skysight-inc/HackerNews huggingface dataset:
It can be pretty enlightening to read the few postmortems of big hacks that do get published.

Another seemingly common scenario (aside from a direct attack on the server) is to spear-phish someone else inside the company, not necessarily an admin or anyone technical, into clicking on some flash applet or trojan'd excel doc or something that owns their machine, then install keyloggers, proxies, etc., and work from there until you snag a credential that lets you into the server you actually want.
Are Online Courses Failing America?
Wait, does Crunchbang not separate free and non-free? I've never used it, but I was under the impression that Crunchbang used mostly packages from the upstream Debian repos. You should just be able to select or deselect sources by editing the /etc/apt/sources.list file.
Except it ignores the original release of Windows Server 2012.
The article fails to mention that the replacement toner cartridge costs $80. [1]
HP claims their toner cartridge yields 2100 pages or about four cents a page.

From the article:

"You get about 2,000 pages from each $78 cartridge, which isn’t bad."
Apache is still in the game, and they're doing a pretty good job.
An open letter to Jeff Bezos, and it's practically worthless to a CEO. If the point is, "stop hiring contract workers," the letter should get to that point rather than complaining.

Let's look at the merit's of the authors argument, stated mostly in the second paragraph. Allegedly contract workers produce low quality or inconsistent work, and that training costs are wasted. All of the supporting evidence is anecdotal, and most of the anecdotes contain heaps of information that is completely irrelevant to the argument. What does the author's bad manager have to do with any of these arguments? Whether Amazon has poor management hiring procedures is another issue altogether.

If a CEO made any decision based on this article alone, he should be fired. At least it may raise enough awareness to get someone looking into it and gathering facts and options for action.
Upvoted, did make me enjoy the read.

6 months since the first SQLi to the "Nasqad is owned".

6 months...

Sometimes I've play Neo from a pub connection with recycled hardware (not buy with my card number) but at most one week to the same target.

I wish I could have the skills of those people. Not that I want to make money stoled from unknown people... I just would like to have their skills.
I'm not entirely sure this behavior is US-specific.
Does this mean that it might be possible to implant knowledge into our heads like in the Matrix? Could I learn Jiu Jitsu with a beam of light?
Thanks. I didn't realize that it was still running interpreting the javascript after a project was built for a device that made calls to native interfaces. My guess is that it would be close to native performance. I was under the impression that Titanium would compile to java bytecode for android and likewise for iOS, but I was wrong.
That might be a good idea for the future, if we can insure the experiments are done ethically, and with the subject's full understanding.
Take a look at chewbranca's work on Fauxton in the master branch of couchdb, and some of his personal riffs at https://github.com/chewbranca/mr-turtles. The idea is to use tools like you mentioned to run JS in browser, on server, and in the database.
You don't know what taken advantage of means do you?

These days any given new graduate who didn't attend an ivy league is in a situation where it is extremely difficult to get a job.

The alternative to working as a contractor at Amazon is not working at all. This is the situation these contractors are in. When the alternative is being in extreme debt / homeless, a choice cannot be made freely. This is the situation that Amazon and Walmart are taking advantage of, employee these people as hourly, no benefits contractors.

Obviously there's the argument that Amazon and Walmart are being 'good' providing them with hourly pay when they would otherwise be paid nothing. This, however, doesn't mean they're not taking advantage of the people they hire as contractors. I would also not argue, but hold as a belief that it is extremely immoral to not pay the people who are struggling to help the company succeed, in order to pay people who are already wealthy more.

Before you explode with economic principles of how they are being paid what they're worth due to the harsh job market conditions, save your breath, I already know. The thinking is right from a market philosophy perspective, but these principles also weaken the company, and I would say are actually wrong from a perspective of building and growing a successful business.
Your summary is accurate, but I'm not sure why they chose to measure what they did. Rather than matching "full pathname" to 4 identifiers that are not the same (due to the significance of the underscore), it seems to me more appropriate to ask the subjects to match "full_pathname" to "full_pathname".

