skysight-inc/HackerNews huggingface dataset:
I already asked in the comments of the original article how many rounds of sha1 are used. SHA-1 still isn't the best, since it yields to FPGA attacks, but a single round can brute-force all 8 character passwords in less than 2 days on a GPU. My guess is that 10k rounds of sha-1 would probably not be feasible for non-dictionary attacks without specialized hardware.
This is a job with a flexible, smart team where you can bring your great ideas to life in short time frames. We believe in capital "L" Lazy. Bring your automation skills and make the computers work for you! Cheers, Jim (PowerReviews CTO)
Articles about bandwidth should try to get the distinction between gigabytes (GB) and gigabits (Gb) correct; otherwise, figures will be off by almost an order of magnitude.
Asynchronous WePay Client for Tornado
Imagine an environment where you did TWO things:
1) You gave your opinion immediately without fear for others thinking of you as an asshole.
2) You thought about it for more than 5 minutes later. You might even think about it for hours later that night.

It's not one or the other. Both are very important. I've seen more annoying and bureaucratic things happen because people are too afraid to say what they think. Not because people think too less.
An un-targeted email blast isn't a great way to build a relationship - but a message sent to a specific segment of your audience might be just as effective as a message sent to a single person. Founders are constantly making tradeoffs - I'm advocating for trading a little personalization (sending to a group instead of to an individual) for a lot of time savings (sending one message through MailChimp instead of sending a personal message to each person on your list).

Yes, you should have a personal relationship with your investors - but sending all your potential investors the same "progress update" is just as relationship-building as sending that progress update to one potential investor at a time.
New York, NY (Tribeca/Soho border)

TigerTrade (https://tigertrade.com) is revolutionizing the way global sourcing is done online.

Hiring:

Frontend Engineers - http://bit.ly/wkZ7yg

Backend Engineers - http://bit.ly/wDmSbU

Both positions will be first hires and work directly with me to build out our product offering across multiple delivery platforms (web/mobile/api/carrier pigeon) and reach a global market of buyers/suppliers/service providers. This is an amazing opportunity for someone who wants to have a large amount of responsibility and say in not only what is built, but how we go about building it (Lean + sprint.ly + validation === fun).

Currently the stack includes a custom build of Nginx, PHP5.3 (lithium), MongoDB, Redis, memcached combo, and that grows as our needs will. Local sandboxes are configured using Chef, Vagrant, VirtualBox, git - and it comes with a MBP w/ display(s) of your choosing to boot.

If you're passionate and smart (and know Python/Java), there's going to be a huge opportunity for some serious data analysis, recommendation and visualization as we build out our discovery engine based on the huge amounts of manifests, trade documents, behavioral and product data that we aggregate from and about our industry.

We're funded, we're growing, we enjoy working with each other (but we like to go home at the end of the day as well), and we'd love to hear from you.

techjobs@tigertrade.com
That link 404s for me.

Clicky: http://blog.serve2.com/
It had to be decrypted to be used. It was in use. Ergo...
Does your CRM have an API? Perhaps Wishery could integrate with Less Annoying CRM!
Bitsavers.org - Ancient Software & Docs
Consistency. Since $a[0] is a string, you would expect $a[0][0] to work too.
It will be interesting to see if the not-so-friendly competition between GCC and Clang (where a license schism bears a large part of the responsibility for the split) can mirror the not-so-friendly competition between GNOME and KDE (where a license schism also bore a large part of the responsibility for the split).

In the GNOME/KDE case, unpleasant as it was, the competition probably ended up helping both desktop environments mature.
To be fair, websites were all continuously compromised last years, many of which have nothing to do with bitcoin.

Even so, bitcoin seems to attract every shark in a one thousand mile radius.
Thanks for posting this. Maybe I'm just grumpy from trying and mostly failing to get some GIS data for the small business I work for, but when I read between the lines of this statement I read either "we have to pay a lot to license this data, and those costs are based on usage rather than a flat fee," or failing that at least "it's expensive to own and operate a fleet of Street View cars to collect this data, and besides that you're not going to find this quality of data cheaper anywhere else [for now, at least]."

