skysight-inc/HackerNews huggingface dataset:
I think you are underestimating the complexity of serializing data. Designing, implementing, documenting and extending a format for transmitting raw data is, at the least, troublesome. In my experience, people get confused more easily when they have to remember how the endianness of the processor versus the network effects what order data are in - and you have to start thinking about these things once you have decided to transmit raw data. My claim is that this is more effort than just using text.

Further, I think you are underestimating the benefits of people and other programs being able to read the messages without having to read up on, and reimplement such a format.
http://blog.youporn.com/youporn-data-not-exposed/

It was actually the passwords to YP Chat, not Youporn itself. The Yourporn guys are pretty reasonable engineers and sysadmins, from what I've seen, and manage user passwords correctly.

Personally, I think in 2012, if you're not using a password manager to generate and manage unique, strong passwords per site, especially for "sketchy" stuff like porn sites, you're already doomed.

Also, Presidents Day and other minor useless holidays are great times for annual rituals like tracking down and changing any legacy shared passwords you may have. Don't wait for a breach!
Bonus: it appears YouPorn has no way to change your password, nor any way to change (or even see) the email address that is associated with your account.
The point is that a shipyard could also be run by a number of smaller companies, each doing part of the job, if only they can collaborate effectively. Capital and manpower can be divided between firms.
Well, I got my math right to tweak the index I think and now the system is unavailable. Blasted!
Hollywood tried to get a form of content control into over-the-air broadcasts; they got a lot of pushback and ultimately failed. Now over-the-air broadcasts are done entirely in the clear.

Requiring DRM for the web is ridiculous as long as the content is being broadcast in the clear over-the-air.

Now it's up to us, the tech community, to push back against this attempt at control. The broadcast situation shows definitively that DRM isn't an absolute requirement for the content industry.
Mobile App Platforms Agree to Privacy Principles in Line with California Law
Has anyone ever read http://www.supermemo.com/articles/sleep.htm or put it through any verification? It looks good but I'm no biologist, I've used it as my basis for years to avoid polyphasic schedules and embrace naps and biphasic sleep when my life allows for it.
I'm getting a Remote Host Identification Changed error, did you guys change your certificate or is someone trying to MITM me?
I'm not an expert on this, but I believe the deviation in Mercury's orbit was easily observed and calculated, and thus became in a sense a binary call-out of Newtonian physics. Until highly precise measurements of relativistic velocities is common place, experiments like this are of course valuable and interesting, but one instance of an experimental result like this cannot be relied upon to supersede special relativity.
uh oh, remote host identification has changed... new host or mitm? as this is a cracker-centric event, i'm now very hesitant to reconnect... perhaps you could publish the correct fingerprint somewhere?
>>Why is it so bad to get old? Why do people try to avoid it so much? Personally, apart from having a slower metabolism and a back that aches a lot more than it used it, I don't mind being old. In fact, I like it. I was really stupid when I was young. And I'm still stupid. But I'm LESS stupid now. And I wouldn't want to be that younger person again.

I'm 27. Why? I personally just miss the feeling of having it all in front of you. Pft, a doctor? I can do that. A pro athlete? It's possible. Senator? I can do that. However unlikely those may have been from the beginning, they were at least possible. They definitely become less likely as you get older.

The only thing about growing old that makes me uneasy is seeing opportunities close. Sure, new ones open up, but seeing old ones close still hurts.

I guess also, certain things are experienced a certain way only the first time. The elation I felt the first time I was in live was absolutely crazy - I loved every bit of it.

Other than that, I agree with OP - it's very nice being less stupid. It does, however, rob life of suspense a bit as experience teaches you to expect a lot of things.
"Use bcrypt" is the answer to all those things. Bcrypt includes a salt, which is stored along with the method in the hash string. Hashing is not the same as encryption, so there is no key involved.
PHP already has this: the `disable_functions` INI setting.[1]

Disclaimer: I've never had to use this, so don't know what the limitations and pitfalls are for this, and there may be security concerns that I'm unaware of.

