skysight-inc/HackerNews huggingface dataset:
Either a) you don't have a clue about the complexity involved in finding a collision for a specific hash or b) your definition of "reasonable time" is longer than the age of the universe and/or using 100 trillion state of the art GPUs is realistic.

I'm leaning towards option a, you read a blog post once and think you're an expert on cryptography now.
I think it's best to allow longer passwords for those who use long phrases. It's easier to remember the full phrase than a truncated version. You could show a warning that the extra chars beyond 50-55 will be ignored.
Wait, what? No MD5 collisions at all were publicly known until Xiaoyun Wang disclosed one in 2004 using a new cryptographic technique she invented (explained in Wang and Yu's "How to Break MD5 and Other Hash Functions").

MD5 has a 128-bit output so collisions that occur by chance should require about 2⁶⁴ inputs (18 exa-inputs). Surely your database didn't contain over 2⁶⁴ different movie records.

Could you take a look at what you were doing again? Your description doesn't really make sense mathematically.
Continuous Delivery by Jez Humble. “If it hurts, do it more frequently, and bring the pain forward.”
Hello admins of EU AWS systems – DNS outage in eu-west-1
https://status.aws.amazon.com

Looks like there's a DNS outage in AWS Dublin

All DNS request coming from `eu-west-1b` fail completely if you're using the default AWS DNS resolution itself - if you switch to `8.8.8.8` it's all totally fine, but that's of no use if you have private services that need internal AWS resolution

`1a` and `1c` are also affected, but to a much lower extent from what I can tell
If your statement is accurate, why offshore the work?
a solution to 1 would be ring signatures as used by many crypto note base currency. They group unrelated input and outputs to give all the parties involved plausible deniability to who paid what to who. So your vote would be mixed with a group of others so no one can tell exactly who vote for just that the right number of votes were cast.
K. So why use opendoor and pay an 8% fee when people are sending me cash offers in the mail?
They still haven't got it right ; you can only decide how the version number should change by comparing the software to previously released versions. Deciding ahead of time how it will change on a periodic basis is a mistake.
I guess a more accurate description would be "Internal positioning of all smartphones using Raspberry Pis and FIND service".

Can I replace this line [1] with my self-hosted FIND server? If not, I don't think the RaspPi user base (hobbyists) is closely correlated with your target market (corporates).

1 - https://github.com/schollz/find-lf/blob/master/server/server...
You likely goofed something up. No one has demonstrated two strings that are conceivably used as passwords that users type in -- and that includes the tuple {movie title:year} -- that have MD5 collisions.

The security problem with MD5 isn't collisions.
Not "relatively easy" by chance: it should require 2⁶⁴ entries in your database to see a single collision happen at random! It's only "relatively easy" following cryptographic research in the early 2000s that exploits structure in MD5 to produce collisions deliberately.

Yes, collisions are easier than preimages, but they still shouldn't occur by chance in real applications!
There are numbers greater than 99.

I'd like to provide some examples but I can't find my calculator :(
I'm finding it hard to understand what's so difficult about eBay 'doing the right thing' here... surely it can't be that hard to take seller evidence into account and cross-reference that with buyer proof that they returned the correct item in the condition they received it...
Ah so that's what we're calling the wreckless endangerment of pedestrians these days... innovation!
I really doubt it. When people demonstrate MD5 collisions, they use a hex strings like

