skysight-inc/HackerNews huggingface dataset:
Django or Ruby On Rails for ultra fast web development 
I am a PHP programmer looking out, thanks to the HN community. Out of Python / Ruby what would suit my need of developing web apps at the speed of my current PHP speed of development as well as adequate security.
I am not looking at performance as the latest benchmarks put both at the bottom of the ranking.
FISA warrant = "general warrant" = misnomer

According to the 4th amendment, "warrants" must be used in specific investigations and for specific individuals. There's nothing specific about a FISA warrant. They just get data en masse from a lot of people. And they use this paper that they are calling a "warrant" from the FISA court, that says they can get the data on everyone.

Also, FISA warrants completely ignores such things as "probable cause" and "reasonable searches", which are pretty important for a democracy, I'd say. You can't say you're getting all the data of 100 million people, and also have "probable cause" for them.

"The Fourth Amendment (Amendment IV) to the United States Constitution is the part of the Bill of Rights which guards against unreasonable searches and seizures, along with requiring any warrant to be judicially sanctioned and supported by probable cause. It was adopted as a response to the abuse of the writ of assistance, which is a type of general search warrant, in the American Revolution. Search and seizure (including arrest) should be limited in scope according to specific information supplied to the issuing court, usually by a law enforcement officer, who has sworn by it."

https://en.wikipedia.org/wiki/Fourth_Amendment_to_the_United...
Funny that the UK has all the ambulance-chasing lawyers too now (thanks America!) yet there is no such disclaimer on Glastonbury.
In case you haven't heard the term before, the thing you're talking about is called Noble Cause Corruption.

"Noble cause corruption is a police crime in which police officers violate legal or ethical standards in pursuit of what they perceive to be the benefit of society at large."

http://essayonnoblecausecorruption.blogspot.com/

http://www.patc.com/weeklyarticles/print/noble-cause-corrupt...

The police/prosecutor/authority figure believes that their immoral behavior is acceptable because they are the "good guy". The disturbing thing (as you point out) is that regular people who read a story like this also become corrupted. "The accused did one bad thing, therefore all the bad things the police did don't count."
UK beefs up security as if preparing for civil unrest
I was following most of those revelations when they were happening, but I didn't knew how the story progressed, nor what implications it had for Brown.

Michael Hastings died in a car crash, Barrett Brown is facing 105 years in a prison, Snowden needs to hide from the authorities...as some of those (death of Michael Hastings) might be just unlucky coincidences, the list goes on. As much as we had made tremendous progress in every single area of life and science, I'm a bit concerned that the name "Dark Ages" is more relevant to present times than it is to the Middle Ages.
While you (and anigbrowl below) are both right - in that my counter examples all involve some sort of physical inevitability of the "lock in" - I'm not sure that's necessarily a hard requirement to enforce this kind of lock in. From the "real world" there's things like journalist lock ins at political events which're much the same - a voluntarily agreed upon limitation that's not enforced by the fact that you just stepped out of a plane or descended 120 feet under the sea, but which are no less "enforced".

I'm of the opinion that an event organiser is perfectly entitled to put these sorts of restrictions on participants ability to exit an event (within some reasonable bounds), and so long as it's clearly enough explained before participants agree and attend, a "claustrophobia-induced panic attack" should be no more or less of a concern for event staff than it'd be on an international flight. The sufferer should be extended all sympathy and assistance - but the decision to "break the agreement" should be of the same sort of level as diverting a Sydney to San Francisco flight to Hawaii, sure you'd do it in the face of a clear and imminent medical emergency - but there's a certain (and perhaps large) level of discomfort which passengers are rightfully expected to "put up with" as part of the agreement. People who're "afraid of flying" and prone to panic attacks understand that, and make appropriate decisions (for them) all the time. From the article's "and it seemed that she'd happily embraced the Stockholm syndrome." it sounds to me like she accepted "the rules/agreement" in the end, while perhaps regretting the choice was in this case incorrect for her - the very negative use of the phrase "Stockholm syndrome" implies to me that she thinks the event organisers and the "two goons" did the right thing.

