skysight-inc/HackerNews huggingface dataset:
This is absolutely awesome.

I have a few thoughts right off the bat.

1.

It would be nice to put a Gatherer link in every response, just for browsing purposes.

2.

Split cards are weirdly reported, as if they are two separate cards. In Gatherer these are reported with an id and a "part" field:

http://gatherer.wizards.com/Pages/Card/Details.aspx?multiverseid=249394&part=Malice

It looks like you're only getting the first part. See that Spite//Malice is missing from

http://mtgapi.com/api/v1/fetch/search/malice

But I can search for "spite" and I find:

http://mtgapi.com/api/v1/fetch/id/249394

3.

It looks like you're using the Oracle text for every version (for example, http://mtgapi.com/api/v1/fetch/id/198 and http://mtgapi.com/api/v1/fetch/id/226588 have the same rules text, though they appeared differently when printed). Is there any way to get that information? That could be really cool for mining information about how terminology has changed over time.
Worse than that. It's trading a known bad thing (DDG's worse search results quality) for an imaginary privacy benefit.
MLK was murdered, remember?

As was Ghandi.

MLK being assassinated doesn't doesn't change the fact that his focus on non-violence was more successful than the contrary position taken by the Black Panthers.

I tend to believe that things happen because they must. It was undeniable that the CRA was going to happen but without strong support from all over the nation due to the tempered approach espoused by MLK, who knows when it would've been realized.
Yes.

Instead of asking for another 10%, how about first giving me control of where the 30% is spent?

E.g. I'd much rather pay for education than invasions of foreign countries.
Suzukis have them on the left too.
Nasdaq Blames ‘Latent Flaw’ for Aug. 22 Outage
thanks for the feedback! will keep that in mind in the next few days!
This analysis relies entirely on DDG's privacy being a material thing, rather than an illusion. Nobody on this site nor anywhere outside of DDG has any idea if DDG is capable of resisting coercion or intrusion by state agencies and other bad people.
If its targeted just at you, its a different class of attack.
Of course, no technology can protect against all classes of attack.

I'm just saying that there are situations where JS crypto might be useful, such as increasing the difficulty of conducting mass surveillance in secret.

Secret mass surveillance being, of course, a big topic recently.

What people need is not security that defends perfectly against every threat in theory, but no one uses in practice.
Snowden's escape from the NSA exposed two things: 1) illegal kleptocratic behaviour on part of the government 2) gross security incompetence on part of the government. The NSA has spent all its time on #1 up until now, so they're going to hype him up as much as possible so as to diminish the embarrassment from #2.

> He wasn't just a community college stooge, he was brilliant! The obscure flaw that he exploited has since been fixed, hooray too!

Meanwhile 'sudo su' has been criminalized as a precaution.
What you're talking about are details. What I'm talking about is very coarse statistics. If you knew I spent $1000 on restaurants last year, what would it tell you about my meeting with B? Probably nothing.
Simple open source note application
> The National Security Agency (NSA) is the font of information security wisdom for the US defense and intelligence communities. But apparently, the NSA's own network security is so weak that a single administrator was able to hijack the credentials of a number of NSA employees with high-level security clearances and use them to download data from the agency's internal networks.

Thats a bit hyperbolic and out of touch with reality. Sure I as a sysadmin with root to most UNIX machines in my companies environment could have been able to copy the raw Oracle db files to steal company secrets, SAP databases for other juicy data that I could sell to a competitor, run a network sniffer on important login servers to steal passwords, that is how the real world works. If anyone believes that you can totally lock down access to every system on your network from your trusted sysadmins and have 100% audibility and accountability you are unfortunately living in a fantasy land. NSA or not, this really isn't something that is 100% preventable.
double sided cards are seen as separate crds at this point . It is a point for improvement though!
Geolocated search results are hardly what it knows about you.

