skysight-inc/HackerNews huggingface dataset:
A corporate trainer once told me there's specific kinds of learners.

I don't believe there is compelling evidence that this is the case.

Instead, different people have different backgrounds and experiences. Learning requires making connections. Depending on what you have in your head already to which you can connect, you may respond differently about a particular topic than someone else.
I apologize for this thread being slightly duplicative of another submission.

One thing which jumped out at me from this story but was not mentioned in others was that the attacks had been traced back to servers in a Russian data center. I wonder if and how we can distinguish between:

- Criminal hackers exploiting lax or less capable Russian law enforcement, or

- Criminal hackers operating with the studious indifference or tacit acceptance by Russian law enforcement, or

- State-sponsored espionage expressing a retaliatory or threatening posture in response to western sanctions against Russia.

It's very hard (as a consumer) to gauge whether the main problem here is corporate negligence, very well-supported attacks, or excess organizational size and complexity...or some combination of these 3 factors.
The UX is amazing if you ignore gnome/kde etc, which are just imitations of windows and mac. I'd say the true linux UX is in tiling window managers. Just like the terminal and vim/emacs, tiling WMs have a steep learning curve and an amazing payoff where the computer becomes an extension of your will, rather than something you fight. I really recommend you try them.

That being said, they don't look pretty, but they make me so productive I just can't go back to anything else.
MongoDB is a pretty big part of most of my client JS stacks (including MEAN), and most of my colleges have clients that rely on it as well. It's a reasonable balance of performance and complexity, though it's not a replacement for SQL and key/value stores in all cases.
Compass Inc | San Francisco USA | Full Stack Engineer | Full Time.

About Compass:

Three years ago, a team of researchers, entrepreneurs and data geeks set out on an ambitious mission: To put the world’s startups under the microscope in an effort to better understand why some succeed and why 90 percent eventually go the way of the dinosaur.

Fast-forward to today, Compass has analyzed data from over 30,000 startups around the globe, published groundbreaking reports and launched Compass, a benchmarking and decision-making tool for companies. We are going after a ~$100 Billion market that is today owned by Consulting, Market Research, Information & Competitive Intelligence Firms. In the past three years, we've achieved unprecedented insights for startup and software CEOs with our "Startup Genome Report" and "Ecosystem Report", which were featured in The Economist, The Wall Street Journal and also received a mention by President Obama. We are now ready to take the next step, and are therefore looking for new members to join our A-Team.

The Position:

At Compass, you will be a part of our agile engineering team, working in a continuous integration environment with cutting edge tools, building a highly scalable application We collect and analyze data from all kinds of data-sources in order to build the biggest data set of private business data It is our core objective to fully model the lifecycle of a company, with its failure and pivotal points and present business data in a way that creates insights for decision makers, helping them navigate their business with Compass You will play a critical role in designing the core architecture of our products and determining the company's success.

Some of the technologies we use daily include:
Ruby on Rails
Rabbit Chef (w Docker)
MongoDB
Jenkins
Angular.jsD3.js
StatsD
Python (w NumPy, SciPy)

Your Profile:

We are looking for Ruby/Rails developers that want to become full-stack-developers OR experienced developers that want to move into the Ruby/Rails world.

You have:
strong software engineering foundations excellent analytical abilities and faculty of abstraction entrepreneurial & pragmatic mindset willingness to break the rules high degree of personal motivation and ability to self-manage a successful track record.

More jobs at: http://startupcompass.theresumator.com/apply/
Unfortunately I can't relate to the responses. It's hard for me to comprehend how you can be bored and in total pain or out of breath at the same time. It's like saying there's a knife in your shoulder and you're still bored...
Will we ever reach a point where large scale security breaches are a rarity rather than the norm. I feel like some of these recent issues should have been preventable.
I don't see it as depressing or heartening—it's just the way we humans tend to react to things. Why do you find it depressing?
I personally agree that it is distasteful. I didn't say it was tasteful. I was pointing out that your 'public shaming' suggestion would be totally ineffective as a means of addressing the problem, since the people who do these things obviously don't conform themselves to your moral schema in which suffering the reprobation of society is an undesirable outcome.

They are not doing this secretly, consumed by fear and guilt, manufacturing these devices in the backroom of some disreputable bar in the nasty part of town and then furtively selling them from a van in a back alley, living in constant dread of exposure. They do this quite openly. They manufacture these things in many of the same boring factories that make the reputable brands. If you ask them, they'll cheerfully mail you some free glossy promotional material detailing fake USB drives and many other nefarious electronic things that they'll sell to anyone with a credit card, and your order will be delivered to your doorstep quite openly via FedEx or DHL.