I seem to recall that I'd see TeleAtlas and/or NAVTEQ copyrights on maps.google.com for the US. Now I mostly see "(C) Google." (But also "Sanborn," whom I haven't heard of, when I zoom in; http://www.sanborn.com/.)

I welcome OSM shaking this market up. I believe that the losses OSM may inflict upon the existing map data providers will be made up for several times over by all the interesting applications that will arise from its availability.
Berlin, Germany. IPTEGO is building a VoIP (and not only) monitoring and troubleshooting product that is changing the way operators are running their networks. We're currently looking for Frontend/Javascript developers, C developers and Python developers. No remote work, but we can help you relocate, and Berlin is an awesome city! http://www.iptego.com/company/jobs
Ask HN: How can you stand to live in San Francisco given the crime?
Dumb question, is there a way to verify if a given commit is in a GCC release? Specifically, I'm interested in r181014.
By 'coercion', I don't think he meant "bludgeoning". When the police tell you that you've already been identified by a witness, when it is a complete lie, I take that to be coercion. Or when they inflict emotional turmoil by arresting you publicly, handcuffing you in public, running your prints in a police station, and treat the innocent as guilty in order to 'coerce' them into an unstable state of mind. Coercion is inflicting duress, which doesn't have to be similar to physical torture, imo.
What is the consensus on the matter?
My thoughts exactly. If the situation warrants it.
Great step forward for whom? Is it meaningful at all that the US State Dept is letting people use Chrome now? Is this going to push adoption of modern browsers in other circumstances? Remember, the State Dept has a massive group of people that are working and monitoring social media and the like, so their people were probably clamoring extra loud for this.
That is not true.

IANAL, but several sources declare that the opening of locked containers incident to arrest is determined by local enforcement policy and NOT by precedent or federal law:

http://www.fbi.gov/stats-services/publications/law-enforceme...

http://www.llrmi.com/articles/legal_questions/4-aug09.shtml

http://www.jonesdayappellate.com/files/CaseStudy/4aaa6c32-8b... [PDF]
(Google Quick View of PDF: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&... )

http://www.bernardbrody.com/law-v-technology-can-the-police-...

http://findarticles.com/p/articles/mi_m2194/is_n1_v65/ai_184...
In their earliest days, startups tend to depend much more on their relationships with investors than with customers. In fact, for some startups, there may be a period of many months where they have, essentially, not relationship with customers because they have nothing for the customers to use (because they are still building it - with the money the investors invested).

That is exactly why this post is about a CRM for a startup that can be easily grown out of as the relationship management needs change.
Unfortunately "obvious" in patent law tends to mean there is published work suggesting putting stuff together in that way. If nobody has discussed the problem (e.g., you were the first to work on it), it somehow doesn't matter that anyone competent would have promptly settled on the same solution you did, and we aren't getting anything of value in return for your generation-long monopoly on it.

http://en.wikipedia.org/wiki/Inventive_step_and_non-obviousn...
E-mail shines in Windows 8 with radical overhaul of mail client
"tell us every crime you have ever committed" is a question you can plead the 5th on in court. But the phone will one day make it unnecessary to ask the person, all you need is the brain's loyal assistant. I personally don't care about human rights so everything is fine here.
How undersea fiber gets laid in the ocean
It'd be worth it if more people used Bitcoins. No, we don't NEED regulation. We need competence and standards, which can come about without incompetent government intervention.
Am I the only one who's really tired of the 37signals people tossing their dime-store philosophy on us?
Apple is at the high end of the tablet price spectrum, and the market has decided their products are worth that price. Being "basically priced the same" as Apple means Sony/Samsung are setting these tablets up as premium offerings. How are they going to convince consumers to pay more for these than they'd pay for an ASUS or Lenovo tablet? What features are they going to market that will make people say "yeah, this is a premium tablet worth top dollar"?
Which is not saying much, because if you try to avoid volatility by doing a USD->BTC->USD transaction you get hit with fees that are almost as much as credit cards, not to mention the complexity.
Here is Orin Kerr's analysis of Posner's opinion: http://volokh.com/2012/02/29/judge-posner-on-searching-a-cel...