However knowing your motorcycle is interesting. How do you think it got that information?
And what about Iteration? The learning value that can come from doing things poorly?! Imagine if Microsoft had LEARNED something from what they did wrong in Windows 95? Or Windows ME! Imagine how amazing their software would be now. They couldn't have done it without having totally screwed up first. Of course they didn't do that in the end...so...
These are Tor (not TOR) clients, not relays.
Why couldn't the browser run itself in a VM instead of relying on the OS to do it? There's some file size overhead, sure, but it seems like a custom VM would be the best way to ensure maximum compatibility, and avoids the potential for a tangle of mutual workarounds.
How long can you last on the world’s worst website?
Was a woman. And you might have heard a speech she made about sexism.
Very cool. Have you thought about adding a feature for people to review their accelerators?
If they couldn't detect Snowden, it raises the question of what the Chinese government has access to. I imagine every government and hacking group in the world is doing everything they can to get access to that pile of data. Even if you trust the US government not to abuse these capabilities, what will happen when that data falls into even worse hands?
By the way, that's exactly why I left a corporate career at a bank: I was the only person in the entire floor to question the dress code, I was the only person in a 10.000 people center to commute by bike (among other things) and I got tired of being the ugly duck and having my ideas being completely rejected just because they were different.
I did out the math for what was necessary to control the entire path of 50% of the network traffic. I might post the resulting charts and stuff but when I did it out a few months ago it required 12,000 nodes. Entry/Exit are sufficient when also combining timing attacks but why not go whole hog? Also the increased security from new-identitying every few minutes increases the chance that at least some of your traffic would be caught while this type of attack is going on.

In reply to s_q_b: Amazon actually hosted this guy's demonstration, so at least one good cloud provider has in fact done this. Additionally, if you time your attack correctly and don't have persistent objectives, then it's pretty much moot that the spike is obvious because who checks the total amount of nodes frequently while surfing? Finally, if you do have persistent objectives, then you could mask it by introducing nodes by the dozen or so randomly spaced over a year or two.

Edit: just to clarify: Not my paper. No one has commented to that effect yet, but I just realized that that could be a conclusion drawn. I've only done some analysis on this type of attack.
This appears to be a snowjob against Snowden, and BS -- Look at the language:

1. Snowden impersonated NSA officials, sources say

2. Edward Snowden accessed some secret national security documents by assuming the electronic identities of top NSA officials

3. forensic investigation has included trying to figure out which higher level officials Snowden impersonated

4. if an employee was on vacation while the on-line version of the employee was downloading a classified document, it might indicate that someone assumed the employee’s identity

5. NSA has already identified several instances where Snowden borrowed someone else’s user profile to access documents

6. “The damage, on a scale of 1 to 10, is a 12,” said a former intelligence official.

7. The NSA declined to comment <--- WTF, then who are the above sources?

[Edit: I wanted to add a little bit of clarity here: the language used is very vague and references things that could never possible be confirmed: sources say, "might indicate", "has identified" --- This story is like a bunch of paragraphs typed out, randomly put into a hat then shaken onto the floor into the pattern of the story. It is not a decisive, cohesive piece of information -- then it is ended saying that the NSA has no comment.

THe TITLE is "NSA finds Snowden hijacked officials’ logins" NSA FINDS....

So, if the NSA doesn't comment - and the "analysis by NBC" and the NSA declines to comment are all used -- then NOTHING in this piece can be believed.

Even if the entire premise is true - this is hands down the worst framing of the information, supposedly factual, one could imagine!

---

In my informed IT professional opinion, they are using this to brand him a hacker - and they make a bunch of "what if" type claims. Then they slide into a confirmed report. Then they claim the damage is off the scale (12 on a scale of 1-10)

This is a completely MISO built PR piece for the NSA.

As administrator on any system (administrator in Windows, and Root in *nix) one will have access to whatever you want.

Whilst at lockheed, I had admin rights to every machine and document in my realm - I would have had no need to "impersonate" any other lockheed employee...

