skysight-inc/HackerNews huggingface dataset:
Bitcoin Spear Phishing the greedy
Spear-phishermen are aiming for your wallet. At first glance, it may look like you could score someone else's wallet because some noob sent the wrong person this message. All you have to do is download his wallet and, BAM, you can transfer his coins to your wallet. Not so fast... You would be giving out an IP more likely to have a wallet of it's own, and the goo.gl would download a zip archive, which I suspect if you opened it would be some sort of malware to hack your system for it's coins.

As you may notice, I changed identifying details.

"""
Hello YYYYYY…

I just did what you advised me to do but the problem remains the same : importing the private key is not working…. drives me nuts!
Last time I checked blockchain.info ( https://blockchain.info/address/XXXXXXXXXXXXXXXX ) there was still XX.XXXXXXXXX BTC ! But no way my bitcoinqt client loads the key so I am stuck with those BTCs.

Thanks for offering your help with this. Here is my wallet.dat with the password http://goo.gl/XXXXX. If you need anything else let me know.
If you can load the key please send the BTCs to VFVFFVFVFVFVFVFVFVFVFVFVFVFVF

This would help me so much. Thanks YYYYYY!

ZZZZZZ"""

The href of that blockchain.info pointed to a different url http://campaignbird.com/click/BNBNBNBNBNBNB
and the goo.gl resolves to a zip file at a .nl domain.
McAfee is rebranding as ‘Intel Security’ & will offer some free products
me too. i guess we can start over: https://news.ycombinator.com/item?id=7015502
As people mentioned this site is an exception to how to do things, in that PG actively does not care about search engine results. However, for the people who are interested, here's a few ways you can handle a situation like this.

1. If you add the "max-stale" header to your content you can tell your CDN to hold on to things longer in the event of an outage. What happens is that the CDN will look at the cache time you set and check in as normal when that expires, but if it gets back no response or a 503 code (server maintenance status code- if you work with CDNs this is your friend!) it will continue serving the stale content for as long as you tell it.

2. Lets say you're beyond that, or your site is too dynamic. Instead of setting up an error page that responds to everything, setup a redirect with the 302 status code (so crawlers and browsers know it's a temporary thing). Point that redirect at an error page and you're golden. The best part is these types of requests use minimal resources.

What I do is keep a "maintenance" host up at all times that responds to a few domains. It responds to all requests with a redirect that points to an error page that issues the 503 maintenance code. Whenever there's an issue I just point things at that and stop caring while I deal with the problem. I've seen webservers go down for hours without people realizing anything was up, although with dynamic stuff everything is obviously limited. The other benefit to this system is that it makes planned maintenance a hell of a lot easier too.

Oh, another thought- you can use a service like Dyn (their enterprise DNS) or Edgecast to do "failover dns". Basically, if their monitoring systems notice an issue they just change your DNS records for you to point at that maintenance domain. You can also trigger it manually for planned things.
I give them a lot of credit for being transparent with their learning mistake, taking ownership, and describing what they did to fix it.
Eye-Fi did that a while ago: http://hackaday.com/2009/02/01/eye-fi-teardown/
I had the same feeling as well. Especially since I intuitively compare it to the only other e-ink technology I know: the Kindle.
> The past sucked. Wealth and technology has made it much, much better.

Yes, but "antibacterial hand soap in home bathrooms" isn't one of the ways that technology has made the world better than the past, except, perhaps, for people selling antibacterial hand soap.

Technology has made many positive changes to the world, but that doesn't mean that every use of technology is positive.
Should public libraries stock dangerous medical disinformation?
It's been resubmitted: https://news.ycombinator.com/item?id=7015502

(But I think the original thread was totally lost, I submitted it and it's not listed in my submission history.)
This is a bit silly. Anytime a (very active) social site goes down for a few minutes, people are interested in what happened, why, and what is being considered to prevent it going further.

There's no doubt that the whole time it was down, these questions were being asked -- both by PG and co. as well as the end users.

Not that we expect immediate and concrete answers, but it's certainly expected that the question will come up.

