skysight-inc/HackerNews huggingface dataset:
We know how to stop brute force attacks; we have known for years how to stop them. I see brute force attacks on my SSH servers all the time, and I ignore them. I am comfortable ignoring brute force attacks because I do not allow password authentication at all. The attacker would have to try to guess one of the users' secret keys -- and that is beyond just a long shot.

So why have we not deployed this "amazing" technology, or similar technology, everywhere? A lack of incentive. If a hacker successfully carries out a brute force attack, the company running the systems does not suffer at all; they just pass it off as "some dark wizard hacker pwned us, sorry!" Nobody is spending the money to deploy smartcards far and wide because nobody has any reason to. It is less expensive to pay the pittance required to clean up after a hack than to stop hacks in the first place. If banks had no legal recourse when some script kiddie hacked a customer account, they would be far more likely to give customers smartcards and use more secure authentication mechanisms.

To put it another way, making a brute-force attack a crime is placing responsibility for securing the system on the people who want to attack it. It should be obvious why that makes no sense.
I have cursed at working around IE quirks more times than I can remember, but I don't dump all the blame on Microsoft.

Why is this the top comment, it is just a rant/whine? What other browser released at the same time as IE6 would work well (or at all) with them modern web?

Microsoft has given customers a choice on whether to update their browser or not, and by in large they haven't. Then it becomes Microsoft's fault for not forcing them to upgrade. I don't think people need all their choices made for them. Why is it not web developer's fault for continuing to develop for outdate browsers? or computer manufacturers' fault for not loading a different, more consumer oriented default browser? or the users themselves for not taking a few minutes to update or download an alternative browser?
If you're on a team that uses groupme, kik, sms, or what-have-you for coordination and you're often at events or jobs where you are physically quite busy then it's enormously useful. Being able to read notifications without pulling our your phone is very helpful.
Already there: http://plaintextoffenders.com/
I wonder why the script doesn't just try to parse the metadata (and maybe H1) from the submitted site? That would impartially cover most cases, I think.
How does it compare to DisNix? http://nixos.org/disnix/
If a merchant screws up and manages to post a flat ASCII text file of credit card accounts with CVV numbers on a URL in a directory with an Apache index enabled, your argument says "well, sucks for the merchant and all their customers".

Since that would be a clear and basic PCI violation, yeah, it sucks for the merchant and their customers. Why have PCI compliance at all if the merchant can just throw up their hands and blame it on "hackers?"
I think I stopped using PSDs about a year after I learned CSS. I tend to design sites directly in HTML and use PS or FW to create various elements.

Now that I use Compass/Sass, it's even faster.
There's ctags/etags/etc; vim and emacs and many other editors support them well.
Check out http://www.serverbear.com
> They have to make a browser that beats every other browser in it's standards compliance, stability and performance. They have to create the greatest browser that has ever been and ever will be.

Didn't we get that? Wasn't that ie6. What went wrong was the internet didn't go away and we didn't all want desktop software.

No I think we should all know how that story ends by now. The answer has got to be open source or open standards at the very least. We need to be in a place where your browser doesn't matter, there's 50 out there choose the green one if you like green.
I started one of these 3D file sharing sites a couple of months ago now (http://www.fabfabbers.com/)

But having done it, I'm not sure it's really the way to go. There's a proliferation of them now, and people are still preferring Thingiverse, because it still has that inertia.

I think perhaps the next step is really more tools to make it easier to design things in 3D - as I think that's really the hard part for most people.
The real reason why barns are painted red
I think you're forgetting someone's role in this, and that would be all of us.

If enough of the population was against this type of behaviour, it woud be made illegal (and already-illegal behaviours would be cracked-down upon) but it's not.

Corporations have a legal obligation to provide as much value as possible for as little money as possible, and if the laws let them do this in an inhumane way, then that's the law's fault (and by extension the fault of the society that enacted those laws).
Looks better than your average calculator watch, I'd say.

