skysight-inc/HackerNews huggingface dataset:
Not one tech company in the world publishes all (or really, any) of the work emails of their executives, and that's exactly what the records act does to the President.
Thanks for writing up the same response I had to that article.
we're already at the point where ppl don't buy new PCs because they are still fast enough.

getting to the point where silicon development stops and full-on quantum computing begins has been a long time coming. these d-wave machines are still a long ways from a proper quantum computer.
The valuation is based on what I would call "defensive valuation".

Instagram was bought for $1 billion, not because it had any billion dollar revenue generating potential. It, however, had the potential to erode Facebook. So Facebook buys it out as a defensive move.

Snapchat, given its huge user base, could potentially threaten Facebook, so Facebook would be forced to acquire them, purely as a defensive strategy.

Think of it as the cost of defending their empire.
The "change-port" discussion for SSH is so boring :-/ OpenSSH is I guess the most secure daemon on all your servers. People should more think about to change the HTTP(S) ports of their non-public facing sites and other daemons and frameworks they use.
Or instead of doing a script or a patch, you could just do the right thing in the first place and run your daemon on any of the literally over one thousand ports set aside for privileged services.
Thanks, exactly what I was looking for but couldn't find.
Phonetic Alphabet Generator for Hacker
That map is not quite right. I live not far from there.
Thanks! My kids will love this.
We had two teams in separate physical locations. We worked together occasionally, but most of the time projects were fully staffed at one location or the other. The Scala change was fully supported at one of the office and not the other.

It wasn't too difficult to convince the CTO that Scala was the right choice. He's a big OSS advocate. From a technological perspective we were trusted to make the right decision.

I think what really sold the the rest of the management team was how much money we could save in licensing fees.
Then bind to another port under 1024, so it's privileged, but not port 22.
I don't mean to be inflammatory but what's the purpose of HN postings regarding sites being down?

I've never actually been to nsa.gov and would have never known it was down. I'm sure most of the readers are in the same boat.

Even if I did access the site on a regular basis, I'd realize it was down and come back later when it might be back up.

Sometimes my favorite coffee shop is closed. I don't walk around the neighborhood carrying a poster stating that fact.

I've just never understood the purpose of these postings. "facebook" is down, "netflix" is down, etc. It doesn't actually accomplish anything.
You nailed it there -- that is the correct location.
Has failure ever made you a better person?
Has failing ever made you reconsider the kind of person you are?
There wasn't really a vote, but we did have a group forum where objections could be raised. People who weren't onboard with Scala were in the minority and most of the arguments raised didn't hold much water.
“I work for Nuke Piracy now, this is very bad for anyone profiting from piracy,” proclaimed WDF.

Except WDF really did profit from piracy by literally selling everyone else out. Ironic.
Personally I have an easier time typing the letter/word based captchas than the digit ones.
What makes you think the owner of the vehicle is liable for a crash caused by some third party driver?

In any event, the point is that the question of liability is both irrelevant (because insurance company will be the one paying for the loss in the large majority of cases in any event) and obvious (because these are for the most part well-established questions). It's not like a self-driving car is the first instance in the history of time that some piece of property could cause damage in the absence of human action.
It is definitely possible - my chrome does it. I have a number of extensions so I am not sure which one does it, but I'm sure it can be done.
The public nsa.gov site is just another government website. It's not like they're running it out of one of their secret data centers.
BAD KITTY Books and Original Watercolor
Bad Kitty is a clever jerk that we all love, from a distance
We weren't looking at FP languages specifically. We also were leaning toward something that could be run on Linux.
Ok, fair point.

I'd say it differently, though. Instead of defending the original point, which was bad, I'd instead say among all other controls--most important of which is patching, removing passwords, etc.--one control is running below 1024.

I could go for that.

