skysight-inc/HackerNews huggingface dataset:
Looks pretty cool, but wouldn't apple screw you? I don't think they'll like this, they want users to buy with the app store.
Http://statusbiru.yn.lt/
There is virtually no chance that, after selecting bcrypt, you will be forced to scramble to replace it in 2 months.

There is no chance that, after selecting bcrypt, you will be forced to scramble to replace it with salted SHA-1 hashes. bcrypt is strictly better than what you're doing now.
The other way around, too. If I put in "pavel.lishin@gmail.com", it would be nice if it informed me that "pavel.lishin+iharvestbitcoinsalldumbday@gmail.com" was compromised.
These Cringely articles make me see the value in the HN filters people ask for periodically.
Many people have international networks of friends and relatives. My Facebook friends include people in Taiwan (both relatives and friends, some of whom I see in person once in a while through international travel), Singapore (Americans doing business there, whom I met elsewhere), Australia (friends from email lists), Canada (met as I met the Australians), and Japan (Americans living overseas whom I met on email lists). Friends tell other friends, and the network grows. As the previous reply points out, Facebook is advertised in many contexts by businesses, all around the world. All of these channels bring new users to the network.
What's a ready to go bcrypt library for C/C++? I mean include headers, link lib / so, and call a function.

I've been looking into this over the past few days, and I've decided to just extract the relevant files from py-bcrypt, and get rid of the compatibility layer.
Bounce rate & CTR data used to solve search spam problems
The Future According to Eric Schmidt at Cannes Lions
What country is Nevada in?

I'm not blind to the existence of transportation issues in other countries, but insufficient (read "nonexistent") public transportation is often noted as a predominantly (while not uniquely) American problem. Certainly we represent the archetype of the "one car per person" catastrophe.

The emergence of communal, computer-controlled electric vehicles could turn that around completely, so I don't think it's too out of line to be talking primarily about America at this stage.
VCDelta looks at VC portfolio pages every night and tweet any additions it finds
Try Power Shell.
As kenjackson said, the word that set me off was disingenuous. It is a hostile interpretation of the original article that the author first claimed to be blameless and above board, then turned around immediately and explained how was not blameless. Instead, with a reading where you extend the author a bit more credit, it is a story of an acknowledged oversight, where the goal of being above board was not met, and the evidence of that goal was the fact that he licensed everything else he thought of to license. (Goals aren't results.) I'm not talking about legalities at all.
The server belonged to Digital One.

I didn’t own the hardware — I was leasing it from DigitalOne.
Why the hell does this site need to be able to read my Twitter direct messages for me to be able to cast a vote?
that would be highly ironic, considering .Net was MS's response to Java.
I didn't say that every employee at all 150 organizations was working all day, every day to disprove claims of anthropogenic global warming (AGW). It is, however, the case that many of these organizations are in the business of getting grants from the likes of the Chamber of Commerce and other such organizations that have a vested interest in preventing cap-and-trade or a carbon tax. And the idea that scientific funding of climate change research is somehow equivalent to the funding of AGW denial advocacy groups is absurd.

Here's why AGW-denial often counts as FUD: it occurs within the public sphere, rather that the scientific (or even legal) one, and is thus not subject to (1) actor accountability, (2) the same standards of evidence, or (3) cogency/coherence of argument.

Science FUD goes like this:

a) careful, cautious scientists whose jobs depend on being "right" about nearly everything spend months researching, writing, and editing a careful, cautious paper making conservative claims supportive of AGW. Doing so, it is rather difficult to act in "bad faith".

b) In response, rather than produce a similarly careful cautious reply (in a scientific venue), the anti-AGW organization produces a "white paper", or press release, or op-ed, in which they "debunk" the scientific paper by making superficially appealing arguments, attractive to the 99% of people who are non-scientists. Such a reply is easy to produce by acting in "bad faith" (although, to a lawyer type, as lobbyists frequently are, this is simply advocacy).

Looking at 1-3, then:
(1) Note the gross asymmetry between (a) and (b). If the actors in (a) are wrong, they lose standing in the scientific community, and in the case of scientific misconduct could very well lose their jobs. This is very hard to imagine happening in the case of a think-tank pundit, who operates in the institutional-memory-free public sphere, because (b)'s actors are not interacting with a community of experts but rather simply engaging in advocacy. Indeed, assuming that they are receiving funding from those with an anti-AGW agenda, they could even lose their jobs for telling the truth (c.f. David Frum at the AEI http://wonkette.com/404420/david-frum-leaves-national-review). See also http://www.guardian.co.uk/environment/2007/feb/02/frontpagen...

(2) Anti-AGW organization "scholars" often trade in citation-free commentary (e.g. http://www.aei.org/article/103523). Because it's not their job to convince a group of scientific peers, they can get paid to do research sans scientific evidence.

