skysight-inc/HackerNews huggingface dataset:
1000's of publicly accessible private HDD's spread on Piratebay.
From the leaked content's readme:

-- start quote

ASUSTeK Computer Inc (ASUS) have spent the better part of a year ignoring the fact that their RT-series routers suffer from two CRITICAL security vulnerabilities.

1. Default setting for the ftp-server was to allow anonymous login. ASUS calls this feature “limitless access rights”. We call this madness.

2. AiCloud usernames and passwords were stored in plaintext in a file available for download without logging in. We call this insanity.

This release includes

- IP-addresses to 12937 ASUS routers with vulnerable FTP and/or AiCloud.

- 6536 complete and 3605 partial lists of files shared from these ASUS routers.

- AiCloud login credentials to 3131 ASUS routers.

-- End quote

The story was removed from most sourced, but magnet-link containing IP and directory data are circulating on darknet sites like wildfire.

I'm afraid that many innocent victims are going to get hurt by this, and it all could have been avoided if the ISP's scanned their networks and warned their users.

I am at least trying to warn those i know have an ASUS Router, and so should you.
Yes! Are you an EU citizen? If so, it would be great if you could voice your opinion in the ongoing consultation on the review of the EU copyright rules, currently held by the European Commision. Here's the link:

http://ec.europa.eu/internal_market/consultations/2013/copyr...

Even non-complete surveys will be considered and you can be sure your contribution will be read since the number of contributions is always relatively low.

The same goes for any other EU citizens on HN. Now is the time to make yourself heared!
I have been using Redis within Node.js lately to decouple my system with messages. I however can't block services once they have started although in my use-case I don't need to block. Your use-case sounds different so I can see how your module could be valuable for the purpose you built it for.
Agreed. Although Persona's technical basis and privacy protections are second to none, the UX is nothing to write home about. It still feels too much like OpenID, and we know what happened to OpenID. Facebook and Twitter can get away with cross-site redirects because they're well known and people trust them. Persona doesn't have that benefit, so it can't get away with the same cumbersome UX. It needs to do better, much better. The market is unfair. Deal with it.

If you're in the business of implementing an alternative login system, you should also seriously think about what kind of UX you're competing against. Your ultimate competitor isn't Facebook or Twitter. It's the good old email-and-password login system that everyone is used to. You enter your email address, select a password, and you're in, without ever leaving the signup page! It's even easier if you use a password manager like LastPass. That's what you're competing against, and if your UX has any more steps or redirects than that, you're probably doomed.
Start the countdown to Disaster Area.
Very surprised by that 1.2% of Haskell share, shame they didn't have data from previous years.
I don't want to be too harsh - this is a fun idea, and I'm prone to silly fantasies about rewriting slow code in assembly myself - but this particular assembly doesn't take advantage of many of the "dirty tricks" that are available in low-level code.

As one example, check out the content-type detection, which is essentially a long chain of repeated strlen + strcmp; assembly language doesn't magically make bad algorithms fast.
Actually that makes a tremendous difference. It is a bit difficult to explain but even 2 concurrent requests per dyno is a lot better than 1. As you go up from 2 to 3 to 4 the difference quickly becomes minimal. I'll try to explain why, but warning: hand waving ahead!

The problem with only 1 concurrent request is that if that request takes long to process then it can block other requests that are queued up in that dyno. Lets say that 1% of the requests take long. If a dyno can process only 1 request concurrently then at each request there is a 0.01 chance that that will block other requests. If however it can process 4 concurrent requests, then the dyno will only be blocked if it gets 4 long requests at the same time. So there is only a 0.01^4 = 0.00000001 chance that a dyno will be blocked.
Julia's JIT makes startup a little slow.
Tell me about it. Or they do silly things like release sub-par Chromebooks to the Canadian market every other release, with the Canadian multilingual keyboard layouts nobody likes (because of the short enter key), and I have to ship and forward US models to get decent devices with the non-standard yet US english layout I want. (I say non-standard because they already changed the control key and caps lock, so they could care about localizing the keyboard improvements to other layouts, but they don't. Apple does.) Of course, I suppose I've the "advantage" of living so close to the US (2 hours drive) that I can go and pick up the latest devices from a US shipping address. But I shouldn't have to.
The Anatomy of an Effective Product Page
I'd agree about it being a fluff piece, although I think the binary options you present aren't fair.

