skysight-inc/HackerNews huggingface dataset:
Another really nifty way to achieve pretty much the same is to use iptables' built-in limit module like so:

-A INPUT -p tcp -m tcp --dport 22 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m limit --limit 3/min --limit-burst 4 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j DROP

Limit-bursts allows that many packages through before any limit counter starts, if any of the other packages afterwards also do not garner any response, a counter counts up for every further package, effectively blocking everything after the first 7 packages arriving within a minute. (You could also do 3/hour, for example, if you think you need it.)

The limit module is a beautiful thing, since you can also use it to limit log messages generated for events etc., using the same syntax, like so:

-A INPUT -m limit --limit 1/hour --limit-burst 3 -j LOG --log-prefix "iptables denied: "
> A psalm verse, or a sentence from some peoetry which is easy to remember.

I think you'd be astonished at how weak these are. That's part of the problem: it's hard, and not getting easier, to pick strong passwords.
What Employers Look For In Your Online Profiles
she's more concerned about what she lost than the fact that her gain was almost equal to a poor person's annual income. She couldn't even frame her payrise as a positive

I wonder if this is related to "loss aversion" [0]. According to Kahneman's research, people tend to strongly prefer avoiding losses to acquiring gains. She has a net loss in satisfaction because the hit caused by losing 30% of her salary is bigger than the win resulting from making 70%.

[0]: http://en.wikipedia.org/wiki/Loss_aversion
If there is the time show him/her how to write a fun but simple game or star with something already written that you can explain to them how its written and how they can change the code to make it do other things (changing formulas, variables/graphics, etc.)

I got into programming partly learning how to program, but also experimenting by hacking up BASIC games, it was fun to change the rules, and or actions in the game, and energized my desire to learn to write my own.
Some allow larger keys. I once generated an 8192 bit key. It took a loooong time. Never used it. I guess that piece of software would have allowed 16k keys too.
Building mobile apps: 'If you can't do it right, don't bother'
Of course they do, they are not stupid. Did you read the article?
I would use a privileged port for ssh (different than 22). In case a hacker owns the process he would need sudo to open another connection if the port is <1024.
My taxes also make an enormous difference to my welfare. There are things that are best done collectively.
This is what you get for "open web" - treating symptoms instead of the disease that is JS, HTML and CSS.
Google Releases Tool To Teach Code On Raspberry Pi
ون بيس 612
It's responsive to screen size. Best viewed at higher resolutions where the site has space to expand to its full content width, the slide to unlock gets a bit squeezed together on smaller screens and I haven't been able to fix it properly.
And sometimes, the herd tells the individual what to do.
How much more would it cost to get the wireless version that they show in the video and most of the pictures? This Kickstarter is only for the wired version which seems archaic in comparison.
Nobody is criticizing people who practice family planning. A lot of comments do seem to be debating the merits of having children without acknowledging or seemingly comprehending that there is a huge emotional, non-rational component to that decision, regardless of the parents' annual income.
> If for each two jobs automation removes, it creates one new job.

Why do you think it's as many as 1:2?

That sounds like a lot of new jobs to me; How many travel agents did hipmunk and expedia et all shut down vs. how many employees that they have? One robot maker and a couple of robot service-people can make and maintain enough robots to remove a hundred jobs. Or maybe a thousand. I don't know, and I don't pretend to.
...breaking the immersion that you have tried so very hard to produce once or twice a minute so you can pause and reposition yourself in the real world room.

This seems like the biggest remaining problem for creating realistic VR games.
I think you've missed the point.

There are more possible permutations of four words than permutations of 10 upper/lowercase letters, digits, and common symbols. The four random word approach is harder to crack.
U.S. Government May Have Wasted $321 Million on Tech
Microsoft Small BASIC:

http://www.microsoft.com/en-us/download/details.aspx?id=2296...
Netflix Uses Pirate Sites to Determine What Shows to Buy
> For example, what benefit is there in creating a new user with sudo privileges instead of using root directly?

