skysight-inc/HackerNews huggingface dataset:
Depends on how that password is stored. Mostly.

Your alphabet, lowercase + uppercase + digits + symbols, has 72 characters. There are 72 ways to pick the first character of your password, 72 ways to pick the second, etc. So there are 72 to the 25th power possible passwords, about 7.5 times 10 to the 46th (about 7 followed by 46 zeroes).

That's fewer possibilities than the number of atoms in the universe and fewer possibilities than the ways you can order a deck of cards, but if a computer can calculate one hash per nanosecond, it'd take about ... well, more millennia than I know the words for. Even if we're talking about a cluster of GPU machines, it's effectively forever. Unless you had some infinite improbability drive (like a quantum computer?) and you guess correctly on the first try.

So what did you use to generate the random password? Did you use your favorite programming language's pseudo-random number generator? Remember, "anyone who attempts to generate random numbers by deterministic means is, of course, living in a state of sin" (John von Neumann). A bad random number generator might only have 2^32 possibilities.

Let's put that aside. It's unlikely that the hacker knows which random number generator you used. It's much more likely that the company storing your passwords is not storing them securely. Passwords should not be stored, ever. Instead, the company should store a hashcode. The hashing algorithm should be like the butterfly effect -- a tiny change in the password produces an unpredictable difference in the hashcode. Unfortunately, many older hashing algorithms, like MD5, are predictable. A hacker can find an MD5 collision -- not your password, but one that hashes to the same hashcode -- within minutes.

There's more to it, but my advice is NEVER rely on password security by itself. If you care about your security, then use 2-factor authentication or physical security in combination with password protection.

Edit: Am I incorrect? I see there was a downvote. Please educate me.
I think it is possible/fairly safe to cheer for the Denver Bronco's or the New York Yankees, or Crystal Palace football club or Team SoloMid or whatever without making that one's identity.

Edit: Just now, someone showed me a video which claimed drinking apple cider vinegar helped prevent cancer. I tried to say that this is billshit because nobody can really say drinking something prevents cancer without a long-term study that I doubt this YouTube celebrity had done.

I don't claim I don't have a bias. But I don't think we should be sin free to cast the first stone on ideas.
This is a problem with Salt's YAML abuse, not YAML.
Congrats on the adoption, although I still don't think it's moving our public institutions in the right direction. It's really just moving a lot more kids into a walled garden. I know Google has been in hot water for collecting student data recently and has since taken steps to fix it. That's their primary business model though. "Anonymizing" promises always follow and then it's a trust game again.

I can see a future where a mandatory Google account follows you up the grades. Educational software is released exclusively in Google's Play store. Assignments and homework are handed in with Google Drive and Google Docs.

Sure this is great for Google, but I think our public institutions suffer from such a third-party centrality. I remember at UW-Madison, it was annoying having to pay for a semester long subscription to whatever the professor decided was a good cms for the class, but at least the costs were explicit and there wasn't a monopoly player in the field that everyone had to use. IMHO, Google is more interested in getting people into the garden than it is in selling hardware or fostering education.
Is the first mover advantage really that important?
yea it's a busy term. we just came out of stealth so it will take us a little to climb up the search rankings. (part of the tradeoffs you are making when picking a company name.)

https://www.meettally.com/
You are correct that the file contents may remain in memory.

Neither this tool nor GNU shred nor BSD `rm -P` can do anything about it.
Our team made http://quickmarklets.com at the TechCrunch Disrupt hackathon. It can currently only be used on http websites (until we host it on https) but it lets you do what you say, on mobile phones.