I'm sure other people think differently - and while I respect that different opinion - I'm not sure I agree that every event ever organised needs to cater to every possible latent bad reaction. _I_ want to be able to attend events that challenge my personal limits of comfort/security/sanity/whatever. I'm happy enough for those things to have clearly and strongly worded warnings - but I'm unhappy with someone saying "that's not a restriction imposed by a law of nature, so you can't impose it as a requirement of an event you run".
Amazon advances with Autorip - who can compete?
Obviously, all charges are alleged.

* 20 years for charges stemming from going off the deep end and making threats directed at an FBI Special Agent.

http://www.scribd.com/doc/109025315/Barrett-Brown-Indictment

* 20 years for hiding two laptops and deleting evidence after being served a warrant.

http://www.scribd.com/doc/121967213/Barrett-Brown-1-23-13-In...

As mentioned in the article, his mother pled guilty to helping him hide the laptops.

http://www.scribd.com/doc/132408951/Karen-McCutchin-Plea-Agr...

* 15 years for copying and pasting a hyperlink to a document that contained credit card info for at least 5,000 people, and 30 years for possession of stolen credit card numbers and CVVs.

http://www.scribd.com/doc/115981886/Gov-uscourts-txnd-226354...

I only see 85 years, I'm curious how the author obtained the number of 105 years.

> Considering that the person who carried out the actual Stratfor hack had several priors and is facing a maximum of ten years, the inescapable conclusion is that the problem is not with the hack itself but with Brown’s journalism.

He was facing 30 to life in prison [1], and had that reduced to 10 years after pleading guilty. Barret Brown has pleaded not guilty to all charges.

> The Stratfor data included a number of unencrypted credit card numbers and validation codes. On this basis, the DOJ accused Brown of credit card fraud for having shared that link with the editorial board of ProjectPM.

"Editorial board" here is referring to a public IRC channel. Elsewhere it is stated that it is a private IRC channel, but it appears to be posted publicly on a Pastebin dated May 2011 so that seems a doubtful claim. [2]

I hate seeing so many obvious mistakes in a piece as biased as this, since it forces the reader to cross reference everything. It's particularly amusing given the constant interstitials asking for donations to support this journalism.

1. http://rt.com/usa/anonymous-stratfor-hammond-judge-440/

2. http://pastebin.com/QNuXwRTn
>> one of the most common electronic medical record systems

Can you point to the company name? I am checking what is out there (EMRS).
HowTo: CloudStack + Stackato Platform-As-A-Service
BA trials 'time-saving' electronic bag tag
It's hardly surprising, really. The generation who lived through the hedonistic days of the swinging 60s and changing political landscape of the 1970s while enjoying student grants and free university tuition would only naturally litigate against young people wanting to have a party in a field once they grew old.

It's easy to be cynical, so I am!
The TCP server example shows a different protocol than the default redis protocol.
(As I could not install it correctly I couldn't try it.)
If this is the case current redis client libraries cannot be used.
So should I trust the update that apt-get shows me? There is a 12.16.1760 in the deb.opera.com repository while the opera main page gives a download for version 12.15!
I appreciate the effort, but I would never use something like this which is not open source.
> I don't know why I was being such a pessimist about it.

Almost everyone I know that's involved in some kind of activism has this happen to them; I know that I feel it almost all the time. I'm not saying you're actually _doing_ any activism, but I think it's a side effect of paying so much attention to the letter of the law: law is a messy, sloppy thing, or at least it appears that way to this non-lawyer. It doesn't mesh well with my 'computers are deterministic' general mindset.

