skysight-inc/HackerNews huggingface dataset:
Robin,

Yes, if an attacker obtained the password database, they could use the password hashes to log in with any particular user's account. They wouldn't need to know that user's plaintext password.

Like you, I'd also thought about storing a second-level hash (a hash of the bcrypt hash). However, I didn't mention it because I don't currently understand the complexity of hash functions well enough. There are at least two issues that come to mind regarding the complexity of the second-level hash function:

1) If we used MD5 or SHA-1, would this cause the same problem Coda Hale warned against? A bcrypt hash would likely be longer and more complex than a typical user-defined 6 character password. Could a cracker feasibly produce the MD5 hashes for all the strings as long as a bcrypt hash? (I don't know how much slower MD5 gets with each additional input character, or how much slower it gets to produce MD5 hashes for all the strings of a given length.)

2) If we used bcrypt itself as a 2nd-level hash, wouldn't that cause the same problem I was trying to avoid (running bcrypt at log-in time)? Maybe this 2nd-level bcrypt hash could be configured to be less computationally expensive that the 1st-level hash (the one used on a user's plaintext password). Thus it'd be moderately inexpensive to verify a user's password, but more expensive to crack it (since the input string the password cracker is trying to find is a bcrypt hash, not a traditional, weak user-selected password). Like you said, I need a security expert (or several) to look into this.

Thank you for your feedback.
Software businesses are hard
I wonder what huddle.com has to say about Google's Huddle..
Group video chat alone will suck me in.
Building Structured API Clients with API Smith
#initclip is an internal syntax used normally when using AS2 classes (it was auto-generated, although you could use it manually too), as it forced code to run before the normal execution cycle.
I distrust Facebook so much that I dont have a news feed, I dont have a way to share my pictures (because who wants to share 1024x768 resolution pictures with their friends? ffs why do I then have a 15mp camera?) and I have skype to chat with friends.

Google+ is refreshing, it shows social networking can be better.
For those of you with an Android device, there's an app called "Google+" on the Market right now. I can't say if there's an app for iOS, WP7, etc.

You can install the app without an invite, but cannot use it.

EDIT: The "Learn More" button in the app cycles you back to the "You need an invitation" message box. So the app itself is completely pointless if you haven't received an invitation.
Nice to see this, it feels like they got it
It's still a problem for modularity, something like Flask's blueprints are basically impossible for Bottle.
Even Warner Bros didn't escape this. They had to pay Mike Tyson's tattooist for putting Tyson's tattoo on the dentist in the movie.

http://www.wired.com/threatlevel/2011/06/tattoo-flap-settled...
Lets Teach the World to Program
Feedback?
El glutation y el Alzheimer | Blog Oficial de Salud y Calidad
it feels so closed off. Silo'd. Makes me shudder.
Exactly, the idea of exaptation in biology might be relevant, too; a resource first developed in one context is often useful in different contexts. While evolving or exaptation might not be a new concept, it is an important one that bears thought when executing a startup.
That was my fault. The article gave an impression that Google was advertising it like that.
It is but that is not the problem I describe. Basically the problem as I see it is there is no good way for me, the home user, to play around with FreeBSD. The PCBSD installer crashes, and I haven't quite figured out how to configure everything with a vanilla FreeBSD install. I didn't spend long trying because I know Ubuntu just works, and while I would like to try FreeBSD out I don't care enough to figure out all of the hoops I have to jump through to get it to work.

So now when I go to look for a server I am going look for a Linux server because I have had better\more experience with it. Basically that which is easiest to use by people without experience will come to dominate. Not through network effects or anything hard to reverse like that but by simple fact that people will start using the tool that makes their job easy. After they have experience with that tool they are less likely to change to a harder to use tool even if it is better(the Mysql effect as it were.)
The SWF format is open (in the sense that it's a published spec) and many SWf decompilers already exist. This doesn't change anything in that regard.
actually I take that back, after closer examination of the hangouts feature .. that is going to kill in the middle-school/high school crowd.
Is this international or just for American flights?
fixed.. the old cut and paste got us :-)
Curiously, I've heard that FaceBook also started by forcing an account on everyone - Zuckerburg scraped the online student database so that everyone at Harvard automatically had a FaceBook account. (Or rather, he scraped it for FaceMash and then used the data again to start FaceBook.)

