skysight-inc/HackerNews huggingface dataset:
A salt will not remain secret if your hashes are compromised, its always going to be a trivial step to also grab the salts.
I agree that an auto-advance version of this would be very nice. Simply sit and watch like a JavaScript-powered video.

(a video without something stupid at the end, followed by that same stupid thing in slow motion)
Ubezpieczenia podróżne
Zapraszamy do zakupu najwyższej jakości ubezpieczenia podróżnego dla podróży jednorazowych, dla wyjazdów całorocznych, oblicz składkę.
Jugar Ajedrez : jugar ajedrez en Peon ocho
The idea is that would be detectable because the recipient would no longer be able to view the actual link and the password can be changed again.
Ultimately, data integrity is the same thing as data security. If you cannot trust your data not be detectably corrupt in the face of a malicious collision attack, you do not have data integrity. Collided data can be used to cause a DoS, to overrun buffers, any number of nasty things that arbitrary user data can cause when trusted implicitly.
GeoSurf Plus Review - Surf locally without being local
Don't assume what a news source presents as a quote is actually a quote. God knows what Miller actually said.
I think the problem with such essays is that the authors extrapolate their own experience and think it can be used as a template for everyone. We are told how to get rich, become successful, date a beautiful women, write the best programs, influence people and so on.
So how do you prove the DDoS vector exists unless you DDoS someone's site?

How do you prove the SQL injection vector exists unless you take over someone's site?

etc., etc.

This was far from a harmless proof-of-concept app, and "I just wanted to prove I could" isn't sufficient justification for it.
Marx's take on the labor theory of value doesn't argue that everyone is compensated according to the labor they put in. In fact his whole point is sort of the opposite, closer to yours, arguing that workers are not typically able to capture as income the value of the labor they produce, and in fact it's quite possible to produce a lot of value and get nothing out of it, depending on the way your labor is used within modern capital.
Letters to Amanda
So your argument is that the arrest and ongoing prosecution of Assange(sp?), the shutdown of services from paypal++, visa, master card, bank of america, Western Union and Amazon had pretty much no noticeable effect on donations, was not the result of a coordinated effort by the US government and the real reason donations are down is because they haven't released any more leaks?

sounds entirely plausible to me. would you like to buy a bridge?

++Hendrik Fulda, vice president of the Wau Holland Foundation, mentioned that the Foundation had been receiving twice as many donations through PayPal as through normal banks, before PayPal's decision to suspend WikiLeaks' account.
Sure it matters.

If you don't have a reasonable salt then you're vulnerable to time/space tradeoff attacks like rainbow tables/etc.

Also, in case you haven't used it. Scrypt is pretty damn awesome. It's designed to be memory hard, which makes it very hard to crack even with GPUs.
GoLite Men's Demaree Canyon 800 Fill Down Jacket
Bill Gates explains his support for a Tobin tax
I greatly doubt that it is faster to compute on the fly then to use a rainbow table.
If they "click out" and move onto another message, they'll probably never read your email again. So for the marketer it's the same as a delete (and likely is an actual delete).

If they click on a link inside the message, that shouldn't get counted as a delete.

Feel free to ping me with more questions - aarlo@mirapost.com. Always looking to chat with others in the email world :)
"Here’s the catch: if you’re routinely using a lot of cellular data, then the service reserves the right to boot you."

Like every carrier, there is no such thing as "unlimited".
Not sure I agree with this. Less scrupulous developers might use this to download code that does things, even from a sandbox, that are bad for users. For example, it could download code that reports your usage habits to third parties, or saves your CC number.
IPad 3 To Utilize New Backlight Design For Retina Display
I'd love to see Gabriel weigh in on this. I wonder if Duck Duck Go will be able to take advantage of this resource?
I don't believe you understand what the salt is for.

You use a salt so that time/space tradeoff attacks are no longer viable. All you need to do is provide a few bits (say 20) of entropy to make them infeasable.
Well, I thought it was assumed :) ... since salting a hash has inherent vulnerabilities if you're not doing it right and HMAC is a sane way to do it.

