skysight-inc/HackerNews huggingface dataset:
And unlike Ann Arbor it has neither the diverse industrial or academic base to provide for a diverse population. Bellevue is still largely an extension of Redmond, though admittedly not as thoroughly MSFT-dominated as Redmond proper thanks to some tech presence in Kirkland.

Bellevue can hope to have the diversity of Ann Arbor when they import a state school and a few cornerstone employers that aren't Microsoft or Microsoft-affiliates. I don't expect this to happen soon.

Hell, "Bel-Red" exists as a word for a reason.

In any case, I don't think my original point is at all an exaggeration. Redmond is a modern incarnation of a Company town, though it doesn't come with many of the stigmas of industrial company towns. Its proximity to Bellevue has meant the Microsoftification of Bellevue, rather than the diversification of Remond.
Yes, he could. But he didn't. If he did that, the page would tell you that your password is wrong, and you'd contact support. The attacker probably didn't change any password, because it would be futile.

Also, the attaker could also change the account email. Neither tokens nor email confirmation would help.

The biggest problem is for people that used the same password on Linode and any other important service. (And, of course, all the CC stuff...)
Waar moet je op letten bij het kopen en inrichten van je eerste aquarium?
Every iteration starts with figuring out what you want to change. This is where we're getting stuck every time.
Linux Foundation takes over Xen, enlists Amazon in war to rule the cloud
A funny comment on IRC:

"One bit of good news from all this hubbaloo: more space will be opened on the new E5 hosts from customers leaving \o/"
It's amazing that it doesn't work that way. You could argue that it's because of the amount of infrastructure already in place, but why couldn't a new system be gradually and optionally rolled out?

Stripe (and probably others) has functionality like this where the seller's server never sees the CC number, and developers can store a unique token to re-charge the customer at a later date.
Just rang my bank to cancel my debit card. Hate doing that. Now I have a week or two of failing payments, bills, etc to look forward to.

I will probably be moving away from Linode after this. The poor response to this and lack of full disclosure, plus reading that they're using ColdFusion (wtf?), means I don't feel I'll be able to trust them any longer. It's a shame because their UI and service is generally fantastic.
That's true -- it could indeed happen to anyone who keeps encrypted data adjacent to the keys.
As a counterpoint to all the negative comments about this article's typography and navigation, I viewed this article in IE9 at work and had absolutely no problems with the typography (which properlyl displays as Segoe UI) or with navigation.

Who would have thought that a Microsoft website looks best in a Microsoft browser?
I highly doubt you used any of your pieces 37000+ times. You are not comparing the right things.
SSH key management for Github users, github-auth
In what ways are wire payments better than using credit cards? In wire payments aren't you using the actual bank account numbers along with routing numbers which is also very sensitive information ?

Also I do not think, but I am not sure, that fraudulent wire payments/transfers are reversible.
That is an absurd response. I don't care if they believe a specific customer was targeted, I want to know what happened and what information may have been compromised.
I got one, so there were at least some of those emails sent out...
The Monster Machines that Mine Bitcoin
I really can't subscribe to that argument when you look at other national issues for which the President is fighting tooth and nail. Without straying too far from the subject, take gun control as an example [and please note, I am deliberately writing this from a partisan-agnostic perspective]. The opposition to this is fierce, and the issue extremely polarizing. Yet, the President seems to be willing to go the distance on the issue of gun control. The movement has failed again and again to gain bipartisan support. Yet, here we are still talking about it in the news. Same can be said about abortion, too. These debates went on for decades now.

Nobody can say the President isn't trying hard enough in those cases, whichever side of the fence you happen to fall on. Yet, when we talk about basic human rights, the President somehow gets to just give up on the issue, and we should be OK with that? In my opinion, there is definitely a lack of effort by the President to do something about closing Gitmo, and I find that almost as disappointing as Gitmo being opened in the first place.
No, I didn't get to that point. I bet Ken had a lot of fun by his article and probably in his talks too. This is a good way to create buzz.
Customer Development When Your "Customers" are Convicted Felons
Yeap same experience here with DigitalOcean CPU performance.
If CPU power is important to you, Linode's CPUs are a LOT better.
Same here, now I have to got back to the story. Funny I don't remember seeing a way to get to another page...
Next up, blocking third-party ETags?
The rise of life doesn't have to be a universally unique event. It can easily rise in isolation on Earth, and in numerous other places that obey the laws of organic chemistry.
"I would absolutely without a second's doubt invent fictitious employment and get a friend to back up any reference check "

