skysight-inc/HackerNews huggingface dataset:
That's what experts are for.

I don't do forensics. But I am a reverse-engineer and I am familiar with the techniques: more familiar than Tarbell, it seems. (That's really his name? Tarballs from Tarbell? My goodness.) Tarbell's declaration reads to me more like a textbook demonstration of (bad) parallel construction in action.

They could have done it legitimately, without compromising the server and potentially tainting the evidence any way they wanted: DPR indeed made a few rookie mistakes that would potentially provide for that. But the logs don't seem to actually have evidence supporting that, which is very unusual and at this time not explained? The declarations filed so far do not really seem to support that either, which is very odd and strongly suggests that we don't have the whole picture here: and we really should.

(Of course, we don't have the whole image, so we don't have the whole picture here. BTW: They used tar, not dd or ddfldd? Boo.)
All of the current generation of AWS instances (m3 type) are HVM.
You can buy an EX4550 new in the $6K range, albeit just with 32x 10Gb ports; you'd need to buy the modules for 40Gb or additional 10Gb ports. This is just on the grey market (check eBay), no negotiation or relationship required. If you need support, J-Care service is $525/yr MSRP for the EX4550, with a reinstatement fee cost for the same for products out of warranty. You'd be able to pay off the modules with the difference in licensing/support costs over time.
It is far too easy to say "I know I know something" and mistake that for being able to do it when the time is right. This piece is the rocky piece, the point where it's easy to be carried away with enthusiasm for something you haven't built yet, add features on to a prototype no users have ever used, or simply not hear the truths we want to hear because they bruise our egos, our decisions, and our pride.

If you can't get in touch with your customers to get feedback at the earliest stage, how are you going to get them to use your product? And if you don't want to talk to customers because you're ashamed of the prototype or you want to show them something 'perfect', you'll never talk to them at all.
> I hadn't heard of India's general elections and smooth transfer of power, so that helps clarify things for me.

This book: read it.

http://en.wikipedia.org/wiki/India_After_Gandhi
The Australians have https://www.ruok.org.au/, where they encourage conversations and basic social interactions. It started out for someone to discuss about the basic challenges with life. Someone to talk to about bringing up a family on a single income, the worries about your wife/husband health, the looming thoughts about your life of your elderly parents etc.

I love to see this roll out on a wider scale. Living in Germany, sometimes, I have a hard time getting social interactions. That is not to say that the Germans are socially hard to connect with. I have grown up in Australia and adjustment to the German social environment is quite difficult.
hm. thanks. Yeah. I need to spend more time on this as I update my stuff.
Maybe, but the good ol razor tells me it could be a simpler case of either: self-absorption (blessed with our acceptance, they'll drool as they jump on signing it), or just formal carelessness - we need these docs back pronto so that's all we care about.
I've used Mou since very early on, and have donated to the developer also. I use Mou every single day, without fail, and so glad to see that it's getting attention again.

My only issue is that the app has been fairly dormant for several months, maybe even up to a year, and I'm not sure what's prompted the urgency to finish and release Mou. It's come such a long way gradually and I hope it isn't rushed at the end.

I also hope it'll be taken in the same direction as originally intended, rather than to extract every last penny out of it. Of course, it's great to see Chen getting the sales he deserves, but I really hope he keeps in mind his original vision.
Measuring people power
If you are a hacker would you be running a Mac? I'll stick to Linux and OSS, thanks.
Brain Gain: the underground world of neuroenhancing drugs (2009)
I don't think it's survivor bias. PG wrote about the opposite as well about the worst startups they funded: "I could never quite tell if they understood what I was saying."

http://www.paulgraham.com/word.html
But now the user is burdened with having to be explicit.

This is exactly the type of case where I'd much rather have the app be explicit about it's actions: allow both to be added, and at most show a notice after synchronisation saying "I've noticed you've added two buy-milk; merge them or leave them separate?".

