skysight-inc/HackerNews huggingface dataset:
something that low it could just be a spam program testing to see if you have certain pages available. for instance some programs look for "signup.php" or "register.html" and if = exists will proceed with a registration bot.

contact your host. sounds like normal normal shit.
Agreed, the site is terribly antiquated and poorly coded. I helped to clean some of the code, but there is regrettably still a lot of ugly, ugly, heinous, ugly, ugly code. There are definite issues that require addressing.

If this helps with diagnosis, here's IP data related to requests: https://gist.github.com/panabee/9595411. Can post more if more is needed.

Thanks so much for your help!
Brute force using "vanitygen" or similar tools: https://en.bitcoin.it/wiki/Vanitygen
You brute-force create private keys until you have one whose corresponding public key starts with your desired string. A commonly recommended command-line tool to do this is vanitygen. I feel the urge to say "I do not endorse that tool's security." (Though the same goes for Bitcoin generally.)
My only advice is to hire a consultant who can give you some advice. If your site is getting taken out by 50-100 requests per second (that is a very low number), you have some basic structural flaws.

A few hours of time from a developer experienced with scaling will save you a lot of grief. Specifically, it sounds like you need a caching strategy (probably for all layers of your app, including the database).

Super-general overview: Use memcached in front of your DB. Use a reverse proxy like Varnish and/or a CDN in front of your entire site. I don't want to make the obvious guess that this is a PHP site, but if it is, make sure you are using apc or xcache as well.
How paranoid would the U.S. have to be to keep those capabilities that have, in all likelihood, existed since the 1960s secret?

And they don't even to acknowledge their existence. "By chance, a satellite overflew the area. Here's what it saw" plus a blurred picture could be enough.
What I'm curious about is, what sort of advanced technology are our rivals and 'allies' flying over us? Is our air/surveillance superiority absolute, or do they spy on us like we spy on them?
See tim333's reply and link. It had enough fuel to reach NK
I'm living in Germany. Here, for non-dubbed, easily accessible (on-demand access on every device) and rich (all popular shows, movies and then some) content, I'd gladly pay 100€/month. I hate having to use VPNs to make it look like I'm in the US to receive crappy service.
Just like anyone else does it? Send to an exchange or service like Coinbase, withdrawal to your bank account.

But it sounds like someone in the community will do it for him.
Is it really illegal or just violating the TOS? Can you be dragged to court for it or only have the service terminated?
IIRC while this is true and good practice, many modern OS/libc implementations will zero stuff anyway.
Creating DuelBits
>why anyone would think that a local change in a gravitational field would not propagate as a wave. What the hell else could it do?

propagate immediately. Wave is a propagation with finite speed (and the expectation is for gravitational waves to have the same "c" ). There wouldn't be "wave" in immediate propagation, i.e. with infinite speed.
> A competent attacker without a botnet can try to find weak points in your application

They can, but it this case it sounds unlikely. It's not feasible for a potential attacker to bother with this kind of analysis and then just send a few dozen requests per second. Instead they can just pay $5 to a Russian bot net operator who will inundate the site with hundreds of thousands of requests. Even from a single mid-range DSL line alone one could launch thousands of HTTP requests without breaking a sweat.
Wow, you make it sound so easy.

> Not being able to communicate with people and ascertain the truth of the matter. Someone had to lie to cause him to accuse Horvath of lying: either his wife lied or Horvath lied, and he didn't appear to do a good job of getting the truth and resolving the situation.

Sure, and a good managers should have no problem figuring out things that can take police and the courts years and years.

> If it's a poor marriage decision, he wouldn't be the first person in history, people from all walks of life seem to make poor marriage decisions all the time.

How is that relevant, and what exactly does that even mean? You don't really know who the person is and will be when you're getting married, you're just making a bet that they really are who you think they are, and that they wouldn't change in the future. If this episode is true, they can either do what married people should do (stick together, learn, communicate, support each other, and resolve the issues), or they can say "fuck it, we're stupid and made a poor marriage decision", and separate.
You are correct, discussion is always welcome. I agree that "All of these methods - and when not to use them - is very useful knowledge." would be a very valuable proposition.

