skysight-inc/HackerNews huggingface dataset:
Those parts are typically automated. Also even if you're a .net shop, you might have your stuff placed in front a linux/bsd based router which responds to certain requests (it does happen).

A pen tester can't know what infrastructure changes you've made, and should work from scratch each time, IMO. It might not have even been your company which made the change, hoster might have made change to the environment etc etc.

If it doesn't cost you any more to have them to try and scan /usr, ../../../../../../etc/passwd and so on, why not?

When I did pentests, we encountered a customer who, via a misconfigured puppet manifest, installed WordPress on a public facing server with a known-vulnerable plugin, which we found by always scanning /wp-admin/ even though the customer was a strictly RoR shop.
Communitarianism is definitely distinct from authoritarianism, for the same reason that regulated capitalism or socialist democracy isn't intrinsically "less free" than anarcho-libertarianism. Many people believe, on both the right and the left, that the imposition of rules on individuals by the community can lead to more actual freedom than a scenario in which individuals act without restrictions.

Now, whether American religious communities display more of the characteristics of communitarianism or authoritarianism is a matter of opinion.

> But to your point. Just because your religion provides you with a "personal relationship with God" (which I believe pretty much every single religion does by the way), doesn't mean you're not living in a restrictive framework of questionable ethics.

And my point is that American Christianity focuses on the person relationship with God, and not an authoritarian framework, while Islam in Islamic countries tends to focus on the authoritarian framework. American pastors by and large do not get in front of their congregations and say "do this and don't do this, otherwise you'll burn in hell." To most American Christians, that's not the function of religion in their lives. But in most Muslim countries, that is the function of religion. They don't eat pork because their Imam says not to. They wear headscarves because their Imam says to. The relationship with God is also important, but the regulatory framework derived from religious text as interpreted by religious authorities is also very important.

You're entitled to believe that the ethical framework of American Christianity is questionable, but that doesn't make it authoritarian. And you're welcome to believe that American Protestantism is a conservative throwback, but that doesn't make it authoritarian. Believe it or not, free thinking people can find their own way to conservative ideas, and free communities can impose conservative rules on their members because they feel it will enhance their collective prosperity, not just because some authority figure tells them to.

> I criticize the validity of a belief in imaginary magical beings, especially ones that spread fear, ignorance, and suffering as their believers impose this nonsense upon themselves and, more importantly, others.

You've moved the goalposts quite a bit, from asserting that American society is essentially authoritarian in the same way as Islamic society, to making a generic criticism of religion. Religion = bad, and America and Saudi Arabia, etc, have lots of religious people, and that's bad. Right? You're ignoring that the function and nature of religion between the two societies is very different.
I would never let a random stranger enter my house when no one is at home.

But DHL is trying an alternative in Germany at the moment: it's a box you buy from DHL and install on your property. DHL has a key so they can drop parcels in there and they will take returns with them. They send an SMS when they open it. You can even share a box with your neighbours. Of course the box has a limited size but for me that size would cover 95% of the parcels I receive.

See http://www.paketda.de/dhl/paketkasten.php (german)
That's not completely true.

If you're in an old Ameritech area in Ohio, pick up the phone, dial '0' and when the Operator comes on, say:

"OBT-125, please read number on display."

You'll get the NPA-NXX-XXXX read out to you and she'll tell you to have a good day. As of three years ago, you could call any of the embarq/sprint area operators in Ohio/Kentucky and just say, "ID Me."

Phone phreaking is still alive, but, it's not as common as it once was.
Leaving the house compromises my physical security.

Your comment is easy and throwaway and I think you probably already what I'm about to say but life is a balancing act between security and utility.

The web and history are littered with examples of things that a "hacker mentality" would have baulked at in theory. AirBnB, Facebook, Twitter, Foursquare, Uber. All of these things would have triggered the line "Identity/Physical security means nothing to you does it?". And yet, for many people, they are more than worth the risk involved.

We live in an age where it's accepted that perfect strangers should rent our house or drive our car and yet it seems odd that we should allow a liveried delivery man access to our house. How bizarre.
No, the sense of the comment is completely wrong-headed with respect to probability. The probability that a sequence occurred is 1. The probability that the 10-10-10.... sequence mentioned has occurred is indeed as close to zero as the 76 heads.
It's not just my distinction; it's a distinction made in courts too. The law is quite clear. Copyright infringement is not theft.

> And, from my perspective, something is actually lost, that cannot be replaced. The right of the IP creator to be repaid by the person who grabbed it.

Well, yes... Supposing that IP rights should exist!

Instead of getting dragged into a big long debate, I'll just give you two sources. The first, "Information Feudalism: Who Owns the Knowledge Economy?" by Peter Drahos and John Braithwaite chronicles the harm brought by IP with real world examples. The second, "Against Intellectual Property" by Stephan Kinsella is a philosophical/libertarian argument.

