skysight-inc/HackerNews huggingface dataset:
Best practices for secure password storage really --- and I'm not being hyperbolic --- haven't changed much since the '90s. Poul Henning-Kamp wrote the FreeBSD MD5-based password hash and captured the main problem with secure password storage on his first try. The requirement here is not really evolving.

The reason people (mostly me, admittedly) raise such a stink about this is that using SHA1 or MD5 directly to create password hashes is SO. BAD.; it's actually worse than the original DES crypt(3) function. Web apps created a new instance of the original vulnerability, of people creating terrible new password hashes all the time that are vulnerable to problems addressed in the 1970s.

I can see why, given that stink, you might think it's hard to store passwords. bcrypt is new-ish (it's roughly a decade old), but you don't have to use bcrypt; it's just the best recommendation you can give someone starting from scratch on this problem.
No. Missing emails from friends and acquaintances would get noticed (and therefore people would look in their spam boxes). Missing emails from strangers could be disappearing regularly without anyone noticing.
Lunch with the FT: Biz Stone
If being a hacker means having a lifetime of experience, then I am not a hacker. If a hacker is someone who loves solving his own problems with his own two hands -- that's me. I'll take either.
I see you two have some pretty big plans on your mind! Care to share what is it you're building that 60000 predictions per day just won't cut it?
I wondered this too as an amateur. Although how about this:

Normally the emergence of a contradiction in the course of a proof serves as a red flag that something's wrong. When proving by contradiction, you're operating without the safety of these warning signs as you progress through the proof. If you reach a contradiction, you have to question whether or not you got there suspiciously easily.

If you're aiming for something more specific than just falsehood -- "not X", say, as in the contrapositive approach -- you might be less likely to get there incorrectly. If you reach a contradiction along the way, you don't go on to say "and I'm done since contradiction implies everything including not-P", (even though technically speaking this would be perfectly valid) instead you question where you went wrong in the proof, because this is too easy.

But yes this certainly feels like more of a fuzzy psychological argument doesn't it. I don't know how (or if) you could formalise a notion of "how susceptible is this proof tactic to accidents".
btw, you don't need Prediction API to detect a language. One could use Translate API [1]:

>>> detect_language_v2("Tous pour un, un pour tous, c'est notre devise", open('api_key.txt').read().rstrip())
[u'fr']

[1]: http://stackoverflow.com/questions/4545977/python-can-i-dete...
This might be cheaper, depending on your requirements: http://www.btopenzone.com/buy/
Basically what Steve said in reply to you, but I'll also add that it is open source. I'm using the following library from the author of SRP:

http://srp.stanford.edu/download.html

as the backend implementation, and then you can see the full javascript I've written with view source. The javascript isn't free to use, but you can evaluate it to see if you trust it.

The only thing I'm not releasing is the Lua code that implements the HTTP API, and all the other glue.

Also, I very seriously doubt you go around demanding you see the authentication implementation of every auth system you use. It's rather unfair to say you need to see mine when you don't demand you see Google's.
Is this for real? Or is it taken out of context or something? Makes him sound a bit "out there".

> When I meet Biz Stone, co-founder and public face of the micro-blogging website Twitter, for lunch at the Cherwell Boathouse in Oxford, he announces with some pomp: “I insist that all my conversations are recorded and all my meals are chosen for me in advance.”

...

> He does not, however, entirely abandon his assumed persona of peremptory plutocrat. When I ask the waiter if I can sample the same butterbean and hop millefeuille first course, Stone proclaims: “No one is allowed to have what I have!”
Crazy- she could have scored points out of this! Price at $0.99 out of the gate, email the ENTIRE userbase explaining the situation. Say that there is no way to migrate existing users to the App Store, but in appreciation of their support she's pricing at 99 cents for the first week so they can upgrade.

Explicitly state that 'Even though I'll lose a bunch of money by pricing so low during the launch of the App Store, it's worth it to me to maintain the trust of my users'.