Like I said, the presentation rubbed me the wrong way by first exposing antipatterns and then not taking a very strong position against them.
Having pip and venv bundled with the standard distribution is convenient.
You could always try to improve the performance of your server and database configuration to handle 50-100 requests per second, and render the attack useless.

A. Check the number of connections per IP. If any have an unusually high number, block them.

B. Why is your site down? Database can't keep up? If so, why not, is it something simple like indexes not setup correctly?

C. Did you actually check the load on your server? Double check it's actually being overloaded, and you don't have a configuration issue with server connections set too low, while your hardware is practically idling.

D. How many pages are being accessed by the attack? Would you be able to cache them?

E. Check server logs, and see if you can identify anything that separates these requests from your typical traffic.
If a company has limited resources for providing text based support to the disabled, I'm not sure it's really cool to tie that up by claiming your disabled when you aren't.
"My prospects for gainful employment has been harmed because of Newsweek's article"

"I have retained legal counsel"

Gearing up for a lawsuit, it seems. I'm not a lawyer so I have no idea if it would have merit.

Presumably Newsweek didn't outright fabricate any of his quotes, but they may have misinterpreted them.
If you want to setup GitLab quickly please check out the packages https://www.gitlab.com/downloads/ (I'm a co-founder of GitLab.com)
This is almost exactly how a plot device in Neal Stephenson's REAMDE plays out. In almost exactly the same part of the world. Bizarre.
Yeah, I'm hoping this will make it easier for people to upgrade to python 3.
It looks more like an attempt at spamming, but without the full log entries (containing the referrer and the destination URL) it's impossible to be sure. In the end it doesn't really matter though.

Anyway, you have identified the main issue: some more code cleanup is in order. If you want to do this yourself: keep in mind that elegance in code is not the primary goal, runtime behavior is. Make sure you cache your results as much as possible, eliminate unnecessary DB calls.

On the sysadmin side, assuming your app is PHP the following is mandatory: make sure you're using PHP-FPM, and enable APC or Opcache. Optionally, consider installing Memcached and start using it from the app to cache data that is expensive to generate. If you're running on Apache, switch to Nginx.

Finally: reverse proxy service. They'll filter out most malicious requests for you. When the day comes where you experience a real attack, you'll have no chance of keeping the server up without using such a service.
Chrome extension that redesigns HN experience
Double spaces in this statement. Double spaces in the original bitcoin announcements. Ipso facto my friend.
The Trap You Set For Yourself
> You are basically using the same logic as countries that require burqas in public.

Noone is saying that women shouldn't be hula-hooping, we're just saying that it's not wrong for others (men included) to watch them if they do.

You, on the other hand, are saying that men should avert their gazes to avoid making women uncomfortable, which is much closer to the burqa logic, albeit with genders reversed.
Note that it is version-specific. I just flattened my Surface Pro 2 and used a non-OEM version of Windows, which required its own product key. Also, Windows 8 and 8.1 have different product keys, but if you upgrade OTA to 8.1 it will install the same SKU (OEM) for 8.1. Changing the OS is complicated with UEFI and secure boot, the usability is insanely bad, with a lot of boundaries being blurred. It's the worst experience I have ever had when installing a clean OS.
but text is precise and can be referenced later? and if it involves a gui, screenshots?
To add some evidence:

2013
Glastonbury: 135,000 [0]

SXSW (music): 82,119 [1]

Neither of which compare to anything on this list[2]:

