skysight-inc/HackerNews huggingface dataset:
> The source said that he had bought a large batch of stolen cards from an underground site and that they all appeared to have been used at Target.

Interesting sidenote in the Target hack. First, something that you might not know: not one of these breaches (that is Target, Neiman Marcus, Michaels, etc.) was discovered by the actual affected companies - they were all discovered by bank and security officials in the underground markets.

Bank and infosec people worked out a while ago that rather than wait for breaches to be discovered, it'd be best to set yourself up on the underground markets in the guise of a purchaser - buy up cards, correlate purchase history and work out who has been hacked. It is this type of reconstruction that lead back to Target, Neiman Marcus, et al.

Target was discovered not too long after the hackers had ramped up their sniffing, and with the response from banks and computers it meant the overall 'score' wasn't that great. A hack that should have provided enough dumps for the entire underground for more than a year ended up lasting weeks.

So score one for the good guys.

The problem now is that the black hat groups have wizened up to this. A few things are happening.

First, there has been a bit of a purge of users in the forums. It is harder than ever to get into the private forums.

Second, cards are now being 'laundered'. You take dumps from different sources and combine them together, to the point where it would be difficult to find out where the cards were stolen from. Being from a particular source used to be a selling point for the traders, but now they are blurring a lot of that info out and combining different dumps and then slicing them for sale in other ways (usually IBAN, State and Expiry).

The public 'auto sites' that sold these dumps have all been taken down, after getting a lot of attention over the Target attack. Many complete novices sought out the underground sites after the Target breach reporting in the mainstream media, flooding the forums with newbie questions and requests in a mini eternal september.

It is possible that with the underground adapting in this way and the state of security still being so poor that we won't even find out about the next big breaches.
Saturation maybe?
>That's assuming all labor is equivalent which seems ridiculous on the surface. I mean start-ups are hardly shoveling snow.

They hardly do anything impressive computer-science or programming wise either.

Programming like something Facebook, Twitter, Tumblr et co, including a lot of the early scaling challenges, is not that much removed from "shovelling snow".
I think this belongs on imgur.
Ask HN: How do SEO consultants get backlinks?
I hear many different claiming to know SEO and offering SEO services, but I'm curious as to know if they know how to get first page rankings for any website they take on, why not do it themselves and get rich off it?

How do they get backlinks? Do they spam it? Obviously not because that would get you banned or would it?

What role does web scraping play in SEO? I hear people scraping links or something like that to find out where they are coming from what does this mean?

Does anyone have a clear step by step to what they do as a SEO consultant? Say I want to rank number one for "painting service" what would it take to get there? create a bunch of wordpress blogs and link it to each other? Pull a rap genius? What things can be automated?
I am this way:

-caffeine does nothing to me; I can drink a coffee in the evening and go right to sleep; I can drink water all day and have problems sleeping; It just doesn't have any effect on me at all as long as sleepiness and concentration are concerned

-when I take Moda, caffeine somehow starts having huge effect: one cup of coffee or tea even makes me focused and willing to do stuff and there is just no sleepiness regardless of how tired I am;

I am not sure if my reaction to caffeine while on Moda is what people usually feel when they drink a coffee or "energy drink" but the effect is awesome :)
Dropbox’s hiring practices explain its disappointing​ lack of female employees
>Depending on who you ask its also common sense that universal health care is a ridiculous concept and no one wants to pay for other people's hospital visits.

That's why you don't ask brain dead people.
Game Development World Championship 2013 winners announced
Over 700 game dev teams from 79 countries took part of GDWC 2013. The winners came from Brazil and Finland (pro track / student track, respectively).

See the winning games, learn about the contest and join us this year!
Νέο site Anakainiseis.org.gr – Para Marketing Blog: Para Marketing Blog
Exploit is an HTTP request, so an attacker could send the request from javascript: any website could attack your router.
Use Fanboy-Social List, Ghostery isn't needed.

