skysight-inc/HackerNews huggingface dataset:
> At the same time google should be extra careful that it does now allow good websites to be penalized by activities from even shadier SEO types that turn around and use these facilities against their competitors (rather than to avoid being penalized by it themselves).

That was the point being made - people are being targeted by their competitors, using the negative penalty from link farms to devalue competitor's sites. And Google can't tell the difference. You're right in that it's SEOs doing what they've always done, it just now has a penalty attached which gives unscrupulous ones a new service to offer and good SEO's a link-removal service.

> The disavow tool is used as a threat against webmasters to take manual action to remove the spam that was placed in an automated way by the perps in the past, that's a really bad balance there.

While it may be a manual action on Google's part, it's quickly becoming automated[1].

[1] http://www.removeem.com/
And, when you get down to brass tacks, I would not be at all surprised if it was better tasting bacon too... How are the Europeans able to do this? Is there an opposition view? Surely some farmers couldn't change and went out of business or something, right? It just seems too pragmatic and agreeable, it's almost like it makes sense. Surely near term profits are an issue there as well.

In the US, agriculture is huge money, just beef alone is a $200b+ industry. Then there are all these backwards incentives in the farm bills. Then there is the issue of rehabilitating a farm to take it "organic" (I'm conflating things here, antibiotics and organic farming aren't completely the same but similar) it takes years and capital to go clean, not all farmers have the resources to do it; they and the communities around them have a vested interest in declaring their methods safe and it becomes hyper political...
great app for fans who like football and hacker things at the same time :)
errrr- weird, works for me in the US - Ive just opened up the privacy restrictions on it though - try again? thanks for letting me know btw!
Code Spaces data and backups deleted by hackers
That not true in Europe at least, where organic certification includes animal welfare standards eg the UK see http://www.soilassociation.org/animalwelfare
search google for mattcutts.com - you'll see another post of mine from last year, detailing some theory ;)
I am pretty sure Google is not going to comply.
Well the myth is that this will not punish the target site. It's not true which has been clear for a long time, but Matt insists it is.
Oh, I should have written my post better.

It should be known that I love behind-the-scenes more than the movies, and I love these peeks more than anything else. Just was genuinely curious why NYTimes would take the time to show us. I don't think it would help any with the subscriptions/circulation numbers but I am probably wrong.
Russia mostly uses Yandex anyway :)
Layar join Blippar
Yup, works now, thanks.

What else can he possibly say though? He can't explain how they protect against it, because it would negate the protection, and he can't say that don't do anything, because that would just raise a shitstorm.
L. O. L. Politicians at that level are so bought and paid for. The only thing that would end our industrial military complex would be if every citizen read Orwell's 1984 and then voted 3rd party. I mean Jesus fuck, how would fighter X, Y, or Z get us anywhere in Iraq and Syria right now???
My wife's cousin owns a dairy farm in Germany and only uses homeopathic medicines on the cows. When I stifled a chuckle, he indignantly pointed out that not only does it appear to work for his cows, it isn't as if the cows can understand him, nor know that they are being treated.

However much I have my doubts about homeopathy, his cows seemed healthy and weren't being pumped full of antibiotics; hence I saw it as a good thing.
Same in Netherland. It has to be an American plane, even if it means shrinking the airforce from the original 100 planes to about 30. Everybody is against it, but when the decision has to be made, somehow just enough MPs vote in favour of the F-35.
Infinite 1UP Glitch Discovered In Super Mario Bros 30 years Later
I don't think it's necessary to hide that functionality, unless there are some strings in the post-auth modules that unauthenticated clients should really never be able to see. Security by obscurity is pointless.

You shouldn't be concerned about someone having all of your client-side source code; the worst they could do with it is clone your site and make a bad, hacky reverse engineered attempt at emulating your backend API.

