skysight-inc/HackerNews huggingface dataset:
I thought that at first too, but they have press going back to 2009 under the name scvngr: http://techcrunch.com/2009/08/13/scvngr-lets-you-build-aweso...
Random passwords are probably not going to be cracked by a run-through of John with a ruleset, which is likely similar to -- or exactly -- what was used to create this list.

These are salted FreeBSD MD5s (iterated hash); even with a powerful GPU, you're probably only going to be able to check a few hundred thousand per second at best.
For what it's worth, my password was 8 random alphanumerics, and it's not in the list, while /.,mnbvcxz (12 alphanumerics with symbols) is there. The cracker must have some sort of algorithm that looks for consecutive patterns on the keyboard.

It goes to show that the old rules - non-dictionary word, mixed case, etc - really don't cut it anymore. Psychologically, picking a password that has high entropy is quite difficult, and the crackers are only going to develop better algorithms in the future. I think using a good random generator is the only way to ensure you have a decent password these days.
Hmmm, got a point there. Can't think of another related location based service though.
People accepted credit cards decades ago. If bitcoin could work as a currency (which it can't, for other reasons), it would presumably be used via equally convenient exchange devices.
Could the change in numbers be attributable to going from a generic English word to something more unique and discoverable (if you'll pardon my pun)
Here are the plain text passwords combined with their respective mail addresses: http://pastebin.com/RhheV8Gj
The MeeGo UI is coming back to Symbian S40
Got Twitter? You’ve Been Scored
> You don't have that - the owner first looked up the exchange rate to US dollars

What? Any London store that accepts euros will check the rates daily to make sure they can convert back into the GBP price. Currency rates fluctuate all the time, every second of every day.

http://uk.finance.yahoo.com/q/bc?s=GBPEUR=X&t=1y&c=
Mt. Gox plain text passwords combined with mail addresses
Then they aren't accepting euros as currency. At the end of the day they will immediately convert the euros to GBP.

They are willing to use euros as a medium of exchange, but only because they know they can exchange them for (to them) real currency. (Currency is relative, obviously. And just as obviously it helps that somewhere in the world there are people who use that type of money, which gives you comfort that even if you don't exchange it now, you can later.)

If this was the fate of bitcoins then it would be a failure. People may use it to send value over the internet, but no one will keep their savings in bitcoins.

To be money you have to be willing to save it. If all you do is use it as an intermediate it's not money - yet. It may eventually become money (historically intermediates often do that - especially if the conversion is difficult), but it's not money yet.

The reason it's so important for people to store the currency in savings is very simple: If no one want to keep your money long term, practically speaking there will be very little of it in circulation, which makes it hard to use.
Don't know why this is getting upvoted as it contains a bunch of factual errors.

It's definitely being used as a currency already, as the article proves.

It's a highly fluctuating currency, but that doesn't remove it's properties as a currency.
QA Flagging Tools - Downgrading by Gitbrew [Devs only] - XPG
I dont think this is joke. Not all system are like Facebook and Twitter, banking systems and many other complex and distributed systems will need to have this compulsary daily downtime until we improve our communication technologies by 10x everywhere.
Plenty of people save in BitCoin, some would even argue that's where much of it's value comes today. Look at the article from Richard Falkvinge that he linked to for an extreme example.

Nowhere did he suggest that the restaurant owner exchanged his BitCoins for USD. Maybe he saves them and uses them to buy something else. Who knows, maybe he buys the ingredients for his Meze using Bitcoins?
I just tried out Rome in Firefox. Seemed to work fine. It's nicely done.
So, let's say FF27 was incompatible. Should an enterprise then run FF4 where security patches are no longer provided? The correct conclusion would that enterprises shouldn't run FF in the first place.
> Who knows, maybe he buys the ingredients for his Meze using Bitcoins?

If he does that, then why does he look up the exchange rate first?
Then the dump must be old. I have changed my password months ago and the hash does not match my current password.
You are building a straw man. There are plenty of reasons why paperclips are unsuitable as money. They are easy to forge and there is no guarantee of how many will ever be in existence to name a few.