You can get away with a lot more when you're a college student project than when you're a multi-billion-$ corporation.
David Winer's sentiments hit home for me. Google is too big to organically build a social network.

http://scripting.com/stories/2011/06/28/googleYawn.html

However, this poll would suggest people think otherwise:
http://www.wepolls.com/p/884244/Will-Googles-new-social-vent...
Ask Apple what negotiations with Facebook are like when your goal is to copy their entire dataset and build a competitor. Nobody would be stupid enough to allow this with their own business.
I think we are talking features here, when the only important thing is the product. I doubt people are going to micro manage their circles. It's too much work. "Should I put you into 'best friends' or 'love you guys'. Circles are going to become a very little managed feature.
Personally I would create four categories: "Friends" "People I know" "People that are interesting" "Family".
As a counterpoint, the next version of Firefox has support for automatic hyphenation, at least if the author asks for it. It could ship in August of this year (as currently planned), or it could ship a year and a half from now (the old schedule). Which do you prefer? Which do enterprises prefer?
If they pull a Wave and only invite users in small groups it is doomed on arrival. This thing needs to be free and massively available like Gmail. Social is not like email - you need wide participation in order for it to succeed.
Douglas Adams was also involved with writing the Infocom title Bureaucracy, which was similarly odd in game play, though not as fiendishly difficult.
Infographic Reveals The Best Times To Post On Social Networking Sites
Hangouts is going to drive adoption. It's chat roulette without the roulette.
as a camera buff, why dont you just use flickr?

also, if you distrust facebook, what makes you trust google? they've had plenty of privacy issues in the past in regards to social networking (buzz, etc).

Google+ launched an hour ago in private beta, isn't it a bit early to call it refreshing and better? :)
Why not color the backround of the text and not have it as a side bar?
Technoriztic -- Ultimate source of Tech news & reviews
I tried to post a comment to this effect on stack exchange, but it wouldn't let me post images.

XCode does this in a single column using varying shades of grey:

http://i.stack.imgur.com/frCcI.png

The grey rectangles may also be clicked on to fold text. On hover you see:

http://i.stack.imgur.com/EzjXW.png

And after folding you see:

http://i.stack.imgur.com/wsNRR.png
And how many of those are things where ES5 changed behavior from ES3 and Firefox still implements the ES3 behavior?

Your problem there is really with the standard...

But more importantly, intranet apps are not coded to standards to start with, so the whole discussion is moot.
I think it would be a good practice to decouple it from google accounts - I think most people see a distinction between gmail and twitter/facebook . Most won't lose crucial information if their facebook account is stolen, in contrast to gmail. I for one don't want the two accounts to be detectably connected. Gmail=serious/work stuff, Social=fun

Also, the one thing i that could hamper its adoption is that google tends to make its products overly complicated ("for the computer-literate, not soccer moms")
What if the exact same service, with exact same feature set was introduced by a startup and not Google? Would we still see the same type of hostility towards that too? I don't think so.

Yes, it is correct that google harvests your information to feed you more targeted ads. But it doesn't mean that if a startup, started initially as a "do no evil" company becomes as big as google or facebook won't do the same(targeted ads).

Since all these services are free to use, easiest or maybe only possible way to make profit off them is by advertising. Since nothing comes for free, you will pay for the service by sharing your personal information. Which in turn means onus lies on you to see what is it that you want to share.
Who Are the Hot Cloud Startups? dotCloud Tops the List
endgame's comment below is dead, so I'll repost it here because it is very good:

I think that the old MUDs have great potential as a teaching tool. It might be harder in this modern age of fantastic graphics, but if you get someone hooked on a MUD, they usually get a typing speed of 200wpm or so. Further, the persistent nature of the world lends itself to programming.