They don't care (at all, on any level) what we or anyone else think about the moral propriety of their operation, surprising though that fact may be. Indeed, a public shaming campaign would benefit them greatly as free advertising, by bringing their very existence to the attention of many new customers.
Why I’m Against Succession Planning at Startups
Theoretically yes, but practically no, especially if the breach is discovered within at least a few weeks of it happening. If you're looking at it 6 months later, it may be a different story.
Whoah. Article is worth reading for the Sint Pieters Leeuw tower staircase alone.

Looking forward to the rest!
Judge Rebukes Government, Keeps Gitmo Force-Feeding Hearing Open
As someone who graduated with a math minor and promptly forgot the vast majority of what he learned, something that really messed me up were gaps in my education.

For example, I took a graduate level course in the foundations of mathematics (proving natural numbers and arithmetic). I grasped the lectures, but one day I was completely stumped by a step in the proof where algebra was performed across an inequality.

I had never in my life seen algebra across an inequality! As an undergrad senior in a 500-level course.

I grew up moving a few times, and even within single schools I found the teachers weren't on the same page in terms of how math would be taught. For this alone, the Common Core sounds like a good idea to me.
The real losers when this happens are the small businesses and nonprofits with recurring payments that have to contact their customers and ask them to reenter their new credit cards after they are replaced. Even in the best case, they're probably out a months revenue which can make or break a company.
Canaries in the mine: Retail metrics that help you study the competition
There is security software which can restrict even root access to files. One such example is CA ControlMinder.

It can protect files/programs/processes at the kernel level and redirect authorization attempts through its own authorization engine and then back through the original syscall (if permitted). So, you shouldn't, but you could chmod a file to have world-read/world-write access and then set default access to the file to 'none' via this authorization engine and it would still be inaccessible to all users (even root).

You can form more granular controls, such as 'this file can only be accessed by the process launched by program with device/inode xx/yy', and 'this program cannot be launched if any of these 8 attribute checks show as being modified'..

By the same interception mechanism, auditing can be performed which records when specified files are accessed, by whom, and which server they had originally connected from when they did it. An audit only mode can simply monitor activity without performing any denials. Add in a keylogger that targets terminals of specific users, or just specific surrogate accounts (eg, when any user su's to root) and you can get a closer inspection of all activity performed (and not just activity to specific protected files/resources).

So, it's possible to tell what's been compromised, but one would need to be running such security software and have it properly configured for auditing the right resources. This isn't a trivial task to perform across environments with tens of thousands of servers.
A simple IRC client.
>If you don’t get accepted after the interview, you will get the reason why and you’ll then be able to improve your product.

This part is a bit ambiguous. Do the YC partners actually tell applicants who have made it to the interview stage why they were rejected?
Since the NSA is the most secret agency in the world, how does anyone know anything he says in this article is true?
This is a great analogy. In high school and college, I believe I was a Windows and then Linux "car guy". One of the things I liked when I (mostly) switched to OSX from Linux was that I no longer had to spend any time fiddling with stuff. I used to find it fun, now it just feels like there's way too many interesting things to be learning about and doing to spend any time tweaking crap on my computer!
Depending on what you want to learn, sure. Googling for "[someLanguage] practice problems" appears to turn up good results for most languages.

For data structures, write some unit tests and then make them pass.

I personally wouldn't recommend you bother learning the implementation details of algorithms: just learn the names and use-cases. Make some Quizlet flash cards and you're good. If you're having trouble finding some to learn, try Googling "sorting algorithms" or "sorting algorithm for [someDataStructure]". Go from there. I'd recommend a similar approach for design patterns.

If you want to get better at building applications, practice by reimplementing apps you use every day in your favorite language (or just come up with your own). "Building applications" encompasses a wide variety of things not mentioned above that you'll only be exposed to by building stuff, so do that.
Probably not. The space of potential security holes is very large. A would-be attacker only has to find one viable one, while the people defending against those would have to find them all. There are lots of tools to stop people from opening up well-known holes, but most issues are only "obvious" or "preventable" in hindsight.
As a Chase customer (checking/auto) who happens to be an eBay user that shopped at Target during the data breach, this is getting really old. I wonder at what point do companies start requesting we change our account numbers (similar to passwords)?
Fair enough, my wording was a bit more limiting than I meant it to be. But I hear you, and you make some good points.

I guess I'll just use an old saying to put it one other way: 'the river is separate from the bed on which it flows'.
I wouldn't assume that at all. They say "a list of the applications and programs", not "program listing...". In this case, it reads to me as just that, a list, such as Word xx.xx, Outlook xx.xx, girlfriend 2.0, ms-dos 5.5, etc.
The silver lining here is that as these breaches become more and more common businesses and financial institutions will be forced to get more serious about security. Chip and pin can't come to the U.S. fast enough.
I just looked this up. According to this site:
http://wserver.flc.losrios.edu/~willson/fitns304/handouts/he...

