skysight-inc/HackerNews huggingface dataset:
Well, since you outright said I was wrong...

> It's almost always a good idea to change ssh to a high-port

[citation needed]

> QoS is irrelevant to most

You sure? QoS is even in consumer routers these days. I'm speaking from experience, and have shown a 20% drop in scp performance by moving away from 22 on a consumer Netgear. This point really isn't worth caring about, though, but...

> bots do not scan !=22

I run a honeypot on 2222 with a well-known address. It's been scanned by 47 bots (out of 1,449 against 22) in the last 48 hours. They're out there, because it's not exactly a secret that administrators move SSH. APTs will scan every single port looking for OpenSSH, because it announces itself in the opening conversation. Granted, they are a smaller figure, but your assertion does not hold water.

You are also building upon obscurity. Ports are just endpoints. If you shuffle five feet to the left, you're still very likely standing in the same room. Your system is secure with SSH on 22. Period.

> if an attacker can launch daemons on your server then you've already lost anyway

You didn't read what I wrote carefully. I did not say attacker.

Ports under 1024 are reserved for root. Unless you are UID 0, you cannot bind to a port below 1024. That's why SSH is, by default, on 22. That is a service that only root should be able to start.

If you move it to 2222, say, inside a company of a bunch of employees, one day I might get clever after your sshd crashes or I somehow coerce it to crash (and there are ways). Now there is nothing listening on 2222, but I have a physical console, and I launch my own trojan sshd on 2222 (totally legal, because I can bind to 2222) and capture passwords from everyone that connects. Now I have passwords from all of my fellow employees, and I can start trying other systems.

That party is not an attacker. He is an employee that you gave an account. And do you have monitoring checking that the sshd listening on 2222 is running as root? Didn't think so.

Ports above 1024 subvert the security model of Unix, and should not be used for a system-critical service. Ever. If you are going to move it even against this advice, do not go above 1023.

That being said, I'd like you to provide one good security reason to move SSH to a separate port. To be honest, this whole "move SSH to a high port" is a complete and utter lie started by someone and parroted by every administrator who heard it from another guy, and it is rooted in absolutely nothing. It's not my job, as you've demanded, to justify leaving SSH at 22. It's your job to justify moving it.
I'd bring up the Safe Harbor[1] framework

Though, the last time I read a report on the audit of Safe Harbor[2] and US companies that say they abide by it, I decided not to recommend trusting our data to US companies.

1: http://export.gov/safeharbor/

2: http://www.galexia.com/public/research/assets/safe_harbor_fa...
Chrome OS and the Cloak of Unhackability
OP didn't ask for a complete firewall script, and besides they should be writing their own rather than copy-pasting the whole thing. Of course there's more to it.

The global limit on scp is fine; this is an internet-facing server with minimum user data for which I have a cold spare - there's nothing to back up.

You're coming over like you're the only person in the world who knows what they're doing; might want to rethink that.
The Incredible Progress of the “Developing World” [video]
http://xkcd.com/888/
Visually rich is precisely what I don't want from an RSS reader. Looking at that feed, my eyes bounce all over the place trying to parse the content I'm interested in - the headlines. I'd rather have a vertical, textual list that I can quickly scan. It's boring, but that's the nature of the medium.

This is one of the reasons I've never tried Pulse, but at least that lines the content up for easier scanning.
How to Install Android 4.2.2 Jelly Bean on Galaxy S I9000
Samsung's first generation Galaxy S smartphone has again received the latest Jelly Bean software, although unofficially. The credit for this goes to senior XDA developer, xlory, for sharing the new custom release by team Tsunami among Android lovers.
I'm assuming you don't have an in-house designer and are outsourcing.

In that case, stick to what you are good at and polish functionality.