If you think hiding your application structure or references to API endpoints secures you, then you're doing something very wrong.
Science, Superstition, and Open Plan Offices
One of the things I despise about academia is the need (and sometimes the arrogance to) give every project/idea/framework, no matter its size or importance, some silly acronym.
I thought people stopped complaining about the Linux Kernels lack of Modularity in the 90's when Linus made it clear he's running the project how he wants, and the world can just get on board, or get off now.
Bash+mac pushup instructor script
I'm too poor to afford a fitness instructor.
The REvolution of BBQ: the most versatile electric grill
Congrats Ryan!

I know you might not be able to talk about it much, but the article
states "re-introduce a CloudFlare VPN service later in 2015" but
I'm wondering, "Why late 2015?"
Knowing what I'm building (as much as possible) before I start building produces better (more stable/flexible) code. I wouldn't suggest trying to build a foundation w/out knowing what's going on top of it
My $.02, getting things done and getting into gently with least amount of surprise == Ruby, next up would be Python and Groovy (a tie)... Then maybe kinda probably Java or C#. After that you're in the
Relating to the excellent amount of funding Cloudflare has been getting...

How exactly does Cloudflare afford to be a reverse proxy for millions of domains, at absolutely no charge? Are there some economies of scale I'm missing here? Obviously they make a good amount of revenue from their premium plans, but I suspect the vast, vast majority of all their users are on the free tier.

They're nearly an ISP at this point, so from a very naive outsider's perspective it sounds like they would be bleeding money from this approach.
nice! I was playing with a similar setup in JavaScript and ArangoDB some days ago: http://thinkingonthinking.com/commonjs-for-databases/
New Entry Level 21.5-inch iMac
Why draw the line at family and friends? It's a natural place to draw the line. I think if you study psychology and the evolution of the human mind that's pretty obvious.

Additionally if you want to reason in a framework of debts, then you probably owe the most to your friends and family. You owe your entire existence directly to your parents -- it's hard to top that! Might as well stop there and just accept you have some unquantifiable amount of direct debt to the family who raised and protected you and the friends who spent time with you freely as opposed to doing something else. You can try to talk of indirect debts owed to and by "society" etc. but those quickly become spaghetti and in my opinion nonsensical. They're diffused and for some groups entirely non-existent, their lifespan is indefinite (you owe a part of your existence to all the warriors on whatever side of the conflicts your victorious (where victory means they could reproduce or their existing children were spared) ancestors took part in!), it's usually very unclear just how much is owed to whom, if it's even quantifiable, and how or if one can repay, and if you allow counterfactuals (like indirectly owing part of your existence to anyone who has had ill-thoughts toward your mother while she was pregnant or you during your life, but who didn't act on them) it becomes ever more ridiculous. And this is just as a reasoning framework -- can such a ridiculous construct actually motivate people to donate to some charity feeding starving kids in Africa and generate warm-fuzzy feelings of similar magnitude to gifting and helping out friends and family?
Santos (a lite test framework for Node.js)
Here you can try brix.io without login: https://app.brix.io/brix/preview.html?p=2052 - Read Only
For me, using FF (various versions) and IE: Just a black background. It worked yesterday - they must be updating something.
Obviously they make a good amount of money from their premium plans

You answered your own question.

They're nearly an ISP at this point

Not really, CloudFlare doesn't have any 'last mile' to pay for.
Show HN: Startup Scriptures (feedback welcome)
I started Startup Scriptures as a side project to aggregate great content for people on the entrepreneurship journey. Is this useful? Can it turn into a business?
Perhaps the vast, vast majority of their users receive very little traffic?
Elon Musk: I'm Worried About A 'Terminator'-Like Scenario
"We refuse to be enemies"
Classic Nintendo Games are (Computationally) Hard [pdf]
Hmm, seems we're talking about 2 things here.

If your ajax request requires long task processing and requires you to wait for it than this is not a background task any more, it's done in one of the web server threads, and even if the thread outsources the task to another process it's still waiting on that proces to finish before returning the ajax response. This is bad.

