skysight-inc/HackerNews huggingface dataset:
Or better yet since dashboards are so terrible, let's all go download 10 million line CSV files. While I've seen my fair share of terrible/useless dashboards, many do provide some sort of insight into the data that previously would have only been gained by aggregating log files or running complex sql queries.
You did well. Sandwich video is just for a different market (VC funded start-ups mainly it appears).
About the same, they tear up streets too.
Yeah, that's usually what "develop" means in an intel context. It's "recruit".

Although you'd probably start by developing a list of targets, then learning (open source, government records, etc.) as much as possible, then maybe task someone with observing or recruiting.
You should learn JavaScript
well, elitism _was_ part of the thing.

Please note I am merely reporting what I remember was the most common way to refer to non tech savvy people.

This is the same culture that gave us LART, PEBKAC, cluebat, and of course the BOFH.

Interestingly enough, in italian we used "utonto" as a blend of "utente" (user) and "tonto" (dummy, simpleton), showing the feeling was shared across language barries within similar groups.
PyMongo almost 2x faster with PyPy
>but this is the business of the Ukraine and not Russia.

Well, it was also not the business of outside powers, EU and US for starters, who supported (including secret funds) the toppling of the legitimate Ukranian government.

Second, countries with active invasions/occupations far away from their borders, with no local population there, under false pretexes, and with 100 times the casualties and force, have so little moral high ground on this it's funny.
I have an Asus ux31a zenbook prime (i5/4g/256g), running Ubuntu 13.10 currently, everything works fine except for the ambient light sensor. I had to have the keyboard fixed under warranty about 4 months in, otherwise it has been great. You can pick up a refurbished model in your price range.
Is it really possible to protect yourself and your network from these types of attacks? Any company with sysadmins or internal security teams is extremely out gunned against someone like the NSA (it is almost comical) [1]. From the perspective of a sysadmin, who has worked in startups, small companies, a university, and several government departments, I can firmly tell you that, we are not in the same league! Sure we take the yearly security courses, use best practices, harden machines and infrastructure, but after reading these articles.. we are sitting ducks. If the NSA is in bed with US based network gear providers, they can simply own the network and telecom infrastructure (via build in backdoors), and you do not even know they are there, because they side step the normal exploit channels [2].

Probably the best way to describe this, is to compare security and pro sports teams. From what I have read, the NSA is a top tear team winning championships across the globe, with billions in research and development, and thousands of highly trained athletes, living and breathing this day in and day out. Yet, they are matched up against a local beer league who likes to play casually Thursday nights. Who do you think is going to win?

Go read the "A Look at Targeted Attacks Through the Lense of an NGO" [3] paper, then put yourself in their shoes. Think about the IT resources a small NGO with 30-50 employees has. Maybe they have a sysadmin and a helpdesk guy. They are dead meat. The threats are so vast, spear phishing, target malware via MITM attacks, etc. It almost seems hopeless. But it is not just the NSA at the top of the heap, you have lots of foreign governments, which have direct access to your playing field via the internet.

Think about the resources that Google, Facebook, and Apple throw at security, then you see something like Operation Aurora [4, 5]. What chance does an ISP or small business have? None. Personally, it just seems like the entire model is broken. Yet, nothing seems to change, in that we are all just waiting for the next zero day to drop, and the cycle continues. All it takes is one targeted zero day addressed to a normal employee, the attackers gain access to the network, then move laterally [6, 7]. The odds are further stacked, in that you have a top tear team against a targeted employee, who doesn't even know the game.

ps. sorry for the tone of this

[1] https://firstlook.org/theintercept/2014/03/20/inside-nsa-sec...

[2] http://www.theguardian.com/world/2014/aug/13/snowden-nsa-syr...

[3] http://www.mpi-sws.org/~stevens/pubs/sec14.pdf

[4] http://www.wired.com/2010/01/google-hack-attack/

[5] http://en.wikipedia.org/wiki/Operation_Aurora

[6] http://g0s.org/wp-content/uploads/2013/downloads/Inside_Repo...

