skysight-inc/HackerNews huggingface dataset:
We obviously use three independent keys. The security of the composition is then at least as good as the security of the best of these algorithms. (You're right that it's not much better, but it doesn't need to be; I don't see how you get "much less", were you thinking of using the same key for each algorithm?)

If you somehow convince yourself that the NSA can break many well-known encryption algorithms and that it's willing to risk exposing this ability to shut down your botnet (which is the counterfactual I'm working off in this thread), this may give you some peace of mind: Blowfish and AES are well-tested designs by separate teams and SALSA is a very simple, very different design that you can easily implement yourself and that's pretty resistant to side-channel attacks. It seems likely that any agency that can break all three can break anything you can come up with.
I am surprised nobody had already talked about scrypt yet. Here is an old hackernews entry about it.

http://news.ycombinator.com/item?id=601408

I would have loved to use scrypt, but there is only a C implementation. I would had loved to have at least a javascript one.
Nothing public-facing. Next?
Object-Oriented Game Design
I think "the hint" of the amazing technology behind Google+ Hangouts would be more appropriate.

Could one of the people involved please publish a more detailed blog posts as how all these pieces are linked together. The tweaker in me wants to start fiddling with it ASAP:

Fully browser-based/cloud-based

Client-server: leverages the power of Google's infrastructure

Designed for low latency (< 100 ms) and high performance (multicore + hardware acceleration)

Standards-based: XMPP, Jingle, RTP, ICE, STUN, SRTP

Fully encrypted (HTTPS + SRTP)
Done. Also, on closer inspection, I think I see the rationale for their decision. They may have chosen red because it looks like red may be the "official" color of Gmail -- notice the red line on the top nav bar above "Gmail," along with the red "M" in the logo.
Well, unfortunately conditions like these are not confined to the games industry. Psycopaths in leadership positions can most likely be found in every industry. Perhaps it's more common in the games industry, though. Or perhaps it just gets more attention, I don't know.

Seems to be a lot of horror stories about the games industry. Doesn't anyone have any more pleasant stories to share?
Where did you see they used floats? I missed it.
Django will be fine. It certainly has its annoyances but it has a nice ecosystem (= people to help you out, open source code to learn from and packages to do just about anything you need). It also has the best employment opportunities.

Once you're comfortable with Django have a look at some of the other frameworks such as Flask or Tornado - they may suit your way of thinking better and may be more suitable for certain projects (for example GAE stuff). There's no need to get pigeon-holed into one framework.

Whatever you do, however, avoid web2py - it messes with Python internals in nasty ways and will teach you bad habits:

http://www.reddit.com/r/Python/comments/ex54j/seeking_clarif...
One Stroke Script.

http://www.fonts.com/findfonts/detail.htm?productid=173302
Meggit - US Military and Law Enforcement equipment supplier hacked for #Antisec
Web2py has some GAE-specific features to ease installation and operation.
Hm. I'm actually quite happy with the design Gmail has right now. A customer in a situation like this wonders, if any change to the interface doesn't just mean more costs for me as the user (like the change of "open in new tab/open in new window" between FF3 and FF4).
An activation corresponds to either the first activation after a sale, or the activation following a "Reset to factory settings" of an Android device. How activations are split between these two is anyone's guess.
Mesa Arizona Fraternal Order of Police website hacked, Data exposed
For those of us without invites, what's the feature like?
Javascript? Have fun securing that one against timing attacks. Also, it's so much slower than the C implementation (remember that crypto algorithms are very carefully designed for 32- or 64-bit words or arbitrary-length integers; Javascript's doubles are a very poor match.)
Yeah, but who isn't these days?
Eight characters for a password seems plenty long to me, if you're truly using a random password. You have [A-Za-z] = 52 chars, [0-9] = 10, [!@#$%^&()_-+=;':",.<>/?\|[]{}] = 30, for a total of 92 possibilities. Then you have an 8 character password. Even if the attacker knows you're using 8 characters, you've got ((92^8)0.3)/60/60/60/24/365/100 = 271 centuries if it takes 0.01 seconds a try. And we're really talking over 8 thousand centuries if we're having bcrypt take 0.3 seconds.

