skysight-inc/HackerNews huggingface dataset:
http://www.nuevocloud.com/

no shortcuts: the servers are built from parts to exact specs for the software (no S3!); a clustered file system (that stores files using filename + user + date/time.. so complete file history); webdav server.. the website is powered by my own engine.

Just launched 3 weeks ago.
It's rude not to email you back, but then again they don't know who you are or for sure how you got that info--all they know is that you have their sensitive data. Some lawyer probably advised them to act on the info but not communicate with you.

You've done a Good Thing, but like many good things, it will most likely go unrewarded.
So true, that's why I use Adobe Color Lava and Palettes Pro on my iPad. [1] [2]

This site is very convenient though, I'll definitely be using it.

[1] http://www.photoshop.com/products/mobile/colorlava

[2] http://www.maddysoft.com/iphone/products.php#palettes
> Rather than using typical targeted approaches like "spear phishing" with e-mails to individuals, the attackers used a "watering hole" attack—compromising the server of a popular mobile developer Web forum and using it to spring the zero-day Java exploit on site visitors.

> "The attack was injected into the site's HTML, so any engineer who visited the site and had Java enabled in their browser would have been affected," Sullivan told Ars, "regardless of how patched their machine was."

It seems it's high time now to start working with two separate profiles in a browser if you're forced to use Java - one internal-only with Java enabled, and the second for browsing the internet, with Java disabled (of course this works as long as your internal apps do not get hacked...).

Rather easy to achieve with Firefox (probably there are command line switches for Chrome as well):

1. Create two profiles, `external` and `internal`, using
`firefox -p`

2. Open external profile and disable Java (will be kept in profile settings)

Then, run first `firefox -p external`, then `firefox -no-remote -p internal`, that way links opened e.g. from email clients will go to the external instance.

To differentiate the two instances, you can install some theme: http://www.getpersonas.com/en-US/

Total paranoiacs could try to find/write some extension that will block all the pages other than approved internal ones in the internal profile (perhaps AdBlock Plus will do?).
Maybe he's off work? Maybe he's "decompressing" from a hard problem at his job? Maybe you should STFU and enjoy the free information you are getting?
I run 3 large oracle RDS instances I wonder if redshift could be effectively used the same way, we have been thinking about migrating to postgresql.
The true story of John Broder's Tesla Trip.
African Union Official Website Defaced - MauriHackers
Probably, but I'm thinking that it might be an approach worth taking a look at as an alternative to the current:

_.chain(array).map(func).filter(func).reduce(func).value()

Taking a look at returning an array-like (or object-like, depending on what you pass in), for that same use case:

_(array).map(func).filter(func).reduce(func)

... could be nice. The devil's in the details of interoperability with other libraries, as other folks note in this thread.
http://www.haskell.org/haskellwiki/Xmonad/Using_xmonad_on_Ap...
How about always using the whole screen for color selection, instead of the area of the currently selected color? This way a certain color will always be in the same spot on the screen, regardless of how many colors you created, and you can make several variations of a color more easily.
Data warehousing often involves star schemas, which means lots of joins in your queries. I'd love to see how a real world OLAP tool performs on this.
Pakistani Television Network Geo Tv Hacked - MauriHackers
Sure. My point was just that the head count alone probably can't account for the apparent burn rate. There must have been something else going on.
If your default browser still has the plugins enabled for Java, Acrobat and Flash you are asking for it.

In Chrome: go to chrome://plugins and disable all

Safari: Preferences, Security uncheck 'Enable Plugins'

Firefox: Tools > Addons > Plugins Tab > disable all

Don't use Flashblock or Javablock or similar extensions, they hide the applet, they don't stop execution.

You should always use a browser with all plugins disabled as your default browser. Run a second browser for trusted sites where you enter the URL in yourself.
Any solid alternatives HN could recommend?
Can I just reiterate, I didn't make this, this isn't a Show HN - just thought it was great and posted it here. Looking at the site, it looks like http://twitter.com/hailpixel is responsible - best direct questions and comments at him :-)
Run a copy of Windows in a VM and ditch Oracle's Java. That way you can run SSMS, etc...

