skysight-inc/HackerNews huggingface dataset:
Hmmm... but you could always reset your username by email, right? You could also use a separate unique identifier for support purposes, but not use it for authentication.
Those with original iPhones, 3G, 3GS or original iPads no longer get updates.
Your age is only one factor among many other factors. Especially on the internet - how would anybody even know how old you are.
That consulting site is so MVP. I love it.
I agree. If jobs of the pass are supplanted by automation that'll just give the markets the energy to reflect on new opportunities with demand and then jobs.

The jobs the OP is referring are not coming back and that is good, but new jobs will be replacing them. I don't see why for any reason why new jobs will not be generated.

If meaniful work does go away what does that mean? Everybody has everything they can imagine?
Why does growth even need to keep occurring?

http://www.motherjones.com/politics/2010/05/peter-victor-def...

"Technological advances make workers more productive every year. In the mainstream view, these labor efficiencies make goods cheaper, which leaves consumers with more disposable income—which they invest or spend on more stuff, leading to more hiring to fulfill demand. By contrast, the no-growthers would do things differently; they would use those efficiencies to shorten the workweek, so that most people would stay employed and bring home a reasonable salary. If new technology continued to drive productivity gains, citizens in a nongrowing economy would actually work less and less over time as they divvied up the shrinking workload."
It'd really suck if they could forge traffic from you that looked like a failed login attempt and that resulted in you getting banned.
Similarly "ufw allow from {ipaddress-you-will-access-from} to any port 22" sounds like a good way to accidentally lock yourself out unless you have an out of band backup
For webapps, I agree. There is no progression of state in a webapp's "controller" object: it's one shot and done.

For native apps in frameworks like Cocoa Touch of course it's an entirely different ballgame. A view controller has quite a bit of state, usually some different modes, maybe some enforced state transitions. So the controller pattern makes a lot of sense there.

The author is spot on about how some architectural oddities like one-method-classes come from Java's lack of functions as first class objects.
fail2ban can deal with much more than SSH login attempts. I believe you can configure it to do arbitrary actions on arbitrary log events. Perhaps it comes with a block for HTTP, too?

Seeing as he blocks SSH and only allows it from his IP, there won't be any SSH attempts reaching sshd at all, so fail2ban wouldn't be doing anything if it was looking at SSH only.
If English was a workable language, English majors would have nothing to base their theses on. The 'had had had' exercise highlights the absurd nature of English. This philosophy on English is why it stopped evolving after its peak - post English after the death of the worlds greatest playwright Shakespeare (who wrote phonetically, may I add).

On the other hand it does give an insight into syntax trees and parsing.
This guy keeps popping-up. Very impressive for a years worth of work. We should be lucky to have someone willing to do this so openly, even after the rebuff from the community. He could have easily gone black hat and we'd all be the worse for it.
Mechanical Engineering. I suspect it'd press many of the same buttons as web development (tinkering, 'making something', etc)
A personal script, focuses more on getting a server ready for my preferences than it does on security: http://pastie.org/pastes/6376503/text
A dual system, if you wanted to just turn out programmers who know the basics of scripting, how to use a language, and build applications might work.

If the "dual" system were to include architecture, algorithms, discrete math, and deeper subjects that a typical CS curriculum usually covers, what's the point of an apprenticeship system if it is replicating academia?

I can see a need for a trades like class, but here in the US we already have an assortment of community colleges, certificate programs and the like that replicate that model.
Well, no.

I've been in network engineering for 12+ years and I fundamentally disagree with a lot of what is said about "networking" and interop by many programmer-types (not casting here, but) on HN. Yes, yes, you may understand system DevOps to a point, however I'm not sure you've spent a significant amount of time studying Dijkstra's algorithm or truly have an idea of how to deploy a global IPv6 overlay. I'm also not trying to be snide here but I feel that, often times, many things that come up on HN are just fundamentally designed wrong from PHY all the way up until the devs get a hold of the rest. I've been in a very successful startup (think one of the top online backup services) wherein their network was run on commodity junk hardware. They were asking me how I'd troubleshoot this, that and the other thing - obviously with no debug (this guy said that with a grin). First and foremost, you designed it wrong - I can show you inefficiency in about 10 minutes of performance engineering that I would have designed around without thinking about those things. So, yes, I can waste time tracking down a bad NIC on your network, but if you feel that you've earned geek cred because you fired up Wireshark and parsed through a few simplistic ARP tables - you haven't impressed anyone but yourself. That's when I realized I was working with professional developers, and not network architects.

