skysight-inc/HackerNews huggingface dataset:
SHA1 is fast compared to key-derivation functions so you do not want to use it to hash passwords.

However SHA1 is slow compared to most hash functions (especially but not solely non-cryptographic hashes) so you don't want to use it for hash-based collections like hash tables or bloom filters.

edit: here's a bit I saved from tptacek (sadly I didn't keep the link, only the content):

* If you need random fixed-sized URLs, generate UUIDs; don't tie them to content, which can (a) change and (b) be predicted.

* For error detection, CRC schemes aren't weak. Against adversaries, MD5 is weak. For offline file integrity checking, or user-timescale online checking, use SHA256; at the very minimum, use an algorithm that hasn't been broken.

* Do not ever use the MD5(password) password scheme. MD5 is much faster than Unix crypt; even conventional Unix crypt is at least salt'ed to defend against rainbow table attacks, and modern adaptive hashing can be tuned to make dictionary attacks infeasable.

* MD5 is too slow for in-memory hash tables; I cringe when I see people use it. You're probably just hashing a string: use Torek's 31/37 hash. Otherwise, use Jenkins.

* PRNG design is hard. Just running MD5 over trivially small internal state doesn't yield a secure PRNG. Again, a problem other people solved that you have no business hacking on yourself, at least if your code matters.

* If you are concerned about collision attacks on your cryptosystem, which you should be if you're this guy and you're using MD5, use an algorithm that hasn't been broken; don't just jumble up one that already has. Kerckhoff's principal: look it up.

The bits you want are 3 and 4, but everything is good. Just sed s/MD5/SHA1/
Yes, the world just changed and you don’t realize it. AR is going to be huge, even with a phone.
Doesn't make it right though.
Ask HN: Are YouTube videos a good passive income channel?
I wanted to know whether making & publishing videos on Youtube is a good passive income channel similar to websites with adsense?
Even repainting roofs from black to white can make a major difference for minimal cost.

Planting trees is great in many ways (quality of life and air quality in addition to heat mitigation) but is pricier. It can also take several years to "bear fruit" (even for non fruit-bearing trees ;-) because generally you plant saplings, which can take decades to grow to a size where they provide significant shade. NYC hust completed an initiative to plant a million new trees, and it's barely made a dent in the amount of treeless sidewalks, let alone unshaded space in the city.

It would have been nice if the article had made more concrete recommendations, tho, I agree.
It's obvious that the gap between using software and creating software will disappear.

This person severly lacks vision.
Show HN: Kiven Aa – Talk Freely and Anonymously
After talking on several online anonymous chatting apps, I always felt like this area is totally lacking in good quality apps. So, I am trying to build a new slick platform "Kiven Aa" (https://kivenaa.com), for anonymous chatting lovers. I would really appreciate, if you can try it out and provide me with your feedback. Every sort of feedback, both positive and negative are welcome. Thanks
In this case I (en-gb native) initially thought extravert was some tertiary alternative to extrovert and introvert; then assumed it was errant/en-us spelling.

I'd think of extro- and intro- as looking out and in respectively. Extra- and intra- would be externally additive and internally additive; like a connection outside a defined group and inside such a group respectively.

tl;dr this was an edge case for me.
I had this a year or so ago from Amazon on a Black Friday deal. A simple I/O test is usually enough to confirm a fake. The sellers are aware of their stock being fake, full refund without return and reported it to Amazon. Ebay have supporting documentation about finding fakes on their platforms and testing authenticity.
[0] http://www.ebay.co.uk/gds/Spotting-Counterfeit-fake-SD-Micro...
i'm interested in your setup. are you using macos or another bsd? what kind of ap's do you use? what does your mesh look like? special antennas? thank you.
Thanks or your kind reply, I use to find difficult to classify between RTOS and unikernels technically.
Amazon has invalid 404 links to the tutorial sections on the main page.

"This workshop is broken up into five modules."

