skysight-inc/HackerNews huggingface dataset:
>how is it that a company cannot detect when someone downloads a giant database of sensitive personal information from their servers? Surely, there are ways to monitor access to this data and immediately flag suspicious behaviour

There are classes of products related to this specific task, generally we call them "DLP" or Data [Leak|Loss] Prevention.

What we don't know, is how the information was transferred from the servers, and how much different that traffic looked compared to normal activity. It's easy enough to catch a credit card number flying through a plain HTTP packet over the network in the wrong direction, but it gets much harder when the party trying to transfer that data is intentionally attempting to avoid detection.

> Isn't there some best practice security measures that can prevent of all of these things

Yes, but none of them are perfect, and even if they were, they would require perfection from human operators. (Perfectly configure, maintain, monitor, etc.) And, of course, they assume you can identify a threat before it leads to compromise.
"One Move Too Many". The $3750 rock-climbing book.
Blockchain info for 37,365 BTC seized by FBI
I don't ignore fundamentals, but for non-dividend paying issues, I trade primarily on technicals. As such, I have no interest in Twitter shares and almost certainly won't any time soon, if ever.
By posting in Ask HN, I'll assume community discussion is important to you. So I'd recommend my app, Pivit. Besides having a great threading system (with ability to copy), it was designed for iOS 7 and utilizes:

・Dynamic Type

・Content deference

・Background Fetch

It has a one-of-a kind article indicator for both posts you've read and ones you've decided not to read, and support for opening in Safari and saving to your Reading List.

I also didn't overdo the HN orange.

Pivit — http://appsto.re/i6xC4GD
a) it's $100k we didn't have, and which we greatly appreciate. We have a 'donate' button on the site, but that's basically a few dollars a day, more or less. It will pay for pizza for a sprint every few months, and that's about it.

b) we've supported Windows for years, money or not. The core team isn't made of Windows experts, so our support may not be always ideal, but we always test on Windows, have Windows CI running, and always release Windows installers. Windows is widely used and we want the experience there to be as solid as possible. The money was a donation, no strings attached (under US law it can't have strings attached, since it's a donation to a 501c3).
You're citing pretty much the tip top end of the scale. What do you suppose the 95th percentile tech person makes?

I make roughly twice as much as an engineer than I did as a teacher. I may work year round, but work is faaaar less stressful. As a teacher, you might wear many hats every day, including that of performer, improvisor, tutor, coach, mentor, surrogate parent, administrator, behavioral therapist, crisis manager, decorator, and so on, and so on. Add to that the putting up with the constant flak you receive from being in a profession that's just frankly not valued in this country's culture.

If you really care to learn what it's like, I journaled my brief career as a teacher: http://alanjayteaching.com.
> People who say they are not judgmental are the worst kind of liars

You need to meet more, nicer people.
It's a problem. How do we get people who aren't in a particular field to distinguish between something like PLoS ONE, which is legitimately selective and reliable, but just trying something innovative and new, or the legitimately high quality CS conference proceedings that publish only on arXiv; from journals that accept anyone and publish online, with no barrier to their entry into publishing, or the many people who simply throw their papers onto arXiv and leave things at that?

The internet has many opportunities for academic publishing, but many dangers as well. Academic publishing has relied on the barrier to entry in publishing to filter out incredibly bad journals, or make it clear that they are scams that simply charge high publishing fees; now anyone can create a journal, with low publishing fees, that may be quite legitimate or may be a scam.
Well, it might finally shed some light in the Mayan/Inkan/Aboriginal, or just plain out cryptic and esoteric secrets of why the hell the PSD format is so inconsistent and annoying to work with!
>Some credit card companies let you generate expiring CC numbers.

I know Citi Credit card lets you do that.

> and wouldn't work for recurring purchases (like Adobe Creative Cloud)

It could. If I remember correctly, Citi card lets generate three types of Virtual Cards. One based on the expiration (less than a month), another based on the maximum amount/balance (where expiration is about a year) and finally a combination of both.

Virtual credit-cards are real handy especially when trying those 30 day trial services.
Ask HN: What machine learning approach to use if you only got positive examples?
Are there some well known Machine Learning algorithms when you only have positive examples? I did some research but most I could find was when you have positive and unlabeled examples.
Well, he did say "talent", not "people"
Say you're a netflix customer. You login to watch a video. But Netflix hasn't updated to support your amazing new device that uses a different OS.

Pretty much like Firefox and IE6 activeX sites, or iPhones / android and flash. DRM simply restricts playback devices.
Because it's completely unrealistic that a person who has no programming experience, even worse even no basic HTML experience will have familiarity with a Gemfile, how to hide access keys from a repository, etc.