Your simplistic view of FHRP is trivial at best. Maybe if you were talking about how you'd design fault tolerance into a virtual link, say an LSP, with something like BFD in your design I'd be more impressed than conversations about proprietary redundancy protocols of which most network engineers won't touch for a variety of other reasons than the big "C".

</endrant>
that design costs $10k, appreciate it!
I was stunned when I got the notification email to moderate him =D
I also recommend changing the default SSH port.
I consider username/email to be pretty synonymous, don't you think?
While true, I'd like to note that the article's author does have OOB access.
I agree with the basic argument that economic growth has a weakening correlation with job growth. However, the idea often proffered that you solve this by making people with jobs work less is silly. First, at the limit spreading the work around over more people still results in the same outcome. Second, it also assumes that the real problem is a shortage of jobs when the problem is actually a shortage of people capable of doing jobs where it makes economic sense to employ a person.

The problem is that we have a (figurative) glut of job openings for neurosurgeons and a severe shortage of neurosurgeons. The answer not to make the existing neurosurgeons work fewer hours; they are serving a valuable, irreplaceable (in an availability sense) function every hour they work. You can't give a lawyer, janitor, and accountant a crash course in neurosurgery, split the job between them, and expect a comparable result in the aggregate even though you created more jobs. At some point we will have to come to terms with the idea of decoupling a job from a decent life in the same way that jobs are being decoupled from economic growth.

The limit of this scenario is interesting as a hypothetical. When we get to the point where only 5% of the population is employable and they are all employed with very valuable skills that are in extremely short supply by definition, how are those people treated once the vast majority of the population depends on their continued work while 95% of the population no longer needs to work and is not usefully employable in any case? Can the 95% not working force the 5% to work long hours because there is a desperate need for their skills and talents which are not easily replaceable? It is a different political dynamic than when the majority of the population is contributing to the economy that supports society.
I always loved this idea of business, it allows for you to make some extra money when you have time. I remember another product a couple of years ago that didn't do so well. It was located in Georgia, it has since closed down. The biggest problem they had was with the ability to scale this product to keep the attention to customers high while keeping costs low.
I find it very bad practice to blindly pass -f to commands.

chown deploy:deploy /home/deploy -Rf
It would just been unnecessary overhead to be honest. Remember everything that is encrypted needs to be decrypted and depending on the complexity of the encryption algorithm being used, it could end up causing more problems than it would likely solve. I often forget my usernames for various services so being able to be sent my username without having to reset my password or anything is very helpful.

A properly built web application should throttle dictionary attacks out-of-the-box and safeguard against these kinds of common username and common password list attacks which are very inefficient. Plus, if the attack is originating via a login form you're not really protecting anyone because the username and password are being sent as plaintext to the server and would be encrypted anyway. Throttling and banning rapid login attempts is the only way to efficiently go in this instance.

The only benefit I could see is if someone were to gain access to your database and dump out all of the rows of your users table, then encrypted usernames might make sense (but still not in a way) because you'd most likely have identifiable unencrypted information still in the database like names, locations and email addresses. If you were to encrypt everything, you're crazy.