And it's pretty common for services to post a quick update stating the issue, cause, and postmortem at a high level, once service has been restored.

I know I try to do this every time my site goes down for even a couple minutes, let alone ~24 hours, and it has nowhere near the activity of HN.

Several HNers have the same question, thus the reason it is the top-voted new post.
I'll second Nagel & Newman. I read that in college and met a few times with a math prof to talk about it. What fun to work through the whole proof and see each piece build on the last!

Now, over 15 years later, I'm still telling myself to read GEB, but I always wonder how much point there is.

A very worthwhile book to read in parallel to N&N is Euclidean and Non-Euclidean Geometries, by Greenberg. It's more textbooky, but still short, and it will let you see how some of the same themes played out in geometry as well as arithmetic.
It is worth noting that today's launch was just barely more than one month after the last (December 3rd). They are getting pretty good at this.
Spot on.

I worked on three different startup ideas unsuccessfully before moving into an existing business. I learned a little in the unsuccessful startups but not a great deal - it's hard to learn when you don't have a great amount of traction / users etc.

When I moved into the existing business suddenly I learned how to sell, how to work with customers, how to position the brand etc.

I wish I'd sucked it up and taken a more junior role sooner - I think I would be further along by now.
Watch Michael Bay melt down onstage at CES
What happens when a GPS satellite fails? Or if you have an earthquake? Seems like precisely in those times of national need that one's most sophisticated technologies might be sorely out of commission. A seemingly pretty nice way to inflict 'collateral damage' on one's self. Especially if such a precautionary set of rules were put into more and more machines.
Well by the letter of the RFC browsers and middle boxes (all the invisible caching proxies out there at your ISP, etc) are only supposed to cache if the cache/expires headers are set for that, but 200 is a bad choice for most people running a site for the other reasons listed above like crawlers/indexers. 5xx is correct for a problem on the server, usually 500, 503 or 504 (http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html).

At the same time there are many erroneous implementations (intentional and unintentional) that, as you imply, just cache any 200 without checking cache headers. This is also a good practical reason to avoid doing this.
Moral.
Review my sci-fi novel about P vs. NP?
i've written a manuscript of a sci-fi novel that deals with, among other things, p vs np. think douglas adams mixed with neal stephenson, and a dash of joyce to make it delicious.

anyone with this link can read and comment. thanks!

https://docs.google.com/document/d/1A8XAyTh_zD74wUYH2OU2HbPVZ0P0MnpIxSihXRYZ-5s/edit?usp=sharing
Researchers warn of new, meaner ransomware with unbreakable crypto
That's a shame, I was really looking forward to the comments for the article below. Unfortunately I had it loaded, but hit Ctrl+R (like I sometimes do) and lost it forever. :/

The google cache got a few comments, but very few.

http://lucumr.pocoo.org/2014/1/5/unicode-in-2-and-3/

https://news.ycombinator.com/item?id=7015438

http://webcache.googleusercontent.com/search?q=cache:9368SwV...
You may jest, but I once suggested something like that: https://news.ycombinator.com/item?id=2403880
I was in 9th grade.
Luck? Planning? Karma? The Elements of a Small Town's High-Tech Success
Thousands of users are unhappy of Attack on Three BitTorrent Sites
Users have taken to Twitter to complain about their favorite BitTorrent trackers being down. For several days now, What.cd, PassthePopcorn.me and Broadcasthe.nethave been inaccessible following DDoS attacks.
Although all three sites – What.cd (music tracker), Broadcasthe.net (TV tracker) and PassthePopcorn.me (movie tracker) – can only be joined through an invite system, which means they have tens of thousands of active users, there are plenty of people complaining about the situation.
The trackers have responded to the messages, trying to calm the spirits a little bit, but that doesn’t seem to be working, especially since none have provided an estimated time when things will be fixed.
As previously mentioned, the reason that all three sites are down is a series of DDoS attacks. Although most such attacks usually stop after a few hours, this one has lasted through the weekend.
No one has taken responsibility for the attacks, so far, sources revealed.
The Internet of Things Is Wildly Insecure — And Often Unpatchable
Digging Into Knockout: The Build Process
Maybe this was a prior error message, but the original CloudFlare "Origin Server" error was returning a 520 - which is a CloudFlare-custom HTTP Status Code.

