skysight-inc/HackerNews huggingface dataset:
Your front end should not be doing anything "expensive," ever. If you're doing something like transcoding video in your frontend, your performance will go down the drain, for obvious reasons.

If your web app can only process one thing at a time, everything is expensive. Someone made a database query in the admin interface that runs for 20 seconds? Oops, hope you have other servers. Ten 100ms requests queued? The last guy has to wait 1000ms for his reply.

If it can process things concurrently, it doesn't matter, as long as you're not doing something that uses all the CPU(which shouldn't happen, assuming a sane design). Someone made a database query in the admin interface that runs for 20 seconds? Doesn't matter, you still have n-1 database connections to process the other queries. Ten 100ms requests hit your server? That's fine, the last guy will have to wait maybe 120ms for his reply.

If your app cannot process things concurrently, it should not accept connections for further work if it is working on something, period. This shifts the load balancing back onto the load balancer, because it has to find a worker that can process a request. And guess what, random assignment works fine in that case.
What is it, exactly, that you expect to be running and 'default open vulnerable' on a fresh Ubuntu install?

On my fresh Ubuntu deploys at Linode, the only network service listening is SSH. (Lest we forget that an open port is not a security vulnerability until a vulnerable service is listening on it, but I'll leave that assertion alone.)

EDIT: The cowardly deleted comment chided the poster for not securing his system and mentioned 'default open vulnerable' services.
i love weev and i had a blast trolling with him back in the day but he's nothing like swartz. the biggest split being that swartz had good intentions whereas weev was having fun.

i don't think he should be imprisoned for exploring at&t's god awful security but i also don't think he should be worshipped.
Show HN: P2P textbook sales
SEEKING WORK - On site. Milwaukee, WI.
GS Design in Milwaukee, WI is hiring a full-time backend developer. Must be on-site.

GS Design offers an incredible work environment, generous compensation and benefits, and the opportunity to work with a national client roster including Harley-Davidson, Mercury Marine, SRAM Corporation, Showtime and more.

Most of our work is in Python and PHP, and we use Django, Drupal, and Wordpress. Our projects are client-focused and varied - web applications, custom content management, and service integration. We're looking for a flexible, pragmatic generalist who can handle multiple projects and shifting requirements.

You can see all our open positions here: http://www.gsdesign.com/careers
It's actually pretty spot on. If you go and visit some of the places depicted in the film, without prior approval and scheduling, and you'll see it first hand.

I say this as someone who use to work for an organization that sourced and inspected chicken and beef processing facilities and, I've visited them regularly.
Very helpful thanks !!
nice work with the responsive design, aesthetics are nice,

safe to say this should aid in pulling in newcomers better than PHP (the language I use most often) does
> governments are introducing carbon taxes to take into account the impact of sources that produce carbon in the atmosphere

That doesn't make the other sources less expensive. It makes the current sources more expensive. If this were a zero sum "game", great. However, more money chasing less efficient energy sources means less money chasing more efficient and less carbon intensive energy sources such as nuclear.
Testing car door handles in a full parking lot is amazingly simple too. Does that mean it's okay to look through any unlocked cars' glove compartments to collect personal information of the owners?

Auernheimer crossed a line. The punishment seems excessive, but then again I don't know all the details of what he tried to do with the data.

The fact that he obtusely refuses to recognize that he crossed a line doesn't exactly make me feel sorry for him.
I'm the co-founder of a successful SaaS (http://letsfreckle.com/) and would easily have paid $300 for the spreadsheet alone.

I wish I had had the spreadsheet back when we started. Garrett seriously got your back on the finances of a bootstrapped SaaS.
My first brush with this, was near my 16th birthday, in 1994. Gillette sent me a free razor. I had never bought anything from Gillette, and neither had anyone in my family. Yet somehow they knew I was in prime shaving time, and they were smart enough to send me this birthday gift.

Their reward? I've been shaving with Gillette for almost 20 years. A back of the napkin estimation is that initial free razor got them about $500 worth of business in blades (and I don't even shave very often).