[7] http://intelreport.mandiant.com/Mandiant_APT1_Report.pdf
This is bad news. Strange coincidence, but last week I just bought Lode Runner for Android. :(
Law enforcement doesn't have the entire call graph. They have a service, that they can request specific data from, that takes 2-5 days to return the requested information, which is pretty much only "additional phones, and switched phones", and they have to have a subpoena to get that data in the first place. This isnt some google search they can mine for whatever. The 2-5 day lag is almost certainly paperwork bureaucracy verifying that they have a legal reason to search the database.

I suppose the folks at the "Hemisphere Regional Data Center" could theoretically match up the names to the phone numbers (not AT ALL trivial - I used to work with credit header data and telco record data - the data quality is an absolute shitshow), but that power certainly is not in the hands of any local law enforcement.
This looks like a really cool piece of kit, but sadly it was introduced with an unwatchable video.

> "Our technology fundamentally enhances human capability"

No it doesn't. You've made a HUD that fits in a motorcycle helmet. You haven't created Iron Man.

The statement is then shortly followed by some obnoxious dubstep. It's a shame because it completely put me off looking further at what could be a great product.
Thank you for your help, it is appreciated!

EDIT> I find it weird that most of them expect over £100 a month to be able to use a desk = (
Ask HN: Looking for an All-Star Intern? [Bay Area]
Are you looking for an intern to knock your socks off? Your search is over.

What I bring:

------------------

+ Available 30+ hours a week

+ Knowledge of Java, C, Python, Ruby

+ Can learn new languages quickly

+ Excited to learn new technologies and languages

+ Quick study (Show me once and I have it)

+ Excellent creative problem solver

+ Hard and dedicated worker

+ First hand experience with hard deadlines and willing to stay late to meet them

LinkedIn: https://www.linkedin.com/in/ryaneager

Email: Ryan.Eager@Gmail.com
https://news.ycombinator.com/item?id=8316264
What's up with the blurb on your GH page that says, "Exactly how Yelp uses the output from OSXCollector is a bit of our secret sauce"? How is workstation auditing a part of Yelp's secret sauce? You're a review site. Strong security on Internet-connected machines benefits everybody. There's no competitive advantage here. If you have something awesome, why not share it?
Mysorean rockets
Maybe "Fortnight" instead of 14 days would look better. :)
Well, I'm against bullying from the government too.

But in this case I don't really consider it bullying but rather punishment to greedy industries using crap materials in their food products.
Or that you are realy a BND officer and you are dong it for the motherland - The KGB posed as Neo Nazi's to recruit some German spies back in the day.
It was ASUS U56E-BAL7 (i5/8g/750g). The Wireless card is weird. Every time I install Ubuntu/Linux on it, it works for a while and then it stops working.
>At the last conference I attended, ~9/10 engineers were running macbooks

They're both tired tropes. There is a pretty reasonable mix of hardware and software run by 'engineers' and no where near 90% are macs.

edit: https://www.statwing.com/demos/dev-survey#workspaces/2496

That site has some pretty good statistics related to OS usage among programmers and some hardware usage, like iPod/iPhone, which I think is a decent indicator of whether or not these people own macs.
If I were caught hacking into a private network of computers without authorization even if I had a "good" reason to do so I would be breaking the law and throne in jail. So why is the NSA allowed to do the same?
rdl has a few other fun reasons to have attracted the Eye of Sauron. Like that one time when he was the only inhabitant of an entire country.
Well, I hope the same for you and your family.

Only I don't. But how does it felt? Do you really stoop to being so low a human being as to wish BS upon other people because you disagree with in a discussion?

Do you think that makes you better than whatever you think he is?
Actively perusing their XKeyscore record wouldn't it be to "taks" them?

