skysight-inc/HackerNews huggingface dataset:
I understand the distaste for negativity in general, but if you have a quota on the amount of negativity taken "from one person", then you're judging the person rather than the message. Why not evaluate the argument on its own merits?

I'd like to see less discussion of "David" and "Zed"'s peccadillo on this site. A cult around someone's personality flaws is just as vapid as a cult around someone's personality. The well-worn proverb goes, "Great minds discuss ideas; average minds discuss events; small minds discuss people."
Clarification. Right now we have

> Salted hashes are a straight-up vulnerability. -- tptacek
Wow. That's awesome guys!

The place I work for uses crazy stuff like Microsoft Reporting Services, and old old legacy ASP Classic for all their reporting and stats stuff.

I'm slowly moving it forward (when they're not looking) by making everything using nice Javascript libraries out there, and this is definitely one that would be perfect for a solution where lots of data needs to be put into a nice and easy way for a user to find the particular stuff they want.

Again: Nice job! And thank you!!
The Web is Shrinking. Now What?
The arrows through the graphic kind of remind me of Family Circus.
I don't know about India, but Brazilians have a large online presence and love things that are popular in the US. Just take a look at the trending topics on Twitter and you'll almost always find something in Portuguese. I think that Facebook's worldwide dominance is what caused many to switch.
Teleology is something quite different.

Not every period of evolution in a taxonomic branch is going to involve adaptive radiations. Although early human evolution is generally thought to have involved an adaptive radiation, by the time we get to 2mya a lot of the literature was assuming only 2-4 species existed over the next 2 million years.
At 30,000 employees, they're the size of the town I grew up in and it doesn't surprise me that they're acting like one.
> I pity anyone who uses Salesforce and decides to leave for greener pastures. It would be a bloody nightmare.

Talking about this, does anyone know a good CRM to use for a web agency? We've tested salesforce for a month and it feels over-engineered and unintuitive.
Brazilian Blogger Assasinated
Here's another one called Turntable.fm Extended (has a few other features, like notifications):

https://chrome.google.com/webstore/detail/mnciafhfaahhafklck...
That was my initial thought too. Instead of having to type all of your information using a tiny keyboard or on-screen one, you just snap a picture. I suppose, though, that most online markets allow you to save your information and the problem really isn't that big after the first entry. Something like this is kind of neat, but nothing new or novel. OCR has been good enough to do this for a long time.
People are afraid of planes because if the power goes out, you die. On the ground, if the power goes out on your driverless car, you cruise to a stop.
I guess that's the problem. The restaurants I like are rather small. They have only two or so people. I guess there is apoint when the restaurant is large enough when those mobile devices pay off.
Noteleaf Now Shows Full LinkedIn Info for 2nd & 3rd Degree Connections
All the best (and fun) scaling issues is best solved by hacking. Is there really any proper decent methods out there that can actually take a company from 5 users a day to 5 billion without any problems at all?
I'm aware that you could perhaps "foresee" it, and get a big data-center, and lots of hardware solutions -- but is this really the solution that's called an 'out of the box' solution?

Sounds like when Google gets a problem, they create something to fix that, which is pretty damn cool in my opinion.
NetBlazr’s Approach to Delivering Supplemental Broadband… For Free
How mailslots can help you during times of web war
Developing Machine Learning for Markets
I might not be quite up to date, and I don't usually write extremely buggy code which compilers yell at, but have compilers really started warning on something like "vector_reference.push_back(&local_object);"? There are lots of ways to go wrong with unsafe memory access, and yes, there are tools to help you (things like valgrind help more than compiler warnings), but I think that the saying "hey, they gave you enough rope" is really unsatisfying. We've lived through 20 years of constant vulnerabilities because of these issues, and this only now starting to get sort of addressed. If virtually every team on the planet finds itself unable to use a certain tool "properly", then it's the tool which is being wrongly deployed, it's not the fault of everyone on the planet.

