skysight-inc/HackerNews huggingface dataset:
I noticed that in the weeks and months before Silk Road went down, we had some interesting things happen:

1. several articles like this one
2. statements from the FBI that it was untraceable
3. the implication in tech media that it was 'safe' to use, with usual caveat emptor verbiage.

I know we have a sample size of one here, and there's no guarantee that steps 2 and 3 above will follow - but to me, it seems that mainstream coverage of anything like this is a sure signal to bail out.
Ask HN: Best practices for service,change and incident management?
My company is trying to rethink it's approach to these topics. Currently when you want to demand something like new server in the cluster or request a firewall permission, you have to go through a lot of categories. In example; Security -> Firewall -> Production -> New Permission. Are there any best practices for these topics where you can avoid category hell and lots of workflows?
> I use two-factor with owncloud,

What are you using for the two-factor?
I thought it was satire because

>I don't like to be tracked.

>Phone OS: iOS, etc

But now I think it is serious, if not highly deluded.
Build a very complete profile of you, sell that data to advertisers. Maybe tell insurance companies that you frequently do high risk activities. Sell the information that you were at the beach when you took a sick day. This list could go on and on.

Another thing: Imagine someone would get HD video of your room while you slept in it. I can't imagine what use it would be but I absolutely would not like to be filmed like that.
The statement doesn't exactly ring true. If your security practices are lax (as with the unlimited login attempts workaround) and someone gains access to someone else's private data, isn't that in itself a breach? Sure, they don't have access to internal databases or anything, but it's the difference between robbing the bank's vault and robbing one person's safe deposit box. A breach either way.

On another note, does anyone else think they're going to have to talk about this first thing at the iPhone event? They have an opportunity to clear the air with all eyes on them, they'd be fools not to do so.
I think using m() with CoffeeScript or LiveScript results in much more concise code than React.DOM. with JSX.

Well, you got to like semantically significant whitespace for this.

On the other hand, Mithril offers something like JSX, so the <> and ; crowd should be happy.
So you're saying you're ok with me knowing everywhere you've been for the past few years?

I'm going to assume then that you don't visit strip clubs, bars, 'adult book' stores, the house of your drug dealer, the house of your secret lover, a proctologists office, an OBGYN, an abortion clinic, or a million other places. You may not visit these places, but many others do, and having that information publicly available could be devastating to families, careers, entire lives.

On the other end of the spectrum, say you happen to be in the general vicinity of multiple burglaries at the time these crimes are believed to have happened. You're arrested and have to prove your own innocence.

Or maybe someone who wants to do you harm looks at your data for patterns, and goes to the right place at the right time to rob, extort, harass, rape, even murder you.

In general, I think having your location information public is a terrifying prospect.
How do you get accurate head counts?
A Bash shell is an command line interpreter. Bash is Turing complete and even supports more advanced programming paradigms than those early BASIC machines did (eg functions, different scoping, more advanced debugging and error handling, forking, etc). This is all just built in commands - I'm not including any other POSIX user land. In the right hands, Bash is every bit as much a REPL environment as an interactive Python or LISP shell.

I don't understand why you're discounting Python here though. Would you mind explaining to me why a REPL BASIC shell is different from a REPL Python shell aside the 20 years age gap between them?

One last thing, as I noted in an earlier comment, most of those BASIC micro computers did also support other languages and shells. The later models of the BBC Micro came with LOGO in addition to BBC BASIC and also supported Fortran, LISP and a few other languages. My Amstrad CPC 464 runs Locomotive BASIC but I also have a CP/M disk for it. And around the same time (and a even a few years earlier) there were LISP machines and other computers which booted into other language shells.

