skysight-inc/HackerNews huggingface dataset:
It doesn't actually. It shows how badly flawed the XKCD comic is. The problem with the XKCD comic is that he advocates creating a passphrase without a random function. Turns out, with no surprise, the resulting passphrases are easy to guess, because they are predictable word sequences, phrases, or sentences.

To illustrate, suppose you have a word list of 8,192 entries, and a cryptographically secure random function. Shannon entropy says that each word in that list then contains exactly 13-bits of entropy (2^13=8,192). According to https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27..., 8 Nvidia GTX 1080 GPUs with Hashcat 3.0 can process 200 billion MD5 hashes per second, which means 5 of those password cracking rigs, working in concert, can do 1 trillion MD5 hashes per second.

So, if you have a cryptographically secure random function choosing your words from that list of 8,192 words, what are we looking at?

- 1 word (13-bits): 1 in 8,192 possibilities

- 2 words (26-bits): 1 in 67,108,864

- 3 words (39-bits): 1 in 549,755,813,888

- 4 words (52-bits): 1 in 45,03,599,627,370,496

- 5 words (65-bits): 1 in 36,893,488,147,419,103,232

- 6 words (78-bits): 1 in 302,231,454,903,657,293,676,544

There is no need to go any higher than that, as we'll see in a second. If the password cracker is only interested in searching 1/2 of the total combinations, then that means at each hash, after completion, there is a 50% probability that the password was found (on average). So, armed with this, it would take the password cracker:

- 13-bits: < 1 second to search 1/2 the space

- 26-bits: < 1 second

- 39-bits: ~ .3 seconds

- 52-bits: ~ 38 minutes

- 65-bits: ~ 213 days

- 78-bits: ~ 4,792 years

It's reasonable to conclude that if your threat model is password cracking clusters working on leaked hashed password databases, and assuming the password is hashed with MD5, then at least 65-bits of entropy, or 5-6 words chosen from a list of 8,192 with a cryptographically secure random function, is a good target for a secure passphrase length.

For what it's worth, Diceware has been promoting this approach for years now, where the word list is 7,776 entries (~12.93-bits of entropy per word), and the cryptographically secure random function is 5 fair 6-sided dice. The XKCD "correct horse battery staple" approach is just a simplified implementation, forgetting the random factor.
That was my fear before buying it. Now I have 10 or so.

I use them more or less this way:

-One for the TV, it lets me watch things that the smart TV can't.

-Three controlling my 3d printers with octoprint.

-Two on each car for recording video with cameras and GPS info.

-Three or so for controlling DSLR cameras and motors for panoramas, 3D scanning and so on.

They are extremely convenient for making things for other people(job or family), like prototypes, as I don't need to interface(or spend time) with their computers, I can just give them a computer!! all without breaking the bank.
Being an Excel jockey was "cool" in the 90s and 00s but all the cool number crunching kids are much more likely to be using something like Jupyter Notebook, R or homebrew command like stuff these days.
People use sock puppets to do this because although you're correct that it's with the SO guidelines, it feels a bit off, and not uncommon for it to get pushback from those who either don't agree with the guidelines or are not aware of them.

Also, while voting fraud is against the guidelines and actively countered, creating sock puppet accounts is not.
I can understand why these people are like this. As other people said, only the very top jobs and graduates count for anything, if you're not elite you may as well drop dead. This is starting to happen in other economies too, but I digress.

Also, the amount of what I'll call "social bullshit" is piled high (if you have a better, less provocative term, let me know). What is said is very far away from what is meant, and if you can't peel away the onion of social bullshit to discover what people really mean, communication is very difficult. Even playing patio11's game Stockfighter was very difficult for me to understand the directions, as the space between what you're supposed to do and what he suggests to do is very large (to me).
Intermittent fasting is a well documented & proven phenomena. It also regularly appears in the form of various articles on HN with many proponents here.

