skysight-inc/HackerNews huggingface dataset:
Collisions can be handled with two different approaches. The first problem with collisions is when two people have the same password. This is one of the reasons you should salt a password before hashing. If you choose a random m-bit salt then due to the "birthday phenomenon", you can go to around 2^{m/2} users before there is a significant risk that some pair of them shares the same password. This actually isn't too hard to understand. If you have N people who want to high-five each other (e.g. N ~= 18 at the end of an Ultimate frisbee match, everyone from both teams generally high-fives everyone on their own team as well as everyone on the other team), then there are N * (N - 1) / 2 high-fives, or roughly N^2 / 2 for very large N. To see this, enumerate all of the pairs (1, 1), (1, 2), ..., (N, N -1), (N, N), N^2 of them in total, then cross out the ones of the form (k, k), N of them in total, because nobody high-fives themselves, and then cross out the half (a, b) for which a > b, because 3 high-fiving 2 is the same as 2 high-fiving 3. Then (N^2 - N) / 2 = N (N - 1) / 2.

But if each of these comparisons has a roughly independent chance p of sharing the same salt, like 1/2^72, then the number you need before you get towards a 50/50 chance is approximately p * N^2/2 = 1/2, or N = sqrt(1/p). If p = 1/2^72, sqrt(1/p) = 2^36 = 68.7 billion.

So a 72-bit random salt will make sure that everyone shares a salt with less than a billionth of your users or so. If you want even better, you might want to know that a salt doesn't have to be random, and you could generate them incrementally to get even more security. For example in Node.js:

var new_salt = (function () {
var counter = 0, buf = new Buffer(8);
return function () {
counter = (counter + 1) % 1e6;
buf.writeDoubleLE(new Date().getTime() * 1e6 + counter, 1);
return buf.toString('base64')
};
});

Now as long as I have fewer than one million new passwords per millisecond, there is no chance at all of two people having the same salt. (I'm sure Windows has timing issues so that this has to be much more than once per millisecond, but the point stands.)

You asked about hash collisions in particular, and in the context of not having a maximum length. That's a little trickier of a problem. Yes, there exist attacks, particularly on MD5, which use a bunch of arbitrary output blocks to steer a hash to a particular value. But that usually requires a hash to be well-broken. In the case of SHA-256, you would need something like 2^128 user accounts before you'd map different inputs to different outputs. So you're protected from both: you ensure different inputs to the hash function and then you choose a hash function which requires too much work to generate collisions.
Thanks for the feedback.

The salary matching isn't an issue. When a recruiter/employer creates a job listing, there is a maximum and minimum salary.
We look for jobs where you're desired salary falls within the max/min range of the job.

Again, love the feedback. Please share with your friends!
Nice try, TheipadFrame People.
Well DARPA is an applied research funding organization, not a sniper training organization. So their funding doesn't automatically mean it was successful.

Nevertheless, they probably wouldn't have funded it without some indication that it could be useful.
Congratulations!

How long did the deal take to bring to this point (if that's public)?
Was somewhat amused by this paragraph;

'He sees The New Republic as a place "of liberal values. And by that I mean values that embrace the core American ideals of freedom, equality and an American responsibility to make the world a better place."'

There are strong echoes of Citizen Kane. I wonder how long his 'Declaration of Principles' will last.
There is an article you can read.

You just need to sign up. And then they send you spam to make you think "I'm sure I ticked the no email box".
I look at it from a formal/legal perspective. By many definitions, the person will not be considered to be a year older on February 28th. (E.g. in the U.S., they can't have a drivers' license yet if they are 15 years old and their birthday is February 29th., nor can they drink if they are 20 years old.) They will be considered to be a year older on March 1st.

Going on that, I view the birthday to, descriptively, have shifted a day later. And calendar-wise, that actual day that would in a leap year be counted as February 29th is instead counted as March 1st.
A one-line description of why Faraday is different/cool from other calendars would help - both in your flat-file post ("It's a simple day calendar called Faraday, and it's the first iOS calendar to XYZ..."), as well as Faraday's home page, under the video. I can't tell enough from the screen cap, except that the UI reminds me a bit of the Clear to-do list app that was making the rounds a few weeks ago.

