skysight-inc/HackerNews huggingface dataset:
If you have a lot full of unlocked cars, perhaps you should bear some of the blame too?

When Sony was hacked and user data was leaked, they received quite a bit of blame. At least they had some semblance of security. AT&T was wide open.
Could be easily modified to verify email lists too, very handy if you haven't sent for a while and want to avoid bounces.
I agree. To me it sounds more like root vulnerability on OPs system. He did not change his password after using the automated password reset, knowing the password was sent in plain text.
Is there going to also be a Kindle (or any other e-Reader) version?
Depends on whether you need minutes or hours :-)
Is there a work around ? How about using proxy but I guess that adds another layer of complexity
HTML is for documents, period.

Wow, people are still saying this garbage?
Too bad the author makes it sound like digitalocean has severe problems while his setup was clearly flawed. The really sad part is that this kind problem will unfortunately only grow as vps systems become cheaper and cheaper. People with less knowledge will set up their own stack and not think of the consequences... I wonder what hosting providers will come up with to tackle this problem.
"There's just lots of people, often stupid and ill-informed, but nevertheless people voting for what we want."

How exactly do you think uninformed people are voting for what they want? The USA is a country where people are surprised by what is illegal.
No LFI/RFI mention? http://en.wikipedia.org/wiki/File_inclusion_vulnerability
For anyone who needs a top-up on their scepticism in this area I can strongly recommend Ben Goldacre's book "Bad Science":

http://www.badscience.net/books/bad-science/
I have a friend who's into homeopathy and such, and I normally keep my mouth shut. But I have done some thinking about why. This friend is very smart, very intellectual, very curious, and not overly credulous. She's really a bit of a nerd.

From my few conversations on the matter, the thing that's jumped out at me is this:

She's drawn to alternative medicine because it's open source. Like many nerds, she hates closed proprietary systems and loathes bureaucracy.

If alt-med worked, it would be vastly superior to conventional "industrial" medicine. The latter is bureaucratic, run by closed guilds, closed source, and radiates this standoffish "you are an idiot, do not ask questions" mentality.

By contrast alt-med is open. Anyone can learn about it. Anyone can become a practitioner. Anyone can experiment. It's tolerant of differences of opinion to a much greater extent than conventional medicine. It comes off as welcoming, inviting, and engaging.

Of course, I understand some of the reasons medicine is the way it is. Unlike hacking code on a computer, screwing up medicine can really hurt people. (Code on a computer generally can't, unless you're talking about certain kinds of specialized areas.) But it does seem to me that this is part of the appeal of alt-med.

The other appeal, I think, is escape from the bureaucratic hell that is conventional medicine. Alt-med is actually more free-enterprise. There is more patient choice. It's less expensive. My wife and I just had a baby, and dealing with the insurance company has been a living hell.

Edit: one more observation.

We've tried a little bit of alt-med type stuff to varying degrees of success. I think I can also say this, and I think it goes a long way to explaining alt-med's popularity.

The bedside manner you get with "alternative" practitioners is vastly better. I mean huge orders of magnitude better.

We have a pretty good doctor and a pretty good hospital, and even then we occasionally feel like meat. And ours is really above average in terms of doctor-patient relations and comfort. I've heard some real slaughterhouse horror stories, particularly around women giving birth in ordinary hospitals. I have a relative who has such a story. She really felt like a piece of beef, and the doctor was a real jerk.

The physical design of the spaces is better too. Go into an alt-med clinic and it feels warm, welcoming, calming. Go into a hospital or a conventional doctors' office and it looks like a car repair shop. Again -- to draw an analogy to the computer industry -- Apple has proven just how much aesthetics matter. Apple's products are generally not technically superior, but they are often vastly superior aesthetically and in terms of usability.
That's disingenuous. "Freely available" implies that AT&T desired to give this data away or advertised it knowingly. Clearly they didn't.

What Auernheimer did, with intent, was to bypass AT&T's intended use of the system.