Do you think it's useful btw to have bookmarklets on the mobile web? Until now, you were limited to safari extensions and intents which you had to install through the app store.
I'm all for user style sheets, I see no problem in people overriding site defaults. Re: sites breaking existing functionality while changing, maybe I just don't see big regressions as having happened in Gmail (which I always have open) or Github (which I rarely have open, as my source is in a local repo, but I visit on a regular basis from links here and elsewhere). It is interesting that you mention keyboard mouse combos, when to my knowledge both sites have put specific effort into making keyboard shortcuts that work and allow some level of navigation without any mouse.
By "just" I mean this is a simpler solution (compared to JSONSchema), not that it is an obvious solution. I'm pretty sure the author does not know about this solution since using Protocol Buffers for configs is not a well-known use case outside of Google.
well, here's the tally careers page

https://www.meettally.com/careers
A Debugging Horror Story: Fixing a Tricky GHC Bug
I've used the same strategy for the past few years with great results. Like you said it's really nice to see early on which companies are leaking your info.

It's also nice to be able to kill specific email addresses once a breach has been disclosed and the spam becomes plentiful.
FPGAs
Performing Quantum Computing Experiments in the Cloud
Uber-U Is Already Here, Powered by Blockchain
That would definitely explain it.

Never liked the downvoting idea, but if it must be, then it would be nice if people were at least required to comment while downvoting and open themselves to downvotes for their whacked, baseless downvotes.
Harvard Sucks. Here's Why
You could test a few of these counting strategies with the API - I'd be interested to see it.
Show HN: React-server, for fast load and seamless transitions between pages
Usually we do that so we can mark the detached subthread off-topic, which makes it fall in rank. In this case we didn't add that extra penalty, but detaching it from the top subthread had much the same effect.
If you attend UCF, join the programming team, and make it to regionals your peers will be some of the best programmers in the US and you will be able to rely on those connections for the rest of your career. Just attending UCF guarantees little.
Alt-Left.

Works on every platform. Even on Android (last I tried years ago).
Apple opens dev center in Hyderabad
What in the email tells you they can't sell some portion of shares after a certain number of years?
I think it's actually quite interesting - as a non-insignificant number of people are probably supporting Trump because they are tired of being told that holding a particular belief is 'racist' or 'xenophobic' (something they clearly would disagree with).
OS and hardware dependent. I prefer Alt-Left because it just works everywhere.
Considering 12 million copies of Fallout 4 sold in the first 24 hours of launch, it's quite possible (if sad) that there's users of Google that know of the game than know of Ada Lovelace (beyond having just heard the name once) or the Ada language.
I may be an oddball, but I expect engineers at at startup to help with support, and would absolutely hire someone who had worked in a support role over someone who hadn't if they're otherwise equally qualified.

The experience is super valuable - especially if you leave with a spidey-sense for what product features and UI gimmicks will cause users the most trouble. It's way better (and cheaper!) to fix issues like that during development than after a product has been released.

So much stuff released now is frankly user-hostile. Hidden, undiscoverable but essential actions and controls, and needless complicated interactions. Ugh.
Well San Francisco is on the coast. By sea, it has shorter travel times to all the cities in the West Coast, Vancouver and a continent called Asia.
we are planning to be pretty good about managing our risk :)
but more importantly credit card debt isn't "bad debt" at all. most folks think that. there is about $700B of credit card debt of which about half is held by large pensions funds etc. and none of that paper defaulted in the financial crises.
Sure, if it was found for whichever library code was used on that device, and if you also found a way to use it to get the OS to expose data that it usually wouldn't.

I'm not saying that someone couldn't work out a way to exploit that phone, I'm saying that it's not going to happen because there's no point (and also wouldn't have been one while I was still using it).

As a practical concern, I'm more worried about my phone now (an up-to-date Android) than I am about any feature phone, including recently-released ones.
Apple Shifts from Genius Bars to Genius Groves, Hoping Patrons Linger
Hey, this is Jason (Tally co-founder). Thanks for all the comments. Yes, you are correct, Tally underwrites. Here are some crazy stats.

A. For every 10 people who have a credit card, there are 16 late fees assessed every year. With Tally, you don't have to worry about missing payments.

B. 4 out of 10 households carry a balance ($15K average) for a total of $700B. 78% of those balances are held by people with good credit (Prime or Super Prime), yet their average retail APR is 18%. With Tally, you don't have to worry about being charged unfair APRs.