And using TAO?
b-but m-muh terrorism
Anybody notice how beautiful and natural to use the page is? Turns out it's very basic html.
Over time comparisons should be inflation adjusted, and optionally adjusted by total population or gdb.
Wouldn't a library like zeromq address the complications/shortcomings the OP highlights in his article, when working with Go channels on a regular basis? Using the 'inproc' for message transport with zeromq should give similar performance to pure go channels no?

This Go client implementation https://github.com/pebbe/zmq4 by Peter Kleiweg also includes all the examples from the online zeromq guide which is great.

I know it's not a pure ago solution but the OP does mention that

'99% of time I don't really care if the response is delivered with a channel or a magical unicorn brought it on its horn.'

I don't know, maybe I'm missing the point of the article.
Enjoyable. A rare opportunity to witness an expression of someone who got p0wned well beyond his level of comprehension. Look how he strokes his pen in disbelief, that poor German dude. "I know those switches", Mein Gott.

As of today, there are two kinds of people in the world: those who believe we're still stuck in post-9/11, and those who realised we are now in post-Snowden.

There is a third kind who have Facebook accounts, but those are just the nature's way of saying that Darwin got it right.
You should use it on your own homepage, rather than a header
They must've known?
You don't need to scan the pages, digital pens are cheap enough nowadays and some of them work on any paper.
So aside from this video, what concrete proof do you have to make your wildly biased claim that he may be an NSA asset? I love your dripping tone of "I'm not saying he's an asset, but seriously, look at that guilt on his face. Again, not directly saying, but look at him." Maybe you're an NSA asset. You may very well be.

Let's keep personal attacks down and talk about the issue at hand rather than go for character assassination.
It does appear they have already been publicized as a target at the end of March this year: "The 26-page document explicitly names three of the German companies targeted for surveillance: Stellar, Cetel and IABG." ... "In the case of Stellar, the top secret GCHQ paper includes the names and email addresses of 16 employees, including CEO Christian Steffen. In addition, it also provides a list of the most-important customers and partners. Contacted by SPIEGEL, Stellar CEO Steffen said he had not been aware of any attempts by intelligence services to infiltrate or hack his company. 'I am shocked,' he said." [0]

As far as I can tell, the actual documents were just publicly released today. I suppose the point of the video, as noted by other comments here, is to show real human beings finding their name and email address in a top-secret document directing they be found and "tasked". Most of the filming may have been done back in March, and it seems they were made aware back then, and have hopefully taken steps to re-secure things since then.

I'd be interested in evidence that they should have specifically known about this earlier, though.

[0] http://www.spiegel.de/international/germany/gchq-and-nsa-tar...
Can a Facebook Photo Be Used in Court?
What would happen to you if you were caught collecting e-mails of the whole world? What would happen of you if you were caught stealing documents from your representatives computer?

Nothing is happening because the NSA and most representatives are PARTNERS in this crime. You must contact your representative and let him know that you are ready to do anything in order for him not to be reelected if he won't actively ask for justice.
Ember.js First Experiences
I think we can see that "Fuck" on their face, just look at the big swallows of the guy and he even says "Oh my god" in the video.
Reminds me of the Google engineer response:

https://plus.google.com/+BrandonDowney/posts/SfYy8xbDWGG
Foundation is part of the pyobjc package. You'll need to install that.
The Mathematics of Ebola Trigger Stark Warnings
Science Reveals Something Surprising About Metal Fans and Classical Music Lovers
> There is a third kind who still have Facebook accounts, but those are just the nature's way of saying that Darwin got it right.

Wow, you just trash talked over 1 billion people in one sentence.
Oops, my bad. I'll update the blog post.
Why do what the compiler can do for me?
Tableau is an awesome data aggregate and dashboard program.
He seemed to also love amphetamines.
As CIA backed companies and PRISM partners Google, Facebook and Apple have no interest and no right to fight NSA surveillance.

