skysight-inc/HackerNews huggingface dataset:
I thought this was interesting as well. The second bullet is a bit misleading though. The benefit is not just in case there is a design weakness in bcrypt. The real benefit is briefly summarized in the first bullet: It's effectively forcing the attacker to compromise not only the database but also the file system to be able to make any offline password guesses.

With bcrypt alone, compromise of the password hashes still allows brute-force offline dictionary attacks. bcrypt means that each guess might take, e.g., milliseconds instead of microseconds, but an attacker has all of the information he needs to make offline guesses and check them against the compromised hash.

The hmac step means that an attacker who has the password hashes but not the hmac nonce effectively doesn't get any offline guesses. Assuming the nonce is e.g., 128+ bits, it'll be computationally infeasible for the attacker to guess the nonce itself, without which he can't verify any offline password guesses.
There are innumerable things that are technically possible today that were not technically possible in 1985. What I'm really objecting to is this veneration of explosively moving a certain weight of flesh over a certain distance as a thing, an achievement, which we are lacking now.

Clearly, sending a man to the moon captured the imagination of a certain generation, a generation that is growing older. But it didn't capture my imagination particularly strongly; it was before my time, and now it seems to me like an massive achievement in the same way as the pyramids were massive achievements. Literally massive, in that the scale is impressive, but monuments essentially without purpose other than aggrandizing those who achieved them.

So I don't see them as a big thing that was done in the past that is lacking in the present. I don't see a need for them. You might as well ask why we haven't built a bigger pyramid than at Giza.
I think Yobongo has some pretty strong traction, but they may add some features that take another direction.
There's also a Notification API in HTML5

http://www.html5rocks.com/en/tutorials/notifications/quick
Ah ok.

Aren't both of these equivalent though?

(I would think the point may be that a compromised email, doesn't provide access later. Both these scenario are equally vulnerable then?)
What angel investors can do for you?
Ironically, immediately after reading these guidelines, I checked my email and had just received an email from Mozilla's mailing list service that contained my password in plaintext. Oops. (To be fair, it looks like they're just using Mailman http://www.list.org/)
Competitive Toshiba Tablet
In my opinion, Stephenson is focusing on "getting big stuff done" and, more pointedly, achieving large and perhaps lofty goals. He's not disparaging all the incremental advancements that add up to something really big. I think he's saying we've lost the will to aim really high, take real risks (loss of life included), to achieve something that seemed insurmountable. I think he's saying we've grown too fearful of risk and failure. We've prioritized safety over achievement. While his examples were space-based, I don't think that's what he's ultimately aiming at.

The current internet is revolutionary, but wasn't achieved on some master plan. It grew incrementally and somewhat organically. Creating a planet-wide super high speed communications network to every house within 10 years as a concerted project might be closer to what he's thinking. Something like what Google plays around with, but on a huge scale. Software and computer devices are also amazing, but they too were not part of a well-defined goal or vision. They grew from smaller innovations.

There will always be good rational arguments about things being too costly or too impractical or just not as important as feeding and clothing everyone, but that's the "valley" that he spoke of getting past or over. It's hard to fly if you remain too firmly grounded.
How the FRA is Regulating Passenger Rail Out of Existence
Wrpme 0.5.1 released (high performance NoSQL)
a 15lb flywheel. Weight is death on a bicycle. As soon as you take that thing up any kind of incline it's like trying to dead-lift a barbell.
There used to be an HTML app store. I can't find it now, as I don't remember the name, but that existed.

It's also pretty easy to just implement a registration fee, especially now with Stripe out in the wild.

