skysight-inc/HackerNews huggingface dataset:
Yep, I thought that too. The vast majority of website owners have had external developers build their websites. Often those developers are long gone and the website owners left to their own devices (or CMS's). The site owners are now confused and think they have been hacked and don't know where to turn to.

There is actually a business proposition here. You could contact George Smith and ask him for a list of all HTTP referrers. Then contact each site in turn and ask them if they need any help.

Even if they have it sorted already, it might be a good intro into some of these small enterprises.
pg, please allow me to try another tack to that complaint:

Are founders overly homogeneous?
Thanks for the support, but I think we are on our own here.

What I am thinking about:

The tricky part, as far as I have read, about managing your own e-mail is that spam lists are kind of easy to get onto and hard to come off of. So, since I have accepted the fact that e-mail is insecure once sent (recipients use Gmail, Hotmail, etc), I could go with sending e-mail through a proper provider and receiving on my own server with encryption. Though this might be a bit cumbersome.

Any thoughts?
What happened to Detroit?
Looks like fun. A shame the left/right views aren't on opposite sides, then one could view it cross-eyed to get the 3D effect without glasses.

I wonder if it would make you nauseous looking through the Occulus?
I once hotlinked an image posted on a forum, and they served the same link you provided.

I never did a hotlink again.
I use Google and I'm comfortable with that.

The nice part about using Google is first off it offers speed advantages (as most people will have Google's JQuery lib cached already), secondly I don't expect Google to get hacked, and lastly we have Google's permission to do exactly that.
I'm a user, Prim is awesome. Hoping they branch out a bit, and can help me do my dishes too (only 50% kidding).
Thank you. Good advice. I was worried that there may be some unwritten liability. For example, how likely will I get sued if something breaks. If I was still actively involved then I am sure I would be able to just fix it.
Oh, sure it won't be a top-of-the-line gaming PC, but that's IMHO not the use case - and it is a tradeoff for the small form-factor and hybridity of phone/PC. With what we know about the specs, it won't be a sluggish barely-usable netbook, either. Heavy number-crunching and mobility are always at odds; and while my gaming notebook is much beefier, it is also an order of magnitude(!) larger and heavier. The appeal here is "take your PC in your pocket, just plug it into any screen and off you go;" netbooks have IMHO failed to live up to this expectation by being 1.underpowered and 2.too bulky - this device seems to have the solution for #2 at the very least.

So, while it won't be the best desktop PC you could get for this price, or the best smartphone you could get for this price (although for a smartphone, the specs are pretty good), you'd be getting both in one. I'm very curious to see how the integration between the two works out.

TL;DR: "Doesn't beat the best desktop" does not imply "underpowered."
Okay the fact is Digital Ocean (DO) came into existence in early 2011. Yes, the start up is new but the guys behind DO are really old players.

The guys behind DO had a hosting company called 'Reality Check Network', it was great. They were new that time and if you google about Reality Check Network you will find a bad incident because of which it was shut down.

In 2010, their servers were hacked and the attackers corrupted the filesystems which forced them to reformat everything. They were managing around 1,000 servers that time and the backup system in 2010 wouldn't allow them to restore so many servers at once, the only option they had was to do it manually which required 4 man hours of work for each server. And that process could take more than 2 months because of the 4000 odd man hours required to do the job.

This was from a long email they sent to their customers, which shows they were transparent and admitted the issue and the problem. ( Unlike many reliable servers which are not being transparent and cause a lot of problem/trust issue. Linode? )

From what it looks like, for almost a month they tried getting all the data back but eventually couldn't so they folded and moved on. Almost 6-8 months later in 2011, they launched DO and been almost 3 years they are doing great. Rather best. No such incident and data is secure. They surely learned their lesson.

I would say despite their past, they are the experienced players whom we can trust. Even though they are building their business they are really reliable, affordable and looks like they are here for long.

Edit :

http://www.inc.com/profile/reality-check-network

http://www.crunchbase.com/company/reality-check-network
it's really sad to see this on hacker news (point taken, comment changed)
I take this to be a proof-of-concept for ajax.googleapis.com in N years time.

"The archive web, sponsored by..."
I was originally going to tie my exit date to some period after it went live. That has been delayed far too long. You are right, I need to just put a firm date out
If those people were not "publishing white papers", maybe it's because computer security sucks everywhere, maybe because there is no true incentive to make things better at all.

I was answering to the question "why were those guys using their skills for criminal activity instead of working on protecting against those crimes ?".

The thing is, I doubt company deciders really care about real computer security at all, and even if they do, the security market is very slim. OSes are not really designed with security first in mind, while they should be the first ones to do research on it, and apply it steadily.