I've had nothing but bad experiences with apps that thinks they know best and try to merge records behind my back.
in the end any hacker will end up realizing he should have used everything by default and not tinker too much.
Techies, You’ve Got a Problem: Communication Gaps and Gaffs
It would be very interesting to look at these numbers in the context of the relevant population (what percentage of the population demonstrated?) and to analyze the level of violence or conflict or even the duration of the protest.
People use the browser very regularly and don't realize it because it's an embedded webkit. A classic example is people sharing articles on social networks.

Native apps are a bad experience for this kind of application because they are not ephemeral. If everything in your environment has an app associated with it, then your phone will be clogged with hundreds or thousands of apps, 99% of which you never open. You want a transaction-cost free model for envirnonmental interaction, the same as 'surfing' the web. No persistent cost for experimenting or trying something out.

The whole idea of "installing" stuff has really regressed computing back to the 90s. The web introduced the idea of emphemeral applications which are cached, so that you never need to manage the memory of your device.

I'd like to see mobile native apps adopt Web-style model. You can pin the cache and permanently install apps that are important to you or have giant resources (like huge games), but most of your apps should backup-and-delete themselves on the fly when coming into disuse and space is needed.

I'm sick of being asked to rate apps, and sick of having to delete apps to make space.

Steve Jobs once said "if you see a task manager, they blew it" Because people shouldn't have to manage the kernel resources of their phone. To that I would add, "if you see an install button, they blew it", because people should not have to manage their flash memory.

I thought the nightmare of cleaning up your computing devices went out with utilities to clean Windows drives and registry in the 90s.
https://news.ycombinator.com/item?id=8402859
If you've ever had a sit through a 3 hour army suicide prevention briefing I guarantee you'd want to kill yourself.
How to Calculate Your Startup Idea's Potential
Library genesis is the best thing that happened to research since Google (and a huge number of researchers use it, secretly). Being able to access any obscure technical book in the world in a few seconds is literally orders of magnitude more efficient than waiting a week for an interlibrary loan. I dread the day it inevitably gets shut down due to pressure from the copyright mafia. It's ridiculous that such a service isn't 1) legal, and 2) publicly funded (with due compensation to the authors).
In theory yes, in practise no.

Satellite has caps and active throttling which prevent video streaming, so no Netflix for you.

On DSL, if your sync rate is 3Mbps, you won't be watching anything in HD and unless you dedicate the line for only Netflix and ban everybody else in the house from using the internet, you'll get poor quality SD only.

So, no, DSL and satellite are not plenty fast enough for Netflix.
Have you read Lockharts Lament[0]? It discusses something similar to what you have experienced.

[0]- https://www.maa.org/external_archive/devlin/LockhartsLament....
I'd love to see Netflix let the chaos monkey loose on their PostgreSQL servers.
Butterfly Labs to Resume Limited Business Operations
UNDER THE MICROSCOPE – What Is Chlorella?
Use a static site with nginx/thttpd/lighttpd, it will fly.
Obviously there's a limit with what you can do with those resources.
https://hn.algolia.com/?q=p+values#!/story/forever/0/p%20val...
Could you explain more exactly what "library genesis" is? Is it a collection of basically every book ever published or only modern things? Did someone scan everything, like Google books?
https://hn.algolia.com/?q=Relativistic+hash+tables#!/story/f...
Talk about burying the lede! Even though he starts off by saying the data confirms the "parallel construction" theory, he proceeds to poke a hole in the defense's claim - that someone wouldn't have been able to access the login page (I am too tired to determine whether or not he's correct about this), and then proposes a possible mechanism (scanning the entire Internet for pages containing a term) which, although it would technically constitute "parallel construction" in that it wasn't mentioned by the prosecution, need not have anything to do with the NSA and could have been done (with enough time) by anyone.

If he's right that the quoted configuration file doesn't do what the defense said it did as part of their accusations of lying, they've seriously messed up, no matter what the truth is.
> but some of the things offered by TechStars are game changers

You're really going to need to elaborate on this. Some of those perks (maybe even all of them) are not things TechStars paid for.. they're things that other companies chose to give away to startups in an accelerator (of which TechStars is one).