I've also heard people who will simply pick a company that went out of business where references or verification aren't even possible.
Your axe is plenty sharp already.
Linode really needs to make a statement about what happened with this hack, stating if credit card information was taken. A lack of communication does not help me trust them. I'd rather have them speak up as to what happened and know if I need to have my CC reissued.
I'm far more concerned about the integrity of my servers than about my CC, which has good fraud protection.
An Open Letter To Women In Technology
Don't know if that's deliberate but I love the idea of a "rage view"; describes my browsing to a tee if I can't have my AdBlock.
¿Por qué Dubalu?
I would be utterly shocked if nobody using Linode had suspicious activity on their CC. Linode has lots of customers, and at any given time, some of them probably have suspicious activity going on.
My first tech job was testing software at Hewlett Packard, circa '96-97. One of the projects I worked on was HP's first (I think) digital camera. The hardware testing was apparently running behind due to challenges the hardware team was having with abrasive qualities of some of the paints they'd chosen, and one day a bunch of us were asked to go help expedite some hardware tests.

Every button, latch, and moveable part on that camera was rated to a certain number of presses and uses. A team of folks (which for one day that winter included myself) sat in a room pressing buttons and drawing notches on a sheet of paper until the product failed or qualified. It was kind of eye opening, actually. For weeks afterward I was nervous about whether the next button press on my tv remote was the last :)

I'm curious, 16 years later.. How much of this testing is remains so manual? At HP I think the number of products and rate of change in early development made building fixtures to do this sort of thing pretty costly compared to low wage human testers.
Pedagogic video-series about digital logic by Jack Buffington
Jack Buffington have recently started this very pedagogic video-series that covers the mathematics and logic behind electronics.

He starts out easy by introducing binary, decimal and hexadecimal system. He then explain how to add and subtract in binary form, then multiplication, division etc.

Each episode covers one new element in digital logic, and he's merging the episodes together by using some methods learned in previous episode.

It's quite easy to follow along, and fun to learn some of the mathematical theory behind digital logic.
Its worth noting that charges can be credited to cancelled cards under certain circumstances. Happened to me and the bank said it happens regularly. True, its usually a painless process; but its not that simple.
But isn't that just between Stripe and the company requesting payment?

e.g: Acme, Inc. sends Stripe your CC#, Stripe sends them some unique token, and they store that; correct?

So Stripe still has your CC#, and is at risk.

So this is really just risk mitigation; what I think TP is suggesting we need is unique authorizations at the banking level.

Something on the order of virtual credit cards, or temporary tokens, which are ultimately verified by your bank [or in other words: the lender(s) making anti-fraud guarantees, etc.]

(e.g: this token is authorized for 24 hours up to this limit; this token is authorized indefinitely up to $xx/mo.; this token is authorized for 1 year; etc.)
fwiw, my crypto/security classes in college all referred to "Charlie" as a third party :)

http://en.wikipedia.org/wiki/Alice_and_Bob
This is basically what Stripe does. The "CC Company" basically doesn't offer more than a simple yes/no API -- "approved w/ #" or "declined". It'd be great if they could do more, but that's where the opportunity for folks like Stripe lies.
They are. Protections are exactly the same (in the US at least.) You have protection from the moment that you learn of the problem, not when it happens.

Not that having your account drained doesn't suck, but your worst case scenario there isn't terrible unless you fail to check stuff and be responsible.
>But, if this breach is true, I hope they handle it well.

That is unfortunately the problem though. If this is true, they have already handled it terribly as it has already been 2 weeks since the attack.
ShowHN: Kudos Using Parse For Jekyll
A big part of that is that the whole of the game is built in a rush by people with no free time who are probably chronically sleep deprived. The machinery of the game ends up being essentially propped up on sticks and held together with bailing wire. As such the stories that you can fit in such rickety and uncertain machinery is typically the most linear. The more complex and dynamic a story is the harder it is to avoid big bugs within the story itself or due to the interaction of the story and the game engine. It also makes testing much more difficult, which is already short on resources for most games.

There's so much churn in the basic technology of gaming systems that it makes it difficult if not impossible to concentrate on only story telling.
What about for people who did not use a credit card to pay for linode but instead relied on PayPal. Should they follow the same steps? What about other cautious steps?
I thought about adding some caveats when I said "gave it up", but didn't for simplicity's sake. I do still have my gear and every now and then I pluck on it.

Yes, you can still record solo, but that's making music. What I gave up was being in a band. Keeping up with bandmates, practicing regularly for several hours a week, and playing shows in bars is possible but much harder when you have kids. I also find it much harder to keep up momentum when it's just me and just in my free time.