(The authors of Information Feudalism don't think IP should be abolished, so you may find it more credible.)
The "we're fast, we're cheap, and sometimes we're right" approach to marketing?
The pattern is not really breaking. What happens is that 16384 doesn't fit in a 4 digit space so it's first digit "1" jumps to 8192 and it becomes 8193. Then the next number (32768) add it's first digit "3" to 16384 and it becomes 16387 and so on, so the sequence appears strange after 4096: ...409681936387...
That's interesting - I assumed they would block card payments, as well.

Hell, I have trouble paying for stuff in the EU with a US card...

Anyway, VPN providers are NOT your friend for privacy and escaping surveillance/censorship. They actually cooperate with the authorities!

Hidemyass and Astrill used to openly state they will provide any and all details of your identity and activities if the authorities request it!

There's no need for honeypots when all these companies give up your identity with a single call from the police.

They also discriminate against automated tools and robots for whatever reason, as if paying a human to do the work is better :-)
So you're saying you like Manning personally, but not for her 'criminal' actions? What about her makes you want to 'shake [her] hand' and 'buy [her] a beer' then?
This is like http://rescuetime.com with billing tools?

"You forgot to track time. Sounds familiar?"

That was the main reason I built http://wakatime.com, so I don't have to remember to track time.
You may find the following interesting: http://www.stat.berkeley.edu/~nolan/Papers/dice.pdf They claim that a biased coin is impossible via weight distribution.
New SteamOS beta allows for dual-boot installation
> The pattern will break down

It doesn't actually:

4096 8193 6387
= 4096+8192
+ 1 6384
+ …
Something something time value of money something. I'm not really sure. I was just pointing out a feature of the sale prices. I was only eyeballing at that...
Tata to exit telecom business completely
So basically to start a successful account all you need to do is find a popular subreddit and upload most upvoted post on Twitter
My experiences with RSI leave me sceptical on these types of approaches which focus solely on minimizing hand and arm movement. E.g. hunt and peck typists are less prone to small tissue RSI because they make large movements using their stronger forearm muscles.

The injuries I experienced were due to holding tension in the shoulders and back (due to working while tired, altered posture while caffeinated and the self-directed stress of trying to get some work done).

Technical fixes like this might provide relief for a while but I think they miss the core problem, which imo boils down to your body not being relaxed while you work.
Svbtle vs. Medium
The gorilla arm http://www.catb.org/jargon/html/G/gorilla-arm.html will hit you hard if you try to use a near-vertical touchscreen, or hold your hands up and out to make gestures, for long periods. A better solution would be a touchscreen pitched at an angle like that of an eazel or a pitched writing-desk: as those historical precedents suggest, that seems to be a good compromise offering easy manipulation without as much of the hunching over that a flat desk inflicts on you. Or if you just want larger ratio of physical to on-screen movements you could just lower the sensitivity of your mouse.
But 'unlikely' is qualitative and not quantitative. As shown in the article, you can measure how unlikely an occurrence is with a number.
Sometimes I wonder about Rob.

"In fact, C may be part of the problem: in C it's easy to make byte order look like an issue. If instead you try to write byte-order-dependent code in a type-safe language, you'll find it's very hard. In a sense, byte order only bites you when you cheat."
>BSD license says "Redistribution and use in source and binary forms, with or without modification, are permitted". If the distributors is under contract that forbids granting such permission, the result is again quite expectable.

I think I see why you are confused here. That permission grant in the BSD licence is granted by the copyright holder, and is not a condition of redistribution by any intermediary (you don't own the copyright to the code so you don't have the ability to grant that permission anyway). To redistribute you must merely follow the 2/3 terms of the licence which boil down to keeping the copyright notice and text of the licence (and for the 3 clause not using the authors names to promote it).

You can distribute BSD licensed code in binary form as long as you have the required patent licences. The original author does not need those licences (if they never distribute the binaries) and neither do your customers (if they never distribute the binaries).

That term at the start of the BSD licence is not a condition of redistribution.
You think English is not the defacto language? Why not?
I guess it depends on your needs. I think $50 is reasonable for the advantage of appearing unique and/or simulating the presence of an actual designer within your team.
Ask HN: What's the worst you've ever screwed up at work?
We've all been there (most of us, at least). What did you do (or not do), how did you first react, and how did you handle it?

Bonus points for sharing what you learned/key takeaways from the experience.
Detecting Simple Cycles Forming, Faster
The credit thing seems like a red herring. Either you have the license to the photo or you don't.
that's basically exactly what I'm thinking as the solution, yes
Modular Robotics' MOSS Kit Makes Building Robots a Snap
Facebook does the same [1]. May help you decide.

BTW pics or didnt happen.