Boom. Crisis averted, you lose $5-10k or so on launch sales, but make very, very loyal users out of your existing customers. Cross-sell that email list more aggressively in the future. Money in the bank.
I think it's pathetic to whinge about having to drop just $5 on an app store version when a lot of users originally got it through a discount bundle such as Macheist. Especially as it will update to any future version (3.0+) for free and the existing app isn't going to expire, as stated in the blog post.

Look at any other company, Apple isn't going to give you a free code to say, Aperture 3 just because you own the pre-MAS serialized version.
It's not unfair to say that if he's got to pick between a clunky but mainstream standard for authentication and something entirely custom, the entirely custom option would need to be (really) open source for him to consider it.
The log messages are written for the 3rd person, not you. He may not use a modern email program, wider terminal or GUI tools, like you do.

It makes sense to write for the least common denominator.
GoGrid. Quite happy with them. http://alpha.beepl.com:8889
Because people will buy a phone with faulty SMS abilities, Google has no financial incentive to fix the bug. If people stop buying the phone and vote with their wallets, Google might fix it. Until then, you can probably assume there are dozens of other bugs that they don't care to fix, maybe they could be serious security bugs - who knows.
Forgive the pedantry, but riding a unicycle is not difficult even if you have bad motor coordination.

I'm fairly janky in terms of my motor skills and learned to unicycle in a week or two. It consists of hacks, concepts, and fundamentals just like most seemingly complex tasks.
Considering this will presumably include the Atheros chipsets they just bought, this is a very good thing.
It seems Lua is the better choice for writing an asynchronous web micro-framework. I spent a lot of time trying to write a super minimal WSGI website in Python using nested generators and then realized I was wasting my time if I couldn't yield back to the body content iterator from anywhere in the call stack. uWSGI has an nginx plugin and support for Lua wsapi if anyone is interested: http://projects.unbit.it/uwsgi/wiki/Lua
The answer is always profit.

That doesn't make it okay or good or long termist.
Is applying for a developer license from Apple really trivial? Is it not possible for Apple to simply not grant the license if they, for example, wish to deprecate a platform?

Do you have, or know a text that provides a proper explanation of 'GPL cannot impose restrictions on third parties', as the license (v2 as in the subject) clearly says:

6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to
this License.

What counters the statement "You may not impose any further restrictions on the recipients' exercise of the rights granted herein"?

Edit: formatting of the cited paragraph.
People look in their spam folder. They see an email which shouldn't have been in there. They thus increase their frequency of checking.

That is what Google is claiming, and what I am agreeing with them about.
Reminds me of the Kentucky Fried Movie. During a 'commercial break' in the movie, a news caster chimes in with the headlines:

"Moscow in flames, missiles headed to New York, film at eleven"
GnuCash is great; I use it for both personal and business.

If you have it use PostgreSQL for the data store you can run it at home (keeping the database there or on a server somewhere if you like) and then connect to it from another machine wherever. I haven't tried that yet as it's a new feature in 2.4.0 which I just upgraded to.
http://ashleyfmiller.wordpress.com/2011/01/08/sarah-palins-t...

http://joemygod.blogspot.com/2010/09/palinpac-site-puts-cros...

http://www.dailykos.com/story/2011/1/8/934345/-Flashback:-Gi...
If Twitter aims to be yet another RSS reader, so be it. But I doubt that's what they're going after.

Twitter indeed has a strong presence on the web, but I'm wondering how that presence can be translated into a self-standing business.
Much of a muchness in the UK, especially so in London (I assume you mean Romford - Rumford is in Cornwall if memory serves).

You can get a stick with 1GB of data for about £20/$35 from most supermarkets or phone shops. Eg http://direct.tesco.com/q/R.207-7408.aspx
There are five 3G UK networks: Vodafone, O2, Three, Orange, and T-Mobile. They will have coverage checkers on their websites, but some of them you will need the postcode of the address you're staying at to use. (Note: you mean Romford, probably the one in North East London (near Havering).)
I don't see why not. I learned the math part of that (and more) in one year of grad school and basic C++ instead of the two languages. Just takes dedication if you're doing it on your own, I know I couldn't have.
so that they can avoid gcc 4.3+, when it went GPLv3. It was hard enough for them before: gcc was the one place they have been unable to redact and hoard their ARM contributions, but with GPLv3 the situation becomes untenable for them.

