skysight-inc/HackerNews huggingface dataset:
The cost? That depends on the password. How long does it take to crack 123456? That depends on the parameters.

In a good case, it takes 50ms per hash on a modern system, so that's 20 attempts per second (instead of 20 billion per second for a plain md5 or so). I don't really expect a popular site to do much more than that, so that's the best case. From experience, most sites will be more around the 20 billion mark than the 20 mark, but I expect stackoverflow to be on the good end.

The current state of the art is Argon2, with scrypt second and bcrypt/pbkdf2 tied for third. The first two have memory hardness, and the first one is the standard chosen in the password hashing algorithm competition. The third is still acceptable because most developers still go for a salted single hash like sha256. Somehow they got the salting method, but I'd rather they break all identical passwords at the same time (they weren't that strong anyway if they're shared between more than one person) than that they crack only a tiny percentage because of the cost. Slowness helps more than salting, yet as a pentester I see more of the latter than the former. So I'd rather recommend something available for their platform as a good third choice than them going "meh, effort" and not implementing the recommendation.
Yes, but it depends on the details.

"However, the penalties for falsely accusing someone of a crime range from none at all to potentially decades behind bars. It all depends on how the accusation is made, the intent of the accuser, and what is being accused."

https://blogs.findlaw.com/blotter/2017/03/is-it-a-crime-to-f...
What Turing Told Us About the Digital Threat to a Human Future
Because they offered immunity and is likely being held in contempt. They should just disclose what is happening behind the scenes, but my guess is they are worried that they'll compromise an ongoing investigation.
You can't lump one thing with another. In this case there is a law that says you must do what a judge orders. That applies to anyone under scrutiny from the justice system.
>I don’t find anything remotely controversial about banning a powered vehicle capable of ~30 km/h from pavements.

30km/h?!

Here in Sweden they forced the company to bring the top speed down to 20km/h for rental scooters.

Of course many have bought their own since the fad started dying down. And those are sometimes capable of illegal speeds up to 40km/h. Impossible for police to tell, and also a waste of time seeing as there are more pressing issues.
So some nut job thinks owning guns is vital for modern society? Good luck using that hand gun to overthrow your government (which is what the 2nd amendment exists for) while they roll in with their heavy armoured tanks and drones. I’m sure your bullets will make a dent while they’re firing missiles at you ;)
“I mean, it's one banana, Michael. What could it cost, ten thousand dollars?”
If I use Medium, they might earn money with my content. My blog, on the other hand, costs me money.

I do have a personal blog instead of Medium. But it's definitely not about the money.
Thank you for the quick reply. I see what you mean and I'm excited to begin using this. I'll definitely send some emails if I find any bugs or have any ideas, best of luck to you!
I don't think it's about that. Chelsea already served a prison term for stealing classified documents. President Obama commuted the sentence, but did not pardon her, so she's already been convicted and served her entire sentence. Because of double jeopardy, she can't be tried again for stealing those documents, and I don't think she's done anything else that's criminal.

I think this is about not supporting what she feels is supporting an unjust and corrupt system. I don't blame her. I doubt that I would act the same way, but she felt strongly enough about the Army's actions in Iraq to break the law while fully aware of the consequences. She's probably got the guts to keep her word when she says she has ethical concerns about the grand jury and won't be answering any questions.
Don't be ashamed. Do expand your viewpoint beyond yourself.
The person doing the check should go to jail?
I've seen this 'Uncle Bob' mentioned several times on HN. Who is he?
There was a pop-up that asked for money. The language of the bar at the top gives the impression the program will go away soon unless money comes in, plus the fact that someone was willing to inject pop-ups made it very difficult to trust - what if it goes commercial and someone is willing to inject ads or malware?
People who testify to grand juries are automatically granted immunity with respect to that testimony, unless it is explicitly waived. That automatic immunity negates their right to invoke the 5th amendment under the law.
If it's so easy, why aren't you one?
These days they don't give you pass even if you ace the take home test.