I don't follow it, I like my food. However, a cursory glance through other comment on this thread may give you cause to rethink your pov.
Sure a programming language would be even more flexible, but it does not have an instant feedback loop like Excel does. Not to mention that the extra flexibility comes with the cost of dealing with all the arcane bullshit programming involves - toolchains, APIs, what have you. Excel is flexible enough to be useful by non-tech people and doesn't bring in so much cruft.
The HTTP Proxy Vulnerability affected many of the most popular web servers
> Sending a lot of bounced emails is going to get your mailservers reputation tanked, which is not an acceptable tradeoff for removing email validation.

?!?

OK, let's break this down: What could be reasons for an email to be bounced due to an invalid address?

1. Because the address is syntactically invalid: Your own email server will notice and reject/bounce the email. Noone outside your own server will notice.

2. Because the domain doesn't exist or has no inbound mailserver: Your own email server will do the DNS lookup(s) and bounce the email. Noone outside your own server will make any note of that (and you can't find out without doing DNS lookups anyway).

3. Because the localpart doesn't exist: You can't find that out without trying to actually send an email (and consequently risking a bounce).

So, what exactly was the point of email validation "without bounces" again?

The only thing you can actually do to avoid unnecessary bounces is to make sure your emails have a valid return path and to make sure that you somehow process all the bounces that arrive there to make sure that you don't continue sending emails to addresses that start sending bounces (i.e., that don't exist (any more)). If you send lots of mails, it's probably best to employ VERP for that.
Oh I never thought about using vlookup for anything but categorical values, but yeah your example makes sense.

I like the new functions that make you not having to wrap everything in ISNA(), like ISERROR()...
It's like having a conference on Windows and uninviting Bill Gates! What are these people thinking?
I would argue that one should never use '-O' it also strips doc strings from running code. Not really an `optimization` but they had do something right? One couldn't run __unoptimized__ in production could they?
I'm pretty sure they were abused in the way that child neglect is abuse: nobody except a minority of people like us ever used it.

I remember using it quite often, although results were mixed.

It seemed that the true potential wasn't possible without compromising privacy completely – i. e. I'd love to run queries of "people working at the White House who have attended events with (me|Osama bin Laden)" but I wouldn't want to show up in searches if other people used it.
How Can Yahoo Be Worth Less Than Zero? (2014)
Sorry, I hadn't used it in a while. You need to open up the port. See here:

http://www.yacy-websearch.net/wiki/index.php/En:FAQ#My_peer_...
I fasted for a day when fighting with my parents. Worst thing to do since I am a Type-1 diabetic and ended up with Diabetic Ketoacidosis the next day and a near-death experience :-(

Fasting is not for everyone!
At least you got a notification. One bank just stripped all of mine off and submitted like that. At least they were consistent about it, I didn't realize until I accidentally mistyped and still got in.

In disbelief I logged out, tried again but this time I intentionally didn't use any special characters. It worked....
No, don't short their stock. Show your displeasure by selling your iPhone and BUYING SOMETHING ELSE.

What idiot owns Apple stock?
> if you're the sort of person that doesn't actually read the documentation

Is this a problem with the documentation, or the reader?

Perhaps it's just me, but I can (and do) skim the Python library documentation regularly. Due to the high level nature of Python, any given bit of code is doing a lot of work under the covers. I'd rather that complexity is properly documented than glazed over in the official language documentation.
You can set your phone down on your desk and charge it without a plugin as fast as they can ship it to you: http://www.air-charge.com/products/wireless-surface-charger
A VPS is shared hosting to me, it's just an instance on a shared system. Shared hosting used to mean a folder on a shared web server but I consider sharing resources in a hypervisor equally shared. ;)

If they truly wanted speed through control of resources they would have used bare metal.

But yeah, the website is easy to optimize when it's simple, the hard part, often outside of your control, is DNS and actual connection handling. Many have already mentioned CDN so there's that.

