about everyone) that twitter website operators can prepare and protect themselves.

Please consider signing..
https://www.change.org/petitions/twitter-com-release-the-det...
I'm fairly new to Clojure, but am not new to bash (and its ilk), so tend to view the threading stuff as Clojure's version of bash's piping syntax (I realise they're not the same thing).
Your App Won't Save the World
Two opinionateddevelopers, just with different opinions.

Thank you to you both:-)
I checked the article, and that bug was similar in the relevant sense. It was a security bug related to hashed messaged authentication codes, a class of security exploits related to very non-trivial issues in cryptography. It was not comparable to "let's allow an information-file parser to execute arbitrary attacker code".
NO, he must be spoon fed!
Just an anecdote - I work on a team of about 12 developers and we have 2 remote guys that get far more done than anyone in office. Granted they are the most active on Skype (what we use for inter-office chatter).
I think that the difference between talking and paying is quite clear.
"Twitter is a global company so it's not Friday everywhere ..."

You're right. In some places it's the middle of the night, and in some places it's Saturday morning... prime time for a press release.
Interesting. Wasn't familiar with the deep details, though I knew Android did something like this.

I don't like the user-account-per-app paradigm. It seems like an ugly abuse of multi-user access control to compensate for the missing app isolation piece.

I agree that it's a hard problem.
I remember at the time I was taking chemistry classes that the average lifespan of chemists was 5 years less than that of the overall population -- or so one of the professors said.

This was some time ago, and I gather things have improved, but our labs -- and this was a well-endowed school -- were... far less than optimal. Ventilation in organic chemistry lab consisted of turning all the vent hoods on in the vented compartments lining one side of the room and hoping that that would do some good. Acetone exposure was pretty much non-stop. Toluene also quite common and pervasive. Ethers. Benzene, in one lab I recall.

All that said, I would hope -- I guess I shouldn't expect, though? -- that in the graduate environment one would have reliable access to / use of a vented compartment? (I wouldn't want to live directly downwind from that building, though.)

Anyway... How do you feel about math? What about computational chemistry? I'm not arguing that you necessarily stay in chemistry. Just whether some of your concerns might be subject -- perhaps with some effort -- to reduction at the grad level. And whether combining programming and computation with chemistry would be an interest. Whether doing the chemistry itself, or making computational tools for chemists.

My imagination is that such might be a niche where, if you are good, there is more opportunity. Lots of product engineering going on.
pyparsing (http://pyparsing.wikispaces.com/)
Settle down. "Keeping our users secure," just means "There was a problem, and here is what we have done to mitigate it." You have correctly observed that they chose, in their announcement, to downplay the breach and focus on what steps they've done to address it. What did you expect?

Let's all take a deep breath and remember: It's. Just. Twitter.
Privacy Flaw in Path’s iPhone App Shares Location Data
The main site itself was very unlikely to be vulnerable, but support apps, internal apps, etc. are all vectors.
Hackers Targeted Twitter User Data
They are going through a resurgence, but from what I can tell it is mostly driven by people who want to make healthier carbonated drinks at home (like carbonated water + a bit of juice), not by people wanting to make a cheaper alternative to coke or pepsi at home, who were the main market in the 80s.
Apple Meets with Turkish PM to Discuss $4.5 Billion iPad Education Initiative
Samsung's Super Bowl Ad mocks IP/copyright laws
EBay fraud and me, the sequel: A pathetic end to the debacle
I don't mean to be a yes-man, but just to offset some of the other comments: The site is clearly an early (but totally functional) version. It will get better + prettier + more ajaxy as time goes on. Bravo on your launch!
If you think this is cool, check out http://spandex.io/
We didn't have any to show off something based on RethinkDB. I'm looking forward to your example app that takes a program and tells you whether or not it will ever finish executing.
We had lots of people asking "how do I get started with RethinkDB and stack X". These familiar examples can be extremely helpful to people for getting started with a new technology, so we posted a couple based on existing code. Obviously they're not meant to be new or groundbreaking :)
Nice, a negative comment on Hacker News! We don't have enough of those either.
A rate which virtually no corporation actually pays.
The article points out that during the 3 hours of the Superbowl, only an average of 11 minutes is actual playing time. That's a lot of downtime where fans in those $2,000 seats will be watching replay videos, uploading their own, and checking stats.
When flying gliders at low altitude, we usually think about the angle of attack first and airspeed second. When circling a thermal, I often cross below the stalling speed due to turbulence etc.

But if you don't try to force the glider to maintain altitude by pulling on the stick and just let it fall through, maintaining the same angle of attack, you'll quickly fall a few meters and gain enough airspeed to resume level flight. So you've been below the stalling speed, but you haven't actually stalled the airplane. This maneuver makes you lose a minimum of altitude, but obviously you don't want to be forced to do it at very low altitude.
School of Haskell Beta Sign-up
Seems well within CBS's rights. This isn't a "ban". SodaStream could show the ad anywhere they can convince companies with advertisement space to show it. There is not an inalienable right to air any commercial CBS is given and clearly CBS stands to lose much more from damaging their relationship with customers who consistently advertise with them than the one time payoff from SodaStream. I'll save my outrage this time.
Yes, that is exactly what we do. Create an event far in the future and attach a hangout to it. We then use a URL shortener to give it an easier URL.
Google robots.txt file
This is an AMAZING show
Focus on the feature
jsfiddle is SO much better. I respect Remy, but I just like the way jsfiddle is. I tried all of them out and I found that jsfiddle > jsbin > codepen > others. The panels are just more intuitive and it feels less constrained than the others.
> you want .keySet instead of .keys, otherwise they won't be unique, right?

scala> val p = Map(1->4,5->3)
scala> p.keys
res0: Iterable[Int] = Set(1, 5)
scala> p.keySet
res1: scala.collection.immutable.Set[Int] = Set(1, 5)
scala> p.keys++p.keys
res2: Iterable[Int] = Set(1, 5)
scala> p.keySet++p.keySet
res3: scala.collection.immutable.Set[Int] = Set(1, 5)
I though this was a pretty much standard legal procedure in this circumstances. How is that news?
So to make this clear, the best guess is these attacks are being done by governments in an effort to find out who is leaking data to Twitter, NYT, etc?

Pretty interesting if you ask me, is it likely the use would sick the best hackers at the NSA if top secret information was being leaked on the bizzaro world's Chinese Twitter? It almost sounds like the prologue to the worlds first CyberWar.
The reports are that it was co-produced, and hence House of Cards is deemed the first original series, so the statement isn't entirely false.

From the Wikipedia link you posted:
"The series has been commissioned by NRK from Norwegian Rubicon TV AS in association with Netflix and German-owned distributor SevenOne International."
Energy R&D Funding Outlook Looks Bleak as Sequestration Looms
No tab completion for tags. Bleh.
It does exist but it is smaller than 350k in the post.

He might be not bad at managing money but almost everyone who starts earning more starts spending more. This is not bad money management, this is human nature.

Another effect is cost-of-living changes when moving from college town to real life. If a graduate earns 100k, it is probably not in a low-cost area. Taxes on this income are also higher than on a PhD income.