skysight-inc/HackerNews huggingface dataset:
PBKDF1 is a key derivation function, it's not designed to be slow (as is, for example, bcrypt)

No that's actually one of the purposes of a KDF:

http://tools.ietf.org/html/rfc2898#page-8
4.2 Iteration Count
An iteration count has traditionally served the purpose of increasing the cost of producing keys from a password, thereby also increasing the difficulty of attack. For the methods in this document, a minimum of 1000 iterations is recommended. This will increase the cost of exhaustive search for passwords significantly, without a noticeable impact in the cost of deriving individual keys.
Non-single-threaded concurrency model for JavaScript.
A local (Chicago) angel/entrepreneur & friend of mine told me that it is a lot harder to get follow through from VCs & angels in Chicago. I wonder if your experience comports with that view.

I personally have pessimistic view on the Chicago area in the intermediate term (5-10.)

Regards,
TDL
That's where I think he is 'discovering' complexity and in fact creating some.

That code and data can both be represented as lists is a major feature of what makes CL so compelling.

And I suppose that is the major contention -- is 'code as data' a complex idea? I say it's simple. There's no difference between the data structure of the code and the data structures the code acts on, so using the same operations on either should be trivial. With a handful of simple evaluation rules and a small number of special forms you can bootstrap an entire language written entirely in itself. Functions, classes, interfaces, namespaces, the whole nine-yards. The list is just an implementation detail and it's a very simple one that enables some very elaborate structures.
I think this is e a cultural distance effect. I belong to a generation and live in a place where Liszt is part of the core. I recognise other places and generations may be different.

Back on topic, I always used to smile when I saw the Lisp interpreter known as Franz Lisp load up. Pity they re-branded it.
IOS 5: Immediate iCloud Backups
Siri biz-nass all up in your Ruby
Groupon to Prevent Employees from Cashing Out in IPO
i'm not a nostalgic guy, but this made me reminisce a bit about how I got to 26 :)
Marshray started getting dead comments for some reason 4 days ago, but his reply to my top comment is extremely relevant:

> I'm not tpatcek, but yes there's a reason why PBKDF2 doesn't do it that way. Because SHA1(SHA1(SHA1(SHA1(...)))) is broken. Approximately 0.8*log_2(iteration count) bits of entropy are lost with that construction.
http://eprint.iacr.org/2010/384

It's not a horrifying game-over break to go from 160 bits of entropy to 154 with 1,000 iterations, but you're not getting the security you thought you were; and there's no amount of personal investigation into the problem that would have helped--this is the kind of thing that takes an ecosystem of very smart people working very hard for a long time.
Taffy.js - javascript data library
Apple Starts iPhone 4S Preorders in 22 More Countries
It baffles me to see WordPress site after WordPress site go down due to a HN hit. All that trouble when you can get everything you need from Blogger for free. Yet everyone looks at me funny when I say I use or recommend Blogger.
Any pointers to how it could be tied to a back-end rules engine?
Cloud Computing for Small Business (Infographic)
You're making the fallacy of assuming whats easy for you is easy for everyone else. As the xkcd comic pointed out, which is easier to remember? "x1.Tlm98" or "trix are for kids!"
It is absolutely beneficial, in most cases, and it's not even a question of having the world's reserve currency.

A look at sectoral balances helps to analyze this: the government's budget deficit is equal to the non-government's (private plus external sector) budget surplus. That's just a basic accounting fact.

So if the non-government sector desires to be in surplus (as it usually does), then the government must run a deficit. If it tries to run a surplus despite the non-government desires, there is a conflict, and someone will have to budge. Usually, the first ones forced to budge are those with the least economic clout. The result tends to be large scale unemployment.

There is nothing inherently bad or good about government deficits (I dislike the sentiment that is so often voiced by politicians, who frame the deficit and debt as a moral issue - those are just numbers in computers, for Bob's sake! Unemployment, poverty, those are issues where morals come into play). It's simply that given the typical long-term private sector behavior, a long-term government deficit is the pragmatic and economically responsible thing to have.
Rumor Says New MacBook Pros Next Week
Hi Antirez,

Looking at the source, you use side-effects to return user objects and such. I've always been taught side-effects are a bad thing that create complex code, which seems to go against one of the goals listed in your README.md.

