skysight-inc/HackerNews huggingface dataset:
>. ...I can't help but think, "geez, what an ass." You've got your big payday, but you can't even be bothered to see the thing through or say goodbye to some of the people who helped make your big payday happen?

I hear you, and I had the same reaction initially. But honestly it probably stems more from a complete lack of social skills and empathy for other biological entities than some air of entitlement or disregard. He probably just doesn't get how people feel, didn't know how to negotiate the social aspects, and found it easier to simply slip away.
Privacy app maker files EU antitrust complaint against Google
Benchmarking isn't about production levels but are useful tools to understand how things perform. With variations on a given benchmark over several iterations it is entirely possible to paint a detailed picture of most likely scenarios, good or bad. That approach is what we should all strive to achieve.
> If their software was called 'seed' tracker and they didn't mention Marijuana overtly, would it still be an issue?

Probably. There's often a significant legal difference between selling something intended as a general use tool that happens to have utility in illegal enterprises and selling something that is specifically designed and marketed as a tool for a specific class of criminal enterprise.
A Soliless smartwatch is a soulless smartwatch
Just because it's strictly legal doesn't mean Stripe's banking partners or card networks will allow the transactions. In general, Stripe's prohibited businesses list is generated from partner rules and not directly from the laws.

As another example, note that Stripe prohibits transactions related to the adult entertainment industry. There's nothing illegal about that, it's just that Stripe's business partners don't want to take on the chargeback liability.
There's probably a better way of doing it, but this should check all your public keys if you use more than one, assuming they're in ~/.ssh

for file in $(ls ~/.ssh/*.pub); do ssh-keygen -lf $file; done
This sounds an awful lot like a standard FTP server configured with a write-only directory.
SF (Burlingame) - DevOps Engineer/SysAdmin - Collaborative Drug Discovery, Inc.

We're the leading hosted collaborative drug discovery informatics platform. Scientists around the world manage, analyze and securely collaborate around their data using CDD Vault. This type of collaboration is crucial to research on under-funded diseases like Tuberculosis and Malaria and also provides a strategic, competitive advantage in commercial markets.

Our long list of customers (https://www.collaborativedrug.com/pages/who) includes academic labs, biotechs, big pharmas, government laboratories, as well as leading funders of collaborations like the NIH, the EU FP7, and the Bill & Melinda Gates Foundation. We're small, profitable, and growing.

As the first full-time member of the operations team, you will be in charge of the infrastructure used to deliver the CDD Vault application. We have cabinets in two data centers, and have begun deploying an on-premises version of our application to customers with specific security requirements.

We believe in infrastructure-as-code. We are looking for someone who is already skilled at automating infrastructure management, or someone who has a SysAdmin background and a strong desire to strengthen their coding skills. You will be given significant leeway to do your job the way you think is best.

The ideal candidate has experience with a lot of the following:

* Linux/Unix
* Firewall and VPN configuration
* Automated configuration management
* Hardware monitoring and troubleshooting
* Database replication, backups, and monitoring (MySQL)
* Network and OS security hardening, monitoring, and auditing

...and a desire to learn about the rest.

You must:

* Be local to our Burlingame office or willing to relocate
* Be able to participate in weekly on-call rotation with two other employees (we get paged outside of normal work hours less than once a month, and with your help we'd like to make incidents even less frequent)
* Be independent, meticulous, and result-driven

To apply, please contact me at the email address below with your resume and a brief explanation of why you would like to work with us. The email address has been gzipped, base-64 encoded and reversed to ensure that you are a human who can use command line tools.

=AAAA4hlEzGLAIQ5P78SX3kKp00SskMLK9iyMlUyP7MSx5sTWr8LPvyAAUVTfCLAIs4H
The Intelligent Investor[1] is my current focus after reading How I Lost a Million Dollars[2] both on Kindle.

[1] http://www.amazon.com/Intelligent-Investor-Collins-Business-...
[2] http://www.amazon.com/What-Learned-Losing-Million-Dollars-eb...
Agreed. Why would they be doing that?