(3) When anti-science advocacy groups have to present a cogent or coherent argument they tend to fall apart. E.g., the FUD against gay marriage (Perry v. Schwarzenegger) and FUD against evolution (Kitzmiller v. Dover School District). I've not yet found any such trial that pits anti- against pro-AGW people. But if this were to occur, I expect we would find a similar outcome.
> Corporate IT has to get better and faster, or they will get marginalized by cloud hosted solutions that can move faster and deliver superior experiences at better cost.

Who says the cloud-hosted solution isn't more expensive? Who says "experience" is the goal? A company cares about making money, and an internal browser-based app is simply a way to make money more efficiently.

Often, the "corporate mindset" means cheap. If you don't need to worry about upgrading your browser, you don't need to blow money on developers just to keep up with cutting edge browser design and you can focus on developing technology that actually makes you more money.

For example, if you had a system that involved scanning physical documents into an image repository, then having individual workers review and annotate every single document (using a browser-based app) and then manually make corresponding changes to the customer database. You are paid by an SLA-based contract based on the rate and number of images you are able to process in a billing period.

Where would you rather invest your money? Keeping the crusty annotation browser-app up to date with the latest shiny new browser changes, or implementing OCR to increase the speed and efficiency you can process documents?
But isn't IMB a hierarchical database (http://en.wikipedia.org/wiki/Hierarchical_database_model), which is a tree-like structure?

This is somewhat different than a general graph database (http://en.wikipedia.org/wiki/Graph_database) where nodes are not restricted to being a hierarchy.
"a Swiss hosting company leasing blade servers"

If they are truly blade servers, then they were possibly sharing the same chassis, power supply and backplane. Could the FBI have pulled just the blades in question? Possibly. But I can very easily imagine the entire blade chassis being viewed as a monolithic component that they would want to be able to perform whatever forensic analysis they are planning. They could also have pulled whatever blades they were not after, and left them, but until you replace the chassis, you are dead in the water.
There used to be a drive thru liquor store in Reno on the corner of Keystone and 4th street - but they closed the drive-thru window ~1990
C/C++ doesn't have this restriction because the hardware doesn't have it. In assembly you can do whatever you want with memory. C was created to give as much access as possible to the hardware, while still providing many of the features of high level languages. It is not the language that is betraying you, it is you that is not clear about what the language can do.
Build me a quantum teleporter, then we can compare masses.
I think it's probably safer to proceed with the assumption that any sufficiently motivated government can seize your physical machine anytime they wish.

I should note that I'm not disagreeing with you, I just think there are more important considerations to make before physical location of the data.
I believe one of the most overlooked benefits of driverless cars is that it makes small-engine, low acceleration (high efficiency) cars acceptable for the American market. Most Americans are currently unwilling to drive a 1 liter engine car because of its no fun to drive, but if you are lounging in the back seat you won't care.
It takes much longer to compute the hash of a given password, which essentially makes it as if everyone chose passwords with a couple extra bytes of entropy in them.
Unfortunately Google is incredibly bad at sales and marketing so don't expect them to understand that their main challenge will be the public perception of driverless cars.
Dual-screened Android Device
LulzSec hacker arrested
My question was more like a survey. I was wondering what people on here thought were Google's options. [I have edited my question now]
Backlinks for domain http://www.waterdamagerepairguide.com | Backlink Checker
'y' remains as such because it hasn't been bound to a value just yet.

That's easy enough to test. var y=20;

function foo(x) {
var tmp = 3;
var y = 20;
return function (y) {
alert(x + y + (++tmp));
}

}

var bar = foo(2); // bar is now a closure.

bar(10);

This makes no difference.
The alert runs once, and displays 16.
At some point there just has to be a disobedience of some laws. Just everyone flat out ignoring them.

Why is it that we cannot hold lawmakers accountable for shit?
Stylish short hair cuts | short hair cuts
Open up any celebrity gossip magazine and you'll see several trendy haircuts in the short category.
Fantastic. One more question: does increasing the work factor automagically upgrade existing passwords in some way? As in, will bcrypt passwords created today be strong enough in 2020?
Contact the ACLU, they will probably take your case.
I think it's only a matter of time (maybe 10-20 years, who knows) until one of the larger urban areas with huge traffic problems, such as Manhattan, London or Beijing mandates these sorts of systems in congested areas. It really seems like it could be the only viable solution to traffic problems in cities whose roads just can't handle the loads, and it seems like a logical next step after congestion pricing like London already does.
You're looking at more like 5+ billion/sec today. There was a listing of modern consumer video cards + their hashing capabilities posted on another HN story recently, but I can't find it.
This means there's going to be a market for in-car bar equipment! Someone is going to make millions on DC-powered blenders and cup holders that can safely accomodate cocktail shakers. :)
It seems to me that all this app does is OCR your name/number/date, instead of having you type it in. I'm sure there will be some users who will be wary of it, but it's not like it can get any more info than you would type into a game or whatnot.

