skysight-inc/HackerNews huggingface dataset:
The progress element | HTML5 Doctor
8 Most Promising Startups for 2013
I've run a mail server for 5 years for a NGO. Running your own mail server is not as easy as running your own LAMP stack. The is SPAM, IMAP, bounces, ... and many more issues with running your own system. My Postfix is only redirecting to gmail accounts. If that works - fine, but that's probably not what a small non-tech-savy business needs.
Prototyping on the Web
Their video says "patent pending technology". I already emailed the EFF's patentbusters with a link to prior art.

It would be such an awesome thing if they weren't trying to take it away from the rest of the world.
Also there is cdist (http://www.nico.schottelius.org/software/cdist/) not so popular but interesting.
Hm. This seems odd to me - the system certainly costs some money to install, and the person paying for it (the driver) derives minimal (no) benefit from it. Why would the driver pay for this system if not forced to by a regulator? Does it result in lower insurance premiums?

I understand that it is nice to drive a car that is more safe for other people in the case of an accident, but you can do that cheaper by driving more slowly and more carefully, surely? I would think that if you are the type of driver who cares enough about potentially injuring others to pay several hundred dollars for this safety system, you're not the kind of driver who is recklessly endangering other people's lives and thus requiring it.

EDIT: I don't understand this being downvoted at all. I'm not saying it is a bad or pointless system. I'm saying that the people most likely to need it are not likely to pay for it! Is the solution to enforce usage by regulation, to reduce insurance premiums for cars that have this system fitted or something else?
My comment on their page:

So if the real problem stems from the Oxford mail accounts being hacked and then used to propagate the phishing attacks, why not concentrate on that?

You should use 2-step authentication for the email accounts, so that randoms in some other part of the world can't just hack in to an email account and use it.

I was at SBS, and we were on Mircosoft Exchange servers for email I think. Unfortunately, afaik Microsoft doesn't offer 2-step authentication. Instead of blocking Google Docs, you should be moving all email systems to Google Apps so you can use their better security. We just did it at my company for a few thousand users and several domains - I think you could do it too.
The operational words, though, as you perhaps realize, are so far. While I'm not a fan of the nanny state, if you're taking fifty grand a year of illegal drugs, it's highly likely that in a few years you'll look back at this moment and wish you had taken a different path while you still had time and resources, before everything went to hell. You won't have the option, at that stage, of rewinding time, but you do have the option of doing something different right now.

Why not spend even one evening thinking it over, maybe talking about it with someone you trust, see what your options are? You are obviously smart and determined, and a drug habit doesn't have to be unavoidable fate.
is it a given in any email system that they see this though, i.e. would it even be possible to make it so that they couldn't see it?
Prometheus (2012) UI/UX
Is There Nothing We Can Do to Stop Chinese Hackers?
Google Maps, Now in Industrial Strength
This.

The only effective solution is to educate users, but that in itself is a difficult task.

Phishing attacks rely on users being gullible / distracted / ignorant. Telling users _not_ to be any of these usually results in angry answers such as "Are you implying I am stupid !?", and the important part of the dialogue where you explain things to be wary of is completely ignored.

Another way to communicate these things it to _phish your own users_. Email them a fishy message ultimately asking them their password for instance, the same way an attacker would. Of course, some phishing emails / sites look incredibly legit but in my experience most have noticeable deficiencies. If your users can spot at least those, then they can protect against a good number of attacks.
Once the victim falls for the trap, redirect them to a page explaining how they were tricked, and showing what they need to pay attention to.

You even get their passwords, so that you can do some analysis and see how many will change it following the 'incident'.
Why don't they block Microsoft Outlook? I'm sure a lot more scams come through it.
What part do you feel is a rip off exactly? This tutorial or ConvertKit itself?

I believe that the point of ConverKit is to simplify and streamline the process of creating a landing page and drip email campaign. It seems like a pretty good proposition to me! I personally found the step by step process in this little walk though very valuable - especially as I'm writing a sales page myself at the moment.
Highly-Available Load Balancing of Tomcat using HAProxy, stunnel and keepalived
>Running a email server is not hard.