And most of those module links are broken too ;-)

Can only be viewed in a step-by-step mode.
100 companies responsible for 71% of greenhouse gas emissions
There has been some talk of remote piloting (like drones,) but personally, I want whoever is flying the plane to have some skin in the game. Unmanned - fully autopilot aircraft are certainly possible and I sure Boeing probably has a Skunkworks looking into it, but I’ve seen enough source code over the years that I would have a hard time trusting an autonomous airplane unless they had escape pods. Autonomous airplanes seen to be solving a problem that doesn’t seem critical to solve – given the statistically exceptional safety record of commercial air travel. Pilot error is a very rare cause of airliner crashes.

I think electric airplanes powered by Mr. Fusion mini nuclear reactors would be the future I’d like to see!
In the startups arena in my area, i'm surprised when I see a CTO or CEO over 35 tbh.

Average seems 27/28
Sod roofs
the problem is that while Could is technically preferable to Might in this situation for exactly this reason, the proper distinguishing between the two conditions has long been vague.

People will often use Could have when they mean might have.

To be accurately and unambiguously understood by everyone it should be SFO near miss could have triggered aviation disaster but didn't. Since the completely unambiguous phrasing is not very elegant then Could have would be preferable, but with the understanding that for some people it will still have some ambiguity that needs resolving by actually reading the article.
We still run and manage our servers and save a metric ton of money wrt. "cloud" offerings.

When "cloud" or "serverless" will be cheaper than managing your own dedicated servers, then it will actually be useful. Until then, it's just marketing.
Fake likes only explain part of this initiative's success. This would never have worked with an idea that doesn't appeal to redditors.
What exactly do you mean by a "task". Just remind you by sending you an email? or actually running a command on your computer?
But roofs aren't really important at pedestrian level, I've seen many recent buildings having fixed external blinds, leaving an air gap between glass/concrete which should help draw up the hot air.
Do you mean matching each other or matching pronounciation?
Funny, I did the reverse migration at work (windows->mac) and I'm still having countless issues around corporate printer drivers, certificates and provisioning that no other windows or Linux machines in the same environment have. And macs are the only machines that cannot have passwords freely changed at will by the user.

Windows 10 has its share of issues but I think it has well above ZERO in quality.
https://youtu.be/a49fipjglyc?t=7m49s (Dan Olson on the Fine Brothers) suggests that "tens of thousands of views per video is only making little more than entertainment money per month on ad revenue alone"
Man, I hope nobody in my office likes these things. As if open offices aren't loud enough without every keystroke sounding like a firecracker.
Agreed, it is very annoying, maybe 'serverless' isn't the best name, but 'adminless' is no better. All the banal comments about the name have really impeded discussion about this topic.

I personally am angered at the 'everyone should be a sys admin' culture we've come into as a profession, it completely trivializes the role of sys admins who are critical to any product/company. Good sys admins bring a lot to the table, just like experienced DBAs.

Edit; wow either everyone really hates sys admins and dba's or prefer "adminless", any down voters care to explain?

In truth, I don't think the name 'serverless' will stick in the long term, there is just too much animosity for it. The useage here by AWS is the first time I've seen it in a couple of months. Anecdata, but I think most would admit it's not very common.
“Life gamification is happening right now” – Interview with Doug Dyer
Indeed, for many years I worked quite comfortably on a 486 with 36MB (4+32) of RAM, running far more than Hello World programs...

76MB may seem like a relatively tiny amount now (it's <1% of a typical PC's RAM today), but in absolute terms that is still seventy-six million bytes. One should naturally wonder why that much memory is required to display a simple string of text.
How to Integrate Online Gambling into iMessage and Have the Upper Hand
Coltrane plays Despacito
There's no way you can talk about ARKit without showing off the measuring tape apps

https://youtu.be/z7DYC_zbZCM
Just a few words can increase female, minority job applicants by more than 20%
China Channel Firefox Add-On – Experience the Censored Chinese Internet at Home
"Cities (especially big cities) should no longer seek to extract the maximum amount of tax per piece of ground (resulting in only expensive developments) but should have policies that aim for maximum societal gain: this means building housing to the exact class percentages of the population. 10% rich, 40% middle class and 50% working class in the country? That's what cities should aim for."