Trading oil or gold directly is obviously impractical. But Bitcoins are not. You can store an unlimited amount of Bitcoins on your smartphone or USB stick and you can securely and anonymously transfer them to someone else within a few seconds.
MiaBella Actions and Textures Collection
MiaBella Actins and Textures Collection | 147 Mb

Includes:
- Leah’s Color Workflow Action set (2.47 mb)
- MiaBella actions and Haze action set (1.4 mb)
- MiaBella Texture action set (75mb – includes textures/actions)
- MiaBella Black and White Plus Vintage action set (8.92 mb)
- MiaBella Rich Vin
Cheap driving school
Drive safe and master driving techniques discussed in our classroom and behind the wheel.
Bathroom Waterproof TV - UK
Raise the Debt Ceiling? How About Raising My Credit Limit
The Reason behind Income Insurance 
Who doesn’t strive to be healthy especially if you are a working individual who works not only for yourself but for your loved ones, too? But you can never guarantee to stay healthy day in and day out because you’ll never know when something will go wrong. If you learned that you can insure your gross income by up to 75%, wouldn’t you want to get one? You can pick the benefit pay period whether up to two years only or it can be as long as until you reach age 65.
Photographs, windows into our personal history
I wonder what the markets would look like if insider trading ceased being thought of as a crime. You just expected to make your decisions knowing that others out there may have better/different information.

Would this completely destabilize markets or would it find some new stability as people got used to it.
> Economic issues (deflation)

This is actually a pretty serious problem.

The value of bitcoins always settles such that the cost of the electricity to make them is approximately their value.

But because the difficulty is adjusted such that a fixed number of bitcoins are generated per time (meaning faster or more efficient computers don't help), and that the number generated per unit time is constantly shrinking, it will cost more and more electricity over time to make bitcoins.

Deflation is built into it. And I bet the creator of bitcoins never realized that the scarce resource bitcoins track is electricity.

If you want to make a ton of money, buy bitcoins just before they switch from 50 per block to 25. I'm betting the value will double.
What kind of impact would having used something like sha-512 with a 128 bit salt have had over md5? How many more cycles do those take to generate? I assume the attacker had to brute force the salt from a known password as well, if that's sufficiently random that should provide some security as well shouldn't it?
Great and thorough article. Here's a TLDR:

* Javascript has some warts, and here are some examples.

* It's going to take way too long to get these fixed to the point that we can actually start using new versions of Javascript because of slow browser adoption.

* To get around this problem, people are treating Javascript as a compilation target for other languages, the most prominent example being CoffeeScript.

* Discussion follows of features that would make Javascript better serve its increasing role as a compilation target.

* There is discussion of Harmony throughout.

Sometimes offering a TLDR indicates that the article isn't worth reading "so here are the author's points so you can skip it". That's not the case here. For example, I learned about "Tennet's Correspondence Principle", which helps to give a name to the different ways procs/blocks and methods/lambdas behave in Ruby, as explained in this article[1].

[1] http://www.robertsosinski.com/2008/12/21/understanding-ruby-...
Mozilla planning to retire Firefox 3.6
In the UK they can seize your computers from your home for creating a public nuisance or wasting police time (they actually did this to a journo a few years back). Oh, and they don't give them back. I mean yeah I think they're supposed to but they don't exactly get around to it quickly.
Next up 20 WebGL sites that blow your graphics card?
IIRC scrypt uses SHA256 and AES, not this blowfish implementation. So it's fine.
A lot of them are just 6 characters. Even a random 6 character password can be brute forced in a few minutes. Many of the short ones were just single dictionary words, so wouldn't even get past the initial check for stupid passwords--they would fall in seconds.

Most of the longer ones seem to be simply combinations of a couple dictionary words, or a word and a number, or similar fairly low entropy combinations that would come early in a brute forcer's search.

