skysight-inc/HackerNews huggingface dataset:
It will still be a while before this is directly observed.

We're fairly sure that it "falls" downwards for a wide range of theoretical reasons and also due to the 1987 observation of gravitational lensing in neutrinos and antineutrinos from a supernova. If we observe the opposite in a lab then it will be incredible because we'll have to reevaluate a lot of what we think we know about physics. If we observe it "falling down" then it will be an important result but not at all revolutionary.
Yep. Don't store passwords using (non-password) fast hashes like MD5 or SHA-256. Use bcrypt: http://codahale.com/how-to-safely-store-a-password/
I've personally benefited from your shared insights into SEO here, but your reply above is glib and dismissive of a business strategy that works for a lot of people (including me). It emphasizes actively focusing on SEO and pursuing visibility in search engines instead of passively optimizing for word-of-mouth and visibility in channels like the App store.

So no... I disagree that it would work. I think rkalla below offers some great advice. To which I'd add that if I were this guy, I'd give a basic version of the app away for free to boost legit downloads through the App store, brand the hell out of it (URL on load page), charge other app websites to be featured as the site of the day, and use various methods ("visit our website for a code to unlock extra content") to get user emails and build a distribution channel that he can leverage in the future. This requires a bit of work, but much less (I think) than is required by the non-freemium approach, and has the advantage of avoiding a focus on Google as one's key distribution channel.
Do you love what you do at your current company? Does being in management afford you more ability to do what you love? Will working at Google allow you to do what you love?

It should just be about the money. And you'll likely find those extra 2 hours commuting will come from time you would have spent with your kid.
I haven't tried 3G here yet. WIFI in hotels is generally very slow and unreliable here. Now that I have my own DSL line things are better. It's not always fast enough for video chat but for routine use it's fine.
Biggest question for me: what is it? Have any screenshots / text examples? I've never heard of it, and now that this has been done, it's impossible to Google for.

I'm semi-perversely interested in porting it to Javascript :) But it'd strictly be a spare-time-when-I-feel-like-it-and-am-not-on-HN kind of project.
I wonder who Mindy is :-)
NTLM passwords? Meh. An awful benchmark for evaluating modern passwords. Who uses NTLM besides Windows, honestly? (Apparently the person who seemed to have not liked this comment, very quickly, heh)

I'd be curious about the timeliness of GPU cracking a 8 character, alphanumerical mixed case password hashed with SHA1?
Thanks. I guess it's similar to the whole P != NP issue.
This is a great article and while Daniel may be on to something, the sad truth is: It doesn't f*ing matter. Here's why:

When my wife and I lost our two year old daughter to cancer we started a nonprofit to raise money "for research" we thought. What we found when we got very prominent doctors behind closed doors is a system of bureaucracy that has led to the ineffective local maximums in research that have left heavily funded diseases such as Neuroblastoma (MYC-N amplified) with an increase in survival rate that amount to a rounding error.

I'll keep this short so it doesn't turn in to a tirade.
1. Doctors tend to want to study, and grant advisory committees tend to want to fund INCREMENTAL research. Anything that is not incremental on something that is being done prominently is considered "high risk". Good luck with your out of the box thinking. You'll be labeled a hack and your career will end.

2. Many doctors who apply for and receive grants from cancer research foundations do so only because it is a good source of funding for their life's work if they can construe it to in some way have an angle on cancer. A real life example would be studying the immune systems of Zebra fish because: an immunotherapy discovery in the similarly functioning immune systems of Zebra fish might create a model that is applicable to humans. I've been told behind closed doors that it's flat out bullshit, he probably has studied the immune systems of fish his whole career.

I was flat out asked by the director of a major US cancer research center to just give them money so that the could continue to keep certain researchers on salary.

Lastly, we want to fund a study into using THC (yes, from Marijuana) as an option for children with cancer because it positively affects three major areas of children with cancer: pain, nausea, and appetite. Right now we pump them full of IV nutrition, anti-nausea meds, and morphine. All of which is very hard on their little bodies. Top cancer research doctors are horrified of the light this kind of research will cast them in so good luck finding someone who will do it, much less sit on your board.