/Disclaimer; Author.
http://glowinggreenhand.blogspot.com/2014/02/fleen-quasar-in...
Hey Kiro,

Just see my comments above :) If angular-translate doesn't fit to your needs, that's okay. Just stick with angular-gettext. But you'll lose all the awesomeness like async loading, fallback languages, language negotiation etc..
Not really true unless you use crappy software.

I run a few thousand simultaneous connections on AWS small instances without any issues. (HTTP + HTTPS).

The key is writing good software. Which a lot of programmers are still really bad at.
Sharing one database with serveral applications without conflict of tablenames like "users".
Open-source 3D city platform ViziCities released on GitHub
Checklist when you go for a Sharing Workspace
it’s is made by an advertising company called Evidon …
it is a Web tracking blocker that actually helps the ad
industry

doesn't that defeat the whole product of Ghostery? I was eager to install it but after reading that I'm not so sure. What are they exactly doing?
There was a study on this about why boardroom pay for public companies in the UK shot up after the laws came in forcing public disclosure of boardroom pay. I not got time right now, but I'll look it up when I get a chance.
It's not because the US is not perfect in that regard that it means it's not superior. We are not dealing with binary numbers here. Entrepreneurship freedom is usually way higher in the US than in France, but of course it depends on the States considered as well. But the trend is clear overall.
If you calculate commuting or time you "waste" eating, getting dressed etc. working 80h/w you basically have no downtime.
Who should be mocked? Site owners or users? While you decide, let me get my mocking stick warmed up.
Or not - I'm over 40 without any big breakthroughs.
> Canada and there are plenty of people that question the sustainability of our free health care with the aging population

Oh, the same questions should be asked in France as well, since the French Government needs to borrow 4 to 5 billions Euros on the market every few weeks to keep functioning. Of course it's not sustainable.
Maybe German manufacturing would be a better example?
Replica Bvlgari Watches
Replica Bvlgari Watches
Cyanogenmod Updater vulnerable to MITM attack
> I'm in the UK and we also have these same free public services.

You forgot the word "crappy" services. It's widely known that for life threatening conditions in the UK, the NHS has a wait list and you have to wait for your turn no matter what and that be months or sometimes more than a year. Sorry, but I want to have a system that allows me to pay more to get priority (or better treatments).
Do you not use version control?
12 fell flat? what made you keep going?
The author just updated the post adding a link to download the raw data.

CSV: http://files.t3hz0r.com/projects/software/sandbox/flappy/fla...
MongoDB: http://files.t3hz0r.com/projects/software/sandbox/flappy/fla...
That's exactly what the Wikipedia talk page discusses.
Best xkcd in ages, really interesting, and just beautiful to watch.
Is there a bright side to this, though? Doesn't this mean that the barrier to entry will increase for this kind of crime, and thus a smaller group of criminals will be able to perform it? Maybe that's small consolation, considering that only a handful need to do it to cause widespread havoc. Still. I hope this isn't all bad.
Or NO!

Frankly, the right answer depends a lot on the nature of the business, and the people involved.

Being in the tech business, I would never even consider hearing someone out on the phone, simply because >99% of the unsolicited phone calls we get are scams or completely inappropriate for what we do.

If you were to send me a personal email, OTOH, you'd be guaranteed a reply. And it'd be much more likely to be positive if I've had the chance to check out your offering at my own pace.
I looked at the changelog on Github, and while there is certainly a lot of good stuff in there, for such a big release I would expect more information on some points, such as 'determinePreferredLanguage' or 'teaches directive custom translate-value-* attr'. Or link the commit ids to the commits (and link to relevant issues).
don't forget about flash cookies, a.k.a LSO's or SuperCookies. BetterPrivacy works well mitigating that.

i'd also recommend 'Secret Agent' - "Continuously Randomizes your Firefox/SeaMonkey HTTP User Agent, to Suppress Device Fingerprinting, and Resist Web Tracking. Also Prevents eTag Tracking.": https://www.dephormation.org.uk/index.php?page=81

hosts file is another option: http://winhelp2002.mvps.org/hosts.txt
archive.org can help with this, too. The earliest for your site is: https://web.archive.org/web/20120908180933/http://skimfeed.c..., which is within a day of when your twitter account was created.