Also, when a group of people all need access to the same servers, you don't want everyone SSHing in as root. It's much easier to manage team security when everyone has individual users and sudo rights that can be logged and audited.
SnapEDA Wants To Help Fuel Hardware Startups With A Github-Like Community
> But this never happens. Why?

If you pay an accountant $500/year to do your taxes but all that work could be automated for almost no cost, would you still pay your accountant $500/year?
My Wife and I just bought a house, so the conversation about kids has come up. I guess i knew child care was expensive, but after talking to my coworkers it turns out they spend on average 20k a year (this is MA). That figure blows my mind. How can someone not on an engineers salary afford this?
>If there were truly big stakes attached to that exam then there would be a lot more than 340 people out of 150,000 getting a perfect score.

That, and we're all blissfully unaware of what fraction of that 150k participated in the course, and what fraction merely participated in clicking the confirmation email.

>As a kid, I didn't have that problem.

Word to that. Yours truly, for example, took Multivar and LinAlg at Georgetown while in high school (in summer semester before sr. year - for fun), scored a 35 on the ACT w/o prep, AIME participant, that kind of thing. Later failed out of college. I hope this kid really is a genius because if he's not, well, "Whom the gods wish to destroy, they first call promising."
Sudo ask for your account's password, so it's a protection in case someone manage to get your private key (or manage to login with OpenSSH using an exploit).
Work at Home Data Entry Jobs Legitimate Site
It's been ages since I checked, but I remember plaxo was supposed to address this kind of problems, what has become of it?
How I Failed (Tim O'Reilly)
Some comments from: http://www.theregister.co.uk/2013/09/12/ietf_floats_prismpro...

'The proposal has just one author - Phillip Hallam-Baker of the Comodo Group – which makes it a little unusual as most IETF proposals are the work of several folks in pursuit of a common goal.'

'Sadly the paper is a little light on for actual ideas about how the internet can be PRISM-proofed, offering “a security policy infrastructure and the audit and transparency capabilities to support it” as one item that should be on any hardening effort's to-do list. More use of cryptography is also proposed, so that “two layers of public key exchange using the credentials of the parties to negotiate a temporary key which is in turn used to derive the symmetric session key used for communications”. That regime should, Hallam-Baker suggests, make it harder to snoop on everyday traffic.'

Heavily emphasis on the should on that last sentence.
Pedantry: That should be obvious from the units, wouldn't it? (Volts for voltage, amperes for current, ohms for resistance) I do agree that the general public uses these interchangeably, bringing confusion :)

As for a well-behaved device - there aren't very many of those, either. Fortunately, this is less of a problem with USB3 - more devices follow the spec closely.
Dr. WEB Warns Of New Trojan For Linux Having Heavy Payload
Beware of the key size limitations of OpenPGP smartcards: most of them can only handle 2048-bit RSA keys, a size that is now considered not safe for new RSA keys.
you're basically saying you're lazy but don't want to admit it and possibly jealous of this kid who worked hard.

>Again, I think the schools need to figure out how to get more kids engaged.

It's upto the kid to be responsible and learn things. If they don't care and just want to fuck bitches, then it's his problem. You seem to have a big resentment against your teachers but it's your problem that you're lazy.
Thanks for the note, I've ensured Ghostery only blocks the SoundCloud widget and not the entire post now.
Perhaps adding support for thin "client-side" shim, so that you'll have just a html of something along the lines of:

<html>
<head>
<title>OJ Example: html shim</title>
<!--Include OJ -->
<script src="oj.min.js" type='text/javascript'>
</script>
<!--Include OJ app/page -->
<script src="example.oj" type='text/javascript'>
</script>
</head>
<body>
<noscript>
<h1>Something went wrong</h1>
<p>So sorry. The server was unable to detect that
your client doesn't support javascript. Please try:
<a href="?force-server-side-rendering=true">magick</a>.
(Maybe that should be a client side redirect, via a meta-tag:)
<meta http-equiv="refresh"
content="1; url=?force-server-side-rendering=true">
</p>
</noscript>
</body>
</html>

Now, example.oj will pull in stuff via require etc, and given a "smart"
server, the same page/app can render client side and server side?