[1] http://www.slate.com/articles/technology/future_tense/2013/1...
I'm a developer and we outsource some of our projects (we used to anyway) - I've got to tell ya - I've seen worse. Oh, the horrors ... the mess. I remember once when the "consultants" deployed for the first time on our staging env we somehow ended up with 15 databases some containing credit card info and all kinds of transactions (I guess from previous clients), the reason I know is because I had to examine this madness. As far as I could tell their software was dependent on most of the DBs. By the way the software was a recruitment web app, nothing to do with payments what so ever.
PH has been a pretty great resource for me. There aren't enough hours in the day to keep up with every company that launches. Quality > quantity any day of the week.
(disclaimer - English is my second language, so I suppose I don't have some superiority complex).

but you could have a kind of hazing reaction - people tend to believe that if they have done something and it was hard/unpleasant then it must have been worth doing and other people should have to do it as well.
Not just that, the key is to already have followers on a separate account, and then you can cross post them to build up the new one.
Damn, my passwords are crap (some are written in OneNote because forums make me change them every half a year), but then again I don't have any precious online properties besides some websites that I use stronger passwords for. Not like it matters since it looks like social engineering is alive and kicking (as they say, humans are always the weakest link in security).

These articles really make me want to set up an automated system that would monitor any password reset events (and other suspicious activity) and automatically change those passwords itself and/or notify me by sms...
Lessons Learned from Raffi Krikorian’s Interview on Twitter’s Infrastructure
GCC, LLVM, Copyleft, Companies, and Non-Profits
Programming Sound with Pure Data: Make Your Apps Come Alive with Dynamic Audio
Yeah what's a decade in prison anyway.

Go spend 10 days in your bathroom. I bet you cannot do it.

Now realize how incredibly comfortable you are compared to prison.
Ancient Plague's DNA Revived From A 1,500-Year-Old Tooth
Speech Synthesis Polyfill﻿
I have no problem if someone wants to identity with a different gender but it can get confusing for others as some people don't limit their pronoun choices to "he" or "she" to identify themselves.

How about this for an idea... Pvt. Manning? Easy and no disrespect.
I've used this as an analogy (albeit a poor and leaky one) to explain the difference between Bayesian and frequentist thinking.

A Bayesian who sees 76 heads in a row adjusted her priors early on and stopped being surprised after awhile. 76 heads and a tail? That would be weird. 76 heads strongly suggests you were wrong about there being a tail side to that coin.

The frequentist concludes that she's dealing with something anomalous: the distribution is all off. The difference is in how this is built into the math: frequentist statistics can reveal, say, the difference between flip 4 being tails (and all the others heads) and flip 72 being tails (with all the others heads), whereas in Bayesian terms it just 'falls out' of the math.

So here's a fun one. Given the 10h-10t-10h-10t-10h-10t-10h-6t: which model does the best job of predicting (correctly imho) that we're more likely to see four more tails than anything else?
Employee Falls to His Death at JPMorgan Building in London
When I see a website using default bootstrap styles I think it's fleeting and not worth of my time and money.
Have you been the target of hacking attempts? This sounds the opposite of handy, so I'd be interested to know how well it actually works. Not sure how well it would pay but I'd be interested in a service that attempts to steal your identity in this way, and then tells you what you can do to plug the vulnerabilities.
I'm surprised it hasn't been posted on HN before today. Anyways, great job with ProductHunt!
> Communitarianism is definitely distinct from authoritarianism

I agree, see above. I misread your statement where your point was instead to imply that whatever the truth, I lack the capability of determining it. ;)

I allege both are at work, but only due to the fact that its Communitarianism is a very shallow self categorization, a glorified self image. As a whole, I think American society is rather exclusive, it's religiously controlled and does have strong authoritarian traits in my opinion, but I already said why.

To give one example why I think Communitarianism is self-deceptive: the group of people who tend to be against creating social support structures are without fail religious conservatives. Health care, welfare, development programs, you name it - they're against it. It may well be true that they believe those same functions should be administered through the local church community, but that doesn't exactly make their intentions any less deplorable.

The fact that last week the whole community helped poor old Mrs Smith clean up her yard doesn't make up for rejecting the funding of more social workers.

> You've moved the goalposts quite a bit

Granted. I felt it necessary to come back to the original point in the original post, since we have drifted quite a bit in an effort to "correctly" label American Protestantism. Making a generalized criticism of religion was my central point, talking about the perceived similarities between the American and the Muslim system was only an extension of it.