BASIC wasn't unique nor special in the regard that you're praising it for. Neither back then then nor now. What made BASIC micro computers special was how simple the language BASIC was (otherwise we'd all be looking back fondly of our Fortran or LISP machines!). And this is why I make the distinction between the shell and the language. Because there's always been and always will be a large array of similar REPL shells - the key distinction between them being the accessibility of the language.
"Much easier" obviously means something different for you. So many utilities have "-r" meaning "recursive", for example, so it requires a real mental shift to think of it in these terms.

Describing transactions with arguments seems clunky at best.
Ask HN: How to apply 10,000 hours rule as a life-long learner
If you want to alpha-test it, we’re also working on a Mail app for ownCloud on the side: https://github.com/owncloud/mail

Just clone it, install the dependencies via composer and you’re good to go. It’s just an IMAP client at the moment, but multi-account and when the IMAP server is on the same origin as ownCloud it’s quite fast. Feedback very welcome!
Notes on the Celebrity Data Theft
do you work for apple?
Are iCloud, iOS, Apple Maps or Safari part of DDG?
I, too, am very unhappy with Google. They're obviously intentionally trying to get people to get used to giving up privacy. From the moronic system Android has, to the tricky dialogs Chrome puts up, they don't like the anti-tracking sentiment.

But... DuckDuckGo just doesn't compete on search results. I changed to it as my default search engine, but I ended up going to Google most of the time.

And switching away from Android... I tried to move to Windows 8 / Phone, but the ecosystem is a joke. Desktop apps don't work well on their small tablet form factor, and the Metro apps are laughably terrible. Microsoft can't even prevent total scams, like $9 fake Netflix and HBO. And they ignore reports about them.
More a refreshment from the past.

WinRT is COM based, similar in concept to Ext-VOS, the percursor of .NET, before it got folded into .NET.

http://blogs.msdn.com/b/dsyme/archive/2012/07/05/more-c-net-...
When cheap is not so cheap: rethinking manufacturing locations
You're right. I guess I have too much faith in the average user to not pick a question with a potentially obvious or easily discovered answer to it.
Hygiene hypothesis: difference in autoimmune diseases in Russia, Finland (2012)
> After more than 40 hours of investigation, we have discovered that certain celebrity accounts were compromised by a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the Internet.

>None of the cases we have investigated has resulted from any breach in any of Apple’s systems including iCloud® or Find my iPhone.

Um... doesn't "a very targeted attack on user names, passwords and security questions" count as a "breach in... Apple's systems"? A social engineering hack is still a hack.
Show HN: Knowtify Hackday – Email Digest for Early Stage Investors
How? Did you have another email account attached as a backup that was compromised?
cant wait for this info on all hot spots!
While I wouldn't disagree with the stupidity of "security questions" answered straight, I don't know if this is something to lay on Apple's doorstep, because anyone with a modicum of knowledge either lies or supplies "custom" security questions-- it's basically a "if you forget password A, remember password B" system. But explaining that to users who have issues with a password is a lot more far-reaching and widespread than any one company.

Additionally, making "security questions" passwords in and of themselves is going to tremendously increase the volume of your support tickets. At some point, you need to make a cost/benefit analysis and make a decision including that, not just looking at "what's more secure if we assume our users are stupid".

If you really want a niche market, though, "social media security consultant" for celebrities would probably make you a pretty penny nowadays...
How Many Minutes of Working Minimum Wage It Takes to Buy a Big Mac
I did not know iOS and Apple Maps are more privacy centric than Android and Google Maps. Is that really true?
I wonder how long this extra availability will last. Meaning, cab companies are not in the business to lose money and probably staff appropriately. With Uber/Lyft being recent to the scene your bound to have a lot of new drivers who are trying to make a go at it. How many will be around in a year, let alone covering those "bar outings" that could benefit from service but don't have it.
Sugar and white rice are on that list and you single out potatoes?

Yes, sorry - I singled out potatoes as a decent food, while the others are truly horrible.
If I go to upload file A.zip to Dropbox, and it already exists in someone else's Dropbox (has a matching hash), does Dropbox bother re-upload the entire thing?