Ditto for making games. You certainly can make them in your free time (and I do), but it's a different experience from what you can get jammed in the same room with a few other inspiring people for hours at a time. In today's "everything digital, everything asynchronous" world, I think we seriously undervalue to importance of being there with people.
Despite what the other replies here are saying, this seems like a perfectly acceptable response to me. This comes off to me not as they're refusing to talk about it, but they _can't_ talk about it, presumably because of an ongoing investigation. I'm not sure what else people here are expecting them to say.
I am sure I have not come close to 37,000 times. I have observed that Legos we got for our kids vs ones that we had from when we were kids, are different. I'm tempted to test both 'vintages'. I've also got some from the Lego Dacta catalog when we were building robots out of Legos using the MIT 6.270 build guides. They are slightly different too.
Below shows that Obama can indeed take action to take prisoners of gitmo to trial. any reason he hasn't done any of this?

It looks like the document 'blocking money' in fact describes what the president would need to do to bring people to trial and even free them.... Am I missing something? Why hasn't he done this it seems pretty straight forward... I know hes a busy guy but I would put this shit high up there on my priority list...

(Found in the full bill at http://politics.nytimes.com/congress/votes/111/senate/1/196, I just did a search for 'Guantánamo', its at the bottom (the 11th appearance of the term)

--------------------------------------------

c) None of the funds made available in this or any prior
Act may be used to transfer an individual who is detained, as
of the date of enactment of this Act, at Naval Station, Guantanamo
Bay, Cuba, into the continental United States, Alaska, Hawaii,
or the District of Columbia, for the purposes of prosecuting such
individual, or detaining such individual during legal proceedings,
until 45 days after the plan detailed in subsection (d) is received.

--------------------------------------------

Subsection d goes on to list what is needed.

(1) The findings of an analysis regarding any risk to the
national security of the United States that is posed by the
transfer of the individual.
(2) The costs associated with transferring the individual
in question.
(3) The legal rationale and associated court demands for
transfer.
(4) A plan for mitigation of any risk described in paragraph
(1).
(5) A copy of a notification to the Governor of the State
to which the individual will be transferred or to the Mayor . R. 2346—63
of the District of Columbia if the individual will be transferred
to the District of Columbia with a certification by the Attorney
General of the United States in classified form at least 14
days prior to such transfer (together with supporting documentation and justification) that the individual poses little
or no security risk to the United States
4k video and the devaluation of "k"
> Off topic but still relevant, but doesn't it seem a bit primitive that companies have to store you CC# for recurring payments?

You really really don't have to. Any payment processor that isn't horribly incompetent does the unique token authorization scheme.

Storing CC #s for recurring payments is solely the domain of incompetents who have no business accepting payments from anyone.
Thanks :-P I got excited for a moment that someone on HN was doing something in my former field... nope, just another web thing.

Is it just me or is that a bit of an odd name? For me when I see MRI I think Magnetic Resonance Imagining, but is that just because of my field?
>Healthcare is especially good in this respect

I agree with your overall point but will temper it some by noting that there are VERY high barriers to entry (http://jseliger.wordpress.com/2012/10/20/why-you-should-beco... for one discussion I wrote) and those barriers are enforced by regulators. That being said, once you get the necessary credentials to enter the market the gig is pretty sweet and pretty protected.

The real benefits, however, appear to accrue at the lower end of the profession (nurses, P.A.s) and the very high-end (specialists). The great middle (family docs, internists) appear appear to be hurting.

Oh, and dentistry is awesome from a money / lifestyle point of view, but it's not much respected (http://www.theonion.com/articles/local-prostitutes-eagerly-a...).
Anyone know of any good way to export linode images to other VPS providers? Seems like I'll have to be doing it manually.
I recently took an older Android tablet and turned it into a wall-mounted dashboard outside my bathroom.

With widgets, it shows my work email, personal email, the most recent tweet on my twitter feed, and my calendar for the next couple of days.

Additionally, I purchased a waterproof bluetooth speaker for the shower so I can turn on Pandora from the tablet each morning before I take a shower. The speaker has forward/pause/next buttons, so I can easily move past any song I don't like.

Overall, I've been pretty happy with the setup and it seems like a nice way to re purpose an older device I wouldn't necessarily carry around anymore.
Use Firebase from Your Native OS X Application
Would like to point out that many years ago with respect to collecting unemployment that it was clear to me (after speaking to the former employees) that the ss office in the state that we were in was purposely coaching employees on how to stay on unemployment as a way of regulating the labor supply which could only absorb so many people otherwise wages would be depressed. My point is simply that there could be multiple masters being served here by these policies. Not saying that is why it is happening in your example but on the surface some things that don't make sense sometimes fulfill another purpose.

Another example might be looking the other way while employees cheat on expense reports. They get the money and everyone avoids additional payroll taxes.
Svbtle Style Kudos Using Parse For Jekyll
How on earth then are so many illegal immigrants making enough money to both survive and also send money back to their families in their native countries?