If you're really looking to limit access though, you could probably use something like gumroad to get it off the ground.
Home HVAC Systems: Useful Tips & Advice
Awesome. Never seen that before. How did they do it?
Using Sunspot For Free-Text Search With Redis
The World from Our Eyes
Lose Weight Easy and Fast - Help Losing Weight
Metis - A framework for easy, testable monitors
And it's just noise I'm adding, I don't dither the colors.
Yep, this looks slick.
Does evil exist? Neuroscientists say no.
Javascript VM for Arduino
A GET request for an embedded resource exposes the user's cookies for that domain and associates a user of one site as a user of another. This is fine when it is at the user's explicitly intended request, but when paired with certain sites known not to delete all cookies on logout, this is nefarious and should not be done.
Working beautifully on Windows Chrome 14.0.835.163 Very nicely done!
Made some optimizations, should be better now.
Yahoo owns a roughly 39% stake in Alibaba which is by far the most valuable asset on Yahoo's books. Alibaba has been wanting to repurchase this stake for a while now. With Yahoo so cheap, buying the whole company might be the easiest way to buy back the stock. The rest of Yahoo is just icing on the Alibaba cake (if not an outright liability).

How times change.
Newspapers are the absolute worst at this. Next time you read a paper, take notice of how many times to have to flip to a back page to find the information implied by the title. More often than not, it could have been summarized in the first paragraph.
I don't think it's starvation, it's just a big slow patch. Innovation, just like evolution doesn't work on a smooth continuum but in jumps and bursts of flowering. Neal Stephenson is being observant but unfortunately shortsighted himself by complaining about the natural cycles of innovation.

I agree with his observation that we've become more short-term oriented, I don't agree with his extrapolation of that tendency to the future or the causality. We're not building big stuff because we've become shortsighted, we've become shortsighted because we've built most of the big stuff that was cheap to build with current knowledge. As soon as new avenues open up we'll have another burst of invention.

Fusion reactors have been "a few decades away" for the last 75 years so it's understandable that we don't have as many people interested in that. But I'll bet you that when they're finally made workable enough you will have enough applications of that tech to figure out for the next 50 years.

Same thing with manufacturing. You already have people printing gun parts on 3D printers and trading designs on-line. Research being done at this very moment on metallising printable materials or making stronger composites printable is going to turn manufacturing completely upside down.

19th century was figuring out the applications of mechanical automation, early 20th - the applications of electricity, late 20th - of electronic automation. Who knows what the 21st will be, but I'm sure we'll get out of this slow patch eventually.
You're not an oddball.

I use Eclipse heavily with a few plugins: m2eclipse, subclipse, EclEmma (code coverage), FindBugs (static analysis), and CheckStyle (code rule enforcer).

Being able to navigate the codebase blazingly quick (go to method implementation, class definition, etc) and get a better overall picture of the class (Outline provides the list of all methods, constructors, member variables complete with access modifier) is definitely more productive than anything else.
NASA Contest Heralds Dawn of the Electric Plane
What you learnt on job, that you didn't learn in school
Mozilla Firefox 8 Beta Launched
And I just read it on a smartphone in my back yard in extremely rural Montana.

The room for "physical" innovation is shrinking. But the importance of physicality is diminishing, especially location. Modern innovation seems more subtle and widespread today, than it was when we threw most of our energy at a few big goals.

Perhaps you can't transport your body around the world quite as quickly and easily as you could in the past. You can be there virtually in seconds and at almost no cost.

I'm not sure it's good for us as a species to have the ability to disconnect from the physical world so much. But that's where we are and it seems the disconnect is only going to get more pronounced.
A while ago, Tracfone's web site had a rather disappointing bug. Both the account registration and login flows did password validation, and used different validation functions. The result was that I could create an account with a password containing special characters that the authentication system would reject as containing invalid characters (and therefore not even try to verify against my stored password/hash).

Moral: account registration and authentication must use the same password normalization functions, and if you validate at auth time (which is pointless, but hey), the validation function must be the same as the registration one.

Better moral: just don't do silly things with passwords. Encrypt them and store them, accepting whatever the user wants to send you that's sufficiently long/high-entropy.
Exactly. If you could travel back in time and bring an iPad back to 1985 (and somehow keep internet connectivity with the present) and showed it to someone, they'd probably consider it magical to the point that it must have been made by aliens. It's far too facile for someone in the present to dismiss it as an incrementally improved piece of technology that is no better, fundamentally, than what already existed in 1985.
Err, I doubt it takes less effort to customize Vim.