Apparently its got something to do with the whole team getting together and publicly code reviewing your assignment. And if they feel like the code doesn't fit even to the exact size per their liking, its a reject.

I have had a similar experience, where a perfectly done assignment with unit and functional tests, documentation and all the bells and whistles, It took me two full sleepless nights to get it done. But apparently they rejected, for me not using a specific design pattern which one reviewer likes.

It's absurd to the point of disbelief.

Trust me the take home assignment is a sham. People inside get their friends and alumni hired with no hassles. They only give you these tests because they need reasons to reject you.
This is a nonsensical statement. Corporations are not "faceless entities," they have "free speech" rights and they act on the world. They are emergent agents.

If, on the other hand, you insist on finding people to blame, I would start with the executives who ordered the design of the packaging that lends itself to litter.
There are different dimensions to privilege. For example even the worst-off class born in the US still has some advantages from being a US citizen.
So, it's literally the best thing since sliced bread?
Had something very similar: Rented an Europcar van in Copenhagen, I got a parking ticket for the night before I rented the car in front of the Europcar office.

I answered them and tried to explain it, they haven't contacted me since then, but they didn't even bother to apologize. Seems to be pretty common these days...
We decide how life works, between us. You want the kids of rich people to win the next generation unquestioned? I think we can do better.
Reprojection for VR is typically done on the currently rendered frame, so the difference that the additional camera movement the reprojection is trying to account for is between 1/60th and 1/120th of a second. Here you would be trying to compensate for 30+ms, so the result is going to be a lot lower in quality.

Also for a moving scene, you'd need to send a depth or position buffer and a velocity buffer for each frame, meaning you'd need something like twice the bandwidth for your video. Probably more, since I can't imagine how you would compress that information: any artifacts are going to give weird results in the reprojected image.
"Cracking" isn't a meaningful operation for these algorithms. You would need to try guessing, if you don't know anything about the password then you need to guess all possible passwords until you get the right one or a collision (the pigeon hole principle applies)

If my password is "password" you can probably guess that almost instantly no matter what scheme is used. If my password is 32 characters of random base64 output then it wouldn't matter if the scheme is MD5($password) you won't guess it.

Schemes like PBKDF2 and bcrypt trade something useful in the middle, if your password is mediocre they make it too hard to bother guessing. But you'd need to define how mediocre it is to get a meaningful estimate.
Not just you, same problem here. (Firefox on Windows)

Workaround:
If you look at the WAV file the player loads (right click > Inspect Element), that URL is playable in a new tab/browser window.
https://en.wikipedia.org/wiki/Robert_C._Martin
At 123 bits, you're five bits short of the 128 bits I calculated with. I don't think a medium sized botnet can rise to the level of doing 8 quadrillion years of work within your lifetime.

What problem are you trying to solve? As I understand it, we're discussing enumerating the hash space, such that:

1. You are given a hashed value, such as 2b0f4e60b80da7ef1e84573d764f1bf4 .

2. The value is someone's hashed password. You need to find any string which hashes to this particular fixed value, but you don't know of any such string to start with.

You can do this by brute force, but it will take you a long, long time.

The problem is NOT:

1. You have a string which hashes to a particular value.

2. You want other strings which hash to the same value.

And it also isn't:

1. You have a string which, with an unknown prefix, hashes to a particular known value.

2. You want to identify hashes which represent the same string with other prefixes applied.

I don't see where salting is relevant to the question. It's a defense against the phenomenon that cracking one user's password automatically also cracks everyone else who uses the same password (since, without salting, they all have the same hash), but it isn't a defense against having your password cracked by a targeted attack (since, in a targeted attack, there are no other hashes to be collateral damage). Why did you bring it up? What attack are you thinking of?
This happened to me! I flew to jacksonville FL, and they gave me a car. upon return they were all freaking out because the car was reported stolen. I was like wtf, here’s the keys, and got to my plane. I would have been pissed if I was arrested.
If you're going to make the case that glass is heavy, shouldn't the same logic be applied to the drink inside too?