Zone 4 is the only zone where you can increase your VO2 max.

Although prior to this thread I've known nothing about the zones, this article is inline with what I did know about cardio exercise: High intensity interval training is the most effective method at increasing your endurance.
Didn't YC also invest their small amount for 7% equity and then throw a convertible note on top of it? Has this changed with the new deal?
>I wonder at what point do companies start requesting we change our account numbers (similar to passwords)?

Some already are, sorta. I made a single purchase at Target with a debit card during the period of their breech and my bank automatically sent me a new card with new numbers. It wasn't auto-activated, but once I did activate it, the old card and numbers went into the ether.
Although there is ample evidence that individuals express preferences for how they prefer to receive information, few studies have found any validity in using learning styles in education.[2] Critics say there is no evidence that identifying an individual student's learning style produces better outcomes. There is evidence of empirical and pedagogical problems related to the use of learning tasks to "correspond to differences in a one-to-one fashion".[3] Well-designed studies contradict the widespread "meshing hypothesis", that a student will learn best if taught in a method deemed appropriate for the student's learning style.[2]
she. the authors name is barbara oakly.
I think homebrew is much easier to contribute to. I started using it when I wanted something that neither Macports nor homebrew had at the time, and it was very simple to add it to homebrew. It seems like things are generally more up to date and comprehensive in homebrew, and I think it's because of how easy it is to add things.
I love tools like this, there's also Gource [1] which visualizes your version history.

[1] https://code.google.com/p/gource/
> likely less than the cost of better security

The .4 drop in stock price after hours when the news was released may be worth more than the cost of better security. Not sure they care though...
Sadly, downloading random shady binaries already happens to open source projects whether they charge or not, because the shady people spend effort on SEO and open source developers don't.

For updates, all Windows/Mac software should be self-updating by now. Requiring users to download updates by hand is basically the same as no updates.
My wife just had her credit card hacked probably as a result of this (we are both with Chase). What a pain to have to deal with getting a new card and updating all the auto-pay stuff. Plus, this is probably the third or fourth time this has happened to her. They said they arrested the person, who had bought a burrito in San Diego.
" The number of households affected by the attack on JPMorgan [76 million households and 7 million small businesses] compares with the 145 million personal records taken earlier this year in a breach of EBay Inc. and last year’s attack on retailer Target Corp., which affected 110 million. "

Do 'responsive firewalls' exist, that would close a hacked connection just because of the size of the data that is flowing out?

[I have often thought a firewall would be a good golang project]
> Pain isn't fun, that's all I'm saying

If that is all you are saying now then I agree with you. Earlier you were saying that "Running isn't boring" which is a very different statement. I don't find running as boring as some do, but I find the notion that you cannot be bored while in pain to be quite alien. If you work that way then fine, but neither I nor anyone I know who has been stuck doing something boring while in pain has had the same result as you.
The malicious device can just fake breaking the connection and reconnecting. No way for the PC to tell the difference.
I was initially put off by the "Well, in 8 years, why haven't they had a big (>100M) exit?" in the beginning; I figured it was more of the kind of silly entitled bubble talk I've been seeing elsewhere.

The equity analysis you pointed out as well as the description of the LoI stuff made me reconsider that position, and by the end of the article I was glad I read it. It wasn't quite the muckraking I was expecting, and instead was a decent exploration of when a fit with an accelerator just didn't exit.

Matasano never did the incubator/accelerator thing, right?
What do you mean by "algebra across an inequality"? (Does this mean things like "x < y is equivalent to 5 + x < 5 + y"?)
Not until the major stakeholders are really serious about Internet security, to the point where they are willing to work to change the infrastructure of the Internet. The same goes for governments. Right now if you try to make data "too secure", and not give them some kind of backdoor ("when needed" as they say), they are actually fighting against you in the media, and possibly in Courts, Congress and through other means.

When the US government agrees to let Internet stakeholders make the Internet really secure, and not "secure to the point we can still break that security", then we should see some progress.
Yes - this has changed. See http://blog.ycombinator.com/the-new-deal
I'm currently working through Project Euler problems using Rust.
I like to write chatbots - either IRC or XMPP(HipChat).
Decisions: The Asset Pipeline
If someone is looking for an impossible problem to solve and be paid well: JP Morgan is spending a quarter of a billion dollars this year to achieve list level of security.
Soleil – sunrise/sunset times from your terminal
You're right, and I agree with what you wrote. The apparent disagreement might come from me not expressing myself clearly enough.

I didn't mean to shame manufacturers. They have plausible deniability anyway - "it's a keyboard emulator that looks like a pendrive!". I think that companies that buy these devices and use them for marketing on trade shows should be shamed and blamed.
You sir are correct, and on that note: http://flangipanis.bandcamp.com/ (local punk band), for your safety (and sanity) I recommend not watching the "My Period is Late" video. Really fun live show though.
Is there a breach notification list (somewhat similar to A CVE list) where companies can (anonymously at first) notify the world early and then publish technical post mortems.