I can find many reasons why the computer security market is still weak: there are not that many crimes because we don't use computers for many important things (even if it's on the rise), intelligence agencies prefer to let those vulnerabilities in place so they can have the upper hand to investigate or spy other countries (not talking about PRISM), and programmers are still a rare supply, and I don't really see any open discussion in university about computer security theory, it's mostly black hats/white hats folks, it's not really productive.

If those guys committed those crimes, either they are not good enough, but that also means nasdaq systems were weak, or that they were actually good enough, but the computer security job market did not propose them enough money, which is why they risked 20 year prison sentences, because it paid more.

You could compare it with the drug market. Right now those substances are illegal, which allows criminals to make huge amounts of money, but the DEA people will also make money, and are often found to work with criminals. That's an example why most of the time, crime pays, while it would be wiser to make those substance legal, and try to help drug users instead. For computer security, it could be a good idea to stimulate the security market by asking universities to create degrees, and maybe make some government programs to work on computer security, instead of letting it rot like that.
I remember when I was a kid, my dad used to line the edge of the bowl with cucumber so he could pile the salad a bit higher. But this is a whole new level.

I doubt that everyone in China was doing this. I imagine you'd be standing at the salad bar a long time making a master piece like that.
From what I remember about Pizza Hut history in Poland, they first removed some ingredients that made it easy to overload (there used to be some crackers that could be used to stabilize the layers of salad) but then just went for unlimited refills.

I haven't been there for 3+ years so I might have gotten this totally wrong :)
I need to install owncloud, or git-annex-assistant, or something. If anybody wants to evangelise their favoured option here, that would be great.
Scribd got better! It's comparable, perhaps better, than google's viewer: https://docs.google.com/viewer?url=http%3A%2F%2Fwww.leafpete...
DevOps by definition run systems. We may be bastard cousins, but what the hell, join the party and celebrate, it's your day as well!
Isn't a 'delay' inherent to digital encoding? I mean, even if the encoding could be done virtually instantly, I seem to recall most of these methods encode differences between frames, including some frames ahead of the current one. Since we can't look into the future, you necessarily have at least a few frames delay?
Unless there are some efficient digital encoding algorithms that don't need this?
Prediksi Skor Aris Thessaloniki vs AS Roma
It is time for software companies to unite. Feds can't just continue roaming around, asking companies for their users' password hashes and other things.

In the current state, some big companies have the means to fight such requests, some big companies are very willing to cooperate, and small companies rarely have the means to go into a legal battle.

Because of the current fragmentation and secrecy surrounding feds' requests with software companies, users do not have the possibility of knowing what they're in for with which company. Also, the divide and conquer tactics used by the Feds really allow them to extract much more information than what would otherwise be the case. Ideally there should be a union for software companies, which makes agreements with the feds concerning their access rights; agreements which then apply to all members of the union.

Currently I have two rules of thumb: 1) for critical services, avoid companies located or significantly involved in the US or UK and 2) at all costs, stay away from Microsoft.
Also, linking to something as possibly unstable as a master branch seems odd at best.
To back that up from across the pond: the PRISM/Snowden story has been major news in the UK. Zimmerman was headline news, but only for a day or two, and I don't know who Paula Deen is.
Imagine if these were real commands:

$ docker download-install-and-run-my-customized-build-of-postgres

$ docker start-up-a-wordpress-instance-from-some-online-build-template
$ # edit some config files, add some plugins
$ docker pack-that-wordpress-instance-into-a-container

$ ansible all -a docker download-and-run-your-wordpress-instance-on-all-your-app-nodes

That's basically what docker does; the syntax is only slightly more mundane, and is actually less verbose than that.
In my experience the middle man (recruiting company) rarely gives a crap about the quality of workers, as long as the client is paying for the ones they find.
Proper door design makes a huge difference when a lot of people unfamiliar with said door need to use it in a short period of time and the cost of a delay can be congestion or even injury. Evacuation scenarios, rush hour traffic, black friday sales, that sort of thing. It doesn't make a huge difference to doors only a few people use a couple of times a day.

That said, door design is a good example for many other things. To give you a particular one, a certain DVD player/recorder made by Panasonic has two large buttons on the upper corners of its front panel. One is the on/standby button and the other is the eject button. They placed the on/off button right next to the DVD tray, and literally everyone who has attempted to place a DVD in it has accidentally turned it off instead. Given it takes 20+ seconds to power cycle, this is extemely annoying, but of course not painful enough to ditch the whole thing as it otherwise works fine. You don't get used to it either, it's a jarring experience every time. Given neither switch is actually on the PCB and both are wired in, it would have been trivial to flip them around (and one of these days I will do so), but the designers didn't think of it.
This is probably a stupid comment to make, but when the feds request these passwords what is stopping a firm from giving over a set of tampered passwords?

Let's say a request is made for Google give over loads of Gmail passwords. Could they not silently implement an extremely strong password encryption on the affected accounts, and hand over these passwords, knowing that the feds wouldn't be able to crack them without a significant amount of time.