That is true. However, Running an email server properly /is/ hard.

Security, maintenance, patching, journaling, litigation holds, bouncing, ssl/tls, dkim, etc.. It's not exactly as simple as apt-get install teh-emails
ansible has very readable concise YAML syntax[1]. Plus, no bootstrapping required (its optional, haven't tried it though) and works off ssh by default (also has a 0mq mode).

[1] https://github.com/ansible/ansible/tree/devel/examples/playb...
march 9, 2012: http://news.yahoo.com/blogs/technology-blog/volvo-introduces...
this is incorrect, the site does require you purchase a vendor account but this is from the site admin and not from another user. to become a seller/vendor on the site you just need money, about $500 USD I believe.
And yet there must be a reason Google Apps for Business does so well; it's cheaper and easier to have a dedicated company manage email (as well as other services, eg. docs, IM), especially if they are critical to your business infrastructure.
Show HN: Betting is like drinking - it's more fun when you do it with friends
Hey All,

We are looking for some feedback on our project: nitrogensports.com

NitrogenSports is an online sportsbook that is in early beta. We are doing something a little different by focusing on social interaction and user experience.

We are constantly adding new features, but we'd love some early feedback.

Thanks,

Morphanite
SSD Write Endurance Considered Sufficient
99.9% uptime is nice ( where I'm at right now has had server outages more often than gmail has had).

Having a decent spam filter is nice (I've had loads of false positives in things I've tried elsewhere).

There is the idea that google/MS could just fall off the face of the earth, and then I look pretty stupid having loads of things connected to that account. That bothers me enough to where important things get thrown onto an email adress I'm pretty sure won't disappear for a while.

As to reading my mail... robots are reading my mail. This is a pretty valid "Chinese room" in my opinion. Nobody's actually understanding my mail, what do I care. The ads are usually pretty relevant to things I need though (I've clicked on more of the text ads than I would ilke to admit).
Bill Gates ‘not satisfied’ with Microsoft’ products lagging
Fabric is a deployment tool, which makes it useful in many cases where something like Salt would be overkill, but is definitely not in the same category.
Lessons learned while updating 12 rails applications
Don Pako Sex Shop: Nominada en los Liebster Awards
12-year old boy was offered snacks, then executed
I cannot imagine how could somebody prevent browser extensions injecting code to websites.
As a happy user of ad-block I have seen some sites that force you to turn it off. Like iconmonstr.com But that can be easily circumvent.
What... balsamic vinegar is more calorie dense that Coca Cola?! Surely this must be diet coke right...?
I'm not a recruiter (thank god) - I'm a dev myself ;)
Parltrack and ACTA
I guess you could always enter your address but not your name. In case of trouble you could always argue that it was sent from/to someone else and has no connection to you.
Either I am misunderstanding you or you're misunderstanding how Google Forms is being used here. Who would switch what functionality off, exactly?
Even with CNC programming, a person has to have skills to properly mount and orient the work (center if on a CNC lathe, zero the coordinate system if on a mill), machine, and assemble. It takes decent skill to make a firearm with conventional machining.

The concern (I'm not saying it's a founded concern) is that 3D printing would allow unskilled folks to download increasingly complex plans and implement them with little skill. The pool of people with good CNC machining skills (and access to at least $10K worth of very heavy equipment) is probably less than the pool of people with $5K spare cash (ballparking what a future 3D printer might cost) and only basic mechanical skills.
It's nothing to do with Gmail Google Docs Forms are used as the destination for the phishing attack.
outlook could also be cut one day. Being a pay-service doesn't make you immune to disappearing (though it decreases the risk).
They ask "what's next?" at the end of TFA.

Here's what's next: Oxford blocks roads because criminals are using roads. Oxford blocks food deliveries because criminal are using restaurants to eat.