This. Unfortunately it's fallen out of fashion... everyone wants to become the richest city in the world, even if all it means is that you will price yourself out of it, literally delivering it in the hands of the few 0.1% for whom it's just another new toy to play...
SAP wants to bridge the gap between IoT and business data
Those objects and actors come initially from a story, and how you tell that story may affect how well you define them.

Defining the objects, the actors, and their interactions is part of writing prose, but there is more: you have to present them in a logically consistent manner, and furthermore in such an order that the reader is not confronted with an idea she has not yet been prepared for. The way that the components of a program are assembled has analogous consistency and ordering requirements.

Writing a program is a bit like writing a specific form of prose: an argument for a proposition. In the case of programming, the proposition is that the program will do whatever it is that you require of it.
Having said all that I'm sure it will go the way of the Apple Watch.
Linux becoming the subject of a flamewar between mac-its and win-its. That's hilarious, from the perspective of a old-time Linux evangelist.
Can I conclude that "we won" ? \o/
"Rather than spending money on failed products (remember Google Plus?) or managers’ pet projects, Apple has to face the disciplining force of large investors."

So how would a large company stay innovative without testing ideas with "pet projects"? One may suggest letting the startups do the experimenting and buy only the results, which is not a bad strategy but that limits your options, especially if you have ideas of your own. Google Plus was that kind of experiment that, after Facebook, had low chances of succeeding unless it was backed by a big name. Having being tried by Google directly, instead of by some inexperienced entrepreneur in a start-up or in some Google incubator, actually conferred it a higher chance of success. If that wasn't enough - too bad, but at least it was tried. And considering the stakes of succeeding in social networks, taking the risk of developing Google Plus was justified. Bashing now the Google founders for that decision is just mean.
9 Books That Will Make You a Better Brand Marketer
One possible alternative solution is to chop the image into smaller images (with something like ImageMagick) based on each value's likely location in the document, then OCR those. You get a confidence interval with tesseract, so you can iterate over possible templates (or shrink/expand crops) until you get an [edit: aggregate] interval you're comfortable with.
The absolutely stellar safety record of the airline industry exists because they have repeatedly and consistent pushed past human error as an explanation for a crash.

Understanding that if a human made this mistake, another future human will likely make the exact same mistake, they push to understand _why_ an airline captain that should know made this error. Then try to correct for that.

If every crash was written off as "the captain should have known better", aviation would not be nearly as safe as it is.
As if they would have a formally defined contract in the first place. We can't even get those for the vast majority of software we write by hand!
> Like DynamoDB but for SQL

This would basically be the game-changer for building backends on lambda.

The absolute key and most valuable piece in most backends is the persistent datastore. I absolutely want to build functional stateless business logic on lambda, but I absolutely will not, no matter the gain from not having to manage servers, have my database be dynamodb or any other non-RDBMS, for any serious application in 2017.
Or... I can just use Linux and have it do the tricky bits plus also play games :)
Is there something above 'steps:'? The indentation looks like there's a missing parent key - eg, it starts with a bunch of spaces at the top level - but it's hard to work out what it is.

Edit: looking at another doc, https://circleci.com/docs/2.0/configuration-reference/#deplo..., the missing parent key is 'jobs:'

Also shouldn't "Search and Replace Deprecated 2.0 Keys" be "Search and Replace Deprecated 1.0 Keys" (or better "Search and Replace Deprecated Keys")?
Title should be: Testing for a fake SD card
I know that Buildkite does something like to view the progress of our builds, but I have always been curious how one might implement it nicely.