Except I actually think the gain from being up high (over 60K) is greater than the gain from being below 1024. It's not about being invincible, it's about not being a target at all.
Ironically, it turns out the entire internet is an NSA honeypot.
For some reason more people than normal have been hitting my redirect in the last couple days. http://stats.itanimulli.com I dont think 20k could bring down the nsa, but its still strange.
Well for the NSA it could be related to the most recent news (maybe its a DDOS by the Germans?!), thus its 'breaking news' about a hot story a lot of HN readers are interested in.

For the other sites, its very rare they go down and its the best and brightest working to keep them up so if they went down the reason why is probably something that would interest the whole community.
Tor is still the best solution for online anonymity, even with the shortcomings it has. (low-latency for one). The exploits were related to the Tor Browser, not the Tor daemon/network.
Ha! I was secretly hoping that I'd cost the owner of some bot a wasted registration fee. Now let's all go visit so that they project a profit before the refund grace period ends.
Running on a privileged port doesn't change which other hosts can connect to the privileged server though. At best it tells the client that the server is probably running as root (or has the appropriate capability bit).

If you're worried about an impostor sshd on that host then I would tend to agree that it's simply not prudent to be connecting to that server at all, let alone passing key material or credentials.
> Well, first of all radiation is a entirely man made disaster, unlike a tsunami.

Tsunamis are not much of a disaster without man building and living along the coast where tsunamis may strike. The circumstances of the disaster are just as much man made as the radiation.
only when i have learned why i failed
Oh my, really? The Feds could just track you down and grab you. Why is this worse? I agree, in some fantasy dystopia this may seem scary but ... If this ever happened, I mean, we would have much bigger problems than the self-driving car.
"I personally like to see the use of biological nervous tissues for general-purpose computing. Furthermore, using physical properties of devices and building hybrid analog-digital general-purpose computers is extremely enticing."

Curious how the author doesn't mention the upcoming Memristor [1][2] computing paradigm. Memristor computing will be based upon an entirely different architecture, which will likely revolutionize computing. There is much more to it than I can describe here, but here's at least one company commercializing this tech as we speak [2].

1. http://en.wikipedia.org/wiki/Memristor

2. http://iopscience.iop.org/0957-4484/24/38/383001/pdf/0957-44...

2. http://www.crossbar-inc.com/
Yes, but code being written to data areas (or rather, written/stored in such a way that it can/will be executed later) generally is a bug. Allowing a server to overwrite itself is just a bad idea (hence the NX bit for memory).
Agreed. To be more specific, it's the end of Dennard scaling. Dark silicon is just a symptom of the problem.
You seem to have missed my point. Hypothetically, you don't need to be in that same situation to have a forest in your city.
Word on the street is that it's supposed to be back up and working smoothly by late November.
Oh, i just meet you, and this is crazy, but here is http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&... so DoS maybe ?
Anyone use Dome9? (http://dome9.com) they close all of your ports and open them on demand via chrome extension or mobile app for when you want to use SSH.
1. Family makes the worst founding team (my parents almost divorced mid-way through their first company).

2. Friends are a bad idea if you can't fire someone from a task without hurting the friendship.

3. That linkedin/meetup guy with the great resume, likely has much better things to do.

4. Colleagues, especially those you have been in really tough times with and survived respecting each-other are the most trustworthy co-founders.

If you are short on #4, try to do many small projects with #3s and #2s until you earn each-other's trust and know you can hold each-other responsible. Co-founder is a very heavy word. To put it in context replace it with "Spouse" and see if it still makes sense in your head before asking someone to be one. Based on standard vesting you are bound to stay together for 4 years minimum and that person has to know they will like you and your idea that long. So don't drop that word in the beginning or you may scare people off.

I don't put much faith in people who say they want to be "co-founders" and go on a matching service for that. Wanting that title and having a mission strong enough you are ready to leave salary, social life, and security for the next 10 years to do it are two very different things.