I could go on forever but I'll leave you with this. My wife and I lived on PubMed and Wikipedia while our daughter was sick. We wanted to understand everything, and you know what we found? The very first question that every single parent who has a child that is diagnosed with cancer asks: "What can I feed my child?" They have to say "we don't know.". Search PubMed, you won't find a single study related to nutrition and solid tumor cancers in pediatric patients. That's fucked up, and its because of the bureaucracy and entropy in the research community.

We'd like to break that mold, but first we'll need to raise a lot of money.
Shameless plug http://laylagrace.org
Twitter Introduced Follow Button
I think Berlin has managed to strike an excellent balance. It's quite safe, but has a uniquely vibrant artistic community and has as much "grit" or cleanliness as you like.

I like Vietnam for similar reasons. It can be edgy but not really dangerous.
Antimatter is a terrible store of energy because it is "fail-dangerous". The failure mode is a catastrophic release of energy.

The closest comparison for endurance would be nuclear power. Its worst failure mode is meltdown, which while very bad is nothing like as destructive as an AM explosion.

And it gets worse! Suppose your AM containment fails in a carpark. The explosion will cause a chain reaction of car explosions.

Finally, there is the incredible inefficiency with which AM is manufactured. It takes gigawatts and many hours of accelerator time to create even minute quantities. Because the only way we know of to create AM is smashing things together in particle accelerators. There aren't many LHCs to go around.
5 disastrous Link building mistakes to avoid
According to Stroustrup ( http://www2.research.att.com/~bs/bs_faq2.html ):

"Should I use NULL or 0?
In C++, the definition of NULL is 0, so there is only an aesthetic difference. I prefer to avoid macros, so I use 0. Another problem with NULL is that people sometimes mistakenly believe that it is different from 0 and/or not an integer. In pre-standard code, NULL was/is sometimes defined to something unsuitable and therefore had/has to be avoided. That's less common these days.
If you have to name the null pointer, call it nullptr; that's what it's going to be called in C++0x. Then, "nullptr" will be a keyword."

Sounds like compiler/standard library in use bug.
The trick is that a particular iPhone can't run around to different people's computers slurping the apps they bought on different iTunes accounts. It can only sync with one computer/iTunes account.

For example, my spouse and I could use the same purchased apps (if we used the same stuff) since we share a single iTunes account and library. I could not sync with my next door neighbor and use all their apps at the same time as I use my own.
I'd go one further, entire industries have been created to tackle this very problem! There is a lot of money in mining logs properly, it's easily a billion dollar industry.
Redwood City, CA - fulltime - H1B applicants welcome

BillShrink is hiring for a number of positions - front end and back end (Java) developers, product managers, even sales guys - http://www.billshrink.com/jobs/

BillShrink is the VC-backed company behind the recently announced StatementRewards (http://www.prnewswire.com/news-releases/billshrink-debuts-st...), a free service that enables financial institutions to provide consumers with exclusive, targeted rewards at their favorite merchants. Consumers are rewarded for their loyalty by receiving money-saving offers as well as personalized recommendations for finding the right TV service, cell phone plan, gas station and more. These powerful bill analysis applications are also available directly to consumers on BillShrink.com, which has found 1.6 million users more than 1 billion dollars in savings.

BillShrink is a two-time Webby Award nominee, was listed among the “Top 20 Best Money Websites” by Money Magazine, and named one of the “Best Web Sites” by Kiplinger’s. The company has been featured in the country’s leading news sources including The Wall Street Journal, The New York Times, Consumer Reports, Fortune, The Dr. Oz Show, The Today Show, CNN, ABC and CBS. The company publishes the popular "Shrinkage is Good" blog, which features commentary on the latest economic news and savings tips
Very good post, aside from this: "So if you join a startup and don’t exercise, you should probably try to stick it through to an exit." No. If you're thinking of quitting, presumably an exit which will make you rich is not imminent. Hanging on to a job when you have better alternatives elsewhere so as not to lose the possible value of your options usually is a tragic case of the 'endowment effect' bias in action.
You might need to factor out the TASM code hidden in pragmas in SETMODE.H first. Better yet, remove all asm and retarget for something less arcane, like Allegro or even SDL.