I've been meaning to write a small mudlib and course around MudCore, a server I finished recently. It's at github.com endgame/MudCore , if anyone is interested.
> Theoretically maybe, but I've yet to see that

Compare the let version to the code in https://bugzilla.mozilla.org/show_bug.cgi?id=602132
I don't think the news feed/wall is a place for vanity. It really depends on the user. Your example of the guy trying to look smart+cutting edge makes sense. For me though, I like to keep my Facebook free of tech/coding stuff even though that is a large part of my life. It has no relevance to my Facebook friends so it should not be there. I put that type of stuff on twitter, and on twitter I do not follow people who I am Facebook friends with (and do not allow them to follow me).

In other words my entire online life is compartmentalized. It makes sense for me to do this even though it can be tedious. Circles would make this a lot easier by the looks of things, giving me one place to post everything, simply choosing who sees what content.

Getting people to use Google+ when they already use Facebook and/or Twitter though is Google's biggest challenge.
Yup, it's the same guy who wrote In the Plex. He has crazy access to all sorts of people at Google -- much more raw source material gets through in his writing than the other journalists out there.
The Mystery of the Menger Sponge
Can you give an example of one of the later, better games?
MICROMAX X266 DUAL SIM PHONE WITH DUAL SPEAKER AND OPERA MINI FEATURES
I think the +1 feature is born just because of this, so they will be able to recommend you new content or friends, based on your interest.
Something where they could beat fb and twitter, as they don't seem to get it so intuitively.

Twitter is already all about this, and even if facebook started the whole 'like' thingy, they are in a heavy situation. They can't just roll out a whole new kind of content discovery feature, where you met strangers and their content. (think about reddit, hn..)(or could they?) I am not sure, they are so tied to this just my close friends and friend of friends feed, that it would really confuse the users.

The +1 is maybe just a temporary solution, till the time your browsing history will count more. (hence chrome)
But the path is pretty clear now what is a social network really good for and how it is used.
That's one of the first things I noticed, too. I imagine something this full-featured will be hard to open-source/make open protocols for/federate like they tried with Wave and Buzz, but I hope they aren't abandoning those ideas after the disastrous way those turned out.
Harjeet: I'm a partner at Y Combinator. Ask me anything.
I think so. Check this video http://www.youtube.com/watch?v=vnv1Mbj1jKw&feature=relmf... They pull the same people into different circles. (People don't fade out)
I haven't seen the demo, but the indications from the press is that circles can (and should) include groups of people.
It let me put one person into two circles.
I'll take Google over Facebook on that point any day.
Blast! Just booked a bunch of trips last week - wish I had waited.
There's a very big difference between A) being the only person in, with the ability to invite any of your friends in and B) everyone else already being in. Even if you could invite all your friends in, the only motivation for them to accept and actually join is you (not an entire network yet, until they all accept) which is never going to be enough motivation.
Zynga to file for $2B IPO tomorrow
Hint to Google: If your servers are overloaded, "Please go back and try again" is a really dumb thing to ask people to do on your 500 error page!
Still, it bothers me when it says "logged in" in the google bar at the top because google watches my searches. When I am on facebook I behave like I am in public. I don't hope for the best and write secret stuff anywhere. But with all the google searches I make through a day, I am giving google a lot of very personal information that I would not like anyone to see. I would hate to see something that I was searching for somehow show up in a stream for my friends to see because I accidentally clicked a +1 button or similar.

I think you hit the nail on the head. I think Google+ looks pretty neat. It's more along the lines of what I am looking for in a social network than Facebook is. But I do not plan to use it for the exact reasons you mentioned.

My searches are private. Anything I do on a social network is public. I do not want the two of them mingling. I don't want the possibility of an accident. I don't want a single entity to "own" my search and social data.

