skysight-inc/HackerNews huggingface dataset:
The sudden rise of terribly programmed, horribly insecure marketplaces as hidden services since SR went down has been absolutely fascinating.
No, what was discussed was the NSA tapping in at ISP points, not digging up cables to splice them.

And "discussed" is not accurate. It was proposed by a few but rejected by most as paranoid.
> in production I would prefer that the error is handled and the user can continue to use the app.

Maybe that's ok if it's a game or something, but this is a dangerous strategy. How do you know it's ok to use the app if there's an error? You have to very carefully isolate and control where your errors can be, and I'm not sure this approach allows you to do that.
Prosthesis: A human controlled two-story racing robot
Two ways to do it are short stories or serialization. If you look into how Dickens and Arthur Conan Doyle wrote, they definitely had a feedback loop going.
Further down the article there are other examples:

The “sources of material” included many people the
Nazis sentenced to death for minor crimes, such as
looting, and many convicted for political crimes that
particularly incensed the regime, ranging from treason to
the vague offense of “defeatism.”

As an example of this, Elfriede Scholz was sentenced to death for “undermining morale” in 1943 for saying she thought the war was lost.
Sorry, but your libertarian utopia is never going to happen.
Google/Facebook pays a lot. Also, make sure to STATE the salary you want. Don't let them give you a salary number first. Welcome to the big league.
D 2.064 released
Anyone having "stuttering/flashing" problems in Firefox? Works great in Chrome.

EDIT: Stuttering on this page http://tympanus.net/Development/AnimatedCheckboxes/
Could be, but would they really dare to mock themselves in the honeypot? If it is a honeypot, it's very convincing and elaborate.
hmm, also in Windows 95.
Wait, isn't Crypto AG a Swiss company?

http://rense.com/politics2/crypto.htm is only one of many references to the fact that the USA had a backdoor into neutral Swiss encryption.
BMW expects good things from i3 program, has 100,000 reservation holders
Agreed wholeheartedly.

I'm lucky, it took literally one week for me to get on the program, and costs me $5 a day here in Australia. I have nothing but sympathy for those who aren't as lucky.

Thanks for the support :)
Feel ownership ? Do you mean that you receive shares immediately when you join?
The article is co-written by Fernando Henrique Cardoso, former president of Brazil.

I didn't like him when he was the president, but I do like very much his approach to legalize/decriminalize drugs... Kudos for them!
I think this would vary hugely by location (Europe will be different). In some places underage drinking is accepted by adults where drug use is not.
It was not acceptable in 1995, either.
Sometimes I want to use XQuery in the web console for pages that don't use XQuery. Does anybody know how to dynamically include XQuery on loaded pages to use with the web console?
Absolute advantage as work here.
>> some other colleagues had misused a forced push

> Git has a learning curve.

That sounds a bit like a euphemism for "is hard to use".

However, that's not what i'm getting at. The first pair of people misused a forced push because they're clowns. They are never going to learn to use any version control system properly, even if the learning curve was down a slide. If we disabled force push, they'd probably have reenabled it (they're sysadmins, so it would be hard to stop them).

The problem is that the second pair of developers, who are not clowns, but are also not Git power users, nor have any interest in becoming Git power users, got screwed by the first pair's mistake, and could only have got out of it by using an obscure feature known only to Git power users.
ng-attr is very nice
Us old timers remember them as "Andersen Consulting", the folks that got paid by our C-levels to drive the company into the ground...
Sure :) I love Seth and his talks and thought of having him on the first page. Can change it later. Thanks for that tip, any opinion about the app?
I don't know. But I've certainly met many smart people who are great story tellers.
Scaling Mobile Development at Twitter [video]
Ask HN: Interest in self-hosted secure messaging system with iOS/Android apps?
I want to gauge the interest in a new open-source project for a self-hosted secure mobile messaging platform. The emphasis of this project is making it very easy to deploy (e.g. 1-click deployment onto EC2 micro-instance) and use with your network of friends.