So the problem is that passwords tend not to be random. This greatly decreases the problem-space. But b/scrypt solves the problem of length, within reason.
Yeah I use pretty much the same logic for my business, pretty much all through the API although we might have to scrape ad sense down the track, the stats reporting side at least depending on if the api is easier to use now or not.

Google can be counterintuitive with ad related stuff though, went to a great deal of trouble to support OAuth with adwords but as of yet are still missing report downloads which pretty much makes it useless for the vast majority of applications.

I guess when it's business against business, spending more money because of it is always a win for Google. They have shown more and more of late though they are prepared to put user experience before profit by banning low quality ads. I guess in terms of business against business it would take some major advertisers to oppose it before they went down the same kind of path.
Flags are old but evergreen idea for promotional advertising
Table flags are used for advertising since long time. Still it is a very effective way. High quality and well designed table flags is the effective way to present the promotional offers. Require less space; light weight and off-course low cost are added advantages.
You've just described SSL with client certificates. Works perfectly well, is extremely secure, and has an extremely bad GUI in pretty much every browser ever. (It's somewhat difficult to use "on the road", but that's arguably a security feature.)
An idea would be to use a JavaScript implementation of bcrypt to let clients do the math themselves and just send the encrypted password via HTTPS. This has several advantages. One being that the server-side performance is reduced heavily. Another one is that a password never shows up on the server in plaintext ever.

Disadvantage: Clients need to have JavaScript enabled.
Penny Stocks
The definition of penny stocks is different from person to person. Some investors wrongly assume it as a stock that trades for a cent whereas there are many stocks that trade for a cent and when traded correctly can yield vast profits. Some investors consider it trading under $5.
Better yet, it needs to be replaced with a competitive market for air travel in which the airports, the airways, and the airliners are in private hands.

Some might object that private firms will have incentives to cut corners on safety. It is a legitimate concern, but competitive mechanisms tend to weed this out.

Ugh, how are they going to 'weed this out' exactly? Seems to me competitive pressures would lead private firms to do exactly what the TSA is doing i.e. give the appearance of being serious about security. And do it cheaply. Christ, all these high-profile hacks against big corporations recently and this guy really expects anyone to believe that competition will 'tend to' force businesses to take security seriously? The author hasn't given this a lot of thought, I strongly suspect.

The TSA is awful. But the idea that competition and the free market is a panacea for all problems financial and social is too often used as a crutch by bureaucrats and politicians who don't want to do their god damn jobs, and as a cudgel by idiot pundits on the payroll of big business, as we see here.

Just fix the TSA.

Edit: and it appears Forbes stores your passwords as plaintext. Really shining example of the free market and competition magically solving all our problems, fellas.
Aloha Travel Vacation: Travel Tips and Vacation Information
Are you looking for information about your next vacation? If so, please visit our website. Aloha Travel Vacation is your best source for travel information.
New Era of Easy Money Making
Great work. A few comments:

- Have a little structure like:

- Intro

- Node News

- New NPMs

- ChitChat

- ...

- Have something like shownotes with links.
Computer vision technology
Computer technology has revolutionized the world of science and technology. Computer technology has multi purposes; these are not only useful for business world, students, even earning, for communication and entertainment purposes but also for data storage, process and transfer.
Best advantages of technology
Best advantages of the new technology also include cheap and easy communication systems. You can access your relatives and friends through number of ways no matter if they are at the corner of the world.
Hey there, we've cleared all pending invites. If you haven't received one yet, please mail us at hello@getdenso.com and we'll sort you out. Thanks!
That's a bit too simple - it won't catch password1 or iloveyou, both of which will definitely be tried by any decent cracker. Try http://www.openwall.com/passwdqc/, by Solar Designer (who has, among many other things, written the John the Ripper password cracker.)
Linkedin down?
been trying to log into linkedin,but it's down. in fact their homepage isn't even working. got this error. bee almost 15mins and counting.