OTOH, I like to use an IDE like NetBeans to navigate Ruby code (go to method implementation, go to class implementation, etc).

I'd say it depends on what kind of project you're working on. If you're writing a small one-off script in Haskell, you probably don't need to use an IDE. The same goes for Java.

Once you integrated 3rd-party libraries (like not just one, but say, 5 of them), you either have to memorize those libraries or be grateful that IDE can help you.
Ask HN: Strategy to raise money for smaller market size
We have a niche business for a particular industry but with very good domain expertise and traction. We have a few hundred enterprise customers and over 10 paying enterprise customers after just a few weeks since a first product was released. Investors are saying the market size is small. Total addressable market in the US is about 150M$ and around the world 800M$ per year (we are being realistic not exaggerating the size).

Any ideas how can we find investors that don't mind so much if the market size is smaller given that we have great traction, team and other factors which really lower the risk?

Thanks for any advice on this
And I'm guessing your fancy refactoring tools probably don't correctly handle the case where part of your code is in one language, which then automatically builds code in another language to compile into the main project. I've never seen an IDE that didn't get in my way with that workflow, and that's the secret sauce that my programming style cannot live without.

Yes, they do. IntelliJ products are capable of updating XML bindings for renamed Java classes/methods, reasonably good guesses about JavaScript/Python functions used in maps (i.e. with their names used as string keys, outside of the AST).

I don't want to be judgemental here, but it seems like you yet have to meet the really big codebase.
Yahoo's a funny duck: they're an Asian Internet powerhouse attached to a ... searching for a word here... rudderless US tech company.
Union City Real Estate For Sale
Outdoor Weatherproof Television
It says MIT + Apache (V2) in the Scroller.js file ;)
https://github.com/zynga/scroller/blob/master/src/Scroller.j...

I went ahead and made a pull request.
https://github.com/zynga/scroller/pull/1
Based on https://github.com/unify/unify
Think about this.

The first cell phone was developed in 1947
http://en.wikipedia.org/wiki/History_of_mobile_phones

The Internet starts in 1950
http://en.wikipedia.org/wiki/History_of_the_Internet

Tablet computers were prototyped in 1968
http://en.wikipedia.org/wiki/Dynabook

It's the economic improvement since that created the iPad. iPad is not in anyway comparable to the technological innovation in 1960 that put a man to the moon.

It's like someone using VS2010 and C# 4.0 seeing the SICP book for the first time, or a chance encounter with LISP. And you would know we didn't improve that much since the days we put a man on the moon.
What's in which Python?
The ones that got funded recently would probably be more likely to pivot than die so soon.
I think they are also talking about file/directory names constructed from user input.
ITunes Store, Avrupa �lkelerinde
While I agree with the basic premise of the article on complacency and lack of risk taking in innovation, there is another side to this argument that is well covered in Eric Ries's new book "The Lean Startup" on making both innovation and learning what works more efficient.

We seem to live in an increasingly stratified society: much of the work force has obsolete skills and too often a lack of incentive to retrain while a smaller number of people are pushing the envelope on learning new ways of running businesses and new ways to develop tech.
Is floating point math deterministic?
How to Get Someone to Forgive You For Cheating on Them
I find it odd that GAE has lower average response times in Canada than it does in the USA. However, as others have said, the granularity of the study leaves a lot to be desired.
Why Firefox? Why?
Isn't the point of the D in DVCS that this is supported out of the box? What's wrong with:

root@server# apt-get install git-core

git@server$ mkdir ~git/repo.git
git@server$ git init $!

user@client$ git remote add origin ssh://git@server/repo.git
Agreed regarding C#. I've tried using vim as my C# editor, then switching to VS for builds and debugging, but I miss Intellisense too much (and with vim emulator in VS, I don't lose any of my keyboard efficiencies).
Feedback: I'd like to be able to alter the RGB values by entering into the input field, rather than 'press and guess' on the colour picker.
Umm, your XML binding stuff is great, but I would need a refactoring tool to go into Perl code, figure out what bits of it are actually C++ that are going to be output later, and change that. I would be really, really surprised if you have a tool capable of handling that routinely.