I have no idea from where they got this data - but this sort of thing has been going on for a lot longer than people think.
If you do your own sysadmin/devops, you are certainly guaranteed to be dealing with imperfect systems.

(It's very likely worse to do your own unless you have the resources to do it right. Hosting companies have scale. Not defending DigitalOcean here, just challenging your assertion.)
it's one of the (maybe "the") most popular open source smalltalk environments.
It matters in the same way a new ruby/python/clojure release matters, though it's not as popular.
FOSS, as it's defined by the FSF, is not really compatible with profit as it practically destroys the monopolistic benefit of copyright. Most people do not believe traditional uses of copyright are immoral, and therefore the strict adherence to freedom 2 as required by the GPL is simply meaningless deprivation of profit potential.
You left root login enabled and kept passwords on. And you're upset you got compromised? You can also enable keys in the control panel and you won't have to deal with passwords being emailed.

Those are the first few things you should be checking when setting up a new server (disable password logins and only allow keys).
Calling the "naturalistic fallacy" a fallacy is a bit of an overstretch IMO, sure natural=better is not a rule true 100% of the time, but nevertheless until sufficient evidence has not been accumulated that some of the adjustments we make to our lifestyle are not harmful to us health-wise avoiding them is not an unreasonable heuristic to follow. One example is how it became clear in the last years in nutritional science that in general the more processed the food is the more harmful it is for us.

There is also the reverse problem, illustrated by the condescending attitude toward herbalism in this article, of people who idealize modernity, and for example believe only medicine in the form of pills can be effective, even though plants may contain exactly the same chemical compounds. I am not saying there is no fraud in herbalism, sure there is plenty of it, but herbs in general clearly can have strong both positive and negative effect on physiology, which is really quite obvious if you consider the variety of herbs existing and that they all contain lots of different chemical compounds.

In general I think it is ridiculous to ignore the thousands of years of experimentation and exploration of our ancestors just because it wasn't "science-based".
This is brilliant! But I find the key mapping much harder to adjust to than the perspective. I'm far more used to 'k' to rotate and space to drop.
The point of the web is to share knowledge.

Advertising pays for knowledge to be created and published.
It is the most recent release of a the Smalltalk based programming environment, Pharo.

If you never heard of Smalltalk, you can google it. But as a summary I can tell you it is the father of Object-Oriented Programming, BitBlt, the Model-View-Controller pattern, the Unit Testing practice (SUnit), the Refactoring engine, among other things people take for granted today.
Hey, you could use airbrake/errbit compatible client to stream errors to errormator by changing the endpoint, but it is 30% of what errormator provides (just exceptions), we aim to be a lot more than that.

Please see this inteview with us that was posted recently, the article is in polish but the screenshots should give you a better overview of what errormator can do:

http://translate.google.com/translate?sl=pl&tl=en&js...

In short:

- exception monitoring

- performance metrics

- slow request and slow call aggregation

- log aggregation

We def. need a new index page and a features page to show all the functionality in a nice way.
Analysis of post-workout chocolate milks available in the UK
This is a horrible idea. This is the Bitcoin equivilent of walking around with the entire contense of your bank account, in cash.

If someone mugged him, those Bitcoins are gone. No reversing of payments, nothing. At least on a computer his wallet could be encrypted.
Aren't we jumping the gun a bit by saying, "DigitalOcean Root Vulnerability in the Wild"? I'm not yet comfortable with that conclusion...
Mark, your response is dead, so I can't respond to it.

I don't do much voting honestly.

> I don't understand how if one is viewing the subject from a evolutionary genetic perspective, why it is wrong to say that mechanisms that go against evolutionary development (abortion) are wrong

If anything goes against "evolutionary development" it is using technology to increase genetic diversity without regard to fitness.