I'm not a core developer on Julia, just a user and package creator. It is geared towards technical/scientific computing, and excels in that task - it has replaced the combination of Python and C++ I used previously. I think what Jeff Bezanson is saying is that there is nothing intrinsically unsuited about Julia for doing web programming or desktop applications. It benefits from a fresh start in this respect, and also by using best-of-breed libraries from OpenBLAS to libuv. This is in contrast to other languages for technical computing like MATLAB or R which I wouldn't consider to be practical choices for making, for example, a math-as-a-service application (although R is getting into this territory with things like shiny).
That states rights and nullification have sometimes been used for bad purposes doesn't mean that any use of states rights and nullification is automatically bad. Your statement reads as though that's what you mean. But surely you wouldn't say that states setting their own laws regarding taxation, wages, etc. (which are an exercise of states rights) are inherently bad?

> If that takes a Constitutional Amendment, so be it. Its time to get to work.

We already have one: "The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized."

What we need is to ensure it is being followed and enforced.
The Supreme Court on Digital Privacy
Apple Really Needs to Get Its Shit Together
log_2(7776^6)=77.5 bits of strength. Not too bad, but I wouldn't use it for anything cryptographic with local attack potential.

If you want phrases to work properly, just put 1 (or many) non-dictionary word in them. This means the attack has to go to an alphabetic one instead of a phrase one, making it _much_ more painful.
can only use 2 indexes for now
> I'm kind of OK with creator of the original Duke Nukem character getting royalties for uses of his character, I'm less OK with him being able to forbid anybody else from ever making a 'cover' of his game.

Duke Nukem is about as original as beans on toast. I don't see the point in making a cover of a caricature whose cultural origins could be traced back to the Second World War.
Findings from working on Red Hat's installer
"Is Google building an unstoppable robot army powered by AI?… Whatever the answer, we don’t want to feed the rumor mill here."

Uh... you just did. #FAIL
Senior Software Engineer – Farmington Hills, MI
I don't get why persona needs its own branding... Nobody knows what persona is. It should say login with Firefox. Did fb create a new brand for its login system? No it's just login with fb, same with literally every login service except freaking persona. Use your most popular brand instead of forcing all developers to evangelize a new brand. That's just not going to freaking work.
This plan is $576 a month, the actual hardware you get for that is mediocre at best. A postgres instance and git push deploy isn't worth that much and isn't that hard to set up yourself.

sure, you could run into some issues while doing it yourself but that risk isn't worth nearly $600 p/m IMO
It's a Wired article, please don't confuse it with the Julia community itself[1] - in my experience the latter is very enthusiastic, very ambitious, but also very willing to admit the current limitations and that it's in a very early open beta stage.

[1] Upon rereading, I don't think you are, but just making sure.
Neat! It'd be nice to see some more discernible screenshots of the prototypes to compare with the final version.
This is so completely utterly broken I don't know why they publish it each year. At least try to fix it so it matches our current planet.

Surely they can tell that javascript and objective-c with their overlap with 'web', 'dhtml', 'jquery', 'ios', 'iphone', etc. and other such terms are skewed compared to the easily disambiguated 'python'.
A fact which completely misses the point... maybe it's time to re-read the fine article.
Modern Wheat – Old Diet Staple Turned Into a Modern Health Nightmare
You use the word democratic, but in a context where you don't mean that word. Courts are antidemocratic. I can't speak to the politics in Europe, but e.g. in the U.S., the law insulates from what people want to otherwise do. For example, after 9/11, you probably could have gotten majority support for restrictions on Muslims. The law tends to insulate from that, or e.g. the mob outrage over the financial companies after the recession. Having money allows you to more effectively use the law to insulate yourself from democracy.

With regards to spying, the people seem broadly okay with spying. At least in the U.K., the popularly elected government just filtered their internet, and support for CCTV is widespread. That's why the minority who oppose surveillance in principle try and use the law to counter the majority will. If the laws get changed to ratify the status quo, that's not antidemocratic.
Good :) Shell scripts will be around for a lot longer than any of those tools.

Shell is also significantly easier and faster, if you just want to say run jslint, then minify, etc.

I program in lots of languages, so shell is the first tool I reach for. Learning the language is enough; I don't have time for all these quirky build and deploy tools.
If you allow unlimited redistribution you remove much of that incentive.