I'm not entirely convinced about websocket solutions in Python yet, but I've been told flask-websockets is awesome. Nevertheless this doesn't solve the problem for you. Cause the request is just keeping an open line and waiting for a respone....blocking is bad.

The most simplest advise I would have is to have the ajax request trigger a background task and return immediately. The background task will then have some kind of side effect (ie. write some result to a database somewhere) which the ajax request can the look for with some kind of polling mechanism (on some other endpoint). Of course you can complicate this a lot, depending on your needs, but this seemed like the most straightforward solution.
Show HN: I wrote an ebook about community products and it's free today
It sounds like the developers found a critical flaw, and gave up. I'm not saying its purposely malicious government inserted, or just plan negligence.

But from this response and how their website changed really makes me inclined to believe something is fundamentally broken in truecrypt.
Really, GPS is what you're going to call it? That is a bad idea for a bunch of reasons, mostly practical (GPS already means Global Positioning System to just about every American and search engine, etc.)
Most functional languages don't really go for any ORM. It's usually considered a cumbersome abstraction for relational databases. Clojure makes it really easy to use SQL directly with the java.jdbc package [1], or through some helper library like SQL Korma [2]. There are also several migrations libraries you can use [3].

It takes a bit of getting used to coming from an ORM, but you'll love the lack of overhead soon enough :)

[1] http://clojure.github.io/java.jdbc/

[2] http://sqlkorma.com/

[3] http://www.luminusweb.net/docs/migrations.md
You lost me at "ongoing globalized war for human rights".
Pingdom is joining SolarWinds
…this acquisition is as much about acquiring the security chops of Ryan Lackey as it is about getting into the VPN business.

CryptoSeal customers have been notified that the service is being shut down. For now. Both Lackey and Prince told securitycurrent that they would like to re-introduce a CloudFlare VPN service later in 2015.
From Banker to iOS Developer
awwwwwesome.
Yes, I know that is the point being made. But that's a very small bit of fall-out from a huge improvement.

OP is right in fact but this is a rarity, overall google search results improved and the fact that the whole SEO world is in panic about this (proof in my inbox) is fantastic news. That it can be used for bad purposes is obvious, those that were gaming before will game this just as much. But rather than being in denial about negative SEO google should simply come clean about the numbers, any kind of classification system has false positives, a categoric denial is simply something you should not believe.

And in spite of that Google should stay the course, they're not a court and nobody has an innate right to an x% of search traffic. If that were the case we could replace google with a link lottery.
I enjoy using Parsedown, but this is literally over a year old. This is hacker "news", right?
so, what are the contestors? as usual it depends on the problems you want to solve
There is no way negative SEO doesn't exist. As long as Google penalizes sites for link schemes those same schemes could be used against their competitors.

For example, say I'm running xrumer and spamming forums to increase my ranking, which was common pre-penguin. Google releases penguin and my sites rankings start to tank. So instead I switch to spamming my competitors links and Google penalizes them also. Good luck as a site owner trying to remove thousands of junk forum links especially when the forum owner thinks you were the spammer.
Just to be clear, this doesn't really seem like a problem with Docker specifically. It looks like a problem with the kernel's namespace isolation, affecting any container-based solution. Yes, that's in the PPS, but probably should be in the title.
I think you may be missing the point of the article. It is now possible to basically DDOS someone out of their rankings, even if their rankings are legitimate.
The thing is, it seems to me like a lot of sites that get a ton of traffic still use their free tier. There are no actual bandwidth limits at the free tier, just some missing features. They never require anyone to upgrade.

Even their higher tiers are pretty cheaply priced, including enterprise level: https://www.cloudflare.com/plans
This would be pretty cool for sports in general. I wonder what the demand is like.
There are huge economies of scale; bandwidth gets a LOT cheaper when you're buying it in CloudFlare-sized quantities.

Another "secret" is CloudFlare doesn't do video (which is documented all over the product). Video is huge; every other kind of traffic combined is still pretty small compared to video.
php-mode is quite a glaring omission from the official emacs distribution, but emacs itself being managed by FSF/RMS himself he's quite picky about licensing.