10th EXIT (NOVI SAD, SERBIA): 200,000

1st DONAUINSELFEST (VIENNA, AUSTRIA): 3,200,000

[0] http://en.wikipedia.org/wiki/Glastonbury_Festival
[1] http://en.wikipedia.org/wiki/South_by_Southwest
[2] http://www.mtviggy.com/lists/the-10-biggest-music-festivals-...
Incredible theory. This entire situation is really a complete mystery.
this, unicode and exceptions are IMHO good enough to start thinking about upgrading. you might say that pip is a non-issue because everybody who develops in python has it installed anyway, but in windows world deploying python apps has always been a pain (yes, i use py2exe, it's not perfect).
The reporter that originally accused this dude of inventing bitcoin should get fired. 90+% of Newsweek readers will never see this tweet, and the original article is pretty speculative, so I don't know if it'll warrant a retraction. People hungry for bitcoin are probably going to come for Satoshi, and it won't be pretty.
Well, it's a cold, calculated national security decision made by people who are naturally very secretive. They have nothing to gain (in their view), and something to lose, by revealing capabilities beyond those that are already public.
> It is telling that the topic of sexism in tech and the workplace is controversial at all.

Yes - it tells use that it's a deeply emotional and often deeply subjective topic where situations can be interpreted very differently depending on your point of view and you do not necessarily have as clear a villain and victim as people like to have.
I took a quick look at the IP data you just released. Extracted IPs then unique-sorted them and took a few random samples. Everything was Eastern Europe, Russia, or Nigeria. There are some broadband IPs and some pppoe (!) IPs in there too, which might explain why it's not a very heavy attack.

There are 500+ IPs listed. I've permabanned a few million IPs on my servers, and I bet there's some overlap. Gimme a sec to see if I can put together a quick script for you.
All it takes is one phone to be on, regardless of human intervention. I would wager someone forgot to turn their phone off. Nevertheless, if the flight was hijacked and the hijackers were pros, as they clearly must be, they might have had a cell jammer. Regarding IMEIs, cell numbers of passengers, and tower logs, well that's what we have all those 3 letter acronym agencies for. I'm sure they haven't just been sitting around all this time. I don't think it's just the navy and air force sending search and rescue.
Right? This site was one that got me excited about making shit.
Cool. I love Python, but it's really going to be a decade before this interpreter is used in production by anyone.
Good theory. Yours is as good as anyone's at this point in time. Incredible, how we think that our tech is so advanced yet a commercial jet can go completely missing.

MH370 makes for an incredible setup to 'Lost'.
Because that is what the lynch mob is screaming for and anything else would be labelled as aiding and abetting sexism and discrimination against women by some people?
If the plane has flown following most of that 777 trail, then it should at least narrow down a little where it went... but it's very unsure we even find out where it went. If this was planned from the very beginning, it would be well hidden by now.

I wonder what happened to the passengers - and if anyone realized what was happening after several hours.
A-players don't watch TV.
I'd really like to hear another knowledgeable person's analysis of this theory. At least its different than the endless hijackers/bombing/suicide/aliens run around.
Opensource cloudbased pastebin for instant sharing
Don't see why your age would be a problem for immigration. For many western countries, academic/professional qualifications and financial capability (especially if applying for investor visa) matter more. I believe Canada also has a points system where you can apply to immigrate based on your qualifications without necessarily having a job lined up.

Why do you want to emigrate from Brazil? Listing some reasons would enable people to give you better country suggestions.

Mentioning your technical skills here and including some type of contact info in your profile would also be useful for anyone interested in contacting you in regards to employment.
I have not read REAMDE, but if that's the case - perhaps REAMDE was the inspiration, which makes it not bizarre at all.
Nice idea, however I'd hope that modern radar is able to detect two aircraft of that size flying close together.

Unless the perpetrators know the various limitations of each radar installation?
Dorian Nakamoto: Police Report on Stalking
Waiting for a crossover of this route with this http://project.wnyc.org/runways/
> The logic there that I have a problem with is that it's the women's fault for being attractive, and that the man isn't at as much fault for being attracted to it because the women are doing something attractive.

How about it's nobody's fault because there is nothing fucking wrong about people doing something in public and others watching them???
Maybe she was an informal part of github's culture ever since it was a 100$ company.
All these theories... It's obviously at the bottom of the ocean. If not, it's here: https://www.youtube.com/watch?v=NzlG28B-R8Y
> One very senior engineer initially worked on Source 2 about three years ago but had to quickly switch projects because another, more tenured engineer was expressing his disagreements by silently reverting some of my friend's check-ins.

