skysight-inc/HackerNews huggingface dataset:
Example 2 shows soldiers following the rules of engagement at the time. They even radioed in to get an (admittedly cursory) O.K. to shoot the people. They did what they were told to do, and the U.S. military told them to shoot those people.
Is there any evidence there has been a breach of CircleCI directly, or just that MongoHQ suspended all access to their database(s) and so the service went down?

At this point it doesn't seem like they were 'hacked'[0], but simply involved in a larger security incident.

[EDIT] seems the linked page doesn't mention 'hacked' anywhere (literally - I searched for it!) Seems like the title[0] is a classic case of editorialising

[EDIT 2] As per below, would be very interested to see if their database being 'compromised' means that data was actually accessed by the attackers, or if they are just fall out from the bigger attack

[0] original submitted title was "CircleCI has been hacked"
"part of the support network either through willful ignorance or" this includes all Americans who pay taxes, vote for the government, etc. Ultimately everyone shares some blame but when we see someone who's more directly responsible than ourselves, we tend to blame them and forgive ourselves. As a non-America, I see Obama voters as responsible because he told them he would attack Pakistan with drones as part of his first election campaign.
moderate to vigorous intensity PA (MVPA)

Aka, Sport. Has to be one of the most reducilous acronyms ever,
That would seem to be the implication, assuming the people who hacked mongohq started trawling through circleCI's data.

If they have your keys then they can get at your code.

Talk about domino effect.
Did I say that? I didn't realize I made such a categorical statement! I thought I said that the market already takes the government into account, not that the government cannot be a reason for unemployment. The government certainly could be a reason for unemployment, but that doesn't mean it is always the reason for unemployment, nor does it mean that proper regulation necessarily leads to lowered employment.
hmm... That's an excellent idea for a RAID! :P

(by the way it is completely real. they eventually found the problem was caused by a manufacturing process)
most people were i came from associate italian lime to cleaning products, but i think it is mostly because it was so heavily used in such.

i love the taste but i cant drink anything with it. it is impossible after I've smelled it.
Interesting. I would argue that the 3rd generation iPad is the biggest jump, simply because of the Retina display. All good arguments.
U.S. to Hit Infosys With Record Immigration Fine
Reminds me of cumin. I always thought it smelled like really bad BO, and my wife thought I was crazy. This made me check, and it turns out lots of people agree!
My Macbook Air smells like pumpkin pie.
"cat urine" and "gum" should not be used in the same sentence. I'll leave that one out of my breathe freshener options.
haha yeah! But I am so confused with everything atm. How to proceed, team up, etc. Would appreciate any help :)
Is there any general sense of the techniques being used in these cracks? Just from a defensive coding perspective, I'd like to know if there are programming errors, weak links in frameworks, or what.
> Due to just the shear size, the iPad mini has always had half the ram as the regular sized iPad.

Might that not have also been due to the iPad mini having a non-Retina display? Or does system RAM not matter much for that?
I am contemplating whether MongoHQ should just post their customer list, so their customers' customers know what to expect?

I know that's not exactly proper but... at this point, the hackers are way ahead of the users of sites that happen to depend on MongoHQ.
No, it's pretty simple to figure out what to wear just looking out the window and seeing what the weather is...
I think it's more like MongoHQ is compromised and consequently, circleci is affected than 'circle has been hacked'.
Aha! To the people who said apple would have removed something like this if it was on their forums :P
Every waking minute and then some (slept 2 hrs per night several days this week). The trick is getting "high-impact" hours in. That's a scrappy basic solution that solves a time-consumic problem. The witty action that draws in a bunch of new users. The half-lucky-half-prepared encounter with the right person who can help with something. I try to find those "amplified" hours and celebrate on the inside every time I can get a normal week's worth of work in a day. It feels like you're cheating death.