[edit: The oj.js script should also probably be able to redirect the client "back" to client side rendering, if it detects js -- so that if google links to url/?server-side-rendring=true -- not all clients from google will be "forced" to do server side rendering.]
I don't get why everybody talks about Verisign or others giving them "keys". The NSA just need certificates for their own key, right? The only private key that Verisign could give them would be their signing key, which seems much too powerful and central for a signing authority to hand out.
But not Safari on the desktop.

So, what's your issue?
10 Powerful CSS Tools for Developers
I have one on my desktop, one on my laptop and one on my mobile. If any get compromised, I only have to delete one public key in authorized keys and generate a new one.

Personally, I still don't like SSH keys. Yes, they are "more secure" in the sense of preventing others from breaking into your servers. But they are less reliable in a sense that they increase your probability of being completely locked out when shit hits the fan.

Laptop, desktop and mobile phone? If you can't imagine a situation where you will loose access to all three at once, you either live a very different lifestyle than I do or have a poor imagination.

For me, the expected loss (i.e. probability * damage) of loosing access to an important server because of some fire of flood is far greater than the expected loss of someone guessing SSH port, my login, my password and then the root password.
So someone created another app that doesn't help women that have been harassed, and "empowers" women who haven't with a tool to harass innocent men? And somehow this is a good thing? I hope they get sued to the ground.
This is really nice, certain parts are just amazing. Such nice UI flow. I will keep an eye on it and try and use it in my next project!
Developing with Apache Wicket
Put a passphrase on your private key and copy it over whatever insecure channel you'd like. ... or use ssh, why wouldn't you use ssh?
it has nothing to do with luck. Everything happens for a reason. Hard work makes you a genius, simple as that.
Feynmann is the best example of this.
You might also want to check out my 3D game-making platform http://craftstud.io/ which has drag'n'drop scripting, easy-to-use tools for making your own animated models & maps plus real-time cooperation over the Internet.

I've taken a slightly different approach to most of the tools in the list in that my aim is to provide a platform that can actually be used for real game production. It's used to make all kinds of games by anyone ranging from 8-years-old to adults.

Some games made with it: http://play.craftstud.io/games/
Agreed.

Depends on the policy of the company, of course, but the first thing I would do when I get a resume of a person for interviewing is to google their name. Do they have LinkedIn, github, Facebook, a personal web site?

There's good, neutral, and bad.

- good: OS contributions, intelligent blog on topic

- neutral: random hobbies, completely blank web presence

- bad: photos with illegal drugs, hostile blog, drive-by vicious blog comments, etc
>"...kind of like swimming in the air"
OMG. That's exactly what I dreamt more than couple of times. In my dreams I would be walking on water. Like if I pump my legs up and down fast enough, that keeps me afloat on the surface of water in a swimming pool, or a pond etc. Kind of like that lizard that walks on water (http://www.youtube.com/watch?v=Qhsxo7vY8ac) . It feels so realistic and so normal an ability to have. Alas I tried it quite a few times at our local swimming pool, and it never worked :)
your numbers are off - took me a lot of tab switching on my tablet to figure out the mistake :) it should be millions, not billions, and they represent the proceedings (the amount raised on IPO), not the market cap.
I don't think it's about intelligence, I'm from Chicago, I know a lot of incredible people from the top schools, but I've also met plenty of the "less intelligent" people from Northwestern and University of Chicago.

I believe it could be about being able to get your way in into the right circles. Getting in into an ivy league school is usually challenging, unless you're born into money, you have to figure out a plan and correctly execute it in order to get in--just like meeting the right people, starting a business, and then getting funded.

Also I think we like to associate and surround ourselves with people of the same background. So when a successful Harvard graduate sees another Harvard alumnus, there is an automatic desire to help out.
Constitutional Amendment Petition - Corporations are not people.
The age recommendations on this are way off

This article recommends Scratch for 12 and up. Scratch is good for kindergartners and up. The Snap fork is more appropriate for older students: http://byob.berkeley.edu/

This article recommends Lego Mindstorms for ages 9-12 (and python and ruby). The average age of people who used to buy Lego Mindstorms was 28. The box recommends it for kids over 10. Lego has a robotics kit for younger kids called WeDo. I would not introduce python or ruby to a 9 year old, unless you want them to hate programming. Teaching programming for its own sake is a recipe for disaster.