And really, _especially_ on this privacy front, it's terribly hard to see that these things are going to happen, get called 'crazy' and 'paranoid,' see them happen, and then sigh: "I told you so."
Stratfor sells news analysis. They are not a "private security company".
They're not using the same definition of "social welfare" that you have in your head.

http://en.wikipedia.org/wiki/501(c)_organization#501.28c.29....
http://www.slate.com/articles/news_and_politics/explainer/20...
In a stackoverflow thread I found a reference to this classic:

'"Dependency Injection" is a 25-dollar term for a 5-cent concept.'

http://www.jamesshore.com/Blog/Dependency-Injection-Demystif...

I do think it is a useful concept - but I sometimes think it gets a bit blown out of proportion.
From memory 40% of the profits of US businesses (public I presume) are in financial services. That's a huge sector.

I think Singapore still has a smaller financial services business than you might think, although growing.

(Need some references but on train)
This seems more than petty childish behavior to me. This might sound very much out there, but for the sake of argument, just hear me out.

Are you sure your company isn't downsizing? All of his actions so far point to the possibility that he (the company?) wanted you to quit. And if he (they) did want you to quit, he (they) could have given you the pink slip?

The most obvious question that follows is, why you. Well, you did say you joined them recently, so there's less to worry about the knowledge transfer. Maybe they want to save on the severance package? Maybe they want to do it quietly without spreading panic?

The whole thing seems a bit suspicious to me. If you choose not to investigate, just make sure you deal with it professionally - see vishaldpatel's response [1].

A part of me tells me that you may just have dodged a bullet. Good luck for your future. :)

[1] https://news.ycombinator.com/item?id=5951062
Try hard, don't worry about results, stop thinking. :)
I've had plenty of fun at those.
I understand dependency injection, but I never understood dependency injection frameworks. For me the whole point of DI is explicit composability.
There should only be a few well defined places in my application where all my classes are assembled into a working program. If my classes cover my domain nicely, I should be able to compose all kinds of programs (including tests) and reuse code.

If my objects get injected to each other automatically by their name then my dependencies are just as predetermined, which results in coupled code, except the coupling is now difficult to read or modify.

Once I decided I am only using explicit injection, I don't need a framework, I just instantiate my classes in the right order and pass them into each other. What can possibly be more pythonic than that?

I have the same issue with Angular.js btw. They are trying to make is easy to start by adding dependency injection magic, but in reality all I see is "this can't possibly work (and indeed it doesn't)", so I just need to spend more time digging and understanding the magic before I can start writing ANY code.

Every documentation should start by explaining the explicit way of doing things, then adding the sugar afterwards.

import this
Now I know why established newspapers like the times place such a high value on integrity of reporting and fact checking. We are in a time like the first newspapers - where Napoleon would publish outrageously biased journals, to attack the other outrageously biased journals. Eventually people listened to the ones who had the high standards of integrity.

Blogs, online websites etc are in the same position right now.

Who runs thenation? How can I trust what sounds like a well researched piece?

Are there really a wealth of funded private armies running around Americas underbelly interfering with its political process as USA was 1950s South America? Boy have those chickens come home to roost
Reply From Kintek: How to properly plagiarize a website
Wow this article is stunning. I mean, the tight links between government and corporations were always kind of supposed. But this story exposes it and it's scary! What happens in those backrooms is fucked up.

From the story:

The plan called for “disinformation,” exploiting strife within the organization and fomenting external rivalries—“creating messages around actions to sabotage or discredit the opposing organization,” as well as a plan to submit fake documents and then call out the error.” Greenwald, it was argued, “if pushed,” would “choose professional preservation over cause.”

It's crazy to realize that when people have power and the power is being threatened, like in this case, they would do anything to preserve it at the dispense of people who try to do bring the truth to light. Because the truth will hurt them. Human nature at its best and capitalism at its worst.
Alcoholism in Antarctica
Just don't touch anything. Go to the company and finish the leaving process. Anything you may try to do in the system can be seen as a problem.
Perhaps, but the record is to put a human in space. The Soviets won most of the space race, because they did most of the milestones first. In the terms of race; Denmark could beat Japan if Japan never puts a human in space beforehand.