That being said, on debian/ubuntu, php mode is "php-elisp" as an official package that you can install system-wide.
CloudLix $10 1.5GB - 1 Core - 50GB SSD - 100Mbps 'unmetered' http://www.cloudlix.com/nuolaida;1bb1f52aa5 (thank you).
Google is About to Ruin YouTube by Squeezing Indie Labels
It looks surprisingly nice for an in-house app. Usually there's no point to focus on web-design for these kind of apps since the public won't be able to see them anyway.
No, I got it. it's just that Google will need to admit the problem exists and will need to deal with it openly (ie, admit that none of their methods are perfect) and explain that any kind of classifier tends to have false positives.

And the OP should bolster his case by naming names instead of hiding behind being afraid that he might become the target of exactly such an attack. I would say that would be easily resolved if the proof was strong enough.
I read it as "later, in 2015" opposed to "in late 2015". Meaning, not now, but in the future -- sometime in 2015 possibly.
They never require anyone to upgrade.

People upgrade to get better service (including the missing features) not because of some artificial limit (like bandwidth). If you upgrade because you want to, not because you have to, you're likely a better customer.
It was supposed to say "in 2015".

1) There are a bunch of other more-interesting and more-critical projects coming up. There is cool stuff still to be done in the VPN space, but the basics are out there now.

2) CloudFlare is already a huge network; it only makes sense to do something like a VPN if/when we can do it really well.
Yes, that's true. I use Cloudflare on many of my sites, and they're basically ghost towns.

However, to my understanding, Cloudflare never requires that a site with a certain amount of traffic must upgrade to a certain tier. I believe there are many sites with lots of traffic volume that are still on their free tier. There are no bandwidth limits or charges at any tier.
The closing paragraph:

Media attention has focused, not unreasonably, on ISIS’s use of social media to spread pictures of graphic violence, attract new fighters, and incite lone wolves. But it’s important to recognize that these activities are supported by sophisticated online machinery. ISIS does have legitimate support online—but less than it might seem. And it owes a lot of that support to a calculated campaign that would put American social-media-marketing gurus to shame.
black hat SEO 2.0!
Do you think google can determine that your spammy link came from you or some other "seo"? I don't. There already is proof that these spammy links damage your ranking since penguin. Google even admitted it. That was the entire point of those updates. The only thing they have avoided is coming out and saying "negative SEO is a thing". As long as rank penalties exist negative SEO will exist.
Patience diff algorithm benefits for darcs
It's unclear to me if the licensing terms of TrueCrypt allow others to fork it even without the developer's permission, perhaps without the TrueCrypt name?

Resources were invested by some to audit the code. The developer is uninterested in letting the code go on. I think the lesson is, don't invest significant resources in supporting a shared codebase, unless it's got a license that will let people continue to use/develop the codebase even without the original developer/owner's permission.
I can only assume that the person who posted this was "Matt" as signed off on the original email, but Matt who? Why should we trust this?
Yes, I've seen you writing about it, but it was not done in the end. (at least not the link spamming that's mentioned in this article) Even worse, the article mentions "Any of those might work, but none are particularly reliable. Most actually stand a good chance of positively influencing their results instead." - which rather indicates that it's hard to do really negative SEO even if you try.
Matt doesn't want to admit it but we all know it's true. The algorithm punishes shitty links and they can't tell if those shitty links were generated by me to increase my ranking or by a competitor trying to harm my ranking.
In 2006 or 2007 I was running a non-trivially sized project for a government agency, and we wanted to use TrueCrypt on every new machine we were rolling out.

The default licensing arrangement certainly meant we were (legally) covered, but we sought out the author and offered a financial arrangement in terms of support (we weren't proposing an especially onerous arrangement, and were quite clear in our 'improvements we fund, we're happy to go back to GPL' and it was very much an early stage of negotiations from our perspective). Weirdly it was dismissed outright.