# Try to authenticate the user, if the credentials are ok we populate the
# $user global with the user information.
# Otherwise $user is set to nil, so you can test for authenticated user
# just with: if $user ...
#
# Return value: none, the function works by side effect.
def auth_user(auth)
return if !auth
id = $r.get("auth:#{auth}")
return if !id
user = $r.hgetall("user:#{id}")
$user = user if user.length > 0
end

Can you explain why you used side-effects?
> While you can install that package and get a half-working GNOME menu system, you cannot get your taskbar or configurable panels back.

Configurable panels: Alt+rightclick the panel
Taskbar: I dunno, it works fine for me.
Yeast Infections In Guys
I've seen this a few times on Github^H^H^H^H^H^H the internet - someone makes a snide comment on an thread, tweets about it, and then a flood of dipshit pile-on comments follow.
Who You Are
If I knew your passwords were all song lyrics, that's already a failure of security.
I think this sounds like a lot of fun if it works. Might provide consultancy jobs for elderly space scientists as well - they would remember what was really in the circuits, and all about those quick undocumented fixes to the software....
beat you to it :P http://news.ycombinator.com/item?id=3139595
"You should never remove code that you don't understand."

Never is a long time.

It's fairly easy for low-skill developers to write code that's time-consuming for high-skill developers to understand. In fact, making simple things hard to understand is pretty much the definition of bad code.

So, you use your judgement. If it's a particularly subtle and important part of the code, spend the extra time to make sure you're not missing anything. If it's not, then just rip it out and don't waste time in a maze of strange control flow, redundant code, useless invariants, and confusing assumptions.
Comments and readable code aren't mutually exclusive.

> Code should be almost as readable as a book. You should be to read without pausing too much as well as skimming.

I pause much more reading code than I do reading prose.

Trying to keep a lookup table of functions and variables in my head is much harder than reading a few lines of prose to let me know what's going on.

Comments should summarise what's going on, so that when you have a bug, you can jump to the right section to change.

> Comments are almost like an annotation in a book. So use them sparingly.

The way I think of it: Don't use comments to annotate your code. Use code to annotate your comments.
He didn't have to take credit for any particular designs, he just took credit for all the designs because of his unofficial role as "taste maker." That's way harder to refute. It's like giving Chuck Norris credit for all living things because he's allowed them to live.
What if Gartner is right?
It would be interesting to log the institutional buyers of it (hopefully none of the funds I own) and track how long they hold it.
The thing that really stands out to me about ICS is the focus on user experience. Duarte seems to have addressed all the little complaints I've always had, and some I never realized I had.

* Moving away from long-presses.

* More consistent app navigation via swipes.

* More usable but still powerful task management/switching.

* Better representation of useful data like contacts and calendars.

* Order of magnitude better camera app, faster, cleaner, with extremely easy sharing built in.

Apparently the UI is finally hardware accelerated as well (though apps have to opt-in), so hopefully it means an end to Android's historically jittery interface.
Sure it can! Instead of threads, you use processes. Instead of shared state, you use message passing.
I will be shorting this stock
FCC Infograph - "Spec It Out" - Consumer Impact of Mobile Broadband Explosion
It's not the half to buy the primary residence which sparked the comment.

It's the half which is expected to be invested in income producing property.

I once worked as a city planner.

If you are ever around people who enforce housing standards, you will learn that absentee landlords correlate with problematic rental property.

There is also tends to be a correlation between what people view as acceptable rental housing management and the culture in which they were raised.

There is no Valley bias in my post...I've always lived in the South East.
I'm not sure who's in charge of Mac software.