Also, are the feds likely to check to see if these passwords are legitimate? If my password was 12345 and Google simply told them that my password was 54321 then how could the feds possibly know that the passwords sent over are real?

EDIT: Obviously, I know this is highly illegal, and would land any company in trouble. I'm just wondering whether, theoretically, this is possible for a firm to do to circumvent any action from the feds.
Someone should create a third party certification program where they take a look at your password storage code, and if it uses industry best practices, you can display a badge on your site.
Antonov AN-124 cargo aircraft production set to resume
> It was declassified as munition it can be reclassified as munitions pretty easily as well.

As any browser has to integrate some sort of public-key cryptography support to use HTTPS, and as HTTPS is pretty useful for things like sending your credit card number over an insecure channel, I very much doubt that the genie could be put back in the bottle now.
Non-tech New Yorker here. I have a laundry unit in my apartment, but I drop off my laundry for wash-and-fold at the laundromat. It costs me about $15 every one-and-a-half weeks, on par with lunch.

You find having someone else do your laundry ridiculous. That's fine. I find every dwelling having its own laundry infrastructure similarly silly.

Given that there is already a robust wash-and-fold industry in New York which, to a large degree, already offers delivery, this start-up appears to be doing what tech does best. It has found an existing, de-centralised value chain and is using technology to make it work better.
Depends how it is implemented.

LastPass say that all your details are encrypted client-side via your master password, so they cannot access anything of yours.

There's nothing to stop Apple doing the same - but I suspect they won't.
While looking at those salads, I was imagining being stuck behind a patron making one. That would be the worst.
You're attacking the problem from the wrong angle. The fault lies with whomever builds the application /interfacing/ with the DB, not whomever manages the database.

In an application you may need to read user-selected data from some sort of database. As a simple example, you might accept a user's input of an article ID to fetch said article from a db. That might look something like this:

"SELECT * FROM articles WHERE id = $article_id"

Where $article_id is the input you received from your user. A valid $article_id could for example be "7", an invalid one might be "7 OR 1=1". If the latter value is not escaped, it'd change the statement to read "SELECT * FROM articles WHERE id = 7 OR 1=1, returning all articles.

Any somewhat competent programmer would then check if $article_id contains a value of the expected type (i.e. integer, string, string that looks like an email address, ...) and use an escaping function (in PHP this might be mysql_real_escape_string) to escape any special characters (e.g. turn " into \").

If you're doing things right, you'll use a prepared statement. You'll tell your database driver the format of your query first ("SELECT * FROM articles where id = ?"), then provide the contents for your placeholders (? -> $article_id).

Prepared statements are considered more elegant and comfortable to work with; both approaches are secure when done correctly.

All of this is done by the application developer. Now the DBA only gets to work with the assembled query. How would they be able to tell a valid "OR 1=1" from an injected one?

Nonetheless, your point on holding the responsible party accountable stands -- but it's the developers, not the DBAs.
Sudo I'll make him a sandwich.
If you'd rather be doing something more interesting, why sign up for the class in the first place?
So each time a UK residents visits a webpage his ISP will send the url to Huawei to ask for permission?

Good to see that Cameron don’t waste the opportunity and get the UK to use the same hardware platform as the Chinese. The Chinese are already one of the leaders in technology for censorship, with the great firewall and all, so it could be a lot of opportunities for synergy and cross border cooperation her…
DailyKos has been doing this for years.
Have you had the McRib? It's in this limbo state of being popular enough to warrant introduction into the McDonald's menu periodically, but not popular enough to be a permanent staple.

Basically people will especially go out and get the McRib when it "comes back" and then get tired of it.

If McDonalds was limited to only one location, there would almost certainly be long lines, waitlists, and reservations. The ubiquity of McDonalds, and the fact that they can meet demand enough so that no one needs to wait more than a few minutes contributes to the luxury of not having to wait for a Big Mac.
4 Email Samples You Can Use For Connecting With Bloggers
This image was selected and highlighted on their new features page. They must be aware of the layout issues, surely?

I'm not suggesting that this is horrible software, just that it gives a bad first impression. I am suggesting that these sorts of screenshots shouldn't be used in advertising material until they are polished.
>Also, are the feds likely to check to see if these passwords are legitimate? If my password was 12345 and Google simply told them that my password was 54321 then how could the feds possibly know that the passwords sent over are real?

