skysight-inc/HackerNews huggingface dataset:
> On any form submission, browsers would hash like PwdHash by using the current domain.

Nitpick: works great until you move domains, or try to log in from another subdomain, or use a redirect in your /etc/hosts file, etc., etc.

Assuming that the submitted hash would (should!) be salted and hashed again server-side anyway, simply running it through bcrypt would be enough, I think.

An optional attribute could be added, too: <input type="password" salt="sosasta" />. If we wanted to go further, the salt could be a randomly generated nonce that would be submitted as another field; POST['password'] = 'whatever', POST['password_salt'] = 'sosasta'
Why so cold? The last refuge of Antarctica's forests
It seems unfair to start your argument from the position that git is the default choice and anyone who isn't using it should explain why.
Parsers or pipes? How do you reliably parse input?
Web Design and Web Development Service Providers New Zealand 
affordable web design,web site design company, web development New Zealand,affordable web hosting Providers,affordable Software Development Solutions,make a website low price,web designing companies in new zealand
I'm a Tauist myself, but it should be pointed out the first one is a legitimately good argument. (Local introduction of a constant is easy, though.)

I don't expect to wake up one day and everybody suddenly agrees "Yes, tau is the winner!" I expect that either things will peter out, or tau will just gradually start showing up in real papers and stuff. Unfortunately, since K-12 mathematical curricula seem to have gotten stuck in 1920, switching the "official curricula" to tau is well down on my list of things that needs to happen to K-12 math education and at the current rate even if formal mathematics did just wake up tomorrow and decide tau was the way to go, it would be at least 50 years before that penetrated back down.
How to take advantage of Redis just adding it to your stack
I never understood why people hate on MG Siegler so much and then give John Gruber a free pass.
The debugger is badass. I built a few simple sites with Flask year and it was the thing I wished most I could have in Rails.
If you can, see the Marine Corps Silent Drill Platoon at the Iwo Jima.
Then again, I also dislike some of the magic in Flask.
Resources for machine learning and computer vision
Bookmark it. I'll be updating this often.
Rails hosting review: IXWebhosting
HP steps up outreach to startups
What kind of reviewer, for what kind of paper? Any paper in which I wrote "Then x = y/2" would almost certainly be a math (or computer science) paper, so the reviewer would know what I was saying. If it was for a more general audience, I would probably find a better way to state my point.
Create an Extravagant Composition in Photoshop CS5
An example would be that Bottle creates an application object implicitly and assumes that all resources(templates, static files, etc.) are relative to the cwd. However the WSGI specification doesn't define what the cwd points to so you have to work around that for some servers.

If you use Flask you create the application object explicitly and pass it the name of the module, relative to which Flask looks up resources.
I'm always impressed by Flask - especially its documentation. In fact, this seems like a good occasion to have a poke around and build something with it.

On a slightly related note - although jinja2 is already quite compact, I'm a fan of haml and I'm always surprised by the lack of support for it in Python. Is there something I'm missing? Uncanny valley for Pythonistas?
Database protection Techniques : a different prespective
Take them to some drinks, and be sure to drink more. If you felt good with them during the ordeal, then that's a sure sign.

Never wear your geek hat doing these types of things, you'll be putting them through the technical sieve and that, as I know you've already experienced, don't work.
My favorite text adventure was Pirate's Cove, on my trusty Vic 20. You can still play it, with an emulator

http://www.c64gg.com/Adams_Scott_DL.html

although that version seems to have some simple graphics, which is just wrong.

There's more information on the Scott Adams games here
http://www.lysator.liu.se/adventure/Adventure_International/...

Good times....
A simple CLI tool for ensuring that a given script runs forever
RxJS - reactive programming for JavaScript
1) You can connect/disconnect, but it always prefers a wifi signal, so it's fairly safe to enable 3G and forget about it (except for data costs, if you're a heavy user and your wifi drops, you could burn up your data unknowingly). It also shows a data meter that tells you how much data is left for your billing cycle.

2) Crap. It works with Gtalk video chat seamlessly, and is used for your initial profile picture, but it's otherwise useless for other websites. It's pretty low resolution. It has an SD card slot, but last I used ChromeOS, uploading pictures off SD was basically broken.