Of course, saying 'Denmark' in this context seems a bit weird, as it is not our government pushing it, but volunteers. But I will admit it does make me a little proud to be Danish. One of those few times.
You say that it "Implements salted password hashing" but you don't mention the details of the method. Which method is it - bcrypt, md5, scrypt, sha1, pbkdf2 or something in-house? Why not say which?

I confess that I had to look up "key stretching". Is it usual to do this, and why do you do it?
> If I buy a plastic toy for my kids, .... It's enough that it fulfils the purpose for which it was made.

I sincerely doubt that. If the toy was made by child labor, would you still buy it? What if the toy was created from oil in war zones with child militias? Or what if the toy was made by companies that dumped oil in the oceans?

If you do indeed say yes that all you can about is the functionality of the toy, then I would claim that it is some strange priorities. Otherwise, you do have priorities other than the functionality of the toy.
No way would I go if it's 80 minutes. That is like $25 to get down there and back. Why travel down there only to be not allowed in the building? I usually stick all the keys and crap in a letter size envelope and mail it.
There may be an argument for life in prison, or even execution, for people that are so dangerous that they should never be allowed in the society again. But either give life, or put a cap on prison sentences at say 25 years, total, like it's in many other countries.

This idea of "adding" sentences is ridiculous, and my guess is it's only (ab)used as a way to force people into agreeing to declare themselves guilty, and the prosecutors going "easy on them" and only asking for 30 years in prison, instead of 100, if they win.

That's not justice and people should be opposing this. I think it was on The Daily Show where a guest talked about a documentary called Gideon's Army where they're talking exactly about this issue, and how prosecutors are forcing 90% of the people arrested to admit guilt this way, before they even get a trial. So 90% go to prison without a trial!

It also must be very convenient that the US law is so complex now, and has gotten to the point where everyone can be incriminated with something, so basically the prosecutors can threaten just about anyone with at least a charge or two, if they want to. They must be BS charges, but lucky for them they manage to convince those people to agree with a "lesser punishment" before there even is a trial. I'm sure the private prison system and their lobbying plays a big role in this, too. It's self sustaining corrupt system.
They arrested his mother, and were coming for him. That's pretty scary stuff - people don't act logically when they're scared (that's why we give them defense lawyers).
>I'm not saying you're actually _doing_ any activism

You mightn't have meant it but that was a polite way of provoking a bit of self evaluating. I don't really know what more to do outside of donate to the EFF, write my Congresspersons, etc. But I haven't made nearly an exhaustive effort of investigating what I could be doing.

>It doesn't mesh well with my 'computers are deterministic' general mindset. And really, _especially_ on this privacy front, it's terribly hard to see that these things are going to happen, get called 'crazy' and 'paranoid,' see them happen, and then sigh: "I told you so."

Are both very insightful statements.
How la Gendarmerie (French military police) ditched Microsoft and McAfee
Until we know more it would be folly to upgrade, I would recommend using a different browser for the time being.
There appears to be a bit of a conflict between the cardinal rule you were taught when you worked at NSA of not collecting information on US persons with the current practices of the NSA.

The Section 215 program in which the NSA has been collecting metadata about every domestic telephone call would appear to violate that rule, even if, as we are told, only a couple dozen NSA employees can query the database, and even if they only use it for investigations related to terrorism.

Likewise, the non-us persons targeting rules leaked last week suggest that the NSA has ongoing access to GSM Home Location Register data for the entire United States. While this doesn't pinpoint someone's location to a house or street, we're still talking about the NSA getting city-level location data for hundreds of millions of innocent Americans.

See page 6 of:
http://www.guardian.co.uk/world/interactive/2013/jun/20/exhi...