Seriously now: what's the Microsoft rebate Oxford got for taking such a measure?
I tend to 'git commit' and then 'git commit --amend' until I'm happy, then push to others.

I find it easier anyway. But the stash approach is interesting, thanks for sharing!
Your post suffers from fundamental attribution error, where you assume that the driver who hits the pedestrian must be reckless and dangerous driver. For example, I am a very inexperienced driver, and while I try to be as careful as I possibly can, to the point where people sometimes ridicule me, I still probably have higher probability of causing accident in near future than some slightly reckless, but much more experienced drivers.
whilst i agree with your overall assessment I do think that if the Silk Road admin(s) was/were identified and arrested it would be far from your usual drug trial and may involve a lot of expert witnesses dealing with Tor, .onion sites, bitcoin and importantly how they could link the defendant with SilkRoad given the anonymity provided by Tor. This would all add to the costs of defnding a client way more than your usual drug bust.
Balsamic vinegar is a reduction of wine, usually, so it's almost entirely sugary syrup.
Yet they apparently have not implemented 2-factor authentication or rate limiting for students' email accounts...

As others have pointed out, there are a few very simple ways to deal with this sort of thing. Rate limiting alone would like take care of the problem. This is probably a simple config update on the smtp server.
"In the absence of effective monitoring, it can be easy for over a million messages to be sent out before someone happened to notice."

Just wanted to point out this specific detail. They seem to be attacking the wrong problem, as many others already noted.
I use SLA 3D printing almost weekly for rapid prototyping (in the past I've used powder sintered 3D printing as well). If you can find the proper CAD file (I use STEP, or IGES), it can be made. If those plans were distributed on P2P, it would be as simple as importing the files, orient the build, and then press a button, then assemble after the run.
> Train your users where it is and isn't safe to enter credentials.

This demonstrably doesn't work. It reduces but cannot eliminate all instances of phishing.

> Don't give your users credentials. Have some alternate way to authenticate them like a login token.

Better, but scrounging up a few million pounds for dongles, plus the non-stop cost and effort of replacing lost and stolen dongles, is not easy for a university, no matter how famous.

> Put rate limiting on the ability of a single account to send out emails.

Many users have legitimate reasons to send out mass emails.

> Instead of blocking the site that was collecting the credentials, a better solution would have been to remove the email from the mailboxes of all the students.

Phishing emails are often varied into multiple templates to avoid being scrubbed this way.

They also tend to trickle in at random, rather than turning up all at once.
How for Startups to Survive the Valley of Death
http://docs.saltstack.org/en/latest/topics/index.html

"""
Salt takes advantage of a number of technologies and techniques. The networking layer is built with the excellent ZeroMQ networking library, so the Salt daemon includes a viable and transparent AMQ broker. Salt uses public keys for authentication with the master daemon, then uses faster AES encryption for payload communication; authentication and encryption are integral to Salt. Salt takes advantage of communication via msgpack, enabling fast and light network traffic.
"""
The risk of hitting someone is one of the worst things about driving. I would gladly pay a bit to minimize the risk of killing someone.
"the importance of the March Hare to the Aztecs"

a reference to an episode of QI, right?
Footer probably added after article:

"Brain Pickings participates in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn commissions by linking to Amazon. In more human terms, this means that whenever you buy a book on Amazon from a link on here, I get a small percentage of its price. That helps support Brain Pickings by offsetting a fraction of what it takes to maintain the site, and is very much appreciated."

However, the language is probably still deceptive if the author's back of the envelope calculations are even in the general ballpark, since the site could probably be hosted very cheaply.

It certainly raises an interesting question about ethics and journalistic standards when the publisher is also the editor and writer. In this case, not only is the site making more money from affiliate links than alluded but also tracking user preferences by proxy which is used to upsell more affiliate links.
From the article ...