What about something akin to soda stream, either at home or in store?
Grand juries are secret by law. Nobody involved is allowed to talk about what happens in the grand jury, or even to acknowledge the subject of the investigation.
You should though, if you ever plan on visiting Europe again, before an EU-wide notice is put out for you and you get arrested at the airport until you pay the fine and costs...
> but they have nothing to do with incorrect operation of the reactor or any inherent danger or factors not being understood in the reactor design.

To the contrary, society's inability to deal with the radioactive waste created by running these reactors is one of the main concerns against nuclear power.
There were multiple failures here, and not just with Hertz. How on Earth did someone spend 2 weeks in jail on this? This was a bug so they clearly had no evidence except their word. The actions of the police here warrant just as much scrutiny and reflection as Hertz.

Looking for heads to roll isn’t productive IMO, it’ll just end with scapegoats. I’m more interested in systemic changes to keep this from happening again. Although I do think it would be worthwhile to see if anyone tried to cover this up.
Hm hm, are you sure? And what is the difference between personal data and content? My pictures are pd or content? And if I publish them?
> Rich is when you have a high income.

If you make up your own definitions, you should not be surprised to find people is “confused”.
> Recycling is a lie for plastics, plastics can not be economically recycled.

That is simply not true, just go to most of Europe. In Switzerland 83% of PET bottles get recycled. 0% ends up directly in landfills.

https://www.swissinfo.ch/eng/fact-check_is-switzerland-the-w...
Works in chrome
Console gamers have long been conditioned to accept high input lag with laggy televisions, controllers and low-dexterity games and game mechanics.

Quake III makes all modern games feel slow. But that hasn't had the slightest effect on the typical gamers mindset. If only certain type of games work with cloud gaming then AAA publishers will only make those type of games. Exactly like the case with EA and microtransactions.
I've been maintaining my OSS project for almost 6 years. It's well used in the industry but nowhere near as popular as Redis. But I can relate to pretty much everything in the article even the thinking approach. It makes me think that it takes a certain personality to be an OSS developer.
Hey! I totally understand the pessimism. I am untainted by XMPP for better or worse.

I started typing out a reply on my phone but I think I need to sit with a keyboard and just make a blog post on it -- I hope you don't mind a wait. I hope I'll do a fair job characterizing the problems you identity and give them my alternate outlook.
That's exactly what I was confused about too. You must be right.

Imagine saying "you can't ride on the pavement, you have to ride on the street!"

You and I would be scratching our heads, thinking the street is paved.

Aha! I just noticed a clue: "pavements". That is a word that almost doesn't exist in English. It's like "sands" or "waters". Those are actual words, but it's pretty rare to see them.
The future of Docker containers is a slow death now that there are better container solutions that provide more benefits and less bloat. Docker had great engineers and developers, but terrible management.
Don't the hackers almost always just take you money and demand more without actually decrypting anything?
Not sure I agree with that. The two choices are not just change the threshold or fudge the score. Ideally it would be to provide the right conditions so that neither is needed.

Of course real world is more complex than that, and that condition is not easy to provide. I'm just not sure having an subjective, arbitrary and opaque fudge factor is the right answer.
Congratulations on the launch. It looks great and I wish you success on this project

Could you kindly answer this question for me. How does your product compare to pushover.net? Are the problems to be solved the same? What are the tradeoffs?

Thanks
Could she just testify and say "I don't remember." and "I don't understand." all the time?

That's pretty much what all CEOs and such do when they are testifying.
Ok but why not include achievement in the face of adversity. Why not consider this a perseverance/tenacity score?