3) Regarding the battery life, I was getting about 5.5 hours under ChromeOS for standard passive web browsing (HN, Reddit, blogs, etc), no Youtube or games. Obviously YMMV based on how you engage the CPU/GPU, but I'd say 5.5 hours is the about the Cr-48's upper limit. Closing the lid puts it in sleep mode and it's instant on/off, probably the closest I've seen to a Mac's lid closing power management experience. For the power user: I later flashed the BIOS and tossed on 11.01 with Xfce and powertop and got much better results (strictly speaking for battery life). With micromanagement of power consumption under linux (bluetooth off, throttling back to 1Ghz, 3G radio disabled, no USB/SD devices plugged in, nothing really using the GPU, LCD brightness turned down as appropriate) I can squeeze out almost 8 hours of web browsing and terminal based programming, which was a huge gain for me. I think idle power consumption was about 7.5 watts like that, compare to a default Ubuntu install at around 11 or 12 watts.

4) Pretty much seamless, although I always ran the dev channel, so I can't recall how the public release looked, but I wouldn't worry about a non-technical user, it's pretty much bulletproof, going so far as having a duplicate "safe" partition of the OS to restore from if shit breaks.

5) There aren't any native apps. There's a few custom ones like Gtalk and Scratchpad to persist as a uniquely styled interface above all tabs, but basically it's the Chrome browser in a sandbox on netbook hardware. Your apps are whatever can be "installed" from the Chrome Web Store. No maps caching that I'm aware of, it probably wouldn't make a good GPS device replacement.
I expect you mean this bit:

Suppose that ra and sa are the same modulo p,
then we have r = s (mod p), so the p-1 multiples
of a above are distinct and nonzero ...

More completely, I expect you want them to say:

Consider the (p-1) multiples of a given by:

a, 2a, 3a, ... (p-1)a. (mod p)

These are all distinct. To see this, consider
otherwise, and suppose ra=sa (mod p)

... and so on.

Is that what you meant?

The point is that all writing is aimed at an audience. I wouldn't expect someone with no experience of Science Fiction to be able to read "Quantum Thief," and I wouldn't expect anyone with a reading age of 6 to be able to read "Lord of the Rings." Similarly, that proof requires some degree of familiarity with the structure of proofs. This is not an especially difficult.

I've always found that indirect proofs, or proofs by contradiction, or proofs by the contrapositive, are mostly obvious as to what they are doing, although not always.

In short, I agree with what you say, don't think the problem is as bad as you are portraying, think the example you have given is not especially good, but I'd be hard pressed to find a better one.

And finally, it's possible to come up with bad writing in every context. Some proofs are badly written, badly expressed, and badly explained. I know - I've not only read many of them, I've written some as well.

No surprise there.

Addendum: Sometimes the proofs that gave me the greatest understanding were the ones that were the most badly written, forcing me to work through the material on my own terms and understand it in my own way. Perhaps well-written, well-expressed and well-explained proofs are actually a bad thing.
Android device activations now exceed 500,000 per day
saying "I love mercurial" without some mention of why you aren't using git, which is more popular, will seem like an incomplete argument.

That's the point. When you say why you love Hg without saying why you aren't using git, you aren't arguing. The author isn't explaining how to argue more civilly, he's explaining how to make a perfectly valid statement without getting into an argument.

Example: I love riding a hard tail MTB. Most riders will ask why I don't want full suspension. But I'm not arguing about why a hard tail is better. I'm explaining that I love riding a hard tail.
It took a long time for Firefox to get the thumbs up as a supported browser for internal apps where I work. Like FF 3.5 maybe? Before that, if you reported issues, they told you to use the standard shipped IE on our laptop images. I imagine that the result of this kind of thing will be that FF goes back to the unsupported list.

(This is especially a bummer for those using Linux desktops.)
Facebook Is Quietly Testing First Major Redesign in Over a Year - The Atlantic
Neo4j 1.4 M05 - Autoindexing, REST Paging, Cypher aggregates
Why is this so gender specific?
Shut up about PageRank already
Those two things are not mutually exclusive. I dislike MG's and Gruber's articles almost equally. I would argue that Gruber usually tends to have a little more substance to his fanboyism, but I generally don't read either of them.
"The fact is that making things easier doesn't necessarily mean improvement."