I disagree. The vast majority of games developed today do not have a hope of paying for their own development, copyrighted or otherwise. It's only a very small proportion of games (so-called AAA) that are developed with the expectation of profit.
This man claims he survived 13 months adrift in the Pacific
Well, they did by Boston Dynamics, so they actually are a defense contractor now.
Interactive heatmaps with Mapbox.js
Linkbaiting title. "Google removes application from Play store for using out-of-app Payment instead of IAP"
Is this onsite only or remote/telecommute for the right candidate?
Simpleheat –   A tiny JavaScript library for drawing heatmaps with Canvas
Now Hiring Solution Architect – Farmington Hills, MI
He doesn't mention Kurzweil once. #fail
I'm going to go out on a limb and guess that v. 10 has not yet been released but is in common use internally at Wolfram.
Disruptions: Paying to Travel in the Internet’s Fast Lanes
Startup times are not fantastic with packages. This hasn't been a big area of focus yet, but there is a roadmap for getting this down.

Its definitely a typo. Stable release is currently 0.2 (released near end of 2013) and upcoming version is 0.3 (a month or so away).
Same. The closest to any sort of answer I was able to get was something suggesting the clicks from my site's visitors weren't profitable enough for them therefore I'm permanently banned from ever putting AdSense ads on that or any other site I may make in the future.
Just a one more example of how these so called smartphones made the world a little worse than it actually was.
It is not a smartphones fault, it just to few people had any influence.

If you think about it, when computers appeared, a people built them in the garages, so literally anyone could make a difference. Phones didn't have this stage and went straight to business, big business. So here you have it, couple big brands providing their rules and that's all you have. Even rest of the big players fail to do a significant influence on established brands.
Ask yourself a question: Would it make a difference if Photoswarm was making 2-5x the money it's making now/if it had 2-5x the users?

If the answer is, "No, our new B2B project is too big/too profitable/too exciting for us to devote time to Photoswarm," then maybe the answer is to just let it sit on the sidelines, or to sell it if you can find someone who will take care of your baby.

If the answer is, "Yes, that would be awesome, we'd love to go fulltime on it!" then the answer might be to see if you can 2-5x your revenue. In that case, here are a few things to try:

- Charge more. Double or triple all your prices (for new customers) and add a "Call us" enterprise plan for a few weeks. See if it impacts signups at all.

- Do email marketing. Send out monthly newsletters to your 16,000 customers, with online photography tips, and subtle upsells and discounts.

- Expand your reach. Make some cool photography resources or infographics or do a case study with a successful customer, and post it online. Make it sharable. Offer details/more cool stuff in exchange for an email address. Then refer to the last bullet.

- Do targeted sales. Use Facebook ads/adwords to advertise to photographers. Use LinkedIn mail to reach out to photographers that might use your service. Ask them about their business, ask them for advice for your offering, offer them free months of service as thanks, etc.

- If you have good traffic, do A/B testing. Test the parts of your funnel for maximum conversion: ads, landing page, signup process, payment page, initial user login, lifecycle emails, etc.

If you want more advice in this direction, do another Ask HN. :)
In my opinion, if you're using anything other than 1X dynos on Heroku you are compensating for some other part of your stack being broken.

You may want to read this section: https://blog.heroku.com/archives/2014/2/3/heroku-xl#understa...

Performance dynos give you much higher performance and much better consistency, resulting in dramatically reduced tail latencies over 1X and 2X dynos.

Choosing performance dynos for a high-traffic or performance-sensitive app is definitely not "compensating for some other part of your stack being broken"; in fact it's a very smart choice.
I am a high school student who has not worked full-time in the industry. My resume consists of two internships and a handful of side projects. Despite this, recruiters still contact me from time to time. I generally ignore them.
gg php
lol! you didn't code your own OS? ;)
I want to like OpenStreetMap, I really do...

If I see a place on the map.. Why can't I click on it? I can't get the address, telephone number, website etc.?

And I see and picture of a shopping basket? What is it? I also see a cocktail glass, it's a fucking mystery.
Go channels on steroids
I was just thinking that there is really room for another innovation. Ever been a driver at an intersection where you have a turning green light at the same time as the pedestrians crossing the street you are trying to turn on and there is a constant stream of one or two people that keeps you and other drivers from turning until the pedestrian light turns red and only one car has the chance to turn? How about implementing something like the OP light, that leads to grouping pedestrians crossing the street to allow a car to turn in between them. Seems smart to me, especially in areas like universities or work centers where there are rushes of people in between classes, lunch, or rush-hour.
Tests Are Pain
The Most Valuable Lesson I've Learned as a CEO
Show HN: SlaveryStories.org – Memoirs from American Slaves
To Whom It May Concern:

My name is TJ Nevis and I feel I'm a good fit for this position. I recently left my full time job to pursue my business full time and I've been connecting with companies just like yours to take on outsourced/overbooked projects.