I hope that helps!
How to rip and convert DVD to Google Nexus 7
Ok, we changed the URL to that from https://trac.nginx.org/nginx/changeset/51e1f047d15d5602a8250....
Google already has that info without these hacks.

In fact it is in googles best interest to remove these security holes so other advertisers lose whatever minor advantage they can get.
At my current job, 2 years, we have a bug that existed before I joined. However, I was able to provide an alternate solution to it. Its hard to quantify the time spent on it because it was always around. When it became a main focus it probably took me 2 weeks to get an alternate solution.
A shaky looking video might be useless as entertainment but still may have forensic value in the event of a crash / etc.
Just because something is only a small portion of the final product, doesn't mean it's negligible overall. If say it raises the price of food by 10%, that's 200 billion dollars lost in just the US. Probably the price increase is smaller than that, but it would still be a non trivial amount of lost value.

And again, the real issue is with third world countries, where the price of food can mean life or death. These countries depend on the first world to innovate in things like GMOs. If we stop doing that, because people won't buy them, we hurt the world's poor disproportionately.
If it's get too affordable with a low-end hardware, most users will still opt for LAN cafe which is popular in China and some countries and is cheapest option for gaming and surfing Internet.

The cheapest notebook is about US$200.
By this logic should we have autonomous refueling already?

It's been done a few times.[1][2] The systems are rather slow and clunky, but work. Dealing with all the variation between cars runs up the cost.

Tesla has a charging robot.[3] This is much easier, since Tesla controls both sides of the interface. The car actively cooperates, opening the charging port door. Tesla also interlocks the car so that you can't drive away while plugged in. I'm surprised that Tesla hasn't deployed those robot chargers yet.

[1] https://www.youtube.com/watch?v=3y_J7fg03fA
[2] http://mashable.com/2014/01/29/robotic-gas-pump/#hDxoRZBZ5Zq...
[3] https://www.youtube.com/watch?v=uMM0lRfX6YI
Found my bug! Try again. Way more droids are supported now.
I think I resolved this problem. Try again!
Chemo is fucking miserable. Somehow, pure stubborn cussedness and youth, I guess, I willed myself to play high school basketball through my 12 weeks of lymphoma treatments, even driving two hours, getting shot full of nitrogen mustard, riding another two hours home and then scoring ten points with eight rebounds in a game that night. How the hell, I don't know... Should have gotten ESPN on the phone...

Running windsprints at 51% of normal red blood cell count is probably the stupidest, most painful, thing I've ever done.

Best of luck to him
Say whatever you will but I will take solace in the fact that no matter how badly Trump does, it would be worse under Cruz.
I don't really think there's a way to make a skateboard safe at speed. Ultimately if the skateboard stops suddenly, you continue to travel at the speed it was going, and unlike a bicycle, nothing is going to absorb damage except your body.
Glenn Beck is puzzled by how Silicon Valley entrepreneurs can be pro-business but suppor many progressive causes. That is because they are not standard liberals, they are libertarians.
What is Duckietown
I really think there hasn't been enough experimentation with soft (and hard) keyboards - I saw a radial keyboard design for Android (I think it's like the SteamOS controller-keyboard) but I was told the app isn't available anymore.
Apple Music and Siri are being used by fake artists to collect music royalties
>Tor could finally work as intended, with millions of boxes in the network, all handling each other's traffic.

Ultimately you'll never escape the fundamental flaw of Tor, which is that I, as a moderate bandwidth user, don't want to subsidize some leech's desire to download weird fetish porn in 4K with my connection.

I live in Canada where the scumbag broadband companies all collude to keep prices exorbitantly high, and I pay a lot of money for what would be considered bottom-tier garbage service in e.g. South Korea.

I don't run Tor because ultimately I want to use the bandwidth I pay for.
Personally I view greyhat as immoral/unethical but not illegal
Hey, great question. This is Jason (Tally co-founder). Credit card APRs are massively inflated. Here are two points to consider:

A. There is a 500% difference in the likelihood of someone paying back a loan with a 760 FICO score vs someone with a 660 FICO score, but only an 8% difference in APR.