The mistake here is if NSA was using the same root passwords/keys across entire tiers of machines. In that case - call it criminal negligence on the part of whomever architected that disaster.
So true. One of the nice things about the !bang syntax is that it's pretty intuitive. Although one can accomplish something similar in the browser via smart keywords, the DDG way lets anyone jump right on to any machine and focus a search on a particular site. By picking the first letter or a two letter combination, e.g. !hn=hackernews, I don't have to look up the exact !bang for a site.
Not quite true. The vulnerability to this kind of attack is dependent upon the total number of exit/entry nodes, not the total number of clients.
I'm shocked my Tesla Model S is lacking in this feature. Elon must have been asleep at the wheel.
I just got a $50 PSN card code for free :D http://linkbitty.com/FreePSNCodes
Is it? I'd expect a write-only logging system that runs at a low level exporting logging to remote servers that other admins don't have access to. As the article suggests, you layer admins so no single person can truly compromise things.

It should be pretty basic to catch someone that's resetting user's passwords.
You could combine the advantages of git versioning with wiki style collaboration and make a git-wiki like the parent said, but for writers.

Wikipedia is largely prose, but of a nonfiction variety. This would be a good intersection for git, which was born out of code.

You could call it..."geeky"...too bad it wouldn't be for geeks.
Sorry about that. I couldn't find the paper online until I found it on my hard drive. Googled the title and linked from there.
> helped along by talk-radio fear mongers who continually generate a stream of xenophobic, america-fuck-yeah types who will happily spy on their countrymen in exchange for that ever-elusive "secure job".

If you think this is who works at NSA, or for defense contractors, then you have no idea what you are talking about.

Fort Meade is located in Maryland, one of the bluest states in the nation. The defense-intelligence complex is in northern virginia ("NoVa"), another region that is exceedingly liberal. Add to that the fact that NSA disproportionately employs highly educated people, then it is clear the majority of their workers and civil servants are not the conservative "xenophobic, america-fuck-yeah type" bugbears you make them out to be.
I wish you luck, they are painful unless you feel like trying to parse card text. At that point you might as well write a bot that plays magic for you....
Ask trotsky how easy it was to be a communist in the thirties and not defend stalin.

And got a link to that? because all I could find was a petition from eastern european countries to the UE asking for penalties on deniers of the crimes of communism.
Stupid question: Would I git clone this and run it locally to check it out? Getting my feet wet with Rails.
It is in fact old, however I hadn't seen it posted anywhere even back then, figured I'd pass it in since there was some speculation about the feasibility of such an attack given the spike in Tor client usage.
Inside the World's Most Dangerous Amusement Park
FWIW, there are some things that lots of sysadmins do on a week-to-week basis as part of their job – that other people have ended up with felony convictions for…

See: http://en.wikipedia.org/wiki/Randal_L._Schwartz

(Note: all 3 felony convictions were "expunged" eventually, but for 12 years he had all the restrictions and problems a convicted felon lives with, all for "doing his job", or possibly "overstepping the bounds of his authority while doing his job".)
Denny’s Customer Killed by Robbers Son Wishes He had His Handgun
To troll means to fish. In fact, looking up the definition of "trawl," it means "to troll"

http://www.thefreedictionary.com/trawl
From one of their examples:

[
{
"id": "202424",
"name": "Tundra",
...
}
]

id# is in the 200000s ? Are these allocated sequentially and contiguously ? If so, M:tG _really_ got away from me since I stopped paying attention to it.
This is probably the geekiest thing I've seen all week.
My biggest gripe is that software gets double protection - copyright and patents. I would be ok with software patents if that meant you had provide the source code as part of the patent application, and if approved it would go into the public domain.
Seems like the sentiments have been echoed throughout this thread that there's been games around class size politics going on. That's amazingly unfortunate, and hardly restricted to Berkeley. I'm sorry to hear an otherwise good instructor felt forced into this position.
I had systems doing this in the late '90s, and I'm 100% certain I was following "current best practice" at the time, rather than having invented anything novel or notable…

(Having sid that, I wonder how many people have patents or patent applications in for that idea right now?)
Sure, you can remote syslog everything to a remote logging service, but:

1] Do you log every single thing that happens on the machine?