HTTP Status 500 -

type Status report

message

description The server encountered an internal error () that prevented it from fulfilling this request.
Apache Tomcat/6.0.32
It does look good and yet the only think I can think off is "cover fire", from one of Spolsky's classic.

Google+ looks like a real improvement though.
Ok, Concurrence, but the name "Keynote" certainly is suggestive.
He might be right, though. Intelligence might arise as an emergent property of some complex system. For example, automated trading.

There's no telling really. It also depends on how you define intelligence. It doesn't necessarily have to be (explicitly simulated) human intelligence.

(Mind that intelligence in humans wasn't created on demand either. It arose as an emergent property of the mammalian brain, due to evolutionary pressures)
Official Website of Amy Winehouse - Songer/Songwriter Defaced by #Antisec
It's when I read such anecdotes - that I think we need something similar to http://www.folklore.org/

RIP Bob Morris.
Thanks. Now to the hard part: Design an experiment. :-)
To sell more ads. That's the answer for why most things online are free.
How to Build a Business That Runs Without You [Mixergy How-To Guide]
How to make Reddit less terrible
That doesn't work. Among other issues, Javascript is so much slower than C or CUDA at such tasks (no native integers!) that the client is going to take forever to calculate a sufficiently-hard hash.
There are a lot of misconceptions on what makes a "secure" password—fluffy is puffy takes longer to crack than J4fS<2.

http://www.baekdal.com/tips/password-security-usability
great! lots of unreadable code! fun!
Wasn't Access a part of office?
I'm pretty sure nostrademons works for google...
It let's you markup DOM elements on the current screen so you can point out where the issue is.

(Also allows you to black out personal information, but the blackout in the second pic, I did.)

Then allows you to add notes and submit meta data.

Edit 2 - Better pics:

http://imgur.com/a/RPof4
If you are doing this, then the hash IS the password. That means if someone steals your database, the could log in as all of your users just by tweaking the client-side JavaScript with grease-monkey or similar.
I don't think powerpoint is all that bad.

It's people who don't know how to present is what makes it look bad. Especially when they fill the screen with every single word they say.
Well they seem to have borrowed something from Orkut:
…notifiert-hangingget-js.js
var bf = "orkutFrame";
Wholesale Ping G15 Hybrid Irons Combo Set ,
Yeah it's quite thoughtful, although the "black out personal information" feature seems like a bit of a dark joke.
what strikes me is how differently 'hacking' is viewed today in the mainstream. Try any of that at a company as big as IBM, and you'll likely be rotting in a cell as a suspected cyber terrorist.

ok maybe I exaggerate, but I can't help but think how innocent those times sound in this story.
I'd love one as well, if you're still offering!
Say what it does on the page and don't use red text on a red background (it's invisible).
Get your Facebook Fans, Do I Need To undertake it?
Additionally, you can bare minimum the optimum customers on top of this should you definitely had to. Let’s mainly mention you have now a business online website and maybe a variety of likes. As you may order 800 likes relatively economical which unfortunately may last the period of time of your precious current website apart from which you can also make profits to.
Especially when you consider that search is also a google "app".
For me, great design really translates into "ADD friendly." Visual clutter is a nightmare for me in terms of immediate focus. This simple spacing does WONDERS for visual organization in my brain. It really is amazing. I've actually written scripts before to add some padding (CSS padding that is) to reddit to make things easier.
I liked a portion of my time in the games industry, but I don't really have much good to say about the studio where I worked: It was horribly dysfunctional like most other games studios. The positive aspects are mostly rooted in that your coworkers tend to be really driven, creative individuals.

I know of a few particular studios with a reputation for having good work environments, but in general, the nature of the industry causes bad managers and directors to rise to the top because it's impossible to reliably connect bad results with bad decisions.