B. "the credit card business continues to be the most profitable bank lending business, with returns more than four times higher than the average return on assets." - Richard Cordray, Director of the CFPB (December 2015)

The bottom line is that banks are significantly overcharging consumers AND have high fixed costs. Because of the technology Tally has built, our cost structure is an order of magnitude lower than banks. This means we can save customers money and be profitable as a business.
In case you think that Google is being dysfunctional, well, maybe it is, but consider the alternative: Would you like it if Google's ad system admins first consult Google's investment arm before deciding whether to ban a certain category of ads?
10% of the price is enough to prevent a vocal minority from blocking it, I think.
Ransomware infects your machine, silently encrypts and decrypts everything for a period of months then stops. Your backups are encrypted and only the ransomware can decrypt them.

Perhaps RAM snapshots could be employed as part of the backup to allow retrieval of the encryption key.
My understanding is that Credit Card ABS are kept at very good ratings via careful division and securitization of the credit card receivables into different tranches of risk and corresponding priority for repayments (specifically so that pension funds and investors of that ilk can invest).

The fact that none of those securities defaulted during the financial crisis, doesn't mean that none of the underlying credit card receivables were written off or otherwise defaulted on.

Seems that the parent comment's premise is essentially correct, you guys are going to be handling some portion of those credit card receivables and are betting that you can cherry pick or otherwise attract the safe/good/profitable portion.

edit
I realize that this comment probably comes across a fair bit more pessimistic than I intended. Actually, I think that this is a pretty decent bet. Pretty sure they're right about the existence of a class of cardholders who choose to carry a balance for convenience or short-term need rather than long-term circumstances or irresponsibility. Not sure what the TAM is on that, but definitely sounds like it's a hypothesis worth following up on.
Do you have an example app that will do this for you?
> In any race where Silver didn't make a pick — again, he isn't playing the pick-every-contest game — Diggler's numbers treat the non-prediction as a wrong prediction. So Silver's accuracy rate through May 7, according to Diggler, was just 55 percent, while his own was 89 percent.

https://www.washingtonpost.com/news/the-fix/wp/2016/05/12/so...

So the comparison counts non-predictions by Silver makes your statement correct.

> even without a fancy statistical model

Remarkably anti-intellectual statement.
Waste collection services are often privatized. They probably don't need the city's permission to collect environmental sensor data.
Or a Linux device driver, or embedded code running on a microcontroller... lots of different kinds of programs out there.

It also depends on the language that it's written in. For example, gdb is good for debugging C or C++ or assembler, but you probably wouldn't use it to debug a Lisp program (unless you were a masochist).
> most of the stuff announced will be ran by Google, and still being outraged about "the privacy implications." I'm not sure what they expected.

In other words: "It's Google, why are they outraged that we're encroaching further on their privacy? What did they expect?"

At least you guys are honest about being evil, now.
Exactly - most sites don't need my exact location, or access to WebAudio or whatever. It should be a red flag for most sites, however most users won't know how to react in such a situation.
Is that supposed to be evidence for not being a computer? Perhaps someone should introduce the author to Anchor Modeling[1]. Every table with its own attribute, so you don't have an internal representation of objects, just the base attributes and relations, but you can retrieve a representation on the fly.

1: https://en.wikipedia.org/wiki/Anchor_modeling
Sometimes identity has a way of finding you, even if you try your hardest to keep it out. People define you, and depending on who or where you are, those definitions can have profound impact on your life.

This piece reads like a person who has never had to deal with that, or at least never had to think about it.
> Which is totally within their right as a business.

And it is within our rights as consumers to subject them to scrutiny and higher standards (Don't be evil) and for governments to subject to regulation.
> yes our education system is backwards, but millennials need to learn some form of hardship or hard work.

Hmm, I wonder if we can come up with similarly nasty and unhelpful instructions for other generations, based on stereotypes and anecdotes.