Edit: CloudFront -> CloudFlare
No, I actually read it as someone trying to get cheap points (or popularity) by being the first one to post it. I would have felt differently had the question been asked with tact, and I'm certain those with high Karma know that the question was unnecessary. It just felt over zealous.
Other options would be to return status code 503 Service Unavailable with a Retry-After header, or drop connections while the dead server is busy.

Both of those would be much better than returning 200 OK.
> pass through a million requests...

How does that make sense? As if CloudFlare would honor status codes but not take advantage of cache headers (which in this case stipulated an absurd 10 year expiration).
Yeah, the 200 response during the outage is playing with everyone, I think; you have to do a hard refresh on any URL you had visited during the downtime :/
I recommend doing some Googling and book spelunking through all the existing mass of stuff that exists from which one can learn web development. Adapt, apply, repeat. This is also a good strategy/pattern that can be learned for other topics/fields as well.
Databases? What databases?

HN is persisted to flat files.
This is awesome! There are lot's of things to learn from this code base...

In particular, I had not heard about http://brunch.io/ before and it looks like an interesting frontend build tool. The config file looks totally readable, even for a complex app like this: https://github.com/codecombat/codecombat/blob/master/brunch....

I can't seem to find ''app/assets/images/sprites'' in the git repo which I was interested in for an RPG project of mine. Were these not included to simply to keep the repo light, or are these not to be released?
Chrome Flags Breaking CSS In Strange Ways
There's a legitimate use for GPS spoofing.
Panasonic Teams Up With Mozilla For Firefox OS-Powered Smart TVs
DRBD and Gluster are not any more resilient to filesystem corruption than a RAID device is. In this kind of case you hope for either real-time replicated storage on a completely separate physical host or very recent backups.
Sounds pretty cool. You might want to look at MIT's winter term (one month) web programming competition/class for some inspiration: http://6.470.scripts.mit.edu/2014/.

They do a mixture of lectures, office hours, and guest speakers, and culminate with a final submission for prizes. Not everyone has to enter the competition and there is also a rookie flight and an experienced dev flight so everyone can participate. Gathering corporate/start-up sponsors to get prizes for a contest seems to be a good way to spur interest and motivate people to learn (at least it was for me).
I have been wanting to set up a similar program at another university. With 300+ students you have something good going. Your idea of organizing trips to hackathons is marvelous.

What language are you hoping to get them started on? Python? Scheme? I have been wanting to start with Scheme... but that is because I read PG's essay and got bitten by the bug.

Keeping the lecture time down to 45 minutes sounds wise. Students are already swamped with class hours so keeping the weekend time burden down is probably the right move.

Perhaps you could set up teams that could compete with each other through a series of programming challenges? You could find a local business who would sponsor a prize, or a restaurant that would offer a dinner for the winning team.

Be sure to post updates on your group's website. Other people, like myself, are wanting to do the same thing at other schools and would be encouraged to hear about your progress. Your website could also link to the students' work on Github once they are ready to step into their first real projects.

Your program sounds exciting! Keep us up to date.
So, this is web development in general, not specifically CS software engineering, or electrical engineering, right?

Some thoughts, mostly motivated by experience of both what I'd wish I'd known and also in mentoring at Rails Girls and similar community events:

~

Spend some time to explain how the modern web works. Go to "http://www.example.com" and talk about the series of requests that are made (socket, IP, DNS, HTTP server, these things). Pull up a debug console and show the traffic. Talk in broad strokes about page parsing, layout, whatever, but give a high-level idea of how all the pieces fit together. Do this first, so everything later kind of has a framework to fit into.

(This is similar to how you start with logic gates and build up to ALUs and eventually coomputers in good computer engineering/science curricula.)