Posner's opinion is strange. Robinson (the main precedent) held that the 4th amendment permits the police to search any property on a person incident to arrest.

The tension is that the case is almost 40 years old, well before cell phones, or any other technology that let someone carry around every detail of their life with something the size of a pad of paper.

So one side (the government) says: "Robinson is clear. We can search the phone."

The other side says: "No, cell phones are different. We need a precedent that makes sense in the 21st century."

This binary can-search/can't-search is the "bright line" rule Kerr talks about. Posner comes out of left field and argues as if it's some kind of sliding scale. NEW RULE.

Robinson is only about property on the arrestee. There are other cases about property in the car but not on the arrestee, e.g., Gant.

Both Gant and Robinson have give really clear rules, and Posner does a good job muddling it all up. It's sort of funny coming from a so-called "law and economics" guy -- you'd think all else being equal, you'd prefer opinions with clear rules so as to lower the costs of administration.

As I understand it, Orin's position is that cell phones are like cars (so Gant is controlling), not like cigarette containers (so Robinson is controlling).

Gant says that police can search your car incident to an arrest if they believe it contains evidence of the crime for which you were arrested.

Applying that rule is a principled way to avoid the problem with Robinson and cell phones, i.e., you get arrested for speeding and the police download your whole browser history.
> Very often I had nothing to say, because how do you tell a team of co-workers that everything they're saying is wrong?

Yup.

I (think I) have four buckets:

1) Awesome! I'm stealing it!

2) Worse than wrong (h/t Murray Gell-Mann) aka not good enough to criticize.

3) Hmmm, worth chewing over.

4) I have absolutely no idea (please talk more).

I'm more like Jason F, where I felt I had a moral obligation to fix things, and have had to learn to keep my mouth shut.

The most insightful advice I ever got was "Sometimes you just have to let people fail. It's quicker than opposing them."

Now I try to save my breathe for people who are worth my time and effort (investment).
Yeah, that will certainly give you the bullet points for the differences. The videos I linked to gives you the more "human" differences. Not having your social network behind the firewall helps a lot. Yammer moves like a consumer company, which means big usability wins for enterprise users.
Not clicking on links is very, very tough. I can understand how you're having trouble.
Try this link for google:

http://support.google.com/bin/static.py?hl=en&ts=1114905...

I'm sure yahoo, bing, etc have similar process...
It's funny that you've responded to a post about not giving a knee-jerk reaction with the most obvious knee-jerk reaction.

Did you actually read the OP and think about what it was saying? Are there any lessons that you could apply to your life? It wasn't meant to be a sweeping generality - it was meant to convey a sense, a feeling, an intuition. Namely, the idea that you (yes even you) might not be thinking things out carefully enough before responding to them.

For instance, take your idea of the reason for intelligent design. Are you 100% positive that this is actually where the idea comes from, why it persists? The anthropologist in me disagrees. In fact, I'd say that such ideas actually get carried along because no one stops to think about them...even for 5 minutes.
I always thought it was weird and kind of stupid, but I'm genuinely curious how is that great thing.

How is it weird and stupid? <?php echo $var ?> is better than <?= $var ?> ?
I agree. Reading the source is so 2000s. Part of why Django has enjoyed it's community growth is because of it's culture of documentation. And for Django to have released something that isn't well documented is untypical.

This isn't a complaint, except at me. I've promised to update those docs for coming up on a whole year. :P
Show me your wallet with a good amount of cash and leave the room for a while.

Afterwards, let's talk about your comparison. Is 'can be stolen' really something that the state can protect you against? Let's discuss it over dinner. Depending on the contents of the wallet I'd pay.

On a more serious note: Your mockery, while amusing, is unrelated to the problem at hand. 'Stealing amounts of $currency from private persons' is not a new idea or something that bitcoin is supposed to change?
PagerDuty (YC S10) is looking for great front-end engineers
Github Release: CiviCRM-PPI-PayMover-Payment-Plugin
This is a nice list of improvements. As someone who spends a lot of the day in PHP-land, this is going to make me happy. As someone who also controls our entire server stack, waiting for someone else to decide to upgrade will not be a problem :)

I'm glad the PHP devs are starting to actually make it a "real" language. It seems like PHP has always been the fat kid bumbling along behind everyone shouting "wait up guys!!" With closures in 5.3, syntax improvements and removal of horrible features (register_globals, magic_quotes, etc) in 5.4, it's shaping up quite nicely.