Progress doesn't necessarily start at the top.
I forgot to add, quite like the name 'Layer By Layer' :)
The benchmark is on web requests per second, so it really needs to cite each server's location or ping latency relative to the machine doing the benchmarks. It's unfair if one of the servers is on the opposite coast of the other 2.
Go straight to article referenced in Slashdot
http://www.tomshardware.com/reviews/chrome-27-firefox-21-ope...
What law would cover that, some implied duty to help protect something that could be intended to be kept secret? I'm pretty sure that duty doesn't exist.
Introduction to liquid organizations
Somewhat off-topic: it would be cool there was an app to play "3D printer roulette". You would click a button and your printer would randomly print a 3D model fetched from the web. I bet I could spend hours playing that game.
I would love to see an UberChopper to the airports.
Very interesting read. Definitely paints an interesting story about sensationalist "news" story like Toronto Mayor Rob Ford smoking crack.

Here's a good quote:

"Gen. Smedley Butler defined a racket as something that 'is not what it seems to the majority of the people,' where only a small group of insiders know what’s really going on and they operate for the benefit of a few and expense of basically everyone else.

It’s become clear to me that this is the only definition of the online-driven media system of today: a racket."
sigh

I call these "weekend benchmarks" -- what you'd typically do when you have a block of free time, then spend time optimizing for said benchmark. Roll in on Monday with some staggering results, only to find one (or many) of your variables were off.

Did the author try multiple instances on each provider? VM tenancy is a bitch. (Think of how annoyed you get at the noise levels, when your neighbor in the next apartment throws a party)

Is the author's source benchmarking machine, a physical machine, or a virtualized guest? Does it have power savings turned off so that the process is running at 100% speed, instead of a variably-clocked down core?

Did the author enable or disable TCP time-wait recycle? So he doesn't bump into said ceiling when running such tests back to back?

Did the author run the tests back to back, or have a cool down period between tests?

Where was the author's network upstream located when he tried said tests? Were there any network issues at the time of the test? Would the author even be aware of them?

Your page you're testing against, does the same database call, which is presumably cached. Did he throw out the cached results? Can he identify the cached results?

Are we firing up ApacheBench with HTTP keepalives enabled? With parallel connections? How many parallel connections?

How many Apache servers (StartServers, MinSpareServers, etc)? Which httpd modules were enabled? Which httpd modules were disabled? Which PHP modules were enabled?

You're trying to benchmark CPU and I/O horsepower across three different platforms but doing it through this narrow "straw" which consists of your "independent server", your upstream, your upstream's upstream, your upstream's upstream's peering connection with Amazon/Linode/DigitalOcean, your web server and its PHP module, your application, and MySQL.

If you're rolling your eyes at this, then you shouldn't be doing weekend benchmarks.

I'll leave you with this as well:

http://zedshaw.com/essays/programmer_stats.html
The contest ends in 2 days, having been open for 3 months.

Not enough time to participate, but no public results to examine either. Probably better to submit back then or wait until there are some cool entries to examine.
Google lost a lot of trust and goodwill from a lot of its power users with this move. I hope for them they had a good reason.
This would just lead companies not to disclose cases, which would be far worse for everybody.

Openness about this kind of thing should be encouraged.
> Teenagers aren't a significant part of the economy

Yet every adult working at a job was at one point a teenager. The first time they have to punch a clock and say "yes sir" to someone giving them an attitude shouldn't be when they are starting their first job at 24.

> Is there? Please say it.

The first situation has three people with jobs, while the second only has two. Plus the people who only have skills worth $10 an hour can find a job in the first situation, where they can't in the second.

But the personal attacks have started, so I'm out on this thread.
Or drop a bit more cash on an android tablet displaying a web page using the FB API.
Orcam: Google Glass on steroids and with a purpose
Secure communications using the KLJN scheme
Ryan, huh?

Wanted protégée, like Pete made me his protégée, 'sept Ryan is stupid, so hopeless, that would be.