Highly anecdotal, and the guy I had that contacted the TrueCrypt author may have given the wrong impression (unlikely), but since then I've always felt the project was in the 'slightly odd' category.
It's as smart is a lobotomized monkey.

Oi! Don't be hating on lobotomized monkeys! After all, they made a web browser....
"tested with docker 0.11"

Looks to be a few releases out past 0.11, notably 0.11.1, 0.12, and now 1.0. Can anyone confirm this works on the later versions of docker?
Sure. "Good artists borrow, great artists steal."
Nice (free) ebook on product management in agile
Maybe we are reading a different page, there are some papers showing what IS, not what COULD be :

> it was shown that over 663 different species were negatively impacted by marine debris with approximately 11% of reported cases specifically related to the ingestion of microplastics

> Increased oceanic microplastic debris enhances oviposition in an endemic pelagic insect

And so on. The rest aren't "vague alarmist statements", but sensible evidence based predictions. They may or may not turn out to be premature, but given that :

- the absense of microbeads isn't a serious issue for humanity or even quality of life

- there are known alternatives (listed in the article)

- if the predictions turn out to be true, it will be too late to do anything about it then as they can't be cleaned up

it seems sensible to take precautionary measures now.
> It's not one aircraft with 3 different roles. It's 3 entirely different aircraft sharing some elements.

And yet each design is to some extent compromised by the needs of the other two. I totally understand that VTOL is cool, but why does a VTOL fighter have to have anything at all in common with two non-VTOL planes? Make it a separate program.
The CryptoSeal VPN service for consumers got shut down in the fall of 2013 and all the users were migrated off in 2013.

The business managed VPN service was super easy to migrate; we had dedicated infrastructure for customers, so it's just a matter of transitioning that to a different ownership agreement in the same colo cage; the customers were notified in advance and are fine with everything.
The "community" cannot blacklist anything, it's the miners. And it is very unlikely that miners with >50% of the network hashrate would agree to this, since most heavy miners don't really belong to the "community" but are just in it to mine enough to be able to sell to cover their hardware and electricity costs.
We are leaving Google Wallet
مسابقة وظائف التربية والتعليم 2014 الشروط التخصصات التقديم الاوراق المطلوبة
If the author is not willing to unmask him or herself, I'm not convinced courts would allow an author to maintain anonymity while suing you for copyright violation. Particularly given the specifics of this case: the copyrighted work being freely available, and the author publicly stating that it's abandoned.
"Could" but I don't think so. No land lines will work, which other 2FA providers support. Only mobile, which is almost as good as an SSN because of portable mobile numbers. 2FA is a crutch to get my mobile number. That, or the fact that every advertised workaround has been "broken" for several years straight in the Yahoo registration process is explained by Yahoo simply being inept.

Stupid or nefarious, I'm not sure which.
Yes but Google has ways to manually override things. You don't think Cutts could get that done? It would be better to target some poor unsuspecting blogger but that would be pretty cruel.
that's true to some extent, but it also has to do with which namespaces and isolation features a given container solution supports, for example lxc has seccomp syscall filtering support and user namespace support ootb which would have mitigated this attack surface to those of the unprivileged user running the container (and covering the ps on kexec). in addition lsm usage (selinux, apparmor) can also limit the attack surface area.
I am no expert, but logically you could explain this behaviour of apparent negative SEO by Google discounting all links to "blue widgets" and the sites that market blue widgets that are now ranking higher, achieve this because of other links that are not being discounted by Google.
Funny how these trade agreements always "harmonize" downwards.
Head of Google's Web Spam team is a position with too much power. For those dealing with Google, that's probably the second most powerful seat (after Larry/Sergey tie for first).

Absolute power corrupts absolutely. As such, no one person should occupy this seat for any significant tenure.

This comment is in no way a negative comment about Matt, just talking about the temptations one must face in such a powerful seat.