skysight-inc/HackerNews huggingface dataset:
The reason you're being downvoted is because this has been explained a fair number of times on HN. The problem with using SHA-* or MD5 for hashing is that those algorithms are designed to be fast. This means that it's relatively easy for a cracker with a dump of the database to bruteforce passwords, since they can try gazillions of combinations very quickly. Hell, they can even parallelise the task on EC2 and get it all done in an hour.

By contrast, computing bcrypt takes a significant amount of time and CPU. It's slow. It's designed to be slow. It's designed so that you will need a LOT of CPU power to bruteforce it.

So, no, SHA-512 is not much better than MD5. It's still a fail.
recommendation: read the article - or - watch the movie - linked above.
This one is better! It has Desktop Notifications and Sound.
http://bit.ly/gPlusNotify
How to convert Blu-ray to Quicktime with Blu-ray to Quicktime Converter for Mac?
A reminder that people who make sweeping generalizations about subcultures they like to make fun of aren't worth listening to.

(also: http://news.ycombinator.com/item?id=2697975)
Hah, I didn't know that. I thought it stood for "Mount Gox", a play on "Fort Knox"...
Yes, of course. I'm not commenting on whether or not the story is true, but on the reactions. People say "that strikes me as a fond memory", "nice story", "how warm" when it seems to me like the OP meant it as a sort of indictment.

Youthful mischief can be at any age, but that's not mischief, that's a pretty egregious theft of data. It would have been very different if he had exploited some new script to gain access to a machine he didn't have access to, for example.
Alexandria point of sale software
What happened to the Priority Inbox? I still see the add or remove priority buttons, but there doesn't seem to be a proirity inbox?
We're actually building this sort of tool. http://bugherd.com

At the moment it is a more traditional bug tracker, but the side widget is designed to accept anonymous feedback in this sort of form as well (coming soon).
Ask HN: Clients from hell. How do you deal with it?
I was skeptic about using "Clients from hell" in the title but WTH, everyone knows about it. So, irrespective of the nature of your business viz. a B2B service, or a freelance, or a consultancy, how do you really deal with it?

Funnier the better. Just kidding.
deltasquaredfilter
Still no invite. :(
Well either I guess. Right now everything seems to be focussed on App analytics, but with the market moving to HTML5 'apps', surely there's going to be a market here. Something that offers a richer, more visual offering, device pics, meta data around the devices themselves, WiFi v 3G etc - however if the market expects everything to be free, how do you move to a premium model?
Yet with just [A-Za-z] and 10 random chars you're at 52^10 ~ 1E17 while your wider choice set gives 92^8 ~ 1E15, so ten random alpha chars is really better than ten alpha+number+punctuation. Suddenly it takes a paltry 229 thousand centuries (or 22 million years) with bcrypt at 0.3s.

Using punctuation does not make a password "more random", it only makes the random choice set slightly larger. Bumping the length is much more significant than bumping the set as it's exponential.

The debate is whether it's easier for a user to both pick and remember a "random-enough" - i.e not easily bruteforce-able, regardless of hashing technology - [A-Za-z]{10} password or a [A-Za-z0-9!@#$%^&()_-+=;':",.<>/?\|[\]{}]{8} password.

For the record, Google's 2-factor auth generated app-specific passwords are [a-z]{16}, which gives 1E22, or 230 billion years with bcrypt at 0.3s.
LV Handbags Outlet,Cheap Louis Vuitton Handbags,Discount LV Handbags
LV Handbags Outlet,Cheap Louis Vuitton Handbags,Discount LV Handbags
Sigh... Imagine if McNeally decided to base his Office-killer on Lighthouse's codebase instead of StarOffice...

It could have actually killed Office.
eggmantwo
In my profile.

It would be great if we could simply subscribe to public Circles (haven't played around with G+ enough to know if such an option exists in the first place), as opposed to having to add people one by one.
How The Affiliate Tax Will Hurt Affiliate Networks And Domainers Alike
The only website I log in with using client certificates is https://www.startssl.com/ and it seems to work quite well. The UI is pretty rubbish in Firefox though I agree. Not tried other browsers.

