skysight-inc/HackerNews huggingface dataset:
Although, I'd imagine there'd be a deluge of connections any time there's an interruption in the game. Which, given that this is football, seems like it'd happen pretty frequently.
Where can one get a 5K MA?
I'm one of the 250k accounts that were compromised. Seeing as they are saying the attackers got the salted hashed passwords, not the originals, I'm wondering if that means it was Twitter's systems that were compromised as where else would those be obtainable from?

I'm wording the above to refrain (yet) from declaring "Twitter was hacked" but I guess that is what it is looking like :(
Hey, I applied from my personal email, about two weeks ago and haven't received a response.
It would be great if there were ways to sort the results when you look in the big list of wines, such as by price, year, name, vineyard. Also, when there is more than one page of results, having the pages separated by something related to the sorting criteria is a lot more intuitive in order to browse through to find what one is looking for. For example, sorting by vineyard could do A-C, D-E, F-H or A, B, C. Either are lot easier to understand than page 1, page 2, page 3.
Oops, my math is wrong. It's 10 hours a week. Still a chunk of time.
You can get pretty close. I graduated in 2011 after 4 years at Cal and only had ~$26k in debt.
Glider (Portland, Oregon)

ABOUT US:
Glider is a small team building SaaS products to help teams work together. We're backed by True Ventures, and are graduates of TechStars Seattle. We offer a competitive base salary, benefits, and stock options package along with an awesome opportunity to get in early on a growing, VC backed startup.

ABOUT YOU - SENIOR PYTHON ENGINEER:
As a Senior Engineer, your average day will include plenty of coding across the stack. On any given day you could be deploying servers on AWS, coding on the frontend, or writing application code. On top of your daily coding, there will be opportunities to work with clients, give input on the product direction, and help shape Glider’s future!

What we're looking for:
· Experience with Python
· Familiarity with AWS and Chef/Puppet
· Demonstrated success working well in small teams and close quarters
· Strong desire to build great products that make customers happy
· Excitement about what Glider is doing!

What would be nice:
· Experience with current JavaScript tools such as Backbone and jQuery
· Knowledge of Microsoft Offices SDKs, libraries, and plugins
· Experience building browser plugins
· Experience working with Open Office Server

FULL JOB POSTING:
http://www.jobscore.com/jobs/glider/senior-python-engineer/a...

CONTACT:
Justin Thiele, justin@glider.com
http://glider.com
Yes, there ma be an education bubble out there, but it's easy to critize education when you already have gotten it and the privileges it entails - such as understand how it potentially is a bubble!

But even with that knowledge of the high risks of a bubble, and even if one tries to forget the many studies proving education is a worthwhile investment (for the increased salary benefits one gets - cf signalling theory) how munch do you think the capacity to learn and create is worth? How valuable is it to you?

Some people do not need any formal education to get that. But many do. And even those who don't "need" a formal education can take great advantage of it - for ex finding some golden insights with a marketable value, formalizing their knowledge, or even better- learning how to create new knowledge (PhD)

There is a growing anti intellectual bias - even here on HN. Whatever, but least leave aside your opinion and consider the facts.

(conflict of interest warning - I made an "investment" in my education, and therefore I could have a biased opinion)
Indeed. Your prospects are probably significantly worse if you have a PhD in theoretical computer science and are not very good at programming. Google may not have much use for someone whose thesis was about proving that some historically interesting but practically useless problem is NP-complete.
My issue was not with Path knowing where I am, but with Path publishing where I am to my contacts.

Path, of course, knows where I am due to the geolocation of the IP from which I post.

My intent was communicated to the app through the disabling of location services. Posting my location uncovered through parsing EXIF is the opposite of my configured intent.