High-level functionality

- Messages encrypted on client and sent via HTTPS to server.
- Messages deleted from server as soon as recipient receives message.
- Mechanism of locally sharing a private key between devices (e.g. Bump like functionality if you want to get fancy)
- Clients receive delivery and read confirmation (and possibly see when other person is typing)

End-product

- iOS / Android apps available in respective app stores
- Backend available on AWS Marketplace for 1-click deployment
- Source code for mobile apps / backend available with instructions on how to build / deploy

Implementation

- Focus on simplicity that’s easy for others to audit
- Backend in Python or PHP and MySQL
The Twitter IPO explained
Man Dies In Jail Cell After Misdemeanor Pot Offense
I do not understand why a custom domain with a custom SSL certificate was necessary. Why not serve SSL off of the Cloudfront domain at normal cost?
:)

I meant ownership in terms of features / products. The money becomes a non-issue after a point.

To answer your specific question: Yes. You do receive shares / sign-on bonuses and these amount to be very big. But they usually have a vesting period though.
The things I really like about ansible compared to shell scripts is:

- jinja2 templating for config files
- roles & tags
- many error-cases already thought of and coded around.
Apology not needed for promotion; I'm biased, but I think far too much emphasis is put on services that encourage needless reliance on constant connectivity and third parties' servers. Offering an alternative is welcome.

As for local storage, even on smaller capacity devices, there's a whole lot that can be kept - why, for instance, does a todo list, addressbook, appointment manager, workout tracker, etc, etc, need to connect to a remote server for it's very basest of functions? Sure, backup, synchronization, sharing, etc need connectivity, but those aren't (IMHO, shouldn't be) the main focus of these apps.
That's always a risk with servers. They can die and everything can do with them. But they had backups so they didn't lose everything.
I would say, that's exactly what you want from your honeypot.

What I don't really know, I guess, are the legal implications of entraping people on such a mass scale.

I'm also not sure about the usefulness of such a honeypot, since you can't actually track the buyers. Just because someone pays you to send drugs to some address, doesn't mean it's their own address
I wasn't trying to capture every aspect of YC. The article wasn't about diminishing YC. Just trying to keep things positive and help people keep building. :)
Google, and their "geniuses" in opsec, should not be given a pass at all for this.

Even if this is a leased private line, non-Internet routed, whatever, it is trivially easy to encrypt the communications and is absolutely a best practice. I see this as great big egg on their face.

In fact, it's such a cock-up that one wonders if this is the plausibly deniable ingress that they agreed to provide for the NSA, et. al

This is akin to using telnet to access your home server because you're "on your own network". Nobody does that and I can't believe they would have either.
After signing up and receiving the confirmation email there is a slight issue with picking a password.

1. Click the link in the email

2. The webpage opens up with a password input field and a confirm password input field in a small popup

3. After starting to type the password in the input field the popup vanishes thus not allowing me to actually save the password.

Same issue when requesting a password reset (safari on mac os mavericks and on ios 7.0.3).
This is why my opinion is that the TLA policies and limits should be set by Congress in open debate. While their work may be secret, the limits and approach to the work should be set by the representatives of the people, publicly.
That's way more compensation than I would have expected. AWS usually won't even notify you until after the node has gone down.

Hardware failures happen; an application needs to be tolerant of it.
Spolsky did write for years about how he only hired devs who (very rough paraphrasing from memory):

- were geniuses
- top of class
- CS only
- Ivy League
- could recall the ins and outs of pointer arithmetic
- Solve binary-recursive-whatcha-ma-callem puzzles in their sleep
- are rockstars
The whole article: http://www.gq.com/life/fitness/201311/six-day-water-fast-die...
Ask HN: When is it a good time to "Show HN"?
I wanted to post a couple times but as I am still fixing and improving things and never thought that I am ready to post it yet.
What happens to people in USA with similar situation (employer-provided insurance ends, life sustaining healthcare is needed, no income to pay for that) who don't get a successful fundraiser?

Bankruptcy due to unpaid medical bills? Withheld treatment because of non-payment, possibly causing death? Both of these?