0e306561559aa787d00bc6f70bbdfe3404cf03659e70
4f8534c00ffb659c4c8740cc942feb2da115a3f4155c
bb8607497386656d7d1f34a42059d78f5a8dd1ef
I can't speak to what they do now, but back then pretty much any airport worker was apparently allowed to 'bid' on a bag return job for AS. In this case, it was an actual AS employee that took the job. That's what I learned from that receipt nonsense.
There's nothing wrong with using force against someone who engages in abusive behavior and ignores valid requests to desist from doing so. Unprovoked violence is always bad. So is willful provocation, which is why the utterance of 'fighting words' is a valid defense to a charge of assault.
Realized my wording was way to ambiguous, clarified. Thanks!
There's a big difference between massive sweeping breaking changes, and small breaking changes. What I care about is the ability to do smaller breaking changes, and the new "major" version number that I tacked onto the front is to signify the large sweeping changes instead of the smaller breaking changes.
We should post more Greek related stuff over there I guess :D
There are other migration techniques. If you know md5(password), you can create bcrypt(md5(password)).
Running is not great for losing weight, so I'm having doubts about this one...
Interesting that you mention Facebook. Only decent experiences I've had lately has been posting something in closed "for sale" groups on Facebook and buying/selling something in person in my local area.
Unfortunately, this isn't an accurate description of the nature of the collision problem with MD5, which involves carefully crafted inputs using a sophisticated cryptographic attack -- not arbitrary user inputs that don't intend to collide with each other. See my and danielweber's comments about this down-thread.

(Yes, susceptibility to collisions was recognized as a problem with MD5 leading to a reason not to use it, but the collisions in question were constructed, not encountered accidentally. There isn't any evidence to date that the probability of a collision given two randomly chosen inputs is higher than the expected 1/2¹²⁸. You could test this yourself by hashing 2⁴⁰ random strings under MD5: you won't see a collision among the outputs!)
Intellectuals often take up cycling or running, notice the benefits and then claim cycling and running are great for the mind. Kind of makes me wonder if they'd ever exercised before.

As long as I don't completely exhaust myself, I tend to feel much better after I exercise, which includes playing ball sports... I just don't do it nearly as often as I should!
That's a lot of regulations. I would think that teenage drivers are very safe.

> In 2014, 2,270 teens in the United States ages 16–19 were killed and 221,313 were treated in emergency departments for injuries suffered in motor vehicle crashes. That means that six teens ages 16–19 died every day from motor vehicle injuries. In 2013, young people ages 15-19 represented only 7% of the U.S. population. However, they accounted for 11% ($10 billion) of the total costs of motor vehicle injuries. The risk of motor vehicle crashes is higher among 16-19-year-olds than among any other age group. In fact, per mile driven, teen drivers ages 16 to 19 are nearly three times more likely than drivers aged 20 and older to be in a fatal crash.

> Of the teens (aged 16-19) who died in passenger vehicle crashes in 2014 approximately 53% were not wearing a seat belt at the time of the crash.2 Research shows that seat belts reduce serious crash-related injuries and deaths by about half

Perhaps someone can pass a law mandating seatbelt use!

[0] https://www.cdc.gov/motorvehiclesafety/teen_drivers/teendriv...

Edit: it's also misleading that you suggest that the driver must have a minimum of 50 hours of driving experience. While technically true in NY State, all the applicant has to do is provide a completed Certification of Supervised Driving (MV-262) signed by your parent or guardian and that's only for teens under 18 year olds.
And yet, Turing was.
Why would you want immutable state for any kind of simulation? It seems like you'd just be adding a whole bunch of overhead for no real gain.
So it's a real estate speculation company. Fine. But let's not pretend like some tech wizardry bs is going to give OD an advantage over any other speculator
SendGrid Stocking Stuffer: The Recess Rules of Email Marketing
Two caveats to that:

- I promise you that's only true as far as your project's priority. For example if Google Maps in Colorado is more important to the company, at the moment, than some other project at HQ, then working on that project at HQ is not better for your career.

- Remember a recruiter is a sales person. Some are honest, some will tell you what serves their own interest.
> As stated, the privacy policy is to legally protect ourselves because we have attorneys working on the project.

I understand how you need a privacy policy (with or without attorneys working on the project). I don't understand how you need a policy that says you will use personal information for direct and online marketting, for protection. Couldn't you just not do that, and have a policy that says you won't?
I would def. appreciate the "+1" in front of the article title not following it to be honest.
He came recommended by someone who had used him before. His country of residence was not relevant to our hiring decision.
Until you can't make 3D, I wouldn't claim that.
Sadly this is not possibile with Ruby yet.