[1] http://www.php.net/manual/en/ini.core.php#ini.disable-functi...
Let me be clear though that I wasn't talking about price. Rather I was genuinely surprised to learn that it wasn't open source, perhaps because so many of the top editors are, because of its persistent popularity in these circles and its dalliance with open solutions, and because I would expect someone starting a new high-end text editor today to want to put the project on solid long-term footing, which to me implies open and community involvement.
Will men go extinct? New research says it's unlikely.
> Not "P", because if the network falls apart sufficiently, the system will generally not be able to progress.

Not be able to progress means it is not available.
same...hopefully it will get resolved soon.
What sort of project management software should I use for a small team?
I'm currently working on a project with about half a dozen other people. Currently we are using sharepoint to track assignments, issues, the overall timeline, etc... The problem is that sharepoint works but is overkill.

I'm just wondering if anyone knows of any good software for a small team would allow us to assign tasks, track issues, and give a good view of overall progress (my boss likes the gantt chart in sharepoint for this).

Thanks.

edit: Sorry, forgot to add that I don't think an online system is an option right now.
Take a look at https://www.owasp.org/ and review your source code for common vulnerabilities.

A very helpful tool for testing: http://portswigger.net/burp/proxy.html
Hack Makes Nook Touch E-Ink Display Almost As Responsive As LCD
The sad thing is, people don't use password managers out of laziness despite the fact that it actually speeds up all of these processes. One password unlocks it, one click to login to any of my sites with strong, secure, unique passwords. Autofills out registration forms and generates a unique password for me. It's faster than me having one memorized password.

Yet, friends and HN hackers alike have scoffed at my attitude which is roughly the same as yours. If you're blindly trusting sites with a non-unique password, it's only a matter of time.

(edit) To get ahead of the repeat replies, LastPass syncs across browser extensions, encrypt/decrypts locally, can be accessed from any browser even without an extension and has mobile apps. I've been using it for probably two years now and I've never not been able to access an account even when using all varieties of guest computers, iPads, etc.
> I hope everyone is using a throwaway password for accounts that can be non-disastrously stolen, and using strong unique passwords for the important ones.

Why even bother with the distinction. Use a unique password for every login. Use something to manage your passwords. If someone is unwilling to generate a password for an unimportant site, they're probably also too lazy to properly generate unique passwords for sites that matter.
New host :). We brought up a new machine for this, and didn't copy over the SSH keys.

Never hurts to be paranoid though.
First Floor Labs Is Accepting Startup Applications
You should note that the SSH key has been changed.

$ dsocks.sh ssh level01@ctf.stri.pe
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
74:67:32:4a:04:b8:9f:05:b6:e8:29:43:26:12:75:11.
Please contact your system administrator.
Add correct host key in /home/jcr/.ssh/known_hosts to get rid of this message.
Offending RSA key in /home/jcr/.ssh/known_hosts:8
RSA host key for ctf.stri.pe has changed and you have requested strict checking.
Host key verification failed.

It may be something harmless/simple like round-robin DNS combined with a failure to replicate the key, or more likely, someone has rooted the box.

EDIT: As confirmed by gdb and ab below, there's a good reason for the key change.
I'm CTO for Manwin Canada and ultimately responsible for YouPorn.

It's unfortunate that people are associating chat.youporn.com to the actual YouPorn.com site, but they are not affiliated at all. It was operated by a completely separate entity, which we've obviously closed as soon as we discovered it. The accounts on chat.youporn.com are different than the accounts on YouPorn. Though as was mentioned, it is probably that some have re-used the same username password combination that is highly unrecommended for all you folks out there (if you read Hacker News, you already know that).

As for password policies, I've been enforcing hashing of passwords ever since joining, though as we inherit a lot of old code and sites we correct issues such as that as we come across them.

I'll be around for a while, if anyone wants to ask questions.
This is a solution looking for a problem.

