skysight-inc/HackerNews huggingface dataset:
You'll make connections, but to who? Consider Peter Thiel. He doesn't come from crazy money (his dad was a chemical engineer). But he went to Stanford for undergrad and law school, which allowed him to get a job on Wall Street. He funded his first hedge fund by raising $1 million from family and friends.

Very few people from middle class families who go to state schools can raise $1 million for a business venture from family and friends in their 30's, no matter how social they were in college. However, it's very doable if you go to an Ivy where half your class ends up at investment banks and hedge funds, where they're making six figure bonuses just a few years out. It's even more doable if you first do a stint in one of those jobs--you gain instant credibility as someone who can be trusted with that kind of money.
Citigroup Says Instagram Is Worth $35B
Tim Cook: Apple is dedicated to the advancement of human rights and equality
Is there any particular reason we haven't included the "incompetent, erroneously concluded that NK is not responsible, and is lying about it" quadrant? It's always nice to fill out the last box of the square.
I think you're a bit caught up in stereotypes, to be honest. There aren't many people who are all those things you think you dislike. If you meet someone cool, and then they happen to be a vegan, what's your plan? Argue that they suck?

I'd say, you are going to somewhere new. Keep an open mind. You might find out you like some of this stuff.
I am excited for these kinds of technology for non-amputee use too: https://www.thalmic.com/en/myo/
(1) IPv6, and anyone implementing NAT for it should be set on fire. Or alternatively, go back in time and make the original IP 48 or 64 bit instead of 32.

(2) IPSec implementations that work well, and are used from early in its history. Encryption should be the norm, not the exception. It's arguable that if this were done right SSL, SSH, etc. would not be strictly necessary.

(3) IPv6 mobility designed in from the start too. Nobody thought mobility was going to be this common. With a mobility protocol you could have roaming IPs, which would be really valuable for a lot of situations. There are standards for this but nobody supports/uses them.

Other than that, I think the Internet got most things right the first time. Doing more in the core would be second system effect. Anything beyond what I described above should be transport or application layer.

Multicast would be nice, but I think it ought to be implemented in L3 or above (e.g. network virtualization, BitTorrent). Multicast at Internet scale baked into the core would probably be too much cost for not enough benefit... unless someone came up with a really great way to do it without introducing tons of DDOS vulnerabilities and complexity.
Hi, one of the developers here. This is just a little side project I built with a financial analyst friend. Uses government data from the FDIC / FFIEC / NCUA and an open algorithm Bob developed to rank banks based on local impact. Clearly more we could do here but wanted to release an easy to use tool that could help people find and promote community banks. Response has been good so far, just won a social innovation challenge grant. Your feedback and thoughts (improvements, issues, etc) all very welcome. tia.
Do you want money or not? Also, $2500/mo is unrealistic.
what is politics but a series of conspiracies?
I programmed 2 small apps now with Meteor and my learning is that if you want to prototype something fast you can use it but if you want to have something polished afterwards then don't expect to save time by using it instead of other tools. It has its quirks...
"Who this was" is a lot less important than the question: "How can corporations and individuals defend themselves in the future"
> differentiate only with the label

They've done studies like that too, with similar results.

http://www.theguardian.com/lifeandstyle/2013/jun/23/wine-tas...
And a resolution that removes all incompetency from Sony's end while simultaneously painting them as the victim of terrorism.
> Both language and platform affect performance, otherwise JRuby would be the same speed as native Java, which is not the case.

No. JRuby is the platform, that's why JRuby is not the same speed as native Java.

But CoffeeScript has the same speed as plain JavaScript, because both are running over the same platform (NodeJS) even if they're different languages.

It just happens JRuby can only run a single language (Ruby).

> Which still means that Ruby (as a language, using the JRuby implementation) can be faster than Node (assuming the benchmark at issue is meaningful at all.)

Ruby is neither fast nor slow. Languages don't have speed.

> Since you actually need to choose languages to use, you absolutely should evaluate them.

Of course, but you shouldn't evaluate languages on their speed, because then you're measuring something completely unrelated to the language. You can measure platform speed (and the constraints they put on languages you can choose), not the other way around.

---

So, to sum it up, software engineering is all about compromises. Dismissing NodeJS because it ranks 21st in a benchmark is a bit shortsighted.

Of course Java and C are going to beat JS at speed, but... do you want to deal with Java's interfacing mess? Do you want to deal with C's manual memory management? I certainly don't. Especially for a web app.
Stanford 2025
Yeah, no conspiracy here. A hack in a private company is a reason good enough to start another war. I didn't know people feel so patriotic over Sony Entertainment
The new atmel D21 arm looks interesting - 40ua/mhz , and 0.9ua standbay with ram retention and rtc.
Finding out how food and exercise affect your body and adjusting your behavior accordingly is very different from what "lifehack" is in popular media.