(although this might not be early enough and generally people shouldn't rely on archive.org caching their site.)
Now, I don't speak Russian - but I'm pretty sure these photos of Moscow have nothing to do with hacking, technology, programming or even news. I think a place like /r/pics over on Reddit would be a place where these would see more love.
True,
I think the author should correct the result for long movie list.It gives wrong impression about the movie.
Here is the quick result from google about movie duration of GoW:
https://www.google.se/search?q=gnags+of+wasseypur+duration&o...
*In my experience Monopoly games played by the official rules... Any thoughts on what we were doing wrong?"

I'm guessing you weren't actually following the rules[1]. If you do follow the rules you'll find liquidity gets sucked out of the game by continual reselling because you are only allowed to sell unimproved properties, and have to sell houses & hotels back to the bank at half price.

[1] http://richard_wilding.tripod.com/monorules.htm#sellingprope...
Fundamentals of Cryptography; Algorithms and Security Services slides
You know, it's cute when somebody who wasn't even born when I started writing software for servers tries to discredit me.
We ned to to make some serious progress on extending youth!
User interface menus were the most popular class of design patents in 2013
I think there has been a renewed interest around 10Gb ethernet (and SSD). Basically computers were grossly limited by IO with gigabit ethernet and hard drives, you could buy a pretty low end box and saturate them, instead people bought high end boxes and ran slow code. But your average slow code wont perform well on 10Gb.
You can now buy credit cards on some of the new underground markets that are replacing Silk Road.

Find the type of card you want, select how many you want ($5-20 each) and go through the checkout process, just like shopping on Amazon.

What happen is that there is now another tier of distribution - the bulk guys aren't selling directly to the public any more but there are people buying from them who are, and they are making it easy.

The bright side is that with chip+pin the horizon for dumps is short, but that leaves CVV's (card not present carding, used in online fraud).
Old people, man. And the people who take care of old people. I know it's not typically HN target demographic, but old people need improvements in their lives, too.
Couldn't you have met up and shared pictures or looked at photo albums, like they did in the 80s?
I started using version control later in the process. First few iterations, were live coding/happy-hacking.
Guide on How to do Growth Hacking and Marketing for your Startup
Patrick already mentioned the best way to get email addresses.

However, for my use case (i.e. emailing cold contacts) you usually don't get their address handed to you. I just looked them up with a combination of Yellow Pages and Google-Fu.

Now that I think of it, I could probably ask the people on my list for interviews. Thanks for the idea, Patrick :-)
On one hand, I don't need SO much either. I mostly go there to answer questions, not to ask them or research them.

On the other hand, SE has some really great sites where I can get really good reviews of stuff I am working on by other people other people who know their stuff (I use dba.stackexchange.com this way).
Google, circa 1998 (I think it was actually mid-1999):

http://www.google.com/search?q=google+in+1998
This seemed like such a fascinating project when you first unveiled it. I'm really glad you've decided to make it open source. I look forward to diving in and seeing how it works.
Yeah i've seen the archive, but that was around iteration 3. Is there anything that snapshots or caches websites that hit HN?
Qualcomm Toq SDK now available
Germany to step up Counter Espionage Program against United States
Is Elon Musk going to be Apple's next CEO?
I was definitely using this page as a resource in 2000-2001. I was going to try and use Python Medusa module (precursor of Twisted) to scale connections.
People are often too optimistic about these additional $2m, while cutting yearly cost by $1m would allow you to hire several more developers, or increase your runway to profitability. There is a business case for both...
How to Estimate Time and Costs for a Project?
Atlas: New Go Library for Creating JSON API Servers
Of course not, your attempt to analogise the situation with Adobe is ridiculous. A better analogy would be if Adobe had a file-size restricted version and charged $300 to "upgrade" to the unrestricted version - the upgrade of course would be a simple patch to remove the restriction, that anyone could run locally by downloading the patch. Instead however they'd insist it was a hardware change and send someone to futz around on your computer.