Thanks, PHP devs!
I Screwed Up
Fine idea but I don't spend any time on my clothes anyway.
The article mentions salted SHA-1, which is much more resistant to attack.

Obviously, more rounds and unique salts per user would yield better results, regardless of the hashing scheme employed.
Wait it still uses Facebook, so what's there to win for 3rd (actually 4th) parties?
This I believe is Mr. Carey from the article: http://www.youtube.com/watch?v=eUmlas_gPHU
It's from his e-mail conversation with Linode support: http://pastebin.com/UW7iT5fj
Very interesting. Hats off to the men and women who put the work in to make all of that possible.
Well using SHA1 with a salt is a lot closer to bcrypt than plaintext or encrypting the passwords.
That's odd - maybe due to the uppercase 2 in the URL - thanks for letting me know!!
I'd say that "<?=" being always-available is a verbosity reduction along the lines of short array syntax. The alternative of using "<?php echo" can be quite noisy for some (me).

This allows short tags to be disabled for XML clash-avoidance while still allowing the user to use the short-form of echo.
I like this idea and have heard that Einstein did the same thing.

I'm doing it with my fridge too. I eat the same thing for breakfast every day. I just need to fuel up and get to work.
The questions is: what proportion of all iPads sold have been 3G versions? My unscientific observation is that the vast majority of iPads are WiFi-only.

This suggests that most consumers don't actually want a cell-network-enabled tablet, and would rather keep the money.

So really it's $500 vs. $699 + features the customer likely doesn't even want.

That's a tough sell.
Yes you can, but not in 24h. (Hopefully buying a $20k car is not an impulse buy you make in a day, ahem...)

Sell the BTC on MtGox and withdraw the USD via Dwolla directly to your bank account. No need to use Paypal!

MtGox's withdrawal limit can be raised to $10k per day if you provide a notarized government ID copy (IIRC). Dwolla's limit is $5k per transfer with as many txfer per day. So it would take 2 days for completing the withdrawal, plus a few days for your bank to actually post the transaction (thank the legacy financial system for these unexplainable delays).

Of course the very best way to do it is to actually buy a car in bitcoins... see the Bitcoin Market subforum and find a seller. I remember last year someone was happy to announce he was the first person ever to buy a used car with bitcoins.
> Remember, the State Dept has a massive group of people that are working and monitoring social media and the like, so their people were probably clamoring extra loud for this.

Every company probably has people clamoring for modern browsers. Don't sites like Facebook and Gmail no longer function under older versions of IE? Those versions are particularly prevalent at megacorps.
I've been thinking the same thing. I'd rather have a root canal than spend a day at the mall
for '<?=', I see it as a good thing for using php for views. It's faster and more natural to read within typical display markups. Akin to the erb syntax.
San Francisco (Union Square)

Justin.tv is building the ESPN of gaming in Twitchtv.

TwitchTV is growing FAST, adding millions of users every month. We are looking for talented engineers who have experience building websites at scale. (bit.ly/AnPTwI)

We’re a small team with big ambitions, an intense passion for our work, and a no bullshit atmosphere. We're looking for great people to join an already world class team.

Either apply via the link above, or feel free to email me directly at brooke@twitch.tv if you have questions.
مسلسل ايزل الحلقة الاخيرة 
مسلسل ايزل الحلقة الاخيرة

مسلسل ايزل الحلقة الاخيرة

مسلسل ايزل الحلقة الاخيرة
Or did he donate 25 million to have the CS school named after him?
Sorry but I'm not clear on the point of this.

Is it that VC-backed companies cannot pursue smaller markets and so there are nice size opportunities left for bootstrapped startups?
And there wasn't interest with a 25+% install share on the web?

Not sure what you are trying to get at with your post? Are you implying that NaCL is vulnerable because of it's nature and now will be an major attack vector?