What AT&T did was incompetent or perhaps even negligent by a reasonable notion of corporate coding standards. You'd need to dig a bit more to learn how systemic the incompetence/negligence was before attempting to sign appropriate blame, though. Maybe some contractor got into the system and made the change that made that exploit possible the day before and deployed it without following AT&T release guidelines. I dunno. Knowing that kind of info matters, though.

Let's not twist the facts of what happened in order to justify different outcomes.
It does make the truck number rather low. This is still probably less of a risk than trusting Google to keep a marginal product around (as recent events demonstrate), but there are different risks for small organizations that big ones don't share.
fail2ban only blocks brute-force attacks from similar IPs right?

What if a botnet is used to do the brute-force, does fail2ban lock everybody out, effectively making fail2ban a tool that can be used for Denial of Service?

All I'd have to do now is to hammer your system with SSH attempts from my botnet and you can't log in anymore...
That's really helpful. Thanks.
> I see a lot of mentions of Smalltalk on this page yet 'Smalltalk' doesn't appear on the Pharo home page.

Huh? Are we looking at the same page? On the home page I see "Pharo's goal is to deliver a clean, innovative, free open-source Smalltalk-inspired environment."

(Note that the HN link is not to the home page, but to the 2.0 download page.)
Kind of, if you have gone vegetarian for ethical reasons you have demonstrated willingness to change your behaviour.
Eerie pictures of the real life Atlantis that was underwater for 25 years
Is it not possible your email was hacked? I know from my experience with DO, they email you the root password.
"But your honor! SHE WAS ASKING FOR IT! You can see how she dresses."
This is a promotion for Addwords and Google Apps not an investment. So, they get less money but don't have to worry about equity.
And I'll still give you fakeaddress@mailinator.com, it will pass every check you can throw at it, including sending an email and getting me to click a link, and it still won't be a real email address.

Still your move, e-mail harvesters.

Checking that I haven't mistyped it or put the wrong thing in the wrong field is a basic sanity check. Beyond that, the only way to actually get a real email address that I read is to be a service I care about.
The article doesn't succeed, in my opinion, in making the argument that more CO2 is produced.

"during Earth Hour, any significant drop in electricity demand will entail a reduction in CO2 emissions during the hour, but it will be offset by the surge from firing up coal or gas stations to restore electricity supplies afterward."

Note: Offset. Not negated.

"And the cozy candles that many participants will light, which seem so natural and environmentally friendly, are still fossil fuels—and almost 100 times less efficient than incandescent light bulbs. Using one candle for each switched-off bulb cancels out even the theoretical CO2 reduction; using two candles means that you emit more CO2."

So if you use a candle and if you use more than one candle for every single light switched off, then you're emitting more CO2.
This is by far the best chart library of the easy offerings - outside d3.js.

I would love support for a vertical and horizontal stacked bar chart for things like budget break-downs and general side-by-side comparisons.

Your Y axis has too many values in my opinion. I know it can be hard to code, but I think the example charts can do without the *5 values.

Great job!
This doesn't have to be a conflict of interest (as they list themselves when they appear), but rather an attempt at self-regulation. Ghostery, and Scott Meyer, has done a lot to advance the discussion of privacy in advertising; they are educating the consumer-giving them tools that make it more difficult to do their job, or at least doing it in a shady and lucrative way for the good of the consumer and the industry.