No offense, I'm simply curious on how the system works.
Show HN: Simple Tablet Compare Tool
gogotablet is a free and easy to use web application with one simple goal: helping you find the right tablet.
Isn't that why most insurance companies used to be mutual co-ops and only recently have become corporations? Essentially there are insurance companies that are exactly what you describe, people in a large group pooling their money.
The blogger has an iPhone 4. We are making quick improvements in mobile CPU technology. It's actually surprising and impressive:

http://www.imore.com/sites/imore.com/files/styles/large/publ...

I've had the iPhone 1, 3Gs, and 5. Three years probably is a good amount time to wait between purchases to see a big improvement. The only problem is that since the phones are subsidized and we're paying for them in our data plans, AT&T is making more profit off of you after 2 years.
So if you were backing up your data to Tarsnap, then you'd be up and running as quickly as you could launch a new instance and redownload everything. And $500 credit is enough to power a micro droplet for 100 months, or a small droplet for 50 months. DO handled this well.

http://www.tarsnap.com

EDIT: s/years/months/g. Thanks.
Good thing you had backups.

With that being said, these days it's a good idea to use a deployment tool or configuration management system like puppet/salt/ansible/chef/etc, especially in a virtualized environment. This will help with scalability as well as situations such as these.
For what I can see, Invoke is just a revamped version of Fabric’s task running components.
Fabric 2.0 will "leverage Invoke for task running, leaving Fabric itself much more library oriented".
> So far I haven't seen any evidences that there was cable splicing. Thus using occam's razor I would assume that the hack was much simpler than that.

What? The evidence totally points to cable splicing. What hack involves getting all the inter-DC packets but nothing else? Obviously the machines weren't compromised, or they wouldn't have cared about reverse-engineering the wire protocol. So what are you proposing was hacked?

> I'll re-iterate that security should be built on defense-in-depth principle. Every single protection layer will fail or someone will go around it. The assumption that a data center is "safe" is a bad assumption period. You have to play "what-if" game and think for the attacker.

And I'll re-iterate that you're asking for a goddamn magical pony.

Side note, if your data center isn't safe go get a new one. Seriously. Most DCs have tons of security to make them safe. That's not an assumption.
> Boolean can't have default.

I don't see the problem.
Here is how Google will take over Facebook.
Only one third of Samsung's smartphone sales are in the class of Apple's iPhone
I'm not an expert, so take these with a grain of salt.

There are plenty of spots on Earth with unusual weather patterns (not to mention extremophiles). I'm not sure what sorts of weather changes a gas giant moon would see but I'd imagine they're surmountable via evolution.

Titan has a nice atmosphere, so it's possible for a gas giant moon to retain one. Gravitational force diminishes pretty quickly with distance, so if a moon's a reasonable distance from the giant it'll likely be fine there.

Tidal forces give Io troubles, but the other moons of Jupiter seem to be fairly stable geologically.
It's great you had backups, but why a write-up. Is it an attempt to smear DO's otherwise good name? It's an un-managed VPS so it's your responsibility to keep backups of your box, not theirs. And hardware fails all the time, so you can expect this to happen anywhere.
You mean months.
Ask HN: What's the best music service available.
I've been dancing around various music online music services (Spotify, Rdio, Google Music, Grooveshark, Deezer,etc) but I haven't found yet something that fulfills my needs. Google music need to be always on and doesn't have a desktop client. Spotify doesn't have a nice view for albums and it's "hard" to upload my own music. Rdio mobile client is painfully slow.

So, how do you manage your music? what service do you use and why?
You could probably build a coalition in favour of replacing any number of individual policies of "the war on drugs" with "better" policies. It's much, much harder to build one to broadly legalise drugs.

The two problems are that drugs are much too ingrained in society as something incredibly dangerous and that sound-byte politics don't lend itself well to the distinction of wanting an activity to be not prohibited without actually endorsing the activity itself.
We're looking into it. Thanks for the heads up
This is the biggest current driver towards me trying to muster the effort to move off of PHP. Also, I had no end of trouble working with filenames that contained UTF-8 characters using PHP, and had to give up in the end.
I respect that you have that opinion, even though I disagree with it personally.