Since when does GPA/SAT completely describe fitness for the future?
Significant Things to Get Rid of Dull Embroidery Design
Same goes for every single place I worked at. Asians are by far the most prominent minority group. What should I base my argument on? Your experience? Why dont you counter argue with facts and hard statistics to disprove me?
Demo/Tour/Tutorial helper component Click “watch demo”
That would be invulnerability, impervious to harm. Immortality just means you cannot die from ageing. *as you do not age
Felicity Huffman is going to go to jail for much longer than Kelley Williams-Bolar (9 days), even though she is rich, white, and has great lawyers.
> I'm all for 'shared roads' with a speed limit reduced to 20km/h which makes it unnecessary for cars to overtake scooters/cyclists.

1. People don't obey speed limits

2. In the US at least, there are people who aren't very wealthy living outside of cities.

They may commute 20+ miles into the office. Their retirement may depend on their house retaining its value.

Drastically reducing throughput of streets is nice for people who are only traveling a mile or two, but it hurts long-distance commuters.
It seems entirely reasonable to ban powered vehicles from sidewalks, and I say that as a daily user of a Boosted Board.

Now in exchange, go forth and create more dedicated (and preferably protected) lanes for bikes (electric or otherwise), electric scooters, skateboards, and other light personal vehicles.

In 2001 Dean Kamen said Segway would "cause cities to be redesigned". I think he was only off by a couple decades and a slight variation on the vehicles' form factor.
well he was the leader for 24 years and outlasted pretty much all democratic leaders from in his time. I'm not saying I recommend doing what he did and you are right history will definitely not remember him fondly along with many other cruel leaders. But his tactic was effective and I'd say you could argue that he would have been the leader much longer if he hadn't pissed the west off in 91 and if 9/11 hadn't happened.
There are so many online resources and free tutors out their nowadays for high school students, and it is only getting better.

We can't control your upbringing or the opportunities your parents give you completely though. People think the material opportunities given by parents is not fair, but think that the emotional or social opportunities of parents is. If my parents were emotionally abusive, but I grew up rich, should they rig the SAT to show that? How would they even measure that?

In a perfect world outcomes would only be determined by genetics, and the environmental factors would not play into life at all. We don't live in that world, and it would be impossible to replicate it. There are too many variables to be able to measure who deserves what beyond a merit based system.

Look at it another way, would it be fair for a high school/ college sport to artificially raise and lower rankings based on upbringing or environment? Should players with significant coaching be lowered in the rankings, and poor players be raised? I don't think so.
Yes !

Some cities have already started to ban cars from their centers.

I have been living in the US for one year. The omnipresence of cars is really bothering me.

Moving from point A to B without using a car is way more of a chore compared to Paris.

I don't believe I will spend all my life here, and I hope that my next destination will be car free.
An archive, you own it, etc...

Also you can choose on a post by post basis to publish to Medium or not, and to different publications there, so you could have your site as a hub holding all your stuff and niche audiences on your Medium pubs. Stuff like that.
Whatever Hertz did or didn't do to let this happen (albeit rarely) is their fault. So plaintiffs clearly have grounds to sue Hertz. Police departments were also affected, so they arguably also have standing.

But criminal charges? Maybe if people were getting killed over it. Otherwise it's just a civil matter.

Edit: fat fingers
It's illegal to ride scooters on the sidewalks in my city in the US, but everyone still rides them on the sidewalks.

There's no practical way to enforce the sidewalk law. We know that's true because laws regarding cars are often ignored as well.
I had rolled my own setup with a GPU-powered AWS EC2 instance, streaming the video signal via NVENC etc.
Paper paper paper paper.

Keep paper records with you at all times when renting something.
>Rice is the staple crop for most of Asia. If it is so unhealthy why is there no galloping obesity across Asia?

See that's a much better line of reasoning than the one I was objecting to.

As for obesity in Asia. My main question there would be total calories intake. I mean you can stay thin on McDonalds if you calorie count it...
> As usual, France is really good at introducing laws that don't bring anything new instead of simply enforcing the current ones.