The rest of the time I am fitting in the full-time days of 3 people in one 24 hour period. One is a student and two are tech and business founders of a startup that just took off with customers (trying to keep up the 10% growth daily while raising engagement rates).
Agreed. Especially unimpressive is the long delay between when they apparently discovered the cause and now, when they still haven't revealed it, even as the rep has stated for weeks that it'll be "any day now".

I also wasn't super impressed with the first few replies from lower level reps that kept suggesting blowing it out with compressed air even after it was clear that there was a larger problem.
> I also made a point to specify military targets in my comment for a reason.

Which is why the user above responded. US justification for these strikes is because they are deemed "military targets," and often the intel behind the strikes themselves is extremely tenuous. While on not the scale of WWII firebombing the terrorist aspects of it cannot be ignored.

Much US government documentation on their strikes speaks of the psychological aspects of those under a drone's strike zone. They cast a terrorized population in terms of being "less prone to supporting Alqaeda Top Man #85032" or other nonsense that only addresses the social impact in the narrowest terms to ensure victory can be declared in some way by the author.

In the end the population below still feels terrorized by the presence of "justice from above" with no due recourse. This is completely aside from what those in the US government wish to call it.
Oh boy, another MongoHQ casualty. I wonder where the fallout will end...
Python is the only programming language in LinkedIn's 2013 Most Demanded Skills.
I was at Palm/HP back when we did this on the Veer 4G smartphone... it only had a POGO-style magnetic connector on the side to support headphones, USB, and charging, but we shipped the phones with an adapter to allow using a 3.5mm-jack headset. We did it to make the phone as small as possible, but I don't think it was ever a well-loved decision.
That's a good point, I remember seeing an article on the impact Satoshi Dice has had on the blockchain. A shame really.
Surfers ride 100ft wave in Portugal
it is a waste of resources, my files are stored on the cloud and my dev env is a softlayer instance, so if my computer have a virus or someone steals it, I won't give a s..t
This could be for East Germany in the heyday of the Stasi; but sadly it's today's USA. SMH...
Unless those spectacles are an opthalmic frame, they're useless to me.
I would actually say the iPad to iPad 2 transition was a bigger jump, but maybe just because it's so easy to forget how much bigger and bulkier the original iPad was.

Are you trolling or are you simply a moron?

The dimensions and weight comparison table ( right smack on the first page [1] ) shows the iPad Air is a good 181 grams lighter than the previous version, the iPad 4.

The second generation iPad at 601 grams is only lighter by 79 grams over the first generation, which stood at 680 grams.

[1] http://i.imgur.com/J0XIVAX.jpg
I'm glad someone posted my immediate thought.
What do you think is so special about Python that it appeared four times in the list of 100 "most sought-after employers in the World", as LinkedIn put it, as one of the top three skills in demand?
And why do you suppose people decide to stand in line without anyone actually forcing them to do so? It must be because they know that if a couple of them decide to break the line and go ahead of everyone else, then everyone else would do the same, this would create chaos and no one's gonna get anywhere.

With so called social contract everything falls apart rather fast when you remove force from the picture. How many people, do you think, would keep paying taxes if they knew no IRS agent is ever going to show up on their doorstep?

You see, you confuse what's really a universal behavior and codes with something that's imposed upon us by a threat of force. No one forces people to use Bitcoin or Gold. But people are forced to use USD. No one us forced to donate to charities, but people are forced to pay taxes. Every time you look at something that you think is a product of society, please ask yourself: would this thing exist if no central force, like government, was applied? For instance, would property exist if no government was enforcing it? Some would say no, but of course it's not true, since territorial behavior is present even in animals.
If you read MongoHQ's extremely detailed report[0], you'll see that the original intrusion was based on shared credentials (that were cracked on another system). This was then exploited in a number of ways to compromise various clients of MongoHQ.

Lots more discussion over at [1].

The main takeaway is to take security seriously, and employ multiple levels of security. The MongoHQ team are doing things like 2 factor auth, and restricting customer service tools to a vpn. As far as I can see, no framework or coding bugs.