It's true I've never really worked on a project with more than a million lines of code, though. My core work is more on the scale of 300,000 lines of code.
Enough with browsers. We need cars now.
Boeing is a defense contractor so no sale would be allowed, and also you are off a bit by the amount of T-Bills China holds. It is just over 1 trillion, and has essentially held steady for the last 12 months.

http://www.treasury.gov/resource-center/data-chart-center/ti...
Ruby on Rails also provide a guidelines for web security: http://guides.rubyonrails.org/security.html
It also makes it hard for users to log in using a dumber input device than usual.

Then there is unicode normalization. OSX might decide to encode "e-with-an-accent" as two code points, while Windows will combine them into a single code point. Users will not be impressed if they can't log in because their OS doesn't use the right encoding and the web site forgot to normalize.
How to Get Paid Watching TV and Sitting At Home All Day Long
In the response, thank the user for initiating registration and send her an email with a link (and a token) to continue with the process.

Of course, the downside is that you're slowing the user down. It's acceptable for the sites that choose to require valid email addresses: if you're going to go there you might as well get it done sooner.

You'd also be spamming potential victims, but that may not be that bad, as you'd also be alerting them.
R610s are going to have dual PSUs, and they have redundant storage arrangements, so potentially they could experience hardware failure but no downtime.

Chance of hardware failure in a modern server in a colo, assuming it's been stress tested to find DOA hardware before being put in production? Low.

A quick spec on Dell's site, rough guess for the SSDs, the web servers are running around $4,000 each, or $4,500 with better warranty. Saving of 6 servers is >$20,000.

It's entirely up to their funding and growth plans and risk acceptance if that's a useful saving, but if they were a ramen-profitable-is-goal-one startup, it would be months of runway.
Locksmith Newport Wales ASY 24 Hour Locksmith Newport South Wales
Re: jumping to method definitions, have you tried running ctags on your project directory, then pressing Ctrl-] (go to tag) on the method name? It should work.
Dave McClure says that his liquid net worth is less than $1M
This has just been announced in the JSConf EU conference in Berlin!
Seems to not work if you use a .png instead of a .ico for your favicon.
I would do this too. Nice way to get someone else to solve your difficult problems for free.
I don't understand what you are saying.

The original comment is based on the assumption that less hardware would still easily support the same traffic level.
"The whole piece of Yahoo,"

Hah buddy, as long as you're a citizen of communist china you're not going to get "Yahoo Mail" nor "Yahoo Instant Messenger"... keep dreaming.
I enjoy Stephenson's writing, and I think he must be a really smart guy. Which is why I'm puzzled by this reasoning:

1) Science and engineering aren't chasing anything audacious and world-changing anymore.

2) The blame lies partly with the fact that we're living in a world changed by pervasive, cheap communications and networking technology that would have seemed unthinkably audacious just a generation ago.

There is an irony here that I would have expected him to see through instantly, but he seems entirely oblivious to it.

Science fiction famously anticipated some real-world 20th century innovations like atomic power, communication satellites, waldos, etc. But it's had a much worse track record with communications. There are no cell phones (or cell-phone-like devices) in Neuromancer. Stephenson's own Snow Crash features an international computer network with a virtual-reality interface that seems incredibly cumbersome and inconvenient compared compared to the actual web.