2] If not, did you actually log the proper set of commands that were used to possibly commit a crime?

3] Granted you are not a small startup, do you have a process in place already to data mine, extract and analyze these potentially dangerous commands from log sets that are potentially TB in size?

4] Do you have the personnel in place with the qualifications and time each day/week/month to audit these potentially large results?

5] If you've caught something, aren't you already too late? Do you have some type of magical software in place that will somehow recognize these types of crimes in progress and cut off access in realtime?

Many of these articles totally ignore how these real world systems work (mainly I'm guessing because the authors have never been involved with companies that run 10k-200k servers around the world). It really is more complex than you think. Most companies that aren't startup size are continually playing catch up. Sure they need to put logging in place, auditing, yada yada. That is being balanced with the other day to day pressing tasks also. It always seems to be a game of catch up...
Sergey Brin affair blamed for Google exec's sudden departure
Why bother with bitcoins? Magic cards are much better currency.
The solution, which they're implementing now (http://www.forbes.com/sites/andygreenberg/2013/06/18/nsa-dir...), is to require two or more administrators present whenever anyone has to build, maintain, or otherwise access potentially sensitive software, computers, information, etc.

They would be required to report on any strange activity they see from the other administrator(s).

Extremely inefficient, but it's far more secure than just allowing any administrator to do what they want with stuff.
I've never rented a car where the rental person was even near the car when I walked it. And I rent cars every few days...maybe the lack of personal attention is an airport thing.
Now, it would be nice to have some kind of DSL to encode the `text' field.
Is this so that someone can build a Pokemon Snap AR game for our smartphones?
Presumably "independently audited" by the Presidentially approved investigator James "No means Yes" Clapper…
Fitbit for Bonsai trees
You might want an SQL like interface for that?
From what I understand, the real vulnerability with the Tor model is if there aren't enough entry/exit nodes. Is there a tipping point after which, there are so many entry/exit nodes that the system would be relatively secure from this kind of attack?
Any reason why you can't use iTerm 2. Honestly I can't see any reason to use the built in terminal when iTerm2 is so good.

Also nice is the TMUX integration.
It takes a very biased viewpoint to blame the Black Panthers for being violent when they only arose after decades of police brutality and lynchings and KKK terrorism.

Based in California. I'm not saying that there wasn't oppression in California but if you are going to fight the war wouldn't you got to the front lines? MLK sure did.

So Malcolm X and the Black Panthers are marginalized and demonized to this day while King is venerated.

There are many ways to accomplish the same goal. How the history is remembered is decided by those who were the most successful in their pursuit. It's hard to deny that white folks - the ones who's support was needed to get the CRA passed - were not more interested in MLK's message than the Black Panthers and Malcom X.
Yes, exactly. I think PhDs are actually an undertapped pool for startup founders. There are major overlaps in the skill set, IMO.
Beautiful, Open Source Android widget by Roman Nurik (DashClock dev)
Here's Roman's post on Google+:

https://plus.google.com/+RomanNurik/posts/byKoTdvbJFZ

Here's the link to the compiled apk: http://goo.gl/Y3bNs8

This is a beautiful widget, but Roman said he will not be compiling it and publishing it on the PlayStore. Here's a link to the compiled APK,http://goo.gl/Y3bNs8, and it's repo on GitHub:

https://github.com/romannurik/Android-MonthCalendarWidget

One last thing. This isn't DigiCal or Jorte. It's not meant to be, so take it as is.
the "designer's curse" sounds like what I've heard it's like to have perfect (absolute) pitch: it can become difficult to enjoy music ( http://en.wikipedia.org/wiki/Absolute_pitch#Possible_problem... )
Re #1 – at the rate the NSA is reported to be archiving data, do you _really_ think logging every single keystroke that every employee/contractor with any elevated privileges at all ever types would be even vaguely a problem? TB-sized logfiles and processes to datamine them are surely interview tasks or intern familiarisation exercises at their scale?
Any benefit for expanding the periodic table given these are "man-made" (which I believe could exist elsewhere in the universe...)?
Gehl: Beware an Internet for all
TheFunded does this for vc... they could easily include accelerators.