It used to be Bertrand Serlet until he left last March. I'm not sure why he hasn't been replaced, at least from an outside perspective (no one is shown as in charge of Mac on the page you linked to).

http://en.wikipedia.org/wiki/Bertrand_Serlet
Also for me, I first didn't get it (at least with those adjustable values in the text).
But the graph is very cool! Some UI improvements and I think it's ready for mom/dad use ;)
It's right there in the article:

"The company's statement cites Qualcomm and the city of Munich as examples of organizations that have conducted large-scale Ubuntu desktop rollouts."
Will this not cause fragmentation again in the near future?
I'm curious as to why extreme examples are "weak" in the context of evaluating a framework to evaluate hyperlinks. Whatever policy the courts put in place, they have to handle both extreme and non-extreme situations.

Following your line of reasoning, we'd accept that building a website with the sole intention of linking to kiddie porn would be OK - because the author of those links has no control over what's on the other side.

As with most discussions like these, the trick is in how to draw the line, how to strike the balance.
When it comes to talk about paying back the debt, that 2TG graph is misleading, though. Throughout the entire period of debt reduction starting in 1950, the government did not pay down its debt. Instead, the economy was growing.

So the graph is misleading in the sense that some people may draw the conclusion that government has used austerity measures, run surpluses, to reduce its debt. In fact, the government did not run surpluses during those periods in which the debt-to-GDP ratio was reduced so drastically. It ran deficits, which helped an already growing economy further along.

Implementing austerity is not going to start a sudden and drastic drop of debt-to-GDP measures in the current economic climate. If you honestly care about debt-to-GDP (why, btw?), you'd do better to stimulate the hell out of the economy.
Yes, here's one [1]. It just makes the iPhone look like your regular hardware keyboard phone.

Edit: and here it is for iPhone 4 [2]

[1] http://www.swiss-charger.com/product_detail_iKeyboard.html

[2] http://www.macway.com/fr/product/22476/ikeyboard-etui-avec-c...
Most likely the underwriters.
okay let me explain...I am not affiliated with Google..just a small 3d party contributor..

The whole reasoning was to get new stuff out there and once the UI solidified than OEMs would update to latest as they no longer would be using customized UIs ..what you are seeing is the very beginning of that process..the market with new 4.0 devices selling will help get OEMs to that point in 18 months where we will only see 4.x devices.

Why? Most if not all dual core and up are GPU based and with Qualcomm reducing costs on the lower end boards you will see dul cores at the bottom end also at the $50 range per handset.

As far as developer-wise yes at first it was confusing..backporting certain stuff than writing to 1.6 with a backported set of ui components but its manageable once you step up and start doing it..and there is an Eclipse extra adt-addons plugin to assist in that it analyzes the api to see if it will work per the min and max target api settings in the manifest
The Secret of a Wealthy, Healthy Lifestyle (on self-control)
Kill the browser. Seriously, the way it's heading, it's turning into a sandbox for applications. So, let's stop pretending and go all the way - get rid of the browser, keep the sandboxed execution.

It would be great if that could be done along with the removal of all the hacks that showed up while the browser was still a document viewer, but that's not likely.
Ah, I see. Thanks for the pointer.
Steve Jobs’ medical reality distortion field
chuck norris looked at this analogy…and it just stared back.

EDIT: there are a lot of interesting people on HN, but there are a lot of humorless people too. enjoy your spectrum disorder.
"the longer the onions have been in the recipe, the longer the recipe has evolved in the presence of onions."

That is just an excellent explanation of why removing stuff from a working system can be so dangerous. Thank you.
What sort of fragmentation are you concerned about in particular?
A standard way to take some HTML/CSS and Javascript and bundle it as a component for use in other web apps.

(Something like Microsoft's HTML Components (HTC) - http://msdn.microsoft.com/en-us/library/ms531018(v=vs.85).as... )
Ten Brighter Ideas
Yes, thanks for putting your thoughts into words. When I first saw this I just "felt" it was pretty cool, but couldn't really explain why.

As a numbers geek one of my pet peeves is that people all too rarely play out different scenarios to help the reader gain an understanding of the underlying model/data/relationships/etc.