Also, anecdotally, and since you brought it up, I was in a situation where I lived for many years at or below the poverty line, but I made due by living in inexpensive apartments I split with other people in the same situation. I think most young adults who aren't given a trust fund or financial help from their parents go through a period like this in their lives, usually while developing more marketable skills or working their way up a company's hierarchy.

The point is, you learn to make do, and you learn to survive, just like everyone else on this planet does. And if you want to increase your standard of living beyond sharing a dingy apartment with other people then you make yourself more valuable to employers somehow or accept your lot in life.
Also news has the dangerous ability to dim your faith in the humanity by exceptions.
At some point wouldn't it be easier to create their own jobs?

It seems like a waste of energy to organize a protest with "We want work" signs when they could be starting a business or something.
It may be both. And since Rackspace is loudly publicizing that their actions are based on their beliefs, if they were to ever act contrary to their established brand, they'd lose even more than if they were to do nothing at all.
I've been using digitalocean for a hobby project, and am planning on launching a more serious project with them. For the past two months I've used them (so, not much experience, but some) I haven't had any issues, and they are very reasonably priced.
Why don't they network a bit and create their own design shop? Given that they're already all in one place.
They could say "We have hired matasano security to help us investigate the breach."
Ask HN: What would you do with http://startup.io?
I recently acquired http://startup.io , I am looking to contribute it to a great project. What would you do with it?
CSS Code Organization and Abstraction
If the University itself is what pulls the strings of the student media, then it is not free to be the student media. You need independence, the freedom to criticise the administration.
The fucker being referred to here is the research topic, not the neuroscientist:

> After Salimpoor had the car epiphany, she rushed home to her computer and Googled “music and the brain.”
Generally speaking, this is one example where having a good deployment system starts to look extremely valuable (along with tested backups and restores for non-deployed data).
Ah, Notes; the best UI, bar none. I remember discovering the mail window had NO horizontal scrollbar as I moved the cursor down a line and it skipped to the end of a truly epic set of Received: headers, all on one line, with NO WAY TO GET BACK except holding down the left-cursor key for what felt like an hour...

I later discovered the option to turn the optional horizontal scrollbar back on, in a four level deep menu somewhere. Rage.
Thank you for building the city of the future Microsoft, now please build a simple website that isn't broken for Firefox and Chrome users: >50% the users on the planet.
I did volunteer work at a soup kitchen and through the connections I made there I worked with someone who kicked my butt and fixed my resume. If that hadn't happened i wouldn't be making the salary I am now.

The ancient wisdom: give and it will be given you is mysteriously powerful. Humans want to help those who help others, it's in our genetics.
Saturday morning:

From: "Linode" <support@linode.com>
Date: Sat, 13 Apr 2013 00:11:09 -0000
Precedence: bulk
Return-Path: 6723614.1706014@e2ma.net
Message-ID: <knuab.c9dae.xxx@e2ma.net>
List-Unsubscribe: <http://e2.ma/optout/c9dae/xxx>
X-Test-Mailing: no

Dear Linode customer,

Linode administrators have discovered and blocked suspicious activity on th=
e Linode network.=C2=A0 This activity appears to have been a coordinated at=
tempt to access the account of one of our customers.=C2=A0 This customer is=
aware of this activity and we have determined its extent and impact.=C2=A0=
We have found no evidence that any Linode data of any other customer was a=
ccessed.=C2=A0 In addition, we have found no evidence that payment informat=
ion of any customer was accessed.

We have been advised that law enforcement officials are aware of the intrus=
ion into this customer=E2=80=99s systems. We have implemented all appropria=
te measures to provide the maximum amount of protection to our customers. O=
ut of an abundance of caution, however, we have decided to implement a Lino=
de Manager password reset. In so doing, we have immediately expired all cur=
rent passwords. You will be prompted to create a new password the next time=
that you log into the Linode Manager. We also recommend changing your LISH=
passwords and, if applicable, regenerating your API key.

The following represent best practices in creating new passwords:
-- Avoid using simple passwords based on dictionary words
-- Never use the same password on multiple sites or services
-- Never click on 'reset password' requests in unsolicited emails - instead=
go directly to the service

We apologize for the inconvenience. If you have any questions, please do no=
t hesitate to contact our support team at support@linode.com.
Any particular reason you say that other than the existence of the aforementioned "career incubators?"
I would cancel that card right now. IMHO You should never ever ever ever use a debit card anywhere else other than the ATM. Credit cards give you way more financial protection.
I was in the middle of typing up how disappointing the article was because it appeared to be some sort of fluff PR piece. I noticed your comment before hitting submit and realized I had only read page 1.
You're right, but I always try to underestimate things.

It would be pretty big if ownership turned out to be largely a hack people resorted to before they had the infrastructure to manage sharing properly.