Most of the ones that aren't like that are based on simple patterns on the keyboard, which would also be in a brute forcer's list of things to check early.
I don't believe Crypt_blowfish == OpenBSD's implementation, they cannot interoperate as crypt_blowfish has this inconsistency with 8bit chars. You'd have to look up with distros use it, there are a number listed in his email but that might not list all affected platforms. I'd be looking into it if I was using PHP and blowfish.
I find it amusing that they call Lulzsec out for being childish, then think it's relevant to post the personal information of some dude's sister (and cry "LESBOZ!!!" because she's married to another girl).

Reddit has rules against posting personal information. Does this website not? I really have little interest in websites that think it's ok to spread people's personal data. Weren't we mad at Sony and Lulzsec for allowing that sort of thing to happen?
Nor mine. Of course mine was only 8 characters, character set of size 72, so only a "mere" 722,204,136,308,736 possible permutations. In any case the couple places that one was reused have been updated already, I'm still waiting for it to show up eventually.
The browser is the new Amiga.
We know why they did it. They're greedy jerks. They weren't thinking of the 'company', they were thinking of themselves and thought they could fool hard-working people into a con.

And that much of the plan worked.

What they didn't expect was that those hard-working people would fight back, tell the entire internet, and (I expect) engage in a legal battle that could possibly damage the company irreparably.

And on top of that, any employee that understands the contract would be a bad one. You don't keep hard-working people by locking them in like that. But you CAN keep lazy jerks that way. They'll simply sit and do a half-arsed job and wait for a downsizing to get rid of them and collect their shares then. Because that's the ONLY way to collect your shares! You can't quit or be fired for cause and still collect them. They have to fire you without cause.
Agreed, with an addition:

Contracts exist for when things go wrong.

When you sign a contract, things are going right. You and the other party are friends, everyone loves each other, etc. The day you sign the contract, you don't need it. The temptation to not worry about it is huge.

But the day you need the contract, you'll wish you had worried about it.
Bed wetting alram
A lot of individuals have suspicions about their involuntary urination, which is why most of them will do anything for the sake of correctly Diagnosing Urinary Incontinence. Patients with incontinence should be entrusted to a specialist in this field. Urologists specialize in the urinary tract, and some urologists further specialize in the urinary tract of women. A urogynecologist is a gynecologist who acquired special training for urological problems among women.
I'm guessing it's that or the old name left a bad taste in peoples' mouths and the new one is a meme-centric buzzword-y type thing.
Proof that we overpay for drugs in the US (links to more proof)
nor mine, and it wasnt particularly secure either
My theory would be that choosing a non-existing word for the name instantly created a brand, whereas before it had just been an anonymous app with a name that referred to what it did.
Mobile applications in the enterprise
Hot damn some people have horrible passwords:

123456 -> 199 results.
password -> 118 results.

Who would use such weak passwords for an account with potential monetary value?
"bronze" in spanish is spelled "bronce". Phrases to be set in bronze refer to phrases scuplted in statues or other commemorative decor.
You should try living a country with high inflation. People lookup exchange rates every single day.
The importance of relevance-part-1
I feel that's pretty self evident in context. Your landlord doesn't have the right to let the cops in to search your place.
I guess you can argue that no more harm can be done to the poor users of Mt. Gox but I disagree.

Why would you post this? If someone really wanted to pair them up, they could have but that at least would have taken -some- determination.

Obviously you knew you were pushing it since you even went out of your way to create a new handle. For the "lulz"? Troll.
Yeah FYI sabu and topiary hate me, and im pretty sure Aaron Barr is behind this nonsense, oh and the logs of me are made up, i think ill sue Mr. Barr.
Its worth noting that the major example in the wsj piece above, that of clinical trials, does not say what they think it does.