If not, then perhaps there's a way to test if the files came from Dropbox or not.
It's pretty concise using Coffeescript: http://blog.vjeux.com/2013/javascript/react-coffeescript.htm...
Adapters in Ruby (on Rails)
The Recruiter Anxiety
Not really. There's a perfectly valid distinction between accounts compromised by poor password recovery processes and more general ways of compromising the system, ie attacks that require targeted information about the account being compromised and attacks that compromise many accounts at once.
Maybe this is an opening for someone to build some Linux distros in the flavour of old micro computers...
Corporate answer: big, hairy proprietary algorithms. Startup answer: straight magic, yo. Real answer: manual for this week. We're doing a couple things that don't scale to validate a concept.

For accurate, autonomous counting, we use this little guy -- https://s3.amazonaws.com/screenshots.angel.co/73/340163/7982...

We're gunning for city-wide, real-time movement.
> But what if I hate JSX? It's such a tight coupling to the DOM

It has nothing to do with DOM in principle.

It's just a convenient XML-like declarative syntax to describe a component tree. Think XUL [1] or Gtk+ Glade [2].

The <a>, <p>, etc. are components on the React.DOM namespace that output DOM nodes of the same name.

[1] https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XUL/Tu...

[2] https://glade.gnome.org/
Is there a good non-google alternative to Docs / Drive. I read the article hoping to find one, but didn't see any mention of one. Having a non-google version of a service which allows collaboration and modification of documents through a web browser, without additional software installed would be nice and I feel it must exist, but don't know where to look.

Anyone got a recommendation.
Security Compass - Toronto, Canada

Are you sick and tired of hearing about security breaches that could have been prevented? Are you ready to have a material impact with a team that's actually making a big difference in helping companies build secure software? Join us at Security Compass, to help build our flagship product SD Elements. We started in 2011 and we're on track to grow over 2000% over three years.

We're looking for web developers. An interest in security is a must, and experience with Django is highly beneficial but not mandatory.

Learn more here: http://www.securitycompass.com/company/careers.html
Got this as an interview question at Blizzard. Failed pretty spectacularly. I kept getting close but then the interviewer would jump in with "Well think about it this way...what if blah blah blah?"
Isn't that a McCarthyism problem, not a data problem?
...because you have nothing to hide?

https://duckduckgo.com/?q=privacy+nothing+to+hide

You are asking your question from a position of luck (that you, in particular, can afford to be an open book) and mostly at the wrong level. It's not about how it will affect you, it's about how it will affect him/her, and us.

Improving your privacy helps people who have legitimate things to hide avoid unwarranted suspicion, and it also makes our society better.

Secrets are sometimes bad, but are far more often good -- allowing us to have functional foreign relations, strong individual rights, and the ability to communicate freely about ideas central to our republic. No good will ever come of the ability to Google: "people unlikely to toe the line".
Is it still a social engineering hack if a well-known celebrity with their personal info broadcasted all over the internet decides to use that personal info to secure their account? Or rather, is that a social engineering hack on Apple, or the celebrity themselves?

And what should Apple do, in this situation? If your names show up in tabloids, don't allow you to answer certain security questions? Require 2FA if your name is mentioned on Google more than a certain number of times?

I don't feel this is an Apple problem any more than it would be if someone created their iCloud password and then posted it on their Twitter.
My thing isn't that I don't trust any one particular Google product. It's that I don't feel safe putting all of my eggs into one basket. A year ago, Google was my phone, my search engine, my email, video hosting, my DNS, my IM service (GTalk when it was still a thing), and cloud storage system. That's a lot of personal stuff all tied together under one account. So I split things up. I hosted some stuff where I could (email and online storage) and used different services/products where I couldn't. But I also continue to use Google for my search engine.

I don't really see it as a question of if Google will screw up with people's data, it's a question of when.
I was thinking on making something like this, I am happy you beat me to it. Just remember, this should be used for discovery.