And I agree that the tool has a lot of usefulness in many places; obviously, you can't write system software without the ability to manipulate chunks of memory and the stack and everything else. But C++ is used as a universal programming language, and has tons of features which were not made for system programming, but for application programming. So on the one hand C++ has this extreme safety-oriented pedantry in which you have to decide if your design will have a reference to a const iterator or a const pointer or what, and on the other hand, you can cast that object to (void *) and write Stroustrup's picture to it.

Personally, I'd like to see a world in which the core system is written in a systems language like C/C++, and most libraries and all applications are managed code. Microsoft was working on something like this a few years ago, and I guess Android is sort of a step in that direction, but I think we won't get there for a long time. But it has to happen eventually, since we can't live with the vulnerabilities.
Someone should fork the damn thing.
I think you are a racists Zionist, the app did not violate App Store Review Guidelines, it did not violate any of the above
My first thought was that this would have fields for me to enter my email address and password, under the pretense of "we will test your password to see if it's secure". Wonder how many people you could get with that...
The cost of being online
Contingency could well be involved. But it's not particularly easy to decide what constitutes a separate species, even with extant organisms. The categorisation of fossils into separate species is probably not as interesting or important as trying to understand what can be deduced from the amount of variation between and within populations.
One of the symptoms of the hodge podge is things that should be in the interpreter when they're actually in the parser. For example:

isset($foo, 2)

Returns a parse error, even though isset looks like a function call and you're just passing it an extra parameter.
Technology evaluation matrix (ubuntu/redhat/suse)
It's hard to see SSD's being a clear win on the surface. It would be very interesting though to see if the cost begins to change when you consider power savings (much smaller than hoped, but they do exist), figure out how much they'd save on HVAC in the datacenters, etc.
SHA-1 is a reasonably good hashing algorithm, but for the sake of argument, I'll talk about an imaginary SHA-4 which is perfect in every respect. It will be a 4096 bit hash function which has no faster-than-bruteforce collisions or preimage attacks or second preimage attacks.

Let's also assume that this perfect SHA-4 function is freakishly fast, say, a million times faster than SHA-1.

Now, even though my imaginary SHA-4 function is perfect in every way, it would be strictly worse to use this for password hashing than SHA-1. Why? Because cryptographic attacks aren't the problem here. The problem is that the entropy of a user's password is very VERY small. So small, in fact, that attacks on passwords aren't done through cryptographic weaknesses, they are done by simply hashing everything someone might pick as a password and asking "did I get it right?". An attacker will repeat this process for a little while, and eventually they'll get the answer "YES, this user chose to make abc123 as their password!".
Sounds like Microsoft has been busy behind the scenes.
Video Interview with Tobi Walter of Shoeboxed.com
I believe that this (ideas thrown around) is the truth, Rasmus Lerdorf comes across as a very pragmatic developer who's more interested in getting things done rather than being an architectural perfectionist.

But I'm not saying that in a derogative way. Coming from C#, Java and Ruby, I feel that PHP is kinda fun and refreshing. The object model is quite simple, and I love the $$ (variable variable) syntax, and how 'reflection' is way simpler than any other language. It's language for hackers.
Roman Catholics, outside of Gene Roddenberry's religion-free vision of the future, often seem to end up in space. In the Speaker for the Dead series, they were attempting to convert a whole other species. In Altered Carbon, they were still on spaceships trying to catch up to the distant stars since they weren't allowed to use subspace transmission (needlecasting) to transfer their consciousness (because of issues with their souls). In either scenario, you could make the case that they'd have a vested interest in being the first or best at creating interstellar space travel.
About 15 years ago I worked with a 24 YO man who had married his high school sweetheart and they had 3 kids. Some guys would tease him that he missed out on so many things.

One day he said that these guys had it wrong, because when he is in his mid 40's, his house will be paid for and his kids will be in college.

Not a bad plan if you can pull it off.