Good luck with it!
On the spectrum of 1 (abysmal failure) to 10 (raging success), where do you place Loopt?
How is your point any different to the point I made in the comment you first replied to? Am I missing something?
Be Quick But Don't Hurry
Those are old numbers, I'm sure things looked a lot different the past year.
...why use 90 markers?

I saw a demo a while ago where they used Infrared makeup on someone, and used a sponge to make it really splotchy. The makeup doesn't show up in Red, Green, Blue wavelengths.

So, they could simultaneously capture RGB, and IR. Using multiple cameras on the IR, and the splotchy makeup, they were able to capture thousands and thousands of points, and get color info at the same time.

Seems like the right approach to me. I could totally see a Kinnect-like device taking advantage of this, allowing someone to do facial capture like this at home.
Short Layered Haircuts,Layered Haircuts
The good thing about short layered hairstyles is that they generally look good on just about anyone.Short Layered Haircuts,Layered haircuts are popular and beautiful choice for women who want to look sexy.
Don't forget children and felons.
Retroshare and Oneswarm would be other alternatives, which I believe protect the identity of the user more.
I viewed the comments just to write what you have.

It's like reading CNet.

Someone should write an app that turns shitty articles across lots of pages into one page!
Still are:

http://www.farbrausch.de/~fg/kkrunchy/

http://www.crinkler.net/

etc.
How much would Google have to drop the price to reverse the trend?

The plain old JS API would come to about $1000 a month for a site with 1 million map views. Mapbox (http://mapbox.com/plans/) meters by bandwidth but by my estimate (4gb map, low for a global map I know, and 1,000,000 views) it's still about $600.

Then again tilemill, tilestache, and leaflet are all free and work great once you get it going.
How old is Edward Kmett? He has been a major force in Haskell (fancy type/algorithm stuff) in the past few years, but did not start his contributions around age 20 like many top Haskellers of the past 15 years (folks who were not on the original committee).
slow change i'd say, and lots of discussion about it although i was probably the strongest champion.
Open-Source A.W.S.: Creating a Thousand Clouds
The Pirate Bay should commit all its magnet files to git; you then have a distributed, versioned hash library.

Then, build a package that lets you seek out one of the repos, pull it, and integrate it with your Torrent client.

Alternatively, you could hide the hashes in TXT records of domains no one knows about. Cached, resilient magnet hash records.
Sviluppo software
Business Intelligence, ECM and eCommerce, The Italian IT Agency Omnia Group launches several new services for the modern era.
1) It's a technology demo, not a hard, possible future, SciFi story. I could equally well argue it's an awful vampire story.

2) What convinced you she was actually conscious? The entire "please don't shut me down" can be part of a program. RealDolls are fine, mechanized RealDolls are fine, but as soon as they start resembling humans too much to your untrained eye, they must get rights?
Free copy of Guy Kawasaki's What the Plus
I was expecting girl to smile evilly after she said thank you.
Then wouldn't have 'jkl;' made more sense? (assuming index fingers were placed on 'f' and 'j' back then as well)
Well my point is that I think the people that attempt to take the moral high ground on pirating are similar to the folks that do that to consultants. Almost every one of these rants I've read comes off as somebody convinced that there are people in suits smoking cigars that are trying to screw every last one of us.
I thought that is a builtin feature of Linkedin.
Yep, sorry about that, didn't realise the clickthrough article forced signup either.

Delete?
Android 4.0 Ice Cream Sandwich update for Samsung Galaxy S2 delayed once again
Beta invites for digital biz card service [works across all devices]
i think i can answer this but let me double check.
Most of the answers I've seen as to why hjkl have fallen into the "so your fingers stay on the home row / it's actually quite fast once you get used to it" realm. But those answers were never completely satisfactory to me. Once you get used to it, it's fine. But I feel like it would have been fine as adsw, or jkl; (so that your hand really is on the home keys) or some other 4 key combination near the home row, too.