I am very familiar with responsive web design and all the websites I work on are responsive. I have worked with MongoDB for over 2 years and AngularJS for about a year and a half. I've read up on books and taken online courses on both topics. I've built REST services with PHP and consumed them with AngularJS. I've also consumed social REST APIs in my applications. I know JavaScript, jQuery, and AngularJS extensively.

I have used LESS and SASS and have used HTML5 and CSS3 (also animating with Angular). I use Github and Bitbucket (Git) for versioning.

My business website is currently under construction, but you can take a look at my portfolio website to see projects that I have done in my spare time in the last year. I am finishing up 3 websites now that I still need to add to my portfolio.

I'm very familiar with using CDN's for speed (S3 and Rackspace, mainly), using Grunt to minify CSS, HTML and JavaScript.

I think we could work well together and I look forward to hearing from you soon.

My personal portfolio: http://TJNevis.com.
But they do, you simply haven't experienced the scenario yet.
It doesn't seem to offer 32 bit OS images, so it's actually significantly more expensive, since one has to order larger node to use the same software.
Top 13 expert methods to replace Google's Not Provided data
A couple months? Aren't things supposed to move quickly in the Internet age?
I like it, impressive for such a short amount of time.

I did notice the site is very slow, is that your hosting (HN effect) or the client side stack you are using? Navigating the pages was taking 5-6 seconds for me.
Social Entrepreneurship and a world of problems
Freenode back up after long DDoS attack
I thought about this for a moment, but... suppose your company accidentally publishes one app that Google decides is a bad app. It doesn't even have to be "really" bad, Google just has to decide it is. What are the odds they just thwack your entire account and destroy your entire business in one fell swoop?

Perhaps some people have a risk threshold that would accept this, but I'm pretty sure this creates a situation in which you are going to be inevitably explaining to quite a few angry customers why you can't do anything to help them. Pass.
In Bell's defense, a chat with a tech support person is not exactly what I'd call responsible disclosure. However, I've spent the last twenty minutes on Bell's website and in that time, I have not found a single way to notify them of a security breach.

In my opinion, responsible companies (aka - the kinds of companies we should give our data to) assume that they are vulnerable to attack and make it easy for researchers to report possible problems. Having a disclosure policy and a simple, secure way to contact professionals on yourdomain.tld/security would prevent so many of these problems from ever happening.
Education Experts Say College Becoming Like a Startup
Entrepreneurs need a Minimum Viable Mission
Once a developer makes their money back, the game should go public domain.

Nintendo would still be able to make tons of Zelda games, it's just that there would be good competition with several hundred other studios making Zelda games. They would probably even do a better job than Nintendo and make the top-selling Zelda games.
Software isn't usually about making a big impact in people's lives(military, flight control, medical are exceptions). It's about making whole lot of people's lives a little bit better.
Anita Borg Memorial Scholarship takes on Russia
The blog post says that PX dynos are currently c1.xlarge (see https://blog.heroku.com/archives/2014/2/3/heroku-xl#performa..., paragraph 4).
This is just services; the network itself is still quite splatted.
Even outside of web, I find modeling problems the Erlang (and Elixir) way is oftentimes worth thinking about, even if you end up not using it.

Concurrency is notoriously difficult, and so a lot of people 'solve' it by avoiding it. That in turn causes you to think about problems in certain ways. Just being free to treat concurrency as essentially free, and in fact, encouraged, starts a real paradigm shift.

For instance, from something I had to work on, assume you want to write a cron-like.

An 'obvious' way of doing it is to create a priority queue or similar, and keep repeating pop -> execute -> pop -> execute.

Then requirements change, suddenly each task you fire has multiple steps to it. So you pop -> execute -> push -> pop -> execute -> push.

Then you realize these things take -time- to execute, and that is causing some times to be missed, so you pop -> grab thread from pool -> execute in thread (thread pushes) -> pop. Crap, there's a race condition; is the thread going to push the next thing this item needs in time for the pop? Well, maybe change it, the thread handles all the remaining action items for that job? But what if it's long lived, how does my thread pool look, will we exhaust the pool? Suddenly you have complexity.

In Erlang, you just start by defining each scheduled job as a process whose job is to figure out when next to execute the next step for -that job-. You don't need to know about the others. Done.
I'm surprised you would say it's hard to speak to someone at Apple. When I call their developer support number they usually pick up right away, and if needed they will escalate any issue to the level needed. And then there are the two free DTS incidents you get with membership, those are gold if you ever need them.

+1 408-974-4897
(800) 633-2152
Not just concurrency but also boot time.
Previous reports all say 16 months:

https://news.ycombinator.com/item?id=7156575

https://news.ycombinator.com/item?id=7161194

https://news.ycombinator.com/item?id=7162683