There's an addon for Firefox called Enigform (I've not tried it out yet) which uses PGP for web authentication:

http://enigform.mozdev.org/
dean.barrow
> Yes. I am sure. I have far, far, far less than 0.000001% of the total money in the bank. If they could not produce this much money when I wanted it, there would be other serious problems.

Last year, a branch office of a large bank in Finland was barely able to produce 10 000 euros in cash when I wanted to withdraw it.

The clerk just didn't realize he shouldn't mention it.

Don't be so sure.
Facebook: A New Take on the Developer App
From the Site -

It’s a straightforward deal. Each team will receive £5,000 per founder (to a maximum of £15,000) for which we will accept 8% of founder shares per start-up (not per founder). We do not have any strange terms and conditions and we align ourselves entirely with the other founders of the business – effectively becoming a co-founder of the business. In addition, we provide you with office space and other services from various partners including hosting, legal and professional services etc. Subject to the teams achieving pre-agreed milestones, the balance of the £100,000 will be released in the form of a convertible loan with a discount of 20% against the next funding round. Teams are not obliged to accept the loan note at the end of the programme.
ollysb
marco.muscat
yann.esposito
michael at napa-solutions dot co uk
Isn't that the general philosophy of HN? Fail fast and iterate until you hit customer fit.
isn't 8% a lot of equity for less money compared to other incubators?
And?

Do you remember how Wall Street pundits jumped when Larry Page did some frank thinking? Nothing happened. They went on and silently released Google+ this week - its interesting to see market react to all this.

Market analysts want to hype up the stocks. And any amount of introspection on the company's sides negates their efforts. Thats why they are pissed when somebody stops shoveling the crap.

But markets themselves don't really care - if a company does good - it WILL reflect on its stock price.
Yes, much much easier than Django. I don't know how teams cope with web2py but for a lone wolf, web2py beats everything out there. I don't know if its just me but Django makes me procrastinate whereas web2py helps me just start. db.define_table rocks.
Development of Ubuntu 11.10 Oneiric Ocelot is running late??
tallstreet
Relevant.

clientsfromhell.net/
yankcrime
Keep going with your table. Show 500TB.

Oops.
rmalecki

Someone care to send an invite? Cheers!
sreynoldshaertle
andre.friedrichs.com [@googlemail.com]

and invite me plz ;)
Still waiting for a couple of addons to be updated before I can upgrade:

Virtual Identity (Extends functionality for when using multiple identities)
Zindus (Syncs contacts with Google)
Would you really be able to do timing attacks on a server from the client side? I thought you needed a much greater accuracy of measurement, sub-millisecond, than you would be able to achieve with network latency in the mix.
pasiaj
I'm really interested into the longer answer!

I'm sold on bcrypt but like to hear scaling stories :)
What is the benefit of bcrypt over several million rounds of SHA-512?

Most advances in cracking cryptographic hashes is not from Moores law, but some insight or breakthrough in the underlying algorithm. i.e. someone figures out a way to make MD5 brute forcing 2^(lots) faster. Usually these are not done overnight, but are chipped away bit by bit.

We are getting there with SHA512. The edges are starting to give. Warning signs are apparent. Eventually someone will reduce it to nothingness. 1000 iterations of nothingness is nothing ness.

SHA-2 is already in most languages without an additional library.

