skysight-inc/HackerNews huggingface dataset:
It seems like they are targeting smaller sites desperate for traffic.
They are trying to make the owners monitoring (Google) analytics look at their own site offering "SEO", "marketing", "social optimizations" and similar services that are probably as shady as their way of "contacting" the owners of low-traffic sites.

I have a site with less than 200 "visits" per month.
20% of traffic apparently comes from the site semalt.semalt.com.
10% comes from this site: buttons-for-website.com.
Another 6% is from this one: make-money-online.7makemoneyonline.com
Yes. The Ukrainian spam I get is almost entirely unique referrers each time, so individual results rarely show up enough times to even rank. Semalt.com and something called speedfox are the only ones that really show up consistently enough from the same source for host-by-host blocking to do any good. The others just rotate through different hosts on a routine enough basis that it'd be more work than it was worth blocking them one by one.
AFS might work for you. It would still be centralized, but at least you get local caching [1] compared to NFS for example.

[1] http://csg.sph.umich.edu/docs/unix/afs/
Referer spam has been around almost as long as web analytics. What's new is that they found a way to infiltrate Google Analytics, which previously avoided them somehow. I'm surprised Google hasn't come up with a countermeasure yet.
Good close. I have seen the "have a strong network" pay off over and over again.
which is precisely an example where plug-in wouldn't help but quick battery swap does. A pizzeria easily justifies having their own swap station.
AirAsia blackboxes found
So I've dabbled in Prolog and used it a few times, like many here. But yes, there are people doing significant and interesting work in Prolog. A friend of a friend who I followed when I was on Facebook uses Prolog quite a bit[1]. He's not an "all Prolog all the time" person. Rather, he's well acquainted with and likes Prolog and knows when it's a good fit for the problem at hand, or for pieces of the problem at hand. Search his site for prolog and you'll get a lot of interesting info.

1. http://covingtoninnovations.com/michael/index.html
Exposing citizens to potentially harmful radiation in order to protect citizens from potentially harmful substances. Typical War on Drugs logic.
PHP and MySQL Quiz for Beginners
Espressif ESP8266 WiFi-serial interface die-shot
Yet they keep pronouncing cloud first, mobile first. This kind of implies desktop last.
Get a monthly subscription. They limit you by number of team size, not number of repos.
Generating random tokens is cryptography. It just happens to be done more by non-cryptographers, which doesn't necessarily mean they're better at it (hint: they aren't).

You can perform cryptanalysis on random tokens and if the RNG (or PRNG) isn't seeded properly, you get a replay attack. This is not to mention: aside from attacks, you have further crypto to do aside from the generation: how do you verify the token?

If you roll your own RNG/PRNG and token generation, it is probably just as broken as the block cipher you tried to roll yourself as well. Using standard libraries and well-audited tools brings ciphertext authentication into the same realm of usability for developers that token generation is in.
Reminds me of this video [https://www.youtube.com/watch?v=oVfHeWTKjag] on the bogus Facebook engagement you pay for: https://www.youtube.com/watch?v=oVfHeWTKjag.
Are there any major public repository hosting services that provide good organizational tools for multiple repositories?

GitHub, as far as I have been able to determine, only supports a flat list sorted by last update.

This is annoying when a developer has a lot of repositories. I'll come across something useful in one of my areas of interest from a given developer, and then want to look at their other repositories to see if they have anything else in that area of interest. In a sane design, all of their repositories in that area would be organized under a folder, and this would be easy.

BitBucket seems to have the same limitation.
8 out of ten. I got 5 and 8 wrong.
maybe this can be fixed by requiring some mouse over action before the hit is registered
For the record, blurring (even when applied appropriately) is still a pretty bad idea for hiding information [1]. I know this has been on HN a few times.

I'm not sure what you can do with the GA key or if it's even private, but just adjusting levels in gimp shows the numbers.

[1] http://dheera.net/projects/blur
You have an easy-to-blow mind apparently.
> Shouldn't that be its users?