The big question to me, is what causes more harm: drug use, or the criminals that it funds? I'd wager the latter; drug use can be dealt with as a medical problem (I'm living proof) to some extent, murderous cartels, warlords, and corruption around the world can't be.

Something to think about anyway!
WAT the WTF do programmers use as debug strings?
The opening thread is debating whether open standards cause backwards compatibility or not, the difficulty one may have opening a wordperfect file, and the design aesthetics of using HMTL tables.
India would have the talent and the headcount to be anything it wanted to be, if it were not for the one missing ingredient: the ability to leave people's freedom alone. Many of factories in China would now be in India. Larry Page is in the market for another location. Mark Zuckerberg undoubtedly too. If India painstakingly managed to develop the ability to rein in their paperwork kingdom, the so-called "license Raj", Silicon Valley would have moved there a long time ago already. Until now, India just can't. It is simply impossible to reduce the incessant harassments of their bureaucracy. They will terrorize everybody. At the same time nobody else will ever agree to put up with them and be terrorized. They will not move there. They will keep flying out the Indians instead.
You're a hacker, challenging the norms of what it means to start and grow a business. If software is eating the world, it's surely eating the capital requirements to starting software companies.
I don't believe a GPS-only configuration is possible even today.

Are you referring to iPhone? I'm fairly certain that's a software limitation, as I know of non-iPhone smartphones that can easily enable GPS alone (no cell, no BT, no WiFi, etc).
Well a little feedback. I won't sign up to the site just to check soccer scores. Maybe is just me but there're a lot of sites that will give you scores and minute-by-minute analisis of a game.
Given that physicians average about US$225k, I'd say that this information is suspect.
"The assumption isn't bad - it's a private network line, not a public internet connection. Nobody else had access to that line, at least they weren't supposed to."

You don't use telnet when you access your home server(s) from your laptop ... that's basically what they were doing.

They skipped over a zero-cost, obvious best practice, and I think we should be suspicious. Either they've run that part of their network in a stunningly negligent fashion ... or this was the ingress they gave to the NSA which could be plausibly denied later.
"we had backups".

Do you mean you had backups on digital ocean (using their backup service) or something else?
Feinstein is a villain. Time to get her out of office.
pretty sure its a honeypot.
The kid seems very bright. I hope he just gets a slap on the wrist and nothing more.
I could write pages about managing CDNs, but unfortunately have to run. As an abbreviated version, Malwarebytes (company I work for) balances several CDNs around the globe to try to get the best performance possible (as well as to deal with some security issues inherent to hosting an antimalware tool). We have relationships with quite a few (not all of those relationships positive).

In my opinion this article skipped two of the best CDN's around, Edgecast and Highwinds. Edgecast in particular is damn fast (ssd boxes, high ram, most stuff served from memory). We're running multiple SSL'd domains through them without issue. Highwinds is more of an up and comer, but they have amazing service (as long as you avoid using them in South America).

The reason I avoid Cloudfront (AWS) is that it's way to expensive. I avoid CloudFlare because of the interactions I've had with their security team and CEO.

MaxCDN is good as long as you have no plans to go global. Let me be very explicit about this- if your CDN doesn't have a POP in Australia then they're not ready for prime time. There are only a few fiber lines going into the country and performance is absolute crap if you aren't hosting your files there. They also have nothing in South America, the MidEast or Africa.

As a seperate note, most DNS management companies will offer DNS based "CDN Managers", which will allow you to set priority rules for each CDN by region. This is an amazing tool that allows you to really take control of your traffic. I've never seen a CDN that was perfect everywhere, and when you have to deal with things like China (who don't really allow external CDN's in, forcing you to use one of theirs or host traffic out of Hong Kong) it's a life saver. I know that Edgecast, Dyn and UltraDNS offer these types of services (with the Edgecast one being the cheapest by far).
Right but that has no bearing on if the concept of insurance is a scam or not. Sure, health insurance in this country is tied to a job due to WW2 wage controls but that doesn't invalidate the entire concept of insurance.
Hutt works exclusively (for now) with Chrome.