~

Next, talk about stacks and gross areas of division, but keep it simple: this is the front-end (the browser), displaying a page and maybe running a script; this is the backend, the web server which decides what pages to send; this is the database, which stores data. It won't be helpful to go into more recent developments like single-page apps or Meteor or Websockets or whatever just yet.

~

Then, you can kind of split into two or three ways:

You can talk about server technologies, like PHP or Rails or Node or whatever, or just dumb file serving with Nginx or Apache or Sinatra or whatever the Python equivalent is these days.

You can talk about HTML/CSS, and talk about how we style HTML content and organize pages into divs. Show off a grid system, show floating, show the box model and padding and margins and all that stuff. Show basic form usage.

You can talk about client-side scripting, about attaching event listeners and using jQuery or vanilla JS to play with the DOM. Show off some simple code letting people mark stuff on a Google Map (API is well-documented and pretty easy to use and is tangible). Maybe let people play with something like Three.js or Kinetic.js.

~

Last, talk about things like using Github and SSH to log into a server. Talk about where to find help (man pages, Stack Overflow, lmgtfy, etc.) Basically, solve IT problems last if you can avoid it--learning how to sysadmin (even just for local development) is annoying and tedious, and will distract from the previous, more interesting and enjoyable topics.

~

Hope that helps.

EDIT:

Make sure that students are actually doing stuff for everything after the fundamentals lecture: write a static homepage, write a pong game, write a simple message board, etc.

Doing is learning here.
So this makes for ok PR, but when there is a global market for commodities this is all feel good bullshit. Sure the atoms that are in your CPU weren't mined in a warzone but does that absolve you of complicity in participating in a global economy that is going to source raw materials from anywhere it can regardless of the conditions?

Great command and control on the supply chain side but somehow I wonder what the data is on whether this actually makes any real impact on the conflicts in question beyond further reducing the capital flow to already incredibly impoverished regions.
Are we complaining about generics again?
VIA Partners with Mozilla to Develop Firefox OS, Offers Free APCs to Bug Fixers
I'm always missing phone calls and timely text messages because I don't feel my phone vibrating in my pocket.

Pebble solves that. Plus the white version is, as far as I'm concerned, a nicely stylish accessory too.

That justified the use, for me.
I agree that knowing what happened is a legit curiosity, I'm just calling the op out for being a point sniffer.
Frémont still matches "[rn]t", so the problem persists regardless of this spelling.
I might be missing a huge point here, but aren't very high precision, high end cnc machines virtually vital for the production of nuclear devices? If thats the level of machine we are talking about, I can well understand this.
GitHub Game Off II Winners
Toyota Bumps Up Hydrogen-Powered Car In US To 2015 (Update)
I would tell them to build a website with XYZ features. A very simple page. Tell them to use Google if they don't know how to do something.
I recently started using 'Gomap!!!' to edit locations near my home: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftw...

I was surprised at how easy and intuitive it is.
Setting up ownCloud on Mac OS Mountain Lion to use via SSH
Simple tweaks that increased our conversion rate
This seems incredibly brittle - just like software DRM that needs to phone home. What happens 15 years from now when they shut down their servers?
Why Living In Cities Sucks
Acausality and the Scientific Mind
Did you actually find the redesigned site? When I go to nytimes.com, it doesn't look any different than it has for quite a while. The nytimes.com/redesign link itself vaguely reminds me of the Mavericks announcement page that Apple had up before they actually released it.

In any case, nothing looks odd with kerning on Mac/Safari or Firefox.
Python 3.4 beta 2 released
SilkJS : A synchronous alternative to nodejs
I am not sure why Norvig omits president Obama. That said, "[mtg]a" does match him, so at least Munroe tries.
Tech Companies that only hire Men
So capitalization isn't something you do?
They're in the DB to keep the repository lean and mean. But they're also licensed under CC. You can find 'em here:

http://codecombat.com/editor/thang

They're in a custom JSON-vector format, and the app turns them into sprite sheets in the code.