But you also don't know what kind of firewalls are being used, or switches, or whatever else may impact your site. Why not just do what others have suggested and put it all in the cloud so that Amazon can worry about balancing your load.
You would think it would be the manufacturing plant that’s off by itself in the middle of nowhere that doesn’t have access to a pool of skilled labor — but it didn’t turn out that way.
eh Canada is a good example. We're a country of immigrants
Bower is definitely not dying, and in fact Npm is totally unsuited for some communities

http://harry.garrood.me/blog/purescript-why-bower/
I read through about 1/2 of the AKP "leaks", it was a tremendous waste of time for anything but improving comprehension of Türkçe.

At a point in time, I truly believed Assange's goals were justice and transparency, now I am beginning to feel like he has his own political agenda, and is making sophomoric attempts to affect political change.

In 2016 Wikileaks's agenda seems to be:

- Anti-Hillary
- Anti-Hillary
- Pro-Trump
- Pro-Putin
- Anti-Hillary
- Opportunistic

The AKP leak falls into that last line. The coup happened, it was frightening (I watched two F-16s fly over the city at mach1+ for six-hours, and the helicopter which landed at BJK was so close to us at a cafe we could see the faces of the guys inside when it banked), and they capitalized on that fear to increase their own credibility and to demonize the ruling party here.

Unlike previous leaks Assange and his gang didn't put ANY effort into vetting the "leak". He didn't have to, because within certain crowds Wikileaks is an indisputably trusted source. His perceived persecution makes him beyond reproach, and now any criticism can be blamed on a conspiracy theory.

Rapist? CIA/Sweden persecuting him. Bail jumper? CIA/Mi5 persecution. Committed the crime of jumping bail? CIA/Mi5. Hiding in Ecuador for years? Illegal CIA detention. His best buddy Jake Appelbaum is a rapist? CIA.

This amount of trust and credibility would certainly make it easier for him, or a foreign agent, to spread malware. It's probably just a slip-up on not scanning the emails before publishing. But if it isn't, what are the odds that they are traced back to Russian hackers?

(Edited for typos and formatting. )
https://hnjobs.emilburzo.com/
Sorry, what I was stating has nothing to do with finance at all. We've created a new web. A truly decentralized web.

The blockchain should only be used for non-financial applications.
The article talks about this, and claims that most of these jobs don't require certifications.

They basically require plant specific on the job training, which for whatever reason companies aren't providing.

It's similar to the tech industry where jobs ask for 10 years of node.js experience, 15 years of Coffeescript and advanced linux kernel knowledge....If you need that person, your going to have to train him.
Because this is a blog post rather than something that people can play with or try out, it does not really meet the spirit of 'Show HN'.

Show HN guidelines: https://news.ycombinator.com/showhn.html
That would be a nice ML application for fun and profit! Predict infected files. Cross with known infectations. Submit all others. Collect bounty?

In more seriousness. It still would be a hard problem. You never know for certain which files are safe and which harbour 0-day exploits. I guess you do know what textual contents in these emails are 'normal' and which are not (although it's in Turkish), so you could say obvious attempts at fishing-with-attachments are probably infected. Plus that not all virusscanners would recognize all infectations.
A password is just not enough. 2FA is almost a necessity I would guess.
how about
ilikedyoubeforeyouwerenakedontheinternet ?
The Old Problem Seminar(2005)
Yeah this really sucks for people in cars (plenty of people still drive cards w/o bluetooth). I just spent hours driving last week using my phone as a source of music (via aux cord) and GPS. If I couldn't have been charging it while doing this it would have died sooooo quickly
I plug something into my phone's headphone jack in my house, my girlfriend's house, her car, at friend's houses, and at work. That means I'd need to carry the adapter with me or have one in each place. Not the end of the world, but certainly more of a pain than before.
That's mostly compression and bitrate at the low power levels required. It's probably also why they had to do their own chip.
I have a space alien. I win. You are a dead man walking. Fall-over retarded CIA nigger and die.

God says...
ibuprofen plums hassle's craves tough's marketability tasteful adventitious exhaustion puffiness Rosanne's Kip Xenophon imputations cleanliest ketch's merchandise motocross besiege baleen's understandingly surreys tassel's culminations cynic's cod's intravenous's Rhonda raspier cybernetics's uptown's wider

7 years in prison means 7 years as prince.

