mryan

Fashiolista - Amsterdam, NL. Python/Django developers, DevOps. Full time, on-site in our office in the center of Amsterdam.

We are a funded startup looking for Python/Django developers and sysadmins with AWS experience... or ideally someone who ticks both of these boxes. As Fashiolista is growing rapidly, we are on the lookout for new team members who can help us scale the site and keep up with our growth.

Although we are in the fashion industry, a love of fashion is not required. If you love hacking open source applications and scaling high-traffic websites, you'll fit right in. We encourage our team to work on open source projects where possible, and attempt to open source many of the components we build ourselves. We are looking for "T-shaped employees" (a la Valve) who can contribute to a number of areas in the business.

Our stack consists of, among other things: - Django - Celery - SOLR - Redis - Memcached - PostgreSQL - AWS (with heavy use of CloudFormation)

More information is available on our jobs page (http://www.fashiolista.com/jobs), you can also email me directly if you would like to discuss the role futher (email in profile).

It says so right there on the page:

> 19:09, 25 October 2012 TexasAndroid (talk | contribs) deleted page Tom Preston-Werner (A7: No explanation of the subject's significance (real person) (TW))

I sincerely doubt many reasonably interesting articles can be accurately summed up in two words.

Just curious - what is your motivation for using a survey to gather feedback? Personally I feel most value from these discussions comes from the comments, where people have the opportunity to iteratively improve other people's ideas - something that is not possible if everyone submits their ideas through the survey form.

The point still stands - although you are in control of one variable in this equation ("iron sulfate doesn't reproduce"), it would still be impossible to predict the consequences.

Iron sulfate does indeed lack reproductive capability. But it attracts plankton, which is a wide category of organism - some plankton can reproduce.

The negligence in this case is stunning. His 'hack' was to write a Perl script which scanned a range of IPs, looking for remote access accounts that did not have a password. So, the compromised machines were:

- connected to the public internet, with a publicly routable address

- not firewalled

- running remote access software without a password

I strongly believe the strength of feeling shown by the US authorities here is primarily one of embarrassment. It is more comforting to believe you are facing a genius superhacker than it is to believe the people responsible for your network security are literally incompetent.

Also, while he was logged in to these machines he had notepad.exe-based conversations with other hackers - he was definitely not the only person who accessed these systems.

That does not answer the question of whether it is legal for US citizens to use this service, just that they are registered with the relevant authorities in the UK. As I understand it, online gambling is illegal in the US, no matter where the operation is hosted.

Excellent point!

An alternative to Kickstarter would be to approach these companies directly, with a demonstrable prototype, and secure a letter of intent to purchase. Armed with these letters, it might then be possible to get a business loan to fund the initial production run.

The point I was making is that this particular flaw is indeed the same as the UPS flaw when considered at a high level - modifying a URL caused sensitive data to be disclosed.

In practical terms, of course the nature of data that is disclosed is relevant. AWS keys are incredibly valuable, and should be treated as such.

> Ideally, we would be able to ship BluRays to a data cente

Amazon will accept delivery of hard disks and load the stored media in to S3/Glacier:

http://aws.amazon.com/importexport/

This is exactly the same thing - an obvious security oversight that resulted in private information being disclosed, simply by modifying the URL.

The fact that the results are so different is irrelevant - the attack vector was essentially the same.

Also, even with the complete lack of security on this site, it should still not be possible to take any action on the victim's AWS account. IAM has read-only roles for this exact reason - hopefully no-one was negligent enough to post their master AWS key/secret in to this or any other third-party site.

Anyone interested in interesting applications of quadrotors will probably like the work of the GRASP lab: https://www.grasp.upenn.edu/

SEEKING WORK - Amsterdam, London, Remote.

I am a sysadmin who loves to efficiently solve business problems. With a DevOps background, twelve years of sysadmin experience, and a passion for problem-solving, I am keen to help HNers achieve their goals.

My main areas of expertise are:

    Scaling high traffic websites
    Designing highly-reliable applications
    Building applications on AWS
    Server maintenance and optimisation
    Reducing the cost of existing AWS resources
    Developing prototypes and full sites in Django

Although primarily a sysadmin, I am also experienced with Django/Python development. I am building my own startup with these technologies, so I know the sort of problems startups face.

I am building a business around the idea of a 'sysadmin as a service' for those people who need regular sysadmin work, yet do not have enough projects to justify hiring a full-time sysadmin. Would you like a friendly expert to work on ad hoc projects and also be available for emergency support?

For AWS cost-reduction projects, I am willing to give a "no win, no fee" guarantee - if I fail to reduce your AWS bill by the amount I state at the beginning of the project, there will be no charge.