Anyway, abortion does not go "against evolutionary development" any more than celibacy or monogamy.
I haven't heard of many stage-agnostic firms. Do most firms identify with a certain stage (early, mid, or late) to focus and learn more about a certain phase? Or is early vs. mid vs. late more just indicative of a given firm's risk tolerance?
Vim-foreplay becomes vim-fireplace - Clojure quasi-repl
Popup Architect - create free website popups (new beta service)
Popup Architect is a new free service that we are working on. It will allow you to build and embed simple popups boxes for capturing leads on your websites
Discussion from LessWrong a couple of years ago, the first comment is a condensed tl;dr summary:

http://lesswrong.com/lw/37y/how_to_live_on_24_hours_a_day/
Why doesn't Google spin-off Reader?
By now Google has a fairly established track record of developing products and killing them. But why wouldn't they ever sell these? Spin them off as independent companies? Or put them up for auction? If the problem is that they are not making enough, why not cash in on all that investment? I can't think of when they've ever done anything like this with one of their services and can only speculate why. But I can imagine lots of companies who would love to inherit a hard-core audience as large as Reader.
They include an alt text on the logo image. Why not put that text into the image itself?

I see a description is in the title of the page, but that gets cut off in my browser.

"I do enjoy Pharo" is also not a very helpful quote, especially if I don't know who Kent Beck is.
From Java to PHP
Please don't get me wrong, but it seems a lot of work in the wrong thing instead of developing and improving the product, even more wrong if you are a solo. Just my opinion.
Haskell News
Future of Firefox DevTools
$10 million . 10k startups.

$1000 in Google Adwords + Google Apps credits.

This is what they mean!
Firstly, you can drop the white-knighting for the maligned discipline of dietary science. You're not remotely interested in being scientific - your first foray here was flat-out abuse, which is profoundly unscientific.

Secondly, you are saying that because I didn't directly identified the mechanism to begin with, that my experience is useless. You must be fun at parties - should anyone pipe up about the higgs boson, you will abuse them into silence if they don't start out by mentioning the detailed workings.

Finally, you are putting words into my mouth. I never said that there was something in meat that isn't in other food. I said that an omnivorous diet was required for these two women to lead a 'well-fed life'. I know less of the details of one of the women, but I've shared a house long-term with the other, the one from the 'foodie' family, and she's very conscious and aware of what she puts in her body and is constantly tweaking her diet to improve things, both when vegetarian and omnivore. The mental overhead for her to stay healthy was much greater as a vegetarian, and it was affecting her quality of life - she could spend a lot of mental effort getting shit together and keeping it tuned (as often as not failing and slipping back to being listless), or she could relax a bit, enjoy a greater variety of interesting foods, and go omnivore. Similarly, the bioavailability of iron in meat is much greater than in vegetables, so it's much easier to plan. She tried iron supplements for a while, but they all tasted like arse. These are quality of life issues, which you're utterly papering over.

Another example of diet going beyond the literal molecules that go in your mouth is cultural availability. Dog meat might be nutritious, but western cultures wouldn't eat it, for example. Hell, if all you're concerned about is getting the right nutrition, you can get food pastes that provide all needs, commercial ones that are similar to the homemade stuff that the guy in the recent article 'this man thinks he never needs to eat again'. Only most people wouldn't go for that, because of quality of life issues. But it is a 'complete diet'!

So, back to my original point: for some people, 'living a well-fed life' is better served by an omnivorous diet. But congratulations, I said that it was tedious when people respond with the same old arguments, and there you were, first with the abuse (how very scientific you are!), then the belief that the whole makeup of a diet is the literal things that go into your mouth and nothing else.
I'm surprised they'd do it all in one language. High level decisionmaking in a high level language, simple low level execution in a low level language.
Nope, even though it is ready for 2.0 it was not included in the release. If you are more interested you can have a look at the prepared jenkins images https://ci.inria.fr/rmod/job/Opal/ .
CNN coverage of the trial is also getting some scrutiny in social media: http://www.change.org/petitions/cnn-apologize-on-air-for-sym...
The short answer is October 25, 2012 to March 18, 2013.