No, an open source project with a minor foothold is wholly dependant on its developers/contributors. The users at this point have very little investment.

> because this is really 2K multiplied by all the times it gets used

No matter how many times it gets used, it's still 0.56%.

> Fun and games has its time and place, but the runtime library of a new language that's trying to increase its popularity is not it.

Despite your baseless proposition, Rust has done very well in gaining popularity as a C++ competitor. It has done this by discerning in features that actually matter like safety, structure and consistency.
It'd be interesting (but difficult) that the program can recognize the known choreographies (and rotated versions) and show the data.

It' difficult to find a choreography that is not a circle. I found the circle-with-hearth choreography and I was very happy until I saw (3-planets, position (6,1)).

And another feature request. I'd like to link to a choreography, at least to a well known choreography and perhaps to a user generated choreography.
Ask HN: Good books on similarities, searching, recommendations etc?
Being a self-taught engineer/programmer I ommitted many useful topics I should have learnt some time ago.

A few weeks ago I started reading "Programming Collective Intelligence" by Toby Segaran [1] and I think it was a very good start to learn about the subjects mentioned in the title.

It puts nicely theory into practice and everything is quite easy to understand so it's a great introduction, but I'd like to learn more :)

Can you suggest any other good and intelligible books on topics such as recommendations, filtering, similarities, clustering etc.?

1. http://www.amazon.com/Programming-Collective-Intelligence-Building-Applications/dp/0596529325
> Shouldn't that be its users?

In general, the developers of a project get to decide if they "care" about users; maybe they're working on the project purely for fun, or for research purposes, and so desires of other people trying to use it are essentially irrelevant.

(This isn't the case for Rust; but the enjoyment of the contributors and core team is still important, most of the contributors and some of the core team are volunteers.)
I know this might be an irrelevant comment, but I prefer translations that translates the meaning, not the sound. And I feel it goes for my native language, Danish, as well, which has unfortunately been heavily populated with English loanwords, whose pronunciation has not changed. Which creates an unfortunate circumstance for the language, wherein a speaker has to know how a word is pronounced, and cannot necessarily guess it from its spelling.
I will post this list in the app so it's pretty and easily accessible from one's pocket. Added to the features list.
Oh come on! Reality check please :)

Tests alone provide little value to anyone. At least if you had the production code you could keep it running in its current state while you added back those important tests bit by bit.

Most of the tests wouldn't be needed as good code tends to be churn-free. Finally if you wrote the code TDD style, then writing tests for even the hairy bits would be "easy" compared to rewriting the whole system.
https://web.archive.org/web/20141026114453/http://www.jpaulm...
I don't think the spammers are targeting Google Analytics specificaly as much as they are trying to get links for their domains on to the internet.

Lots of websites posts their visitor logs or stats on a special status-page (or at least used to do). If those links aren't rel=nofollow, then congratulations, your referer-spamming just gained yourself some SEO-bonus.
Fourth Amendment issues aside, as a non-American this strikes me as an obvious violation of Human Rights (especially the right to bodily integrity in particular).

I'm not sure what the situation is like in the US, but I'm fairly certain that in my country you couldn't be subjected to an x-ray scan without consent, unless there is sufficiently strong suspicion and an x-ray scan would be the least invasive option (e.g. this is why you can be forced to give a blood sample if you refuse to take a breathalyser test when assumed to DUI).

I have no idea how random drive-by x-rays on the street could be considered reasonable and not in violation of Human Rights unless you're in a freakin warzone.
Lots of websites posts their visitor logs or stats on a special status-page (or at least used to do). If those links aren't rel=nofollow, then congratulations, your referer-spamming just gained yourself some SEO-bonus.
What if the hammer had, say, a quote stamped, in very small script, into the head, or carved at the base of the haft?
Huh! Just yesterday I was fed-up with Textsecure being so buggy and bad that I looked at the Telegram homepage and thought "nice" apart from not completely being free software (or is it?). It says "Telegram messages are heavily encrypted and can self-destruct." which made me believe that all messages are heavily encrypted.