On the bright side, they can't screw it up any more than the US is already.

On the brighter side, this will be less effective than herding cats. It's like the governments of the world are teaming together to show us all how ineffective and incompetent they are.
I'm estimating they booted a few new EC2 systems up. Right before the system got a new key it was unavailable.
In a world when a unique soc design using the new processes is becoming more and more rare(because it costs a lot), most of those designs have large programmable components , to enable many uses and many chips sold.

Now, if you make the best programmable components, you'll sell most of the chips that use new processes, and thus financially strangle other chip manufacturers.
Yeah, it's specifically the Bay Bridge; since they did work last weekend, it seems to have become a parking lot all morning. Not sure why. It's HOV-3.
Got that also, then keep getting:
ssh_exchange_identification: Connection closed by remote host

Looks fun too!
Can anyone from Stripe confirm that this box is not rooted?
EFF Wins Protection for Time Zone Database
If it were possible to prove that I didn't remember the password to my encrypted drive, would I be violating some law that I could get into trouble for?
This must be a stupid question because I've noticed that it's commonplace, but why do PHP-based projects try to build templating systems in PHP? Do they not realize that the original use case for PHP was to turn plain HTML files into dynamic templates?

I saw this in Horde, the other day; mixed in with the usual PHP tags they had added their own XML tags for doing "if/else" type things in the template. What is the purpose of that?
I've always used mailinator for this. Makes a great site for that kind of thing.
Have you looked into Redmine? Seems like it might fit your requirements. http://www.redmine.org/
Most users have at least 3 browsers (home, work, mobile).
What baffles me even more is how some people actually whip out their credit card and give the digits to a porn site.

Why? Most of the big porn studios are as trustworthy as any other Internet business of the same size, and if your credit card number is misused, you're not liable for the charges anyway. Porn popularized selling DRM-free content for money long before Louis CK made it popular. Porn actors need to pay their rent too.
jira is one of the best

http://www.atlassian.com/

you can download and install local or run in a hosted solution.
Not to worry, we spun up a new machine and didn't copy the ssh key from the old one.

2048 74:67:32:4a:04:b8:9f:05:b6:e8:29:43:26:12:75:11 /etc/ssh/ssh_host_rsa_key.pub is correct.
Looks like government doesn't like either, http://online.wsj.com/article/SB1000142405297020391830457723...
"Add in to this that the terms in the immediately previous sentence were exaggerated"

This isn't true, and that's my point. If you take out the last paragraph, it could easily be a serious statement from many people around here.

"In Canonical's case, it's an even worse idea, isn't it? Why spend engineer resources targeting the tiny Android market rather than the huge desktop ... market?"

What is exaggerated? Oh, maybe adding the word Linux makes it an exaggeration? I think my point holds that sarcasm doesn't come through well in text!
You don't mention what types of projects, and you don't mention the usual Mac/PC/Linux/etc. qualifier. I'm guessing Windows because of the Sharepoint reference, though.

On the offchance you're on Mac . . . . Daylite from marketcircle.com is what we use for project management/task tracking/calendaring for a team of 4 people.

I would say my recommendation is "Damned with faint praise" and if there were a plausible alternative I would probably look seriously at it. But there doesn't seem to be anything else for the Mac.

Don't buy Daylite Touch for your iPhones (if you use iPhones). Absolutely positively do not buy their time/billing program -- what a little piece of antimarketing THAT product turned out to be.

No GANTT charts in Daylite, though. Your boss won't be happy.

I too looked at Sharepoint and ran screaming.
I'm going to guess that there's a significant subset of YPChat users who also created YP accounts and also used the same login credentials for both...I mean, how many users who are savvy enough to create multiple-logins/passwords for a site and its chat subdomain would even create an account (one linkable to their identity) on YP in the first place?
I don't use a password manager because I don't always use the same computer. As a student I use a number of different machines on campus. A password manager would be extremely inconvenient.