I run Windows 7 and Server 2012 along with various versions SQL Server in VMWare on a Ubuntu host with no issues.
I didn't think the initial article made Tesla look bad at all.. It pointed out a few problems such as needing charging stations closer together, better awareness on electrical card and maybe a better understanding of the effects of cold on a battery... Other then that I thought the car and Tesla seemed fine ul until Musk's responses.
This is really nice, and useful, I would love to see more like this, but wonder if there isn't some room to join forces between the best JS libraries out there and try to create a common utility belt compilation (e.g. work to avoid conflicts, and namespace collisions, joint testing, shared convention and merge efforts on similar things) e.g. I would love to have the JavaScript equivalent of Apache commons / Guava (previously Google collections).

I mean, if there is one thing I do like about Java (when I can't use Scala for some reason), is those utility belt libraries (and JodaTime of course). Whenever I hit a wall trying to do something in plain old Java, Guava / Apache Commons seems to read my mind and have a data structure, or a utility to the rescue.

Do you think it's a good thing to strive for? Do you see it happening?
It scaled linearly, but also went unresponsive for five minutes. (Yeah yeah, it's a new service).

The default Postgres configuration is pretty weak. work_mem is set way to low, for instance, and that's bitten me a few times. I wouldn't say it's unrealistic--lots of people run with it that way in production and never find out how easily they could speed things up. Even me, for years.

But ultimately I'm more swayed by your interaction with it and I hate the endless benchmark tweaking that comes after every blog post about performance testing stuff. The point of this Redshift thing is hugeness first and foremost, so it's interesting.
>> Tales is design to scrape the web continuously, even when the domain being scraped blocks the scraper server ip; it goes around this problem by fail-overing to a new node (server).

And people wonder why the AWS machines get filtered.
You need to run this with a column store database like Infobright. Postgres is more of a transactional database, Infobright is suited towards the similar large dataset analytics that this is aimed towards.
That's only the retired folks and trust fund kids...
because it shows the estimated cost (plan) of the queries independent of the magically subtracted network roundtrip time. it also serves to show if the redshift even supports it.it.
#IBlameApartheidFor
Someone please tell me I'm hallucinating
It can't be... can it?
It's actually pretty easy...

The actual function being plotted is the two ellipsoids

1 = x^2 + (x - y)^2 + z^2 for x >= 0

1 = x^2 + (x + y)^2 + z^2 for x <= 0

Each of which which is just an ordinary ellipse but rotated a little along the z-axis. If you expand the square and by standard linear algebra techniques (see: diagonalising a quadratic form), you can put both of these in standard form:

1 = x^2/a^2 + y^2/b^2 + z^2

which confirms it's an ellipsoid.

Whoever made the original heart just took these two ellipses and then multiplied by the cosine of the height in order to give it some oscillations and make it look more showy, but the basic idea is just that: two ellipsoids, at opposite slant angles, joined along the middle.
I think the separate profiles is the better looking tinfoil hat. For everyday browsing Adblock is nice, but I think it falls short. Throw NoScript and RequestPolicy into the mix and it gets a lot better. My friends always laugh when they watch me browse the web because I have to enable javascript for any new site and then use RP to allow that site to make requests to other domains.
Why We Need The Math Police
jashkenas is being humble. He's actually the creator of underscore (and backbone, and coffeescript, and docco...).
Neat. How do I add grays?
How big is your data?
The handwriting was on the wall for this when Posterous built data export: http://thenextweb.com/insider/2012/12/28/twitter-own-postero...

I do give them a lot of credit for providing a means to export data (albeit a somewhat clunky one), because way too many services simply shut down without providing a reasonable way to get your data out.

Will also be interesting to see what the "key initiatives" that Posterous will be doing at Twitter are: http://blog.twitter.com/2012/03/welcoming-posterous-team-to-...
Usually you're right. Unfortunately we had a bit of a facepalm last year here in MN when the diesel-powered school buses wouldn't start at -10F or something. It turns out that in the state's hurry to push biodiesel on municipal vehicles, someone forgot that it gels at higher temperatures than "normal" diesel.