Now this post says "By default, messages (...) are logged and stored on Telegram's servers". Damn.
I was going to make the same comment and then I realized blurring it is pretty useless: that info is in the JS snippet for GA on that site (and yes the key is the same).
Suggestion: rename it as "The Love App". Easier to remember, better for media.
I just realized that yesterday was the to-the-day 1 year anniversary of my girlfriend of 3 years dumping me in Palo Alto (via email) the day after she told me she could see us married and happy together (ouch!). Woke up, read HackerNews, and had this insatiable urge to blow off everything I had on my plate for PRMatch.com and code this sucker up. So grateful for all the praise / support / people using it and signing up for more free relationship tools.

Looking forward to some wedding photos!

xo, Anthony
That's what I figured, but since the author still blurred it I figured it was still worth mentioning.
"Some viable alternatives I can recommend are Threema or TextSecure."

The problem with Threema and TextSecure is that it's hard to convince my friends to use them because

- Threema is not free and does not have desktop/web clients, and multi-device setup is not supported afaik
- TextSecure is not really multi-platform

The only popular, multiplatform messengers at the moment are Whatsapp, FB Messenger, Viber/Line and Telegram. Whatsapp doesn't have a desktop client, Messenger requires a Facebook Login, Telegram and Whatsapp does not have voice chat and I hate Viber's design -> so I keep using Telegram for messaging and Skype for voice.

The network effects can be very nicely observed in messenger usages. In my home country almost everyone uses Viber, but in other countries I have worked (W-EU) almost everyone uses Whatsapp. In Germany people seem to know Telegram, in other places nobody heard about it.
I dunno, I think it's more a way of stating 'this was written by a person', similar to the mouseman furniture. Whether that's appropriate or not in an OS project with multiple collaborators is debatable; I would say yes, but those disagreeing have a fair point (sadly, I feel)
What if, say, US army gun sights had bible verses stamped on them?

http://www.christianpost.com/news/u-s-military-concerned-abo...
Also after them buying HockeyApp it wouldn't be the least bit surprising.
I love TypeScript, and I wish it was more popular outside Microsoft, but it isn't.
That's what Mozilla's proposed MediaStream Processing API was: https://dvcs.w3.org/hg/audio/raw-file/tip/streams/StreamProc...

But Google was able to put more engineering effort behind the Web Audio API and get a lot of web sites to use it, so that's what won. The fact that Web Audio's ScriptProcessorNodes run on the main thread instead of in workers is basically a travesty, brought about because they were tacked on as an afterthought to claim "feature parity" with the MediaStream Processing API. Until that's fixed [1], real-time audio generation in JavaScript will always be a joke that only works under ideal conditions where people open just one, well-tuned webpage in their browsers at a time and GC pauses don't exist.

(full disclosure: I work for Mozilla and am not bitter at all)

[1] https://developer.mozilla.org/en-US/docs/Web/API/Web_Audio_A... is the proposal to fix it, only three years late to the party
I have a hard time believing that will be cost effective. I started to describe my reasons, then found that http://blog.cleanenergy.org/2015/01/05/windtree/ did a much better job, and included factors I hadn't thought of.

1. It’s purely for aesthetics.
2. Ever heard of “wake effect?”
3. Making a wind turbine look like a bird’s natural habitat isn’t a great idea.
4. Short turbines don’t produce a lot of energy.
5. It’s way more expensive than just about every other form of power generation.
6. It won’t pay for itself in 2 years.
7. It won’t power most of your home.
8. It won’t win over anti-wind activists.
Breaking antivirus software
http://bitcoin.stackexchange.com/questions/553/how-do-script...
A week on Twitter, maps and democratizing data
If those sites hijacking your code aren't actually linking to you, then the visits that show as referred by them are presumably visits staying on those spam sites. In which case by filtering out those visits, you'll also filter out the referral sources for those visits, no?