What do you mean precisely when you say that "sysadmins have tons of stuff going on"?
"Unlimited websites" includes websites for clients' projects (commercial). "Resale in product" means distributing the plugin in an application/product (ex. CMS) for sale (this includes usage in SaaS project).
Sure, but at that point what is the point of using Go? You might as well use some other language like D if all the parallelism and message passing patterns are going to be handled by a library like zeromq.
that feel when ~5:15 and the username/password to an account with "deep access to the network" is horizon/h0r1z0n
The only real proof of "access" I saw, was a single customer's username and password. That could have been obtained through guessing, or compromising that customer. So it seems like cautious and competent engineers aren't necessarily all compromised. I'm open to more evidence though.

The other things seemed to be network topology, IP addresses, and engineer lists, which are fairly public.
We differ on our opinions of C. It may be dated for you but I can I know how to manipulate the syntax to get the desired result. Rust has been on my list of things to check out, but not use for clients. Right now all roads (from Javascript, C++, Objective-C and Java) lead to C. So when I write a library in C, I know I can use it my iOS, Android, node.js and C++ projects. I cannot say the same for Rust. I do not want to be on the Rust journey quite yet because I am still smarting from node.js. And in 2012 when I was using node.js to solve problems was when I was close to becoming a problem engineer, as you believe I am.
It's interesting comparing it to the sandwich videos - this video basically does everything wrong.

http://www.fastcompany.com/1768550/adam-lisagor-advertisings...
It is technically possible, yes, but you need a really good security team as well as security policies that everyone is following. At the very least with a good security team you may be able to notice the malicious activity shortly after you've been breached, even when it's too difficult to prevent the breach from happening at all.

This is infeasible for a lot of organizations, unfortunately. And it also becomes much more difficult if your adversary has full control of your DNS servers or can perform a man-in-the-middle due to their backbone Internet access. Something like an Evilgrade (https://github.com/infobyte/evilgrade) attack conducted via an ISP MitM is very hard to detect and prevent, and I suspect NSA uses Evilgrade-like tactics frequently. And if you live in the US it's game over by default, since they can legally send people onsite to compromise you.
This also illustrates the weakness of using just a password for authentication to anything of value.
Trillions of flies can't be wrong - elephant dung is awesome.
Maybe we are all patient zero of the newest drive by download.
I think it was deep access to one customer's network, and probably their own fault for choosing lame credentials.
Actually, you can get a job in Germany, or you could get one in Silicon Valley, or in London, etc. The real question is what do you want? Silicon Valley is far from Europe: moving there, you'd lose your friends and family. Some people do it (the pioneers), most don't and that's fine.

Yes, the salaries are as "good" as the interviewer said. Yes, you'll have major visa issues since you don't have a degree. Not everyone needs to move to Silicon Valley to be happy.

And frankly, don't move for the money. A good analogy I heard is: if you want to try to play in the big leaves, come to Silicon Valley. Failure rates are higher, but at least you'll find out how good you are. Would you take a shot at playing in the Bundesliga or keep being the best player in your local club?
While small firms might lack the technical expertise or budget to protect themselves, large companies have a different problem.

Look at Google, Apple or Facebook. There is just sooooo much different attack space. Thousand of servers, thousand of employees that could be bribed, hundreds of third-party people they rely on (Content Delivery, ISPs, Colocations/Datacenters, Hardware suppliers....). A single NSA-controlled computer in your network is a starting point to take over the rest of the network.

/edit: Even if they straight up tell them they have a "bug" in their network, how the hell would they ever find it? I could be a switch, it could be a VoIP phone, it might have been a software-package that was injected with malicious code _while_ downloading, it could be a RaspberryPi camouflaged as some other device, it could be a employees computer, it could be a network-printer, it could be a hijaked VPN account. It could be anything. I just don't see how there is any way to protect yourself against this, even with a dedicated security team and a big budget.
It's not patented, and it's cheap. (I think it's less than my insurance copay for a month's supply) Yes, they're making money off of it, but it's nowhere near levels where it's worth doing any marketing for it.
His name is on NSA slides, right? He's either working for them or they have his private key. Really how difficult would it be for the NSA to get that if they wanted it?