And again it's missing so much. For coding robots to do things see sites like http://fightcodegame.com/ http://robocode.sourceforge.net/ http://www.nessbots.com/

For making games, I'd start with Scratch for < 13 kids, but for older kids see sites like http://www.playmycode.com/ http://pixieengine.com/ https://www.scirra.com/construct2
The last API that I wrote used versioning in the headers and it saved us a ton of headaches when we updated our API. Our V2 upgraded some JSON fields of the API and our users who were on V1 were never affected. The funny the whole concept is that, you use it every day without even thinking about it. If you think about the web when you're looking at an PDF; What tells you if what version of the PDF file it is? Not the URL, it's the meta-data in the PDF tells you. You'll never see a link like:

server.com/files/a-cs3/important.pdf
server.com/files/a-cs4/important.pdf
server.com/files/a-cs5/important.pdf

You'll see

server.com/files/important.pdf

The information about the version of that pdf is contained in the document and managed document itself. What this allows for is you updating the PDF in any PDF editor without breaking how everyone else on the internet will process the file. You can edit the pdf with anything, re-save it and not break older version. This is the same concept that you should use to extend an API. If you think of the API as an document for a version of DATA (Just like any file/image is an endpoint), it will help you get a better grasp of why you shouldn't version in URL's.

Here is a more accurate description of the how you should design a REST API from the Author of the HTTP spec:
http://roy.gbiv.com/untangled/2008/rest-apis-must-be-hyperte...
Greater Fool's Theory.

If the whole credentials bubble takes another decade or two to collapse, it's still worthy to go for a top degree today. Aaand feed the bubble.
German elections don't make sense
And while google certainly is important, it isn't the only crawler. Others are important both in "absolute" terms (duckduckgo/bing ?) -- and for "local" and possibly "domain" search (yandex, baidu).

Not to mention internal crawlers for site-wide search (although you can of course adapt those -- why do it if you don't have to?).
Ask HN: From self taught developer to self taught sysadmin
Hi,

I've recently accepted a position as a sysadmin. I've been working as a software developer for the last decade or so, however the market where I live (far, far outside of SV) is somewhat thin for people with my skill set. Relocating is not an option, and I am not interested in telecommuting. Hence the switch (plus higher pay, and a more reputable company).

Others who have moved from development to administration: what, in hindsight, would you recommend to someone making the switch? Books/non-obvious strategies/etc.

Thanks!
Apparently the author is so serious about this that the HTML is full of this things like "lazy standard?&nbsp; Wow.&nbsp; Just wow."
Short film set entirely on a teen's computer screen
>"I felt like someone was standing in the room with me and was (irrationally) terrified."

This has happened to me couple of times as well.

Upon reflection I have noticed uncanny similarities to the below movies..

Lucid Dreams == Inception (http://www.imdb.com/title/tt1375666/)

Sleep Paralysis == The adjustment Bureau (http://www.imdb.com/title/tt1385826/)
Its important to note that only the sensors are wired. They connect into a hub on the chest (which transmits wirelessly), so you aren't tethered to anything.

The wireless sensor version (which they sell as a professional mocap device) costs about $4000 (which is still inexpensive for a current mocap suit) http://www.yeitechnology.com/productdisplay/3-space-mocap-st... (plus straps).
Brainfuck flavor
>I agree, but I think it's mostly mutual - there are lots of opportunities for part time jobs but most people prefer full time employment.

That's because they also prefer to have a full salary. It's not like employers, considering the increase productivity technology affords, offer full old-time salaries for part time work.