Untrue, and if you're a programmer you ought to know better. Making something that works the exact same way, only easier, is definitely an improvement. Now it takes less of your finite mental reserves to accomplish a task, and you can now go further in the same amount of time. Making something that abstracts away some things and makes the rest easier is often an improvement, when the advantage of being easier outweighs the loss of control.

Or are you still programming in raw machine language?

Programmers live in such a rich ecosystem of things that are improvements merely because they are easier that it is easy to take that process for granted without understanding it. How many orders of magnitude less effective would I be in machine language? Certainly more than one, almost certainly more than two (working on a network + manual memory management = security fail).
If your hardware is supported, haiku is fantastically fast on even extremely old pentium hardware. I tried it on an ancient celeron with 256m ram and it was amazing even running off of a USB 1.1 drive. The mail app starts in less than a second. The browser starts in about 2 seconds and feels as responsive as safari on my i5 macbook pro with gobs of ram.

The coolest feature, however, is how well it preforms under stress. There is a 3d demo that maxes processing resources and displays the performance in FPS. As soon as the demo starts, the CPU is pegged at 100%. Even with the demo running, the system is still fast and stable. Haiku, like BeOS, won't let one process slow the whole system. Apps still load in roughly the same times and remain responsive. I haven't tested how well it handles memory hogs, but I've read that its nearly as good there too.

As long as you are only using apps that come with the distribution you might could use it as day to day desktop, but I think it would probably be a diservice to the users and the project to recommend Haiku in its current state to anyone other than tinkerers and devs. Finding apps would be a problem, even if you didn't have to worry about whether or not they would run. A bad app will crash the whole system, although stability has come a long way in the last couple of years. You just can't forget that this is alpha software.

I think things will rapidly improve though. There is a package manager on the way which will be finding software easier. Also, I've been reading about some fantastic advances in programming language support which should increase the amount of software made available.

Edit: I'm trying to walk the line here, I'm clearly a fanboy.
Review my startup: Loqly-Be local anywhere
I request the YCombinator community to help us by taking a look at our app Loqly - http://bit.ly/e5u4jv and giving us feedback on UI and user experience.

Our Pitch:
Loqly allows you to Be local anywhere.
▸ Discover what is around you
▸ Ask the locals for recommendations. Just ask a question about a place or ask for a business recommendations, we delivery your questions to the locals in that area, who then answer it for you.
▸ See Foursquare tips, Yelp & Google reviews
▸ Navigate to an address using your fav GPS app
▸ Search anything (iPhone4, lawyers, dentists, schools). We are Google powered, we will find it for you.
US Navy Bought Fake Chinese Chips, Questions Security of Sourcing
Crawling pastebin is trivial - there was an HN story on it awhile ago, and I wrote my own from scratch as an exercise. Perhaps we should suggest this to the guy behind https://shouldichangemypassword.com/
Google can even index files listed in robots.txt (it just doesn't crawl them)
Lets hear it for High Fructose Corn Syrup!
NASA offers Twitter followers a space shuttle simulation run
Curious, did anyone from here ever received such a call? Wondering if they always use the same company name/domain and other things they say.

thanks,
Any suggestions for Infocom games? Just missed them I'm afraid - cut my teeth on nethack and commander keen.
Plenty of people hate on Gruber as well. Look at the HN comments for any of his posts, there's always someone calling him out.

My solution is not to read authors that I dislike. I find that it is 100% effective.
Here's a good recent documentary that goes into detail about the famous hot coffee case. It was eye-opening for sure. I never thought that I would going in, but I came away thinking McDonald's was woefully negligent in that case.

http://hotcoffeethemovie.com/
" Don’t just read it; fight it! Ask your own questions, look for your own examples, discover your own proofs. Is the hypothesis necessary? Is the converse true? What happens in the classical special case? What about the degenerate cases? Where does the proof use the hypothesis? "

-Paul Halmos, inventor of "iff" and the ∎ symbol ( http://en.wikipedia.org/wiki/Paul_Halmos )
LTE gets faster. Much faster.
Dominic Giampaolo, one of the authors of BeFS, is now working on Apple's Spotlight file search engine.