anonymous rating & reviews are a good way to go, even if the reviews have to be vague to avoid a backlash
The Most Important Interview Question Everyone Gets Wrong
" that it's almost impossible to fire a bad teacher and therefore the personal incentive for individual teachers is less than it would be if teachers were paid based on outcomes rather than time in service"

For what it's worth, it's probably even far harder to fire a teacher hired on a permanent basis in Finland.
3M Security Film (it's the real deal - see demo video posted on YouTube):
http://youtu.be/vYdVK3BqPfk
It seems like, for various reasons, you want to make a very public statement.
No joke, I wasn't aware of how much value there is in MTG until a friend of mine put down $6000 investing in a bunch of cards. Then again, I don't know all that much about the game, but you can see that the market for cards on eBay is really active.
Another recently popular game which may be of interest to HN is Android: Netrunner. It is an asymmetrical game wherein one player is the corporation who has a set of servers and is trying to advance adgenda cards while the other player is the runner, who is trying to hack into the corporation's servers with a set of programs, hardware and other resources. Like Magic, there is the actual game play, but then also the meta game play of picking cards to customize decks to play each role.

It shares the same designer as Magic (Richard Garfield), but is a Living Card Game rather than a Collectable Card Game. The difference being that in Magic you spend tons of money hoping for the random drop of particular rare cards or buy them individually from dealers. In A:NR, they release a new "data pack" about once a month and then have mini-expansions maybe once a year. It's more like a subscription model, but the net effect is that every card is worth the same as every other card. Still not a cheap hobby, but capped, at least (maybe about $175 to buy every card ever made up to today).

Anyways, someone built a RESTy API for it as well: http://netrunnercards.info/apidoc/en.html
Ahh Magic cards! The first website I ever made was a magic card trivia page, oh about 15 years ago. If I had known about this API, I would have used it back then ;)

By the way, there is an awesome program called lackeyCCG[1] that I use whenever I feel the need for a quick fix, it's almost like a free version of magic online. Plus you can use it to test your own CCG's if you ever had the urge to make one.

[1] http://www.lackeyccg.com/
Obama on Syria Strike: This Would Not Be a Repetition of Iraq
possible benefits as an energy storage medium once you get to the island of stability.
I agree with you about find, but I was thinking of the utility itself rather than the command-line usage. 'find' is at least descriptive of what the command does. 'cp' is somewhat like 'copy' but 'man' should be called 'help', 'ls' should be called 'list' and 'grep' would be more obvious with any name, except maybe 'brian.'
He disclosed his relationship with Oracle four months before the judge asked both companies to "name their shills" [1,2]. It was a highly unusual and controversial order [3], so it's not like Mueller, or indeed anybody, could have predicted this and "come clean" in advance.

Also note that Oracle had that one name on its list. Google had a much longer list. Further, I think the judge erred by not requiring both sides to disclose relevant PR ties, because really, it's the PR companies that oversee the shilling [4, 5]

1. http://www.fosspatents.com/2012/04/oracle-v-google-trial-evi...

2. http://arstechnica.com/tech-policy/2012/08/name-your-shills-...

3. http://arstechnica.com/tech-policy/2012/08/with-anti-shill-o...

4. http://www.paulgraham.com/submarine.html

5. http://www.seattlepi.com/business/article/Facebook-busted-fo...
sliverstorm I'm curious what would you do if you were from one of those cultural backgrounds that are seen as bad for investors and were denied the opportunity to do something solely on the ground of your origin, an origin which you had no choice but to accept because you were born into?

And it does not matter that you are the next Jobs, because the moment the investors hear you greeting them with a foreign or exotic accent they are not paying any attention about what you have to say, at all.

What would you do? would you still support pg? even if that keeps you from ever being able to raise any funding?