All I can think is that psychological operations always have been part of war (and conflicts short of war), and the obvious place to conduct them in 2015 is not on leaflets dropped from airplanes, but on the Internet. I don't think it's conspiratorial to expect that nations are developing capabilities and training.
IT's right outside the window, it seems to me, though I'm optimistic that population growth will level off in a few years.

The other problem is economic - ownership doesn't expire so in a gerontocratic society the older members will by default end up holding more and more of the wealth.

Of course, one could argue that medical are in old age is a massive sink of wealth, and so anti-aging research has the possibility to mitigate that. But unless one proposes to make people immortal - which would entail massive social disruption - such advances are likely to just postpone those expenses.
It seems that the FBI has really taken to heart the change in mission statement from "law enforcement" to "national security
After 9/11, that's what people seemed to demand.
> Why take that risk with, literally, thousands of keys and people's security?

I would say it encourages scrutiny. The assumption of public keys is that they are public, if any part of your security architecture relies on a public key being private then it would seem flawed, flaws that should be exposed.

And if them being public induces extra paranoia, such as using separate keys only for github then all the better.

Sunlight is the best disinfectant.
That's not how the math works.

First, 2048 bits is not 512 bits doubled twice, but rather doubled 1536 times (512 doubled twice would be 514). If this were a symmetric cipher, you could stop here and conclude that a 2048 bit key was 2^1536 times stronger than a 512 bit key.

However, RSA has diminishing returns on security as you increase the key length. The strength is determined by the complexity of the GNFS, the fastest known way of breaking RSA[1]. That tells us that breaking 256-bit RSA takes ~2^46 operations, 512-bit RSA takes ~2^63, 2048-bit RSA takes ~2^116, and 4096-bit RSA takes ~2^156. 2^116 is a lot of operations - they say the amount of energy required to break that would be nearly enough to boil all the water on earth.

[1] http://crypto.stackexchange.com/questions/8687/security-stre...
"Everyone else had to do with a normal salary, plus whatever perks or bonuses Markus decided to throw their way when he felt generous."

To say that Markus had been generous with employees, would be an understatement.

https://twitter.com/notch/status/175174949277941760
Egyptian repairman outranks Google in search
"The "800%" claim seems totally bogus. Perhaps with a gadget that stops working when the voltage falls below 1.45V per cell."

Reading the article, that's what they were using as the benchmark.
15 Java Interview Questions on Method Overriding
In Minecraft, "not dying" is very simple. Make a well-lit underground wheat farm and you can survive forever. If you have never heard of minecraft you can get to this point in less than an hour of gameplay.

That "minimum viable strategy" is a baseline from which you can ramp up difficulty at your own pace.
Wonderful.

I am a big supporter of Powershell, and while Powershell has supported remoting since almost day one, it will never enjoy quite as much support as SSH already receives (e.g. third party tools, firewall support, etc). It is also nice that they're looking into using something fairly "proven" secure, OpenSSH is exposed to the internet a lot (even if, yes, that is not best practice) so we can reasonably expect it to withstand day to day attacks.

In general people really are starting to run out of reasons to "hate" Microsoft. It will be interesting to see what they come up with in the future...

PS - I really hope later they expand this to SFTP support. SFTP is significantly better than either FTP or FTPS, and something Windows has lacked since forever.
I live in Oakland with my girlfriend and we rent a 1 bedroom apartment.

My roughly 7k (pre-tax) a month goes to:

28% Taxes

10% Rent

15% ESPP

7% 401k

4% Vanguard

Most of that is automatically deducted (except for rent), and I usually end up with only a few hundred at the end of the month, meaning I'm saving about 25%. The rest goes towards groceries, car insurance, student loans, and way too many concerts/restaurants/nights out with friends.

I should probably increase my savings considerably but I like the lifestyle I'm living too much.
Move-in day for the DRC Finals – imagine packing up your entire lab!
>although it's sometimes implemented via software means such as cryptographic tunneling rather than a physical gap.