I consider the underscore and capitalization as part of the identifier, and _want_ to be able to distinguish the (most likely) typo "full pathname" from the desired identifier. Trying their example, most of my time was spent rescanning to find "none of the above", then rereading the directions.

Suggested alternative that I think would be a better study:

Which of the following is the same as "fullPathname":

1) "fullpathname"
2) "fullpathname"
3) "FullPathname"
4) "fullPathname"
5) None of the above

Which of the above is the same as "full_pathname":

1) "Full_Pathname"
2) "Full Pathname"
3) "full_pathname"
4) "full pathname"
5) None of the above
Yeah, that's true. My bullet point wasn't a very good one-liner.

Aliases are nice because they're the most entry-level customization yet they solve the #1 thing I spent my time doing at the very beginning: hunting down magical incantations on google. When I found one that helped me immediately, I'd collect it in my .bashrc like a pokeball. I had a lot of teeth to cut before I started looking for solutions that were solved with functions.

However, autocompletion based off history is a volatile convenience to me, not something that I feel obviates the need for aliases. Depending on ctrl-r to find `tar -xzvf` isn't much different than autocompleting your own `untar` alias. Except that when `tar -xzvf` isn't in your history anymore as a noob (fresh VPS/fresh shell/different computer), then you're back on Google/manpages to find the incantation so that it's in your history once again.

Besides, here's a simple example of the sort of abstractions I'm talking about:

transmission-edit -> sudo vim /etc/transmission-daemon/settings.json
transmission-start -> sudo start transmission-daemon
transmission-stop -> sudo stop transmission-daemon
...

I type "trans" and then hit tab. All my Transmission-Daemon related stuff is right there ready for autocompletion. I don't have to think about files or locations or paths. I don't have to remember that transmission-daemon is set up as a service. And I especially don't have to remember that its config is a .json file named 'settings' in `/etc/transmission-daemon/`.

This is me just talking aloud.

fasd looks great. Thanks.
Not for me: doesn't have wifi, scanner/copier, and color printing.
If IE wants to see usage numbers like Chrome of Firefox, then no... not like Safari.

If they are content with Safari-quality usage numbers, then they could probably settle for Safari-quality cross platform-ness.
He's not saying that he shouldn't have been let go. He's saying that the experienced team members, who were best qualified to fill the management position based on their visible competence, did apply and got nowhere. Why are you trying to make his application (or lack thereof) for a full-time position the critical factor?
I've used both, but I stuck with Apache Openoffice because it's usually given me less grief than Libreoffice, it also integrates better with OSX than Libreoffice does.
The community is about pi/2 ahead of the external perception. We're a year away from losing the founder and the brand confusion with membase (unfortunate). That said, the committer base has nearly doubled in the last year and the project is really starting to move. I think the closer you get to the project the more excited you'll find people. I think the next few years will be very good for CouchDB.
Precisely why hash(salt+password) is no longer sufficient.
An HSM is require with keys known to nobody (backup HSM's locked in a safe) but the password hashing machine. In a nutshell it should be more like this:
Hash(hsm_keys+salt+password)

Of course all the usual things about entropy still apply, that string should be at least 256 bytes (256 bits of entropy is 32 bytes, so I am advocating much, much more), and that will likely only keep you safe until the next generation of ASIC computers are released.
This is part and parcel of current corporate theory.

The mantra of "increase shareholder value" really means "make the investors happy", which currently means "make the quarterly number look great". Combine that with a giant primate dominance hierarchy, where the only goal is to please the bigger monkeys, and idiocy like this is basically inevitable.

This isn't the only way to run companies, but it's the only way most people have even heard of, so alternatives are literally inconceivable. From what I can tell, the infection vector for this meme is MBA programs.

Happily, there are signs that this is starting to change. E.g.: http://www.forbes.com/sites/stevedenning/2013/07/09/ft-urges...