BeFS rocketh, check out the book:

http://www.letterp.com/~dbg/practical-file-system-design.pdf
2010 Emmy Nominees & Winners
The Zuckerg Effect: Thiel Fellows and College Dropout Entrepreneurs
Lessons learned from the Boston Python Workshop, an outreach event for women
Dammit - this was supposed to be a ASK HN. I either accidentally deleted the text before submit, or it gets stripped when there's a link. Either way, I am Asking HN!
Apple offers $49 Thunderbolt cable, $1500 RAID array
That won't make a lick of difference. Any statement of the form 'X is great, because ...' or 'I like X, because ...' will be interpreted by a bunch of people as 'He means Y, which I love, is not great and is lesser than X. Otherwise, he would be using Y. He must obviously think it sucks, which shows what an idiot he is'. And the stage is set.

Nobody forces you to pander to these people's neuroses. You are not the troll whisperer. This over here is my favourite interview question. That over there is my favourite line of Ruby code. This is my favourite book. I wrote blog posts about all of these subjects and attracted exactly the responses you describe. But I was happiest when I ignored the people who had an agenda of arguing about their favourite interview question or their favoruite line of code or their favourite book.

Nobody compels you to play their game. So don't.
Hackers are being radicalised by government policy
If I'm not mistaken, in case that plugin you have used gets banned, all your posted links should also disappear.
How do you heat liquid water to more than 100°C? Coffee is supposed to be just below 100°C when you brew it, or it is not good. Goes for home made or McD coffee. Whatever, maybe in some parts of the world, the laws of physics don't apply and liquid water does not lose energy though evaporation...

Back on topic: Dropbox is telling everybody that they are "encrypting" stuff on their drives. How do they decrypt without a password? This case is a much different from the "stupid McD coffee customer" case, because details on cloud storage technicalities are not common knowledge, whereas "boiling water may be hot" kinda is.
RMIT Developing Self-Powered Rechargable Batteries
Not to mention the tau neutrino. But the bigger question is why would one want to do that?
Good question. I think git is so relevant to the mercurial argument since it is distributed, so if you are saying why you love mercurial, at least acknowledging git will strengthen your argument, as it is the most popular DCVS. Without that mention, readers might falsely think you are uninformed and haven't heard of or tried git.
In the UK the legislation is 'the unfair contract terms act 1977'. http://www.legislation.gov.uk/ukpga/1977/50
Also, the case law suggests that if you are providing a professional service your appointment should make it clear that you will take 'reasonable skill and care' in carrying out the services otherwise you will be judged as to whether the service you have provided is 'fit for purpose' which is a much harder test to pass. I dont know if this test would apply to SAAS T&C's and IANAL by the way. Edit: Clarity & Bad grammar.
I think if you looked you'd see that they have indeed looked into Python 3 support and have found it technically inviable without breaking a number of things.

Python 3 was backwards incompatible to 2.6/2.7, and there are very large code-bases comprising things like Django that can't just be carted over part and parcel.

As somebody who's spent time building enterprise-class Django applications for a very slow-moving set of customers (e.g., the Federal government) I'm glad they're not pushing forward faster than the rest of the world.
on a related note, tau in greek is pronounced ˈtaff
I was skeptical at first, but this looks really cool. I just signed up and I'm excited to use it. I had used DailyBurn for a while, but the challenges and social aspects were disappointing. I think you've really nailed those things already. Nice job!
I'm pretty sure that excel looks significantly more suspicious to your coworkers.
At this point, you're both right - exposing these things to a massive audience just increases the number of potential attackers.

Someone ought to write a tool that follows this account, and e-mails people warning them that their e-mail has been compromised.

The hard part would be explaining what happened, how to verify it, and how to fix it to random strangers without convincing them that you're the one who just tried to steal their life savings.
Leads me to think why Amiga and BeOS were deemed "ahead of its time". Is it because they never had to worry about hardware compatibility? After all they were "selecting" their own hardware and concentrate solely on software.