On the other hand, I know lots of people who still like their industry jobs. I think for them, putting up with dysfunctional management is okay because they get enough out of the job otherwise to make it a fair trade. It's also possible to diminish the destructive effects of the job if you're strong-willed and productive - crunch is a good example. It's possible to work in the industry without working crunch more than a few weeks in your entire career.
Reddit has a community around it called Operation Grab ass: http://www.reddit.com/r/OperationGrabAss/
No, it doesn't. Once the salt is large enough that you don't have several passwords hashed with the same salt value, there is absolutely no further advantage. Frankly, 64 bits of salt seems like enough for anything. Triple-salting sounds like a technique made up by an amateur who doesn't understand what salting is supposed to do.
Keynote would be absolutely amazing if it allowed for one thing: graphic/pdf objects to be anchored inline with text. With this, latex rendered formula could be included in a far easier manner.

Most CS academics use macs at this point, and I'm sure engineers would find it invaluable as well. Apple has been ignoring its more technical users and focussing on the the masses for a while now. It's rather disappointing.
Free Apps Droid
Looking for the best free apps for Droid X? This is a comprehensive top 10 list of some of the best Droid X apps available for free.
The value of this (to me) is more challenge/hobby/toy/competition(i.e. JS1k) implementations than code to implement and use.

It can be a lot of fun, and you'll often learn things in the process.
You start to make a good point but it starts to fall off.

I can name innumerable potentially groundbreaking startups whose ideas seemed to be (and their competing companies proved to be) great, yet the technical shortcomings in the product caused them to fail. They were soundly beat by more technical teams that could build and scale a product better, often even led by very technical people. I'm talking about some truly great companies like Apple, Google, Microsoft, and (arguably) Facebook.

Moreover, damoncali, if you have experience starting companies and building products and advising and observing others in doing so, then you also know that most products never ship. They never ship because the technical team can't build a product on a timeline. They can't figure out the problem, they don't code well enough to scale beyond 1000 lines of code, they don't know how to say NO to the business side clamoring for useless features, and so on.

Yes, a lot of products get built and are useless and never sell, but far more are ideas floating in minds that are never even built to completion.

A good technical team will execute, execute quickly, scale and be far ahead of most competition who doesn't value the technical side.
Is this where the inspiration for http://cm.bell-labs.com/who/ken/trust.html came from, given it happened a few years prior?
That might be a valid point. I just checked this: http://javascript-bcrypt.googlecode.com/hg/test.html
The initialization phase takes very long.
DDD: A Simple Example That's Incredibly Complex
Safest Trampolines
Usually they have involved two people using a safest trampoline at the same time, with one person on the trampoline being heavier than the other, causing an imbalance. We would urge parents to make sure they supervise trampoline use in accordance with Rainbow play Frames palayground given by the manufacturer.
LaTeXit is pretty good for this purpose.
In the case here you're not really dealing with the restaurants itself, but with the building. You rent your space to the restaurant.
That is like saying that poetry is unreadable prose. There's pleasure in brevity. Also one can learn some neat tricks sometimes. And nobody demands you use clever one-liners in your production code.
I did something like this 5 or so years back just for fun - it was so I could move music files around (plugins etc..) I only told a few friend about. Had to take it down as I found some hideous stuff on it. Good Luck!

Yours is much easier to use & prettier than mine was.
Keynote's one minor-but-annoying limitation is that you can't change default parameters globally for animations.
Years of training by news headlines.
Right. I just realize my approach is flawed ;)
Does anyone know how Djangos built-in password hashing fares?
Just abstract it away:

#define NRELATEDWORDS(data, idx) (ntohl(*(uint32_t *) &(data)[idx])
Well, I guess I'll also include myself in list.

anuj.kk(AT)gmail.com
I had a very tangential role in getting Google+ out the door (as in, I got pulled in for last-minute bugfixing and fixed a handful of bugs), and I've been working in the Google+ codebase for the last few weeks.
That was really touching. I'm not sure if that's the right word. It was really nostalgic, despite me not having even been alive during that time.

I grew up reading books and magazines about people like Kevin Mitnick, John Draper, RTM, Kevin Poulsen, etc. If it's possible, I think there was a romantic era to hacking. This story brought me back to that era.