How come GPLv3 (as opposed to GPLv2) is not in Apple's liking?
Yep, it's Romford, my bad. In fact, I'll be very close to a Tesco store, so I can buy this there.
I'll just leave it at that:
http://www.google.com/finance?chdnp=1&chdd=1&chds=1&...
Latency Compensating Methods in Client/Server Games
They want to restrict the program — Apple forbids private APIs, system modifications, kernel extensions, auto-updates.

Whether you need those things might be debatable, but Apple doesn't give you freedom to have them, and adds DRM to prevent you from modifying the app.
This sounds good. I don't think there are any WiFi spots near where I'll be working, but I can use this for evenings.
A programmer I know told me once about his method of using Twitter. He doesn't read any normal news sites, use RSS, etc. but just follows on Twitter people who write things that he finds interesting (mostly game development). When someone stops tweeting high-value things (links to interesting articles, etc.) he just stops following him and finds someone with more interesting tweets.
I don't know your definition of corporate hell but here are a few which might help:
Q: What do you consider important when measuring performance of your engineers?
Q: Can an engineer fix a bug without permission?
Q: Do the dev teams have access to deploy their software to the production environment?
Q: Can I download and install software to help me do my job?
Q: What policies do you have in place if I want to use an open source library or framework in your system?
Q: How often do your people work evenings and weekends?
Q: Is there an on-call requirement? How does that work?
Q: Can you describe the atmosphere? Is it fun? Is the department filled with laughter?
Q: What are your views on hobby projects outside of work? What other cool things are people here involved in?
Exactly. I contribute code to GPL-licensed projects, and I don't want the users of my code to be unable to fix it; it's simply not fair to distribute software that the end-users are not allowed to tweak and improve. When you distribute software on the App Store, the users get the changes I made, but I never get the chance to get changes that they would have made. Hence, a license that prohibits this unfairness is necessary, and the GPL fits the bill.

Don't get me wrong, I am fine with software that is BSD- or MIT- licensed. But I think for the best culture of contribution and sharing, you need to clearly set your expectations in the form of a license, and the GPL does exactly that.

If Apple wants the world of GPL'd code to be available on their devices, the solution is simple -- allow side-loading.
That's Qualcomm - easy to confuse with Broadcom I agree :)
Programming is probably as challenging as any other intellectually demanding task, but it does have one advantage to other skills: it can be done fairly cheaply. It doesn't require any sort of capital investment other than a cheap netbook (or someone could probably even learn on machines in the library), there are tons of high quality tools and tutorials out there that are completely free, and there is a large community of people that are very accessible and actually like helping other people.
The commit that makes MongoDB faster (humor)
Can't it be re-released under dual licenses?

In theory, yes. However you need to track down every contributor and get them to agree to the new licence. It's a logistically hard thing and might not even succeed.
I agree strongly with the sentiment of the post. My conception of self and world has been shaped in no small part by great works of fiction.

That said, I winced a bit at the author's particular use of the nutrition metaphor. The U.S. government's "food pyramid" is one idea that could do with a bit less mass consumption.
"Especially as it will update to any future version (3.0+) for free."

Free upgrades to any future version? Sure.. Let's just hope she don't decide to switch to another publishing platform and ask the users to buy the app again.
I found programming WAY easier than learning the guitar. 'Course I was 13 at the time, and the latter involved "practice". Practice was boring, yet learning things like ASCII, how to toggle a PDP-8, Hammurabi, ... Those weren't "practice".