Some top webapps have done well with weak design -- take a look at Google and FB.
I am someone totally open to the idea that there are herbs/food/whatever out there that have health benefits. What I never get about people into 'herbalism' is that they just say things and expect everyone to know them to be true. "X herb is good for digestion!" "X herb is good for relaxation!" How do they know this? Never once has one of them showed me a double blind study done that shows this to be true. In America, the process to get something approved by the FDA is long and expensive. If some common herb like basil cured cancer no drug company is going to spend hundreds of millions of dollars to prove it just so you can grow it in your back yard and not pay them for their trouble. However, certainly there has to be people willing to do studies on these herbs and I've never been giving one. The most disturbing thing is that this doesn't ever bother these people. Not once have a friend who is into herbs voluntarily provide any study done on any one of these herbs to prove a point. It's always just, "X herb helps with stress!" How do you know that to be true?!?!?
Sorry but why the derogatory UX term? Yes it'd be great if everyone could do everything, but that's not realistic on most projects.
Yahoo Hacks in London
YDN is putting on a hack day in London in April.
Yes, but given the context of "renewable energy sources", it is misleading use of information at best.
May be need add one，think through before action, once begin, never give up , 三思后行，百折不回
It is not about the paleo. First - while atherosclerosis may be a normal part of aging, does it say anything about ancient heart attacks and strokes? I don't care of the plaques in my arteries I care about not being dead from a heart attack.

Also the influx of refined carbohydrates in our diet is a big change. So maybe we have not evolved yet to cope with them in the current amounts and purity.

I think most fad diets have the following problems:

1. Little and improper science - so even if they work they can't explain why or how.

2. One size fits all - I invented the paleo diet without ever heard of it - once I decided to quit sugar and starches cold turkey - I have always loved raw nuts and vegetables, grilled meat and cheese. But this is not for everyone - alot of people will not find it tasty. So they eat something they hate - the result is they have problems adhering to eat and abandon it.

3. Government has failed to do its job on the nutrition front. Every recommendation is fought by the losing industry lobbyists, there is little exploitative science done etc. While every person should have the choice they also have to have access to transparent, true and scientifically proved nutritional information - otherwise we will always have the next wonder diet on which sizable portion of the population will be on. A lot of people will hurt themselves taking it to the extremes and so on ...
Someone needs to put what "Pharo" is on the front page of their web site somewhere else other than just the title element in the header which I ignore most of the time. Browser tabs are usually really narrow if you have 8-9 open. :)

I had to come here to learn it was a Smalltalk environment.
Disagreed. The facts are indeed that AT&T made this freely available... my definition of making something available is that it is readily available for the taking, whether I desired to give it away or not. If I leave my front door open due to negligence, I probably don't desire to be burglarized, but it is true to say that I have made my house contents freely available. If my house contents include a laptop full of people's private data, then I think it's reasonable I should face some penalties.

As to your other point, AT&T is responsible for the actions of its contractors as well as for its full-time employees.
> No I didn't change the password. Instead I rebuilt the machine from the base OS image.

Probably not strictly related (it would seem the attack in question was via a compromised (on whoever's end) ssh password), but in any case good practice: always regenerate ssh keys after installation from a base image. Some OS images may contain pregenerated keypairs (private key is usually at ~/.ssh/id_rsa ), which should always be regenerated. (This bit is most probably not actually related to the issue at hand, but IAC should not be forgotten.)
Menu - Introduction to Kendo UI Course - Part 10
The Fungus is made from people!
the keys expire, so even if you have it it won't be useful later.
No-true-paleo fallacy.
Yes. Even if it would be expensive to pay for a full re-design and coding to match, you can tweak graphic design just as you can tweak functionality.
Haha, I just switched from Chrome to Firefox because I hate how Chrome prioritizes Google Search over my previous history. It's idiotic.

Here, let me show you a clear example.

http://i.imgur.com/uNsh7Yv.png

Firefox clearly has the superior bar.
USA GDP PPP: $49,601

India GDP PPP: $3,851

12.88 times cheaper

Maybe it's not enough for "awesome developers" who can choose between jobs, but still it can provide young people (without families) enough money to pay for shelter and food for many months.