Now some sites do this well (e.g. OKCupid's blog), but there is still a disconnect between text and data display. The reader has to play with the graph itself and that does create a bit of a cognitive fracture that I think subtly inhibits a better understanding.
Brendan Eich presented this on jsconf.eu

And he was pretty excited by this.
This is actually making a very strong argument to protect hyperlinks and the right to use them - but to do so under the lens that hyperlinks are free speech.

Much like newspapers have the right to say whatever they want. Of course, there are limitations. People can sue the NY Times, but it's not easy - the burden of proof is on the people bringing the suit. The 'strict scrutiny' standard, as I understand it, would make it very difficult for someone to attack hyperlinking. It does, however, enable that discussion in the case of extreme situations.
Developers have to develop for all three versions. Right??
Am I the only one who thinks perhaps his expectations were too high. I'd be extremely happy if the redesign I'm working on increased the conversion rate by 20%. How is that failure?
hey pudquick. um the reason why it is sending and receiving is because on the previous page (USAGE PAGE), it pings your icloud capacity storage size to the servers (Total Storage/Available). That's why it only increases when you go in and out of the "Cellular Usage" page.

Also that's why it doesnt work when you turn icloud off -- because it doesn't have the storage fields on the USAGE page anymore.

sorry to burst thoust bubbleth
The Sins of the Flash
It's very common to not be able to sell for 6 mos - nothing new.
The Deck that Groupon uses for their IPO roadshow
The Internet of Things and the Remaking the Cloud
Really? Smart move on their part. There's so many talented engineers in the developing world that are 'hungry for it' - Just what startup founders are looking for in a partner.
It could, but fun fact: The US dollar is also a US government liability. (Technically, it is usually listed as a liability of the Fed, but since the Fed is part of the government, that's really just a smokescreen.)

So you would be exchanging one liability of the government for another one. If you are so blasé about high levels of outstanding government liabilities in the form of cash (imagine the amount of physical bills that would have to be printed! ;-) ), then why not just stick with what works today, namely high levels of outstanding government liabilities in the form of debt?

I don't want to pick on you specifically, but man would those discussions on HN be more fruitful if people were aware of basic facts in macro-economic accounting.
I feel the pain. Now I use arch linux with xmonad.
Ridley Scott's Prophets of Science Fiction
I am the creator of YPassword, and each time I asked if my algorithm was secure I stumbled upon a lot of people not understanding anything about cryptography that claimed to me:

"Hey! sha1 is sooo absolutely insecure! Use bcrypt!" :-/

"Hey! bcrypt is sooo incredibly insecure! Use scrypt!" (only implemented in C).

You know what? I finished to read the scrypt paper. In fact _theoretically_ scrypt is far more secure than bcrypt, himself (AFAIK) better than PBKDF1. And the general algorithm behind scrypt is _simple_. Not as simple as sha1^n but almost as simple.

I tried to answer my theoretical question two times now. Each time I never meet any real security expert, only a bunch of zealot. And I know they are all zealot because I discussed with a lot of security expert (searchers) during my Ph. D. And I know far more about security than people reading my question might think. Even if it feels like, my question is _not_ a newbie question. But I am not an expert either.

I try my chance with you dear HNers. Here is the question:

Let

sha1(salt|pass)=S

Knowing "salt" and "S", is there a known attack better than brute force to discover "pass" or sha1(salt2|pass) where salt2 is known and dependent only of salt (for example salt2 = salt + 1)?
Yeah, I think Windows Mango phones are going to be an order of magnitude better (in terms of what a customer can expect buying one) because of the spec requirements.

Although Google merely created Android just to force the smartphone market to be more competitive, I just wish that Google stuck it's foot in the mud more. Hopefully they start a "G+ Certified" to tell customers about continued Google maintenance support or something.
Siri has a little brother called Trapit - a "personalized discovery engine"
I bet 3rd parties will provide a solution if that's not possible out of the box.
Who is Tim Hortons?
Well all reviews go thru HR and its basically safer for you that way.