God says...
there retard are_you_deaf tearful forehead beggar-man Redemption
whilst foreign proclaim death-sweat resisteth souls Donations
finally theft guessed weltering baptise preferred beams
presented Whereat studies beareth hatchet You_know lip-labour
exuberance glorious cementest arrival stores two Fathers
prefer paper bitterly want terrors time applauses suggestion
redeemer pitch find ourself fellow-citizens heads_I_win_tails_you_lose
propound mayest lowest factito voluptuousness habitation
Replacement water-spouts overspreading beggar cedars copied
assail shod Prepared mountain deeds fluttereth ready gratification
part fairness Libya remission rip_off incurred decay mortal
corners wanderer ascertained Wills Japan Alexandria Burp
recalls eight earth extinguish volumes shouldest Mexico
happiness rejoice suck guess do_you_get_a_cookie alive
Redeemer wanton This_is_confusing CAN deemed know presently
formest star-gazers calmed sufficest vital none Away if_and_only_if
and_then_what tempers
But for the majority without an SSD, Chrome is a lot slower.
But that almost makes it worse! Knowingly writing a Mary Sue is almost inexcusable if you're trying to write legitimate fiction (rather than an educational parody). I have nothing against parodies, especially good ones, but I just think they should be labelled as such. It slightly pains me that it's being held up as a good example of fan fiction when, arguably, it's not.
I don't think you understand... he sat side by side with Steve for a very long time. He was a fixture at electrical audio. I used to frequent PRF/Electrical Audio forums all the time and read a bunch of posts he had about being an intern. You can still read a lot of them at http://electricalaudio.com/phpBB3 under Intern's Corner (used to be electrical.com til they sold the domain) His user name was Intern_8033. Steve is on there all the time too.

Also, Steve Albini prefers "Recording Engineer", not producer.
> Who is truly, a slave?

Both of them. The second one is aptly named a wage slave.

http://en.wikipedia.org/wiki/Wage_slavery

None of these are ethically acceptable.
Winklevoss Twins Help You Trade Bitcoins With Their Bitcoin ETF
You are fighting various other teams in Redmond/power users that have issues with OSS and technology that's cross platform and not from the Mothership. Python/Iron Python would have been a great default language for administrative scripting , but nope, they had to reinvent the wheel with PowerShell.

(I've had MVPs yell at me for discussing data analysis with Python, even on Windows.)
Author here. If you have ideas, proposals or simply criticism, feel free to share it. I will love to discuss about liqorgs proposal.

I hope this will help to unleash the true power of organizations without being hierarchical.
I'll take a free Pebble-minus-one-button.

I'd even pay S&H...
I think the biggest fat tail distribution of all is the things that developers are asked to do on a day to day basis. The fat tail is where frameworks break down, where development processes and procedures break down. Most of the stuff I do is stuff that I have never done before and will never do again.
I use Linode. I like Linode.

But they do not make it very easy to spin up / down new instances. Setting aside the API, they bill you for a full month for a new instance as soon as you create it. True, you get a pro-rated credit if you delete it earlier but this is awkward and I think it only pro-rates by the day.

And StackScripts kinda sorta work, but they are hard to write/debug and are not portable. It's a pretty weak offering.
Fair enough, but the third world was built on the same things. It's not as if the Asians didn't commit genocides or Africans didn't sell other Africans into slavery and Native Americans didn't wage brutal war on each other. I don't need a white man's guilt when there's plenty of guilt to go around. History is what it is, I don't hope to recreate it but I wouldn't be able to change it even if I had a time machine. Fact remains that even if the world isn't always better off today than it was yesterday, it's generally better off than it was 100 years ago.
It's only been five months since Jan 31, but regardless, remember that Kickstarter projects are often run by people fairly (or completely) new to the manufacturing industry. It's no surprise that they wouldn't have properly planned for all the kinks and obstacles they would run into. It seems foolish to get upset at a group of guys who really had no way to know how long the process would actually take (having never done it before) and made the best educated guess they could because Kickstarter made them pick a date. Of course the deadline wasn't met. And, as you mentioned, they've been surprisingly open about all their problems throughout the process.
You could mount /etc and /usr as read-only, and have the upgrade process briefly remount it read-write.
Then you won't accidentally edit something, it will be very obvious that there is a reason for that read-only mount...
NSA whistleblower...