Thousands of schoolchildren were quite happy, though.
>when it's 10 degrees outside.

Not too long ago we had a week or so of 0-10deg [F] weather in the midwest, and my _petrol_ car didn't give me heat for most of my commutes.

What little heat I did have, I voluntarily left to the engine so it could get up to temp [knowing this is better for my car, and my emissions].

If it's going to be that cold, I bring an extra pair of socks and gloves. I don't blame my car that I _know_ is struggling to keep itself at operating temperature.

Not to mention, he had heated the cabin up to 74degF prior to that; no journalist can reasonably expect me to believe that a _brand new_ luxury electric car has worse insulation than an 01 Camry with cracked weather seals on the rear doors.

I'm sorry, but unless you didn't read the weather report and packed shorts and t-shirts, there is no way that 10degF ambient temp, in a well sealed cabin that has previously been heated to 72degF, is "white knuckle" weather.

---

I certainly agree with you, and with what I think was the larger point of Broder's review: this is not a _no compromises car_, even CNN's reviewer said that he had a bit of range anxiety on the longest leg.

Charging for an hour is a _compromise_, and criticizing it is well deserved.

A photo-op of the Model S on a flatbed truck, saying it broke down? That's no longer fairly deserved criticism: especially when you pulled out of a station with 32mi. of est. range for embarking on a 61mi. trip _knowing_ the battery was having range problems b/c of the weather.

That being said, considering this is a performance oriented car, I think the mileage was quite remarkable for an all electric vehicle. I'm honestly impressed, and I'm a petrolhead.

Once the fast-charge network is a bit more built-up? I can easily see myself planning long road-trips around it. -- On vacations we regularly spend 30-45 minutes at a filling station between tanks. Not because we _have to_, but because we need to stretch our legs, rotate seats, eat lunch, buy more snacks, maybe pick up a book, double check routes and reservations, etc. etc.
I don't think an hour at a station that has plenty of amenities is unreasonable for 200+mi. legs.
16tb per instance
Yes, the executive branch does submit legislation to the Congress. In fact, the current administration missed a required submission deadline for the budget which is just a big bundle of legislation.

Please learn how the US government works before the next election.
http://januscam.com/index.php/products/dual-camera-janus-v2

I've installed these in taxis. They have outside/inside cams (to make sure the occupants aren't pointing a gun at the driver). They have a wireless 2.4ghz wireless upload to upload the files when the car gets to home base. And they show telemetry, speed, gps, and impact/vibration.

They are for commercial purposes so they are probably out of the price range of most people ($400 I think).
Dear "Landlord" [ironic]
It seems to me that once you have money, it's easier to make more money through investing than it is starting more businesses.
Yes it did. The DOM was designed to be used from JAVA. which is why it seems so out of place and verbose in JavaScript.
I wonder what the most practical but effective defense against these kinds of exploits would be?

Company-wide install of NoScript? But that wouldn't save you if a trusted site got compromised.

Maybe they should prohibit use of all commonly targeted software? (Flash, Acrobat Reader, Java..)

This seems really serious. Surely someone must be working on a better way to protect against this kind of thing?
The SEOmoz API is free to use.
You wouldn't want to replace RDS (or MySQL/postgres) with Redshift for OLTP workloads. Redshift is built for analytics and complex query workloads. The major benefit is the ability to do MPP (Massive Parallel Processing) and distribute the work out to nodes. I believe you can have up to 100 nodes in the cluster with the 8XL machines and 32 with the single XL.
RedShift is tuned for analytics, so if you're using MySQL today for analytics, it could be a good fit. But if you're looking for more of an OLTP engine, RedShift is probably not the right choice for you.
Cool. :)

I wouldn't know a better way to deal with that with Postgres than sharding across instances. But my "big data" is about 0.75 TB so it fits nicely in one instance. I don't know how people with real problems do it.
Apologize for any grammatical mistakes. Typed this up as my lunch was coming to an end. If it wasn't already obvious, the person driving the civilian car was another cop, as both my mother and her brother found out later from someone who ran into the exact situation before.
Not sure this is a proper use of "Show HN"...
Ahhh, you meant on the RedShift side. I did not think of it. It would have definitely been better. Good point!