Wow. Just wow. This pisses me off especially, because to make it as a freelancer I've had to work damn hard to develop self-discipline, maturity, and reverse a path of self-destructive behaviour.

To see people in senior positions act like complete fucking children irritates me to no end, and I will do everything in my power to stop this when I run a company.

Does anyone know, with regards to employment law, whether it's ok to include provisions that allow us to fire or at least demote, for people acting like nasty, immature human beings?
Isn't it incredibly obvious that hierarchical structures, even when they start o get a hint of tyranny, offer more freedom to the individual than "structureless" ones?! (my definition of "freedom" here is "freedom to do my thing however I want to do it, whether the majority agree or nor, whether I'm right or not").

In a "structureless"/"not explicitly structured" social system you have to always keep your senses sharp and always be observant about the hidden power structure that always changes. This takes a huuuge amount of mental energy, at least for me, and I can put this energy to waaaay better uses. In a functional "structured system", even if for short periods of time the wrong people get in charge, you can at least not spend 50% of your energy in tasks related to the perpetual reorganization of the power structure and the silent but continuous fights for power, and actually have time and energy for solving the problems (and no, the problem is never "who's in charge?", nobody gives a fuck "who's in charge"!) Yeah, you may have to do the problem solving while lying "yes sir, I'll do it like this" to the bosses, and then go on and do things "your way" in reality, but it's waaaaay less stressful then either:

- being in/around a perpetual silent power-fight

- not knowing who really is in charge (this is what I find the most stressful, because if you know who really is in charge you can solve any serious problem by jumping over your superiors and talking to someone more enlightened higher up the food chain)

"Non-micromanaging 'cold' hierarchies" (by 'cold' I mean both "relatively rigid", like not in a continuous reorganization and power fight, and non-empathic to even semi-autistical, like being relatively unperturbed by temporary emotions) and "benevolent tyrants" are to me the best models for helping the "makers" function at 100%. And "the makers" are the ones actually solving the problems and keeping the profit flow.
Indeed, though I was a little suspicious about wether this was really possible. Maybe we'll find out soon.
I agree. If someone claims Ansible is hard, they should go RTFM. Then if that doesn't work, they should go back to grade school. Ansible is easier than shell scripts by virtue of not having to write shell code. Then once Ansible Galaxy is out, config management will be trivial.
That is the sort of thing that you should be able to fire people on the spot for, no severance, just get out you misogynistic entitled scum you deserve nothing from anyone.
Every client worth looking at allows rates to be adjusted, down to zero, if need be.
Case in point http://screenshots.en.sftcdn.net/blog/en/2008/11/utorrent-3....
> Julie was made to feel uncomfortable, and since she's the best eye witness to the event we've got, there's no reason to doubt her testimony.

Yes, but that testifies only to her personal feelings at that moment, which are not the definitive measure stick for anything.
I think this whole thing could have been prevented if only the tracking systems could not have been turned off manually.

Why is that even possible? An oversight? If you think about just how many liberties we passengers had to give up after 9/11 worldwide, why was this still there? We can't take any liquids on board anymore but if the pilot wants, he can make the plane disappear at will? Yeah, the liquid thing was really the only security risk here...

Imho, tracking of planes should never be able to be turned off. Why should it? Could there ever be a situation were it would be vital to have these systems not running?
Machine Learning Course Begins..
Python 3 came out in 2008. You're saying 16 years post-release until a moderately sized change (the majority of which is regarded as improvements) to a language is used in production.

That's totally bonkers.
how do I run its commands without typing "doing" each time?

smth like:

doing>
I wasn't sure if you were kidding about toilet paper manufacturers having booths at the music festival.
I found this:
http://sxsw.com/film-interactive/news/2014/stop-cottonelle-r...

I also wasn't sure if another poster was kidding about Ukranian 36-bit vinylcore bands. I couldn't find any references to those.