I really don't get this argument that since MD5 is fast to compute, that's the reason it is vulnerable. That's not true, MD5 is vulnerable for other reasons, like collision attacks are possible, preimage vulnerabilities were demonstrated, huge rainbow tables are precalculated and so on and so forth.

However, HMAC_MD5 does not have the same vulnerabilities and increasing the size of the salt increases the time of a brute force attack exponentially. 62^256 is a freakishly big number and it doesn't matter much if you divide the work by 100,000 computation units. But if that makes you feel uncomfortable, you can always increase the salt to 1000 chars.

And I simply don't buy that we have enough computation power in this world to brute force something with 62^1000 computational complexity.
Agreed. So imagine what this other company's coverage will be like - and they aren't owned by Sprint like Virgin Mobile US is. (incidentally, if you update your PRL on your Virgin phone to a Sprint list you get better service...)
For one, he could have submitted it and then have it "held for developer release" — at which point he told them about it. There's no reason he had to have it actually in the App Store here, even if he wanted to test the approval process.
The big difference here though is that the "right to boot you" only applies to the cellular data.

If you stay on wifi all the time, it really is unlimited (or at least that is what their site would have you believe).
Maui Jim Peahi Sunglasses - Polarized Tortoise | Trends at a Glance
But, but, Trent Reznor! But seriously, I'd rather pay for better photos. Their intentions are in the right place though.
Not necessarily. Remote exploits, definitely, but entirely local jailbreaks that require booting the phone into a specialized firmware-loading mode don't actually impact the user's security, just Apple's anti-tampering guards against the user.
Having the exact salt in the same database as the user data defeats the purpose of the salt.

Normally you have a global salt, somewhere in your source-code, which you combine with the per-user generated salt. It also doesn't have to be something obvious in the database (like a column named user_salt :)), you could just use something like HMAC_MD5(global_salt, email + username + joined_date) for each user.

Of course, this may seem like security by obscurity, but even in the case of SSH you keep your private key safe and as a business if you have both your database and your source-code compromised, you're fucked anyway.
I don't think there's any such thing in the universe as "unlimited." ;)

But seriously, if you're using the phone on Wi-Fi, which is where the vast majority of people use their phones, then the only cap is the one on your broadband connection (usually at least 200 GB). I would suspect that for greater than 97% of cell phone subscribers, Republic's data limits are not going to be an issue.

And frankly, I think it's high time a new carrier disrupted the AT&T/Verizon/Sprint/T-Mobile oligarchy.
Wrong.

http://en.wikipedia.org/wiki/Virgin_Mobile_USA
"wireless voice, messaging and broadband data services to subscribers throughout the United States via the Sprint Nextel CDMA PCS network"

http://en.wikipedia.org/wiki/Boost_Mobile
"Boost Nationwide Unlimited (AKA Monthly Unlimited Plan), which differs from their previous UNLTD plans, is offered for iDEN handsets as of January 22, 2009 and CDMA as of January 2010"

The reason you have sucky coverage is the PRL list is much more limited for Virgin phones and they don't allow roaming. Update the list and get better signal.
Would you mind elaborating about (b) more? Thanks!
Auto Keys Salt Lake City
Nothing in the App Store review process will allow them to catch a zero-day exploit. Coming up with a zero-day exploit in IOS is very impressive - but, by definition, once you have it, the App Store review process isn't going to catch it.
You prove DDoS vectors exist by DDoSing your own site, or one you have permission to work on. Same with SQLi vulnerabilities. If you want to report a vulnerability you've found to a company, include a working exploit in your report, but don't run it. If the company ignores you or tries to brush the vulnerability off, that's where it gets hairy and responsible disclosure comes into play.

We don't know what his level of communication was with Apple, but it doesn't appear that he notified them before testing this exploit. Had they refused to address the issue or otherwise brushed him off, this would be a reasonable escalation. The same story on r/netsec [1] is being linked to a Forbes article [2], which claims he notified Apple three weeks ago. That's not a ton of time.

Ultimately, he very much violated their ToS and Apple is well within their rights to give him the boot. Whether that was a smart decision on their part remains to be seen.