I really wish someone else had created this.
Deleted :(.
There are alternative schedulers (like BFS) for linux that can decrease interactive latencies at the cost of overall throughput.
I welcome whatever brings more women to programming. I think the field would only flourish with more gender diversity.

At the end of the article they suggest there might be a larger trend at play because anecdotally all workshops are very succesful. So women are interested but maybe intimidated; or not drawn enough to try programming on their own.

More of these workshops I say.
8 weeks, not three months. But yes, Firefox 5 is EOL once Firefox 6 is released.
For fun, i made a chrome extension to replace ads with foreign language flashcards, so that i would be learning a language instead of reading ads. Can't say i succeeded ...
The "keep me posted" form produces a 500 error. Not off to an auspicious start.
This is the wrong direction.
How to design & code a nice contact form
"Your Browser is no longer supported." (from plus.google.com)

Well, okay. I'll live without you, Google+.
(Running Seamonkey 2.0.14, which advertises Gecko/20110430. Out of date since.. 3 weeks.)
>Don't hide it in the sidebar

get over yourself
I am sure they are mining your data, too. They sell stuff.
98% of my FB friends don't know about Stack Exchange or Experts Exchange. The other 2% are my IT-department co-workers.
America's Unique Hatred of Finance Reform
Google is in no way targeting people who are happy with Facebook. Neither do they need to compete with Facebook. They are enhancing their existing products very intelligently across the board. Mass adoption isn't necessary, that will come over time with people using more heavily integrated Google software. Eventually they'll get everyone, via mobile / Google Mail / Google Docs / Google Search or some other venue. Facebook is in no danger _right now_. But long-term they have no chance.
If you are designing for a fixed width, you're doing it wrong. Make your design scale to the browser window.
Yeah, it seems like it would be considered bad taste if you kept working on the project but no longer open sourced the results.
I recently installed Piwik (self hosted analytics). In the visitor log, it will show me the ordinal position for that specific visitor. About 50% of my google referrals have this info. I guess sometimes google will send the click position in the referer. This is a useful way of tracking that information, for key phrases that you already receive traffic for.
Why just limit communication to their inbox, have you tried Twitter/FB/LI integration?
Personally, I've found http://nerdfitness.com/ to be quite interesting, and he's also an enterpreneur in his own way.
Switching social networks is not the same as switching email services. You don't just up and move. Millions switched from MySpace to Facebook but what they really did was join Facebook while still using MySpace. And then using MySpace less. And then not at all. So, in theory, people could "join" Google+ because they see it in the toolbar while they're searching, and if there are a few killer features that bring them back (Hangouts? Sparks?) they might use Facebook less. And eventually maybe enough of their friends are on Google+ that they stop using Facebook. Or maybe not. But they definitely don't need to make a walk-the-plank decision today.
I believe that refers to the standard python "logging" module.
I don't quite follow: when you say an "external location" do you mean in file(s) in the file system but not in the file system's internal structure itself?

With regard to most file systems supporting extended attributes: that's true (though FAT32 not supporting them is a huge caveat, and I also wouldn't be at all shocked to see some issues during conversion across FSes... I don't have personal experience though), but email, HTTP downloads, peer-to-peer, etc don't tend to support them, essentially guaranteeing you'll lose them if you transfer them across the Internet.

Also, it's really nice to not have to worry about, say, an EA-unaware POSIX app losing metadata... how many old-style Mac resource forks were lost during a simple file rename before mv was made resource fork-aware!
In Search of New Web Site Tools, Part I
oh, sure. The under-representation of women is just one, particularly visible, way in which we're losing out on potential talented contributors.

If you can figure out ways to help newcomers participate in conferences despite feeling intimidated, that's also a great way to deepen the talent pool.
I'm not selling diamonds, only spa-coupons, so it's not the end of the world is someone-else somehow cracks other user's account (we don't store or process CC information on our side).