Of course, I'm not sure how this is useful, since I understand that in-app purchases need to be tied to the App Store account, but it might be more useful for Android.
> Please can we drop the IE6 nonsense now? The remaining market share is negligible and the arguments are academic outside of niche markets

When last I checked in with some former co-workers, JPMChase still used IE6. Its a relevant problem.
Could you all send a similar letter for the patent reforms?
Viacom sues Cablevision over iPad streaming
So if I'm using SHA-1 already to store passwords, what are my options for moving to a different system? I assume there's no way to rehash the passwords?
The application doesn't access your direct messages, but the bare minimum privileges for authenticated API access is "read only", and that happens to include the _access_ to direct messages.

Feel free to peruse the source, if you don't believe it: https://github.com/gwoo/phpneeds
An Open Letter To PopCap: Where is Insaniquarium for Smartphones and Tablets?
No; you'd upgrade them incrementally.
I think the best programming language introdution book I read was the " C programming language book" by Ritchie and Kerningham. What made this book stick in my head was that almost very chapter had a bunch of non-trivial exercises at the end and solving them helped me "deeply" absorb those concepts.

There is a lot of material on Clojure on the web . I own the "Joy of Clojure" as well as "Clojure in Action". They are great for illustrating how great Clojure is ( and it is great no question) but they don't help in deeply absorbing the language as much as the C book did. I wish there were programming exercises based around keys concept of Clojure, much like the C book.
Thanks! We're working with mobile app developers, not retailers or physical merchants. So, instead of typing in your card number into a purchase form, you'll just scan your card from your own phone. We'll have more info about developer partners soon!
I reported this localization problem years ago. The best way is to take language from browser headers, like a lot of other sites do.

For some reason responsible googlers were ignoring my proposal.
Absolutely. OpenShift rides on top of AWS, so the URL is accessible publicly. Check out some of the videos at: https://www.redhat.com/openshift/videos to get a feeel for how it all works.

-- Jimmy
While Viacom And Time Warner Take A Break From Legal Battle Over TV On iPads http://paidcontent.org/article/419-viacom-and-time-warner-ta...
In the defense of geeks, this probably follows from the mantra that you should never ever run any command on your system ever without completely and fully understanding what it does and all of its options and etc. etc.

So now people are twitchy about "just use the defaults", especially when it comes to something they don't really understand, like cryptography.
PHP to me is a hodge podge of ideas all thrown together with no real engineering sense behind them. That might be just how I feel though.
When I first saw this, I had a different use-case in mind, where a person would just take a picture of their own credit card for an in-app purchase, instead of a vendor using it to accept money from another person. (Hence the focus on developers.)

If you AB tested giving someone a screen where they put in their credit card number, or a screen where they just took a picture of it, you might find that people are more willing to take a picture. People are probably more comfortable with a photo of their credit card being taken on their own phone than someone else's phone. To the app, both of these are CNP transactions.
It would be interesting to compare each companies profile to this list: # of employees + revenue + userbase + internal enterprise apps vs world facing web services.

Simply saying "I use XYZ" isnt really informative unless you know under which circumstance each was chosen.

Legacy requirements? New scrappy startup with no money? High performance need? Have shared DB stores across multiple departments/apps?

etc...
And any variation with periods in the username: spoold@gmail.com == s.pool.d@gmail.com == spo.old@googlemail.com
The Ruby on Rails auth system I use, Devise [1], will automatically update a user's password to use your new work factor on their next login.

You could do something similar.

[1] https://github.com/plataformatec/devise
Adjustable Pump-Up Eyeglasses Improve Vision in the Developing World
Twitter plans bolder advertisements
If we learned to program in lisp, scheme, haskell, or some other language with (dare i say?) sane semantics we'd be wondering what all the fuss about closures was:

http://www.haskell.org/haskellwiki/Closure
Convert as sessions expire and people sign in again. You'll obviously need a db column to keep track of which passwords are converted/unconverted, e.g. password_algo.
Please tell me I didn't just accidentally give my email to a Spam list.
I think you've got the reason people are afraid of flying wrong. People aren't afraid of dying in a bus crash, or on a train, even an automated one, like they are of flying.
Not necessarily. I (also) am not a lawyer, but the question isn't whether the FBI has the authority, constitutional or otherwise, to seize the servers owned by the target of the warrant, the question is whether they overstepped their bounds in seizing three whole racks of servers. If it's shown they were careless or did not take sufficient caution in their raid to avoid seizing unrelated servers, they could be held liable for damages. In this case in particular, the number of unrelated companies that have been affected by this (and the number of servers present in 3 racks) makes a case for negligence.