Even in Poland (GDP PPP $20,334) it's enough to survive for 2 or 3 months.
With so much fragmenting, is Android still a single OS?
I prefer Firefox Awesomebar as I find that when I type something in to search my browsing history it usually returns what I was looking for.. Chrome not so much. EDIT: what	sergiotapia said ^^^
Yes.

(just signed up, but defintiely you could be a lot "cleaner")
‘Google Keep’ Spotted In The Wild
> I can only recommend that every hacker does this at least once in their lifetime

I've been doing this for a while now and I love interpreter implementation.

The way I got started with this was through http://nathansuniversity.com/, which teaches you how to implement interpreted languages using Javascript (it uses http://pegjs.majda.cz/ for generating the parser). From that I already played in C (lex/yacc for the lexer/parser), C# (irony - http://irony.codeplex.com) and currently I'm enjoying F# (flex/fyacc).

I already made a simple programming language from scratch (https://github.com/fabriceleal/Multitasks.git) and I'm currently implementing a subset of scheme (https://github.com/fabriceleal/Pang.git), which I have great proud to announce that has a working call-cc.

I'm only hoping to have some time to polish them before "officially" showing them in HN or reddit.
Tried it with the only repo I have with plain html/js* and works like a charm. Pretty neat!

*http://5minfork.com/reidrac/canvas-raycasting
Going faster with Python
Sex in space may be dangerous, study says
I recently lost 30lbs by adopting a low-carb/real-food/paleo way of eating. As a result, I feel much better, sleep better, and have increased energy. My moods seem to be stabilizing and I feel more confident than ever. The decrease in weight has enabled me to exercise more comfortably, which in turn has resulted in an increased frequency of exercise, as it's now enjoyable. I can appreciate that the science behind the Paleo movement is not perfect, but the benefits I've realized from it far outweigh any questionable science employed to sell a few books by Loren Cordain along the way. It all basically boils down to application of the 80/20 rule to diet anyway.
I like it!

A usability annoyance: when I hover over "Blog", and then move my mouse to click the first blog article's headline, the menu changes to "success stories".

At [1] they discuss how Amazon fixed that (HN discussion at [2]).

[1] http://bjk5.com/post/44698559168/breaking-down-amazons-mega-...
[2] https://news.ycombinator.com/item?id=5330998
Excellent, please don't forget about Windows users :) Apple's OS is not the only one with web developers (ie. Sublime as an example) !
Do you disagree or agree with me? Your comment sounds more like flamebait rather that substantive commentary.
That validates RFC822 addresses, which is the full syntax of the From/To/CC headers. You don't want that for validating an email address on a web form.
Really nice you are listening and responding to the community this well, that said the progress made during hack week is impressive but we'll have to see how fast and stable these suggestions leak through to nightlies and stable release.

Keep up the stellar work, firefox is gaining momentum again, make good use of it :)
looking for a simple alternative I found http://bazqux.com/ . You do have to pay for it (That was one of my requirements - that might be a barrier for some)
If it works it's not unmitigated bullshit.
It is well known in cardiovascular surgery circles that islander diets (which have high levels of coconut oil) have vey high levels of atherosclerosis. I have heard this comment many times in 4 years of medical school, and seen many islander patients (Australia has a deal with the French Government to perform tertiary care of New Caledonians) however have yet to come across a source for it
> This of course was people using statistics to lie. The average life expectancy was lower primarily due to high infant mortality. Life expectancy is NOT the average age at death.

Just because lower infant mortality raises the life expectancy, doesn't mean that the average age at death hasn't gone up. I agree with your life expectancy claim do, but it doesn't mean the opposite is true either.
the FDA method of approving poisons like modern medicines may not be a relevant methodology for herbs.

Before you get all upset I called your favorite prescription medicine a poison, think about what it really is. A poison if taken in high doses. Ayurveda states there are 3 ways to cure disease. Food, herbs and poisons. Modern allopathy is only the third, poisons. It has very little information on how to cure through food and herbs.
http://www.ex-parrot.com/pdw/Mail-RFC822-Address.html
Excellent, the network timeline is one of the features that has kept me on Firebug. The editor integration looks quite intriguing as well. Wonderfully rapid response, Paul! I may no longer have an excuse not to use the built-in dev tools. :)
So you feel you're justified in attacking me personally because you disagree with me?
The right-hand-side docking looks absolutely amazing (http://i.imgur.com/duQOXq7.png).