I think it must be harder to imagine how any given piece of technology will interact with the larger society than it is to make predictions about what the development of a technology will make possible. A VR type interface to the web wouldn't be much of a challenge (technically) by now, but nobody wants one. Second Life is withering on the vine. The video telephone that has been so long predicted by SF is possible now, but it turns out to be more trouble than it's worth except in exceptional circumstances. And when you make it available to just anyone, it turns into a TV show about penises.
I created this account recently. I never posted during the original story that got picked up here (although I did read the comments). And yes, it's me. But you have no proof of that fact.
lol, no, we would not have considered it magical. Based on television shows like Space:1999 we fully expected to have a large moon base and ray guns by 1999. My 1985 self would have looked at the iPad and said "That's all? The battery only lasts for a few hours, it's only two-dimensional, and I can't roll it. What happened, was there a nuclear war initiated dark age?"
Authoring an F#/C# VSIX Project Template
Web Browser Grand Prix 7: Firefox 7, Chrome 14, Opera 11.51
It varies widely I imagine- you can see it on Slashdot very obviously: some stories get 1k comments, others get 50. There is a HUGE variance in interest on stories- and it's not always predictable. But when the planets align, I bet the traffic generated could easily be low 6 figures to a single site, and that would be over 3-6 hours.
to make angel investments in the U.S., you need to be an "accredited investor." this requires that the investor is:

"a natural person who has individual net worth, or joint net worth with the person’s spouse, that exceeds $1 million at the time of the purchase"

or

"a natural person with income exceeding $200,000 in each of the two most recent years or joint income with a spouse exceeding $300,000 for those years and a reasonable expectation of the same income level in the current year"

source: http://www.sec.gov/answers/accred.htm
I'll probably write about that on monday!
I set up the demos here:

http://qwan.org/scroller/demo/

(Thank you, GitHub Pages.)
>US Treasury bills burning a hole in its pocket

The Chinese central government needs to maintain its high level of reserves, because under their system they are also the guarantor for all local and provincal government debt (which is enormous).
Got some very bizarre results, none of which really matched anything I drew.

I suspect this is more down to Google's image matching than your tool though!

Example: http://imgur.com/PvIFT
Total Chinese reserves are $3 trillion[1], of which over $2tr are in dollars, not all in Treasuries, some is in US mortgages etc.

Sure there is going to be some protectionism, particularly around defence.

[1] http://en.wikipedia.org/wiki/Foreign_exchange_reserves_of_th...
增高药有用吗
Introducing Aurora 9
vmware fusion does this too
I don't see what incorporating in the UK would buy you. Payment processing here is a total clusterfuck.
How to be Human, Though an Economist
I have a question about the password policy.

All sites should have the following base password policy:

Passwords must be 8 characters or greater
Passwords must require letters and numbers
Blacklisted passwords should be implemented (contact infrasec for the list)

Is it responsibility of the website to make sure that the passwords are strong for the general user ? Isn't it the user's responsibility to create a good password ? I would think that the site should let the user know about best practices but ultimately it should be up to the user whether to follow it or not.
MBT Amali Shoes
Unfortunately they already did. See http://en.wikipedia.org/wiki/Shi_Tao for the details. Long stories short: Yahoo's Hong Kong arm gave private emails to the Chinese government which resulted a guy being jailed for 10 years. You'd better worry about Yahoo's ethics now. To date, the only mail provider I trust is Google.

By the way, demonizing anyone because s/he is from "communist China" is plain stupid. I'm pretty sure you'll get downvoted on HN.
>Feynman's point that "there's plenty of room at the bottom" is extremely relevant to the modern age; most of our marvels are now Small Stuff rather than the Big Stuff that Neal calls for.

We understand quite a bit more than we used to at that level, but there hasn't yet been a lot of tangible benefit. We haven't sped up the pace of drug development, and haven't developed nanomechanical computers (no Young Lady's Illustrated Primer). We haven't developed Drexler's universal constructors.

Of course, we do have see-through zinc oxide. So there's that.
Be careful, any code you download from there might be trojaned: http://lwn.net/Articles/369633/
If I recall last years events correctly, they (i.e. Jörg Schilling) were not very open in their resonse, some mails from the time describe their information policy as "stonewalling", http://lists.berlios.de/pipermail/cdrecord-support/2010-Janu...
Your Palm in the 90's had a 16 Mhz processor and 1 MB of memory. An iPhone has a 1 Ghz processor and 32 GB of memory. If that's not "much different" you have a strange understanding of scale. And that was only 15 years ago, not 50.
PSN Card Codes Download
PSN Card Codes Download free,
What is Pediatric Dentistry?