It seems that it actually supports it
http://docs.aws.amazon.com/redshift/latest/dg/r_EXPLAIN.html
Wordpress.

That might sound obvious, but it works and it's easy to setup. I left Posterous after they launched Spaces and went back to hosting my own Wordpress install. I host about 20 low traffic sites on a single Bluehost.com shared server that costs under $100 per year. Never had any issues. One click Wordpress install via SimpleScripts. It really doesn't get any easier.
Aaaand that's why I don't have the Java plugin installed. Anywhere.

I'd like to think that we're almost to the point of viewing Java in the same light as Bonzi Buddy or Comet Cursor; IT discovers you got Java on your computer again, they just sigh and re-image it, with some stern warnings to please not download such sketchy software.
According to that blog post, WordPress & SquareSpace have importers.
Firefox started blocking Java plugins in January '13. I wonder how long before other browsers follow suit.
The Ethical Startup
Sure I would. Some time back html did not exist, and knowing that someone decided <blink> was a good idea doesn't matter. And for loops only exist in some programming languages and are not that fundamental even if common.

I wouldn't even think to ask those questions in an interview.
I realize that I'm just throwing more anecdotes into the "NOT DATA" bucket here, but the last time I visited Russia I was driven around by my grandfather and uncle. It was probably one of the most terrifying things I've ever experienced on the road, and I've had a tire blow-out in a Ford king-everything truck, as well as losing power-everything in the same truck, both times going 70+ mph on a highway.
I would suspect that it would be related to Android development given that (1) Android SDK requires Java, (2) Facebook develops a native Android app, (3) Facebook does NOT develop a native Blackberry app (other mobile SDK using Java), and (4) the identified engineer(s) were on the mobile team.
I thought it was a reference to Brian Regan Live, 1997: http://www.youtube.com/watch?v=yxenUzZPFiQ#t=01m56s
There is one specific step that everyone can take to eliminate approx 90-95%+ of drive-by-zero-day-exploits without really impacting your web browsing habits that much:

Disable Plugins on your primary browser.

Whether that be Opera/Safari/IE/Firefox - just disable the plugins. Then, all of these Java 0days, PDF 0days, Flash 0days won't impact you.

Keep a backup browser, that is not your primary, and use that for your SSL VPN (frequently Java), or Crappy Enteprise Apps like timesheets and Remedy (frequently Flash).

Yes, browsers have 0days as well, but they occur much less frequently (approximately 1/10th) than plugin vulnerabilities, and get repaired much more quickly.

For the really security conscious, of course, browsing from a separated/virtualized thin-client is even better, particularly if you can live with the hassle of refreshing your cookies every so often after a reset.
The User's Bill of Rights
This is where I point out that the idea of jashkenas getting a pull request rejected from Underscore would be pretty funny.

Not that it couldn't happen, of course, I don't know if he still is in charge or not. But it'd be amusing.
I gave a talk about Search-Friendly Web Development a few years ago:

http://www.slideshare.net/luigimontanez/searchfriendly-web-d...

http://blip.tv/rubynation/luigi-montanez-search-friendly-web...
Those instructions are rather outdated; they don't work well with Lion or later.
I really don't understand what's going on here.

* You're measuring request latency. What part of that (for RedShift) is due to the network? (EDIT: I re-read and saw you're using `SELECT 1` as a gauge for round-trip latency and subtracting it from the results. Are you only doing this for RedShift, or also for local PostgreSQL? To me, it seems like that heuristic is over broad -- it encapsulates not only network latency, but syscall overhead, query parsing, etc).

* In your tests, PostgreSQL without indices performs on-par with RedShift. Does RedShift not support indexing? Is there some metric you're trying to show by not using indices? As designed, this benchmark does not map to any use-case I've ever seen.
Actually, Broder constructed an experience around the narrative that he had wanted from the beginning.