I've never heard the term "air gap" refer to something that is actually only segmented in software, crypto or no.
If only that gumption extended to the US tax payer footing the bill to be spied upon.
Phone Data Collection Sure to Continue Despite Patriot Act Expiration
Facebook Opens Third Artificial-Intelligence Research Hub in Paris
> As far as the Fed is concerned, any support of the illegal drug trade industry is a Felony.

Then there are literally 1000s of business owners in dozens of states in lighting, electrical, communications, real-estate, security, software, internet-service, legal, finance and investement industries committing felonies at this very moment.
> Being a licenced Unix is a technicality, mostly involving willingness to pay for a badge.

It's not, actually. You also have to do a lot of work to conform to the specs.

Linux doesn't. BSDs come very close. Mac OS X is conformant.
I strongly disagree with you. So do many, many people who upload their public PGP keys to keyservers. The whole point is that anybody, anywhere can have my public key without knowing my private key. If you can derive the private key from your public key, then you have a really bad keypair (by algorithm or by keysize).
> As far as the Fed is concerned, any support of the illegal drug trade industry is a Felony

The Feds. The Fed is mostly concerned with managing the money supply.

And that's not exactly true, even then (the laws are a lot more specific and complex, not everything that could be described that way is prohibited at all, and some of what is prohibited under federal law that way is not a felony.) But its a reasonable approximation.

> Selling software that is targeted at helping manage, distribute, and facilitate the marijuana industry (which is illegal federally) is against the law.

That's quite possibly true, and I can easily see other businesses not taking the risk of getting involved in case it is.

OTOH, if you are going to claim that it factually is, it wouldn't hurt to cite the specific law.
You can send it to the email in my profile. I'll check on why the system doesn't accept your pdf.
I agree, this is rude and as far as I remember, it's not mentioned anywhere in the key upload interface.

It's equivalent to uploading someones PGP key to a keyserver without his or her permission.
I'm looking forward to MS just dropping their OS entirely and using linux as their back-end. Basically, Microsoft might be better off creating their own linux distribution running a "microsoft windows" windows manager.
Saying that it's 2015 is a bit misleading. In JS's case, it's mostly a question of backwards compatibility and interactions with those backwards-compatible features.

The designers of let are largely a bunch of Schemers; they knew what they were doing.
Show HN: Geoplugin – This Is a Ruby Wrapper for Geoplugin API
I just spent minutes to parse that instruction. Mind blown. Thank you for this enlightenment.
If the crypto you use is sound/strong there is no reason-not-to/risk in making the public key known to everyone and his dog. If the crypto is not sound then the solution is not to hide the public key (security by obscurity style), it is to use better crypto.
Probably the only reason why your ca. 2005 linux media pc won't work in your current living room is that its hardware can't support your new 4K flatscreen. Open software could go some way towards addressing the update problem, but it would need to have a much more robust code signing infrastructure behind it, to avoid becoming an even worse morass of security problems than the morass we have today. (Generally, not in open software.)
Haven't they always done this? They've always used surveillance vans parked outside of suspect's houses with listening equipment, for example. They even used fake company names on the sides of the vans. Why should we be surprised they're using airplanes too?
Ten Days of Silent Meditation Will Make You Trip Balls and Lust After Puppies
Ask HN: Why has no one created a plug-and-play box for VPN?
The recent Hola fiasco made me wonder: why has no one started selling a plug-and-play box (cost amortized over subscription fees?) that lets users connect to a new wireless network, and have all traffic on said network tunneled?

I do understand that the normal, non-technical user in their ignorance, doesn't see the point in spending money when free services (which only require a click or two to setup) work "well." However, this fictional service could also provide add-ons for instant gratification. The only remaining part then, is education of the user-base... and maybe some FUD.