This explanation of the origin hjkl is the first one to satisfy me. Now I can see the others, not as explanations as to why it is, but explanations as to why it stuck.
obviously it's not going to go down as a massive success (although i hope what we do at green dot does!) but i feel pretty good about it. it's hard for me to put a number on it, though.
Because a face is worth a thousand words: Fais.me
Hi,

I had an idea for a long time to put user images instead of smileys in comment threads, social networks, chats, games, advertising, etc... So I developed this project

Let me know your opinion & please vote if you like the idea!

X
Minimal Mountain Lion
That would not explain the claimed effect on depression
Gravatar like site for centralizing achievements, web "gamification" (idea)
This is why I'm completely behind efforts like Twitter's Bootstrap Font Awesome to standardize an internet icon set.

Why do I have to hear about every front-end web dev's effort to reinvent the wheel? Why are users forced to relearn a new visual language to accomplish the exact same task on every website?
Android manufacturers have serious issues with upgrades. This is key to compete with Apple where you can enjoy a new operating system very quick.

Yes, there are multiple devices but is this an excuse? Samsung is a top manufacturer.
Best 38 free SEO tools for pros and dummies
In addition to concerns raised by other posters, bonus points for the invalid SSL cert. This site must be a honeypot to name and shame the criminally stupid. Eventually the official raison d'etre--that your colleagues care whether you Linkedin-connect them--seems designed to trawl for idiots.
Any way to change a title of a post after 2.5 hours? Wouldn't mind removing the "(Server Down)" part... If anyone (pg, moderator of some sort) wants to help, the original was:

Show HN: My Project Management and (eventual) Collaboration Tool :: Θ ThetaBoard
If an artist puts out a CD, making a good-faith effort, you haven't been "wronged" if you don't like it, any more than you're "wronged" if you go on a first date and don't click with the person. That's life. You're not guaranteed to be entertained. That guarantee is not possible for anyone to make. Even the movie Titanic was a massive hit, yet is considered a schlock fest by many. You can't please everyone, so it's not really fair to penalize someone for not doing so.

Hell, the song you like today, you may hate next month. The song you hate today, you might love ten years from now when they lyrics are suddenly relevant to your life somehow.

And okay, a CD might suck. But it was probably the best they could muster. Creativity's like that. There's probably not some "fantastic Bush tracks" hiding on a server that they held back for some reason.

It's not like if Porsche intentionally, and deceptively, put a Skoda drivetrain in a Cayenne to increase the profit margin at the customer's expense.
The New iPads are on there way to US and 10 other countries
That's right. The emotion comes from a human.
They embed their logo (as they should), apply a bunch of formatting, and most importantly haven't kept the export up to date with new features that have been added, such as skills. LinkedOut also takes the free-form formatting people tend to use in large text blobs, and tries to turn them into bullet lists and headings where applicable.
Ask HN: Questions about Show HN (traffic, lessons, etc.)
Hey guys,

When you guys post a Show HN, what kind of responses do you get? In particular:

1. Do you see a spike of traffic, or not so much?
2. Is the traffic you do see relevant traffic? (Are the visitors engaging?)
3. Do you get follow up advice on top of the comments posted here?
4. Was this part of your "marketing strategy?"

I'm sure there may be some good questions I missed, please feel free to add them below. I'm mainly asking to see if one has to do any prep/minor scaling work before hand in preparation for show and tell.

Thanks!
The lesson here is social applications go in and out of style and entrepreneurs must really entertain early acquisition offers when they are hot.
That's a pretty sexy terminal.
It doesn't have a clear date marking, but it refers to Feb 2006 as being in the future. But while that is worrying, how is it worse than being tracked by your IP? If you are mobile sure, but that's hardly a common use case for, erhm, scenarios where you worry about traceability?
Yes, this is it. We have very uneven abilities to make things look extraordinarily good with computers while our abilities on some other fronts have hardly progressed at all in the past 20 years, while others have had much more believable curves. Speech synthesis, for instance, is terrible by this standard. We have absolutely no ability to synthesize this voice with a specification much smaller than someone feeding it a full voice performance anyhow.