But anyway nice intro into Gosu.
So do you think the public wouldn't be able to inform themselves on which service or vehicle is safer before purchasing these cars without this data? Or that Google, Uber, Tesla, etc wouldn't already be taking these numbers very seriously and doing everything to minimize them? Or that the public wouldn't truly know the real safety of these vehicle as a whole vs human drivers.... without this mandatory test vehicle permit?
That is very typical of Schelling. Clear, but you need to read it over and over.
For the benefit of Australians reading this post a corporation (pty ltd) is a very good idea. The lower taxation (28.5%) and franking credits on any tax paided make it the way to go.
I find that tax to be obnoxious. I wouldn't mind paying it AFTER the business has had a chance to breath, but that's a hefty chunk of change to present up front, without ever having done business. I'm sure my frustration stems from not understanding WHY they charge it, when they do... If anyone could enlighten me, I would appreciate!
Quantum particles form droplets
Thanks for the questions!

It's mostly driven by what our customers have asked for. Subtractive processes like CNC have a high barrier to entry (compared to additive), so we started there to make it easier for everyone to get quality parts easily and quickly. Aluminum is a great material that you see a lot in both prototype and final products across industries.

The CAD integrations, materials, and part complexity we support are constantly improving - much more to come in 2017!
NY Web Developer Makes New 'Secular Solstice' Holiday, Has Hundreds of Attendees
Yes, because MD5 digests are much shorter than 32 characters, even if it's just ascii, so by the pidgeonhole principle there must be. If you're asking if there are _known_ collisions between two messages with less than 32 printable ascii characters -- the answer is likely yes, but there are not known to me and likely not publicly known at all yet.
> Passing the password through MD5 reduces the complexity to 128 bits

No, this is not the problem with MD5. You are not going to find two user-memorizeable-and-typeable passwords with an MD5 collision.

If you are bringing a password with more than 128 bits of complexity to the party, any password storage scheme better than plaintext will have your password safe.
This may have happened, but this is not typical behavior in science, and is hardly evidence that people should 'get out of academia'.
same here :) let's see how long it takes
> - Intellisense is immediately superior to anything I've used in EMACS.

For JS maybe. Irony with irony-clang is the best C++ autocomplete I've found. VSCode's C++ Intellisense is crap.
Well, I am an American Christian so I'm probably not going to get on board with a blanket condemnation of all of us.
It might be significant that the study was on distance runners (though it's not clear what they mean by that). Road running definitely requires a lot more situational awareness and decision making than track running. Uneven roads or sidewalks require instant reaction, especiall with snow/ice in winter. Cars, bikes, walkers, dogs, etc. can come from all directions and must be accounted for. Following a route and pacing for uphills/downhills also requires at least a little bit of thought. Trail running is even more challenging in some of these areas, though less in others. Running around a track is comparatively simple. It would be interesting to see how much - if any - of these effects exist for that kind of running.
Please don't change the subject to downvotes. It never works, which is why HN has not one but two guidelines against it: https://news.ycombinator.com/newsguidelines.html. Also, as typically happens, that comment is no longer net-downvoted.

We detached this comment from https://news.ycombinator.com/item?id=13180415 and marked it off-topic.
6:29 PM PST We have identified the root cause of the DNS resolution issues in the EU-WEST-1 Region and continue working towards resolution.
I'm not sure what you mean by "post-expansion", by my reading of the wiki timeline (https://en.wikipedia.org/wiki/Expansion_team#National_Basket...) Jordan came in during the middle of what would become the longest drought between NBA expansions. (And considering the rest of the league at the time, it's hard for me to get my head around what "incredible for the era" could mean)
366,357.1 km at its closest approach.