E.g.: baby boomers with failing health should just accept that they're going to die, and stop overburdening Medicare with expensive treatments that only give a few more years of life.
Libui: GUI library in C
As much as I like to make fun of node js and everything it stands for, the kik/left pad debacle materialized due to incompetence/malice on npm's part.

That being said, I agree with thee other posters here. If I could downvote article submissions I would downvote this one.

OP, the world doesn't need this. Please stop. Thanks!
"I'll work on it... next sprint."
Sadly nothing to do with Propellerhead Reason
Redfin launches React Server, a React framework with server rendering
When you have the unique skill, you're better off being labelled as 'consultant'. The terms might be used interchangeably yet I've seen the power dynamics being consultant > full-timer > part-timer > contractor.
Thw complexity and overheead of PIMPL is justified in one scenario, and one scenario only - when you are writing a shared library and need to maintain a stable ABI. Otherwise it is complete overkill.
Not really. There's not a lot of value in autonomous refueling when everything else about vehicle operation is manual.
Check out Mutate https://github.com/qdore/Mutate/ - an open source launcher like Alfred for Linux with ability to create your own script.
How will the companies trap you into their proprietary walled garden if they let you change the settings?
Thats... (weeps)... probably true. It might also be true once 99% forget Fallout 4 exists.
Jason (Tally co-founder) here again. Its a common misconception that people who carry a balance are irresponsible. 78% of people who do carry a balance have good credit (Prime & Super Prime). We surveyed 581 of our friends on FB who all have good credit. Most of them have college or graduate degrees and work in tech. 45% carry a balance and 29% paid a late fee in the last year.

Bottom line: credit cards are the most profitable bank lending business (4x more profitable), so there is a lot of room to save people money and earn a profit as a company.
Træfɪk-modern HTTP reverse proxy and load balancer made to deploy microservices
Here's why this post-mortem is so important:

The distinguishing feature of the scientific method is not that
it always gets the answer right, but that it fails forward by
learning from its mistakes...

I want to think through his nomination while trying to avoid
the seduction of hindsight bias.

Kudos to Nate Silver for meticulously examining how he got it wrong, and publicly showing his work so we can all get better.
That was the intent all along. I am supporting your point, not arguing it :)
> If the passwords were leaked due to being stored in plain-text, no amount of complexity would protect them, obviously.

One assumes LinkedIn does not store plain text passwords anywhere. That would be against best practice for the average PhpBB online forum from the late 90s. It would be criminal negligence from a company like LinkedIn. How strong your password is (and which kind of hashing function the site uses) does influence how long it takes to obtain a plausible plain text password assuming that the exfiltrated data is in the form of a list of salted hashes, which is the most reasonable assumption.

That said, changing passwords everywhere remains the safest course. Since: a) 4 years is a long time to run a password cracker + dictionary, b) there is always the possibility that the passwords were intercepted on server memory before hashing.
Do you actually generate your strings randomly, or do you rely on yourself, a puny human I suppose, to generate it?
The newyorker ran an interesting piece along those lines: http://www.newyorker.com/magazine/2015/11/16/politics-and-th...
Accounts aren't all created equal. Some of my accounts, such as my domain account at work and my online banking account have real power to screw me over. Some are in the middle, like my LinkedIn account, or my gmail account, since they could be used for social engineering. Some are trivial like my Fark account or my Hacker News account. In that last tier, there's no way it's worth my time to keep rotating those on a regular basis. It wouldn't be even that much of a crime to use the same password on them, since there's virtually no way someone's going to pivot from a Fark account into my bank account. So quit being so dogmatic is what I'm saying.
I think this probably happens a lot of the time. Problems exist and existing team members give up on it until someone just says screw it, lets just rewrite that part of the code or someone new comes along and suggests something different.
That looks quite useful! Thanks for the recommendation.
I don't think it's a major blocker, qemu already let's you emulate any arch that you need. Replacing libhoudini with a qemu based version would likely be straightforward.