Oh dear god this is a terrible way to make a security decision. You have to install software no matter what you do. Unless you're writing software with a magnet in raw machine code, you will have to install additional software. Take the few minutes to install the bcrypt library.
Shake was the king. But now the industries have Nuke. The king is dead long live the king!
I'm sorry too, but please keep the chain of goodwill if you got an invite :)
peterbienek
New Ignite100 accelerator launches with £1m fund
Know about Luxury b&b Lake District
New House Farm is located in the lake district and we are here to help make sure that this is your dream wedding. We have a list of suppliers and services from churches to flowers, photographers to cars to make sure your wedding runs smoothly.
nicolas.parody
rpoddar
rose.andrew but no account yet. If anyone wants to fire me an invite I'd really appreciate it.
No, MtGox said that the thief was able to make a larger withdrawal (approximately 2000 BTC) before our security measures stopped further action.
Anyway, perhaps this is not the time to focus on such things. The value of some passwords from a system in 1980 is not a big deal, really, considering that at this moment it's more appropriate to look at what the man did over his whole life.
Budget carpet steam cleaning services
Budgetcarpetsteamcleaning.com.au provides both one off cleans and regular servicing. Our company covers a massive range of areas including Melbourne, Geelong, Mornington Peninsula, Sydney, Adelaide, Brisbane, and Sunshine Coast & Gold coast. The company has been continually expanding throughout Australia. Our pricing is competitive, our service is excellent, and all work is guaranteed. We all did, and it worked for us.
For more information please visit: - http://www.budgetcarpetsteamcleaning.com.au/
jasonkester [edit:thanks for the invite!]
What? Shake was THE node based compositing app!

There is a massive difference to Motion and the highend compositing apps like Shake, Nuke, Fusion, Softimage(Illusion+Matador=FXTree), Houdini(COPS), Flame, Toxik(Autodesk Composite). After Effects and Combustion are time-line based like Motion, but Motion doesn't begin to compare to them. Even Blender has fantastic compositing tools.

Shake was serious business. It's last well known big project was 'The Dark Knight' which Framestore CFC mangled a 64bit wrapper around it to better manage the 8k-frame workload. Shake was ported to Intel, then killed off, with no intention to take it to 64bit. I don't think you can buy the source code anymore.
Iteration is valid, but what is this about "triple salting"?

Googling "triple salted" sha -gox gives me 13 results, of which 3 are about caramel cupcakes and none are serious evaluations of such an approach. It sounds like homebrew security.
Turn Google plus into Facebook
s|=/=|!=|

much better.
Flash Web Application Development India, Flash Web Developer / Programmer India
online-product-designer with experienced, talented flash developers and our team of flash developers is much capable of working on many flash web application tool development project
wakoinc
thearcher4
RIM Board Shake-Up: How The Mighty Fall
After having added a few people and being added to some people's circles, an obvious benefit emerges: These circles can be used as niche LinkedIn replacements. In a way. IMO anyway...
anyone know the relationship between this and springboard? Seems to contain a lot of the same people, even some of the pages looks similar to the sb site?
It wasn't long ago when everyone was saying that the age of the tech IPO was dead and that would kill VCs. Well here it is and much to my amazement tech companies are going public again -- to me that means there's life in being a VC yet...
christopherdebeer
tomaszkow
HTML5 GeoLocation
prakhar1989
Doesn't sound like this is it, but both:
http://sortfolio.com/ and http://sachagreif.com/thelist/ might be interesting to you.
lievenswouter

Thanks in advance if you have a spare invite lying around!

Edit: thanks!
Yes, executive director is the same. It is really high-end programme as well as springboard.
I'm a designer and I hate the look the Reddit -- but frankly I think that's the point of the design! By looking ugly the site communicates "this is a geek zone, and some of us don't wear deodorant!" That branding really appeals to the audience they have captured from slick looking sites like Digg. Keep in mind Reddit is owned by Conde Nast and they have great taste and tons of talent to match -- so if the site is ugly there's a reason for it.
yeah adding people 1 by one is painful, seems silly that thats the only way... surely not?
>Find a non-games programming job, and do game development on your free time.

Does the startup model as touted here all day not apply so well to game development? I was under the impression that the indie smash hits like braid were generally made by small startups?

A lot of it probably depends on how much art you need I guess. If you can get away with putting abstract, algorithmically generated textures on everything, that's gonna shed a lot of man hours.
The responses that use valid arguments (i.e. not "it will harm your professional reputation to use tables! or tables are for tabular data! or I can bill more hours if I use CSS!") pretty much agree that the arguments against tables don't hold much water.

The only argument that might be important against tables that I could see is that they work less well with screenreaders. Can anyone using a screen reader confirm or deny this? I could easily see it being the other way around, because with tables a screen reader will let you quickly navigate to different parts of the page (e.g. sidebar to header to main content by going left, right, up and down instead of painstakingly navigating over a bunch of text).