Again, though, the question isn't whether they had the right to seize the servers they had warrants for - they did, and you won't get that questioned by any court - but whether they did so properly, and it's not unheard of for a law enforcement agency to get slapped for overstepping their bounds. It's not Common, but it's not unheard of, and it's not a 4th amendment issue either.
YES!

Here is why this is great. As the industrial revolution was just starting up, many places in Europe banned this or that new labor saving invention - to preserve jobs. But not all, many others allowed the new machinery, this quickly forced all other to either also allow it or fall behind economically.

Back to Nevada, Google will now start moving cars there. I can't be the only who wants to sleep during the commute to work, people in Nevada will start doing that. At least some old people will use this, and then more and more as they see how great it works and grants them greater independence. Parents could start using it for their teenagers. It will save lives. How long before someone in Nevada starts an all driver-less taxi service?

This marks the beginning of an honest to goodness technological revolution, how often do you see that happening in one lifetime? And it's staring in Nevada.
card.io shouldn't be used for in-app purchases (Apple's StoreKit works quite well there), but for mobile commerce: selling goods, travel purchases, daily deal sites, local services, and the like. These are all places where commerce is taking place outside of the App Store.

(edited to add that this is Mike from card.io)
More evidence that Apple is building a killer Maps app for iOS
C++ compilers will actually warn you about plenty of memory issues if you ask them to, by writing type-safe code and turning on lots of warnings. Static analyzers today are very good, and will catch a surprisingly good amount of unsafe memory problems that even the compilers miss. The rope it gives you is there for people that need it, but if you don't want it lying around because you're afraid you'll hang yourself, you can always ask the compiler to take it away.
In fact breathalyzer based ignition locks already exist. http://www.technovelgy.com/ct/Science-Fiction-News.asp?NewsN...
Even in fruit flies, enriched learning drives need for sleep
If you like, you can think of it as a habit. Dare I say, a habit of highly effective people. "Hack" is just the buzzword of the day.
Amid Reports Of IPO Plans, Chegg Acquires Lecture Note Marketplace Notehall
Twitter Voice Search in Brazilian Portuguese
You can bcrypt your current sha1 hashes.
Yep. I hate flying, but would pay a lot of money for a driverless car, and sleep like a baby while I commute to work.
I've had the "joy" of doing password migrations in the past when moving authentication systems. We made our auth chain support both methods and then when someone logged in with an old method it stored the password in the new method and deleted the old record. This was on a system with only a few hundred users though, so YMMV.
Hot Topic stopped selling the shirts and issued an explanation. 4chan got exactly what they wanted.
Leaving aside that licensing the technology will obviously pay for itself a thousand times over...

It's a little crass to ask the question, I think. Widespread introduction of robotic cars would be one of the greatest humanitarian achievements in American history. You don't ask what's the profit motive in cancer research, you're just glad someone cares enough to spend the money.

Not that I blame you for being curious, of course.
I sat in the table across from these guys in DreamIt. A great team that definitely deserves this awesome exit!
Yeah, gotta keep being creative! =)

FWIW, I loved it. I hope I didn't come across as critical; I thought it was fantastic. (I lay as my only excuse a bad storm last night with a very nervous 10 year old keeping me to a mere pittance of sleep...)
Truecrypt is significantly slower, especially on the higher strength encryption methods. The program itself has a benchmark in it, so download it and check it out for yourself if you're that curious. (Note that it is relative to your hard drive's speed)
You have two choices that I see:

1. The next time a user logs in to your system and you verify against the SHA-1 hash that they are who they say they are, recompute the correct hash for bcrypt. Then, delete the SHA-1 hash. It does you no good to have a bcrypt version if you keep the SHA-1 version around.

2. Generate the bcrypt hash from the SHA-1 hash. That is, pretend that the SHA-1 hash is the user's password. This isn't as clean (your password authentication software will then have to do SHA-1 followed by bcrypt) but it means you'll be able to migrate your entire database all at once if you so choose. This also causes a very (very, very) slightly higher chance of password collisions, although there's not much to worry about from that.
It's funny, though, because many * channers probably consider a meme 'ruined' when reddit starts to use it.
Some of them probably consider it ruined when it reaches 4chan/b/, actually.

But it's not new.
It's always the same "We used/liked it before all the people that came after us" mentality. It applies to memes, it applies to bands, TV shows, clothes etc...

People just want to be insiders and distinguish themselves from the rest, sometimes desperately.

To that, I must add that using popular pictures in a commercial way is risky unless you know the guy who owns the copyright to the original, and despite what some people may be misled into thinking, it does apply to memes.
Interesting timing in light of the recent AdMeld acquisition.
LulzSec: How Not to Run an Insurgency
As a geek let me just say that it is all love with me and the geeks. Just: in this case, you can just take the defaults and be better off.
Does anyone know how switch in PHP is implemented?