If you want to keep it as is, Turbo C is free online, from Borland.
I'm surprised he didn't mention that, without iTunes, you don't need a computer at all to use your iWhatever. You could travel for months with just an iPod Touch, or be a technophobe with just an iPad, and never miss not having a laptop to plug either into.

Or, in my case, be a Linux guy with an iPhone and iPad and no longer need to borrow my wife's Mac for syncing.
From p. 3 of the paper "Why Dependent Types Matter":

"We have given a complete program, but Epigram can also typecheck and evaluate incomplete programs with unfinished sections sitting in sheds, [···], where the typechecker is forbidden to tread. Programs can be developed interactively, with the machine showing the available context and the required type, wherever the cursor may be. Moreover, it is Epigram which generates the left-hand sides of programs from type information, each time a problem is simplified with ⇐ on the right."
There are at least a few obvious solutions. One is to use long passphrases. Another is to stop trying to memorize your passwords, write them down on a postit, encrypted file, etc. The main threat to your security is not someone digging through the postits in your wallet, it is the hash being stolen from someone's insecure database.
Comparing DSLs in Ruby and Scala (2009)
I remember folk writing such apps for Slashdot.

Since 1997 we've known that HTTP+HTML is the worst way to achieve any task online. It is, however, the most popular.
Isn't email tracking usually done using an image beacon and aren't images turned off by default in GMail? It sounds to me like he may have accidentally purged a lot of active readers by putting too much faith in flawed reporting tools.

Sure, you should never send email to anyone who marked you as spam, but deleting people just because they don't have images turned on is probably overkill.
Hire yourself?
Real Estate Shark - with Barbara Corcoran
You can find it on Home of The Underdog. The official site got lost some rewrites ago, but there will probably come some new site again. I could add compiled versions to the repository for reference... It's a sokoban-like game, but a lot more enjoyable.

The .exe and the data files:
http://plasmaworks.com/files/pits/pits95.zip

The level editor (Source Code got lost, but Apache-license is also valid for this one. If someone can disassemble it and create some maintainable sourcecode from it, very welcome)
http://plasmaworks.com/files/pits/pitsedit.zip

Screenshot for reference (more googling for puzzle pits): http://www.google.com/imgres?imgurl=http://www.old-games.com...
can't you design your software to prevent brute force logins? i.e. lockout for x seconds if y unsuccessful login attempts are made?
Bet HN: Yet Another Set of iOS5 Predictions, with odds
The bad part is that some sites (even banks!) force you to limit the number or type of characters. In one ridiculous case, I was forced to use an 8 character pwd with only lowercased letters.

The solution is to use tools like KeePass or 1Password to allow maximum length passwords (randomly generated also) wherever possible.
NO THEY AREN'T.

This is a great example of a bona fide awful trade press article: some guy with a column-inch quota sees a piece by another trade press hack who is in turn digesting a blog post by someone who is "allergic to command line utilities" writing up someone else's GPU password cracking tool. And so, strong passwords are useless!

Except that this has nothing at all to do with why passwords are bad. The problem GPU crackers exploit was solved over a decade ago with adaptive hashing. GPU crackers cannot crack scrypted passwords of any real complexity in tenable amounts of time.

Once again: http://codahale.com/how-to-safely-store-a-password/
The same with people with expensive cars not having front plates. When was the last time you saw a new Corvette with the front plates in california?

as I said, you only have to worry with petty laws if you are not rich.
Sorry for your loss.

My sister has been battling cancer on and off for over 10 years. She has done a lot of her own research (ie reading up on stuff) and used supplements and nutrition to help keep her alive in addition to traditional therapies. She has had four occurrences of cancer with at least 3 different "types" of cancer (I don't recall the names, but various breast cancers basically). She has also expressed her frustrations at these specific things: a) Cancer research is all variations on a theme, with almost nothing really new/different. b) There is no real solid information on nutrition and doctor's reply to inquiries about nutrition with answers which essentially chalk up vitamins like they are placebos whose sole value is psychological comfort.