I do, however, use a simple templated password. By including a few unique characters (following an easy to remember formula from the sites domain name) in an already strong base password, I can use dozens of unique passwords without any special environment.
Bing Make a Good Search Impression with Bing’s Linked Pages
LastPass syncs across computers, can be opened in a private browser (decryption in the browser) and they have mobile apps.
The thing with password managers is that the most convenient ones store your data in a server somewhere. And that opens up more issues than it solves.

For the ones that store information in a local file, that could work. But then a lot of the mobility is lost, even if you use something like Dropbox (you are not going to sync behind a corporate firewall, for instance). At least my brain is attached to my head and is very portable, I just have to remember the damn things.

That said, do you have recommendations?
Top 10 domains:
1469 yahoo.com /
1071 hotmail.com /
882 gmail.com /
205 hotmail.co.uk /
178 web.de /
136 gmx.de /
127 aol.com /
116 hotmail.de /
115 live.com /
104 hotmail.fr

Top 10 passwords:
110 123456 /
75 123456789 /
30 12345 /
23 melinda /
19 fuck /
18 1234567890 /
17 Nightmare /
16 allzen /
15 password /
15 anal

That's of about 6400 records.
It would be fantastic for apple, but not so sure about intel.

Remember, intel are right now trying to bring atom-- itself not even on the 22nm process yet-- to exactly the space that the A5 occupies. It would seem suicidal to give away their process advantage against ARM at exactly the time they are pushing hard to get Atom caught up with their lead process (going 22nm next year and 14nm the year after; the same time as their full power processors).

It will be interesting to see if there are any high end ARM chips made at intel, or if they just stick to areas they deem to not be competing with them (which can't be a lot that needs 22nm?)
Here comes the FUD in advance of a Govt. crackdown on hacktivism. Cute.
It really needs to become the default at account creation.

I'm not sure how best to make it part of the site sign up process on the server side. The other hassle is you now really want to also link mobile platforms, so unless you're all apple, it's kind of tricky. You could possibly do a web-based password manager instead of something local (there are a few options), or if you're all-apple, 1Password (which doesn't even work perfectly on iOS).

The other way is to just move everyone to Facebook Connect or other third-party identity services, but there are a bunch of problems with that. If there were a single-signon provider which were only single signon, vs. profiles and all the other stuff, it would be more acceptable, but even then, just linkability of all your accounts is a security and privacy compromise, as well as being a single point of attack and failure.
I wouldn't trust a site like that with my Gmail contacts.
I would never trust the fundamentals of my source control, or build system to a SAAS. I could see putting the actual builds, and the primary source control in SAAS, but if I don't know that I can make a build when shit hits the fan, and the service goes down, even with a lot of work, then that's a no-go.

In other words, combine with my build and source control system, but don't force me into a proprietary build system which I have no migration path off of, if you go belly-up.
I answered the other person that replied. LastPass syncs across browser extensions, you can access your data from their website, it's all encrypted/decrypted locally and there are mobile apps so you can always access them securely even if you don't trust the guest computer.
Something about that URL tells me you didn't always mind if people associated the two together.
I didn't realize anybody used other sites for video :)
AWS ElastiCache - Now Available in Two More Regions
both. the longer you are asleep the more dehydrated you are, exacerbating grogginess.
Thank you for your advise. I would like to add few comments. If I post the link of my prototype, wouldn't that beat the purpose of going stealth? I am not ready to reveal it to the whole wide world as it's still not a clean prototype. Unless the project has a team that is committed to it, at this point, it's best to go stealth.

It's a matter of chicken and egg, I guess. I am looking for someone who is interested, but on the other hand, how do I make you interested...

However I am open to let people know more about the business. It's a rewards idea where customers is getting rewarded for being a loyal customer. I have created a whole new concept around it and as of today, i have not yet seen a startup that has similar approach. I have seen some that are similar, but not the same.