When I post pictures to Twitter, Twitter receives the EXIF-tagged photos, too. They, however, don't serve them with the geotags, as I have disabled geotagging for my account. I haven't tested if they just strip all photo EXIF, or only for accounts that disabled geotagged tweets.
I don't know, how long would it take a US factory worker to buy one? How long would it take for a Apple employee in Cupertino?
I agree that House of Cards is unlikely to get the great unwashing masses desperately enabling Netflix. Perhaps because because Netflix is not just another network, it's targeting early-adopting geeks with the kind of show they tend to like. Or maybe this is just a case of 'nobody gets fired for commissioning a remake of a successful political drama'.
Fair points. It is a bit of a weekend project, and it is really just me working on it in my spare time. Who knows, maybe it will grow into something bigger/better. Or maybe not. Either way it is just something fun to play with.

Thanks for the feedback.
When you have no choice, are you really renting or are you a serf?

Not a straightforward question. As a renter, I can pack up and leave on relatively short notice, with limited liabilities. But as a homeowner, I might as well be an indentured servant to my mortgage company. If I own my home and suddenly find that I need to sell it and move elsewhere for work or other reasons, I can expect to take a six-figure bath in today's market.

Personally I would rather be a serf than a prisoner... hence my preference for renting.
That's been in the back of my head. I'll put some priority on it.

Thanks!
Twitter Hacked – 250,000 User Accounts Potentially Compromised
"They could probably just sign deals on a royalty basis and have studios take on the investment risk."

I'm not sure what you suggesting makes business sense for either netflix or the studios.

A big part of the strategy seems to be exclusivity and having the whole season available on day 1. It's unlikely the studio will produce a full season without any upfront payment and with exclusivity...

Netflix is a subscription business they wouldn't sign deals based on number of views. When they get the right to show a movie, they can show it as much as they want and they need to keep it this way.
So does that mean that juicy DMs will be pastebin'ed too?
> Well, maybe not. The NFL manages to spread 60 minutes of clock time across three hours in a typical game. What with time running off the clock between plays and the typical play lasting about four seconds, an average game ends up with only 11 minutes of action.

Setting aside the fact that this entire paragraph was irrelevant to the point of the article, it always irritates me as a (college) football fan when people cite this statistic. There are far more than 60 minutes of "action" from kickoff to the final play. Most of American football is actually about strategy - if you're completely ignoring what happens between when the play is whistled dead and when the ball is snapped next, you're going to be very confused, and I wouldn't be surprised if you didn't enjoy it.

But we can all agree that TV timeouts suck when you're in the stadium.
On Hiring (in a Devops World) - video
Your organization has embraced the Devops philosophy, and is growing. So you set out to hunt for Devops practitioners, and quickly find that usual hiring approaches (e.g., recruiters looking on LinkedIn) simply don’t work.

What do these these mythical Devops creatures look like? (Hint: a lot like unicorns and combs).

What is their natural habitat? (Shockingly, they don’t hang out on LinkedIn).

How can you capture them?
HD > Library > Application Support > Microsoft > PlayReady > mspr.hds

Just delete the file. Fixes the problem.
I wasn't trying to make that assertion, actually.

Maybe I wasn't all that clear, but my first point with regards to unlimited vaca policy is that even though it seems to be giving individuals freedom (like working from home can be seen to be), it doesn't always turn out that way in practice -- people are more likely to end up working more for whatever reason (inline with what you've articulated well above). I'm all for allotted days.

My second point was a general thought. The appreciation I have for SO is undoubtedly shared across the tech community; the SE platform has changed how we (not just techies) learn. I believe that they are an exception to the rule and that their ethos teases the best out of engineers. As knowledge workers we have our greatest impact in our distraction-free flow state. If work is good, higher output is natural. With the right environment, a remote situation could possibly enable me to stay in the zone more.
And indeed, a MiniDisc is a pile of poo (and Sony end of lifed them today!)
What? XNA attracted many new developers to the Microsoft stack. Many of them graduated to C++/DirectX, but many nice games were also built in XNA. Now, what does Microsoft have? Convoluted C++ code and super low-level API? Thankfuly we have great OSS projects out there like SharpDX [1] (for C# lovers) and ANX [2]/MonoGame [3] (for higher-level API lovers)!