My mom and dad have both had cancer twice. My mother's mother died of cancer and she has several sisters who have had either breast or uterine cancer. So it seriously runs in the family and my family has a high survival rate because of the family tradition of looking to nutrition and the like and not just putting things in the hands of doctors. My mother kept father alive when doctors expected him to die. One of his doctor's interviewed her on tape for two hours and changed some of the practices of his clinic based on what she told him.

I've used nutrition, among other things, to effectively combat a different "dread disease" for me and my oldest son. On the up side, nutritional approaches do not require your doctor's permission. You don't need a prescription from him. You don't need to run it past the FDA or some such. So this is a space ripe for guerrilla warfare, so to speak. :-)

Good luck with your goal to get something meaningful done in this space.
Admin Detector (SAD) v 2.4
Jack of all trades is good. Master of none is not. You are responsible personally for becoming master of some field.
Sounds like you have most, if not all, of the skills to build your own company. I know I'm not answering your question in the original post, just wondering what barriers you have to starting your own company.
I posted more recent stuff under the link below. Feel free to add whatever is missing.
I agree. Piracy is the best thing that ever happened to Microsoft. If DRM worked, China - unable to afford Windows- would be a massive base of innovation for Linux desktops, and ultimately undermine Microsoft. If copyright were strongly enforced, nobody there would know what Louis Vitton is - instead it is now home to their most profitable store.

Piracy is great marketing. Better even than free. You have distribution of free accelerated by the impression of value. The best reaction to piracy is to leverage the demand and user base.
His recommendation of not using salts is very misleading and should not be quoted due to poor advice as Bcrypt is also useless against dictionary and brute force attacks.

The aim of password storage security is to prevent pre-computed hashing reasonably enough. No amount of password hashing even if it takes 1000 years to hash a password if your users use '12345678' as a password.

Salting protects against pre-computed hashes (rainbow tables [0]). Otherwise I can pre-compute many bcrypt hashes and then quickly look up the password.

[0] https://secure.wikimedia.org/wikipedia/en/wiki/Rainbow_table...
It all depends. The master of one is more likely to do well as a consultant or in a corporation with a lot of division of labor.

But startups usually require you to do many different things, even things completely outside of your experience. I was hired at one to do web development, but also built and ran our hosting machines, developed training materials, taught classes, helped sell a little even.

It was a good experience. It felt like you just did your best even if you didn't know what you were doing. And if it worked, beautiful. If not, we'll find another way.
That doesn't matter if someone has a dump of the database. Which as Sony can tell you, is becoming more common.
We've got to get this AMT thing fixed; it's nuts that people owe taxes on money they never had. At the very least, when the stock in such a situation actually becomes worthless, one should be able to file a 1040X for the year in which the AMT was triggered, erasing the excess tax bill and turning any excess tax paid into a credit.

I can see wanting to tax people on paper gains as a way of closing loopholes -- but if the paper gain evaporates we should let them off the hook.
That's why journalism is important. A general author will take a lot of it at face value; journalists will not.
Not if they are using Adblock Plus with Easylist.
Codahale's article is misleading with salts. Bcrypt can't also protect against brute-forcing or dictionary attacks. Please don't spread that link as an example of good password storage security.

Edit: Since I can't reply to poster. I don't see bcrypt using a unique salt for each password. It's the equivalent of exchanging a SHA256 + Same Salt for Bcyrpt + Built-in-Salt.

Does bcrypt use a unique salt per account?
And above all its safe to go for a run at night!

...unless it turns out to be illegal to go for a run at night, in which case it's terribly unsafe, and there's no way for a person from a "legal to run at night" country to know without checking.