The usual French way is to have law that makes almost everything illegal but with laws that are never enforced in practice.

And when you want to make something really illegal, you pass 10 laws on the same topic to be really sure one of them is enforced in practice.
'I’ve become isolated': the aftermath of near-doomed QF72
This layout is known as autism. Higher aplasticity. Local hyperplasticity.
IIRC you can choose..
I try to avoid PayPal as the plague because of how scummy they are, but fortunately there are plenty of better payment portals out there. There's no reason to ask for credit card numbers directly today, that just makes me not trust your website...
Yes, British English pavement means American sidewalk. I suspect that when the word was first used only that part of the street was paved.

See https://en.oxforddictionaries.com/definition/pavement
> You want the kids of rich people to win the next generation unquestioned?

I am not the person you were replying to, but no.
However, the person who wins should be the more qualified person based on merit not based on some standard of suffering. Just because you had a harder environment does not mean you are more qualified than someone with an easier environment.
This marks the beginning of the end of golden age of gaming.

Two historic foes setting aside their differences to target their common enemy - The gamer.
It's generally a good advice. However, how do you do with companies like car2go etc, which are fully digital?
I don't know about US, but this does need formal amendment to Weights and Measures Act 1985 (current UK standard in force) Schedule 1 Part V, see http://www.legislation.gov.uk/ukpga/1985/72/schedule/1/part/....
Exactly at this point the "decrypter" companies are just partners of the cyber-criminals, they have the same incentives, share the same profits and both are unethical.
"X bcrypts per second" is completely meaningless. What was the bcrypt setting? With the right setting, it would not be more than 1 bcrypt per century, or with the wrong setting, an almost equivalent rate to md5. It depends.

More meaningful would be the speedup compared to a single CPU core, which is what the developers (should) benchmark against. They should make it as slow as possible, so if their system can do bcrypt with a cost of 15 in 0.1 seconds, they should set either that or cost 16. (Much more than 0.2s might be annoying to users or be a DOS vector.)
Microsoft is perhaps the single company that has changed the most since 1997.
No, that is counter to their making money. The way to make money through ransoming something on a regular basis is to always ensure you follow through.

There are actual cases in history of ransomers attacking fellow ransomers who don't follow through for hurting the shared business model.
> You basically have to close up shop.

If you can't come to peace with that possibility, this approach isn't for you. Having to close up isn't an inevitability, but grappling with that prospect is an essential exercise.

It's truly not easy for ordinary humans to withstand the vitriol of a furious userbase. So, remove yourself from the channels where that vitriol gushes and roils.

The key is avoid making promises you can't keep -- either explicitly or implicitly. Putting a project on Github, home of "social coding", makes it hard to tune out the din. So... maybe don't keep your project on Github.
That would be an insta-kill of their business-model. In reality they are very helpful and are known to even accept post-deadline payments etc.
You can use HTTP client to contact any HTTP compatible service. You can only use Kafka client to connect to Kafka.

That sounds like a tautology but it's practical.
There is way higher chance that you can make any of your future service response speak HTTP, than all of them speaking Kafka. If you add HTTP client libs today, there's higher chance of reuse than adding Kafka libs.
Unix. Email. TCP/IP. Just taking an initial stab.
Don't get it unless you can get a paper receipt on their letterhead from their office. Just not worth it.
Source: https://en.wikipedia.org/wiki/General_Data_Protection_Regula...

Now, obvliously, the content may contain personal data, or possibly be personal data (if it's pictures of people) and in that case I assume it would be covered.
https://en.wikipedia.org/wiki/2010_Polish_Air_Force_Tu-154_c...

One of the many conspiracy theories associated with this incident is that Russia deliberately created the physical and electronic conditions necessary for this crash to take place.

The cockpit records suggest there were more obvious causes in this instance, but it seems very likely a state actor would be able to engineer a successful attack using a variety of means - not just ILS, but other forms of physical and electronic spoofing.