That's the information everyone wanted from the video, right? 2:19 through, right over Carbondale, IL
A Potential Hitch in Zuckerberg’s Stock Plan for Facebook
To be honest, if I'd read further down the thread first I wouldn't have bothered to say that.
I mean, you can put a real phone in a box and film it but it's not foolproof as you can just open the box again and ship something else. it's not an easy problem to solve. especially with different jurisdictions in different countries.

Even if you had a film of the box being delivered to the post office you could have a corrupt post office friend or a post office worker that is scamming things on their end by opening packages and replacing the contents.
I honestly doubt that many people on this forum hold that opinion. I really hope not, anyway.

I also haven't heard any good conversations about race that deny it. If you accept the existence of racism, you should accept the evident existence of race.

I think the other-ness of offshore labor has parallels to many things in the history of racism—namely, the exploitation of xenophobia and tribalism to justify cheap labor, explicit or implicit. There's also many different aspects: the xenophobia is nationalistic, not phenotypic; offshoring does not imply a poor wage or reduced quality of life for the local economy, just compared to the exploiting economy; we don't see (much) moralistic justification for offshoring.

My point being, this is a complex subject and you're not contributing much by denying race itself. There are easier ways to dispel notions you disagree with than alienating others in the conversation by denying them.
The first part of the article contrasts running against sports that stress hand-eye coordination and decision making. The author claims that the connection between those sports and overall cognitive performance is more obvious. But the scientific study only compare runners against sedentary people. We don't know how running compares to basketball, etc. on these metrics. The running/cognition correlation is presented as surprising, but it would be a lot less surprising if a stronger version of the same link existed for decision-based sports. The speculation about running->cognition causality should be kept to a minimum until there is data on other sports for comparison.
Calendar.help – Let Cortana Schedule Your Meetings
> They're said to have a very good wine cellar

I can report that their cafeteria is excellent.
I don't know whether sqldba was suggesting something racist, but I would say it is not necessary to identify a particular race hint at a racist viewpoint.

When Ronald Regan said "welfare queen", did he mean to imply "black woman on welfare"? If I write, "Middle-eastern people are lazy" do I mean to imply "Arabs are lazy - but not necessarily Jews"?

I also wonder whether you can have a racist view of your own race. For example, a stereotype is that black people are inherently bad at math - are there any blacks that believe this?
New Hertz Chief Faces a Tough Road
Yes but i'm not trying to evade detection. If i was, i would obviously not bring a phone with me. I can't however, avoid all cars, everywhere.
They can just upgrade from 99.12 to 2100.01
More like "I don't have access to the pictures officer. You need to contact these people." Then they likely destroy the camera.

That ensures that sources are more protected than an unencrypted storage. See cases presented in the article. Better to have the footage destroyed than releasing the identity of your sources. But nice non sequitur.
With “20,000 Leagues,” the National Film Registry Reaches 700
An (Edible) Solution to Extend Produce’s Shelf Life
I agree. A discount or coupon is different than "sign up for our newsletter"
> you're reducing the domain of your secure_hash function to the range of md5.

Oh no, only 128 bits. The NSA will be able to brute force one of those passwords in 80 years.
Legal Financing Rivals to Combine in $160M Deal
Yeah, well, they say they're not a taxi service, too.
As long as we're being pedantic, it's way more than 90%.
Security question : mothers maiden name?answer: 1q&#*v83%?ghd53

Date of birth : 01/01/2011
Wells Fargo’s ‘Living Will’ Plan Is Rejected Again by Regulators
If you want status, sure. But, if you're relatively good and want money, then no.

Economics is about supply and demand. And, every city in the world wants high-end developers. Many companies are willing to pay a lot because they have a shortage. But keep in mind that they're looking for someone who's good in more than just programming.
partner with someone, hire someone or use a template. unless design is your USP, it's overrated. what i can advise you as a dual career developer and designer is that you make your backend so it can use any design. separate business logic from presentation as much. if the project picks it up, you can hire a designer to do the job right
I think the person above me was. :) I agree.

photos have been considered proof for a long time, and this was difficult to communicate before photoshop, just like DNA evidence and cell phone tower records had massive, unjustified weight in US courts for a while in the nineties. I was referring to the fact that it's no longer tenable to view any of the above as "proof", whether or not it was ever a certain evidence medium.