Brunch is pretty awesome, by the way. We chose it because it only compiles the files that have changed, which is good because it takes at least 15 seconds to compile the whole app on a fast machine.
I'd probably structure it a lot like a bootcamp. Check out Flatiron, gSchool, or Dev Bootcamp's curriculum for some good ideas. To summarize, though, typically it's a few weeks of learning a high-level language (Python or Ruby). From there, it's typically a solid couple of months of learning the corresponding framework (Django or Rails). All the while, sprinkling in some JS and CSS magic.

They're usually able to churn out some pretty decent full-stack programmers after 3 months, or so (granted they meet a lot more frequently than 3 hours per week). You'll have to be super diligent about giving them assignments, but the nice thing is that there are so many resources around Ruby and Python... Codecademy, Treehouse, Rails for Zombies, etc.

Come back and let us know how it worked out!
How The Pirate Bay Plans to Beat Censorship For Good
To protect and infect - the militarization of the Internet
I have been using the Pebble for about a month. Being able to just glance at your wrist to check the notification is just so convenient. I don't have to take out my phone and then enter my password to check each and every notifications.

There are also a lot of interesting third party apps. The ones I like locks the phone and vibrates the Pebble if it the Pebble and phone are disconnected.
Momentary jubilation followed by 'blah'.

I saw the title and expected something like an alliance working on open source automobiles (e.g., http://wikispeed.org/the-car/).
You're missing the utility it provides if you use specific applications built for the watch.

I have built tennis and squash scoring apps.
I wear the watch day to day, however I get most value from the watch by keeping track of my racquet sport games from my wrist.
Not sure if you've played before but after a couple intensive rallies it is really easy to forget what the score was, or where the next serve needs to be from.

There are plenty of other custom applications people can use to assist them in day to day activities. Something my friend has mentioned is when riding his scooter, he can use google maps without looking at his phone because the notifications are pushed to his pebble...
only for emphasis. i've gotten a number of comments about that, so i may change it.
Sounds like a possible psychological issue. This might lead to a problem for society. We might want to get you some preventive treatment for that before you have a chance of harming someone. Do you think prison might work well here?
Ya, the Stossel Show on Fox re-aired at around the time of the spike and a Libertarian was telling a bunch of folks to get into Bitcoin. My hunch is this was more influential in getting ma & pop to invest in bitcoin given Fox's viewership.
Brunch is amazing. I was using Grunt in another project, but Brunch is so, so much faster to recompile changes, since it's very clever about caching.

Oh yeah, those sprites were in the repo as raster files, but we managed to move them all over to our awesome vector-graphics-in-the-database system just before launch. Check the DB dump to get a copy: https://github.com/codecombat/codecombat/wiki/Developer-envi...

(We did a ton of cleanup work before open sourcing, which managed to get our gzipped GitHub clone download from 203MB to 3.5MB.)

It might be hard to use these art assets in another game unless you take a lot of CodeCombat code on top of EaselJS to render the sprites directly from the vector graphics data, though, because of how they are stored: https://github.com/codecombat/codecombat/wiki/Surface#vector...

I could send you the old raster versions if you did want to use EaselJS for their animations but not go whole-hog with the CocoSprite solution.
Sysadmins of the world, unite
My main issue is that it's proper English. You don't start sentences or proper nouns with capitals... It's weird to me.
>On the back of the device there are four GbE ports

I really wish at least 8 LAN ports would become the standard rather than 4. The stock response is "LOL it's not a problem because WiFi." But I don't want a dozen devices contending for the WiFi of the router. I want most of my devices to be on wired connections with (ideally) the only WiFi devices being phones.

So far the only router that seems to feature 8 GbE ports --and has support for flashing OpenWRT or Tomato or whatever-- is one from Mikrotik under the "RouterBOARD" brand: http://routerboard.com/RB493G ; casing, power adapter, and antennae sold separately. Does anyone know of any other, better, options?

edit: wrong link. fixed.
Linksys brings back its hackable WRT router, adds dual-band 802.11ac WiFi