20 years in prison means 20 years as prince.

You will suck my cock, in the end.
Wikileaks' actions this year have done nothing but prove to me that Wikileaks is just another arm of the alt-right.

When you add in Julian Assange's antisemitism and lack of respect for women, it all makes sense.
This is a stupid question but how is it possible to reverse such long passwords from even a poor hashing algorithm? Even if the hashing algorithm is super fast, testing all combinations up to dozens of characters should still be impossible. And isn't there the possibility of collisions, so that even if you find a string that maps to the same hash, it might not be the original password?
They appear to all be regular ZIP files that contain malware as opposed to ZIP files that are themselves malware.
So, it all boils down to "in a smaller community you don't have many options and you should watch out yourself not to narrow down further that pool". In a big city where one doesn't rely so heavily on others you see the people acting more as how they want it to be. (Most people, especially the ones without any kind of impairment, don't care that much for community.)
Something Apple is actively working against?

RE your edit - Lightning is not USB-C, it's Apple's propertiary thing.
Check out Blockstack.org and the new decentralized web that allows developers to build truly decentralized apps such as Twitter, Medium, Kickstarter, Reddit, etc.
No one is saying the belief was validated, only that it wasn't a fad.
The problem with the disappearing 3.5mm jack is, as usual, a problem that only a few geeks like us care about.

Taking myself as an example: I can't use the Apple earbuds, they immediately fall out of my ears. Which is why I use either large over-ear headphones (MDR7506), large over-ear noise-cancelling headphones (BOSE) for work in noisy places, or in-ear headphones that stay put even when running (Sol Republic Relays). And I want to have the flexibility of using any of those.

Every wireless option I've ever tried sucked badly. Some really badly. In various interesting ways.

But "most people" (I love that phrase) won't care. It seems the included apple earbuds are good enough for almost everyone.
Fun fact PayPal (used to?) silently cut off passwords when signing up, but not when logging in. And the password rules are of course not shown on the login screen. So good luck remember what length they cut your password down to when your password manager has stored the longer version.
Forbidden knowledge promised in files from an unknown source, sitting right there for the taking. It's the phishing equivalent of fish jumping in the boat.
Apple products are slowly becoming a pain in the ass to use with "unapproved" hardware.

Removing the network plug from the MBP line was stupid. At the office everyone now uses USB adapters to connect to the LAN.

I also have to use a stupid docking station that locks around the USB and display port as Kensington lock. But that also blocks the power cable, so now I need two power bricks!

And guess what, I also have an external CD-drive, because the world didn't stop using CDs and DVDs when Apple courageously removed the internal drive.
USB is not always better than CD, especially with the security problems hitting it these days.

And now this headphone jack thing. I wonder what they'll do about iPads and Macs, as they've split their user base into two now.

It makes more sense to use regular headphones and the adapter if you already have another Apple device!
So it's good for losing weight. But not anything magic compared to simply eating less?
Will those $20 headphones switch seamlessly between devices, stop playing when not in the ear, have beam forming microphones, charging container, charge for 3hours in 15 minutes?
So many people chiming in with their dismissive comments and superior Python knowledge. The article is excellent and should be required reading for Python devs. Having it in one place is valuable resource.
>It's amazing how people are prone to experiment with this type of things.

As opposed to over-eating resulting in a global epidemic of obesity? Which eating habits do you think are the biggest "experiment"?
That's probably reasonable, but you might want to amend 2 to "split the string on the last '@'". There's no restriction to only '@' before the domain. It's exceptionally rare that a server even allows '@' in the mailbox name, fortunately for us.
I'm guessing not. Your comment is my first result in Google search for "keyboard walk" dvorak.

Edit: Ars Technica had a piece a while back on crackers and how they build their lists of probable passwords. I imagine if Dvorak-based passwords became common, they wouldn't last long as "secure" before appearing in those lists.