I hope he did/will.
Is your privacy policy written for humans?
(not that I don't trust them, but why use URL shorteners, bit.ly?)
If the warrant allows them to do so then yes it is legal although we should hold judges accountable. Voting in responsible judges is more important than legislatures IMHO as they tend to have a more direct impact on our personal lives. That being said I just see a lot of comments mentioning the imperative to preserve evidence and chain of custody which is important but completely subordinate to staying within the bounds of the warrant. Does anyone here know if warrants can be obtained through FOIA requests? I would sure love to see the scope of the one used in this case.
> The other reason is based on UX. It feels really weird to have someone take a picture of your credit card using their cell phone. The apps that use this technology might be doing anything with that image.

To be fair, any company that gets my credit card number (restaurants, Walmart, Amazon, every random e-shop on the internet) could be doing anything with my credit card, so this concern isn't exactly new or very scary.
Why would you think so?

Do you think Toyota should only permit particular uses of their vehicles? That Dell should only permit particular uses of their computers?
You're not wrong but I'd say the degree to which it has eliminated forking costs far outweigh the occasional confusion.

If you think about it, this is basically 1) a marketing problem and 2) would be solved instantly should GitHub introduce a better 'network' visualization.
so, can someone answer this for me?

I have a personal domain on google apps. The login ID is different than the email address I use/advertise.

e.g. my username for login is first-initial+last-name@[domain].com

But the email address I use for everything on that account is first-name@[domain].com

This service states that my account was compromised on 12/12/2010 most recently at the first-name@[domain].com though you could not login to my account with that email address...

So - how valid is such a check. Also - without it showing what information it is checking against, it feels really spammy. as if they are asking you to enter your email for a "check" knowing that you will enter a valid email - then they harvest the email as valid for spam.
in the internet marketing world, we just pay people to solve them :) http://decaptcher.com
I would pop the champagne, you get the opportunity to realize your dream, isn't that amazing? Instead of growing slowly / difficult / .. you now have money to hire amazing people and accelerate your development progress.

Damn, I get even excited typing about it.
Ask HN: Why there are no non-profit Social Networks?
At each successive facebook backlash, I find myself asking why there are no non-profit social networks? A quick search revealed that there are a few attempts at this, but none exceeding 50k users. And that looks to be pretty much it.

Does anybody have a greater insight as to why there are no non-profit projects in Social Networking domain such as in others (e.g. wikimedia, craigslist etc). Not counting Diaspora
since its a technology, not a hosted Social Network + its not complete (and there are doubts being raised whether it ever will be).

As far as I can think, there are 2 major costs involved:

1) Infrastructure and bandwidth: It could be from few thousand dollars to several million depending on number of users. From response to Diaspora's kickstarter, one can infer that people are definitely willing to donate for a 'noble' social network. And donations would be in proportion of user-base, so this doesn't look like that big an issue (feel free to correct).

2) People cost: The salaries etc. Since there are many developers out there who would love to get involved in such a project, doesn't look like there will be shortage of people willing to contribute (I know I am one). When it comes at hiring full time employees, this can be run much like a startup (minus equity). I am sure there are many developers even here on HN who would work on such a project without asking for any equity.

I guess people would trust a non-profit Social Network more than they do any commercial one. I find it surprising that there have been no attempts at this. If anybody is willing to work on this, I would more than love to contribute/co-found.
Point taken, it's probably true that the probability that G(F(P)) == G(F(Q)) given F(P) != F(Q) is less than 1 in 2^128. But it's probably also true that it's greater than 0.

Clearly it's impossible to be less than zero. So no matter what you do, Defining H(X) to be G(F(X)) will have strictly more collisions than F(X).