I could, if I would, launch it all on my own, but at the end, to be able to establish a better start for this project, I would need a technical co founder for funding, incubator program, brain storming, and ad hoc improvement.
Marie Colvin Eye | Hot Gossip
The clickable area may seem smaller, but the hit box for the button is actually larger than the graphic for the button (presumably to avoid the fiddly issue you were highlighting)
From the perspective of a web developer, what I don't like about Facebook Connect is I give up ownership of my user accounts.

In other words (unless I ask for and maintain separate user tables), all the login credentials stay with Facebook. And if they ever decide to stop supporting my site, I lose all my users.

I'd be willing to pay for a FB Connect like service if I trusted it (which would probably mean the ability to download login info on anyone who connected, so I could roll my own user management whenever I wanted).
I think it is more of a public service announcement, because it is a very popular site and yes, a lot of people on HN probably use it.
> I don't think an online system is an option right now.

Why is that?
Or you could just use the dash or period as delimiters.
Yes, it would be highly appreciated if someone can post notes or throw a related URL..
Vidiom - open source Android app for video capture and web video publishing.
Did you really want to discuss your results "ahead of time"? You could easily do it before publishing them. My email address is in the manual of stunnel.

I could argue whether an old Ubuntu package is "out of the box" stunnel, or whether sending 20mbit stream of compressed video is really the most common use of stunnel...
You can switch a rooted phone into "tablet mode", but as far as I know nobody has come up with a way to do this automatically when you connect the MHL cable.

http://androidcommunity.com/trick-your-galaxy-nexus-into-usi...
There are several options which use remotely-saved, decrypted-in-browser password safes. You're still vulnerable to keyboard logging if you're using random systems/hardware. Accessing secure services you care about from multiple locations is not a good security practice.

If you carry a smartphone, there are several password safes available for these as well.

Clipperz (web-based) and KeePassDroid work for me.

On my primary systems, a simple text-based database GPG encrypted.

Your password template may or may not be good practice. From random cracking, probably safe. If someone takes a particular interest in you and has prior knowledge of your scheme and several revealed examples, other passwords may become discoverable.
I don't think my boss will be open to it.

Feel free to suggest and I will bring it up next time I meet with him.
If you are looking to implement your server-side logic in Clojure, our Custom Code feature does support it as well as Java and Scala. Let us know if you have any questions: support.stackmob.com
It should be trivial to determine which accounts have the same passwords, are you taking any proactive steps to help secure these accounts?
This is simply a terrible title for this article.
I suppose at some point the old owners did want to make that association. That deal was in place since 2008, we've been managing it for less than a year now.

We've been focusing on the rewrite of the main site and are now cleaning up all the secondary dependencies.
References, many by Ekirch but not all:

http://www.history.vt.edu/Ekirch/sleepcommentary.html

http://en.wikipedia.org/wiki/Segmented_sleep

http://www.historycooperative.org/journals/ahr/106.2/ah00034...

http://www.sciencenews.org/sn_arc99/9_25_99/bob2.htm

http://www.psychiatrictimes.com/sleep-disorders/content/arti...

http://onlinelibrary.wiley.com/doi/10.1111/j.1365-2869.2008....

http://www.nature.com/scientificamericanmind/journal/v17/n6/...

http://www.psychiatrictimes.com/sleep-deprivation/content/ar...

http://www.ncbi.nlm.nih.gov/pmc/articles/PMC2647798/

There is very little criticism of this, both modern studies and research of historical language and literature find the same thing.
Following your edit, I find it remarkable that they referred to themselves as Keiretsu well into the "Lost Decade".
I misread that as "colocated woman".

(Edit: This comment made sense before the title was edited.)
Pinterest seems to have take a page from Spotify and WaPo with their "sure you can turn wall notes off...if you ever realize that we're doing it" approach. Easier to ask forgiveness and all that.
We have developers using both windows and mac. We have 2 parts to the project, one is a flex app and the other is iOS.

He likes the gantt chart, but if there is another good solution then I think he would be fine with it.