Even if we ignore the bad ideas and generally superfluous stuff branded as "lifehacks," the bare-bones of lifehacking is often steeped in the smug self-righteousness of the Bay that is a throughline in OP's post.
Edit: Deleted -- totally wrong story, the heck was I thinking...
Exactly. Web dev is a fickle business. See Backbone -> Angular -> React in just 18 months. Python Numpy is much more entrenched.
The FBI and NSA are two very different entities. The investigation goes to the FBI because it is essentially an "in the USA crime". While FBI and NSA may both be looking into it, they don't share all of their data.

Also, from my experience, the FBI is quite incompetent. The 'evidence' so far is, as others are pointing out, that people in NK wrote similar malware and some of the components used. Trend Micro says that the malware used is available on the black market. This points to my previous conclusion that this is being paid for.

Whether NK government is involved in funding this particular hack is the real question. I don't think NK has direct control over the hackers at this time, because as others have pointed out, it is not in NK best interest for this to continue.

It is easy to pin the blame on NK, and I think that is exactly what the hackers want to happen. Personally I think Sony simply pissed off too many people and this is the inevitable result.
> Since we know that the NSA is filled with highly competent people (based on the quality of the people who periodically join the commercial world after a stint at the NSA) we can probably consider 1 or 2 the most likely explanation.

Since we know that the NSA is government agency we probably can rule out the possibility of it being competent. No matter how competent are the people are hired there.

Mob that consists of intelligent and competent individuals is still a mob.
I think you are looking for something similar to: http://longbets.org/
He's assuming that the static method has a dependency on something. That it's not purely functional. For example,

public static doSomething() {
Database.write("Did something")
}

Makes testing hard because Database is hardcoded.
The US government getting involved initially moved this from "Sony never bothered paying for actual security" to "somebody is trying to take advantage of the attack". When Obama promised a "proportional response, this drama suddenly sounds like war drums.

So I guess the question is either who needs a war asap (follow the money?), or who needs a war-sized distraction?
it's not that "college" would make a huge difference, it's that an Ivy league (or similar school) would allow a person like my friend to make connections that are helpful. The high-end prep school he went to means he has connections at global banks and financial firms, connections to families with 100s of millions of dollars of wealth, people in national level politics, international connections, etc... that wouldn't have been possible at a normal high school.
I think this is ultimately caused by developers not quite knowing where and how to place their ambition. It's easy to look at the big legacy app and be like, "I can fix that!" Then they roll up their shoulders and go to work, management be damned. Management can't see or understand what he does, and they're paying him for his expertise, so they give him the benefit of the doubt and let him do what he thinks he needs to do.

I documented my own answer to this situation here. Basically, don't treat organizational problems as technical ones. They're paying you to do a job, everything else you do is basically an ambition. First rule of ambition is to do no harm.

https://news.ycombinator.com/item?id=8768524

If you're going to refactor, don't refactor in the direction of new. Refactor in the direction of coherency. Do things that you can finish, or, that at least, don't matter that much if you don't. Like adding tests. Nothing wrong with that.

If you want to fix the legacy app, you need to make less ambitious changes, because you need to be able to finish them. Instead of changing the data types, refactor the initialization code. The initialization code runs once, data manipulation code is basically convention and you need to change it everywhere at once or not at all. Refactor it to the point where you can change it everywhere at once and then do that. Or get really good with a text editor and macro the changes.

Giles Bowkett has a great book on it. Unfuck A Monorail For Great Justice. It's Rails-specific but the ideas can work everywhere. Write code that understands code.

http://gilesbowkett.blogspot.com/2013/03/new-ebook-unfuck-mo...

But understand that there are probably better things to do with your time. You can pick out pieces of the legacy app and try to understand them well enough to rubber-duck debug them without having the source code in front of you. Once you have that then really, you don't need to be a hero. You're already a hero because you know the system better than anyone. You can focus on other things. Maybe use your new-found credibility to build some consensus among your peers and managers. Then when you make your case to replace the app, it won't just be you.
Your list is a false dichotomy. There are more than 3 possible situations, including that the NSA is not involved.
On one hand, it seems incredibly stupid to make a movie (comedy or no) about assassinating a sitting national leader. They didn't even use a thinly-veiled reference. They used his actual name.

Still, of course this response is unwarranted.

>North Korea’s attack on SPE reaffirms that cyber threats pose one of the gravest national security dangers to the United States

Ah, the real meat of the issue? Has anyone else noticed the drumbeat ramping up in earnest for the next "War on fill-in-the-blank"? Sure, we all know that the threats are real, but it strikes me that we're about to spin up the full military/cyber-security complex, complete with its incessant fear-mongering, revolving private/public beneficiaries, and trillion dollar budgets.