> you should immediately route them into a password-change workflow on login

We already have that by default (we're using Drupal), but, as I said, most of our target audience finds it too complicated.
I also wouldn't be surprised if its launch as an invite-only beta release was in part because of it pioneered large email storage.
I think the other common theme is that programmers don't think about marketing until we need to.
If I'm not mistaken LXML uses XPath and CSS path selectors right?
Facebook would go any length to not let off their social graph to be consumed by Google.
Use TADS [0], if you like programming, or Inform [1], if you do not. Alternatively, for web only, you could try Undum [2].

[0] http://inform7.com/
[1] http://www.tads.org/
[2] http://undum.com/
Gmail used to be invite only.
How to find a startup?
I'm looking to skip the frying pan and head right into the fire (Ohio to California), what's the best way to find a startup looking for developers?
Does reading really make a person smarter, or more economically productive?
What is the best online payment processing service? 
I have been using paypal for a while now and it seems that many businesses choose paypal for their online stores and billing in general. I paypal really the best for this? Is their something cheaper? Who has the best API? Do some services offer benefits that others do not?

Basically, which online payment processing service do you use and why?
I'll run this on a clean Ubuntu instance and if this works I'll update my post! Thanks!!
Not to be pedantic, but wouldn't grock be a better choice of word in your sentence?

Also, fun history lesson, grep = Global Regular Expression Print.
If the choice is between "closed and successful" or "open and failed", what would you choose?
...with the caveat that sometimes that's too wide: use max-width in your css.
>"What if the exact same service, with exact same feature set was introduced by a startup and not Google?"

I suspect that the New York Times would be more circumspect in their use of the word "privacy" and not employ it in such a narrow sense in their headline.

To put it another way, I agree with your argument regarding the relationship between free services and advertising. The lack of journalism in the article is more unusual, which given the huge changes in what constitutes news over the past several years, is saying a lot.
I had the realization the other day that the SCUMM games and Heroes of Might and Magic (an amazing game) would play very very well on an iPad.

What a pity, I have an iPad 2 in front of me and I can't play the games. Thanks, Apple. I can't wait to get rid of it for a Galaxy tab.
Circles is awesome. I can't believe Facebook hasn't done it yet. Hopefully you can drop friends into more than one circle.

As far as Huddle goes, I hope it's easy to go from a normal text straight into a Huddle. Also, typing status is very helpful in a chat room to avoid the inevitable conflicts that occur when people happen to type responses at the same time.

Sparks looks somewhat like Google News filtering. I'm not sure if I'll use it if that's all it ends up being.

Hangouts could be interesting, but because it's many-many communication like Huddle, the conversation flow could be difficult to maintain. I hope it works out.
>I fail to see how creating a new set of symbols would do anything but hinder communication within the math community.

I don't think this is just about the math community. The problem - at least as I see it, as a student myself - is that Math is a required part of many fields of studies. Fields which not necessarily have much to do with Math. And that's a problem for many of the students. I won't say that Math is entirely unneeded and should be completely abolished, but what I am saying is that many of these students (including myself) don't want to be part of said "math community".

We don't want to have to learn the arcane notations and "math language" just to be able to use some of the tools we might indeed need. Yes, I might sound like a whiny student who's butthurt over having to actually study for something. I may be. However, seeing as /so many/ other students (who, for the most part, are competent in their own chosen field) are in danger of failing their studies or struggle heavily with their math lectures simply because they are /not/ competent at getting into the "math community" is ridiculous to say the least.

For the record, I study Informatics at a university in Germany, so the situation might be different elsewhere, but I've read about similar issues at American colleges and universities, and every now and then, related articles pop up here at HN.
Email isn't exactly this type of walled-garden social however, so it's not an apt comparison.
As I understood, the circles feature is especially suited to solve such "cant unfriend" problems, by letting you create an entirely similar circle but without the person you want to politely get rid of, and simply never tell him, so he'll never find out and you can graciously avoid the blame of "unfriending" someone.
Is there any other tool that easily help with JS parsing?? This would actually be extremely useful since there are so many JavaScript generated pages.