Personally I think it's a grave error to measure our progress on these fronts by getting distracted by the glitzy graphics... we are sooooo much better at those than anything else that they provide a very skewed view of where we are. You can see the same effect in video games; graphics that are orders of magnitude better than ten years ago, game engines themselves are only incrementally better in terms of capabilities and games themselves only incrementally more complicated.

(And to be clear, I'm not saying we have made significant progress in a wide variety of fields, because we have. I'm saying measuring our general progress by the subfield that has been an extreme outlier doesn't give a good view of that progress.)
> RealDolls are fine, mechanized RealDolls are fine, but as soon as they start resembling humans too much to your untrained eye, they must get rights?

Yes. That's the point of Turing's test.
Do you really think your first paragraph adds to the conversation?
N downvotes from people suggesting we use Makefiles for the purposes we use Rake etc? And they call themselves "hackers"?

Probably the embodiment of all that's wrong with legacy cruft and voodoo practices.
Just never decide to learn dvorak.
+1 for the Atlantic. They are the best I've seen at integration of the RT web experience with long form journalism.
Accepting every connection on LinkedIn pretty much defeats the purpose. I only add people that I could ask for personal introductions to others ensuring my LinkedIn network is actually useful.

I suppose if you've never gone through the backdoor in order to meet someone, LinkedIn could seem like a big waste of time. For me though, the network graphs of who I know that I can ask for an introduction are quite valuable.
Thanks! Unfortunately, iOS 5 is required for a few of the tricks I'm using in the app. For what it's worth, my fiancee uses my old iPhone 3G and she can't run Faraday either. I really hope the next gen iPhone/iPod Touch will send the low-end iOS5-capable device prices down so they're more available than they are now.
How This Man Made Dos Equis a Most Interesting Marketing Story
Any chance we'll see a retrospection? You've been building Loopt for 7 years - I'd love to hear how you managed team morale, the high points, the lows, etc. There's bound to be some amazing stuff.

And congratulations, I'm personally excited to see where you go with this.
Shameless plug here. If you use the Aspector gem I created, you could move validation logic into an aspect and test it. And apply aspect is very easy. Here is what the code will look like.

class Request < ActiveRecord::Base

end

class RequestValidation < Aspector::Base

target do
def has_unique_hash_id?
exists?(:hash_id => hash_id)
end
end

before :create do
hash_id = SecureRandom.hex(12) until has_unique_hash_id?
end

end

RequestValidation.apply(Request)
I have created an ergonomic layout based on the us layout, called us_split. In it, Vim's hjkl actually are the home position. The layout works under Gnome. It's just like qwerty but a bit different. Basically the two columns from the right are put in the middle. Time to learn to use it fluently is only a couple of days if you touch type qwerty already.

https://bitbucket.org/cheater/us_split/overview

I see a lot of people in the comments talk about vim's "weird" layout choices. I suggest in your OS you change caps lock to esc; and that in vim you remap ; to : and : to ; in order to stop having to press shift every time. You can then really start doing the whole home row thing; IMO it's impossible without those two crucial settings.
Walks And Walking Arundel to Bognor Regis West Sussex Walking Route
How is this better than just not using Linkedin? I used the Linkedin network (even the recruiters-- it only takes two good ones to balance out a hundred junk spammy ones) great effect in landing my last two jobs, even while the site itself is kamikaze nose diving into the toilet with its every trashier design evolutions to boost "engagement" and "stickiness" and "ad impressions" that no one wants. But if Linkedin, has nothing you, why not just leave?
You did not need to go to Uni. It really matters what you went for (employment vs well rounded learning).

For employment, it would have been much more efficient to use the same time/money to gain experience and post it through github. I am twice as likely to hire a person with a good portfolio than someone who has a good degree. That said..both would be good.

For getting a more well rounded understanding of what is really happening and why computers do what they do....a uni degree/experience is really helpful.
On some level I agree - not a fan of Peretz. On the other hand, wouldn't firing Peretz just make Hughes a leftie Rupert Murdoch?
Aw yeah, Chartbeat is way cool. Can't recommend it highly enough for any sites or services that could benefit from up-to-the-minute data.
Google's Prediction API 1.5 released
If the skull was an insulator it'd make EEG really hard. Not saying EEG is easy, but if you can record brain signals (which are very small) I'd think that dc could be having some effect.