[1] http://www.sharpdx.org/

[2] http://anxframework.codeplex.com/

[3] http://monogame.codeplex.com/
On the latter point, it's not a political handicap as long as religions Americans like are getting the taxpayer money for their schools, but once religions Americans don't like qualify for the programs, support starts to dry up: http://www.huffingtonpost.com/2012/06/13/louisiana_n_1593995...
Oh gosh, too late.
From past experience, planning for 30,000 simultaneous connections is in the right range. What they don't cover is peak association rate (how many people per second can associate to the APs and have the LWAPS/controllers not fall over. They also don't cover the connection rate (number of devices per second pulling and clicking through the AUP/whatever page). Simultaneous users is actually less of a problem than the rate at which those simultaneous users connect.
Yikes! Horrible article.

I took some flying lessons a long time ago but decided I'd rather let someone else fly me where I want to go on a much larger plane.

I have been designing, building, flying and crashing model airplanes and helicopters of all types since I was a kid. Slow, fast, gliders, jets, three-foot to ten-foot wingspan. I've even done the in-plane FPV camera thing --where you mount a camera in the plane, radio the video down to the ground and wear goggles that make you feel like you are inside the plane.

Flight simulators have never felt real. Never. Even with zero wind. And, if you do have wind, and, in particular cross-wind, landings can be a handful if you don't know what you are doing. And, yes, these are toys --sometimes $10,000 toys, but toys nevertheless-- yet the laws of physics are pretty much the same (save some scale effects).

I would never consider doing what this guy did. Kudos for having the stupidity to try it. I wouldn't. I've seen too many very nice model airplanes in the hands of experienced flyers get trashed on landing. Anyone can take off with a little instruction. Flying, turning, maintaining altitude, lining-up with the runway at the right place, time and speed and flying it in are entirely different matters.

I also have a relative who flew 747's. He couldn't land a model airplane to save his life. I put him on FPV and he'd grease the thing in. Interesting.
Nice to see a substitute for the pricey Visio
Do we need radical change in computer science education?
> Few things are as inefficient as government bureaucracy.

I haven't found this to be blanket true. My dealings with the Danish government are a dream of transparency and efficiency compared to my experiences interacting with large American corporations. I had to go through more bureaucratic nonsense (including urine testing!) to get hired for a shitty summer job in high school, than anything I've had to do for the Danish government, and that even includes getting a visa.
Amazon’s Future Is Not in Selling Stuff — And That’s a Good Thing
Honestly, this is not my field of expertise by any means but one of the top 25 wines randomly selected with quotes, reviews and history with a simple way to cycle through other wines or see the entire list. Maybe scrape amazon + wikipedia?
Stormpath (San Mateo, CA)

Stormpath is an easy, secure user management and authentication service for developers. We're looking for
- Core Java developers
- Front-end engineers
- DevOps
- Developer Advocates

It's a bonus if you love security, if password breaches make you angry, and if want to help developers get busy with API-based architecture. The team is smart, fun and friendly, and we've got some great announcements coming up.

Check out the jobs page at http://www.stormpath.com/ or email your jobs@stormpath.com
Do you want [...]

No. I have stated explicitly what I want and only one of your points (strip location data from files that the phone created) was part of it.

Btw GeoIP is not equivalent to a GPS tag and rather useless on mobile IPs. Try looking up your own if you don't believe.
Official blogpost: http://blog.twitter.com/2013/02/keeping-our-users-secure.htm...

Edit: I wonder if the bad guys were able to access private Direct Messages, too. There's always talk about resetting passwords, but nobody ever mentions all the other confidential data that might be pastebin'ed later.
First thing I thought too - Dead Pilot? That's a damn emergency if there ever was one. You want everyone and anyone listening and nobody talking.
Didn't looked into it but I guess you just need to pass the code as a string to the WW and then use new Function to generate/run the code inside it.
Hmm. Perhaps that explains why I got an email from them saying my account was compromised. Specifically, it said "Twitter believes that your account may have been compromised by a website or service not associated with Twitter. We've reset your password to prevent others from accessing your account." It then went on to imply that I was phished, which is extremely unlikely (not only am I incredibly paranoid about that kind of thing, but I haven't actually entered my Twitter password on any website in a long time. I just use the mobile app on my phone.)
What about a construction worker working on a house? A McMansion? A skyscraper?
Another way to put it is every four weeks you are 'working' a full week of overtime.
Adding another Amen here. I work from home, and I can get done in an hour or two what most of my colleagues take all day or even 2 days to complete. Why? Because I'm left alone!