If you think that that information is something you can understand, internalize and actually make work in less than 5 days you're delusional.
Note that this is a donation, not a grant. The legal terms are completely different.
Not many people understand and trust the system we use now. Would futarchy actually be more confusing, or just different?
The work @smortaz and the PTVS team have done with IPython over the years is awesome, and we're really very thankful for this!
"The Julie/Julia Project. Coming soon to a computer terminal near you."

Wow.
Thanks for the advice. I should have been more specific with my complaint. Programming is a lot of fun, and I'm majoring in CS. The problem I'm running in to is that my job is boring, plain and simple. The work is uninteresting and I haven't made any close friends yet there. Most of that is probably my fault, but at the same time I can't imagine myself working there in ten years, much less next year. Mostly because I feel like I'm wasting my life there and could potentially be doing something more valuable and interesting.

I'll keep this in mind though, it strikes me as really good advice.
Actually, the bitcoin network's hash-rate is currently at about 1.46 PH/s, as in more than 1460 times 'coming close to terrahash/sec levels'.
Is Too Much Liquidity In The Angel Capital Market Good or Bad?
You're right, I'm conflating the two. I mean to be saying intellectual property law in general, which I am not a huge fan of.
It's not the same because HTML5 EME is designed to ensure anyone who manages to get media working on unauthorized platforms can be arrested under the anti-circumvention provisions of the DMCA and other similar laws. As in, this was actually one of the stated requirements.
1) Adobe Updater works fine for me now that they've got CC; lots more frequent updating.

2) Sketch/Acorn are not available on Windows.

Not saying you're wrong; just saying I disagree :)
That's what I was thinking. If a tv network had as many views as twitter, it would be doing very well. I'm assuming, no tv network gets as many eye balls per year?
Right. Because the world has 30 - 50 years of successful tech companies that utilized venture capital to create lasting companies of value. But you want to pick the bubble year. You want to make the next Google Glass? The next self driving car? You have two choices. Work with a very large company who will use profits from their existing businesses to subsidize your efforts for years with loss making. Or start your own company and raise capital to sustain yourself while you build a super duper company that's defensible. I think they're both great routes to take.
One of the main reasons Twitter is IPO'ing is that their competition (FB and Google) have a massive war chest. They need to have the ability to stay competitive.
Whats with all the generalization in HN today?
You're giving up a lot more than that. Last I heard, the existing Chrome OS implementation of HTML5 EME refuses to run unless the device is a Chromebook that's locked down to ensure no unauthorized or modified code is running anywhere on the device: enable developer mode and the CDM disables itself.
Companies using Hadoop for analytics bring meaning to satellite data
Great tech that had yet to find a market. Now they have access to one of the biggest markets around.
If it's done on a small scale, gradually and over a long enough time, it may be possible.

The depth of human oversight is something these articles rarely get into.

How many remote operators are there per train?

Are these operators former actual train operators or new staff?

What situations will these trains get into because of a lack of an experienced person able to "go and see" (Genchi Genbutsu / 現地現物)? Also, what knowledge dies after a couple generations of drivers have never manually driven a train, and then what skill/s or sensory intuition would they not be aware of which could have averted a future disaster? If a sensor or measurement for mething that turned out to be crucial wasn't thought of beforehand, there won't be a way to know something went wrong until later, when the damage may already have been done.
Not sure if this is really a good technique. Ecommerce websites often have different places where it's possible to add or remove items and all these places will have to be change to make sure the localstorage is updated. Also there could all kind of special cases that could make the localstorage out of sync. eg. if I add one item, then click back or close the tab before the JavaScript has time to execute. If I close the tab, then login from a different browser, the localstorage will be out of sync too.

There might be ways to solve these issues, but it's definitely more complex than a snippet of JS. Amazon's solution, while requiring an additional HTTP request, is more reliable, and probably more maintainable too.
Show HN: Unlock a Tesla with Password-less Authentication
LaunchKey (https://launchkey.com) demonstrates what unlocking a car with password-less, multi-factor authentication looks like.
From the Forbes article:
"So this was not merely a distributed denial of service attack? It was a zero day exploit? Did it gain access to any data or simply knock the site offline?

I’m not one hundred percent on this, but I don’t think it’s possible to do a DDoS over Tor, or at least it is much harder than doing it over the clear net. The effect of the attack was to block access to Silk Road. No data was leaked, in fact we’ve never had a data leak.
"

Posted after the feds imaged the server. OOOPS. Hubris is dangerous.
Indeed. Stereo audio in and out, assuming modern resolution and rates and sufficiently flexible ports (mic-in to line-in sensitivity and line-out to phone-out power), with plenty of horsepower for DSP and this aligns really nicely for audio projects. I've got all kinds of things I want to do with one.
Chrome 13 Beta just landed (hours ago) with PNaCl support on the desktop. I'd assume that it will be in tow shortly for Chrome for Android.
Maybe I don't understand your situation but unless you have variation you don't stand a chance of developing a predictive model. In the dependent variable you need at least 0, 1. And in independent variables you need variation. If you are doing time series you need variation over time in your dependent variable.
The code is up at https://github.com/logaan/typed-game-of-life and I'd be very happy to accept a pull request with a Java example. I've done a few side by side comparisons of Clojure / Scala / Java and the Java has always been several times larger than Cloure / Scala. In a couple of cases it was 20-30x larger.