I really don't understand why I should give TechStars kudos because they slapped Amazon's logo on a page and a short blurb about a program that Amazon has for startups.

This is a serious question: if Amazon (and Microsoft, SoftLayer, Paypal, and others) setup a program for startups, give the services to startups, and pay for those services from their own pockets... What did TechStars do to earn a share of the credit for those programs?
I wonder how this would fit in in countries with universal healthcare?

This is a natural fit for the US, where the business of healthcare happens much closer to (and often involves) the end consumer.

In countries with universal healthcare, I think this would only work if Facebook/Google/Apple made the state provider the first choice to receive healthcare data. The state normally has programs in place already to centralise and analyse health data and what Facebook are proposing is essentially setting up equivalent functions in parallel.
I know I've seen this like a year or more ago here or on slashdot... :/
"myphpadmin"? "200 error code"? "As an expert[...]" ... no comment.
I love Witch, but after upgrading to Mavericks I found that it was weirdly sluggish and tended to overshoot what I was aiming at. It also doesn't function with a lot of fullscreen apps (primarily games) and iBooks does ridiculous stuff with its windows that no app switcher seems to know how to work around. All that said, I'm still glad I bought it and I end up switching back and forth to the default app switcher because it's so much better in every way but those bugs. I'm sure the iBooks thing will get resolved and I think the sluggishness thing is eventually going to get cleared up in patch.
Do you loop them to a standard page size?
> Let's hear from someone who knows about the latest work on this, or some evidence that those findings are bogus.

We won't get to, because every time the subject comes up now on HN, someone says, "don't talk about this, it's dangerous."
Framework for generating, uploading and loading yaml configurations in Ruby apps
For me there was a time where I wanted stuff to just work, to get good battery life on my laptop and still have a Unix. I went Mac OS X for a few years (X years ago).

A few years later I switched back to Linux. Much better Java support. Better window manager. Multiple desktops (yes, I had something like that on the Mac, but it was weird). Much better file manager. Much faster (than either Windows or Mac OS).

I still love Apple hardware and their attention to detail regarding battery life, but you can pry my Gnome, I mean MATE, desktop from my cold dead hands. And Linux Mint at least has the Windows battery life (seems to be the only distro that does), so that's kind of ok.
I always got the feeling that installing Homebrew and running the associated apps that run under X but not natively under Quartz was a broken way to get apps on Mac OSX (unless it runs under Quartz now...?)

It feels like the "dirtying" of the native system in the same way that installing cygwin and a mingw and GNUWin32 on Windows does, just in order to get it more like Windows. Rather, I'd use the native utilities on the system and native compilers.

Is it just me who feels this way? Does any Linux user feel compelled to install Linux and then run software ONLY under Wine?
Deploy Jekyll to GitHub Pages
Great citation in any case. Remember that 4pt font size last year someone didn't like?
Why? Did you know that you can write code under Mac OSX too?
That''s quite witty! Do you also make all of your bread from the base ingredients too? :-)
Why not link the original Krebs article? http://krebsonsecurity.com/2014/10/silk-road-lawyers-poke-ho...
I'm just guessing here but perhaps runtime speed? (In this context, that is)
They also have no money issues, ever. No, no citation available, sorry.
It's always been prevelant everywhere.

The biggest one in Mac OS X history I remember is haxies:

http://en.wikipedia.org/wiki/Haxie

"Haxies are a source of controversy among Macintosh software developers. Because haxies make changes to Mac OS X that Apple did not intend, they complicate the operating environment for other developers' applications, and are frequently the cause of system instability and unexpected crashes.[1] Applications by Bare Bones software display a dialog after crashing (or are force quit by the user) if haxies are detected on the system. The Omni Group routinely asks users to remove Application Enhancer modules before contacting customer support for help with their applications.

According to a post by an Apple employee on an Apple mailing list, Apple ignores all crash reports submitted by users if they show that APE is installed."

http://daringfireball.net/2007/10/blue_in_the_face

"Reports abound regarding users suffering from a “blue screen” after upgrading to Leopard: they upgrade, reboot, and get stuck at a blank blue screen.