I have another bit of feedback. The web console has three positions available: Above, Below, and Window. With Firebug, I like to have the console open in another monitor and give the browser viewport maximum screen real estate in front of me. Firefox's web console doesn't let me do this because in "Window" mode it doesn't quite act the same as a fully-fledged window. For example, I can't maximise it and it doesn't have the full complement of normal controls in its window bar. http://i.imgur.com/V7eWC1m.png
It doesn't.

Do you know what we call alternative medicine that works? Medicine.
I skimmed the article but it seems to me it misses a key component of why people choose "alternatives". Both "naturalistic" and "old school" (as in 18th century and earlier probably) today seem to me to be a reaction against years of uncontrolled abuse, dangerous drugs, uncontrolled trials in the past, poisoning and dumping chemicals in the environment (ddt and such) without any regard for consequences. It is kind of this cavalier attitude towards human bodies and environment during an accelerated progress in the last century that made some (unfortunately) think twice and reject everything that modern medicine stands for.

Another aspect of this "integrative" medical approach is basic psychology. Patients want to be understood and paid attention to. They want doctors to also ask them what they had for breakfast and how their son is doing. They'd want doctors to come to their house, put the hand on their head and say "you'll get better don't worry". All that is in contrast to a cold and robotic 5 minute chart check visits that are billed at $594.00/hour.
Show HN: RubyBeats - A Tweets Aggregator for Ruby
You're right. That's the next challenge: delivering. It will take time.
Awesome, but that just gave me a headache! lol
> She's drawn to alternative medicine because it's open source.

> conventional "industrial" medicine [is] closed source

Absolutely false. Conventional medicine was "open source" before "open source" was a thing.

It has peer reviewed journals exactly because of the benefits that being open brings.

> [alt-med is] tolerant of differences of opinion to a much greater extent than conventional medicine.

Conventional medicine welcomes with open arms anything that can be proven to work. Alt-med welcomes with open arms anything. I prefer the former.
Bad Changes to eBay’s Responsible Disclosure Policy
I think probably you're talking about http://usablica.github.com/intro.js/ which I mentioned in the demo
I've started using http://selfoss.aditu.de/. It is written in php with a mysql or sqlite database. It works great and with some tweaks from vince(https://github.com/vincebusam/selfoss) it works even better.
You refer to the structure in the past tense. Are we going to see bigger class sizes again with S13?
In my experience, Omnibar is giving me worse and worse results. sergiotapia's example mirriors my experience lately.

That said, Omnibar in Incognito Mode works well, because it only searches my history (which is what I want).

Edit: chrome://history is pretty cool, too.
Fixed in Firefox 21.
How can we contact you?
How we priced our software
But even Perl's barebones (non-Moose) OO has inheritance. Once you add in Moose, you now have an API to your OO which is unusual.

Personally, I think Lua is amazing. Rolling your own OO system in the language itself is pretty awesome, if you like that sort of thing. Everything has to be implemented in -something-, right?
Also assumes users and groups `www-data'. This is basically a script tailored to the author's server, but not something anybody should seriously consider using on their own server. It would be much better provided by a HOWTO-style post showing the commands the author used.
Oops Selena and Bieber's hidden camera bedroom video Facebook scam
It's funny you mention family planning, it's actually a great example for what I am saying. Pull out might not be the best strategy for avoiding kids, but also effectively avoiding kids isn't something too heavily promoted by evolution ;) and in a sense you wouldn't do bad to stick to it if survival is the ultimate goal. You mention how modern drugs are rigorously tested, but just recently there was a big affair about Bayers contraceptive pills used by millions of women worldwide causing blood clogs:

http://en.wikipedia.org/wiki/Drospirenone#Adverse_effects

So, being so incredibly lucky to be part of several thousands of years old lineage of people who managed to survive, it isn't unwise to stick to the traditional ways of living, when the new way wasn't tested for sufficiently long and/or when the old way wasn't proved to be harmful - remember I am talking about using it as a heuristic in situations where we don't have full knowledge. I am not saying that every single aspect of it will be beneficial, just that you will be unlikely to do very badly when following this strategy, simply because it was tested over a very long timespan.