But NaCL in my view can be made(or already is in my opinion) solid and with more focus will become safer and coupled with fast updates, it should make it a lot less of an issue as Flash or ActiveX vulnerabilities have been.
Building Search Auto completion Systems
> 2) Almost all applications get refused, working hard and believing in yourself doesn't distinguish you

But a strong application and a strong idea surely is a differential? If you have a solid idea, and a product, can you count on your application being viewed.
HTML5 Real-Time & Connectivity
Why is the competition not-so-friendly? I believe GCC has already improved due to Clang at least a lot of the error message improvements in the last releases seem to be inspired by Clang and GCC has finally added Plugin support.
Zend Technologies Ltd. is a company started by Zeev Suraski and Andi Gutmans. The product of theirs you most likely heard of is Zend Framework, a PHP framework. It's however not their only product. Another one is the Zend Engine, which is a PHP interpeter and the virtual machine at the heart of PHP and the reason there are references to Zend all over the place.
A Thin Veneer, Sitting on an API
Loving the design!!
Stop Stealing Dreams (what is school for?)
Rewards Network Kiip Goes Self-Serve, Announces $100K Developer Fund
How is a Gmail outage different than a stroke?
The comments calling for 'tainting' of stolen bitcoins and blocking their exchange will be the end of bitcoin. The anonymity of bitcoin is only due to general laziness. What happens when the market figures that out? Bitcoin's byzantine agreement is novel, but its crypto is crap.
Bango: The Billing Company Behind Facebook, BlackBerry And Soon Amazon
There's another option: realize you aren't going to win overall and focus on exploiting a niche market.

Lacking the scale and ecosystem halos of Apple and Amazon the default move for Samsung et al is to put out small runs of of high spec, low margin machines that sell to enthusiasts and uninformed consumers. Keep a decently reviewed product line alive and in the black for the future when hopefully corporate or government sales explode and you have a shot at a bigger market.
Exactly. And it's not just that there are nice size opportunities left, it's that it's easier to succeed as a bootstrapper with a lot of people funded because there's less competition in the spaces that bootstrappers generally play in.
You can salt all you want, but an 8 character password with a single round is going to fall very, very fast. Salt, being public, has nothing to do with it.
GitLab is a free project and repository management application
They also have 'esprit d’escalier' :-)
That pretty much sums it up. VCs are looking for the 10x return (depending on what size funds they've raised and their thesis). Those type of opportunities are dwindling (for many reasons), but there are many, many smaller markets which you can carve 2% of the market at and not be a billion dollar business but be a $50 million and own all of your company.
Amazon getting a PCI compliance pass was a big deal. The last time I looked, you needed to be able to ensure secure access to the facility, enumerate who has physical access to the hardware and when, and things of that effect. And you need to be able prove all that in the event you're ever compromised.
Same here. This is a move away from inheritance to mixins. They did a stellar job with it and it's really flexible. Check out http://us2.php.net/traits for the nitty-gritty.
It had to be rebooted to reset the root password. I see no good reason not to have a decryption key held in memory and require you to log in and enter the key upon reboot for something this important.
> $a = "foo"; $a[0][0]

It makes sense when you think of it in offsets. $string[offset] means that given $a = 'foo' then $a[0] is f and given $a = 'f' then $a[0] is f. Thus $a[0][0] would be the first offset of the first offset of "foo". $a[0][1] would not be valid, of course.

Also it's not really something you should ever use, but it's definitely more consistent than throwing an error.
What state? PCI DSS is private regulation.
Interested in this and asking the team who is in Boston if this works for them (I live in Baltimore)

We are doing a code sprint in Boston to launch CodePupil (http://codepupil.com). We haven't yet set the weekend for our sprint, but this sounds great!

Well if this posted by the organizer or a friend of the organizer could a spot be saved for us? I will know if the team is available by tomorrow.
I can't stop laughing. That was hilarious.
Nobody said anything about government intervention. PCI DSS is private regulation.
Yes, we don't know, so lets pick the one that is expedient to our biases.
Good tools complain about <?= because it does not start with a named target. A lot of people just haven't read about the idea behind processing instruction syntax, which is also why we keep seeing mistakes like <%.