But, as far as I can tell, there is no mystery involved. There is one and only one known cause for this problem: old versions of Unsanity’s Application Enhancer, a.k.a. APE. Versions 2.0.2 and 2.0.3 of APE are apparently inert but harmless on Leopard. But at least some, if not all, versions of APE preceding version 2.0.2 are incompatible, and will render the system unbootable if left in place during an upgrade."
You know what wasn't an element in the Japan Tsunami aftermath? A hugely disproportionate impact on a demographic burdened with a history of 250 years of slavery followed by 180 years of inequality under the law. Your statements that there is a culturally deficient, uncivilized segment of our society reeks of classism, elitism, and thinly veiled racism. Own the slum, the ghetto, the failing inner-city schools. These are American institutions for which we are all responsible for, elite and destitute alike. Class disparities are a product of our institutions and policies. Our welfare programs create a poverty trap. Our justice system breeds alienation. Our schools, ignorance. If people are stupid and unhappy it is your fault and it is my fault. Since you love your country so much, I'm sure you'll help me fix this mess.
Hi Nolan, thank you for responding to my question. In my naivete I presumed support for the ASICs would end up in the Linux kernel or at least made available due to GPL requirements, but I now see another post mentioned you have a proprietary switching daemon, so I guess it extends a lot further than just driver support.

Thanks for the link; I've seen similar pricing on the Quantas before, but only from obscure online retailers, who are often well below prices from more trustworthy sources. Would you recommend whiteboxswitch.com as a reliable source?

I don't think the optics is a fair selling point however, as you can easily purchase 3rd party optics programmed to be Cisco, Juniper, etc. compatible. We currently buy Juniper coded SFP+ SR optics for <$25 from a distributor in China.
Ok, we changed to that from http://blog.erratasec.com/2014/10/reading-silk-road-configur..., which points to it.
I am a foremost Internet expert on this sort of thing..........As an expert in such topics as sniffing passwords.........As an expert, I know the Tarbell declaration is gibberish. As an expert reading the configuration and logs........

HA!
OneNote is on virtually every platform, at least it's on Android, not sure about iOS, and obviously on Web and Windows. Maybe someday Microsoft will release Linux packages, and I'll be a little happier with them.
But the speed to download xcode + updates is related to your Internet speed, surely? Nobody says Linux takes days to set up and then reference their Internet connection...?

I've got fibre, so perhaps I'm biased. Also, I avoid Homebrew/MacPorts etc. because the apps don't fit in with the window manager properly.
I would say you assume incorrectly, and this guy is just a tool.
I disagree. / is where the stuff needed for single-user mode gets installed. /usr is where the OS's userland stuff gets installed. On Linux systems this includes everything that you get from your package manager, because this is considered to be part of your system. /usr/local is wher you install your own packages. For example, if I'm installing something from source, that's where I'm going to install it. Or if I'm building my own project, I would also install it there.

On a Mac, there is no system-blessed pacakage manager - the official packages are pre-installed on your Mac and only change when you get an OS update. They tend to be installed in /Library or ~/Library. All of the add-on package managers therefore play a role much closer to that of hand-installed source. It's logical that they install to /ur/local. In particular, one of my main use case for package managers is when I want to try out a package that has a whole bunch of dependencies. I might want to compile the package that interests me by hand, as I need to tweak the config, but I don't want to have to do the configure-make-make install dance for the 30 packages that it has as dependencies. That's where homebrew / MacPorts comes into the picture, they save me that work. But they should be installed into the same hierachy as the package that does interest me, as they are at the same level of "officialness".