Essentially, the doctors involved do not change the results magically by taking the funding. The real explanation is far simpler -only the positive trials are released (barring FOI requests). While I accept the articles major point, the examples they choose are not good exemplars for this point.
Yeah it was probably Aaron Barr, he did threaten me and if you look at http://wikileaks.org/IMG/pdf/WikiLeaks_Response_v6.pdf that this si the exact same tactics they use, i wrote articles for crowdleaks.org about some of his illegal activities and he got very angry.
Do you mean PasteBin or HN? If you mean HN, this isn't spreading anything, it's linking to it. And if the community had a problem with linking to the contents, it would have been flagged to death already.

I agree the childish aspect of it all is amusing, but it's not unexpected.
I don't really buy that argument (you could take any property they shared, no matter how irrelevant, and make the same argument, i.e. they both had two feet): Cory Doctorow makes money because he has spent a large amount of time to create an audience, because he writes interesting books and because he is constantly on the lookout for new ways to monitize them.

And yeah, most people who pull that of would properly experience success.
How to survive the age of distraction
I used to but when I get these problems I really started to feel shitty, then weed only made me paranoid since then.
All your Google data on a single page
the salt seems to be the same for all of the password. Not exactly useful this way, is it?
And those people do not willingly use that currency - they are forced to by their government.

Whatever currency it is that they are comparing to is the currency they really want to use, and probably do on the black market. I'm also confident that that is the currency they keep (or try to keep) their savings in.
The cost of electricity per Bitcoin in turn depends on the computing power invested in the network. The strength of the next block is adjusted so that it takes approximately 10 minutes for the network to solve it.
Also there are optional transaction fees.
Because the developers of pfSense are FreeBSD users? I fail to see your point with that. And I beg to differ regarding the "no lead developer". Indulge yourself by looking at the OpenBSD changelog from release to release, year by year, and notice how every single change, minor and major, stems from there, and radiates out to, f.e., the PF port in FreeBSD.
IPhone And PS3 Hacker Geohot now Working at Facebook [Report]
The key here might not be implementation but adoption.
Well, as bad as this is, it is probably the best that it happens a few more times very visibly. Until people are aware of the dangers and do something to fix it.
Correcting self: that's the documentation for the wrong .load()! (yes, there's two). The proper docs are http://api.jquery.com/load-event. Which indeed allows the event to be passed to the callback explicitly, so inside the callback @ refers to the object and 'event' (or whatever) .target refers to the image. Problem solved!
> Every currency is valuable only because other people consider it to have value.

Two counterarguments:

- the idea of `legal tender' [1]. Usually the physical manifestation (coins and banknotes) of official currency in a given country/region/whatever is also codified by law as legal tender. Which means, when used for settling a debt, the creditor is obliged to accept it. Contrast that with gold, for example: it's considered valuable, but creditors are not required to accept it. Value of legal tender stems from both recognition and the legal framework of it being legal tender.

- taxes. Country's/region's law dictates the currency persons and organizations have to use for settling taxes and other dealings with administration. A currency that people don't trust or use for any other reasons could still have well-understood value in relation to settling taxes.

That having been said, I firmly believe Bitcoin has great potential. Even if this particular implementation fails at some point, other ones will follow.

----

[1] http://en.wikipedia.org/wiki/Legal_tender
Now I feel I have to say it: I've started a YouTube Channel inspired by the Khan Academy (in spanish). It's not like Hacker CS, though. I'm targetting only guys who want to program and don't know how to start, not future CS students. In my opinion, that is closer in spirit to the Khan Academy.

I have only C++ right now but there are already 136 videos (and 227 subscribers). And I've gotten some very nice comments, and that makes me very happy.

Here it is: http://www.youtube.com/user/paueky

There is a companion site, which shows the dependency graph between videos: http://minidosis.org/C++
My medical condition has significant impact on the pancreas and intolerance for alcohol runs in the family. I find that alcohol per se is not the big issue all by itself, though I'm not crazy about the stuff. A lot of alcoholic beverages have all kinds of poorly tolerated additives. Beer is full of yeast, which I don't do well with. Red wine is high in sulfur, which I don't do well with. The only alcohol I find that I tolerate okay is Kahlua. (Not that I have tried all options out there, but I did make an effort to try several different options and came up with nothing else I tolerated well.)