Or the rise of the various Lean-derived methods, which have a fundamentally different theory of business.
You don't have to reproduce the results to implicitly verify them. As I understand it, the normal pattern is that if the results are important, researchers will do stuff based upon then, and if the results were wrong their experiments won't go right. Eventually they try reproducing the original to figure out what's wrong, and that can lead to people deciding the original was wrong.

If the results aren't important, they don't tend to get built upon, they mostly just matter for someone getting tenure, the next grant, whatever.
Google abruptly ends 'limited' Netflix promotion for Chromecast buyers
+1 for Karateka and Pravetz-8C which was my first computer =)
It's not surprising, but still fascinating. This property isn't limited to humans and wolves and dolphins, either. Scientists at Cornell showed that parrotlets have unique "names" given by their parents.
http://news.cornell.edu/stories/2011/07/parrots-learn-their-...
yes, I'm worried about waste. No, I don't accept assurances that it's all over in a few hundred years.
yes I'm worried about weapons - U233 from the thorium cycle has been weaponised before. as with real nuclear reactors, the issue with the thorium fantasies isnt what comes out of the power reactor, but the leap towards weapons (materials, technology and capacity) that development towards these reactors would represent.
agreed. these metrics mean absolutely nothing. the founding fathers preferred congressional stalemates to passing laws in excess.
Swype-style text input (outside of mobile/tablet)?
Are there any good options for text input on laptops/desktops? Not just re-organized keyboard (Dvorak).
thats it. if all the nuclear promises come true, its still just offering to delay the inevitable
As someone who is just starting out freelancing, and constantly hears 'bill daily, not hourly', how does that work when daily work hours aren't uniformly distributed? Some days I might work 5 -6 hours, others I may work 12. I like the flexibility of being able to work when I want and would hate to have to compromise on that.
Is there a summary of the techniques used, the escalations take ? Does it compare to OWASP ?
I just talked to him and he will not do that. So I said "I'll do the work, it will be copyrighted under MY name, if shit hits the fan I take my work with me. All profits we make will be under the company name and all money will only go directly back into the company. We manage the money 50/50. Down the line once you get good and decent with code and you are able to help me out, then we can do 50/50 split of profits since we'll both be equal in workload."

I think that is more than fair.
The First 3D-Printed Rifle Broke Apart After Its First Shot
Hi Adam

Do you do any benchmarking of the costs (and trends in costs) of Watsi-funded treatments with medical partners vs comparable standards of treatment in the same regions funded in other ways? I'm conscious that costs of treatment with private healthcare companies in the US vary hugely according to who is paying, and that aid can have both positive and negative side effects.

(an expansive answer might be better as a blog post than here, but I'm interested either way)
I've never actually successfully connected to it on Castro Street, although I only ever tried inside buildings. I thought it had been disabled or something, I didn't realize it was just like that normally. :(
if you're looking at how hard it is to exploit workers, I think U6 is a better measure than U3, the one you're referring to: http://en.wikipedia.org/wiki/Unemployment#United_States_Bure...

Nationally, that measure is still quite a bit worse than it was in 2007, and is twice as bad as 2001: http://portalseven.com/employment/unemployment_rate_u6.jsp
sfgate isn't just "a SF area newspaper/news website, similar to Chronicle", it is the same entity as the Chronicle. You'll notice that the page lined at sfchronicle.com has the sfgate logo in the upper left corner and the page linked at sfgate.come article has the Chronicle logo.

(You'll also notice that, URL differences and some presentation issues like font choice aside, the photo, caption, and the line of the article above the paywall fold on the Chronicle site are identical to the photo, caption, and first line of the article on the sfgate site.)
The Shortcut Principle
Sure. But a vast majority of men do that, and are proud to do it. In Israel, you meet your best friends in the army.
This company requires extremely invasive amounts of personal information - going as far as to ask for your drivers' license and a home utility bill.