I too need a co-founder in a bad way. My product is live and picking up steam fast and my sleep is cut short by the day. However, I've stopped "looking" for a co-founder and instead let the product ( http://Doerhub.com/for/doerhub ) actually attract and help me evaluate the best team for itself.
Amid New Storm in U.S.-Europe Relationship, a Call for Talks on Spying
I live not far from here, and drive by it every day. The rapid pace of change in the city limits is unprecedented...in the last 3 years, perhaps. This city is rebuilding itself quickly after lying stagnant since the 1960s.
those numbers don't look good at when you take a look at what those two classes of people are doing.

ie. 1. is targeting you specifically, 2. is bot targeting everyone

when presented with two options, thinking of those options as 50:50 is natural, but it's really more like 0.0000001:99.9999999
I run SSH on port 22, but occasionally (when I travel) I will run it on port 443. Yes, know 443 is used by HTTPS, but:

1) I don't run HTTPS on the box I SSH into

2) I might hit an overly restrictive WiFi that only allows traffic out over HTTP and HTTPS

Which is another reason why you might not want to run SSH on another port. You might not be able to reach it.
http://www.pressherald.com/news/Myserty_Portland_barge_and_S... is a more detailed Press Herald article, it says it's BAL 0011.
Right, see. When you say "Relatively easy" do you mean: "it is just subtly easier that compromising the NSA itself" or: "I'm surprised it doesn't happen every day"

because I think you meant the former.
"maybe its a DDOS by the Germans?!"

That would be newsworthy however no evidence of this was presented. It was simply "this thing is down now".

If a large site goes down, I would like to know what happened. I'd be interested to learn from the mistakes of others.

This isn't the case with this posting or others like it.

Posts of this ilk rarely have any more information than I could have received from a curl command.
You can ask adobe to lift their user lockin policy
It's www.NSA.gov NOT NSA.gov.

www.NSA.gov IS up, at least for me.

Edit: I just talked with my American friend and it apparently really is down for them. It works for me up in Canada, though, at 23.6.100.226.
I use sshttp for this - support for both port HTTP and HTTPS. I don't serve any webpages, but I wanted the option to also use a more aggressive SSH holepunch on the same port, and just naked SSH if I could.
Agreed. I commented on the organization. One expects the NSA to provide a sub-par post-mortem.

a) it is the NSA and

b) it is a "marketing" website

I'm not sure what utility www.nsa.gov provides beyond a mission statement. Never was curious before, now I am. :)

--

edit: clarity
Three years ago was just after the housing bubble popped. What is it compared to, say, ten years ago?
Attacks on port 22 end up consuming CPU.
Anyone know what front/back technology healthcare.gov utilized
I cannot seem to find a definitive answer to this question and still cannot get my head around 500 million lines of code as I have seen claimed.

Just a morbid curiosity I suppose.
Who is going to bother with a portscanner when there are plenty of targets on port 22. The targets on other ports are more likely to have been set to use keys, or at least have better passwords.
Security is as strong as your weakest link. If you can't protect your port 22, any other ports are probably easy to take over too. Are you saying you get extra time since attacker has to find this new port? I am not totally sure what you mean. Please educate me.
ChatRoulette, Napster, BitTorrent, PointCast, RockYou, etc etc
and attack on other ports don't?
I did some customer development on a similar idea. I talked with a local philanthropist and he liked the idea of donating after a milestone was reached. For example, when a student completes a Khan Academy math lesson money is donated to a students future education.

In other words a funder would donate $5,000 to a student when they can test out of all Khan Academy math lessons.
The existence of several counterexamples of it done would seem to disagree with your point about it being "impractical". Paint.NET warns it'll have to flatten layers when saving as PNG, Notepad will warn if you try to save Unicode-laden text to an ANSI .txt... not to mention several blanket warning systems...
Call me crazy, but I consider a future of self-driving cars to be a fantasy dystopia in any case.