"A Mastercard spokesman said: “Mastercard takes online safety and security seriously. We work closely with our part­ners to ensure the best possible experience when using elec­tronic payments.” Visa gave no comment. Pay-Pal did not return a request for comment."

I, for one, welcome our new bitcoin overlords.
Hm. My point was that I cannot see that the people most likely to use this system are also the people most likely to pay for it. I don't deny that inexperienced careful drivers may be interested - but the majority of careful, inexperienced drivers do not drive brand new Volvo V40 cars, and the addition of a pedestrian safety system won't make them do so!
I don't know about p7zip but the xz man page cautions against blindly using -9.
When did OUCS suddenly become a bunch of muppets. They had some credibility once that appears to have gone out of the window.
> * Train your users where it is and isn't safe to enter credentials.
> * Don't give your users credentials. Have some alternate way to authenticate them like a login token.

I manage barely a 100 users and I have talked to each of them personally. They're good people and can comprehend instructions. But they still fall for these every now and then. Training doesn't help. They are fantastic in their respective fields but to them, all prompt boxes and all login screens have the same exact amount of legitimacy. Just like how every spark plug looks the same to me. Training can help some users but most of them are going to fall for it eventually.
> I also wonder why so many phishing emails are getting through the university spam filters

It's usually customised for each university.
Does anyone know how outlook.com handles expiration?

In the terms it says you must log in every 270 days. Sounds like plenty of time but I have old gmail account which I use once or twice a year. It would probably have been deleted if it was with hotmail/outlook.

The worrying thing would be the email address going back into circulation with someone else. Wouldn't they start to get your mail? Couldn't they retrieve you password on websites with the associated email?

This scenario isn't too unlikely as the old gmail account I mention above is associated with login details for 50-100 websites. I simply moved to a new email address and only check it when I need to login into an old site and have lost the password.
> and the person paying for it (the driver) derives minimal (no) benefit from it.

If you're a psychopath maybe.
Perhaps you should consider that phrase code for "more use by important management types than expected" rather than mere students and lowly faculty.
The Landing Page Makeover Clinic is amazing, and one of the first places I'd start. Also http://copyblogger.com/landing-pages/
That's good advice for a lot of situations but it depends if your "sledgehammer" is assuming a certain starting condition.

In the authors example if he got it wrong and it replaced a load of non-links with links then running it again on the output of the first run isn't going to do any good. So he's suggesting replacing "git reset" with "git stash", both reset the repo to the way it was pre-sledgehammer but "git stash" also keeps around the previous results for comparison.
"Google Docs are nowhere near as important"

Sure. Which is why after so many people complained it is already back up.

Did you miss the recent articles about how spreadsheets were essential to many people? I know many SMEs and individuals which are doing nearly everything besides email in Google Docs. And what do they use email for? To send PDF of Google Docs to those that don't have GMail accounts.

In the recent "tools of the trade" for HN readers one of the webapp that came out the most often was Google Docs. It is also, quite arguably, seen all its functionalities and seen that it's made by a team of, what, 600 Googlers (!) the most advanced webapp ever.

I think you really don't realize how important Google Docs has become. And it is growing by the day.

There are people who create a GMail account only to get Google Docs after they've seen a demo of it.
I just want to re-enforce your second bullet...

It is 2013, two factor authentication is here and it is open source software. You can use Google Authenticator[1] for free or you can use something like the YubiKey[2]. If the students have a smartphone then Google Authenticator is on almost all of the major platforms.

[1] http://code.google.com/p/google-authenticator/

[2] http://www.yubico.com/about/background/
> Yes, they should have known better.

As they point out, connections to Google Docs are encrypted. There's no way for them to tell what is and isn't legitimate traffic.
Proof that the road to perfection is never-ending ... at least if you're trying to sell something to developers!
My wallet is obese.
This depends on your target users. If they only live in the Netherlands for example you have to target different devices than USA or China.

Testing on a few devices across the dimensions (resolution, dpi, cpu, manufacterer, keyboard[less]) then you are pretty save.