Now, you might say, "Well, that's ridiculous; there's no reason why it would be illegal to run at night," but I think I can come up with at least as good reasons for making that illegal as for banning chewing gum. Making things illegal when there is no obvious reason for them to be illegal creates uncertainty and doubt; mixing in life-altering punishments provides fear, as well.
Makes me want to try HumaWorm.
Show HN: healthysparx.com - A social Q&A site for health topics
I'd appreciate any feedback, thoughts or comments on our website - healthysparx.com

Being interested in living a healthy life, my wife and I were discussing that were no modern health sites that really leveraged the power of Web 2.0 and the culture of social networking to help people live become health aware. So we decided to make our own.

Our website currently does the following things:

* A personalized news feed

* Catalog questions according to topics

* Comments on questions/answers

* Following other users and topics on healthysparx.com

* Users have basic profiles

* can sign up using Facebook or Twitter
and search

Looking forward to seeing your feedback.
No; you're incorrect.

All secure password storage schemes are randomized. If you insist on using the word "salt", then just know that bcrypt, scrypt, and the PBKDFs build the salt in. You cannot "pre-compute many bcrypt hashes and quickly look up passwords". So: if you're using a scheme that requires you to think about salts, you are virtually certain to be using an insecure storage scheme.

And, dictionary and brute force attacks are the entire problem bcrypt is designed to address. Go back to that article that you didn't really read, follow the first Usenix link, and read the Usenix paper it cites.
Hey, I'd really like to talk to you.
Drop me a line to nico(AT)nico.im

Falou! ;)
I just finished school and I can tell you what's worth it. Anything computer based/technical like CS, anything engineering or anything business like IT, accounting, marketing or finance.
No; you're incorrect.

You can find the answers to your bcrypt questions at the Usenix paper which is the first link in the article you're advising people not to read.
It's likely that they are storing passwords in plain text or encrypted. If my website can accept forum posts in UTF-8 of 256+ characters, then people can log in with UTF-8 256+ char passwords.
cool for you. i'd rather stay in one place and get a chance, in my lifetime, to learn how a forest grows myself.
None. Seriously. Wordpress is fine for blogging out of the box. Once you start getting traffic, you'll want a caching plugin, but you won't need to worry about that from the outset.

That said, you may benefit from things like Disqus or Facebook comments and social sharing plugins, if you don't want to code up the pieces yourself.
Fair. I should probably have better written it: "If you join a startup and don't ever want to exercise, the only way to get to liquidity will be to stick it through to acquisition, which might be a long haul."
Totally agreed: AMT is nutty. I've had good friends bankrupted by it.
Like MD5, SHA1 is designed to be fast. For that matter, so is SHA256, and all the SHA-3 candidate functions. The right way to think about this is that all the strong crypto hash functions are unsuitable for use by themselves as password hashes.

Cryptographers have a mechanism for securely turning human-readable text into secret material: key derivation functions. All the modern KDFs are adaptive, meaning that they come with a "pain" dial that you can turn to force attackers to spend more time executing crypto code paths and less time comparing results.

You can build decent KDFs out of functions like SHA1, but if hardware GPU cracking is the future, you're best off with something like Colin Percival's "scrypt", which was explicitly designed to be memory-hard (requiring lots of state to compute) and hard to parallelize:

http://www.tarsnap.com/scrypt/scrypt-slides.pdf
The proper modern term is busticati.
>> This is all down to the fact that RDP came before DWM. If it was the other way around we'd be throwing surfaces down the wire which would be nice.

The joke here is that on Vista to Vista RDP connections (.NET 3.0), WPF was properly remoted over the wire and rendered on the client machine instead of bitmaps being sent. This was removed in .NET 3.5. (http://www.virtualdub.org/blog/pivot/entry.php?id=216)
Not only that, but, unless you are in that 1% , the money you'd spend on developers could buy a much beefier server.
> Human papilloma virus causes cervical cancer (which is why women get annual "Pap smears")

If you meant to say the test was called after the Pap-illoma virus, then it's not correct. Pap test checks for abnormally shaped cervix liner cells rather than a virus. And it is named "Pap" after a person who invented it, not a virus.
I graduated from the Comlab / New College last year. Which college are you at? What year?
Cash Seizures by Police Prompt Court Fights