I find it odd that people seem to be upset with governments intruding on their privacy in a purely abstract sense, but seem not to have issues with potentially giving up their physical autonomy completely to a system run by software (and potentially, by extension, a government.) Why be worried about the effect of a global internet surveillance apparatus but not be concerned about that being extended to the realm of vehicles, or the effect that that might have on personal freedom?
@ssmoot - this is extremely interesting. Thanks for pointing out RootProject.
After doing that, are you able to use them just as seamlessly as declaring it in libraryDependencies. For example, "sbt assembly", etc. work just as fine ?
I think he meant that instead of following deterministic rule (ie stop sign == stop), the car can take into account other factors, and make the actions with the best probability to not cause a disaster.

And keep in mind that the world in which self-driving cars are dominant is very and much different than the world we're living right now (as far as transportation are concern). Stop signs are meant to be read for human, car don't actually have to care about it. How about instead of stop sign at crossroad, we have some devices that can monitor the incoming traffic, and relay that information to the car? (I'd say that the car can even communicate with each other by themselves - but that approach has a host of other problems too).

Honestly, I'd say the main problem in a world of self-driving car are other human-driven cars: the self-driving car has no idea what the human would do, and the human has no idea what the automated car would do.
Bitstrips: Those Comic Strips on Facebook Explained
I suspect the difference between hacking the NSA website and hacking the NSA's central computer system is more than subtle
It's exciting for people. To them it's news, not a call for discussion.
Tor is the lazy man's attempt at anonymity. I wouldn't trust it since it receives the majority of its funding from the US Government, and that government is the reason many are looking for anonymity.

For better anonymity, ditch your cell (tracking device) and use open wifi networks, with a fresh MAC address each time (you can't necessarily trust routers at $Coffee_Shop to not identify who you are).
snorts derisively
8 characters, letters + numbers.
A Deeper Dive Into Yahoo and Facebook's Transparency Reports
In moving sshd to an alternate port, I've noticed two things: a greatly decreased amount of log noise from dictionary attacks, and a moderately increased amount of portscans.

It's reasonably clear to your average net malfeasant that any host running recognizable services is going to be running sshd.

So why not do both?

Put a dummy sshd on 22/tcp, deny all auth attempts, log whatever keeps you swimming in interesting data.

Then run real sshd elsewhere, possibly filtered, possibly port knocked, and hopefully permitting key-based auth only.
Analog memory desk
and I get this:

Invalid URL
The requested URL "/", is invalid.

Reference #9.c0b31bb8.1382761672.701091f
if the ship is under US flag, yes
ATM dispenses less cash to men
Yeah, you have to have 'Host: www.nsa.gov' in your request.

$ telnet 23.6.100.226 80

GET / HTTP/1.1

Host: www.nsa.gov

[press Enter twice]

Or you can add www.nsa.gov with that IP to your hosts file, if you reallllly need access to it.
> you're the guy (as a type) I went on tons of dates with before meeting my current boyfriend.

TONS OF DATES, you say?

So in other words, his strategy worked. Or were you a virgin until you met your boyfriend? Of course you were.

No, you dated/fucked a bunch of guys who wouldn't settle down with you, until you finally found a guy who would. A guy who was distinctly different than the other type, the A type.

It's incredible to me how you can type something like that and not realize what you're saying. I mean seriously. Completely oblivious.

Probably why women "lose the dating game."
Chinese University Defends Outspoken Teacher’s Firing
Sure, if you want commercial grade security. Given the current state of such things and tbe risks associated with the POTUS that would be only a half step above doing nothing at all.
Yupp. Relevant: http://www.surfrider.org/campaigns/entry/open-martins-beach
right www.nsa.gov is up, but nsa.gov is not.

How is that even possible? Shouldn't browser fill in www anyway?
Well, apparently with Zmap [1] you can do internet-wide scans in less than an hour from a single host, so I can't imagine they'd have that much trouble finding any open SSH ports on a smaller IP range.

So just changing the SSH port will do little, but enabling port knocking would help it stay hidden.

1. https://zmap.io/zmap-talk-sec13.pdf
Well I am optimistic on the political front as well. Since the 1920's Detroit City Council members were elected on a city wide ballot. Because that took more capital than shoe leather they became indebted to their backers.