The reason I would argue it's greater than zero is that if a function H existed such that H(X) will never collide for X less than 2^128, it would probably have some cryptographic weakness.
you forgot your <blink></blink> tags!
A Hard Drive In Tablets: Does That Make Sense?
I got the exact same date for my gApps-hosted domain. Odd.
my passwrod, HUNTER2, is surely safe. I checked with some IT friends I met on IRC. Whenever I type my password, HUNTER2 - the rest of the world cant see it. So I am not worried.
Ttdashboard.com for turntable, provide live stats and lot more.
Well, we've already seen entire professions and daily tasks disappearing thanks to technology improvements. (e.g. blacksmiths, or washing clothes by hand)

I think the sustainable future is one where we all work significantly less than today, and where more people do things where humans are much better than machines, such as arts/music and care (for the elderly, children, sick etc.)
New SF startup Yupeat answers "what's for dinner?"
I don't know, but you can always try someone else's email if you are curious.

For instance, apparently billg@microsoft.com should change his or her password, according to the site.
I love cs with all my heart. It makes client-side programming fun and enjoyable. It made me forget my dream of having someday python running in the browser. Cs is just as good. My only criticism is that sometimes, leaving out parens mames the code hard to decipher. I feel that explicit parenthesis make everything clear, but that's probably because I come from python...
Hmm, you're right indeed, since they're additive. I should have said that the second layer is less likely to collide than the first, not than both combined.
Acquire Facebook Fans, It is usually valuable?
well, if it was actually safe to do, a password tester would be smart for a lot of people.

you might think that the phone number of that cute girl in that movie combined with her initials is a safe password, but if you check out some of the password lists that have popped up the last year you'll see that alot of people thought the same way.
Ask HN: Review my Recruitment App and intro video.
Hi HN,

My Recruitment Application is called Vouched ( http://getvouched.com ).

Vouched is a web-based application that aids in recruiting by matching jobs to the best applicants using keyword specific recommendations. Unlike LinkedIn and Monster, Vouched does not rely on Search to find jobs or candidates, instead it uses the knowledge of the social network.

With Vouched, recruiters get a ranked list of job seekers which have been vouched for by people they trust to meet the specific needs of each job posting. Job seekers can see which jobs they are best qualified for compared to other applicants and possible applicants before applying.

Vouched makes it easy for its users by automatically extracting skills out of job postings and resumes (so end users do not have to change their behavior).

Vouching is a easy as clicking a button, instead of racking your brains thinking of something to say on Linked In. Vouched is even valuable to non-users by allowing vouches to anyone by their work or personal email, and their facebook, twitter or linked in account.

Thanks,
Max
---

I'm an part-time unfunded one man wolf-pack so don't expect Spielberg, but I put together a video over the weekend trying to explain how it works. I used videohive.net, $30 for template + music, if you are like me and can't afford $10k for a http://grumomedia.com video.
Recant: How Apple Could Enter the HDTV Business
MasterCard SecureCode and securesuite.net
Until there are cross-network trusts, people will stay on the social network their social circle is on. They can be horrible, slow, riddled with privacy concerns, but if your entire family and entire circle of friends is on there you're going to feel a great deal of social pressure to participate.
I may be wrong, but I believe the premise behind card.io is that you buy something in an app (a good old in app purchase), and instead of typing in all your credit card info, you simply take a picture of your credit card for payment.

Doesn't seem that card.io is trying to get merchants to use this as a Square replacement at this point.
Link => http://getvouched.com
It's a 72-room building... I'm pretty sure that qualifies for "a pittance".
Otoh, more people should take credit cards!

We should be moving away from credit cards. They are becoming an archaic technology.
I think it is more about getting the media and not the public at large behind the safety and potential of autonomous vehicles. The reason people are so afraid of flying is because plane crashes are so hyped by the media outlets. If the media is behind it, then the people will follow. Also, it is about control. If Google allows a fallback feature where the driver can take control in the event of a malfunction like cruise control currently works, people will perceive autonomous cars to be safer because they CAN be in control.
So excited that you just referenced Tool's LAMC. To thumbs up this comment, press 1. WEEEEE-SKRUM.
WebSockets is available for almost every browser in the wild
Well, maybe incredible isn't the best word. There are so few of them and it makes piecing together the evolution of modern Great Apes (particular over the last 10 million years) particularly difficult [1]. Perhaps their habitat was not conducive to fossilisation of remains. Don't really know enough about that area of research. But I'd guess that preservation bias is a factor.