I suppose I really can't argue about how nice it would be to "get refreshed" in the middle of the day in Austin, so I can't hate on Cottonelle. However, their page says I have to engage in conversations with "talking bums" to earn refreshing services. I'm not kidding, check my link above.
There is a realistic possibility that those piloting the plane used this and/or other stealth techniques and landed intact. There are lots of groups around the world that would love to have a working $250M aircraft. Maybe there is a massive airplane chop shop that this went to, or someone wants to load it up with explosives and fly it to some country they disagree with.

Unfortunately, whether it landed or not, the odds that the passengers are alive are very small. A ransom demand would have been made by now.
I think adoption will improve substantially when major Linux distros start shipping with Python 3.x as the default interpreter. I believe this is the case with Ubuntu 14.04 LTS.
Because sexism.
Funny, the pathlib functionality is really similar to a saturday morning hack that I was playing with a few months ago.

Pathlib, asyncio, unicode default, bundled pip and venv...

I do like the look of Python3. It's looking a lot more interesting, the further along it gets. I still haven't really done anything with it, due to python2 being bundled with our OSX and Linux workstations, which means painless installs. This year, however, I do want to start porting my projects over to Python3 (well, making them run on both, at least...)
It seems that the flamewar detector (although I think it actually used to be flagging mostly) has been adjusted somewhat, or at least given a manual override for worthy discussions.

I can reassure you that this thread would have quickly been flagged off just a few months ago.

I'm guessing it's due to the fair amount of criticism PG received (from myself included) over how the flamewar-filter censored sensitive, yet important, discussions just like the ones this story sparked.
I've stopped using Google's DNS a while ago and I've started using this:

http://www.opennicproject.org/
It's a matter of radar resolution. Radars can't distinguish flies apart from each other, so obviously there are technology limitations anyway.
High Dose of WoW
After 14 hours of WoW and maybe some drugs involved this is what happens.
IntelliJ IDEA 13.1 RC2 Ships Nearly Final Java 8 Support
> I think this whole thing could have been prevented if only the tracking systems could not have been turned off manually.

This was already answered several days ago. All electrical equipment has to be able to be switched off - there were cases where fires started in planes because electrical circuits could not be cut.
Memory management in C is really not that hard. If it's big, use malloc or calloc. If it's small and of fixed size, use the stack. Don't use globals unless you really, really have a good reason.

Yes, you can get leaks with malloc. But valgrind is actually really good at finding them. So if you have reasonable unit tests, you can just run valgrind on all of them and get a lot of coverage.

The problems that Nethack is having are basically self-inflicted. They opted to use setjmp and longjmp to emulate exceptions. So they don't have a good way of cleaning up things they malloc'ed. setjmp and longjmp are basically a way of implementing a cross-function "goto". it's just as bad as it sounds. Not to mention, they use a lot of functions like sprintf that have basically been banned by everyone else in the world. Hopefully they're not using gets()...

You don't need to implement crazygonuts memory management unless you're writing a high-performance database or kernel or something. Certainly not for a text adventure! Just. Use. Malloc. So this whole thing is just an exercise in making something really simple into something really complicated. Which I guess is what Nethack is, anyway.
It doesn't make any sense to kill 240 people, including babies and kids. Especially if this is a terrorist act, they could not religiously justify that, especially since these are mainly Chinese people rather than American.
>> A ransom demand would have been made by now.

That is exactly what I am scared of. That the intent was never to demand a ransom. Obviously they were after the plane - to use it as a weapon. Or use it as a carrier of some weapon.
Shame and Vulnerability in Tech
Asyncio sounds promising, does anyone with more knowledge know whether it comes close to Go channels?

Go channels are the only experience I have with concurrent programming, but when I understood them it quickly became second nature to create everything using channels. Can techniques like websockets be used now as cleanly as in Go?
Maybe, but would the operators have the imagination to suspect it was something other than a glitch?
And people complain about slow Java upgrade cycles ;)