Similarly much of the opt-out discussions as well as the ad choices icons are industry-driven.
"undergird" .. !?
British Government Aggressively Promotes Open Source
The United Kingdom’s official endorsement of open source software, which became public just a few days ago, seems too important to miss, particularly for the implications it could have for businesses, governments and other organizations throughout the industry.
Actually one of the highest scoring games of Tetris I've played.
Taking Stock of Linux Security and Anti-Virus Needs
Open source fans like to brag that Linux needs no antivirus software. Yet as executives at security vendor ESET were keen to remind me in a recent interview, that truism holds true only to a certain extent. In an age where Linux commands greater market share, and where a growing number of threats are platform-agnostic, demand for security enhancements may well be on the rise. Are industry partners ready?
It tells what it is in terms of Smalltalk. I don't remember what Smalltalk was. It was old when I was a kid.
$1,000 and the ability to say "Backed by Google" might go a lot further than you would think. There are probably plenty of people who would be willing to do something as prestigious as YC for free, so I don't imagine it'll be impossible for Google to find several willing takers for their offer. They only need a tiny fraction of these companies to succeed for the program to be considered successful by traditional venture capital metrics , so there's not a lot to lose for Google here.
My wife is the same way. She has a PhD in nutrition and is also a registered dietitian, but she just can't muster the energy to argue online with people that have read two articles on Pub Med.
Pinterest's redesign is now rolling out to all users
Tourists putting themselves at risk of rape
Good idea. Then when I get that rant on the front page, I can write a guide on HOW I GOT TO THE FRONT PAGE. Those seem pretty popular.
Seaside works, yet it has not been officially release for 2.0 hence we rely on a gofer script to load all dependencies.
What error? I doubt it's related to seaside. And for the configuration we mostly need somebody to do it :) since the seaside config is pretty big on its own you got to be careful when changing things for a new release.
This is good news, what version are you using? Seems like the commit was just one month ago.
Firefox is, and I prefer it that way, an exception certainly.
The only E-Mail validation involves sending an actual email with a response link.

Because even if people happen to give you a functional email address, it isn't necessarily their email address.

And I say that as someone who has come to regret registering a first-initial-last-name gmail address. And it's not even a particularly common last name.
Not sure if those statements are in disagreement. Hydropower could easily be the missing 30%, especially with Chinese hydro-power increases. The original statement only referenced solar and wind.
Doctor as in MD? They don't necessarily know much about nutrition, either...
>Where's the payment equivalent of a facebook "Like" button?

It's on Amazon.com and they have a patent for it. :(
If my IP is on your botnet than I've got bigger issues than not getting into my server. Namely you stealing my password and you getting into my server.
For anybody considering fail2ban here, install keys and disable passwords via SSH (don't remove the password from root as most naïve administrators suggest, since most hosting shops will give you tty1 access; just set PermitRootLogin without-password and PasswordAuthentication no. You keep a back way into the system in the unlikely event that you lose all of your keys and retain physical access to the machine). For an additional layer, you can also remove all terminals except tty1 from securetty.

Once you're in that fairly secure state, fail2ban is completely pointless and serves only to reduce noise in your log. Which you should stop caring about. I'm serious. fail2ban is a complete waste of resources and will peg a core tailing your SSH log because it's a resource-intensive piece of software that serves no valuable purpose. If you're worried about the resources of writing a log, redirect the log off the box and prevent your local logger from writing to disk -- which you should be doing for security reasons anyway, as discussed in another comment elsewhere in this thread (how do you trust a box's logs once compromised?).

While you're at it, don't move SSH to a separate port. There are interactivity QoS defaults in most networks that expect SSH to be on 22, and the clever bots will find your "cleverly hidden" daemon anyway. And wait until I tell you that in the event of your "cleverly hidden" port 2222 SSH daemon crashing, one of your local users can put up a trojan SSH daemon in its place without your permission (which is why SSH is on 22 in the first place).

Just deal with the log noise. We all do on edge boxes exposed to the Internet.
I recently went to the doctor and got a recommendation to try one of three different medicines. Two were "supplements" and the third one was an off-label psychiatric medication. Each drug had its own set of side effects, and I chose one of the supplements because the off-label psychiatric drug required a prescription. I just didn't think "natural" versus "artificial" was relevant.

The things that concern me about herbalism are simple:

1. The compounds in herbs are not tested as rigorously as "modern" drugs, at least by the FDA in the US. Knowledge of side effects and safe dosage is more limited.