[0] http://security.mongohq.com/notice

[1] https://news.ycombinator.com/item?id=6637426
So what you are saying is wire scams will be even easier to pull! ;)
How, or where, does one learn how to implement a secure application (say, nginx + uwsgi + python + mongodb)?

This is a serious question - the best that I'm aware of are blog posts, but every time someone writes a post about security, HN comments (et al) give contradictory advice.
thats good...
Gardening, Housework May Help Boost Your Heart Health
Our stuff, well non test/develop, is gpg'd in the repo. So should be fine.

Guess: this + mongohq was a targeted attack, aimed at a single customer of theirs?
You think this was a casualty, or the whole reason?
Anand mentions it in this article.
Took note of the "wish I could..." moments in my life. Compared notes with others to see if they shared my wishes. Put together scrappy solutions to see what problems I'd be willing to really tackle vs tinker with.
I don't see this 'larger implication'. Where is this objective moral scale I can look at? The one that'll tell me that I'm more moral than you, or you're more moral than me? I don't claim I'm more moral than you, I do claim we have differing morality. My morals tell me that it is okay to 'initiate force' in certain circumstances, the fact that your morals tell you the opposite has no bearings on me nor on any objective scale of morals you could point to. You've taken a principle and put it on some sort of pedestal which allows you to point to it and say: if you violate that, you're immoral. I can do the same with any given principle and neither of us comes out on top morally, nor will we ever. The unfortunate thing about your principle is that it is weak from a force perspective: in order for you to stay true to your morals, you cannot initiate force, in order for me to stay true to my morals, I can do so and I can enable the government to do so as well.
The reason those TRS/TRRS connectors have been around for so long is that they flippin' work.

While I agree that a MagSafe-style equivalent would be nice, it will be a giant step backward if we end up with a gazillion new "standards." Or a de facto standard with a poor mechanical connector (e.g., micro USB). Or a great mechanical connector that's completely proprietary (Lightning).

Bluetooth headsets are not really a solution for the reasons mentioned in the article. Even with voice codecs there's lossy recompression going on, and music is worse. Add the delightful user experience of batteries, and you've managed to replace a light, decent-sounding, completely-reliable $15 set of earbuds with something heavier, lower-fidelity, always in need of charging, and more expensive. All for the sake of removing a wire.
It doesn't. That's the point.
I don't mind these "paid" reviewers; but Amazon should clearly indicate whether the reviewer is (a) a buyer who bought the product, or (b) a reviewer who was given the product to review, or (c) some random dude. I think they do tag reviews as "verified buyer" or something like that; it's the other two that need to be tagged.
Apple’s $171 billion 2013: Amazing … and amazingly forgettable
Introducing SAMOA, an open source platform for mining big data streams
How can you pass judgement on anything you haven't experienced yourself?
@srean,

There's no such thing as Hindu extremism or Hindu terrorism. It's just a reaction to atrocious Islamic terrorism activities that happened/happening in India. The increase of jihadi extremists and sleeper cells in India are what that terrifies Indians.
I agree that as an American who voted for those in power that I am partially responsible and would be a fair target. Living in a democracy means accepting that collectively we have chosen someone to make decisions on our behalf and even if we disagree we have chosen to operate under a set of rules that govern how we disagree and how we change things (election, etc.)
So maybe they should support LaTeX directly?
I actually like that you can create apps from this for windows, mac and other OS
Yeah, that line confused me too. I've actually never heard anyone make the claim that people cooperate with the United States because our ideals are attractive.