Something about repeating the same patterns ad infinitum in response to every threat or perceived threat is just a bit exhausting.
For the sake of completeness, there's also a fourth:

4. The NSA is incompetent, but correctly concluded that NK is responsible anyway.

I agree that the "incompetent" ones are pretty unlikely. As for choosing between the first two, the big question to me is motive. I've seen plenty of people proposing 2, but I've not yet seen anybody articulate why they would do so. The only reasoning I've seen consists of references to similar false attributions in the past, which certainly has happened, but there are always reasons for it.

So what would the motivation be to lie about it? The Iraq WMD lie was used to justify war, but hacking a movie company won't move the dial on national support for war against North Korea, and there are many better ways to drum up popular support for such a thing. Increased cybersecurity funding? Again, I don't think people will care too much about a movie company as the target. Maybe someone in the US government hated the movie and wanted to sink it, and NK is just a convenient scapegoat? Pretty far fetched. Some other group carried out the hack, but this can't be disclosed somehow? Doesn't make much sense to me.

Unless there's some sort of reasonable proposal for why the US would lie about NK being the source of the hack, it doesn't seem too useful to discuss that angle beyond a basic "and yes, they might be lying for some unknown reason."
Inventory is not useful. You really need available stock, which is inventory + incoming stock movements - outgoing stock movements. This can be expensive to calculate (for a catalog page of 20 items), and stored in a different system to the e-commerce system. So, page load time as a metric may be more important. You might even find they have already tested this and get more sales without it.
More details (linked from the article):

Google's "Stop Zombie SOPA" page
https://takeaction.withgoogle.com/page/s/stop-zombie-sopa

Google's blog on the matter, explaining backstory:
http://googlepublicpolicy.blogspot.com/2014/12/the-mpaas-att...
Actively being a "hater" is very different from politely listing groups or ideologies that you are trying to avoid.
One Startup's Struggle to Survive the Silicon Valley Gold Rush
This is something the process manager should handle. With this approach each language and program has to implement the fd-passing and restart coordination. It also doesn't integrate really well with systemd/upstart because they want a stable pid.

That's why I wrote socketmaster[1], it's simple enough that it doesn't need to change and it's the one handling the socket and passing it to your program. I haven't had to touch it for years now.

For my current work I wrote crank[2], a refinement of that idea. It's a bit more complex but allows to coordinate restarts. It implements a subset of the systemd socket activation protocol conventions. All your program has to do is look for a LISTEN_FDS environment variable to find the bound file descriptor and send a "READY" message on the NOTIFY_FD file descriptor when it's ready to accept new connection. Only then will crank shutdown the old process.

* [1]: https://github.com/zimbatm/socketmaster
* [2]: https://github.com/pusher/crank
This is a very serious allegation -- I certainly hope as much evidence as possible is provided to the public before any punitive or compensatory measures are taken.

But let's be honest, the perp is North Korea. Nobody in this whole process will be stressing the need for transparency and restraint.

Looks like Sony's horrifying and insulting info-sec policies are going to be swept under the rug.
Multiple vulnerabilities released in NTP
Now that USG has announced attribution, what kind of response is called for by US doctrine?
Given a file descriptor, this returns an os.File [1] (it's analogous to a `FILE` from C-land). Which among other things, knows its name [2]. I guess it's hard to in a portable way go from a file descriptor to filename, so it's a parameter to `NewFile`.

[1] http://golang.org/pkg/os/#File
[2] http://golang.org/pkg/os/#File.Name
Pointless shit.
Or the FBI has their own agenda and knows other agencies won't contradict them publicly once they announce North Korea is responsible.
Reply to EDIT: Your logical estimation was based on the wholesale elimination of several options, of which, I think "competent but wrong" has the largest possibility.

I don't think which I believe and why matters much here, but this is a "false choice" fallacy that seems to be based on personal opinion and doesn't accurately set up the question for others to answer. I think that should be called out.
If we assume everything written here is the full truth, I think they need to release some more technical details on the specifics of the hack.

If foreign governments are now a real threat, industry should have some awareness of the methods being used so we can try and protect our own infrastructure. Especially as this seems to indicate they are using software that's at least somewhat known already.
I have to admit - I'm dying to know just what it is that this group has on Sony. They are completely back on their heels with this.
The Monad Cookbook
Many well-known security professionals

...who are pandering to a crowd, and based upon essentially no information at all, but just the same sort of "I think" gut feeling notions that we see on HN. While there should always be questions about government honesty, it's rather incredible how far people will reach to find to clutch onto something that backs whatever their initial knee-jerk opinion was, seen throughout the comments here.

Quite a few comments are among the "they're making this up to go to war", which is simply incredible: Are people so far out of the loop on world players or current events? The US in no universe will launch a military action against a rogue, shells-pointed-at-Seoul, nuclear armed nation because they hacked Sony. That premise alone is simply absurd.