[1] http://www.reddit.com/r/netsec/comments/m48gx/charlie_miller... , http://www.reddit.com/r/netsec/comments/m3uwo/mac_hacker_cha...

[2] http://www.forbes.com/sites/andygreenberg/2011/11/07/apple-e...
Darn, I miss Lost.

Well, Seasons 1 and 2 at least.
I also have a few questions to ask which supports separation of content and presentation:

Have you ever worked on a project that used inline styles on almost ever paragraph or heading? If yes, you will instantly know much of a pain it is. If you've ever transferred said content to a totally different design you should be scarred by this experience.

Have you also tried adding a page to a website that uses a table-based layout (the prime example of presentational HTML)? When a modern design is fit onto one of these layouts, adding content becomes a really painful experience.

I can see first hand the benefits of good separation.
Characteristics of an Educated Man
There's more to it than that. Board members of large corporations tend to be CEOs of other large corporations. Not only do they see each other at charity events and such, they have a vested interest in not being too hard-nosed about compensation.

The question is why the shareholders put up with it, and I don't have an answer to that question.
or c.) random chance.

Kuhn would say that science consists of long periods of "normal science", in which people flesh out basic theories that have been known for decades, and short periods of "paradigm shifts", where previously ignored evidence is suddenly incorporated into brand-new, world-shifting theories that completely upend the old order. Just because you happen to be in one of those long doldrums of normal science doesn't mean that something is wrong with science, or that the field has stagnated. It just means you're not in a revolutionary paradigm-shifting phase.
Same here. I found this patronizing and nearly the opposite of relaxing - it reminded me of 10th grade English teachers bringing in mood music for a freewriting exercise.

http://www.workrave.org/ is a much better solution for this kind of "break excessive computer addiction," IMHO.
You are allowed to manually enter time entries through the time entries link in the menu bar.

There you can modify or add as you please. No cheating though ;)
Be sure to try shift-option-volume, assuming you haven't installed Lion.

I'm wishing I hadn't. Sigh.
Web Design in Modesto
Stunt Blogger is the newest web design and WordPress consultant company in Modesto, CA.
Industrial Degreaser
Ecolink - EPA & OSHA Compliant Industrial Solvents & Degreasers, Solvent Replacement, Support & Chemical Management. Green Solvent Technology 1-800-886-8240
Ask HN: Review my Startup - The New Social Times
Hi everyone,

I'm looking for some feedback from the HN community. To give a little background information, a friend and I, both non-technical, decided to work on a startup last year and applied to YC Summer 2011. We weren't accepted and eventually pivoted our idea into something else around June.

The New Social Times is essentially a TweetDeck for news. A way for users to find top news stories across the web via social media, displaying results on a single page. We launched in Washington, DC a couple days ago. At the moment we're focused on gaining early adopters/serious traction; there's been good movement so far!

I'd really love to get some feedback from the HN community. Any comments would be greatly appreciated!

Check out the site at: http://www.thenstimes.com
Try Vox: http://www.voxapp.didgeroo.com/

It's a small (and free) music player.
But isn't the SSH private key also stored in plain text?

I mean, yeah, you could also have a password for that key, but then most people use ssh-agent because typing that key every single time is annoying, which means the password is somewhere in memory. Or you could just install a keylogger on it and wait for the user to login.

If the user's computer is compromised, a hacker could gain access to his SSH credentials. Isn't that still security by obscurity?

And if you gain access to the source-code and to the database, I'm pretty sure you'll end up in a position to modify that source-code anyway, thus finding user passwords by simply logging them somewhere.

Security is a complex topic and relying on the slowness of an algorithm like bcrypt doesn't make me feel any safer, as people can always come up with a faster bcrypt. Instead we should rely on computational complexity, because no matter what we do, unless quantum computers become a realy, there are limits to what we can compute when exponential complexity is involved.
Driving theory test exam preparation software
A unique resource representing Driving Standard Agency (DSA) official theory proof exam preparation representing both cars and motorcycles.
Revolution of iPhone App Development
Degreasing Solvents
Ecolink - EPA & OSHA Compliant Industrial Solvents & Degreasers, Solvent Replacement, Support & Chemical Management. Green Solvent Technology 1-800-886-8240 begin_of_the_skype_highlighting (1-800-886-8240)
From Wikipedia:

The copyright owners for the images and music on the actual record signed agreements which only permitted the replay of their works outside of the solar system
Fifteen years ago there was no "Facebook, Twitter, Google+, Match.com or even GrubWithUs"... I was barely able to dial up on the nascent and overpriced Wanadoo at that time.
How to Promote Your Site With a Social Bookmarking Tool
Using the data in Founder's at Work, and making some reasonable assumptions about the dilution of each round, his Viaweb exit was personally worth (before-tax) ~$10M in June, 1998. The exit was in Yahoo stock, which would gain ~17x, reaching a high of $118.75 a year and 1/2 later. So, anywhere from $10M - 170M from Viaweb.
This is pretty cool. Who made this (just curious)?
It makes it very easy for people to steal vast amounts of your content and republish it on their own sites, with ads all around it.

Many content sites have protections in place to recognize bots by their behavior or use "honeypots" to tell bots apart from human visitors and thus avoid large scale content theft.
Examples And Description Of Haiku
awesome interview! thanks for sharing the link
Yea, they just tackled on Wi-Fi onto it. Thinking about it, I wonder if (maybe together with Tucows etc.) they could lobby the FCC and Congress to solve the problem, for example. Of course, it would not be that simple, but...
I found it sometimes to be a positive effect. Many times when I felt bad I listened to my favorite touching/sad songs while working - they tend to suck the emotional entropy out of me and help me focus on task at hand, while my emotions get 'aligned' with the song.
STEP progress report [pdf]
Maryland home loans are a latest and modern concept 
There are also websites on the internet that offers detailed information to the person needing loan money. In case one is looking out to take home loan he or she can visit these websites for their need and purpose. Insurance policy secures the money spend on purchasing home as there are numerous risk factors connected with home maryland home loans are a latest and modern concept for the general masses.
Los angeles teeth whitening 
Find the best dentist in Los Angeles for restorative, cosmetic and general dentistry. This may include teeth whitening services in brentwood, westwood, Santa monica and Beverly hills Get to know more about how the patients are treated!
RFC1149 had atrocious enough RTT already. IPoOB would be downright insane.
You mean the dark ages ? And of course, times in history when living was actually worse than in the dark ages.

I love how people think today. My grandfather was a colonial doctor, and he actually participated once or twice in a group that approached a tribal society, with more than enough food for all members of the tribe. They did the very same thing then as a completely unrelated tribe on a different continent did to the national geographic crew that approached them.

http://www.neatorama.com/2008/05/30/uncontacted-amazon-tribe...

Those "plentiful" societies are very different, but they share 2 properties :
1) it's law of the jungle. Kill or be killed. Being a member of the tribe basically entitles you to not be automatically attacked the moment they see you. That's it.
2) the most progressive form of government to be found there is a violent dictatorship, with violent "revolutions" every few years. (the worst ? The same, but every few months). Regularly the new leader decides to eradicate half the tribe.

This is what you're referring to ?
Student subsidies are less than 1% of all social security spending in Denmark.

Also, most of even that 1% it is wasted. The majority of people fail, even with this more than generous government support.
Testing Entity Framework applications
I don't buy the argument that Gates became rich because of IBM's "blunder" with DOS. When Windows was released Microsoft almost had to start over again. They had both a good product and the right business model by horizontally integrating with ODM's and realizing that the value in software is in platform. Then he went and did it again with Microsoft Office.

Bill Gates created some of the most profitable and efficient business units that the world has ever seen, and he did it more than once.

It just happens that he took advantage of IBM's naivety the first time, but that was only a blunder with hindsight.

To add, I think being rich is overrated, and that it isn't a coincidence that the biggest influencers and successes in our industry don't care about money.
Internationalization (I18n) API in Ruby on Rails 3
Boutique Hotels Sri Lanka
PhoneGap 1.2 is released
> As long as CSS was capable of formatting a
> reasonably-constructed document (titles before text,
> left-hand elements before right-hand elements) without
> hacks, I'd be happy.

What hacks do you need to do that?
No, it's a crap comparison...