From Wikipedia about EEG:

> A typical adult human EEG signal is about 10µV to 100 µV in amplitude when measured from the scalp and is about 10–20 mV when measured from subdural electrodes.
Ask HN: Help to start Raspberry Pi development
Hi,

With the delays due to manufacturing defects and the high demand it will probably be a while before I get my hands on a board, though I would like to get a head start in raspberry-pi development.

1. I am a but confused on what development on the board means, with a linux distro installed, will it simply be a matter of programming in C or any language of your choice ? Or should I know ARM specific coding in assembly ??

2. And is there any good guides/tutorial you would recommend for ARM/R-Pi development ?
Google+ ripple of kony video
The real reason anyone pirates is because they can get away with it. I'm sure if there was a digital way to steal a bottle of grey goose from a liquor store a lot more people would pirate grey goose and start making claims that the price is too high and it's too hard to get.

If you would go to jail for downloading Herbie Fully Loaded off of the pirate bay (just as surely as you would if you robbed a liquor store and then composed a blog post on "Why I rob liquor stores.") Piracy would be a moot point and would be confined to the fringes of society that are willing to commit theft.

In conclusion this is like saying it would be faster and easier to roofie a girl at a bar to get laid than it would be to take the time and money to buy her a drink and talk to her.
I go to that page and see a bird in the background and some social widgets. Is there supposed to be more?
Not sure that data is available, but I was listening to NPR news during that time. I thought they did decent job of highlighting the poor behavior of our government. Then things changed (not government behavior, which is the same if not worse).

At the pinnacle of the credit crisis they started hating on the financial services sector. As if they had any idea of what credit derivative were. The "experts" they had on air seemed to have a textbook definition which would then be simplified by saying "It's basically gambling". Uhg.

At some point I realized that most of their "experts" (in all their coverage) were either working for the government, the Federal Reserve, or had financial ties to the government (grant recipients, lobbyist, etc...). I stopped listening around 2010 after I found myself yelling at the radio too often. Maybe things have changed.
Forget 3G and 4G, terahertz could make cell phones 1,000 times faster
Doesn't this go way back though?

The reason that keyboard had those arrows keys on it was because those keys correspond to CTRL-H, J, K, L and the CTRL key back then worked by killing bit 6 (and bit 5) of the characters being typed.

The effect was that H which is ASCII 0x48 would become 0x08 which is backspace. If you look at an ASCII table (e.g. http://www.asciitable.com/) you will notice how the uppercase ASCII letters line up nicely with the control characters so that just dropping bit 6 will get you there. Same thing with the lowercase (drop bits 5 and 6) and you are on the control characters.

The CTRL-H, J, K, L therefore correspond to BS, LF, VT, FF. BS is backspace (i.e. left), LF (down), VT is vertical tab (so up) and FF is form feed (which in this case takes you up). I'm not sure why FF was used for up.

This is also why CTRL-I is tab, CTRL-D ends a communication. All of that goes back to teletype days. Also for telnet users out there you'll see that CTRL-[ lines up nicely with ESC. And when you see a ^@ being printed on the terminal you can see why it corresponds to a null byte.

One other interesting thing about ASCII: uppercasing and downcasing can be done by twiddling a single bit.

If you look at this picture of an ASR-33 Teletype you'll see that come of the control characters on the keyboard correspond to those in the ASCII set. This is because ASCII evolved from the earlier teletype character sets: http://upload.wikimedia.org/wikipedia/commons/0/0b/ASR-33_2....
I couldn't agree with you more. But perhaps the parent's comment reflects the thought process of the masses? If you give people this honest, upfront view of the risks, they probably wont take them. If you play like everything's ok, and nothing could possibly go wrong by giving them your pw, even when that's not 100% the truth, they'll prob cough up their password.
There's some interesting social engineering to be learned here.
Could you tell us which framework you're using then? I know that most Java enterprise software is either on Spring or on EJB, I'd love to know if there's an alternative.