I've heard that immigrants immigrate here because of that, and I've heard patriotism justified by this, and I've heard that our culture is seductive, but I've never heard that governments find our ideals attractive or anything remotely like it.
Taxi Wars: How Govt Tries to Kill Innovative Ride Services Customers Want
And yet companies do take a lot of care when it comes to design and usability. This tells me that if customers were to be more aware and security conscious, everything would fall into place. Startups would cut corners there no more than they do with usability. Right now there's a perverse incentive, if they do the right thing, they fall behind the competition. But if the competition has to do it, it's not a problem.
"85,66% guaranteed uptime (we need some sleep, too)"
lol!!!
Every single survey done on employee satisfaction shows salary coming much further down the scale than other factors, like engaging work, good management, leadership, a feeling of contribution, training and growth, etc.
The best, easiest, most profitable way of reducing turnover is to improve their management and leadership. Once you've reduced turnover the benefits of good training far exceed the costs and you get less turnover and more productive staff as a result. Then you can give them a raise so they appreciate the benefits of being more productive.
Your first source speaks of "verbal aggression", you cannot take that as a proof for 1200 physical aggressions.

"L’organisme (SOS homophobie) a reçu trois fois plus d’appels et de mails entre le 1er janvier et la fin mars. (1 200 personnes sur trois mois, contre 1 556 sur l'ensemble de l'année 2011)."
"Ces chiffres sont un indicateur important car ils permettent de mesurer la libération de la parole homophobe."
Chromium decides not to add MathML support
ps: this caused me to rear-end a taxi. only going at about 2km/hr so no damage. I'm in Thailand so paid the driver about $20 and off he went.
Was Gliese the one where the aliens from the Battleship movie came from? I think I read somewhere some scientist picked it for the movie.
They do say if someone got it through vine.
It's interesting that, according to the Amazon spokeswoman, items with negative reviews sell better than items with no reviews.
It depends on the simplicity of the password...

I mean yeah if the password was 'letme1n' that's one thing. Whereas if it's a "at least 16 characters, mixed cased, punctuation and no english words"; maybe that's another.

But, I would have thought at the very least, ssh with keys-only on the external-facing bastion host.
Well they also used Buffer's data for spamming, so it's hard to say whether one or the other was targeted or opportunistically attacked.

CircleCI is certainly the more interesting target as they have access to numerous companies' source code.
That could be irresponsible as a company which uses MongoDB for non-sensitive data (say data in publicly available pages) would be shamed when they didn't have a data breach of sensitive data. Or worse, a company that has signed-up but only played around with MongoHQ without using it in production. Each company should announce its own breach (and the scope of the data exploited) to its customers.
>We are contacting you to inform you of an ongoing security incident affecting CircleCI customers, as a result of the compromise of our database (http://security.mongohq.com/notice).

Seems like a 'security incident' is code for 'hacked'.
This appears to render to an image, which has the problems I mentioned. MathJax renders to HTML.
terrorists do not have a good kill death ratio
You were probably kidding :-) But: from the screenshot in TFA, they require you to provide biometric identification and then they appear to apply a $1001 per day usage limit to this identity, and this is specifically in place to comply with AML regulations.
(not speaking on behalf of anyone than me)

That would be a Chrome-specific non-standard feature. If JavaScript implementation of TeX is too slow, a Chrome-specific solution would be NaCl/PNaCl.

But I really recommend to evaluate how to generate high-performance javascript code (like with Emscripten) and have it working fast enough.
I think I agree with you, however there is a big difference between having your service stopped as a precaution and having data lost/accessed by a 3rd party.

From that line it does seem more likely that they might be one of MongoHQ's clients who MongoHQ noticed had had their data accessed as part of the bigger breach.

In that context, saying they have been hacked is probably fair. Would love more details.
I don't think the government intentionally target civilians, but I do think they don't care if they target civilians unless it causes a too big PR problem.

And I don't think they've cared much since at least the firebombing of Japan and Germany towards the end of WWII, when it became blatantly clear that they could get away with indiscriminately killing hundreds of thousands of civilians without consequences at home.
Does there is a secure enough Hash function for Gravatar usage?
I don't see any incongruity. Google paid $12.5 billion for Motorola a few years ago.

Considering RIM's market cap was $83 billion at one point, paying ~$4-5 billion now would probably be a bargain for their patent portfolio.
I understand all the implications you mention, and that's why I phrased it the way I did.