Nassim Taleb makes a similar point in his book "Antifragile". To be honest I hated the book and think much of it is crap, but this aspect I agree with.
I think the Paleo argument is that it is the interaction of certain saturated fats and insulin response from high glycemic index foods that oxidize LDL cholesterol (?). I don't know any of the science here, so i could be paraphrasing wrong, but I'd love understand if this is as fringe as it sounds.
Yes I agree with you. I am Vietnamese American who has bootstrapped a few startups in Saigon (Ho Chi Minh) for the past 4 years. The school described by the author is an exception, not the norm.
>(a) is relevant because I would not wish imposed upon myself

Ok, so perhaps it's relevant in a philosophical sense but not in any kind of practical sense. We know better than to humanely kill animals and eat them, so instead we will leave them in the fields to be ripped apart by other animals. Which is ok because the predators didn't know it was bad.

I'm personally ok with eating animals because that's just nature. It would be better to be caught by a human hunter than most predators. I also don't see animals as having some higher purpose, i.e. killing an animal to eat it is not the same as killing a human to eat them. If you believe killing animals is wrong because they are living beings then how can you reconcile killing plants?

In my opinion the problem is these industrial farms. There is a never ending pressure to bring prices down so that means cutting corners for the animals who can't write their congressman.

I would like to see something done to shape behavior. For example, if you waste meat you should have to pay, say 10x the price of that meat. Restaurants would pass this charge onto their customers and hopefully we would have people asking for less meat on their plates pretty quickly. Which should drive demand down some.

>(c) Can you please clarify why you do not consider the statement "we should exterminate all predators" to imply genocide?

Of course it does imply genocide but it obviously wasn't a serious suggestion, it was poking fun at the other position.

>I am trying to provide an argument based solely on the logical (in)consistency of the GP's statement without introducing any new measures.

Ok, then I concede you have effectively done that. What I was reacting to is that such an argument doesn't help anything. So it's morally inconsistent, so what? I like the taste of meat and pointing out some logical formula that says I shouldn't doesn't effect anything.

We won't make life better for the animals by pointing out logical inconsistencies. We'll make life better for them by driving behavior.
I loved this game.
it is just you (kidding). How would they hear of you? Why not wear a t-shirt! T-shirts are a pretty low-cost investment in promotion. I can buy a black shirt with a single color imprint for $3.50 in small runs. A good pen with the company name on it would cost the same. (source: I have been buying giveaway crud for 20+ years)

Giving away a metric ton of shirts can have some other interesting effects. In the early days of my manufacturing company we gave away many shirts to people within the industry. We started getting calls about 'our people' attending events that we did not attend. It turns out that some of our customers really saw other customers at trade events, but there were so many people with our company shirt on that they impression was that we were attending in force - we werent at the trade event.

After giving away 20,000 shirts in a four year period, our customers started complaining about having too many shirts. So the technique does not last forever. It did always amaze me the delight a grown adult would show when they were given a $3 shirt. Almost always a better investment than a pen.

Best ideas: Have a decent looking shirt that people want to wear; change base shirt colors so people can have an option. Some people like blue, some like red. Give them what they want, it doesn't change the cost of the shirt.
> I think that you miss the point here: If paleo diet is not the silver bullet than what diet should I have?

That's a little harsh. The point of the article is ruling out a diet, so your search is easier knowing it is based on bad science.
It's much harder to find somebody who is really good at design and development than it is to find somebody good at just one of the two. As soon as you have enough fulltime design and fulltime development work, you can have people who specialize in each rather than people who split their time between the two.