If you'd like to discuss any of these services in more detail, drop me an email - mike@fadedink.co.uk

Fashiolista - Amsterdam, NL. Python/Django developers, DevOps. Full time, on-site in our office in the center of Amsterdam.

We are a funded startup looking for Python/Django developers and sysadmins with AWS experience... or ideally someone who ticks both of these boxes. As Fashiolista is growing rapidly, we are on the lookout for new team members who can help us scale the site and keep up with our growth.

Although we are in the fashion industry, a love of fashion is not required. If you love hacking open source applications and scaling high-traffic websites, you'll fit right in. We encourage our team to work on open source projects where possible, and attempt to open source many of the components we build ourselves. We are looking for "T-shaped employees" (a la Valve) who can contribute to a number of areas in the business.

Our stack consists of, among other things:

- Django

- Celery

- SOLR

- Redis

- Memcached

- PostgreSQL

- AWS (with heavy use of CloudFormation)

More information is available on our jobs page (http://www.fashiolista.com/jobs), you can also email me directly if you would like to discuss the role futher (email in profile).

> You know what? I don't trust Google enough to allow them to lock me out of my own systems, and I'm surprised other obviously technologically inclined people do.

This is a common misconception of Authenticator. It is an open source implementation of OATH which works entirely offline once the initial secrets have been shared.

Using Google Authenticator for SSH accounts (via PAM) does not give Google the ability to lock you out of your systems.

Excluding severe bugs and overly paranoid scenarios, e.g. the entire Authenticator system being a convoluted plan for Google to take over your servers.

I would argue that this does count as a major player getting behind Linux. While Valve might have additional longer term goals in mind, their plans to support vanilla Ubuntu will only benefit gamers who wish to run Linux.

IMO the question is not 'will more Linux users buy games', but rather 'what percentage of games-playing Windows users will decide they no longer need a Windows box'.

This is a year-old bug report which resulted in a comment thread filled with memes. Not quite Hacker News-worthy IMHO.

The only useful lesson here is that there is a huge difference between "rm -rf /usr/some/dir" and "rm -rf /usr /some/dir".

> They don't give their source away, but they give their service away.

github is not open source - they have a closed source service that is available for free, with limitations. Unless you meant that they are building a business based on an open source piece of software, which is a little different from e.g. Sentry.

pgbench will only stress your disks if the test database is too large to fit entirely in memory (controlled by the scaling factor option).

bonnie++ results would also be interesting.

Ah, that makes sense, thanks for the clarification.

I have no vested interest either way, but barman does appear to support compression and backup maintenance - it has a built in command for running all maintenance tasks, including compressing backups and moving them to archival storage.

This comes from 2ndQuadrant, so hopefully they will leave the core version as open-source.

> The problem is that they have not been built for you.

As well as not being built for you, it was also not built by you. I believe NIH syndrome is responsible for the glut of half-finished programmer tools that litter the SaaS market.

That's not to say that there is not room for another bug tracker, nor that there is anything wrong with a touch of NIH syndrome here and there.

Would you be willing to share some links to your research? I find this area fascinating, and also believe this is going to be a big market in future.

I seem to recall reading a $999 3D printer being announced at a hardware conference recently, but I'm afraid I can't find the link.

The Cubify (http://cubify.com/cube/store.aspx) is $1299, so I don't think it will be long until we have a few sub-$999 models to choose from.

Seconded - this is a bit light on content. Hopefully the post-conference talks will be a bit meatier.

It's a relatively common thing for criminals to do, and is known as a 'long firm': http://en.wikipedia.org/wiki/Long_firm

1) Run a legit business for a few months

2) Build up credit history with suppliers

3) After a while, buy a huge amount of stock on credit

4) Sell all of the stock for cash at massive discounts

5) Disappear with the cash, leaving a pile of unpaid debt in your wake

I think noonespecial's point is that much of Ikea's income comes from people meandering through these labyrinths, being exposed to item after item until they see something that they "must have". It would not make sense for them to cannibalise this by completely changing the business.

You do raise some interesting ideas, and I think there is a place for 3D printing in Ikea's business model, especially in customisation of off-the-shelf items.

Squiz's Matrix (open-source CMS) also uses an EAV model.

It would be interesting to see an updated version of the study on which these statistics are based, which takes in to account social media.

    So you are in fact handing over your 2-factor auth key to Google when
    you run google-authenticator

Unless things have changed a lot since I last used this, this is not entirely correct. The binary will print out a URL - the QR code is only generated if you hit this URL.

If you visit this URL, you are sending the "QR-encoded" (not exactly, but you know what I mean) version of the key to Google's servers.

As long as you do not visit this link, you will not send your key to Google's servers.