Scratch that, google docs for submittal :) seriously?! Even graduates from devbootcamp's can do 100 times better and we should give them some slack.
Clojure Cup
This is a project team Knowtify worked on last Friday. We live blogged the event using Reddit Live. http://www.knowtify.io/live

There are a few ideas behind the live hackday. 1) We wanted to build a product ontop of our API 2) This gave us a better understanding of our app...read more. http://blog.knowtify.io/post/96460808026/the-gekko-daily-dig...
What is that "little guy" called?
I've said it before, the 99percentinvisible podcast should be right up the alley of the hacker news crowd.
It's obviously not smart to rely on one company that heavily, but I can see his reasoning behind using Apple products. I too am not using any Google services if I can help it but if I had to make a choice between giving my data to Google or Apple, I'd choose Apple. Not because I trust Apple more than I trust Google, but because I trust their source of income. Apple's business is to sell you hardware, while Google's business is to gather information about you so it can show you ads.
From what I've read on 4-chan, Ars, Slashdot (indiv. comments, not articles) and other sources that this wasn't one person hacking a group of celebs acount, but a leak from an underground celeb nude trading ring that has existed for a while. So multiple hackers over a long period of time, from multiple sources.

link to one explanation:
http://i.imgur.com/vnd0H9J.jpg
No, but since some of his suggestions are DDG and he is the DDG CEO, questioning his integrity doesn't seem so far-fetched.
I would love to know more about the specific setup they use? Do they use snowflake or something for sharding?
Coming from Google Apps and currently using Fastmail: It's not as good as Gmail. I still get spams in my Inbox but they are not really a deal breaker. I've been using Fastmail for over 3 months and I'm rather happy about it (just paid for a yearly subscription). I'd suggest you to try it out with a 3 month subscription. You can always switch back; it's just a couple MX records after all.

Oh btw, fastmail also has CalDav (Calendar only; no Tasks) and It's been working well for me too.
Do you some figures around improvement from changing thread_handling to a pool instead of one per thread?

The queries on my db server, fit the documented use case for this feature - lots of short live queries.
While the <picture> and <img srcset="..."> are a step towards responsive images, but I personally see them as too complicated for developers that just want to get things done fast. The complexity of the new standards will slow down their adoption even more than the browser support.

For an example, we solve the adaptive images server-side problem with our SaaS image compression service http://www.slender.io/ with smart recompression & a few content negotiation tricks. Some of our customers would like to use <picture> and related polyfills for their sites, but their designers struggle defining the target image sizes relative to viewport dimensions, not the size that the image is/would be layouted. As a result, adoption on both smart browser and server-side solutions are slowed down.

The article mentioned element queries, that will hopefully solve this problem, but make the browser implementation much more complex. While the browser could resolve the normal media queries already when preparsing (e.g. it knows the viewport dimensions all the time), I understood it would know the element queries only after layout, partially defeating the whole purpose of preparsers.

It seems web standards are making things as simple as layouting insanely complex. While I am sad about all that artificial complexity, I am happy that no WYSIWYG editor will automate my job any time soon. :)
I don't see how; how are they preventing others from doing the same?

There's a saying in Germany - Wo kein Kläger, da kein Richter (sort of a legal principle: Non ultra petita). Uber only could get away with breaking the law because no one complained. Someone now did. Case closed.

Well, the you can surely provide an example of a cartel which has achieved monopoly without any help from States, just as the result of market failure.

You really need references for that? It should be obvious. There are markets that lend themselves to big business. As soon as a few big players have cornered the market, it is in their best interest to play nice with each other so that 'everybody' wins (at the cost of their customers, of course). This creates a de-facto monopoly that might or might not be viable long-term (backstabbing probably will happen someday).