The only time I work is when I want to work. That means, in order for me to tackle a project, I have to be motivated. When I'm motivated, I get the task done better, more quickly and more succinctly the first time.

If I'm forced to sit and stare at a screen and made to feel guilty when I'm not working, I'll never be motivated for anything. And working on something when my brain keeps saying "Fuck This!" is damn near impossible. I'm more likely to put some sort of half-assed hack through in such a scenario.

Some people, like you and me, Aaron, can motivate themselves and make sure things get done on time without someone standing over them. The manager standing over you scenario comes from a world where work is supposed to be dull, soul-crushing and horrible. Yer not supposed to want to go to work, so we have to stand here and make sure you do everything.

Helps to be passionate about what you're doing.

But yer also very right about dividing between work and life. I often find myself replying to work emails at midnight on a Saturday night, or working on a project on Sundays, or even while on vacation. In such cases, it helps to have a spouse who can shout at you to put it down.
"Pain" is a very good teacher. It slaps you in the face and tells you're an idiot.

I love this sentence.
The best code in the world is usually written faster and better by a single dood in a basement working non-stop for a couple days than it is by teams working for months.
I agree, and that's part of the problem I think I'm trying to solve :)

Some of the things I'm throwing around with my buddy is possibly having an mobile app as an endpoint so that email addresses don't have to be given up at the register. However, I believe in trying keep simplicity as a priority.
The timing of this hack, and the fact that Twitter was (at least at one point) a Rails app, and still uses Ruby on the front end, makes me think this is likely a YAML vulnerability exploit. Can anyone confirm/rule this out?
Managers who have nothing to do love to go after people for stuff like this. When a manager's job is just to crack the whip, not to remove barriers, things get bad pretty quickly.
Seems like all they can do is match usernames to emails at this point, if the passwords were properly obfuscated.

Although... session tokens are gone, but could have been exploited during the window between the hack and the token purge, right?
I wonder if this is related to the Rails YAML issues (https://news.ycombinator.com/item?id=5145397)
Hasn't the largest increase in tuition costs come from paying so many new administrators? Let's start there before we start cutting lectures and class time.
Oil contributes about 3% of the Danish government revenues (~US$5 billion out of ~US$150 billion), so while it's nice, I wouldn't say it has a "huge role" in financing the state.
Me too, and I've never attached an app to twitter. (I've got an account that I basically have signed into 3 or 4 times in 5 years). I'm curious why my username came up as being compromised, unless they're doing something sneaky about updating all passwords older than x yrs old.

edit: The attacker got salted password hashes. That explains it.
Yup, just got the same email. I really wish they had linked to the blog post and explained the situation in more details instead of using the standard email template. It's interesting though that one of the recommendations was to revoke access to third-party apps.
There are a lot of people in prison who wish that was a defense.
My bet is Chinese govt sponsored hackterrorism
I sincerely hope Twitter would know better than to leave those vulnerabilities exposed on any Rails code they're still using. Also, that probably wouldn't count as a "sophisticated" attack in their book...
Read the last part of this, about how RJ Mical wrote the Amiga OS:

http://www.sdtimes.com/blog/post/2013/01/24/Concentration-is...