As everybody knows, doing what you like to do is easy. Doing other stuff is not.
Apple will take whatever is convenient. You're the one losing out

I know it's a strawman argument, but if you feel superior to Apple, how come you didn't come up with the iPhone innovation? Saying Apple doesn't care about me when they obsess about designing amazing products that blow away anything that existed before is a little big disingenuous.
Per version, I believe. You have to game the system a little bit for that, but that's what Marco does according to the Build & Analyze podcast, from what I recall.
A lot cheaper than a super-yacht. A bit more likely to get you killed, though.

I once saw Michael Dorn's F-86 up close. On the side it said something like "Actor, Pilot, Klingon."
Nice. I've been eagerly waiting for Notifo for Android.

Now I'm just waiting on the Linux client.
When a programmer is adding ugly code to the codebase, he is making a marriage proposal. Unless the prospect with him or her (till death dues you part) is appealing, work to remove the offending code before children start coming in.
Free WiFi is not as common as in the US. Starbucks have a partnership with BT Openzone - but if you load a Starbucks card you can register for free WiFi at Starbucks locations.
Sounds like the only reason to stick to her position is principle; it's not like she isn't going to take a financial hit from this.
Actually, they have been making quite a bit of money in the sale of public tweets. Wholesale data with their "Firehose", 50% and 5% of all tweets stream is not cheap if that's what you want.
I like the questions about allowed things at work / policy on hobby projects. Others might be useful too. Thanks a lot - that's exactly the kind of stuff I'm looking for.
Look for a healthy mix of new hires, long term members of the department, and people who have transferred into the department from other departments across all levels of the department. It is bad to wind up in a dead end branch of a large organization where there are only lifers and your skill set isn't valued by other departments.
It would have been interesting to know what they're using for email marketing, analytics, customer support, project management, ...
http://business.twitter.com/

'nuff said.
Well, in fairness, religious people seem to have difficulty telling apart fantasies from reality...

After all, that is what faith is, a strong belief that your fantasies are real.
If we were discussing a machine-checked proof, then this would basically not be a problem. The correctness of an accepted proof would have little to nothing to do with its length.

Unfortunately, any proof about NP would be very gnarly and likely to be a mammoth task to formalize into a machine-checkable proof and so likely not done for a long time, if ever - the proof-checkers would be other human mathematicians. And humans are empirically unreliable. Invalid proofs have been accepted for years, decades, and even millennia (Bertrand Russell, IIRC, found a number of gaps and hidden assumptions in Euclid).

If you were looking through a program someone written, wouldn't you assume that there will be a certain bug rate per KLOC? Wouldn't you assume there is a certain bug-I-will-not-catch-reading-through rate per KLOC?

Now imagine you are looking at thousands of lines of the most fragile program ever written...

From a philosophical standpoint, I am reminded of Quine's famous attack on Popperian falsificationism - when we observe that Uranus is not on the orbit Newton would predict, we could reject Newton's laws of motion, or we could postulate some additional unobserved physical fact like the existence of a seventh planet called Neptune. Our observation has only forced us to reject the consolidated theory Newton+6-planets, it doesn't tell us which of the 2 to spare. Similarly, when our potential proof finally terminates in a contradiction, all it tells us is that somewhere we went wrong; it doesn't tell us which axiom or theorem we ought to throw away as false.
I like this, a nice philosophy that following our own moral compass does not have to adversely affect anyone else.

I have a hypothesis: people who are satisfied living in their life are much more likely to be willing to respect other people's personal freedoms.
There is no proof of "degradation of search results" whatsoever. You could always find a bunch of search queries which don't work quite right and write a sensationalist article about it.

Has anyone done a scientific study, involving careful observation of quality of thousands representative queries on Google over a prolonged period of time? No.

If anything, the recent hysteria only shows how good Google has been at increasing people's expectation of search quality over the years.
Nice idea, although technically it's not origami if you need to cut the paper.
Speaking as an almost not-amateur (finishing my PhD this year, and working on getting a faculty job), you're both right.