Historically, there's been a lot of that going on. The most recent case I remember were some German sugar manufacturers, but I could probably come up with hundreds of cases; it would be a waste of my time, though.
This. Right now I'm also more comfortable with Apple having my info, because their business is built on providing me with a premium product & charging me for it. Google is built on monetizing my data and selling me better ads.
+1, but I'm a little biased ;P
Afghanistan's first Female tech Entrepreneur
Here Be Cannibals: Reports of Contemporary Cannibalism in Borneo (2005)
Famo.us - Full Time in SoMa, San Francisco

We're looking for JavaScript Platform Engineers who are excited about mobile and web development! You'll be a key member on the platform team in supporting our Website, Mobile or Advertisement Teams as well as designing the core architecture of the framework.

https://jobs.lever.co/famo.us/e911d1a1-6b67-4ac7-9604-6965d6...
https://jobs.lever.co/famo.us?lever-source=hackernews

Demos: http://famo.us/demos/
You don't even have to have been there at all. Once an entity holds all your personal information like that, they can just say "Oh you were here, here, here and here at these times" even if it was not true. Who would doubt them? After all they have all the information right? RIGHT?

Perfect way to set up someone you don't like.
I could be wrong, but I think the "M" means thousands in this case. I know it means thousands when dealing with inventory UOMs. 100 million lines just seems like a lot, even for a code generator, and not something that would be turned over to a single team.
Ah, so the problem is not having your data.

By the way, I think iAds pertains to Apple, not to Google.
> "Like most people, I don't like to be tracked. I also am the founder of the search engine that doesn't track you, DuckDuckGo."

It pains me to hear intelligent people talk about being "tracked" as something "bad" a priori. While there are certainly plenty of examples of abuse of knowledge, I tend to think of most "tracking" not as "stalking" but as "relationship building." Let me explain...

Google is a service provider that I frequent, just like my coffee roaster or my stock broker or whatever. Over time, service providers develop a relationship with their customers based on knowledge of that customer. This knowledge helps inform how they provide and improve their service. My coffee roaster knows what kinds of coffee I like and makes appropriate recommendations when new beans arrive. My stock broker knows what kinds of risks I like to take and gives appropriate investment direction.

Ok, so I don't really have a stock broker but... My point is: I appreciate that google is aware enough to know that when I search for "hash salt" I'm not talking about potatoes. DDG shows me recipes and first.

The problem (as with most things that are hot-button issues) is that the most talked about thing - "tracking" - is a red herring. The REAL issue is accountability. True information lockdown rarely benefits anyone, but openness without accountability is useless and downright dangerous.

Suggesting people flee one provider's services and head to other providers who are not concretely more accountable (just because they "say so" doesn't make it true) is simply being petty. We should instead be spending out breath advocating for greater accountability in the system as a whole.
Do you seriously believe that's how conspiracy cases work? "They were in the same restaurant several times, they must be involved in a criminal conspiracy". I guess every waiter, cook, hostess is also indicted for conspiracy as well, if that's all the evidence they need.

Google doesn't issue speeding tickets. If the government were to issue a ticket for every single instance of speeding and even 1% of them contested it, the system would be so clogged with paperwork that it would grind to a complete halt.

Personally, no I haven't been to the doctor. People go to doctors, though. That's not a big secret. Are you personally on the lookout for every single person who visits a doctor so you can...make fun of them, I guess? Do you imagine other people are?

An abusive spouse/stalker already knows where you live. If they're that motivated and want to find you, they'll wait outside your house. Hiding the information is not a solution to that problem, those people need to be arrested and incarcerated.
How they use the data is independent from whether they collect it. Both products log that data. Is the usage of that data to display more relevant ads really such a terrible thing that you would use an inferior product?
The CDC 180 sounds pretty interesting from the WP article, and, I agree, 64-bit. So not just supers then.
HTTP Client Hints - New draft imp. of Client Hints for <img> and <picture> for Ruby.
https://github.com/igrigorik/http-client-hints