Java 8 may indeed improve this situation. Does it also introduce higher order functions for working with collections?
typeof(["an array", "contains multiple things"]) == typeof(["sometimes"])
I don't understand. Aren't there open source PDF readers out there already, that has had its code checked and audited?
An example of Algorithms gone rogue?
My elders all do the same flavor of tasks that I do, just more entrenched with knowledge because they've been there for a while. It looks like the two career paths for me there if I stick around are either going to be management or the same thing I'm doing now, plus some experiential knowledge.
Oh wow. It's cool that the OS is actually smart to optimise it that way.
Several of these have unspecified gender, or are males: https://www.hnsearch.com/search#request/submissions&q=%22tau...

One sentence; how'd I do?
The cold-fusion story reminds me of the physician who pioneered antiseptic procedures, and the reaction of the medical community to his publication [1].

[1] http://en.wikipedia.org/wiki/Ignaz_Semmelweis
I don't actually identify as Gen Y (I had to look up the dates) or as a particularly distractible person. I just wanted a pithy way of saying that the protocol issue I hit wasn't necessarily an inherent issue, but rather that I chose not to deal with it.
Sometimes it's not about saving money, it's about deliberately making "saving money" look a lot worse than it is.
RapStats
It is sort of incredible that on one post you admit to knowing little about the subject, and then on the next you make authoritative (albeit unsurprisingly asinine) arguments such as "it's unrealistic to expect the environment to stay the same, and we should just treat these events as normal and see if we adapt or go extinct."
I don't know where you live, but the Swedish Green party still want to immediately start phasing out nuclear power. More CO2 for the world.

(If the seas do have an ecological crash which makes the remaining eco systems go down, then any surviving Green party members will probably argue the advantage of this, pushing their carts down "The Road".)

So, no hope. :-) :-(
I could make a lot more money by manipulating the information in the marketplace, creating volatility in the prices of the prediction bets, capitalizing on each fluctuation, while still holding some inventory in the correct outcome.

And one extreme version of this is mounting a credible campaign then "throwing" the race or withdrawing abruptly. This is attractive whenever the possible winnings in the prediction market are large and the market is insufficiently regulated. In ordinary financial markets, there can be special scrutiny paid to shorts, but the zero-sum game structure of a prediction market loses the distinction.
This is happening to me right now. I struggle to find amid ground from working too hard and staying up till 4 am and working too little. Can you spare some advice?
This leads to a system where people will vote only on the issues that affects them, which is a core principle of the panocracy system [1].
The problem with futarchy is that if the betting works with money, it will ultimately lead to a plutocracy.
But this could be avoided if there would be some form of "voting credits", so that every citizen has a ceratin credits to bet per year/month/...
The winning bets could then be paid out in money.

[1]: http://en.panokratie.net/
> Hansen gives a sample goal of improving the economy, but what if you also want to protect the environment, take care of your old and sick, maintain a strong defense, educate your children, etc?

This is where the 'vote on values, bet on beliefs' part comes in (did you read the paper?). The voters' job is to specify how much importance they place on various goals or metrics, and the prediction markets are asked how to achieve the goals.
typeof(x) === typeof(["something which is certainly", "an array"])

or am i missing something?
Is there any reason to think those are worse for futarchy than for democracy?
You're correct. Annotated was just too many characters to fit inside the columns I used for the thumbnail view.

I'm not so proficient a developer that I could write any amount of Haskell code without being acutely aware of its statically typed nature.
Tungsten carbide rings
Tungsten carbide rings for men are very long-lasting and also incredibly shiny and implausibly sleek. Shop tungsten rings, tungsten wedding rings, tungsten carbide rings at symbollove.com. Browse fashion rings for men by color, style, or collection today.
Well ocean acidification is real and proven. At this point all we're arguing about is how many years we have left.
Show HN: Gem that quickly creates namespaced files and tests.
With a little bit of research on your own you can find out for yourself that this is an incredibly important issue that affects everyone on the planet, and there is nothing "sensational" about the way it is reported.
Yeah, AMEX used to allow one-time use numbers with its Platinum Corporate Card (maybe other cards as well). But, they stopped years ago. Don't know if it was hard to manage or if I was just the only one using it, but I loved it.

Seems that another way to solve this for recurring payments would be to likewise issue a virtual number. But, only the merchant with a particular Merchant ID could apply a charge to that number.