RJ stepped up. He volunteered to write the Amiga OS from scratch, entirely by himself. Of course, he had one major stipulation: no one was to bother him for the next 18 months. No meetings, no phone calls, no "Hey RJ, wanna go get lunch?" For the first 12 of those 18 months, RJ wrote the code in the office. But then, it was decided that the 30 minutes he was driving from home to the office and back again each day was too detrimental to his progress. RJ moved into a hotel near the office with just his clothes and a computer.
What did you study? My father did the same thing as you, in the 1960s, and still raves about how great the community college was - it was small enough that he could do whatever he wanted in the chem lab because the prof knew him. I've looked at the catalogues for community colleges though, and I don't see how I could have gone there without drastically changing the amount of material that was covered my degree. They just don't offer the math and engineering classes that I took in my first two years.
Show HN: Markdown + LaTeX math in the browser
Maybe they stopped the hackers in the middle of dumping the database and they only got away with the earliest accounts created.
Those are points that I definitely thought about and I am trying to see if there really is a market for this. The more I see it though, as you pointed out, is that it might not be successful on a large scale (yet) but perhaps will find success in a niche market
Why the fuck is it 2013 and Twitter doesn't support two factor auth?
See, this is where companies can now "game" HN. Instead of the the clearly more appropriate, "Twitter user accounts and password hashes compromised", we instead get, "Keeping our users secure".
CSSTrashMan: CSS Improvement tool for your site
Oracle releases critical security update for Java
Great UX, clean interface, easy to use, good job!
I assume if they did then it would only be the accounts who don't use it who were compromised? I.e. probably about 245,000 accounts.
Likewise.

I got a similar message several months back, but that wasn't part of a larger leak; apparently some website I'd used a while ago had been compromised and I was using my throwaway password on Twitter at the time. Suffice to say, it's using a real one now - fifty-some-odd characters of random garbage generated and stored by 1Password. It's never been used anywhere else, so getting this email a second time just now was quite a shock (this time, my reaction was "really guys, again?" rather than "wtf?")

To their credit, they caught the first instance crazy-fast (my password had been reset automatically within about five mintes of a rogue tweet, though not before a friend texted me about it). This time I didn't see any activity at all, so I assume it was more proactive.

I'd still like an MFA option, especially with how infrequently I actually log in to twitter. However, I do like the "check your OAuth grants" page you're taken to after changing your password.
Eh?

Your Cessna 172 isn't doing Mach 1. It's certainly possible to open the door at any speed a light aircraft can achieve. The door/canopy my get ripped off, but that's kind of irrelevant.
Bank of America website has been down for 6 hours
Iirc, my usernumber is ~ 700k. So, probably an early version of the hash, unless they silently upgrade on logins.
To me it seems really silly to spend 100K to learn things that are only at a Bachelor's level. People who did their bachelor's in other countries like France or Sweden, for free, are learning the same things from scientific papers right now. Even if the Bachelor degree is harder or better, there is no difference in the end because it's only Bachelor level stuff.

Harvard or MIT cannot make you into a powerful machine. The most important thing to achieve a big scientific career is to be born with the genetics and the willpower to work. It seems that going to Harvard or Stanford takes care of the latter part since you are betting your life on a few years of your life and you are taking extraordinary debt to do so.
If you're getting it all for free, you probably won't work as hard right? But after a few years, if you go to the master degree or the doctorate, what difference does it make? None.
It would be nice to know how well-protected the passwords were. (Were the salts also accessed? How were the passwords hashed?)
Listen, I'm not saying that the makers of the program are not interested in making it better. I would hope, and assume, that anyone who spends a lot of time writing code wants it to work as well as possible.

The comment I replied to implied that since they made so much money it is somehow odd that he is still able to find problems that perhaps have existed over several versions. My point is simply that making lots of money could demotivate someone from working harder to perfect it if the market is telling them that the product is pretty damn good as it is.
Could be. My account dates from 2006, and my userid is sub 50k.
Until some other blog puts the real deal in the headline and gets more upvotes, like this one:

http://news.ycombinator.com/item?id=5154415 - "Twitter Hacked, 250,000 User Accounts Potentially Compromised"
http://www.mercurynews.com/business/ci_22500216/bank-america...
High Level Architecture for Building Zero Carbon Internet Networks
Most people also don't want to pay attention to politics and when possible refrain to participate in elections. How well is it working?