So your saying that a manager fired you solely on feedback u gave to him? I'm pretty sure that's illegal.

Also you seem stuck on "being right". That's a lonely place to be in my friend.
’I'm Going to Destroy Android, Because It's a Stolen Product'
By comparison, John Lasseter has more power than anyone at Pixar. I think the situation could be similar.

Now, sure, he has to commit to budgets and timeframes but if he really wants something you have to figure it's going to happen.

And of course, he's not the top manager, the CEO equivalent in charge of the studio itself — Ed Catmull is. And yes, everything creative gets picked apart by other directors so it's not like he's the only voice.

But you'd have to say John Lasseter has more power than anyone at Pixar, assuming you wanted to look at things that way.

You could also say he's the creative heart of Pixar.

It's sure nice that those two things match up.

Edit: I explored this subject in my Quora answer on Pixar, Valve and Blizzard for those interested.

http://www.quora.com/What-are-some-commonalities-in-how-Pixa...
I once released a colleague's stuck soda can by ordering one directly above it so it would hit the stuck one and unstuck it.
Interesting article. My current way of developing wordpress themes is way to time consuming, so I'm always on the lookout for better ways to streamline things.
Dangit, I was up to 5 points! And then... splat.
Developers can develop for what they want.
http://noostr.com/ - it's older, but not abandoned. An update is coming in the next couple months with some much needed patches and additions.
What evidence is there that there are groups of nefarious hackers intercepting my shopping session at ToysRUs online store? Why the hell should I be spending my hard earned milliamps on this SSL thing? Certainly if someone wanted to mess with me, they would just whack me on the head in the dark corner of the street.
Paypal isn't ideal for getting money, but for giving money, it doesn't get any easier. Mostly everyone has a paypal account, so adding a paypal email address field to their profile allows for easy scripting of the payment file build process.
I can't give you a definitive answer, but I'll explain why my company chose to use python.

NOTE: We're a technical startup in the telecommunications industry. We build web-based telephony applications in addition to traditional phone-based applications.

1. python's syntax is extremely clear and easy to read / maintain. I can open any python project, and immediately find my way around with no prior knowledge. This makes working in teams especially easy, when you have numerous developers committing various bits of code to various parts of the product throughout the day.

2. In the past two years, the python community has put a great amount of emphasis on documentation for open source projects (using Sphinx), and as a result of this, many open source python packages now have excellent documentation that makes it really easy to start using third party libraries and feel secure in your choices. Just check out http://rtfd.org/ for examples (ReadTheDocs is a hosted open source documentation site, focusing on python).

3. Django is an excellent web framework, and has tons of reusable open source applications that you can use, which makes rapidly developing web applications easy. The Django app ecosystem has been growing at an insane rate over the past few years, and there are more than enough applications to solve most common patterns.

4. Tools like tox, nose, coverage.py, and others make testing in python simple. It also helps that Django encourages testing in a large way (providing a default tests.py module for each application, with example tests). Having such a large emphasis on testing, with such great tools, makes it easy to "Do The Right Thing" and build tests into your software.

5. There are excellent tools in python for performing complex tasks, like celery / redis for building distributed queue processing workers.

6. PyPY (an alternative python interpreter) has been showing immense promise with python speed improvements. PyPY can be used as a drop-in python replacement on any linux system, and yields immense performance improvements to even the simplest code.

7. The python community in general tends to be very friendly, supportive, and encouraging. There are a lot of popular figures in the python community, and the overall personality traits of leading python community figures tends to be humble, helpful, and encouraging. This has fostered a really excellent community focused around accomplishing things, and helping people out, which I think gives the language a good overall feel.

Just my two cents.
While the ideal flow/funnel is to go from persuasive copy to signup in a single visit, I've often found myself going back to a site/service multiple times over the course of months before actually signing up.

It's probably part of the multiple touch points marketing idea. You may really like a service, but have to wait until you actually come across the problem the service is solving before committing to the buy.

The point being, I think it makes sense to have a sign-up button on your landing page (for return visits) AND in your copy (for first time visitors).