In general, it's actually a strange concept that we walk around with these wide open payment methods that only require that a dishonest person acquire a few bits of information to abuse with impunity.
What sort of budget would you allocate towards ipytion development?
The Hellstrom Chronicle is a 1971 "science fictiony" cult film that, strangely, won the 1972 Academy and BAFTA Awards for Best Documentary Feature.

In the film, the fictitious scientist Dr. Nils Hellstrom claims, on the basis of scientific-sounding theories, that insects will ultimately win the fight for survival on planet Earth because of their adaptability and ability to reproduce rapidly, and that the human race will lose this fight largely because of excessive individualism.

(The film is available on Netflix and YouTube.)

https://en.wikipedia.org/wiki/The_Hellstrom_Chronicle
Right, that's the same thing I just typed. They requested the encryption key that would give them access to everything after Levison refused to modify his code to give them access to only the one thing. If they're able to get a warrant for Snowden's data, and the only way they can lawfully obtain it is a method that also gives them access to everything, then that's what they are going to do.

Like I said, I don't find that evil. From their perspective, the only way to lawfully get Snowden's data incidentally required they get the keys to all of the data.
> They could easily be profitable if they cared to. They don't. They shouldn't.

And herein lies the problem with tech stock IPOs of this generation and this kind of thinking.

Investors are supposed to sleep easy that they've bought stock in an unprofitable company? Pretty sure the business model of "touching lives" isn't going to sit well.

Twitter is just another useless "tech" startup powered by bullshit but soon any sucker will be able to buy in on the dream. This sort of practice should be illegal. What the hell are they selling? Tweets?
I believe this is strictly supervised learning. The mechanical turk is only used for the initial labeling of the data.
Awesome. That's two breaches in one day from two different companies with which I've done business.

This is out of control. The bad guys are winning. Time for a new paradigm.
You seem to claim to understand the law better than the judge.
Yeah. The link is also in the slashdot post. The hacker scouts page was overloaded at the time as well
How to Make a Vesper: 1.007
No emails here either.

Hmm. Maybe the fraudsters literally took the data. As in, Adobe no longer has our email addresses with which to notify us.

It may as well be that ridiculous.
There is a transparent review process for the useful life of a published work. Other scientists can read it, test its conclusions themselves, and publish their own papers supporting or critiquing the original work.

If a paper claims a significant result, it will eventually get tested.

If it claims an insignificant result, it might never get tested. That's ok, little harm done because it is insignificant.
MobileWorks is growing fast - looking for a star marketer
Thanks for the constructive feedback! Many of our clients have tried lead databases like Data or Jigsaw and haven't found them nearly specific enough, which is why they come to us. There are a few examples in the blog post that are well beyond the scope of Data/Jigsaw (http://blog.mobileworks.com/leadgeni-dot-us-user-acquisition...) -- researching Github, analyzing payment platforms, finding new businesses as they emerge, and more. From your comment it sounds like "lead generation" isn't the way you'd describe these kinds of activities – could you suggest something more accurate?

Here's a more sophisticated use case: suppose a crowdfunding service is trying to construct a list of accredited investors in Los Angeles eligible for solicitation in particular domains of interest via the JOBS act. These lists don't exist in databases today -- generally the research element is the more complex part.
So atmospheric carbon breeds?
I had a project manager we were interviewing decline a 2nd interview because he read some reviews on glassdoor that indicated he might have to work hard. Just the idea that there was a chance he might have to put in time on a night or weekend scared him off. Now granted this was the culture years ago and maybe in other groups but he didnt even bother to ask about it just took the reviews from ex bitter employees (does anyone else but bitter people leave feedback on that site?) as gospel. I guess its better he took himself out of the running. He has also been unemployed for several months.
Are there any links to the code?
Pardon my cynicism, but it's hardly in Google's self-interest to have a true "incognito mode" in any browser that you use.
May be I am not thinking right about it.

Let me give an example. If given a list of all cocktails, I have lot of positive examples on what ingredients go well together. Say Gin and Vermouth. So I have big list of positive examples. But is hard to get negative examples.

I want to build a model where given some ingredients the model tells me whether they go well together or not.
And this might get worse because population is increasing so rapidly.
You are of course correct.

winces
...And now for something completely different!
I was impressed by the fact checking:

http://www.orangecoast.com/webexclusives/2013/09/24/a-factch...
The sky is still up...so I guess I'll carry on with my day.
I refuse to use the cloud services anymore. I may be using a version of Photoshop that is 4 years old, but it does the job and does it well. There are some new features that I'd like to have, yes, but it's a small price to pay when compared to having all your personal information compromised.
Seems to me like you're treating the symptoms and not the cause.

(Not that there's anything wrong with insurance).
This is simply incorrect, can you show a w3 document that supports this in any way?