You would then run into problems if you were running a forum for example and wanted to show the usernames of users online or the username of someone who authored a thread. Think about it, you'd be decrypting that username and then caching it somewhere in plaintext anyway (unless you fancy straight-up repeated database calls for the same information over and over again).
OTOH, GitHub does have an API and automate-able mechanisms for submitting pull requests. An app could definitely be built simply for displaying relevant (say, nearby location of mobile device) information and allowing the user to correct any mistakes they see and pushing that as a request for fixing it.
Because for the latter scenario to hold true every society and organisation would have to agree to stop chasing growth. How would that even be done? Have a universal law that sets a ceiling on the amount of work one is allowed to perform in a week? That is unrealistic.
And, when some dev screws up by pushing a poisonous build, there is no way to figure out who to contact to fix. I generally have an extensive pam+LDAP setup to control Logins. Having said that, if I am trying to use keys, puppet filebucket works for me.
You're absolutely right. Thanks for catching that!
Wow, just... Wow. So. Far. Off. Base. (see my post above)
I was never against Egor, I don't know that he had a lot to apologize for -- but others do. Either way it's very mature of him to offer apologies. Shows personal growth while learning and demonstrating very succinct security POCs. This kid is one to keep your eyes on.

Egor, if you make it to NYC, let me buy you a drink.
As a 'UI', SIRI was pretty cool, but if you compare SIRI on an Apple device with Google Now on an Apple device, both of them use Google to do the 'search' part except that Google Now's integration with the search backend gives it more visibility in what you are trying to find.
Apps Bloom Into an Industry Forecast to Hit $25 Billion in Sales
"-Rf" not found... :P

flag arguments should go before any other arguments to be compatible with the most Unix systems.
Bah, thanks for the link.
I was introduced to this story in a computer science class assignment which tasked me with replicating this pair of programs (it ran in Linux). Testing it was a PITA!
I hate it when people do that, myself. Especially when you have a lot of other tools, many of which don't take port arguments easily.

IMO best practice is to firewall off everything except some bastion hosts or VPN gateway.
Thanks for the catch! Fixed
Age is irrelevant. It's all about what you know and what you're willing to know that determines whether or not you're good at something. I've worked with web developers twice my age in their 50's. Some of them started programming in their late 30's. It sounds like you're proficient enough, so you'll be fine. It's all in your head my friend.

I often worry that being 25 myself is a cause for concern because non of my startup ideas have taken off, but I figure I've got my whole life to try and make a startup work.
The majority of time I am hunting for a good price the Invisible Hand extension takes me to Amazon as having the best price. Some few times it tells me that the item is maybe 1% to 5% cheaper in Ebay (the last place I would buy from).

So in a pragmatic way (considering all the potential risks and waste of time/money) Amazon seems really to be the cheapest possible way.
Totally agree. If you stick to good security practices, working around a non-standard port is an unnecessary annoyance imho.
There's ChrUbuntu, which is easy to install but gives a barely functional trackpad, no sound, and a 75% chance of hanging on wake.

Supposedly 13.04 is significantly better, but upgrading is stupidly hard and I've yet to manage to do so (currently trying to figure out how to work around a known bug in Plymouth.) But even then, OpenGL ES may or may not work yet, and unity apparently doesn't work in 13.04.
Supply and demand? Really? There is no limit, no ceiling for things that truly inspire. If you make something with passion and skill - something that inspires others - you are probably going to do very well in life.
I do a lot of this kind of work for gmusicapi, and I still keep a Windows VM around just to use Fiddler.

Does anyone have recommendations for other tools? I came away from Burp and Charles disappointed in the past, but that was some time ago.
You would think that, but the reality is there is a whole bunch of opportunity right now that is not being seized. Smith could change his life if he made the choice to. There is not an overflow of game developers, or people writing code worth being inspired about to the point where people who do it are not able to make money enough to live. People think what you are saying and assume it applies currently, and that they have no hope so they have to do the boring work they don't like. It does not apply right now, and it may never actually apply just because of what so many people are ingrained to believe.

>think TPS report generators or whatever

Value systems are not universal. You could take the most horrifying job you could think of and someone would take pleasure in it.