[1] http://afp.google.com/article/ALeqM5g-BDjcKrIh9YFbsqsJiky6m2...
last time human species hinted a divergent tendency, the Holy Inquisition took care about it.
Top ISPs poised to adopt graduated response to piracy
Check here: http://toutapp.com/about and here: https://twitter.com/#!/Tawheed/status/83864457880678400
I find dislike of public transit strange. I have a strong dislike of cars - you have to pay for the car, you have to pay for insurance, you have to pay to fix it when it randomly breaks, you have to pay for gas, it lives outside your house on the street (so who knows what could happen to it late at night)... I could go on.

My ideal transportation arrangement is a subway pass in my wallet and nothing else.

Which, in the USA, pretty much limits you to New York, Chicago, and Boston, it seems. Not that those wouldn't be my ideal places to live anyways, but it's still frustrating.
Implemented (not by me): http://estatis.coders.fm/password-security-checker/
One day, we'll all be programmers
The laws covering editorial usage (for which a blog certainly applies) are very different than the laws surrounding putting a derivative work on a commercial product and selling it.
Right, which is the reason why "perfect in every respect" and "freakishly fast" are mutually exclusive in a hashing algorithm.

A "perfect in every respect" hash then would be one that takes a consistent, acceptably-long time. Some large fraction of a second perhaps.

Of course, this fictional hash wouldn't be the right choice for everything. But for password hashing, it's a good start.
Ask HN:I need $2500000 in 3 years.
I need to make $2500000 in 3 years, I prepared to work, learn new things and do anything that is not dehumanizing and morally degrading.

So i'm asking the HN community for their suggestion, help, comments.
Having worked on power-aware hybrid storage for the last two years, the power savings per GB is pretty much zero; there is significant W/IOPS savings but that still doesn't pay for the capital cost. Performance is really the reason to use SSDs.
I don't know why you're being down-voted, it's a valid question.

Computers have eliminated a lot of jobs over the last 30 to 40 years. For example VisiCalc, did a lot of what many tax accountants charged for. It used to be that humans, mostly women, switched (or routed if you will) phone calls.

Automation certainly does eliminate many jobs. But interestingly it also seems to make previously impossible things possible. For example, if we still used humans to switch phone calls, we'd need far more humans then are available. And I don't mean looking for work, I mean everyone could be working a switch board operator and it would not be nearly enough.

On the down side, many people speculate that our tax laws have become as complicated as they have, partly because tax prep software makes it possible to still do your taxes for relatively cheap.

Driver-less trucks will certainly suck for truck drivers, I can just see that History channel show taking a sad turn as more and more of its real life stars are slowly replaced by self-driving trucks.

But what possibilities will it create? Could cars, or for that matter trucks, become like a subscription? You just subscribe and then if at any point and any where you need a ride, you just dial a number and a few minutes later a dirverless vehicle arrives to take you anywhere.

The same could work for goods. Request as much trucking capacity as you need, minutes before you need it. The trucks just show up.

How many hours total (everyone's added up) hours sitting in traffic could be eliminated if a clear majority of the cars are intelligent and networked? Thousand? Millions? All that previously unproductive time, now productive.

All the lives saved from accidents, will they create jobs?
Your summary is more sensible than what the journalist wrote.
I'm glad you enjoyed my answers; however, I am never intending to come across as smug. It is difficult to get across subtleties in an impoverished text-only medium; it has certainly been my experience that instructive and constructive criticism can easily be read as smugness. It's also been my experience that trying to deliberately make it sound less smug often just turns it into sounding like condescention. Text-based communication of technical issues is a hard problem and I do struggle with finding the right tone. Thanks for the feedback.
So, your real question is, why isn't there a non-profit Social Network that's as big as Facebook?