Now Detroit has gone back to districts. While it is quite controversial how those district lines were drawn the nature of candidates is changing. You've got school teachers and small businessmen running and they're doing it by depending less on radio and TV advertising and more on going door to door. We won't know for several years whether it makes a difference but I am hopeful.

There is also a young professional class downtown that weren't there a few years ago and are making their influence known in the mayors race.
They try to warn you, but the warning message doesn't make any sense, unless you already know what it's trying to say.

"An item you recently removed from your Google Drive folder has been moved
to your trash on drive.google.com.

This item is just a link. If you empty your trash on
drive.google.com, this item will be permanently deleted."

See how the meaning of the phrase "this item" actually changes from one sentence to the next?

You can't actually write a decent warning message, because if you did, it would sound so ridiculous, you would never actually be able to live with it.

We noticed some files have been removed from your Google
Drive folder.

We can't tell the difference between you moving files
from your Google Drive folder to another folder on your
hard drive, and you simply deleting files from your
Google Drive folder.

We're going to guess that you performed a delete, and so
we've also moved the actual document, which is stored in
the cloud, to your Trash folder on drive.google.com.

If you actually moved files out of your Google Drive
folder to another folder on your hard drive, you might
think that file you have on your computer is a copy of
the source material. Alas, it is not.

Please understand that file you may have on your
computer right now is just a link to the item in the
cloud, which is currently sitting in the Trash. You
DO NOT actually have a copy of item itself on your hard
drive.

If you empty your trash in the cloud, you will be
permanently deleting the only copy in existence of this
item.

LOL...

Make it as as simple as possible, but no simpler.

Conflating hyperlinks with the actual content to the point where deleting the hyperlink causes the content to move to the trash is nonsensical.
Why? What does intent have to do with causation?
What makes you think the owner of the vehicle is liable for a crash caused by some third party driver?

Because they are? While there may be some variation by state, if we look at California law[1]: Every owner of a motor vehicle is liable and responsible for death or injury to person or property resulting from a negligent or wrongful act or omission in the operation of the motor vehicle, in the business of the owner or otherwise, by any person using or operating the same with the permission, express or implied, of the owner.

So if I lend you my car, and you crash it causing damage, then I am liable. Likewise, it seems to me, if I allow my self-driving car to drive home and it crashes into another car causing damage or injury, then I am liable. In general, the owners of things are liable for damages caused by those things.

The question of liability is not irrelevant, because insurance does not transfer liability it transfers a quantified, limited amount of risk. If I cause damage in excess of my insurance coverage, I am still liable for the damage and I'll have to make up the difference.

1. http://www.dmv.ca.gov/pubs/vctop/d09/vc17150.htm
Heh -- Yeah, typical tptacek form:

1. How does Palantir's technology which deeply enables the blackmailing surveillance state NOT have to do with politics.

2. You have a shitty sense of humor. Can't a friend say to another friend "You do X, you're dead to me"

3. You stated in a previous post where we deeply disagreed "But I'd still have a beer with you"

4. Your comments do begin to reinforce something I said to you previously which you took very deep offense to; I believe that you're being an apologist to the egregious security state that the NSA has made the USA become. To me, it is subtle but still apparent, I am pretty damn sure, through all our interactions here on HN, that you are incapable or purposefully reticent of seeing what a threat to the world the US intelligence apparatus is. I had said this previously, based on my opinion that this was due to the nature of your work/livelihood - and that at the time that was an assumption, but it is actually your direct comments that reinforce my position.

Stop trying to make NSA (and the surrounding technology/security companies) acceptance happen. Its not gunna happen.
I know it isn't a direct comparison, but could this be the modern, Internet-equivalent of "tragedy of the commons"?

Instead of degradation through overuse (as with real-world resources, but meaningless in the context of Internet resources), we have degradation without meaningful contribution.

https://en.wikipedia.org/wiki/Tragedy_of_the_commons