By them NOT WORKING?
Happy SysAdmin Day (14th annual)
It's been a while since I used AWS, so pardon me if the question is silly, but:

Is it really cost-effective to track metrics like steal time, instead of using a large instance and having the host machine for yourself?
A Quick Introduction to HHVM
More like, they bring a great deal of expertise from the Great Firewall.
1) For critical services run them locally where possible. Avoid 'cloud' or 'remote' at all costs - no matter where the hosting company is located.
Solve one of the worlds major health issues: $4000
Sorry I meant churn, but >80% annual retention is very good. 98% annual retention is unheard of in pretty much any decently sized business I've seen.
I remember watching at least one Hong Kong comedy lampooning this.
http://caniuse.com/#compare=ie+10,firefox+24,chrome+29
Sounds like they want the software AND the hardware developed for that figure. No problem :)
>>key arguments against simulated reality, more comprehensively and perhaps more convincingly?

Probably no, the reason is any one who is smart enough to simulate us will also be smart enough to stop us messing up with the simulation. And it ends there.

The scary situation is simulation theory perfectly accommodates things like religion, god and miracles. And probably even things like heaven, hell and the judgement day.
French way of business : #cobatissons 70K€ crowdfunding... well, sort of.
Bluebayブルーベイ サングラス人気販売,送料無料
弊社のサングラス専門店ネット販売では、 Bluebay サングラス,ブルーベイ サングラスをお手ごろな価格でご注

文、 ご購入いただけます。日本 国内は格安料金で迅速発送.
Well, they're not going to crack a ton of passwords that quickly, and I'm guessing that they're testing against the live server, so if the password doesn't work then surely the most obvious answer is that the password has changed.

A lot of people have already stated that one way around this would be to change your password before the feds have had a chance to crack the provided hashes. This would surely be a similar system.

Of course, I don't know if this would work at all. I was basically thinking aloud to see if this idea would have some merit.
Silently sabotaging LEOs efforts like that would be rightfully highly illegal. "Perverting the course of justice" in the UK. I assume there's a US equivalent.

It's just not worth a company risking this kind of tampering. They could go to jail for that.

By all means, companies should fight back legally, and it sounds like they all are. I applaud them for that. But I think it's unreasonable to expect them to break the law for you.
I usually set my daily rate at 5 or 6 hours of the hourly rate. Buy in bulk and save.
Welcome to the world, this is a webcam, put it on your head so we can watch your every move at all times.

What the hell is wrong with the government, is it really their business to interfere with personal life? It's their job to facilitate the community, to find solutions for peoples lives, this is not a solution, they are creating overly complex problems, unnecessary spent money. We need less government, less people there with less money, it seems they have too much of it and way too much time.
Yeah, but what if they want to seize your server instead?
I agree. The section concerning the design of card tables pre and post American revolutionary war due to the influence of American puritanical morality was fascinating and has stuck with me now many years after first reading it.

Won't it be very interesting if we are lucky enough to one day examine our own design trends through the lens of social change. What moral shift might be responsible for the trend toward flat design?
Linking to the file from a popular HN thread will likely only worsen the bandwidth issues for the owner :-). Perhaps link to the Github version instead, which is here: https://github.com/gdsmith/jquery.easing
Ask HN: Understanding Economics
What are the books/knowledge should someone(like me) who has no idea about macro-ecomonics, read/gain to understand everything that is stated in the below url (http://www.thehindubusinessline.com/opinion/columns/dollars-taking-us-for-a-spin/article4953071.ece)
Salad Bars probably abandoned due to very banal reason that fresh vegetables are much more expensive that synthetic souses and ingredients and its freshness doesn't last. In other words, dealing with freshness is incompatible with cheap, crappy, cost-optimizing fast foods. Freshness is a luxury.
Being told you've got the job, reasonably asking to postpone a final decision for a few days - and then being dropped by a single line email would be pretty frustrating.

I find it sad that HR are often too lazy / too scared to offer candidates good feedback - I make an effort to get back to each applicant with feedback proportional to the time they seem to have spent on their application.
Clever? Not really. Every school kid tries this, it's hardly original, is just really juvenile and increases the cost for every body else. And I really don't think it's that difficult to stack up a huge pile of cucumbers.
there is absolutely no doubt in my mind this is the future. This is an important step we can get back to basics - no strings attached, literally.
12 Reasons To Start Your Store with Shopify (and Get 25% Off)
couldn't agree more. this is bullshit.
Maybe you two enjoy consuming bullshit but don't be surprised that other people don't.
Say they ask Amazon for your password, if you reuse the same password elsewhere like 99% of people, then they can access all your other accounts without any permission to ask. In this scheme, only one 'traitor' company compromises all others. People should really use unique passwords.
While you're working on the hardware could you get it to make the coffee too?
Maybe Mr. Cameron can ask for the url list used by the great firewall also? The authorities could save a lot of time if they had an initial list to start with.

What are we nicknaming this? Maybe "he Great Hadrian Firewall" after the Hadrian's wall?[0]

0: http://en.wikipedia.org/wiki/Hadrian's_Wall
Designated Initialization With Compound Literals in C