There's also other benefits from having a box, like tunnelling traffic for less open products like Apple TV or consoles.
The Pre-Money vs. Post-Money Confusion with Convertible Notes
http://shop.oreilly.com/product/0636920033677.do

Hope this helps....
So neovim is usable now? Do you run into many problems with it?
Please don't go to PyCruise
Mastercard and Visa launched network-side tokenization, not issuer-side tokenization. And yes, it used a Mastercard PayPass applet, as does network-side tokenization.

When it comes down to it, tokens are just credit cards that have a mapping back to an account. The network-side tokenization spec includes additional measures for provisioning and security, but they're still just credit cards. (If that weren't true, then all of the merchants would require terminal upgrades to work with them).

In issuer-side tokenization, it's the issuer (the user's bank/cc company) that creates the token, and they map it to accounts internally. In network-side tokenization, it's the network (MC, Visa, etc.) that handles the token creation, and they map it back to the previously issued credit card before the charge goes back to the issuer.
Wow. Just wow. This is something I never expected to come from Microsoft. They may in fact be changing for the better.
This is one of the best "how to boost you Vim productivity" articles I have ever seen. It really gets to the heart of the types of customizations that a lot of people don't consider that make a massive difference.
Notch didn't contact Microsoft, they contacted him.

“Anyone want to buy my share of Mojang so I can move on with my life?” he asked. “Getting hate for trying to do the right thing is not my gig.”

"Mojang CEO Carl Manneh was sitting at home with his family when he first saw the tweet. Within 30 seconds of his reading it, his phone rang. A Microsoft executive who coordinated with Mojang wanted to know if Persson was serious. “I’m not sure–let me talk to him,” said Manneh.

"While Persson originally wrote the message as a half-joke, the realization that he could disassociate from Mojang took hold. The man who once publicly pledged that he would not sell out to evil corporations now had his head turned.

"In the week that followed, Manneh’s phone rang constantly with interest from Microsoft, Electronic Arts, Activision Blizzard and others. Talks with Activision petered out. Persson, cryptically, won’t discuss what happened with EA but says that Mojang ruled out potential buyers “who did game play in a way we didn’t like.” Microsoft, however, apparently passed muster."

http://www.forbes.com/sites/ryanmac/2015/03/03/minecraft-mar...
Because now they can spy on millions vs 1. I think that makes the difference.
Medium budget cuts and restructuring
In my experience, early employees at startups don't usually just work from nine to five. They usually _do_ make large time sacrifices. I would say that early employees generally _are_ entitled to a fraction of the profits.
The article is so unprofessional. I can give you unlimited number of strategies based on historic data. And they won't work in the real world.
I've had demos ruined by iOS 8.x patches! (By changes to pretty well established code, like NSTimer and UIImageView updating.) I could easily believe that Windows patches would break things.
I think this is a great thing about HN. Through the noise of the donate links to this and that, others help propagate information how they are building tools that could help decrease the asymmetry of the landscape/ increase transparency surrounding these things in ways more grounded in realism.

Hak5 had a couple episodes dealing with getting set up with SDR and such to be able to do this for yourself[0] that I didn't see covered in that thread which might be useful for others as well.

[0] http://hak5.org/episodes/hak5-1525
Opendoor launches home shopping experience to buy, sell and tour a home 24/7
Yeah, well, if your area has high amounts of crime, violence, and poor drivers, of course it will.
Why? The windows core is a perfectly good alternative to Linux. It's always good to have competition.
Gumption will be when they write the follow up article and print the names of the new she'll companies and continue to expose this disgusting behaviour.
MasterCard CEO Confirms Tokenization Will Come to MasterPass ‘Later This Year’
Some of the change has just come from the entertainment industry. As it has gotten used to working in film/video it has discarded more and more elements of the stage (styling it as a stage show is at least partly why something like Reefer Madness was so silly).
Israel commands a small army of these as well, it's almost comical to see them appearing in social media and comment sections, but I have no doubt they're effective.

http://www.usatoday.com/story/news/world/2013/08/14/israel-s...
Sepp Blatter to quit as president amid corruption scandal
Probably by using something like:

https://play.google.com/store/apps/details?id=de.srlabs.snoo...

https://f-droid.org/repository/browse/?fdid=com.SecUpwN.AIMS...