> being allocated

No one is ever forcibly allocated. Everyone has a choice to do what they want to do. If the ultimate horror reality of there being too many good games being made and not enough people to buy them all to the point where no one could make a living making games happened then people could still compromise and go down the list of things they genuinely enjoy and do those instead when they find something which can make them money. I don't know enough about Smith, but if he's not doing what he is doing as a temporary stopgap and he believes he is stuck forever doing code he hates then he is absolutely doing it wrong.
The screenshot is nice, but do you have a live demo of some business's testimonials, even if they're fake? I'd like to see how it sort of works and what my customers would be seeing before I create an account.
That is why fail2ban allows you to configure a whitelisted IP (your office, VPN, etc.) that will never get banned.
thanks! i'm already choosing a flight for June :)
Yes. A close friend of my family contracted AIDS sometime in the 80s. The person died in the 90s. I was a teenager throughout this time.

My parents were scared out of their minds for my health whenever I went over to play (but they let me). They told me to never drink out of a dirty glass, never touch any blood, etc ... stuff that didn't make any sense to me at the time and a lot of stuff that's incorrect.

Anyway, AIDS meant sure death in those years.
Dragon uses vxworks: http://www.spacex.com/downloads/dragonlab-datasheet.pdf second page, under Flight Software
Keys can be brute-forced.
Korean Words and Phrases for TOPIK Beginner 02
Yep, although most linux dists now have "/dev/mem protection" meaning that on stock distro kernels (Ubuntu, CentOS, etc), access to actual "physical memory" is disabled.

Ref: http://lwn.net/Articles/267427/

OK for driver development. If you need access to physical memory you have to compile a kernel with unrestricted /dev/mem.
Here is a really neat look at a historical analogue:

http://www.context.org/iclib/ic37/hunnicut/

Kellogg at one point realized they didn't need very many people-hours to produce their cereal, so they opted to move to 6 hour shifts 4 days a week. The point is that you don't have to cut jobs, you can cut hours. The side effect is that those workers have more time for their family and leisure activities. Since leisure is the basis of culture, such an arrangement would be helpful to society as a whole, even if the workers had to take an overall pay cut.
Don't do this. It adds almost no extra security and makes it hard for routers that prioritizes port 22 traffic as interactive.
How does UFW compare to the rhel firewall configuration utilities?
Here's how it works:

"buffalo" can function as a verb (bully) and a plural noun (bison).

So we can write "Bison bully bison." as "Buffalo buffalo buffalo."

I'm going to tag my groups of bison with numbers.

> Bison(1) bully bison(0).

> Buffalo(1) buffalo buffalo(0). (3 words)

Now, we can qualify bison(1), by stating that they are bullied by another group of bison, which I'll call bison(2). We can rewrite "who are bullied by bison(2)" as "bison(2) bully" (similar to rewriting "food that is liked by me" as "food I like") so we get:

> Bison(1) who are bullied by bison(2) bully, bison(0).

> Buffalo(1) buffalo(2) buffalo buffalo buffalo(0). (5 words)

We can modify bison(2) in the same way we modified bison(1), by stating that they are bullied by yet another group of bison, called bison(3):

> Bison(1) bison(2) bison(3) bully bully bully bison(0).

> Buffalo(1) buffalo(2) buffalo(3) buffalo buffalo buffalo buffalo(0). (7 words)

And so on...

> Buffalo(1) buffalo(2) buffalo(3) buffalo(4) buffalo buffalo buffalo buffalo buffalo(0). (9 words)

> Buffalo(1) buffalo(2) buffalo(3) buffalo(4) buffalo(5) buffalo buffalo buffalo buffalo buffalo buffalo(0). (11 words)

So that gives us sentences of lengths 3, 5, 7, 9, 11, ... words. We can add a word to each sentence by just adding the qualifier "Buffalo" (meaning "from the city of Buffalo") before buffalo(0). This gives us sentences of lengths 4, 6, 8, ...:

> Bison(1) bully bison(0) from the city of Buffalo.