2. Herbs are often subject to variation in dosages from pill to pill, because the source plant matter is variable and the actual yields are difficult to determine.

It's not about ignoring thousands of years of experimentation, it's just that our standards are higher, and the old experiments were poorly conducted. We want to know the side effects and the interactions. We want to know the drug's mechanism. We want to know about the possible complications. We want to know the effective dose and the unsafe dose. And we want to be able to isolate things: herbs contain many chemicals: you might want one of the chemicals, but not want the side effects from one of the other chemicals.

It reminds me of the almond extract you can buy at the store. The natural almond extract tastes the same as artificial almond extract, but the natural almond extract contains more cyanide. People pay a premium for things labeled "natural".

The heuristic to use natural things works well for foods, but it's a harmful heuristic when considering drugs. It's also a bad heuristic for heating your home (wood fires), immunizing your children (let them die from whooping cough), family planning (pull out), et cetera.
For me the trick isn't to get my real email address, I give that to anyone.

But kudos to you if you can make it into my "Important and unread" inbox and remain there. It's the only part of my email that I actually check.

Some services are so great I let their daily reminder emails go there and enjoy reading them. That's right, there are services out there (I only know of one) whose daily "You should use us" email is so awesome I enjoy reading it every day.
If you have adverse reactions to wheat products after provocation (even tiny amounts should trigger the effects), then it's indeed likely that you do have coeliac disease. About 1% of population have it, so it's not that surprising. Just remember that a test would require a proper, long provocation, otherwise you'll just get a negative from the biopsy because there's no intestinal damage anymore.

On the other hand, if a diet helps, and provocations after, say, a month (but without your knowledge) make things go downhill fast, you can be sure enough. Welcome to the wonderful life where you get to check yoghurt for trace amounts of wheat products, and pizza is a holy grail (one of my closest friends is coeliac, for people in Amsterdam area, Woodstone in Haarlem makes good gluten-free pizza).
The author is encouraged to leave all his lights on at home, and activate all appliances 24/7, regardless of whether he's home or not, as a celebration of all the wonders that electricity does for us. I doubt he will have a problem, given that efficiency is not a concern for him (perhaps mute the TV when sleeping, and perhaps turn off the food processor to keep things a little quieter for naptime).
Hi, author here. You might want to look at the README provided with the project.

Yes, you are limited to Ubuntu. And yes, the script expects to SSH as root to your server.

As to why it expects that: Doing server provisioning as non-root user does nothing but increase provisioning-complexity.

Deploying as root, on the other hand, is just me being lazy. You're free to fork and send me a pull-request which changes that ;)
I may add one if there's incredibly high demand, but my initial attempts to create them left me with the impression that it would be a significant amount of effort for marginal additional benefit.
Meet the next generation of Indian technology firms—and the obstacles they face
He also wrote "the skeptical environmentalist"
Can someone point out the features I've been missing all along by using a Desktop RSS reader?
Is it just synchronization or is there something else to it?
yup, it's good. From Merriam-Webster:

"to form the basis or foundation of : strengthen, support <facts and statistics subtly undergird his commentary"
Read my comment more carefully. I didn't make that claim.

I claimed that if you make a distinction in your morality between animals and plants based on their ability to feel pain, you have that duty. (Note that this is a claim about the consistency of a morality, not about one particular moral system.)

If on the other hand your morality does predicate your moral right to eat something based on its ability to feel pain (as our ancestors did), then there is no such duty.

(Of course there is also a grey area between these -- a morality based on a creature's ability to express an experience of pain is more broadly accessible.)
The problem with herbalism is that it's the first place science-based medicine went looking for drugs. For basically any herb and effect someone ascribes to it, there have already been twenty rigorous studies, and either no statistical effect was found or the responsible chemicals were extracted, purified, concentrated, and synthesized and are now marketed under two brand names and three generics.