RIP Robert.
Justin Uberti announcing Google Hangouts
"The guy that goes to jail."
I'm sure this feature will be bundled in with the next release of Chrome.
Beyond HTML5 - audio capture in web browsers
Best Printing Samples
A collection of fresh, unique and exceptional printing design masterpieces crafted by the art experts and newbie designers on the web to showcase their devotion to their passion and inspire us with their amazing gift.
Hi HN: a while ago I invited you to visit a very early build of our new startup. On June 8 we finally opened up to the public even though (technically) still in beta.

On behalf of the Venturocket team, I'd like to re-invite you to take a look and see how we've learned to quantify human talent.

Thanks!
At least for Google Closure they show where it is used:

http://code.google.com/closure/library/

Not sure about the other libs...
Mitnick's autobiography is coming out in August. I've been reading a prerelease copy, and it's really enjoyable (if you are into that sort of thing). Lots of details and stories about the things he was up to.

I was roaming around inside networks and machines around the same time as these guys and I don't think it was a romantic era, but it was an era in which the laws were very lax and you'd likely get a slap on the wrist rather than a jail sentence. Lots of systems were open, anonymous FTP was the norm, and it was trivial to spoof email using SMTP commands typed through telnet since the SMTP servers trusted whoever connected to them. Also many dial up systems used either no security (i.e. if you knew the number it was enough to get in), or really trivial passwords. Networks were easy to monitor once you were in and most passwords were sent plain text (the assumption was that you couldn't see the X.25 or TCP packets themselves, but, of course, you could).

I remember on one occasion receiving an email from a system administrator in a university where I had changed the 'ls' program to be a trojan of my own design. His email just said: "I have removed the new 'ls' program you installed on $SYSTEM_NAME." All it did was log the name of any user who had visited my $HOME so I could see who was looking in my files. Today, I would likely be on my way to prison.

The other thing that's become very real in the hacking world is the amount of money that's flowing around. You can get paid for exploits, paid for stolen information, paid for botnets, paid for viruses, etc. etc. If there was anything romantic about the 1980s it was that it was mostly being done for fun and without malicious intent.

http://www.amazon.com/Ghost-Wires-Adventures-Worlds-Wanted/d...
Plaintext passwords solve the problem of being able to recover your password by email with out clicking some link bs. (Which are equally hackable with the crappy passwords that most people use.) Surprisingly, lots of people would prefer this to ultra secure one way hashes. The market provides what people want, not what makes them most 'secure'. If you don't like that forbes stores your password as plaintext you're free not to sign up.

Also, you do use separate passwords for each site which completely nullifies the majority of the risk from such a system, correct? Or could it be that you chose the convenience of reusable passwords over security?
I think your parent is stating an expectation of what can be found in that forum. Not a fundamental characterization of what 'tiny code' is necessarily like.

Aside: I've never understood poetry to be about brevity.
Hopefully feedback widgets (e.g., UserVoice) take heed and develop this and/or someone throws an open source equivalent together; I'd love to fork this on Github, lots of potential.
Show HN: AdWords for finding talent, co-founders, jobs, and other opportunities
Red button: https://img.skitch.com/20110701-bpf7rn6giqq64ya9ihr88pmfr1.p...

Green button: https://img.skitch.com/20110701-pff56qthuqr89t77d2x3u2smhj.p...

Grey button: https://img.skitch.com/20110701-wwxrad2urrj1xjmanusme8w9w.pn...

I now think the red works best too (but felt the same way as you about it at first). Other colours stand out against the red "Mail" and "Inbox" links, which gives a somewhat technicoloured dreamcoat feel to the UI. They could change the red links to green, but then they lose the connection with the red 'M' envelope character, as you rightly point out. A light grey might work, but probably wouldn't stand out enough for new users.
Oops! StartSSL was compromised this month, although they say the issue is remediated now. http://news.netcraft.com/archives/2011/06/22/startssl-suspen...
Yeah I noticed it too. And check #linkedin on twitter: seems like it was down for over an hour or so. Finally back up though.