I have no idea but I'm able to believe easily.
Is there an alternate source for the video? I cannot get it to play at all under Linux / Chrome.
I thought you were being sarcastic. That thing was pure gold.
You can't just stop after telling that… Only inhabitant of an entire country? How can it be?
I'm curious to see this general purpose function of yours. You are also addressing a different point than the article. The main point is that patterns like parallel map are impossible to implement in Go in a type-safe manner. This is a valid complaint depending on what is meant by type-safe and at this point the arguments for/against Go usually devolve into name calling and matters of culture. If you could factor out all that general purpose functionality from your code base, e.g. the rate-limiting and other things, and turn it into a re-usable library then that would be an entirely different matter. Whether that would qualify according to the author's definition of type-safe is another matter.
Also they said you'd need to already have access to their network in order to even login with that.
So it's apparently only a (albeit weak) second line of defense.
The government really is an insurance company with an army.
He should have differentiated operational metrics from product (or business) metrics. He seems to be talking about the latter categories.
You made a good point and then trashed it with a knee jerk reaction. If you think Facebook is one of the bad guys here, you don't really get what's going on.
Within the US, the NSA operates with legal impunity. It is beyond the reach of the law. At least so long as it's acting under official mandate -- rogue agents are apparently sanctioned if pursuing information for personal reasons. If caught.

Outside the US, NSA operates with the diplomatic and military support of the US. It's not a matter of an individual hacker, but "an international incident" should something arise. There's some risk that an agent or operative (non-agency employee acting on behalf of the NSA) could be caught, but that would vary by field of operations and relations between that country and the US.
How You’ll Buy a Big Mac with Your iPhone at a McDonald’s Drive-Through
Yes, this feature (option to open custom dialog) is still in development (95% complete). Using the current 'direct image embed' also allows embedded images to be saved on specified path on the server.
"DO NOT mention Hemisphere in any official reports or court documents"

It perverts the justice system when the police and prosecutors hide their investigation methods.
"The cashier will then extend a portable payment terminal out toward the driver’s-side window."

As described and pictured, that's pretty awkward.
Thanks Nateweiss!
> They're pretty much only used by "interesting" people due to cost

Came to say that as well. I don't know the satellite internet business market, but it's obvious that if it's used by individuals in the middle east, it will be an obvious target.

Having a mobile internet connexion in africa can easily draw attention...
CocoaPods as a submodule
Don't we generally assume that the NSA hires math guys for math purposes, not surveillance purposes?
Of course, from the standpoint of the NSA, these aren't "attacks" at all. They're the good guys keeping 'merica free.

It's just a whole different world.
Nothing is always an option. Including anything that is unhelpful dilutes focus on the things that are.
One account is in http://works.bepress.com/cgi/viewcontent.cgi?article=1035&co...

You might notice some discussion there of what counts as a country.
They're usually meant to be dedicated workspaces for freelancers, contractors, remote workers, etc.

If you're looking for something more casual, there's "Jelly" meetups, where everyone meets at a shared space like a conference room, a coffee shop, etc., for just a few hours. The UK Jellys can be found here:

http://www.uk-jelly.org.uk/find-a-jelly/
From OP:

"Which one's the fastest in terms of processor performance? Something which will let me scale with minimum hardware."

Getting off the ground and running quickly was not a requirement.
http://archive.wired.com/wired/archive/8.07/haven.html
Death by Lethal Reputation – The Demise of an Employer
No, automation is always the answer. When you are forced to formalize processes with code you invariably find all sorts of hidden assumptions. This has happened to me every single time I've tried to automate legacy manual processes. There are always hidden assumptions that are unearthed. Unearthing hidden assumptions is always worth the effort.
Tech VCs Promise to Never Disagree with Founders