Going to herbs directly isn't going where no science has been before. At best you're getting a known drug which is poorly dosed and mixed with a shotgun of other chemicals which may be harmful. At worst you've just got a cocktail of potentially harmful (remember, even most of the "good" effects come from poisons the plants produce to keep things from eating them) chemicals with no actual benefit.
Force a root password change on first login?
Use a queue processor - but that's probably going too far for simple email validation.

The simple work around - don't do it. This code is susceptible to Denial of Service problems similar to the URLField verify_exists option https://www.djangoproject.com/weblog/2011/sep/09/security-re... - a malicious SMTP server could tarpit all your SMTP connections from Django leaving your site with no workers to process other requests.

The email validation from an EmailField is designed to ensure that it could be a valid email address, not that it's a valid mailbox. Live with the limitation instead of trying to be too smart.
Techies from India will lap up this opportunity. As I see it, the incentive for them is not the $1000 bucks, but the chance for their product(if good) to be showcased on a much larger canvas.
If it is available in some point in the future, would it be available for free to those who have already purchased the PDF version?
I agree with a lot of what this article says regarding the "naturalistic fallacy",etc.

However, this quote is an example of shallow thinking that drives me nuts:
"Of course, it’s hard not to note that cancer and heart disease are primarily diseases of aging, and life expectancy was so much lower back in the day that a much smaller percentage of the population lived to advanced ages"

Life expectancy FROM BIRTH has risen dramatically, but if you rule out those who died before they reached 5 years old, and rule out violent deaths and/or viral/bacterial plagues, you begin to realize that life expectancy is not much higher today.
Why I Gym Everyday + Fitness Goals
5 minute fork
For instance, it was Google Crawler that gave the system ability to make lightening fast connections and also bring up recommendations. It is one of the main reasons it cannot be open sourced. The systems is too intertwined with Google’s search and other infrastructure to be sold as well.

http://gigaom.com/2013/03/13/chris-wetherll-google-reader/
Is it normal if I see a green dot blinking in the top right corner ?
was just showing bootstrap and intro.js off to a team on saturday - this is a nice combo.

safari 6 - arrow keys didn't work for me.
This is why ssh-agent is awesome: they don't hold the passwords in memory (only the keys) so you minimize the number of times you type password and the number of places it is stored.
Node-Chimera: headless Webkit in Node.js
I'm a big fan of JavaScript Garden: http://bonsaiden.github.com/JavaScript-Garden/#intro
I may have missed it, but I didn't find a link to the wiki. I expected to find it in either the community or doc tab.
You are wrong that's not a car :)
('SMPT' is used throughtout instead of 'SMTP'.)

What does django.core.validators.EmailValidator actually do?

Validating an email address with a regex is surprisingly hard: see http://www.ex-parrot.com/~pdw/Mail-RFC822-Address.html

I wonder if EmailValidator does this, or something simpler?
Only if your moral system bases the morality of eating a being on its ability to feel pain. If it doesn't, then you can eat whatever you want.

(i.e. My comment is a critique of the consistency of the moral system the GP set up; it is not an absolute moral judgement.)
I recommend reading the original; the summary doesn't capture its style (and may not capture its substance, for all I know). This is interesting as a piece of rhetoric as well as advice.
Is there a way to rate-limit ssh password-based logins to your system (i.e. 4 per minute or so)? I mean, across all users, all IPs.
Sentry 2 - framework agnostic, composer based, & simple. PHP Auth package.
I wouldn't be surprised if Amazon tweaked their search engine after the referenced study came out. Maybe even specifically for that word combination.

This happens a lot. When popular magazines do search tests with a range of apps and one of the result is "$foo didn't find our $absurd_word_that_we_use_for_testing" you can be sure that it will find it soon afterwards so they won't look bad again in later tests.
There is no way to prove you have not been compromised as it's possible to be compromised without knowing it. EX: Listing to the EM leakage as information is sent from one chip to another.
I don't think Bennett would approve of the tl;dr's lol.

Not only should you take the time to read it, you should be spending another 45 minutes reflecting.