> Buffalo(1) buffalo Buffalo buffalo(0). (4 words)

> Buffalo(1) buffalo(2) buffalo buffalo Buffalo buffalo(0). (6 words)

> Buffalo(1) buffalo(2) buffalo(3) buffalo buffalo buffalo Buffalo buffalo(0). (8 words)

So now we just need the sentences of lengths 1 and 2, which we can do by using the imperative. I.e. we give the general instruction "Bully." or the more specific instruction "Bully bison.":

> Buffalo. (1 word)

> Buffalo buffalo. (2 words)

The issue remains: can we call a sentence "valid" if it is entirely incomprehensible?
Hey thank you for the clarification!! I didn't realize there was any encryption at all with Tor. RTFM I guess ;)
To prevent having to log into root via remote console, set up a second backup account with an ssh key and sudo access, and then put that key somewhere safe.

The chances of both that and the deploy user getting corrupted at the same time is unlikely.
My big thing is making sure 1) the machine comes back up cleanly after a reboot and 2) is current on all patches 3) is running as little as possible.

Also a big fan of externally verifying what ports are open, and making sure the system is in monitoring, backup, config management systems. Config management is kind of optional if you have a small number of servers which don't duplicate configurations, though, and there's often no need to back up the OS, but any data should be backed up automatically.
Can't blame you for adding a plug in there. It's your anniversary after all :)
There was a sign in front of a lake saying:

PRIVATE PROPERTY
NO SWIMMING ALLOWED

But by adding a few punctuation marks:

PRIVATE PROPERTY?
NO, SWIMMING ALLOWED.

The meaning of the sign was reversed.
This article's argument is, in a word, crap. The author wants to compare efficiency of cars vs. bikes on the basis of fuel costs (after a scattershot discussion of CO2 emissions from those aerobically respirating vs a bus spitting out fumes), then cites fast food as a baseline fuel source. We can game this anyway we want: why not eat 7 bananas, which are $0.20 at my local market, and claim differently? And let's conveniently forget that EVERYONE needs food, regardless of how they expend or conserve their caloric "fuel".
I'd like to see a more scientific analysis of carbo emissions of bicyclists vs cars vs public busses. I strongly suspect bikes come up with high marks in the average case.
Probably more related to "real world" runs than benchmarking, but ramping up connection tracking table space is rarely a good idea - unless you turn of stateful iptables rules entirely (which for a benchmark like this should be fine).

The other (possible) option for real world use is to tweak nf_conntrack_tcp_timeout_time_wait and nf_conntrack_tcp_timeout_established to flush done connections from connection tracking quicker.

Have had some good use with this - read more here:
http://blog.engineyard.com/2012/linux-scalability
Is there a web app that I can just have control my servers from? I'd like to do puppet/chef, but I read that its not 100% working for Windows yet (I need to manage both) and it sounds overly complicated.
Or some form of socialism. Even a guarantee of some minimal income, even for the unemployed, should do the trick. With this method, you can think of the economy as a sliding scale of jobs that need to be done, and people willing to do them. As you increase the minimum income, you decrease the people willing to do the jobs, and as you decrease the minimum income you increase the people willing to do the jobs. The trick is to find the income that makes the two numbers equal. Now, as technology allows people to work more efficiently, the economy can support a higher effective minimum income.

We can see how this could work even in our current system. At the moment, we have people willing and able to work who cannot. If we start giving every citizen some amount of money, either the unemployed will stop wanting to work, or the employed will decide that they would be happier working less because the additional money is no longer worth their time.
You don't have to re-learn puppet/chef/cfengine/bash script every time. You learn it once. It requires much less effort to "maintain" than manually updating more than 1 box.
I find RTTI to require fairly little cognitive load and I don't find resolving memory ownership to be particularly difficult.
Let's Get Rid of 16:9 Laptops Forever
Show HN: Hackernews for Mac
I wonder what increased automation has done to the people hours since then.
I wrote Hackernews for Mac. Feel free to ask me questions :)

EDIT: Quick shout out to Grant Paul who built the fantastic newsyc app for iOS (http://newsyc.me) which this is partly based on and inspired from.
Yeah for some reason it's still snowing and below 30 most days.
About the topic though: I'm really excited to see what people come up with... I might even have a few ideas
That's a good alternative. At least for Linode, remote console is fairly easy, but some don't offer this feature.