Now of course you can charge what you like and price differentiation doesn't have to relate to actual costs at all, but lying to deceive the customer that the charge is paying for some direct action of employees necessary to enact the alteration is simply fraud.

Now there are of course costs, upstream bandwidth, data handling at intermediate routers and such. That's why it's entirely reasonable for them to charge more for a faster/broader data plan - http://www.comcast.com/internet-service.html it's already charged at more than twice the rate of the 50 Mbps plan (whilst I imagine the real _additional_ cost is probably maybe a few dollars); but that's fine as they're not pretending it costs more because they have to pay for faster electricity or something daft.
What makes you say Java is not a high level language? It most certainly is that according to the official definitions of the term.
User's time and bandwidth are valuable commodities. To safeguard these resources, people engage in social activities which exclude people likely to waste their time. There are entire industries that peddle influence through social engineering to penetrate this approach. Surely I don't need to spell these out ... ;D. But you don't see much of the activity you are interested in here at HN, and when you do the evicence suggests it is the exceptions that prove the rule. And also when those exceptions are not in place it is the typical case demonstrating the case quite nicely.

The issue about "better targeting" is that the delterious elements of advertising do not go away. This is the reason why sometimes we decline to take a phone call in the middle of the meeting. Its not always the targeting, the content, or the message that it counter-productive. Sometimes it is the time and the context.

So it is not just that privacy is protected, or not. Nor is it sufficient that "better targeting" should be an excuse to increase attack surface for placing adds; or that "more secure" should increase the attack surface for data-intensive surveilance and information gathering.

Part of the art of marketing is reaching people in a constructive way. Advertising is not always the way to do that. No matter how "well targeted" it is. That is why we have PR and lobbying, informal networking, social circles, and country clubs, alumni networks...etc. And why we don't accept advertisments in front of phone calls like we do at the movies. Etc.
When SO's down, all the programmers grind to a halt. When HN's down, all of them accelerate to levels normally unseen.
Stephen Hawking: Syria’s war must end
Some of these courses are not really that great - sometimes you learn more from the help files and manuals...
Is not using something for a single day a sign you never need it? I sometimes don't refer to SO for weeks, simply because I'm dealing with problems I can figure out without it.

But sometimes I'm dealing with something I'm totally unfamiliar with, and docs and tutorials are badly written, and then some example on Stackoverflow can be a great help.

And more importantly, sometimes I'm stuck on something really obscure. Doesn't happen a lot; once every few months or so, but when it happens, putting a bounty on Stackoverflow is a really nice option to have.

Are there really people who check Stackoverflow every single day of programming?
> Remember that, despite what SA falsely claimed when making these threats, nothing posted on /r/jailbait and the like was actually illegal under US law

I'm pretty sure that photos of children who appeared to be around 11 or 12 masturbating each other are illegal under US law, and I saw such photos when I checked out those reddits to see if they were as bad as Something Awful claimed.
I mostly go there to answer questions, not to ask them or research them

2nd. After getting so many good answers from there (which is btw not exactly the same as needing SO, there are other sites and resources out there, SO is just by far the fastest and most convenient way out there), I feel a need to give things back. I admit in the beginning that feel was driven by rep. But once there was more than 10k next to my name I stopped caring that much and just wanted to help people. Especially those with weird hard to figure out problems in some specialized domains.
Well looks like the poster doesn't use SO quite well on a normal day then.

What you describe as a newfound way to program is actually what should be considered normal. SO isn't about getting an answer to some code problem or your homework or something like that.