(It's been a while since Analytics was anywhere near my personal work, so could be wrong here.)
Doing it incrementally is definitely the best. However, in your scenario, the problem of a 'weird' codebase people have a hard time using is not addressed by requiring further development in it. Database layout is usually not the problem if the system was at all functional.

Having done this a few times, when switching from old to new, the new framework would have a DB agnostic ORM. What works nicely is building the models, duplicate templating, getting a mirror working. Shut down the old site, and then it's possible to go on with normal development.

So, it is important to consider rewrite and redesign as separate goals.
"By default, messages (...) are logged and stored on Telegram's servers".

Because most of the users need this for keeping the message history and they would not use Telegram otherwise.
Fast, Scalable Networking in Go with Mangos
There's a good chance that one of the embedded systems in your car uses it. Especially the really small ones (too small to run RTOS).
What's Your Beauty? “ Beauty Say What ”
Reservation Confirmed: A Reading List About Airbnb
It is true that technically people can process a payment or deposit against any account where they have the Routing and Account number. However, the legal consequences of doing an unauthorized withdrawal is quite stiff, not to mention the audit trail is really easy to follow. And your own bank will provide fraud protection if someone does this, limiting your liability to basically nothing.

I generally have no issues giving a company our wire information or ACH information. I'd much rather get the fraud protection from my bank. The difference to me is this. My bank sides with me first until the other side proves they were authorized, e.g. within 24 hours they put the money back in my account and fight with the other side to prove they had my authorization for the withdrawal. If you get a chargeback or Paypal refund, they both side against you and make you prove you were entitled to receive the funds, and even then many times won't care (Paypal).
I'm not entirely sure how someone can prevent the publicly available Google Analytics code from getting hijacked. The author is claiming the sites responsible aren't even going to his site, just using, again, publicly available information (GA JS code and his very public API key).

Really, it sounds like the author is claiming that JavaScript only analytics solutions are the problem, not that GA is inherently bad (clickbait title aside).

Beyond that, as a few people have stated ITT, most of your GA reports are pure fiction already and it's worse the larger your site is. If a significant fraction of your total data is garbage, you aren't going to get much out of it, even if you can clean it up.
There are many people in the US who speak Spanish, and many of these can read it as well.

There are few speakers of Welsh in Scotland, even fewer who can read welsh.

It would be as odd as having French-English signs in the US.
10 Actions to Make Sure Your New Business Will Scale
Saw the presentation for this at ClojureX in London. I'm definitely interested to have a look

https://skillsmatter.com/skillscasts/5738-keynote-by-kyle-ki...
those spammers don't need to visit your site to send bogus analytics data. All they need is your unique GA tracking id, and they can fire data straight into google.
Google have responded to this (in the past) by implementing an automated spam/bot/spider filtering service:

https://plus.google.com/+GoogleAnalytics/posts/2tJ79CkfnZk

If you're seeing nefarious traffic/referrers you may want to tick this box which I believe is unticked by default.
The SEMalt spam has been around since at least June 2014, I got incensed enough to block them from my server and write up how to block them on Apache servers:

http://kohanikin.com/2014/filtering-semalt-referrer-spam.htm...

This post seems to describe a new technique where spammers never even visit your site in the first place, spamming the Google Analytics servers directly.
A still life would be even better. The emblem would be doing what it is supposed to be doing: stay put.
The reason fuses are prohibited in distribution panels for homes and many other types of buildings has nothing to do with the magnitude of the potential overcurrents. The prohibitions on fuses and requirements for circuit breakers exist because experience has shown that occupants will frequently short across rather than replacing blown fuses.

The resulting fire and shock hazard endanger not only the occupants but the general public and firefighters responding to calls.
In my experience recruiters try to provide what the market, via hiring managers, wants, but the hiring manager, collectively, is a fickle entity.

"Ninja," "Rockstar," "A-player." You can't expect to interest those people in middling jobs from mediocre employers.