I like this approach with a simple pipe.
Musashi by Eiji Yoshikawa

The Story is breathtaking and the teachings are divine.
It currently has the potential to change my life, i even marked some sentences and put tapes to important pages that concern my life.
It became amazingly natural to read those 3x7 characters. For some reason I thought red (on black) was the best. It was the 300 baud modem I couldn't stand.
The HTML idea is neat, but something to bear in mind unless you host this content on a separate domain/subdomain (think githubusercontent.com vs github.com) any Javascript embedded in that HTML will be able to read/write cookies, make XMLHttpRequests, etc against the seashells.io domain. Which could in turn cause some fairly serious security issues with any accounts system you plan on adding.

But seeing as view urls are quite shortlived by the sound of it, you shouldn't have too much of a problem moving their location from seashells.io/v/{url} to something like v.seashells.io/{url} if you do end up introducing some kind of HTML mode.
I think that would be more like "Windows now available from Ubuntu package manager"...
Probably about 100ms or more on each request (to and from). Slower depending on location and network conditions.
The title of the article is "How we hacked reddit...", this submission currently says "How to go viral by using fake reddit likes", and is more accurate. They didn't hack reddit, they bought upvotes.
Both "cloud" and "serverless" are cheaper if capacity needs are opaque (high growth or unpredictable swings.) If you have predictable capacity needs, I agree that dedicated servers are a better value.
Once you get down to PMAs and van Emde Boas trees I think those are fairly exotic by the standards of most programmers - you won't meet them in your standard undergrad CS course IIRC.
If the goal is to have a black box that we just send apps to and they just work, I propose a new buzzword: "black cloud".
Nice post! I would add that some prose reads like poetry. Some poetry is abstract and unreadable :)
Crypto-currencies have lost 30% of their value in the last 3 weeks
Well, Linux distros themselves are an obvious other example, you also don't need to register to apt-get install.
Kurdaitcha (featherfoot man)
As always, any implication that all closed-source software, regardless of company, suffers from similar issues, is conveniently absent. Just as it was during the VW emissions scandal - it's the cheating that was problematic, not that consumers are effectively in the dark about how most of their products operate, and deliberately prevented (successfully or not) from finding out (personally, or done on their behalf by others).
> Reddit is still a really great site when you unsubscribe from ... any sub that has gone "critical shill" at about 100k or more subs.

AskHistorians is still a great sub, at 620k subscribers. It's (intentionally) not on the default list, and has very heavy handed, strict moderation, which is probably why the quality is so good.

https://www.reddit.com/r/AskHistorians/
How do you think HOPWAG compares to "Philosophize This!"?

I ask because I have invested some time on Philosophize This and after the first 20 episodes it got much more enjoyable but I could see myself switching to another in-depth history of philosophy podcast if it's much better.

The only problem I see is that HOPWAG seems to be still on the 14th century, is it supposed to stop there or is it still ongoing and will someday arrive at modern times?
A Huge Diamond Mine That Helped Build The Soviet Union (2014)
Stock Wordpress takes it hard when HN comes around!

The Internet Archive has it: http://web.archive.org/web/20170711105235/blog.nothinguntowa...
It's interesting how most of the responses to this post agree that "serverless" isn't literally what's happening but agree to that name and say to get over it.

It's akin to someone saying it's "free" because you don't have to think about the money, e.g. you pay with a credit card.

Perhaps the name it should be called is adminless or backend as a service. In any case, there's probably not much one can do about the name at this point.
of course, here: /s. Yes it was sarcastic.

(I must say I'm a bit blown away that you think I require a sarcasm tag, though - I wrote that "everyone can be the top link", an obvious absurdity since how can everyone be the top link, and that hacker news wouldn't be any worse if every single link were a paid story. I didn't think I came even close to having to mark my comment as sarcastic, which I sometimes do.)
And get yourself banned from reddit.
reddit itself used fake users at the start to make the site look more busy
Portable Format for Analytics (PFA)
What is a "data scientist"...?
Ubuntu at Windows Store
I think that's the goal.
Look at the cost a different way: your data is clearly important and you just saved having to hire an ops person to help manage it part-time.

I get that this isn't reality though. Once you provision something the amount of maintenance is minimum if done well.
Yes, we already have excellent programming automation. They're called compilers.