One last thing. I know Fedora, Gentoo and MacOSX fairly well, and I have also worked a fair bit on a hand-rolled linux distribution. None of them ever had /usr/local/lib in their LD_LIBRARY_PATH by default, I've always had to configure that in my .bash_profile. This is exactly what you would expect, by default the directory should be empty, so why add it to the default LD_LIBRARY_PATH, that doesn't make any sense.
That would have been the far better choice. I don't know how this article got to #1 on HN (see my other comment).
For what it's worth, I haven't had that slowdown experience neither on Mavericks nor on Yosemite. Given I for example don't use full screen at all.
This is very true, and I too happily go to Linux land for servers. But for the typical target market of Apple devices (this is debatable), most people are happier with the download / open DMG / drag to applications scenario instead of typing, no?
Yeah, it's just extremely obvious and was discovered in the nineteenth century already by Kropotkin. I haven't actually read any Kropotkin (I haven't read original Darwin either) but it pops ups if you read for example Frans de Waal.

The whole evolutionary biology field is quite depressing actually. It doesn't seem to make any cumulative progress whatsoever.

http://en.wikipedia.org/wiki/Mutual_Aid:_A_Factor_of_Evoluti...
Ask HN: Do you use cheatsheets?
Hey guys, I'd be curious to learn..do you use programming cheat sheets on an ongoing basis? If so, which ones do you use?
Looks good but is opening a Terminal less techy for my mum? I would argue not. She wouldn't know what a terminal was, other than perhaps something at an airport?

No offence meant by the way. I don't know of an easier way to get the required command to run, so apologies for no suggestions on how to improve it.
That is really humbling and gratifying to hear, thank you.
So - how to do it correctly? The onion server should not be able to access the internet directly and should never know it's own IP-address. So putting it inside a virtual machine/container and redirecting outgoing traffic through Tor (on another VM) should fix that.

As for the backend servers - if all machines are connected through OpenVPN with TLS-Auth they can use private IP space and are not accessible from outside. The OpenVPN tunnels are configured outside of the onion VM and Tor VM and the backend machines are also in a VM that pipes all outgoing traffic (except OpenVPN traffic) to the internet through Tor.

This setup should at least omit the problem of leaking public IP addresses on compromise or did I overlook something? Let's ignore VM outbreak exploits (ksplice/unattenend-upgrades should help here if it's not the NSA).

With TLS-Auth and a default DROP firewall rule all machines should not even appear in scans on the internet. So any outside contact to any machines is only possible if you know the OpenVPN TLS-Key + Certificates. An intruder would only see local IP addresses even if he manages to compromise a backend server. All created outgoing traffic to find the machines would be routed through Tor.

As the Tor onion VM is separate from the webserver only a Tor remote exploit or a VM outbreak exploit would be critical. Maybe encryption can help here.

Another point is using dedicated hardware with Full Disk Encryption and just enter the passphrase via the provider console. There are cold boot attacks but VPS servers allow to dump a memory image while running - that's not so easy with dedicated hardware.
Why would I care if my credit card information gets taken? If there's a fraudulent charge, I don't have to pay for it. Therefore, I have no financial incentive to take my business elsewhere or otherwise care about security.

The cost is borne somewhere (likely in the % fee credit cards charge merchants), but individual users have no incentive to care about it.
The Reason I'll never use MongoDB again (2012)
Have only heard of Alchemist second-hand and not seen anyone pick it over YC/TC. Would love to chat with you more on it: sjigjinni at google mail
You can enable it for the Terminal only.

As the other commenter stated, it's an X11 thing. Despite the prevalence of applications that run under X11 and the XQuartz availability, the native UI under OSX is Quartz which handles everything under OpenGL I believe....?
iOS may be Unix underneath, but on the top it has a terrible WM that simply cannot be changed to behave like anyhting else. I'm using xmonad and while I may come off as pretentious, I do see that my colleagues that use mac constantly fight against the WM, searching for windows, moving them around, resizing etc.
And there are of course vastly more than a 100 cable channels. BSkyB alone broadcasts more than 600 channels for the UK market (more than a thousand if you include radio). In 2010 Ofcom passed 1000 licensed UK channels.

The US is supposedly the only other country with similarly high number of channels, but I don't think it's unreasonable to assume that there are more than 10,000 channels worldwide.