Given how compartmentalized NSA is, it seems quite reasonable that your former team (which, I assume, penetrated the computers of foreign targets) would have no contact at all with the teams tasked with collecting domestic communications.
See also: Twitter's Twemproxy (http://github.com/twitter/twemproxy)
I always recommend the same:

Design and other professions can be selftaught without any problem as long as you know what to learn and have time to practice and master.

Since design is a very large area, I assume you want to learn how to design stuff that would be later in Internet, so it will be better to learn (in this particular order): typography & grid systems. Then color systems. When you master these areas, you can go to the stadium of the composition with color and form, where you will learn to draw.

90% of the design of an application go through the use of typography, the arrangement of elements on the screen using grid systems and interactivity of these objects. The rest is cosmetic. You can master cosmetics later learning to copy styles and practicing to the point you master them. For example, being able to illustrate, in this case, it's a matter of drawing, not doing extreme typography use, but that's another area of design and it will requiere grid to illustrate well, colors to give illustration deepness and etcs.

Go to amazon and search books on these matters, get inspired and start the selftaught process.
Automatic translation : http://translate.google.com/translate?depth=1&hl=fr&ie=UTF8&...
He was kicking heroin at the time...
From the Sophos article the malware spread is Zeus which is Windows based.
Still happening, except they wouldn't last 2 hours like OP's story. I took an american colleague to a rave (in dublin) about a year ago and he was freaking out at the fact that you had to meet someone somewhere then get passed off to a few more people before you got there. "Its like the movies man!"

Then we raved until 9 in the morning to some deep techno. There were no official photographers.

I honestly thought NY would have a majorly active underground party scene.
False dichotomy. Life isn't and can't be completely safe. But abandoned structures are considerably more dangerous than much of life (with the exception of car travel, which there's a cultural bias that leads people to ignore the risks of. Frankly you have to be crazy to get in a car in this day and age, but that's another argument). Building codes and fire escape requirements exist for a reason; sooner or later a lot of people will die at an event much like this one. It's unfortunate that there's no way to legally accept the risks of something dangerous, but it would be very difficult to make such a thing legally rigorous (if you can come up with a good proposal it will have my support).
Python itself has DI built in throughout the stack.

Building Java like DI mechanisms is cargo cultism. The whole point of DI in Java is to work around its static typedness, so one can perform runtime binding of components in a dynamic manner.

Three quarters of cool Java and .NET "design patterns" are just band aids around semantic limitations of these languages.
And so does the rest of the world. What's your point?
:) I think something that's sorely needed is easy-to-use crypto for 'normal' people, and by 'normal,' of course, I mean most of us. I recently set up PGP for all of my email, but it wasn't exactly something that I'd recommend to a non-technical person.

If you're looking for something you could do.
Well, the LOCK discussion in the linux docs I linked could be a bit vague, because there is also the x86 "lock" instruction.

I was talking about how lock worked in linux, which could be implemented using lock+addl, or xchg, etc. The TSX HLE stuff (xacquire/xrelease) are precisely what that document doesn't cover.

So it's a bit convoluted. I was talking about micro-arch + linux implementation, and how it invalidates TFA's assumption of speculative execution. The documentation talks about micro-arch, but could be mistaken for discussing the ISA.

So you're right, the article is discussing the micro-arch(and the ISA inherently due to TSX), and the document I posted is only talking about micro-arch, but could be mistaken for ISA stuff (as per a private email I had with someone about the word LOCK)
We did not publicize it in any way because we are a legit film streaming company with hundreds of distributors worldwide, and no good can come from any awareness of a site that looks like ours streaming pirated content. Maybe some day.
I'm sure there's special agent training on applying pressure to unsettle a target, people don't know how they will react to such pressure.
Interesting opinion on the timing and method of the michael hastings car crash: http://rt.com/usa/michael-hastings-cyber-car-218/
There's a big fence around Glastonbury - and wandering off into the Somerset countryside doesn't hold the same level of risk as walking out into the desert...