Driving like a normal person would - letting the car charge and trying to keep it near full - wouldn't have matched the narrative he had in mind, so he didn't do it. The narrative he had in mind involved desperately limping from station to station trying to get a little juice, so that's the experience that he constructed.

How an unbiased reporter would have done it: charge to full, pay attention to mileage and time to charge, repeatedly charge to full throughout trip, discuss the time limitations (must stop for an hour+ on long trips instead of a ten minute gasoline stop...), see if mileage matches expectations, and so on.

That wasn't the story Broder had in mind.
Bonzi Buddy was my childhood computer hero....

Ahh to be 11yrs old again...
That's presuming Web browsers won't have any bugs in how they do webrtc that could allow someone to take over the browser.

Web browsers sometimes have bugs like this. I believe iPhone 1.1 had a bug in TIFF images that people used to jail break the phone
I agree with you here; I usually have underscored included in both the server and browser for my projects. Events seem like it could be useful. Sure Backbone gives you events on models and collections, but I don't always include Backbone models in my node apps.
Scrolling changes the saturation. Scroll all the way up to get grayscales.
Computer science students successfully boycott class final
Magnet Implants Can Actually be Pretty Annoying
A X11 window manager can only manage X11 apps.
> I have a more serious problem with your offices. A lot of folks just like you build these great offices, lure people like me in, and then wind up getting jobs as architects working for someone else.

And the even more serious problem here, by implication, is that this is actually considered a valid business model: I start a small company, we build a decent product, end up with a few loyal customers and bam acquihired. It's a common enough thing to be a valid goal. You may call your startup a success, for example, if you happen to fortunate enough to have this happen to you and your business.

What a peculiar notion of success we've been developing!
> The devil's in the details of interoperability with other libraries, as other folks note in this thread.

Indeed. I should have also mentioned that editing angular.js to work is fairly straightforward (~5-10 LOC), and this is probably fairly typical. So if you are willing to patch this isn't necessarily a blocker, and done right could probably be submitted as a reasonable merge request.
To be totally honest, I'm surprised it's taken this long.

Everyone knew a year ago when they were acquihired that Posterous would be discontinued. Why do I say this? Well, Twitter's bread and butter is in 140 characters, if they wanted to look at branching out into micro-blogging they wouldn't need to acquire a company, of whom the majority of their customers already use Twitter. (It was borderline a zero-value gain for Twitter if you take out Posterous' talent)

As it stands now, Tumblr clearly won (Although there has been a few emerging startups of insignificant size. Soup.io is one that springs to mind that is currently in an accelerator). If you are looking for hosted solutions for your startup's blog (or you are at all technical), I'd genuinely think about using GitHub. Start to pull your posts from Posterous and use a static content generator. Jekyll / Punch / Middleman / Hyde / Korma / nanonc / Frank + (any of the other 10 static generators)..

The operative point from using services that generate static content is that you are always in control of your plain-text content. Just push your new post and GitHub will handle your site. If you are worried about traffic on your site or extended build periods (I believe GH does rate limit static sites, and as a comment below mentions, on infrequent occasions builds can take upwards of several hours) then you can still use any other solution... Push to Amazon S3 and proxy through Cloudfront, then you will have probably one of the fastest, geographically distributed blogs on the internet.

This was always happening... Especially when you consider that for the last 12 months I haven't seen a single new feature since they were acquired. I've logged in, see the same "Posterous has been acquired" header for the last 12 months.

Move on, and safeguard your future content.
Love it, any code license info?
Meanwhile, you web guys are throwing away the last 30 years of progress on consumer application development, and starting from scratch.

Web apps are not documents.
Don't go with SoftLayer cloud. I had an instance and it was super slow. Lagged via SSH, HTTP, everything. Tried all kinds of things with their support who always pushed it back on my optimization.

I moved out to a dedicated server (with softlayer, very happy with it) and killed the instance. Restored the backup to a new instance and suddenly everything was speedy.
http://qntm.org/vending