Logically, there's nothing wrong with proof by contradiction. As long the steps between "Assume P is true" and "therefore FALSE" are valid, you have a valid proof that "P is false".

The issue with proofs by contradiction is psychological, but it's important not to ignore such things when you are doing math. Proofs are written for people to read, and people make mistakes in reading, writing and constructing proofs. The longer and more complex a proof is, the more likely it is that there are mistakes. I can't speak for all fields, but in my field (statistics) proofs by contradiction are acceptable but not in style and constructive proofs are generally considered to be more informative.
Oh, this is such a great argument for thought crimes! Because most crimes occur after somebody thinks of them, we should ban any thought (and by implication this includes any depiction) of any crime!

I'm sure that will work out great.

But it is hardly surprising that a religious person came up with this, given that most sins are already thought crimes.
Ask HN: How to start creating stuff with Arduino?
I have bought the arduino starter kit by fritzing ( http://fritzing.org/shop/starter-kit/ ) and played a little bit with it. Now I want to know how to create own circuits. How do I know what to put where? I know how to code, but are there tutorials on creating circuits out there I can read?
The Three Temptations Of Meta
Thanks. As far as I know they're collecting people for a new project and growing an almost-separate department, so it's definitely not a dead branch (unless the project fails that is...). It might be worth looking at the current leads / managers from that perspective though.
People aren't mad because it costs $5, they're mad because she broke a promise.

And if Apple had reneged on a promise that all Aperture 2 users would get Aperture 3 for free, you better believe it would get huge (negative) media coverage.
I take it this design uses UV-curing materials, like in the manufacture of PCBs.
you should put some of that on the webpage. i had no idea what it was until reading your explanation.
A company with revenues of $6bn/year and profit margin 20% is hardly ironic.
Graylog2 v.0.9.4 has been released. FOSS log management
Graylog2 v.0.9.4 is a big release that brings a lot of new features, many bug fixes and performance improvements.
Code without a license cannot be used for any purpose, because you have no rights to other people's code unless they grant them.

Anyway, VLC is useless without FFmpeg, which will always be at least LGPL.
Yes, Objet's process involves spraying down resin, then curing it with UV.
Good point. I guess I more accurately meant it would be a PR nightmare for me... I just couldn't feed good about pissing off so many people, even if it did ultimately increase my sales.
> suicide is an irrational act

Even this is very arguable, there are plenty of perfectly rational reasons for suicide.
This has turned into an argument over the definitions of words, at its core. One person is defining "faith" to mean "having a belief that significantly mismatches the evidence", and you're defining "faith" to mean something drastically different. May I suggest either agreeing on a definition for the sake of argument, or splitting it into two separate words? You could call the first definition "mimble", and the second definition "spuzz", for example, and then the discussion might be able to go somewhere.

(I also don't consider your definition of faith to be particularly useful, and I suspect that you're equivocating, but those are tangential to my point here.)
Yes, wonderful. Shows the true power of OO.
learning to program is deceptively hard.

First you think it hard,
then you think its not,
then you think its hard,
then you think its not,
...
Do you know of a cheaper UV-curing material for applications like RepRap?
No, the process is fundamentally different. You can think of the RepRap process as being like a glue gun on a robot arm, whereas what PJet stuff does is more like printing a page of paper, but instead of ink, it's resin. Then shine some UV on it to cure it.
I would be useless as a mechanic.

90% of being a good mechanic, just as 90% of being a good programmer or a good doctor, is debugging. If you're a good debugger, you can damn well do anything.
It's not about advancing the GNU project as much as advancing the values expressed in the GPL: allowing your software to be built on by those who agree to return the favor. There's nothing wrong with reciprocity.
I'd hope it's a simple misunderstanding, but my gut tells me that this was planned -- I don't see how the VideoLAN guys can suddenly forget that one of their own demanded removal of the application and then vehemently say "we had nothing to do with it!"

This stuff is all public...it makes no sense, honestly.
The state of the list
Uhm.. How does it feel to be trapped in Job's Reality Distortion Bubble?