On the other hand, tables are easier to use, more flexible, more predictable across browsers, and more readable. Just look at the years and years of research it took the CSS experts at e.g. Alistapart to replicate layouts that are trivial with tables using CSS.

Examples:

http://www.alistapart.com/articles/fauxcolumns/

http://www.alistapart.com/articles/fauxabsolutepositioning/

http://www.alistapart.com/articles/multicolumnlayouts/

http://www.alistapart.com/articles/negativemargins/

And even then it doesn't always work: http://www.satzansatz.de/cssd/hgjump.html

Note that these layouts are utterly trivial to create with tables.
Theory suggests wrinkling of wet digits evolved for a reason
It seems to me that what the UK is crying out for is not a "UK YC" but actually YC. I see lots of activity here in London and I'm guessing that if there were an outpost of YC there'd be a ton of people applying.

Also, whenever I see these programs with a ton of mentors (http://ignite100.com/view/mentors/) I think "quantity over quality". Look at YC: a tiny team of people. You don't need 50 mentors, you need three good ones. Also, Ignite 100 looks like it is a rebranding/relaunching of a previous program called The Difference Engine. I'd like to see some successes from that before judging this program.

And there are quality VCs in London (e.g. Accel has a major office here).
Your description of "poor" sounds more like "Working Class" or "Lower Middle Class" in the USA. Often these lifestyles are supplied due to easy credit.

Sheltered poverty in the USA means studio apartment, no a/c, no car, no laundry facilities on site, dangerous neighborhood, little to no public transport.

You also have dirt poor poverty which people commonly refer to as "trailer trash", where you have communities of poor people living in trailers wasting away their lives with poor choices & poverty.

Then you have the destitute poor which are those that live on city streets, eat a charity kitchens & often have drug or mental health problems.

I will say that the poor in the USA do have it better than the poor in India, but that's mainly due access to government assistance. Often the US poor don't have money to save because they bought an A/C, fixed their car, had to see a doctor or payback a loan they took out the week before to make ends meet. That or they live with subsidized housing & utilities and are given a tiny amount of welfare/food stamps which is lucky to last to the end of the month.
eugene.pobochny@... (need an invite)
Same guy running it (jdbradford). It'll be the 4th accelerator cycle he's run (3rd in the north-east).
Passports and social security cards are physical items. Because of this, they have the inherent property of not being capable of ubiquity.

If someone steals your passport, you'll know: you won't be able to find it.

Digital keys have no such properties. If someone steals your private key, you will have no idea until you see them steal all your money and accounts.

Physical items also need to be carried to a destination to be used. If someone steals your passport, they may be able to take over your bank accounts, etc. For that, they have to actually go in person to meet a bank manager and pretend to be you. People do that fairly successfully, but it's hardly an efficient process.

A digital passport/key, on the other hand, could be abused immediately after it's been stolen, and could be used across all your accounts within the hour, before you've even realised you've been robbed.

Finally, you can only use one passport at a time. Not only it takes time, but you need a career criminal dedicated to each "process".

A digital key robbery, however, requires no human element, and thus can be done in parallel at a large scale. One could use Trojans to capture the keys of a large number of people and steal their money in an automated manner without ever showing up at a bank.

All those problems can perhaps be solved, but they are not easy and they have nothing to do with keeping the key safe - more to do with keeping the process of using the key as inefficient as possible. The best way to ensure your digital key cannot be abused is to make sure that you can only use it in person in front of other human beings, on authorised hardware.

So, pretty much like the way our bank cards work, then.
Key logger
1111
What about Citibank, where you could read other people's accounts just by adding the account number to the request parameters (I think it was the account number)?
Google+ Connect Button
YC doesn't do outposts. They might decide to have an 'ambassador' like Alex was on the East Coast. Dunno how that worked out though.