When I expressed a hope that education could lead rationalism and humanism, I was implying that it could do so by healing away religious ignorance.
See this huge American Nazi Party gathering at Madison Square Gardens: http://xmb.stuffucanuse.com/xmb/viewthread.php?tid=7735 [1939]
Development workflow automation with Gruntjs
> months

that's a drastic overestimate. at some point, procedural languages really are all more or less the same. sure, there are different notions of types, variable scope, modularity/oo-ness, etc., but someone who knows a bunch of languages knows what concepts to get straighted out from the beginning and can be productive in days. if you find someone who knows a handful of procedural languages and haskell and lisp, they'll be able to pick up whatever language you're interested in.

now, picking up a bunch of toolkits is a different matter, because they really can be just a quirky as their designers want them to be. for example, using gson yesterday, i ran into a bug with json serialization that was pretty quick to diagnose by stepping through a few lines in the debugger, but it took over a half hour of searching and browsing api docs to find out that Maps weren't being serialized properly because i hadn't called GsonBuilder.enableComplexMapKeySerialization(), which it seems like really ought to be enabled by default.

then -- and not even finally in general, just finally for the sake of keeping this post briefish -- there are frameworks, which are like a perpendicular axis to the original language question. perhaps someone really familiar with rails or django and a little java background would be a better choice for a java project built on play than an expert java desktop developer with no server-side experience.

so in summary, if you can find someone who has basically already built your exact project before, yeah, you'd better hire him or her, but otherwise, intelligence, the ability to figure new things out, is always going to trump experience along any single line of expertise that one can attempt to draw through a software project.
The trouble is while you might be chomping at the bit to buy a $2,000 PS4, most of the world is not. It would not sell.
No kidding. Or how this post isn't just spam.
It might be I just needed some coffee ...
Looks interesting. Hope to get early access. Disagree with not wanting to let on that you use the greatest and most popular front-end framework in the world. Be proud!
But all they care about is the follower count. Once it hits a million, they can sell off this account to someone who wants to monetize it.

I mean, they have no real attraction to "History in Pics" as a constant, or to any particular post. They just care about it as something that people seem to like to follow. If someone else rips off their content, I doubt that would have any impact at all.
> So instead of continuously crippling the service in the name of goodness knows what, why not actually charge users for a premium experience.

Because then they couldn't justify their $50 Billion valuation. They'd "just" be a $1 billion company or something.

Sites like Twitter or Facebook could be perfectly fine profitable ventures that worked in their users' interests. But instead they got unobtainable market values, so they have to look like they're on track to meet them, and the easiest way to do that is to exploit their users.
Naoki has already made changes to prevent this type of attack from working again (e.g., removing credit cards from Paypal, moving his domains from GoDaddy, etc.)
That's my report card.

The grades are up to Cs now and should be As within a day.

I'm glad Ivan and Qualys are helping show us where we really are.
It's a shame FinCEN regs are so onerous, they're really stifling startups and ensuring that innovation will happen outside the US.

It's pretty vague, but it's easy to interpret the latest guidance to say that exchanging one digital currency for another requires a license, customer identification, suspicious transaction reporting, etc. Even if you never touch dollars, euros, yen or any other "real" currency, are you still a "money transmitter", no matter how small the amount?

http://www.fincen.gov/statutes_regs/guidance/html/FIN-2013-G...

"If the choice for regulators is to permit money laundering on the one hand, or to permit innovation on the other, we are always going to choose squelching the money laundering first."

http://www.bloomberg.com/news/2014-01-29/new-york-state-regu...

Good luck exchanging stored-value for digital currency in this environment.
Does anyone have any recommendations for reputable penetration testing organizations in the US?
From an ethical perspective I often think credit in these cases is more important than licensing, at least for older stuff. If it's a photo from the 1930s, I honestly don't care if some great-grandnephew technically owns the copyright, but it would be nice to have an accurate caption. The licensing issue gets bigger in my mind the more recent the photos get.
If you'd like to continue the pattern beyond 52 digits, just keep adding 9s to the original fraction...
1/9999999999998 = 1.0000000000002 0000000000004 0000000000008
0000000000016 0000000000032 0000000000064 0000000000128
0000000000256 0000000000512 0000000001024 0000000002048
0000000004096 0000000008192 0000000016384 0000000032768
0000000065536 0000000131072 00000002621440... × 10^-13
It's a great way to get into reversing and assembly of you like the "series of puzzles" format of a ctf.
There's nothing wrong with communism. There's everything wrong with communist dictators for life. When one dude basically owns everything in the country, the country ceases to become communist.
Pretty cool.

Can we use WolframAlpha to show why 0.1 cannot be represented as a floating binary?

And why floating numbers shouldn't be used for currency operations.
Just recently got in the market for home furniture. Found it a bit of a mess. Something like this could be useful - effectively like hipmunk, but for furniture. i.e. make the experience of understanding your options and finding what you want easier.

I like it.

I also noticed you guys are up in Toronto (my original hometown). If you want more candid feedback from someone in the market for furniture, or if I can help with anything else silicon valley related (I live in SF). Let me know.
UC Berkeley's future is as a 'finishing school for the superrich of Asia'
I think that's what you would call a break in a pattern though. Of course, the infinite series will stay infinite.