I wish this kind of "firewall" was included natively in the operating systems, though, even as an opt-in feature. It's time for OS vendors to do something about it, just like they did with local storage encryption (enabled out of the box, even).
You can just upvote the story and it will be saved on your profile.
> Obviously this is the entertainment system and not something more critical

According to recent reports, the entertainment system is not fully isolated from the plane's navigation systems. However, Boeing has denied this.

http://www.cnn.com/2015/05/17/us/fbi-hacker-flight-computer-...
Opening Detroit’s Formerly Closed Doors Using the Power of Open Data
It certainly seems like for some reason (I assume the success of the game) that employees think they are entitled to more than a reasonable salary. I've worked plenty of jobs where I've received a decent salary and no perks. The one company I worked for was doing really well, I received a good salary and we received perks. No trips anywhere but catered lunches or desert bars or other things about every other month or so. Things like that show that you are appreciated, not sure where the entitlement comes from.
Shills and astroturfers are the future witches of the internet. I think the people concerned about these people will do more to derail conversation than the actual people being paid. On reddit it's really bad, many of them believe you literally can't have certain opinions without being paid to have them. Because of that, they literally won't even entertain opinions different from their own as sincere.

It really shouldn't matter if someone is paid to have an opinion -- if your own opinion is crappy enough that your only argument is that someone is being paid, then maybe they're doing you a favor by challenging your belief. Disinformation only works if you're too lazy to research the reality.

You'll never be able to confirm someone is a shill or whatever or not, so I don't understand why people obsess over it so much in comment sections. Just legitimately defend your view if it's that obvious.
Data Visualization and D3.js Newsletter Issue 133
I've been trying so hard to move my organization towards a chatops approach. We are making progress, it's just slower than I want.
Sepp Blatter to resign as Fifa president
"Your real name, apart from almost certainly not being unique, isn't private information anyway, so no privacy is being lost."

Yes, privacy is being lost.

I broke it down very simply: a public facing, crawlable webpage with a real-name is different than a NON-EXISTENT LINK.

Do you understand the difference between a "This Page Does Not Exist" error, and a "Hey, this is the public profile for Real Name" page? Do you understand the difference between say "Google.com" and "lkskldjfklsdjsdf.com"? One being a public page, the other being a non-existent webpage that returns an error?

I am shocked that your view of privacy is so broken that you cannot see the difference between publically posting a page on the public internet, accessible to literally every human on earth, and a whitelisted access page that has a total of about 300 human beings who can see it.

Do you understand why accessible to 5,000,000,000 is different than 300?

Then you can begin to understand privacy.
I am looking forward to the day when all SSDs ship minimal firmware, and offload all the complex work to (main-CPU) software.
Your Org Is a Product
If you have even a mediocre credit score, you can go on Prosper or LendingClub and get a loan for up to $35k for practically any reason. You have to declare a general purpose for the loan like "wedding" or "debt consolidation" (including "other"), but there is no screening to verify that the loan will actually be used for that purpose. The interest will be very high for an installment loan, but it's something.
How would we know unless we can read (and compile) the source code?
I was born and raised in Ukraine till I turned 14. Still have most of my family there and they visit regularly. They were present during most of the revolution and I can confirm nothing but love and pride to be Ukrainian. All that talk about Ukrainian nazi is garbage. Yes, we aren't perfect and we may have difficulties bringing order but it was all done with good intentions at heart. Most recent revolutions, including the Orange revolution, are some of the most peaceful times in Ukraine. People are truly united, crime rates drop dramatically, people make food and bring it to feed others for free. Both of my grandparents attended all of these events. I've never been more proud, I hope peace and order can be restored without Russia's involvement.
In Minecraft's unusual case, it was already seriously de-risked when the first few employees were hired. The additions however, did keep the momentum going, and deserve a cut for that. Jeb immediately comes to mind.