Edit for your second comment: Meeting the 3 mentors you need is only going to happen if you've had a chance to meet many more. Obviously it wont be the same 3 for everyone. I doubt the YC teams restrict themselves to only getting advice from the YC partners.
Paying Tribute: Cosmos Tragical Memorial Sights | Go Heritage India Journeys
Best-case scenario: you have the drive, passion and brains to learn what's needed and become your OWN technical co-founder.
seems like the signup form is broken.
If people like a "business" page, they are actually opening a channel of communication directly to a customer that likes the company. If I were a business owner, I would like (no pun intended) to have such a channel with as many potential customers as I could get.
I guess the premium model may be more about providing insight into what the stats mean. I imagine Google Analytics and its competitors will expand to cover HTML5 "Apps" and the mobile specific data which goes with them and the premium content will be around providing concise, more specialised insights. So rehashing data in a way which will be meaningful to someone busy and none technical in a particular industry/ field.
bogdan.aurel.vancea
Subject to the teams achieving pre-agreed milestones

Wonder what they are. Doesn't sounds so simple to me.
NetBeans X3D Resources - DevLOG3001
That's really interesting. Never thought about why my fingers do that!

I think this hypotheses is a little silly though.
Ask HN: what are your favorite JavaScript APIs?
I'll start a new project for a client soon, and my task will probably be to design a JavaScript API. So I gathered it might be a good idea to look at some existing ones for inspiration. There are so many possibilities in setting up a JavaScript framework (from very "perly' to very 'javay') so I wonder what most people prefer.
if you know anybody, who already has google+, point him to this: http://eu.techcrunch.com/2011/06/30/how-to-hack-google-to-se...
the last described method works just fine.

or in short: add people you want to invite to a circle, klick the share "button" on the upper right hand, share to cirlce, make sure to check "Also email XX people not yet using Google+"
I wish they taught this back in school, math would have been so much more interesting. Anyway, I lack the knowledge to ask any more meaningful questions so I'm gonna go do some digging. Thanks for taking the time to respond.
Louis Vuitton Charms - Stylish Louis Vuitton Charms
Yeah, this is exactly what I've been doing - seems to have worked for quite a few people so far.
I can't see how it could mean anything at all. Your password is either salted or it isn't, a hash can't really be said to have multiple salts. Maybe they're using different salts in their various rounds of hashing, can't see how that would provide any more security.
Online Leather Products
Online leather products have got a strong footing in the universal fashion circuit of leather goods. Our company has a steadfast commitment to consistent quality, reasonably priced products with great punctual services.
i guess pre-agreed means that both sides decides what milestones can be achieved during the programme
> Observable universe is extremely small part of whole space.

Inflation theories actually make this very statement and
have good reasons behind it.
trungkien2288@gmail.com
Download Monte Carlo Movie
Download Monte Carlo movie or Watch Monte Carlo online in just few second with HD/DVD/ipod/divX quality. Watch all new release movies trailer and download movies with moviesbunch.com.
House Cleaning Toronto
Looking for a Best House Cleaning or Maid in Toronto. Come at My Clean House - Leading House Cleaning and Maid Service Provider in Toronto.
btarricone
Fexl - a Function Expression Language
Makes me wonder why there are so many iterations. Also, have there been any interesting success stories to come out of his accelerators?
As someone who you're describing I absolutely love the post. I've gotten into WordPress, basic PHP, a lot of frontend stuff and a few projects later I feel confident to actually look a technical cofounder in the eye and say let's do something together.
ClickDesk on Killerstartups
Agree on the quality/quantity point - I haven't even heard of most of the companies these mentors work for and I'm always a bit dubious when someone describes themselves as a 'serial entrepreneur'.

However, the fact that there are quality VCs in London doesn't help much if you're 'up North' (yes, there is life beyond Watford). It's good to see something like this outside of the South East region.
Google+ First Impressions
Reminds me of http://suckless.org/.
"Eleven agreed to speak on the record, under the condition of anonymity"

Minor nitpick as a former journalist - being on the record means not being anonymous, and being anonymous means being 'off the record' (the 'record' refers to your name, not your comments).

If you're really interested, there are kind of four loosely defined categories of sources: On the record (quote and name me), Off the record (quote me, but don't name me), Background (Don't quote me, but use this information to verify other research) and Deep Background (this will point you in the right direction, but you'll need to verify with multiple other sources). As I said - loosely defined, but on/off the record is pretty clear.