If anything it's the inverse: buying power has dropped since the seventies (only partially offset in some areas with cheaper and more capable electronics, but not for things like housing, food, etc).
Kim Dotcom Sues New Zealand for $4.85 Million
Penzu - A Secure private journal online
I'm talking more about software maintenance. For example, sometimes I need to respond to flash or java update messages.
So really, what you want, is a convenient & easy but totally secure method. Because if you want security, a one-time pad is pretty much your best option. But at the same time, since you pretty obviously are willing to go great lengths for security, let's not beat around the bush. Granted this has some of the same problems (need randomness), and can probably be more work than it's worth...
This is so typically "I have this greatest world-changing idea ever, all I need is a programmer to implement it..."
The power of the people (via voting) you're suggesting relies on a) candidates that are willing to make the changes needed and b) actually being able to enact those changes once in office

Sadly we very rarely see candidates in set A and even less so of set B.
What is a Trademark, When is a Formal Trademark Needed & How to Get One
I agree with you that JS has more wide-spread appeal. But it just is not the right tool for the job. Obviously, I have to be clear about the job. The job is writing a web application that lets gmail look like a school project.
Interesting aproach
> So whom do I actually trust? This list is short: the Linux kernel (Linus tree) and FSF/GNU.

Why would you leave out the BSDs?
G10 Code - STEED (Usable end to end encryption)
Where can I buy this as a service?
Except manufacturing and cost considerations go exactly the other way. An iPhone 5S entire electronics that make it go is slightly smaller an an average stick of gum.... That's all the "modules" except screen and battery. It's made in one shot my high-speed machines that took about 30 seconds from bare board to operating phone parts.. Parts are so small you'd need a magnifying glass to handle them by hand.

The current situatuion is about as good as it gets. There are enough iPhones sold third parties can copy parts or simply canibalize broken ones for repairs. Apple only updates models once a year, so that means there is lots of effort by third parties because their efforts pay off a whole 3 years of repairs. Fixing individual boards takes $1000+ of lab equipment and 2x what the part is worth for labor.

Even Apple's MacBooks only have one main board that's small as possible. That's why Apple started using REAL glass screens, and metal bodies that can be pealed down for their bare scrap costs. To get the ELECTRONICS metals back is going to require some kind of furnace that can contain toxic fumes and perform exotic metals separation. Even then 3/4 of electronic waste is pastic and F4 circuit board material which is utterly useless except to burn off. That leaves 2/3 of at waste as dirt cheap tin-lead solder and a small bit of super fancy alloys.
"In its majestic equality, the law forbids rich and poor alike to sleep under bridges, beg in the streets, and steal loaves of bread."
With 30 tuners and 30 TB of storage, SnapStream makes TiVos look like toys
> People did just fine developing for PC

So fine that we ended up stuck with 1366x768 for the last decade.
> early agricultural societies

When, where?

Also, your links only affirm what i already said. People with a perceived lack in the "secure future" department have more children.

Lastly, i never said overpopulation isn't a thing. It's unclear why you quote wikipedia.
I thought the book Practical Typography made the best case by just showing an example. Two spaces creates rivers in the text that make it look bad. The author's proposed solution to custom-typeset to avoid this is not sustainable (because it's sensitive to reformatting) or practical.

Judge for yourself: http://practicaltypography.com/one-space-between-sentences.h...
I continue to be excited about the current Kickstarter for "Robot Turtles", a board game targeting 3-8 year olds that's based on programming concepts. It sounds like a lot of fun. There are about two weeks left to get a copy.

http://www.kickstarter.com/projects/danshapiro/robot-turtles...
NSA is a customer, too.
That seems like the wrong way to do it.

The post sentence spacing was never really treated as two consecutive spaces - conceptually, it's a single area of whitespace that is larger than the inter-word spacing.

If you especially cared about typesetting it correctly, you'd use a single &ensp; (or perhaps an &emsp;).
startpage serves you google results, anonymized. It's sort of like scroogle was, I suppose.

ddg, I think, does their own spidering and also serves bing and other results (but not google), but that's from dusty memory and it could be wrong or changed. ddg will however forward your request to google if you want, and you'll get a results page from google itself. In fact I use ddg as a front end for google when I want to use google.

startpage is Dutch/American, ddg is American.

https://startpage.com/eng/company-background.html

https://duckduckgo.com/about http://dontbubble.us/

ddg's Gabriel Weinberg posts here on HN. https://news.ycombinator.com/user?id=epi0Bauqu
[older] Tap into your social brain