Though, the assumption I'm making right now is that the hackers know exactly what sites they've compromised. The longer they have this information in advance of MongoHQ's customers' customers, they more damage they can do. That sucks terribly for those people (potentially)

All this said, a serious lesson about PaaS/SaaS/DBaaS--whatever you want to call it--has been learned today.

[edit] - I'm reminded here of the Epsilon breach. Epsilon is magnitudes larger than MongoHQ and they apparently did decide to announce the names of affected companies. I am not sure how they handled that internally. [1]

[1] - http://mashable.com/2011/04/03/epsilon-hacked/
Why are you creating your own instead of adding to FontAwesome?

http://fortawesome.github.io/Font-Awesome/icons/
I'm in favor. Most 3.5" jacks are horribly made. Only the 1/4" jack ever worked well.

I desperately want us to ditch RJ45 for something as compact as Apple's lightning connector but is an open standard and easy to make (i.e. uses a crimping tool)
I got the tradeoff part when you mentioned it the first time - it's just that I am saying more RAM is worth the tradeoff of whatever unknown amount of possibly minuscule loss of battery life. And I don't say this without a reason - several times a day I get annoyed by background audio / airplay getting killed and my browser tabs getting reloaded. So it's not without a valid reason.

Anyway - I think at the very least Apple could shove off power consumption elsewhere in the next round of updates and give us more RAM if that's what it takes.
Before all the chrome and Google bashing starts...

The point is why do we need something specific for math. Would people be OK with a musicml? Or say chemicalml? And that's a good question. Why is math so special? Let's try to solve the problem more generically instead of adding specialized domains in the browser.
Ask HN - An App That Does Your Homework???
Has something like this been created? Would people be interested?
Especially not with companies like Samsung deliberately rigging benchmark tests.
Many people find the smell of durians equally repugnant... and you can buy durian flavored gum.
Makes sense. A negative review implies that the product was delivered. No reviews calls into question the legitimacy of the seller.
That approach makes sense for technologies outside of the scope of the HTML5 spec, but for a core element like <math> it seems rather silly to propose external implementation using custom elements (and therefore requiring Javascript availability, which shouldn't be taken for granted).
The perceived 'bulkiness' is more than just weight. Drawing from your own link, the original iPad is 13.4 mm thich, the iPad 2 is 8.8 mm.

If I remember right the original iPad 1 had no front camera (or was it no cameras at all?).

To me that's a huge upgrade.
My guess is that Dell laptops have incorrectly vulcanized rubber. During vulcanization, sulfur compounds are added to rubber to make it more elastic. Cat urine also contains a high amount of sulfur compounds. If Dell's suppliers got the vulcanization process wrong, sulfur could be leeching out of the laptop's rubber components.
And an even bigger lesson to make sure you have strong permissions which can be quickly revoked.
And some software has almost an order of magnitude more vulnerabilities while simultaneously being unnecessary for most folks.

Oracle has been issuing ~50 per quarter recently, an incredibly long time to wait for critical fixes. In security, less is more. Now that Windows has become safer, the big targets are Java and Flash. It continues to be good practice to avoid standing behind big targets.
Chill music with some dissonance and resolution but no or non-distracting lyrics. The dissonance somehow gets my brain to think on a deeper level and the chill/sad sounds keep me focused and calm so I can keep my ars down on the chair for 16 hours at a time. Lately:

- Oblivion credits song

- Massive Attack - Teardrop

- Royksopp - What else is there?

My biggest pitfall I have when coding is that I get into victory-dance mode when I get something new working and it distracts me to the point where I get less done. By running a slightly sad music library I can stay grounded in good times and intrigued in bad.
New Material for Quantum Computing Discovered out of the Blue
Something's gotta give - after sticking to 1GB on 4 generations users would hardly complain about the newer one having more RAM - that's just technological progress. Macs no longer have 2GB RAM for example. Secondly developers would be stupid to use more RAM just because they can - if their app only runs on the latest iPad, I'd say that would be a big issue.