Edit: The Ars link follows. You'll notice that the password in the story title is a keyboard walk, which the writer confuses as being complex, when it is not: http://arstechnica.com/security/2013/05/how-crackers-make-mi...
UC Irvine discover battery that can last 200,000 cycles without power loss
Outside has been popular for decades. They published the articles that led to Krakauer's books Into Thin Air and Into the Wild.
And OpenOffice used to omit those, if memory serves.

(Checking ... Libre Office 4.4 has Ctrl-D ... ah well.)
Apple Lighting Dock makes your desk look better.
Any ideas on how they manage to crack these? I can't grok how they would achieve this via a dictionary attack, especially the likes of:

MgihtyDutchmanMgihtyDutchmanMgihtyDutchman
alapdanceissomuchbetterwhenthestripperiscrying
<script>alert(document.cookie);</script>
Data Center Capacity Planning Powered by X-FIT
> I am happy that I've since moved away to GCP

What is "GCP"?
> tell me how to make my tons of css and js load fast

I went to the doctor and he told me to lose weight. What a fatphobe!

He should have told me how to eat everything I desire without any bad side effects!

/s
I think this is the insight underlying Tokyo's zoning system (linked here a few weeks back) that keeps the city so eclectic and alive, and Toyota's production system that seemingly no one can replicate though its been studied for decades, with support from Toyota.

It seems to me that in Toyota, a first, basic process is designed centrally by someone who is an authority in that specific area, but realizing that the top of the pyramid lacks the on the ground information necessary for continuous improvement, it pushes agency to change the process down to the bottom of the pyramid, to the people who make up the process.

That is how Toyota is able to evolve their process and achieve yearly gains in efficiency of around 10%. There's no great genius other than in the insight that the boss can't do the job of his subordinates, that knowledge is situational.

And that is probably why companies fail to adapt the TPS - because they do not trust and even despise people on the floor.
Meanwhile, for Ruby fans...

http://kschiess.github.io/parslet/ is a parser combinator library for Ruby.
I'm sure BOSE (and other popular headphone-manufacturing companies) will be producing a line of bluetooth-enabled headphones in response to Apple's decision, if they aren't already.
IBM launches AI-specific servers with Nvidia
I didn't mean to say that I disagreed with your conclusion about level design mattering a ton, I was just commenting on nomenclature and how it seems to be coming up with this. Most people seem to call Rayman Jungle Run an infinite runner too.
Best comment:

"The real answer is clearly because hashes are faster than b trees."
Exploring weird maths with code
Overcome Protocol Challenges in Industrial IoT Environments
It takes up space. Is rather see that extra space be used for more battery than to make the phone thinner, but I'd rather have a thinner phone than one with a headphone jack.
I'm Polish and live in Poland, funny to hear my name doesn't sound Polish though :)
you just have to keep the adapter on your headphone cable all the time.

I don't think it's unreasonable to say that people connect to more than a single pair of headphones with their phone. That puts you back into dongle carrying territory.

Sometimes I walk to work without bringing headphones, then use the pair I leave at the office.

I have an Aux cable on the stereo in my living room that my friends occasionally use. Should they make sure to always bring headphones to the bar? They're not planning to listen to music at the bar, but at least they can convince themselves they didn't lug a fucking dongle around all evening just to play music pregaming at my place.
That video didn't have a single person that wasn't white and young adult/middle aged. Maybe the hat guy is older, but still – diversity didn't seem a priority in the list of features. Maybe that's entirely representative of the demographics, just found it striking.
URL/search experiments from 2015, which don't seem to work now: http://booleanblackbelt.com/2015/02/important-facebook-graph...
How an episode of “Why Are Computers” is made
There is another snippet near that section which evaluates the following.

>>> float > float('infinity')
True
Do parser combinators have any obvious downsides?
There might be a much simpler reason for all of this. Being stuck in the embassy for years has severely taxed his emotional stability, encouraging narcissism, paranoia, and victimhood. At the very least, his journalism is sloppy, irresponsible, and ever-decreasing in integrity.
Is conventional, it doesn't do anything at the language level.
Password cracking "dictionaries" can have phrases in them.
You use a sock-puppet to ask the question, and your real account to answer it. Then you can look smart.