Saying "76m records lost" is ok for headlines but like air traffic investigation we want to improve the whole system.
I'm a potential use. I run a solo bootstrapped company. I outsource many things. Have been wanting to outsource email for a while.

It's been hard to find a solution that allows me to manage my personal and work email, and the different types of both.

Seeing the demo made me think "I need this!". I had been looking around at helpdesk solutions, but all seemed to cumbersome for my use case.
Apple Pay is literally the safest way to use a credit card today.

Credit (and debit) cards in Canada and elsewhere have had NFC functionality for several years now. You never hand your card or numbers to anyone, but instead through chip insertion or proximal NFC it communicates with the identifier on the card, which the payment processor can correlate with you, and using the secret on the card cryptographically signs a transaction.

The most secure way I can use my credit card...is to use my credit card: Nothing that can be usurped is passed to the POS terminal.

Apple is essentially injecting themselves in a simple process that works extremely well.
I wrote something similar for myself in node based off of Zach Holmans dotfiles.

A one liner tool in node that refers to defined config.

https://github.com/jh3y/kody

The dependency on a new machine is to install node.
I'm in the same spot and was hoping the HN crowd might have some insights.
With Dry Taps and Toilets, California Drought Turns Desperate
lol ok I guess I deserved that.

More seriously, I love research like this that challenges existing understanding. Of course, if it holds true for humans this certainly opens up a Pandora's Box of sorts (which is what I was aiming for in the above comment).
I disagree. We are expecting students to learn more than ever before. Math is a great example. Their ability to handle even a simple concept like multiplication requires fluency in addition. The ability to learn algebra requires fluency in arithmetic. The ability to learn calculus requires fluency in algebra. Tons of kids pass one grade but emerge unprepared for the next. The author hits the nail on the head: they understand the material at the time, but never develop fluency. Then next year when they try to build on that foundation it has evaporated. Rote learning should begin in elementary. I am thankful that I was required to learn my multiplication tables.

Yes, we need to tailor our teaching to the attention span and abilities of our students, but that doesn't mean we shouldn't be using this powerful tool of fluency through rote learning.
This is more or less a guaranteed way to never get accepted into a program like this ever again however. I don't see any serious upside to a company who might want to do this.
In other words: webpages function as expected on iOS.

... Not to blame the meteor folks for writing it, if they were getting asked it... But wow.

I personally think the title is a bit click-baity, but that's because it's not really hot code push. It's loading a web view. If this was hot loading new native code that'd be newsworthy or at least interesting.
It looks like your convertible note math is off. Given the $1M minimum trigger, the $100K note will not equal 10% of the company unless we plug in absurd numbers ($100K premoney Series A with a note discount).

Based on this Quora answer, the cap is $3M with a 20% discount. http://www.quora.com/What-are-Techstars-convertible-notes-te...

Say you raise $1M on a $3.9M pre-money. The $1M investors wind up with almost 20% (a little less because the note investors pay the $3M price), the note investors about 2.6% (they get $130K worth of Series A plus interest), and the remaining ~77.4% is your former cap table, including TechStars, diluted by the $1M and note conversion.
Increasing VO2 max increases how much power you can develop while remaining in aerobic respiration. This is great for cyclists, or anybody who needs to go literally as fast as possible for a few hours straight. But VO2 max is your "race car" mode, and training Zone 4 and VO2 max does not help your Zone 2.

For mountain climbers (like me), you do use Zone 4, but you want to spend as much time as you can in Zone 2. To achieve that, you have to train Zone 2.

What is Zone 2 good for? Hike with a park ranger. They can very nearly run up a mountain with a pack, without even breaking a sweat.
the ability to control the entire US airspace from any one control center

Hmm, if things are so bad that multiple regional centers are offline then it might be time to ground everything temporarily - I suppose this is what you're driving at, but I also imagine an unlikely-but-possible scenario where someone subverts an ATC, locks everyone else out, and then wreaks havoc.
(blog post author)

We actually never upvote our own stories or ask others to. It's hard not be curious about the comments, though, and we make a point to identify ourselves in our replies.
Don't you find that obstructive? Halfway through the article I am reading (still deciding if its good or not) and I scroll down to read more then a faded dark background popup comes up asking me for my email when I'm not even finished reading. Putting a subscription box at the bottom of the page after the article is fine, but distracting a user when reading an article halfway is rude and counter productive.
Get Your Front End JavaScript Code Covered – Via Codeship
This video is much more convincing than the original post
I've seen that before, but I still have no clue what this is supposed to do, and the website doesn't really explain anything. Could you please elaborate on what this device is actually for?