:)
"Information abuse" is some kind of cyber-PETA ethic and law I had not yet considered, and I'm not sure it's really a good road to start down.
"Common sense isn't."

I remember an organization I joined the board of, where an earlier board had removed a section from the standing rules, leaving a gap. The board immediately before us decided this was silly, and obviously we should just re-number.

Except this meant going through and updating every document that referenced the standing rules, printing out and distributing the new versions, &c, for an entirely superficial change.

We rolled that back.

People need to be made to think about the consequences of policy, and unfortunately we don't have a good venue for that - protests aren't it, but our national discussion otherwise seems to be dominated by sound-bytes, gotchas, and the horse race.
i was about to comment that they probably just used webkit
Bonjour.

Ce n'est pas une grosse surprise de trouver des gens de wc3c sur HN parce que les deux sont des communautés de programmeurs.
How to Automate the Proposal Process
This is not limited to blogs. Most news outlets do the same.
Where do you think the line should be drawn?

Would you be allowed to make your slave eat off the floor because he/she did not work fast enough or refused to perform a sexual favor for you?

Would a slave be able to terminate the arrangement under some conditions?

If the slave believes that they are being treated in a way that violates the slavery regulations do they have a right to bring charges against their master, do they have a right to legal council (if so , who pays)?

What about offspring of the slave, can the master decide who the slave will breed with (if at all). Do the offspring of the slave become property of the master?
I am starting to like the progress of Firebase. Seems pretty promising. Good job guys.
[Firebase founder] Thanks for the suggestion! We'll chat with other users and see if there is high demand for this.
yeah, still waiting on my arctic white one as well.. not too bothered though. having been on kickstarter a little while now i've come to shut-out any mention of 'planned release windows'. its pretty much hopeless. anyways, its kind of nice being surprised every once in a while when a package shows-up containing a cool little gadget i totally forgot i ordered..
Similarly, should the programmer(s) who implemented the feature (plus the staff who devised and approved it) be accused of reckless endangerment of the data?
Of course it's possible, wealth just needs to be redistributed fairly.

http://www.youtube.com/watch?v=QPKKQnijnsM
That's possibly the most black and white example you could have posted here. It should be obvious to even the dumbest among us that Hugh Thompson was a hero. I understand that there were congressmen who wanted him to be tried as a traitor, but by making such statements, those congressman themselves should have faced imprisonment. Our elected officials should never condone war crimes. When they do, they should be removed from office and charged as the criminals they are.

I'm a former Soldier. One of the most destructive things that ever existed in the military is the attitude that people should just shut-up and follow orders. In a true, disciplined environment, Soldiers don't question routine, normal things. They just get the job done. But when it comes to morally ambiguous (and your example is by no means morally ambiguous) situations, you have to use your judgment. Sometimes superiors give bad orders because they overlooked something, when this happens, they will often correct themselves when someone questions the wisdom of what they are doing. Sometimes, however, superiors give bad orders because they don't really care what the right thing to do is. Sometimes leaders think that the regulations and laws governing the military don't apply to them. In these situations, there really isn't a good option for Soldiers to take. In Hugh Thompson's case, he ultimately won his battle. Some Soldiers won't be as lucky.
This seems like a way to force developers to use the correct way to detect which browser is used: Check for the specific thing you want to do.
Why the hating on the HURD?
I didn't do a like for like switch from the Web to e-mail, it was more specific for the format, so I can't make a direct comparison sadly. Because e-mail proved way more successful for me, I've basically let the Web properties die but that was not the original intent.

With e-mail, the engagement and revenue are way higher, and it's possible to get an accurate feel for how big the audience is (as in, I know I have 123k subscribers or whatever) and how many of those are engaged, reading, and clicking on stuff.