The spreadsheet is something that I've been fine-tuning for the last five years with Sifter. It took me a couple of days to clean it up and make it more user-friendly.

The book was about 1.5 months of full-time writing and editing. But I've been working on it about half-time since October doing research and working out all of the logistics.

We also hired both an illustrator for the cover and an editor to reduce the amount of effort I'd have to put in. So that probably shortened the timeline a bit.
An air duster suffices for this purpose. No need for something so fancy as liquid nitrogen.
As soon as I saw the text "Your root password will be emailed to you" on the bottom of the droplet create page I opened a ticket, here's how it went:

"Your root password will be emailed to you"

-- start --

Me

Just seen this at the bottom of the "Create a droplet" page. You're kidding right?

Them

The root password is sent via email because it is the easiest and fastest way to get a user online and running a virtual server.

We strongly recommend updating the root password after you login for the first time.

We also have SSH keys support so you can add your SSH key to the server during creation in which case no email is sent and instead the SSH keys are added under the root user for more secure access.

Thanks,

Me

Just added an SSH key and you're quite right, I retract my blunt reaction.

I must say however that I still think emailing them is a fairly terrible idea and I'm surprised your not worried about being found liable for a subsequent server hack.

That aside, thank you for your swift response and for pointing out I can use my SSH key. I look forward to using DO more

-- end --

N.B. I actually received their response twice from different agents suggesting it was a canned response

Frankly I don't even think passwords should be an option, as on AWS (not that they're perfect)
VF Profiles: CoachUp's Jordan Fliegel
Pinterest Rolls Out Its Discovery-Friendly Desktop Redesign Globally
> "Even with optimistic assumptions, the International Energy Agency estimates that, by 2035, we will produce just 2.4 percent of our energy from wind and 0.8 percent from solar." Seriously, [citation needed].

Okay, so I actually looked it up, and your hunch is correct. According to the International Energy Agency's "World Energy Outlook 2012":

"A steady increase in hydropower and the rapid expansion of wind and solar power has cemented the position of renewables as an indispensable part of the global energy mix; by 2035, renewables account for almost one-third of total electricity output.", [1], page 6

Also, from their FAQ[2]:

> How much of the world's energy comes from renewable sources?

"In 2009, the world relied on renewable sources for around 13.1% of its primary energy supply, according to IEA statistics. Renewables accounted for 19.5% of global electricity generation and 3% of global energy consumption for road transport in the same year."

So it looks like the Slate article is grossly misleading.

[1] http://www.iea.org/publications/freepublications/publication...

[2] http://www.iea.org/aboutus/faqs/renewableenergy/
On the top of the website you can see: "Pharo is a clean, innovative, open-source Smalltalk-inspired environment".

Basically it is a programming language + ide + image based virtual machine.
I found this in the .sh file: export SSH_HOST=root@$APP_HOST

So it seems to try to log into root@your.server. Which seems like a terrible idea.

Also it uses a lot of apt-get, so I guess you are limited to linux.
I spent much of yesterday playing around with this and it's a great way to interact with Clojure.

cpp evaluates the (innermost) form under the cursor, leading to very fast iterations as you code. It even works inside tests, so you can selectively run unit tests as you're working on functions. Super productive!
11 Things You Need to Immediately Stop Doing on Facebook
Preparing the Next Generation of Developers
Making your app connect to random SMTP servers every time it needs to validate an email address doesn't seem like a good idea.

Shared domains (gmail.com etc.) might even get you blacklisted if you flood the same SMTP servers over and over again.
No, it's because running things on a server is expensive.
"The successful root login followed only one unsuccessful attempt"

Once a system is compromised by a root exploit what makes you think that any information that this system is giving is true?

While it may be likely seen the circumstances it is by no way certain. For all we know it may have been a bruteforce attempt which, once in, got disguised as a known-root-password attack.

As long as people are going to think that a compromised system is actually giving true information about what happened we'll be in big trouble.