They also just got severely owned the other week. So you can trust that the extreme invasion of privacy won't get straight to the wrong people.

http://status.ovh.net/?do=details&id=5070&PHPSESSID=d2344fba...
I found Jan Lehnardt's vision for CouchDB very compelling. It allows CouchDB to be the feature-rich core of a large, complex ecosystem, yet retain a ruthless focus on being the best multi-master replicating database available.
Debug Production Errors in Minified JS with Source Maps and Rollbar
My rule of thumb is pretty simple: if I see steal but still have an abundance of idle, I don't have a problem. If I see steal and low/no idle, I have a problem with an overcommited hypervisor.

It's derived from stress testing and production across a variety of virtualisation platforms, and it's generally proven pretty accurate.
I agree with you. I just want to point out that these days `tar xf` works for both .zip and .bz2 files (it recognizes the file type automatically). AFAIK it works with both GNU and BSD tar.
They're not judging the company on a few internet articles, they're judging the company on the immoral hiring practices they use. Even if it's not for the entirety of the company, it is still significant.

Obviously they pay tech workers well, they have to in order to get them to work there. They would have a very difficult time contracting tech employees, because there are so many alternative places to work. A perfect contrast of how they're taking advantage of those they can take advantage of.
Tracking blog readers who convert to Twitter followers and AB testing
U.S. cloud firms face backlash from NSA spy programs
Well, I don't know necessarily that he was unhappy with it, though clearly he thought it was stupid of them to do as it bore on product quality and all that.

Regardless of whether or not he liked it, I'm wondering why the OP can call it "taking advantage of". I just don't see that here, and thought maybe I was missing something, versus my bar just being set at a different height.
I would skip the auto-validation and let the user hit the always-enabled "Confirm Donation of $xx" button to validate the form. Tried and true and catches the auto-fill cases.
> Today, everyone knows that the only way to have privacy is to handle it personally, from their local computer.

My completely anecdotal experience is that when people want privacy, they're starting to avoid all manner of electronic communication.
I also use BigV, and can confirm that they're hella solid for a cloud service. Plus, their custom Linux distro, Symbiosis, makes a quick setup of a new site considerably quicker.
Yes it makes it very easy to shift features around to get a decent spread of easy and hard in a week / iteration.

It's also useful to have a check - more than a three day estimate basically means its too big - redo the press release

As for the floor cost - maybe. You still need to keep your feet on the ground at some point so increasing your rates and multiplying up is a fine approach. When you have an obvious winner go for much bigger rewards - but not everytime
Indeed. At the very least, that scan() function could be broken down into smaller parts to be individually profiled.
5GHz comes with less range. As in life, there is no free lunch in wireless signalling.
I'm fairly certain he was being facetious.
I think having people willing to clean up after others and keep the environment tidy and hygienic offers a lot of value.
The HL-2270 was the first printer I had ever felt I needed to evangelize for. It was so good, so cheap, and had just the right features. Printed quick, toner lasted forever, toner was surprisingly cheap ($40 for 4k pages), auto duplex, wireless. Set up and forget about it until you need it.
Given the razor thin margins that Amazon runs with, I am not surprised. This is a company that is struggling to make any money even after people bought hundreds of Billions of dollars worth of stuff from them. They are bound to cut corners to stay alive.
Twitter's Tool For Debugging At Scale
Thanks for response, I upvoted you.

I wasn't clear in my first post. I am not against major vaccines, the problem is that today by age 8 you have many more shoot than those you had only 20 years ago. I fail to believe life on Earth change soo much that we all need so many more shots to survive.

Like with any other business, pharma sees opportunity to oversell and creates tons of unnecessarily shots that your local CSV loves to advertise. I also personally know an example of an older man who got a shot and 2 weeks later got sick exactly on something he was getting shot against. It doesnt make sense.
> I'm not sure I've ever talked to someone who moved from hourly to daily and regretted doing so.