I was very skeptical at the start and just tried it out because of all the e-mail newsletter hoopla on HN 3-4 years ago but it's now my main business and growing more rapidly than my Web publications ever did.

There are, of course, many who are not fans of e-mail but like Facebook oriented businesses can make good money even though not everyone likes Facebook.. so too can e-mail companies do very well off the majority who are still using e-mail.
*.github.io won't matter. People see it and know it's most likely something legit.
So, can you use Pixate to do layout, or only styling?
Has anyone had any good experiences with any European VPS providers?
Bukito 3D Printer: Portable 3D Printer on Kickstarter
oops - I was thinking of the "long tail" not the fat tail.
I'm not sure what you mean by age out?

You're not allowed to age discriminate in hiring, so you can't advertise jobs on that basis.
How to Serve Your Customers Like Zappos
Striking how similar the concerns are from one age to another. I've often spent a long day tracking a bug down, fixing it, and pushing it out to production, and thought, "Now I've written the whole thing: for Christ's sake give me a drink."
Why must ATT's situation be compared to an unlocked house rather than a pile of papers lying on a street corner?
Sky Beats Microsoft in Battle For SkyDrive Name
I've never thought of that approach, and of course, how to go about limiting that as an attack vector. We so often try to make it as easy as possible to signup, we forget to think of it as a potential security leak.

Thanks for this insight.
For the most part this all made sense to me, but it also seemed to contradict experiences I've had. For example, whenever I have work days that consist of the same type of meaningless coding it seems to drag on forever, but give me an interesting or complex (or new) problem that I can really sink my teeth into and the day goes by in a flash.

Also, National Geographic's show Brain Games did an episode about our perception of time. It had a lot of this info in it; it even showed the experiment of displaying familiar pictures with the occasional unfamiliar picture mixed in. http://braingames.nationalgeographic.com/episode/2/
Sorry, I tripped over this:

"For all current customers of any of the paid versions, we are going to automatically give you a free full year (12 months) of Premium Support. We’ll upgrade you to the plan closest to the level of product you purchased, but even at the Premium Support Lite level, that’s a $600 upgrade we’ll be providing to you at no cost. We’ll be doing this over the next couple of weeks and you’ll be notified when your support plan becomes active. In the mean time, continue to use support@pixate.com as you have been."

http://www.pixate.com/blog/article/2013-07-01-pixate-free/

I get it now. :)
Two doctors are not interchangeable, but two radiologists are. The fact that they both make $300k/year doesn't change this.
I personally believe they're better off keeping it as a paid service (however small the market may be) and offering the additional services at an additional price.

Now that they've made Pixate free they can't (really) go back to the paid model. Seems like a big punt for me.
Afraid of SSD?
>6M users is just not interesting when you're chasing having hundreds of millions of users.

In the use case of a type of site where cascading network effects are of paramount importance, 6M engaged users is huge.
Libsvm GUI
I don't think they are providing a 'proprietary' format as such, it's just gcode tuned to different printers.

Reverse engineering the head paths to produce a mesh would be pretty difficult (though not impossible)
In the past year I've lived and worked on 3 continents, done a long road trip, now settled in a new city and established a home there, had a few different jobs, met many new people and had a window into some very different worlds. This is very different from pervious years of mine, as I lived in the city I was born in for my entire life.

It's the only year I haven't looked back and thought, "Wow, it's been a year, already?" I actually look back and think about just how much I've done in a year. The passage of time still stings in a way that it always will, but I've figured out that the key to avoiding pure regret is having a host of varying experiences to look back upon.
Lawrence Lessig now doing an AMA at Reddit
Link: http://www.reddit.com/r/IAmA/comments/1hibzy/i_am_lawrence_lessig_academic_activist_now/
Unfortunately, I have to disagree.

In fact, there are some large vendors of software that truly use encryption instead of some form of one way hashing. Sadly, I have to deal with software like this and there's no chance it's going to change any time soon.
Why don't you like lastpass? Genuinely curious. I've been pretty happy with them.