I did a lot of reading and tried a lot of different stuff to deal with my medical condition. Inflammation is a major component of my condition. I found that changing my diet with an eye towards correcting PH balance and removing foods that are inflammatory for other reasons did me enormous good and helped me get off multiple anti-inflammatory drugs. Not saying that going back to drinking would be a great idea, just saying that occasional alcohol isn't necessarily a big problem if you can address the problem effectively through other avenues.

That's the best I can do. I react allergically to marijuana and never tried any other recreational stuff.

Best of luck.
I appriciate the mentality. Of course I cycle a lot and it has great benefits, but I think it can only rise your overall happiness and that is different then just having a drink get relaxed and feel good at a party.
I don't have social anxiety anymore since I am healthy, but still a drink can have great effects on me when I go out.
I would love for SELinux to be easier, but as far as I can tell it's the only game in town. I would never put anything internet facing that wasn't SELinux. Normal unix rights are simply not sufficient. Once you break into a program you can do everything the user that program is running under can do. Sure, you can create a new user for every bloody program/service you have but that means escalating privileges, etc.

With SELinux I no longer have to worry about any switching-user nonsense. I can just give that service those specific rights. In that sense it is a lot simpler than the overly simplistic approach we've been using.
How is it different from ordinary coins? (Obviously, in a hypothetical gold-coin economy credit cards would be in gold, too).

Btw, practicality was not the reason the world abandoned the gold standard, political and economical needs obviated it.

P.s. obviously, paperclips are not a good figurative example. The central banks might just give you a list of banknote numbers to exchange (and an API to verify their uniqueness)
I think it's new in Xcode 4.
I don't see how this is a problem. There will only be 21 coins in existence and their cost per generation (hence their intrinsic value) will rise up until that last coin is generated. At that point coins will just be subdivided many more times -- nobody will wield around an entire coin on a day to day basis the same way most people don't carry around a roll of $100 bills. Remember coins can be divided down to the 8th decimal place.
You admit that you don't understand SELinux so could it be that you hate it because you don't understand it?

The fact is there are a lot of things that SELinux makes easier. In SELinux you have your services run in contexts and you can say what they can do (e.g. can listen on port 80 but not make outgoing connections, etc.). You no longer have this ridiculous need to run as one user (root) and switch to another.

Unix security is so simple that, for my tastes, it's actually more complex to set up securely than SELinux. If you use a distro that supports it SELinux is drop dead simple anyway.
yes, im very vocal, and i have nothing to do with these groups, i have just written articles about them and other people, and its she thank you very much.
Oh and in case you missed it http://www.thehackernews.com/2011/06/lulzsec-jester-expose-e... they removed my info from it because they know its not true
Yeah that was the first thing that come up, but I am not so sure about the side effects.
But probably I will give it a try sometimes.
So how do they identify people who have no facebook account or facebook friends? That seemed to be the main focus of identifying people.
The Kiddies Versus the Adults
The purpose of salting is to prevent the use of "rainbow tables" (precomputed hashes). With salted passwords, the attacker has to compute the password hash for every password he tries (takes time), he cannot use pre-computed hash tables and just compare the password hash to the precomputed hashes (a simple string compare).

Using one salt defeats rainbow tables. Using multiple salts does not defeat it any better.

Using multiple salts would seem to help defeat brute forcing or dictionary attacks, but that is only true if the salts are secret... the problem is that they are not secret because the at this point the attacker access to everything, including the salts.

http://en.wikipedia.org/wiki/Salt_%28cryptography%29
You're right that sha256 will one day be in jeopardy, but there's no reason why the system can't update itself well before then. If sha256 is broken, all it takes is for people to update their clients and only start accepting sha3, etc.
How to decrease CPU load on popular secure sites by 50 times?