Is the US trying to isolate North Korea? They're already completely isolated. I mean...do people understand the situation North Korea is in, and the complete lack of tools to deal with this? The US gains literally nothing pointing the finger at North Korea.
Haha! Good catch. I've seen people unwittingly leverage this basic pattern into entire executive careers :(
Here's a direct implementation of the Clojure -> and ->> macros in CL: https://github.com/nightfly19/cl-arrows/blob/master/arrows.l...

'fogus also points out that the Dylan compose function is similar, and that 'pg provides an implementation of that in his book ANSI Common Lisp: http://blog.fogus.me/2009/09/04/understanding-the-clojure-ma...
Or just print out QR codes that are bigger than the original and stick it over it... Or just print a new poster and paste it over... Iunno, I'm just not buying that this is a worthwhile vector.
Stop Making Fun of North Korea
Far more important IMO is the simple fact that a large number of Americans, possibly a majority, support torturing suspected terrorists and think that the only thing wrong with this whole affair was that the report was published.
Canonical’s “Snappy Ubuntu” Lands on AWS
I like it. That'd be a great visual for some pulp-retro-scifi story.
A right click and click on define divulges lifehacking as "a strategy or technique adopted in order to manage one's time and daily activities in a more efficient way". Given gluten is a drain on my brain, and riding at a certain time increases my clarity levels for creating, I'm going to strongly disagree with you here.

I also have NFC tags on my desk and near the front door to speed the time it takes to configure my phone for the commute to the city.

That there are some who are smug about their personal experiences practicing things I practice is up to them. Expecting to ONLY find smugness because people in the Bay (may) practice lifehacking is simply setting negative expectations. Nothing more, nothing less.
> nearly all of them have day jobs at companies like Boeing, NASA, Yahoo!, Airbus, SpaceX, and Salesforce.

> A lot of the work is being done by 25 UCLA students.

Huh? So at least 25% of the group are students, but "nearly all" are employed by name-brand companies?
If I accept that the NSA is competent in their intelligence gathering capacity. An organization does not get away with what they did for years and keep it secret for any period of time by being incompetent. That said, AFAIK the NSA has not stood behind this information, the FBI has.

If the NSA were able to identify with some certainty who the attackers were and it was another nation, and they forewent actually using this as an example of a real tangible good that comes from the intelligence gathering apparatus they've put in place after all the flak they've gotten, to me that colors the information somewhat. If they don't want to stand behind the assessment, it could be entirely political (none of the controversial programs helped, so don't fuel the fire of people asserting they aren't worthwhile) or it could be operational, as in they aren't as confident as the FBI is professing. I'm sure there are many other possible reasons as well, but I don't think it simply boils to competence or incompetence.
To me, this article seemed more like a PR text promoted by Spiegel himself (turning an incident into an advantage), than a violation of his privacy.

I've read many articles in the past that teased him or called him a "dick". This particular one is simply on a different level. I really respect his opinions on the new mobile market, and how he values to be a revenue generating company, contrary to the companies Snapchat was competing against at the time.
I wish I could remember the HN thread, but another HNer who claimed to have worked for Sony Picture's security described the security system as non-existent and was surprised that it hadn't happened sooner... Now to go looking for that.
Probably lots, but there would be no exploitable occupation. The south would take over a unified Korea, and they have plenty of qualified resource extraction companies.
Received a myo yesterday. Pretty awesome hardware execution - aka it works consistently - but the "things" you can do out-of-the-box are fairly limited. I will dig into the SDK over the weekend.
You're assuming basic rationality of people, which unfortunately isn't universally valid (I have the same intuitive tendency, which I've learned to be aware of and compensate for).

Disgruntled (usually ex-) employees have been known to do some pretty insane, destructive things, without appropriate regard for personal consequences. What was the name of that guy who locked his ex-employer out of their infrastructure and caused a big rumpus a few years ago, again? More to the point - we know that there exist people who are capable of walking into their workplace with an assault rifle; the existence of a person inclined to execute the attack on Sony should not be surprising.
Why is it 'incredibly dangerous' to do so?

I continue to be blown away by Hacker News' collective refusal to believe that NK is likely behind this hack. Do you all also doubt that they were behind the other hacks mentioned by the FBI (e.g. on South Korean banks and media outlets)? Is it 'incredibly dangerous' to accuse them of that as well?

I understand the post-Iraq mentality of demanding evidence before going to war with a country, but that's not what's going on here.

Also, given how mouthy North Korea is, nobody finds it telling that other than a single denial on December 7th, they've been quiet? That denial, by the way, consisted of bullshit like saying that there were “a great number of supporters and sympathizers” with North Korea “all over the world,” including “champions of peace” who might initiate more “righteous reaction” against the United States’ “evildoings.”
>Due to sensitive sources and methods to obtain the information, the FBI said it is limited in what it can share

I guess that's the reason for no or weak "evidence".