But I have experience where we tested on a range of devices, but the app still had problems on 1 or 2 specific devices such as the sony ericsson xperia mini.

So if you have the money I would recommend something like testdroid to be increase your testing confidence.
Easy way to remember, something bodybuilders know intimately: for 1g,

Carbs = 4 calories

Protein = 4 calories

Fat = 9 calories

Alcohol = 7 calories.
I find it very interesting that an imgur gallery with the same title made it to the top of Reddit the other day and a different link with different pictures but the same premise made it to the front page on Hacker News. Of course on Hacker News imgur isn't the default.
Bill Gates: We Blew It In Mobile
That's why you pay for a domain. Then you can move your address wherever you want.
But as a student, you are paying for the network.
I see a green blob and a blue blob.

What should do with it? :)
Very cool, but I'm not sure how I feel about the brakes being applied immediately. Maybe I'm missing some information. Do the brakes remain engaged as long as there is something in front of the car? If so, this could become dangerous for the driver. A criminal would just have to have his criminal buddy stand in front of a stopped car and the driver now can't get away because of the automatic brakes.
I never understood why people were so against targeted ads. By definition, targeted ads have a higher chance of being something I'm interested in. Isn't that a good thing?

And yes, they scan your email... news flash - every online email service has access to your email by definition. Either send it encrypted from the client, or don't send things you don't want other people reading.
"phish your own users"

Now that's the best idea I've heard all morning. You should be running Oxford's IT dept!
So Jesse (one of the founders of opscode (makers of chef)) used to work at amazon before he founded chef along with Adam. Adam had been working almost 2 years using puppet at other companies and it was pretty obvious he wasn't happy with the way puppet did things. I've heard that chef was closer to the method of thinking that amazon employed in their automated operations (which wasn't really exposed to the public). That being said, they're both fine solutions and are in use in a number of large enterprises (goog, etc.)...the key is to be automating your operations in some manner. Hell...use both and see which aspects are / are not important to you / your people.
You are right, but for a lot of people it doesn't matter if it's available for free somewhere. Right now, right here is his stuff from 'a' to 'z' with examples. Most people just can't find the good stuff and are in a hurry. His article puts a lot of what they're looking for in one place and he put a great deal of effort in to it.
I like its syntax too, its simple to understand and model[1].

[1]https://github.com/ansible/ansible/tree/devel/examples/playb...
Why am I always the last one to know?
unfortunately most of the University runs on Microsoft Exchange I believe, and they do not support 2-factor authentication.
> 99.9% uptime is nice

Pick a random (not broken) piece of hardware. Install debian stable on it with base install + postfix + roundcube. Configure: grey listing, black listing, and auto-update (relative easy, and there is a bunch of tutorials if needed). Leave it alone until once every 2-3 year where it will need a aptitude update, aptitude upgrade. It will run as long it has power and network connectivity. If you are a company and either the power or network is down, email is unlikely to be high on the priority list.

Spam: ~0. Might get one every full moon or so. After 5-10 years it might get a bit worse, but adding SpamAssassin tend to get rid of it.

As for Chinese rooms, do they leak information? Do they give out mail if asked by someone with money/power? Sure, one can say "I got nothing to hide so what do I care", but then that's what all email then must be. You can never again say: "This email is private and mine. I and only I have control over it". If you are a doctor, lawyer or any person dealing with private information, then it mean that any email given to you are defacto public.
One other cool thing: if your command starts with a space, it will not be logged to bash_history. For example:

$ echo 'this is logged'
$ echo 'this is not logged'
> Does SSL prevent the network admin from seeing the URL that is being visited?

My understanding is that SSL establishes an end-to-end secure channel, then HTTP is inside that channel. Consequently, GETs and POSTs are not visible to outside parties.
note: the pictures obviously have nothing to do with the "200 calories" part. for eggs, 3 eggs are shown with "150 grams" under it....
How a “revenge porn” site got built: fake identities to trade photos