I'm sure there's a lot of legal understanding that I miss.
How to Get More YouTube Views. The Ultimate Video SEO Guide (by TubeTrackr.com)
Holy wishful thinking batman. I don't know why you are fucking around with start ups, you should be on wall street
What qualifies as "excessive", though? Excessive anything is harmful almost by definition.
What's likely is that two people were logging in at once and they ended up with the same credential because someone didn't realize that a servlet is a singleton.
There's a sticker on every Uber, isn't there?

http://www.centredaily.com/news/local/article64550272.html
> The spleenless wonder

For those who might not recognize it, this derives from a hilarious (and, atypically, authenticated) witticism of Churchill's: http://www.newsweek.com/boneless-wonder-176272.

Had my kids been in Parliament in 1931 they would have said "burn".
It's weird, I see actually most of my issues coming from instances located in `eu-west-1a`, whereas `eu-west-1b` and `eu-west-1c` look fine.
Do I have a github issue for you!!!! This is a feature tons of people ask for all the time so this week I officially marked it as RFC. https://github.com/webpack/webpack/issues/3466

Since the core team needs to focus on implementing more opt features like rollup and better top level minification, we left this for a chunk of our contribute team to help design and come up with. Help always wanted!!!
Annoyingly, though, the two companies still don't talk when it comes to reservations. Recently I missed a flight from Portland, and since it was very close to the time the flight left they rebooked me on another flight. I asked both the Virgin and Alaska desks if I could get a flight on Alaska since it was earlier than the next Virgin flight (the next morning) but they don't communicate in that way and couldn't transfer it. They also said it'll be a year or two before the two systems merge to allow such a thing.

However, besides that slight inconvenience (which would rarely matter anyway) both of the company's customer services are great. Alaska is always great, on and off board, and Virgin is a pleasure to fly with because of their newer planes amongst other things. Hopefully the merger makes them both better than the already good level they are.
What you're describing is not possible given the database you tested. Are there more details that would clarify your post?
Not sure what you have read.

But, try re-reading his article "Hockey Helmets, Daylight Savings, and other Binary Choices".

You will find something new about collective choices.
Is there anything else? Etsy maybe... but it's more for hand crafted stuff, so you won't get the same buyers. Craigslist, but that's more of a local, in person marketplace. I can't think of one eBay replacement.
+1 ... been waiting for this. Just the support for large files now and I can drop Sublime.

(I use it to edit a very large JSON test fixture file)
> At the end of the day, window.crypto can be absolutely anything.

Would it be possible to toString() the function and check if it is a native function before execution? Seems like a simple solution but perhaps I'm missing something? I guess in theory the toString() method could also be hijacked. :-/
I love how you turn up immediately whenever someone mentions webpack!
Holy fuck this comment is LOL. Never change hacker news
Check the actual article and you'll see the v1-v2 migration link embedded into the post!!!
Might as well live in Washington at that point. No state income tax, while there is Oregon state income tax. Then again, Washington has sales tax, whereas Oregon does not. I used to live in Portland, and some peopled lived / worked in Vancouver, Washington, and drove to Portland to do all their shopping, groceries included.
And you're absolving the legally responsible human, so you can blame the implied-Evil corporation, because... why?

Humans who are lulled into passivity by highway driving don't get to escape the blame if they crash because they couldn't respond quickly enough if the situation changes suddenly, regardless of 'tech failing'.

If you have SatNav and it says 'drive down here' and you do, and it's a one-way street, you don't say "that's exactly what Garmin want, a human to absolve them when their tech fails". Because the driver is in the position of responsibility, the tech is not.
Is stealing ideas the best way to innovate?
No, Schelling's contributions to game theory were not at a level of formalism.

His uses of game theory was however at the highest level of strategic thinking.