Fix hiring expectations and you will have gone a long way toward solving the hiring "problem."
The interaction of the BBC's "no brand names on air" policy with this is often hilarious, as they have to either refer to "social media" or say "other <X> are available" if they do mention a brand name.
referrer spam is something that has been happening to years, and GA is actually quite good at filtering it comapred to a lot of other stats programs out there. This is really not an issue.
Isn't all this pointless when Telegram could just MITM everyone at will of any agency, as the client is closed source?

Unless the whole client code is audited by third parties (and it is ensured that app store version = audited version), this whole exchange of keys with colorful qr code could be a charade.
Indeed. For Visual Studio and their development-server (Team Foundation Server, TFS for short) they have had a significant shift over the last few years.

TFS is available online under the name Visual Studio Online (a web only offering), with first class integration with Azure.

Development is done there first, and then later, every now and then, a on premises release is available that organizations can install on their server.

And the last updates have had significant features available only through the TFS web-portal. They were not made available via the Windows-components, like the intergrations for Visual Studio on the desktop. If you wanted the improved features you had to go the web-portal.

I'm starting to question whether Microsoft themselves see any value in developing a Windows-parallel to what is already a good enough web-solution. And if they can't be bothered, why should anyone else?
Perhaps Microsoft wants to divest out of the git+online tools space? Github is the incumbent that they did not crack how to beat and it will be a bit more crowded with Amazon who seems to be also coming this year with CodeCommit. So far, Amazon strategy has been to suck all air from the room.
That is very difficult to google for.
Adding to this - most privacy/adblock plugins also block analytics.
So I really have to doubt that Google Analytics is of much value.
Gitlab at least has groups of repositories, which provide some amount of namespacing. No idea if it supports nesting.
BTW -- one other point, anyone that sees another persons check has all they need to electronically process a payment (or deposit) against their account. What stops them from doing it is generally 1: a lack of knowledge, 2: the Fraud protection and audit trail combined with stiff penalties (e.g. its a US federal felony from what I understand) for doing it.

Not that it doesn't happen, but in 10+ years I have never had anyone dispute an ACH/Wire transfer (or illegally reprocess one), but Paypal fights and (a few) chargebacks we have had.

One last note, payroll departments many times have you sign an agreement that says IF they over pay you that they can automatically go into your account and auto debit the over payment amount. That is completely legal and legit, but I've never had a company send me an agreement granting them the same permission, and I wouldn't sign it if they did.
You can't just buy image. If anything it would just dilute the image of github. It's like the rich kid trying to make friends by buying the basketball court.
wtf? client is all OSS https://telegram.org/source
The thing is, to use a 'secure email' or having a book named 'against democracy' is not proof of enough to relate them to those attacks.

at this point, to use a secure email and having that book was enough reason to put them in jail because of those attacks.

in chile the same thing happened, 14 people were arrested under similar charges (possessions of books and even a guns and roses posters). they spent years in prison while the trial was setted up and investigated. they were found not guilty 3 times...

they are currently in jail because they have the book against democracy and they use a secure email. if they are guilty or not, it will be resolved later on a trial. but they can spend years in prison without the trial be made.
I don't think they are targeting anyone, I have always seen a few hundred a month on company websites. Some small sites simply aren't found yet by these spiders.

If you are seriously using analytics then you aren't really working in absolute numbers and the only problem is sporadic noise.
I Am Proposing “Refactor Fridays”
You don't get a contract for being forced to comply with a secret court order for information.
I'm not sure what level of sophistication goes into GA's anomaly detection, but if those spammy domains show up, then I'm guessing it's not that difficult to cause much more damage using similar techniques.

Scenario:

I want to annoy / confuse / distract my competitor by making their analytics data less-effective (potentially totally unusable). I grab their tracking ID and send tons of fake events / requests / page views. Now my competitor can't really figure out what actual traffic they're getting and what's real and what's fake... Plus they spend time trying to figure out what's going on, clean up their data etc.

It can go way beyond referring domains - think custom events, ecommerce tracking, site speed... anything that analytics tracks can be faked.