The next big improvement is moving from daily to per project :)
Vittana already does that. http://www.vittana.org/
It makes zero sense to pull this app just out of principle. Especially when it wouldn't matter to Apple anyway - It would only hurt Treehouse, and the investment they made. The kind of change you're looking for needs to come from policy makers.
Where is the pricing for stickers?
Any faster? My one reason for clinging to Excel is the speed of computations involving thousands of cells, including graphing.
Gogo releases data on in-plane Wi-Fi usage across US airports
Simple Python articles
You can still bill quarter days (it is really hard to do anything meaningful in less than 2 hours). Billing by the day just gives you more flexibility when the client asks for a discount. Giving a $100 discount on an $800 day sounds bigger than a $20 discount on $100/hour.
> You don't know what taken advantage of means do you?

Yes, I do, and I'd appreciate you not starting off posts being invective in the future. I'd downvote you for that if I could, even though I acknowledge you make an otherwise neutral point.

I'm not suggesting that Amazon is being good or evil, but I don't see any advantage having been taken. As Nostromo stated in a higher-voted thread, the unemployment rate in Seattle is currently at 4%, which is pretty good.

> The alternative to working as a contractor at Amazon is not working at all.

I don't see that having been suggested in the article at all. Regardless, some temporary work on a real product right after college seems like exactly the kind of thing I wish had been around when I was younger.

What I'm not seeing is that there was anything exploitative going on. Amazon paid a fair market wage, or at least I didn't see anything in the article to suggest he was making Walmart level wages. I don't see that the working conditions were harsh, or otherwise problematic beyond the normal level of office politics.

If these principles weaken the company, then I again don't see how that is taking advantage of the article's author.

I'm not suggesting that these are amazing working conditions, or that it's doing Amazon any favors, but at the same time, I don't see that anybody was taken advantage of either.
Just did the math (based on 2012 revenue and reported # of employees), and yup, $600k is what Google could easily afford for a single employee (with a good $400k left over for business expenses, per employee).

That's amazing.
Netflix Scores Big in Emmy Nominations, But Wall Street Not Impressed
Not at all surprised to see SFO and JFK as #1 and #2, respectively, but some of the other data points are pretty interesting. For instance, I was surprised to see SNA (Orange County) as #3.
Speaking from personal experience (Ukraine).

There are plenty of job opportunities and the coders are relatively even more overpaid than in the West, so that's not the reason.

The real reason I believe is that people mostly can do this with impunity. There's very little being done for prevent or prosecute credit card fraud. In Ukraine and Russia CCs are still used very little, so this fraud hurts "the West" which is mostly seen as a good thing by the general population. Rampant piracy is practically encouraged for the same reason.

Of course this creates a barrier for doing legitimate business online. For example PayPal simply does not allow merchant accounts from Ukraine and Russia to reduce fraud. These countries are the safe haven for hosting illegal content etc. It would benefit local programmers to clean up the reputation of the country and to my great annoyance people just do not realize this. Crooks are accepted as keynote speakers at business conferences etc (they do make money, so what's the problem?)
Fair enough. But given my experience with Atoms... the potential of hitting CPU bottlenecks is definitely higher on Atoms than on other computers. The significantly smaller cache and lower clock certainly don't help either.

You're right in that its extremely easy to test, even to buy yourself an atom at home. Netbooks are regularly under $300, Clovertrail Atom Tablets are ~$400. Older Atom 330-based Netbooks are probably even cheaper. Its not like you're trying to test out the performance of a 64-core Quad Opteron or something.

And of course, the ability to just rent one for 3 months at a time from Kimsufi for less than $20 is always available.
The choice doesn't exist if you've moved away from Windows, and market shares of Windows are declining if I'm not mistaken.

Years ago I found it painful to have a full web dev stack on windows and switched to OSX. The company I'm working for also has linux desktops as basic setup, and macs for app developpers.
It's anecdotical but I use Windows only for testing, and from a VM (I used fulls VMs for each IE versions before, now it's only the test VMs that microsoft provides)
Is it because of competition or prices goes down?