Useless crap. There's dozens of other WebRTC apps out now that support all WebRTC browsers and interop. Why should I use a clearly inferior one?
Trevolta Reached Over 105 000 Sign-ups From 221 Countries in 24 Hours
"But really, how much money do you need? Is money going to make you happy? How many meals can you eat in a day? How many cars can you drive?"

House and decent education for kids is a major expense.
Thanks! Those are really good resources. :)
Considering that everyone is a solipsist these days, that's an interesting problem but it's not a philosophical problem. If someone else is a solipsist I know from experience that they're wrong, and I'm not a solipsist.
The goal was just to sniff the wifi APs MAC to pair it with a GPS location for wifi location lookups, not to store the entirety of the packet.
The system works for the top players, but I think once you move below the elite rank the rankings aren't really accurate. I think the system is arbitrary for a few reasons:

1) The number of points awarded for tournament performance seems pretty arbitrary. For instance, winning a grand slam results in 2000 points, while coming in second is worth 1200 points and coming in third/fourth is worth 720 points [1]. Is coming in second really only 60% as good as coming in first? It's hard to believe there's some deep, evidence-based rationale behind picking these precise values.

2) The tournament hierarchy is also arbitrary. A win at a Grand Slam is worth 2000 points, while winning gold in the Olympics is worth 750 points [1]. Why? Shouldn't the points awarded be based purely on the strength of your competition?

There are other issues, such as rewarding someone who plays a ton of tournaments with mediocre performances, versus someone who plays less often but with better results (though this is somewhat offset with the difference in points awarded based on performance). I've had friends complain about similar systems in video games-- apparently in Halo the top rung of players is full of mediocre players who play a lot, racking up points in the process and moving up the ranks.

Since tennis doesn't have a concept of "World Champion," I think the sport would be better served to switch to the Elo system like chess. It provides an accurate comparison of relative player strengths, it does a decent job dealing with the plays a lot vs. better results problem, and it functions exactly the same regardless of the tournament you play in-- you only get more points if you perform better or play stronger opponents. Another interesting tidbit is that it gives you a statistical probability of any player beating any other, which isn't possible under the ATP system.

[1] https://en.wikipedia.org/wiki/ATP_ranking

Edit: One other problem with ATP points--since most tennis tournaments are knockout (as opposed to swiss pairings used in chess tournaments [2]) the only thing you know for sure is that the winner as the best player in the tournament, assuming tennis results are transitive (a big assumption). But if you're unlucky enough to be in the knockout branch that features the best player, you could be knocked out earlier than your would otherwise merit, which means you could get far less points than you deserve.

[2] https://en.wikipedia.org/wiki/Swiss_pairings
I like how he rode in a friend's care.
Skype close-source "alternative"? No, thanks!
> If it is a honeypot, it's very convincing and elaborate.

There is no other way to run a honeypot. Reminder that the feds ran the two largest carding forums on the web:

http://en.wikipedia.org/wiki/DarkMarket

They almost entirely destroyed English-language US-based carding forums in the process.
So this is a technical problem I am having right now that's preventing me from backing up a Postgres database completely (hope someone here can help).

I have a master Postgres database that is receiving a TON of transactions per second (I'm talking about thousand concurrent transactions). We tried running pg_dump on this database, but the DB is just too huge, and it took more than 4 days to completely dump out everything. Not only that but it impacted performance to the point where backing it up was just not feasible.

No problem.. just create a slave-DB and run pg_dump on that, right? We did just that, but the problem is that you can't run long running queries on a hot standby (queries that take more than a minute).

What would you do in my scenario? With the hot standby, I technically am backing up my data, but I would have 100% piece of mind if I could daily backups in case someone accidentally ran a "DROP DATABASE X", which would also delete the hot standby/slave db as well.