To benefit from SO you should have an informed question that displays a good degree of personal research. THEN it's time to tap for the collective developer mind and be enlightened.
Some NICs support virtualizing raw hardare access, so there's no fundamental reason for why Snabb couldn't support it. Just a simple matter of programming (and last I heard it was high on the priority list, so the support might even be there by now).
There is one number that has not really changed. It's memory latency, and another is the processor clock speed.

The latency of main memory read is still around 100ns. It has been around that for over 10 years now. It means your CPU will have to wait for hundreds of clock cycles to get a read from RAM if it's not in the cache, and in huge datasets it probably is not in cache.

Another issue is the processor clock speed. Yes it is true that modern i7 can reach 124850 MIPS. However that number comes from having 4 cores with each of them being able to reach up to 8 instructions per clock. You are still limited in executing dependent instructions.

That sounds a lot. But one must remember that it reaches 8 instructions per clock only when the instructions are a good mix of float/int instructions, no branches and the instructions are not dependent on eachother. In practice you reach maybe 1-2 instructions per clock. In some code it can go even to 0.5 IPC (bunch of unpredictable branches and whatnot).

Writing a code that takes advantage of large memory bandwidth and poor latency combined with massive CPU performance if the instructions are not too dependent on eachother is almost like writing modern GPU programs.

It would be interesting to see what kind of an web server perf one could get by carefully writing it in OpenCL (using CPU target, not GPU).
Javascript WTF #27,903
There is nothing wrong in needing SO.

I totally agree with the article that the initial source of documentation should not be SO though. Want to learn something? Yeah, then SO is not the starting place. Grab the tool, read the docs, browse the forums, engage with the community.

But sometimes there is no forums, or they are almost dead. Sometimes you want to know how other people are using that tool. Sometimes you don't find the answer to your question in the tool's forums and sometimes you got into trouble and can't figure out the issue by yourself. Even sometimes you've come up with a wonderful solution and that solution might actually be a mess but you haven't found out yet.

SO is an awesome and thrilling community that can help in all the above situations. So, in my opinion there is nothing wrong in using it to validate what you are doing or to find a solution to that annoying issue you are having or to simply help others. But yes, not really the starting point for learning something in my opinion. I don't think that is its intent either.
How is his hacker news?
I consider my self an experienced programmer, but I would estimate that I use SO at least a few times a day, when programming. It's usually through a Google search, but nonetheless. I also find information in other places of course, but I really think that site heightened the quality of available information remarkably.
The y axis on that graph could be swapped out for "attention to exercise and personal appearance".
I have found that if I never get the opportunity, chances are it wasn't important anyway. For a lot of things that seem to be moth-balled, they have an amazing way of coming up later.

For example, a month after I gave up on rewriting the financial logic for LedgerSMB, I got a project that required a small subset of rewritten code there. So I went ahead, took the short cuts required for that, wrote an implementation and such in a half a day, from scratch, when my previous attempt took two weeks with nothing to show from it.

That lead to starting the rewrite again which will begin again in earnest after 1.4 branches off. Instead of budgetting months, I am now budgetting only days.
It is also worth mentioning that http://www.areweprivateyet.com/ is created and maintained by Evidon, the makers of Ghostery (and unfortunately, they have no placed any obvious disclaimer except the footer mention and the top right ghostery logo which is not entirely sufficient imo
If this sort of thing matters that much to you then you bite the bullet and rent a rack to fill with physical servers somewhere.
Sitemaps with a bit of Metal
I find that answering questions on SO or some other forum, is actually a good way to get smarter about a topic. Or just keep sharp. So it doesn't have to be an all altruistic effort.
People build up a tolerance to caffeine.
Mostly I'm fine with default css but only 100% width. This could be helpful in many old article like this.
Thanks
Now you've finally matured into the kind of developer who can ask interesting questions - the type that are not easily answered by studying docs or source code. Sometimes because you're not asking the right questions, sometimes because your problem is obscure, sometimes because it's a little bit "subjective" - but above all, it should be interesting to other people who also know how to read docs and source.