If compatibility weren't an issue, we might have been very advanced right now. Seems like compatibility is what stopping everything from properly advancing, except hardware maybe?
This isn't the first time this has happened, I remember when it was discovered in 2008 that a ton of POS card reader/pin payment machines were sending stolen data back to servers and it was built into (or sabotaged into) the machines themselves from the manufacturer (or intercepted by pirates along the way). Seems like now is a great time to get into the hardware supply chain security/QA verification business.

And how feasible is it to obfuscate the design purpose and logic of chips at manufacture as they propose in the article?
I was pleasantly surprised to see this called "Sugar Rush"- making it appear to be common sense to keep your blood sugar levels low if you have diabetes. Yet the ADA (American Diabetes Association) tells everyone to eat low-fat (high-carb) diets.
Somebody with enough karma please flag this.
Two Factor Authentication
Our IT department is looking for a two factor authentication solution. Some of the fundamental requirements are:
1. Second factor has to be flexible (i.e. Finger Print, HID Card, etc)
2. User self registration and password management.
3. No modifications to our Active Directory schema.
4. SAML 2.0 supported.
5. Single Sign On functionality.
6. Compatibility with MS infrastructure.

So, far we have only looked at Imprivata and they do not have SAML support. Do you guys have any suggestions?
I'd rather see the current ones be more accessible. Is it really helpful to be on something separate?
I've been wondering about this! What happened to that team? Has it been rebuilt or partly rebuilt anywhere? Did they have any secret-sauce techniques?
Title is wrong. Somebody needs to learn to parse journalistic hype with a little more skepticism.

"The chips turned out to be counterfeits from China, but it could have been even worse. Instead of crappy Chinese fakes being put into Navy weapons systems, the chips could have been hacked, able to shut off a missile in the event of war or lie around just waiting to malfunction."
It's also against facebook's developer policies to share the secret key.

You must not give your secret key to another party, unless that party is an agent acting on your behalf as an operator of your application. You are responsible for all activities that occur under your account identifiers.
Fn-TECHWORLD: JAILBREAKME 3.0 FOR IPAD 2 WILL BE OPEN SOURCE? [UPDATED]
This is only good for unsalted hashes, which hopefully are on the decline.
> assumes that all resources(templates, static files, etc.)

Reading the source, I see no evidence of this.

https://github.com/defnull/bottle/blob/master/bottle.py#L161...
Not quite. At the moment it's virtual currency [0]. My point was that security holes increase as service increases in complexity. Especially when it's used for everything and becomes a hard lesson in SPoF for users, like the money example.

[0] http://www.facebook.com/credits/
I read it a few years ago. I disagree. It's like saying removing a seldom used letter from the alphabet would mean kids learn to spell better.

The whole point of learning is to learn to read things and understand them. That means looking behind 'fluff' like 2, or 1/2, and understanding the concepts.
Translate Your Startup Vision to Investor Values
Personally I found Trinity very good. The story starts in the cold war, and then takes you into a weird alice-in-wonderland like dimension, where you have to visit various places before a nuclear bomb hits.

The Enchanter, Sorcerer, Spellbreaker trilogy was also a lot of fun.

And of course Hitchhikers Guide to The Universe :-)
Searching for Jim Gray: A Technical Overview
If someone wanted to write an interactive text game like these and put it on the web, are there any frameworks available? If not, a lot of the work would be on figuring out how to parse the player's input, how to map out the possible paths through the game, etc, instead of writing the story.
Catalyst is not light weight. You would need to look at Dancer or Mojolicious for Perl equivalents.
Watch Monte Carlo Movie Online Free
Watch Monte Carlo Movie Online Free
A young woman her hands tightly to his brother and his friend use the savings long awaited dream of Paris which proved to be a big disappointment When they decided to take a break from their tour of misery and ducks in the lobby is a 5-star hotel
You can play zork in your browser here:
http://thcnet.net/zork/index.php
Ask/Show HN: Upgrading password-hashing schemes without user intervention