Focus varies, exposure varies and I'm shure the stability of the person taking those pictures varies too.

It tells nothing about the quality of the camera (hardware) or the software (in phone post processing).

Meh.
Opera (11.52) user here. Video goes black after clicking play. Awesome site, though.
Hacker News Tokyo Japan Meetup #9 – Friday 18th of November
Does MailGun also offer SPF/DKIM detection?

I've been looking for something like this and MailGun looks awesome, but we need to be able for (sub)domain owners to require DKIM for security reasons.
The Easiest Way to Transfer Photos from iPad to Mac?
It may be true if HN code was written before 2001.
haha this was exactly what I was thinking. Someone should talk to him about littering.
Solar blinker
Ashuenterprises is a manufacturer & wholesaler of road safety product offer spring post, convex mirror, solar blinker, reflective sign boards, solar Road studs, reflective sheet, linear delineation system, traffic safety signs.
That you fail to mention, that table layouts make a lot more things annoying or impossible to achieve.
Why I Don’t Give a Crap About the New Google+ Pages for Businesses [COMIC]
> But isn't the SSH private key also stored in plain text?

Not if you passphrase-protect it.
I have to be honest and say that this isn't true in the scenario I describe. They're all dentists who own dental practices - the ones we cut deals & make discounts to are the ones who generally give the most pain.

The whole point in offering the discount is destroyed due to the financial cost of the headache involved.
Nova Spivack said that the crawls have been going for several years. There's a good chance that many of the pages in the archive are unacceptably outdated for indexing purposes.
The question of what Math should be taught at school is a hard one. Unsurprisingly, a lot of thought has actually gone into curriculum design, but unfortunately this is an area in which everyone has an opinion, and quite a lot of politics gets mixed up in there as well.

The writer has a perspective that is probably valid for him, but I think the problems is a little more complex than he lays out. He does seem to focus on the areas of Maths that he has found useful in his own field. However, no matter what field you go into, if you expect the Math you learn in school to be actually applicable and useful, you're going to be sorely disappointed. Most of maths education is exactly that - education. Not training. A large section of students are totally uninterested either way, of course.

I've seen some horrors perpetrated in the name of "contextualising math". What we currently have is definitely up for improvement, but I think if this guy actually gone down to trying to implement his suggestions, he would find it a whole lot messier than he thinks.
This would work great for me. I am on wireless with my phone about 95% of the time, and only on 3G when in the car or shopping I guess.

If I can still use 3G when I absolutely need it, with no "real" limitations, but stay on my wifi otherwise, I'd be golden.

Now, I just have to wait 2 years so I can subscribe.

EDIT: Maybe they can add a $29 per month contract and buy me out of my old one :)
Hospital Service Funny Doctor Jokes | Pinoy Pilyo | Tagalog Jokes
Anyone know what music is that?
This is the future, and it is time that it happen. I was talking about this to a friend on the weekend - that cell phone companies are enjoying the last years of being able to confuse consumers to profit.

Deciding on a cell phone provider should be no different to internet providers - pay $20, $30 a month for a connection (unlimited) and that is that.
I thought that was awesome. Discovering this on info-fueled hacker news made it more special.

I'd make several changes:

#1 Fix the F-11 message. Is this an IE thing? Do a browser detect, and display the right message.

#2 Get rid of the share on Twitter links at the end. just tacky.

#3 Get rid of the countdown. 30s break is cool, but countdown display speeds time up. Make the countdown hidden. If the user presses spacebar before 30s is up, should say "try harder" and reset the countdown.

#4 get rid of the cursing wasn't that funny

Anyways, I really liked this, especially the music and the white space.
Apple security experts found Bug in Apple Apps……..
Hidden iOS 5 Panorama Mode
Ditto. The month-to-month service is extremely appealing for those of us dragging around the ball and chain known as AT&T. :(
3099 of the replies were fines for littering.
Also by having music and asking for a donation of $1. A donation for what, exactly?
A word about the website, especially the Hello, Cinder tutorial: Please make the links more visible, thanks :)
Response to Knyle style recruiting - or, why I got into recruiting.
Zed has the balls to post stuff under his own name.