Or OP tells us that SSH login and SSH login attemps are logged automatically on another server which hasn't been compromised and then it's a different story...
Oh, How Pinteresting, Our New Look: More Ways to Discover What You Love
hey security experts, are microprocessor registers or cache, subject to any security attacks?
Quick & Dirty Forking
The brute force attack would have been disallowed due to fail2ban being enabled.
I think part of what the author sees as problematic is the loose definition of what "natural" means - to use your herbalism example, some people consider herbs to be automatically better than {mainstream_treatment_x} just because it is "natural", for a random value of "natural".

So you are probably saying the same / a similar thing as the author with slightly different emphasis.

edit: grammar, spelling mistakes, mainstream_treatment_x instead of "better tested"
What you don't know Kent Beck!! :D and yes even to me that quote is rather meaningless :P. I'll try to get the at least the ALT text updated.
The second answer states it best: "They all use closure(even in the 1st example)."

If you're accessing a local variable from a different function scope than it was created in then you are using a closure - there is nothing special about how it was defined, this is the only distinction.
It's not a conspiracy but the effect is just the same. Selective enforcement of laws that make everyone a criminal allows people in positions of power to target anyone they wish. This is made worse in countries where penalties are very severe, like the US.
But if you reset the root password it's still emailed, regardless of ssh key.
Measuring Project Activities (1) - Git Blame
Where I live, the people are too apathetic and uninformed to care, and they just keep voting for the same right-wing politicians in election after election. I live in a country with an order of magnitude more prisoners than any other, where there are so many laws on the books that the government itself cannot even keep track of them all.
I'm not upset I got compromised, it was very likely given my configuration, I acknowledge that. I did have keys enabled so the password wasn't email initially, it was only emailed as a result of a root password reset. The article is about what the compromise means about DigitalOcean not about my one box.
This is pretty awesome! Wonder how much time would it take to validate. Last thing I would want is to make that signup process even slower. I guess you could still let the user pass and then run an async task to check "if the domain name exists, ask for MX server list from DNS, and verify that SMPT server will receive a message to that address" and then maybe set a flag somewhere.
Looks pretty empty at the moment.
True, the Seaside home page looks outdated. But people is still using it, and it is under active development.
> Some of us spend more time doing productive work than pissing around making our editors and shells and whatnot all pretty.

Some of us enjoy this and therefore tools that make it easier, better or more fun are always welcome.
The shocker is that this is true even if you rebuild the box from the scratch image.
Oh, your comment is specific to this DigitalOcean scenario now? Because when you left it, it was phrased as a generality for systems administration, where you "FTFY"'d (God, I hate that) the person you are replying to in order to mock him for not securing his base Linux install. As if there's a hell of a lot to do out of the box. You're probably a -P INPUT DROP kind of guy, aren't you? Path MTU discovery and ping replies be damned?

The person you are replying to is not the original poster of this scenario, and the person you are replying to very likely did not trigger the exact same scenario in his dealings. I do not believe one is related to the other, but nor did you, because you were careful not to mention anything related to this scenario at all in your dim, mean-spirited reply. So you're assuming that his root password was flown over e-mail with no evidence to that effect.

(A root password flown over e-mail is a vulnerability, but an external one, and has nothing to do with securing a Linux install, which was the gist of your comment.)

Couldn't even finish my comment before you turned gray and deleted out. Sad. I wish you the best of luck in your cheap karma adventure.
Probably Google Alerts. It's rather niche but people who use it absolutely rely on it. But the VC-funded Mention seems poised to take that one.
Tell PG: Browsers with old cookies not logging in
Since last night (~1am CST, perhaps) on browsers where I've been logged in to HN for a very long time (forever, it seems. Months for sure) I was no longer logged in, nor could I log in though it would accept my password until I cleared my cookies for the news.ycombinator.com domain. At first I thought it was SSL-related, but that was not the case.

Anyone else unable to log in, delete your cookies.