No one has yet succeeded in making a language that can convert a spec to code, especially when it ought to deal with things that are "obvious" and as a consequence never mentioned, special cases that no-one's ever really thought about, fundamentally contradictory requirements &c &c &c
He/she could be shy, or feel intimidated by the level of conversation here (not wanting to comment since not wanting to appear inexpert in a crowd of experts). I have felt this way on forums before, and have hung around for a while before making my first post.
China trial paves way for ‘unhackable’ communications network [paywalled]
Ask HN: A Video API which serves best quality dependant on connection?
Anyone know of a service that supplies this that isn't youtube? I know youtube has this functionality baked in, but in my experience, many people ask for custom video players, which are very possible with videoJS, but getting the right video dependant on connection is key.

I know of no service that offers this atm. Specifically where it will serve up a specific url you can stream from independent of player. In the past I have used Vimeo to serve up the files, but hosted them in a custom player. It's possible to write your own script too that will do crude detection of a network speed, but wondering if anyone has any other answers to this.
Fair enough. However games and GUI apps are still a small percentage of applications developed in rust. I want that to change, of course. I just wanted to point that out.

I'm personally writing a game in Rust but the main logic is written in a compile-to-JS language and uses V8, so the issue doesn't affect me.
I'd like to suggest that if you are still interested in learning more about what happened, you should look for a video from "VASAviation" on youtube. I'm sure his subscribers have asked him already for analysis and he's working on the video.

The channel focuses on aviation comms channel.

I find it informative because the youtube channel provides detailed voice/video/photo/analysis of incidents (actual/close-calls) involving planes/passengers taxing/landing/taking-off in/around airports.
This isn't about Childporn, it's about papers.

You claim to pin stuff on IPFS, however you also say you comply to DMCA.

Unless you want legal trouble, this means you'll have to comply with any DMCA request that might be remotely valid.

Search up "Alex Mauer" to get a recent example of how DMCA can and will be misused.

Unless you want to get in trouble with big publishers, you will have to censor users on your service, it is essentially useless for niche files that cause legal trouble, regardless of how that is resolved.

How is your pinning service useful to keep such files online? How do you plan to defend yourself against the Erdogan or Chinese Regime?
DEP isn't relevant. If you're compiling your own kernel this is a completely viable security technique.

Where it fails is in distros. AFAIK most linux distros do something similar (based on Grsecurity patches) but it's useless because... they then distribute the binary, with everything necessary to get addresses.

But if you're distributing it internally/ it's a secret, yeah, you're going to benefit from that.
> That's the clear implication from what you wrote

It is absolutely NOT the clear implication from what I wrote.

But while we're on the subject, do you have any theories as to why the people who wring their hands about the dire emergency that AGW supposedly is, never seem to call out rich, left-wing celebrities or rich left-wing tech moguls for their planet-destroying lifestyles?
> Legos

Lego. They are Lego bricks not Legos.
As a platform, they are big on encouraging people who wouldn't otherwise write to do so, so you get a lot of articles that are by new writers or who lack a presence elsewhere. This is a good thing in general as we need more diversity in people writing and sharing their experiences. It does mean you need to take this context on board as a reader, though.
C# in browser with WebAssembly
> Point it down the street to have great restaurants highlighted?

on android early on (before 2.3!) yelp called it lens, and had a monocle icon. google maps and nokia apps also had it at some point I think. and no better implementation will ever make it less useless.

it was a uter useles gimmick. everyone tried it exactly once.
How could anyone have possibly targeted you on Facebook from your comments here? I am genuinely curious. I checked and saw HN doesn't load any Facebook libraries, and I could find no identifiable info about you from your HN profile.
What about the guy that will be building a rocket to get off this rock?
I remember seeing that implemented in the Vic-20 (8k expansion required). Those fonts bring the nostalgia...
It was still Postel's IANA. I'm sure current ICANN would be a very different organization if he was still at the helm.