skysight-inc/HackerNews huggingface dataset:
You seem very ignorant

Yeah, that must be it.
There are many Pictionary-style apps on the store. So many that most would bet against Draw Something (I would have).

Try this instead:

1. Execution.
2. Execution.
3. Profit.
Here is the blog post from Kaspersky: http://www.securelist.com/en/blog/677/The_mystery_of_Duqu_Fr...

All of the posts on Duku are pretty interesting. If you have a few minutes you should check them out.
No, that's your potassium deficiency. Eat a banana.
To be honest, I don't see why anyone would use bcrypt over PBKDF2, if the security of the primitives is of any serious concern. I am new here on HN, so I'm not aware of your arguments on why bcrypt is better than PBKDF2.

As for the "branding" question, would you recommend XTEA or MARS or Threefish over AES for someone in need of a block cipher? Of course not. Standards are not always perfect (and many a flaw has been found in standards), but they are generally beneficial.

PBKDF2 also has the advantage of being modular. It takes in an arbitrary PRF (although HMAC-SHA1 is the usual); maybe HMAC-SHA1 turns out to be poor for the job, just plugin a better PRF (hell, you can plugin a provable PRF that reduces to integer factorization or the elliptic curve discrete log). bcrypt is just bcrypt --- a seemingly not too peer-reviewed modification of an ancient cipher, that is not even recommended anymore.

scrypt is better than both, of course. Provable time-memory hardness is great, and should be made standard.
4chan browsers (chandroid, yon, etc) all include links to NSFW boards in their main list, and those are all available on Google Play. I think they're just being very selective about applying their policy, probably not on purpose either.
Startup Ideas i killed so far
8 startup ideas i killed so far.

http://chiragjain.tumblr.com/post/19578015287/startup-ideas-killed-so-far
> I opposed the need for the amazon app store for example.

I understand what you are saying, but I believe the reasoning applies more directly to other markets (eg, slideme). I don't think that the Amazon App store exists due to restrictive Google policies, but rather due to Amazon's desires to directly enter this market (cf, Kindle Fire).
I wish I had enough karma to down vote this. It's just a bunch of random semi-related statistics thrown together into a infographic. Yes, Silicon Valley is "racist" in the sense that it aims to hire people who have been trained to do certain jobs that minorities are usually NOT trained to do. But this infographic does nothing more than muddy the waters with meaningless facts and poor logic.

Transcription of the statistics presented:

According to CNN: Half of the faster growing jobs are in the tech industry and black unemployment is the highest it's been in 27 years.[0]

Median amount of funding for internet start-ups in the US:
All-Black founding team: 1.3 million
All-White founding team: 2.3 million[1]

Distribution of internet company founders nationally: 87% white, 12% asian, 1% black.

Tech industry booms again (somewhat unclear what the following means exactly, assumed it was change over time): 16% increase of work force of SV's 10 largest companies, 16% decrease of black workers within those companies, 11% decrease of Hispanic workers within those companies.[2]

U.S. Population: 12.8% black, 15.4% Hispanic, 71.8% other
SV Employment Population: 1.5% black, 4.7% Hispanic, 93.8% other

Filmmaker Andrew Wilson .... [3]

Technology problems related to race[4]

Comments:

[0]: Obama is president and gas is going up. My water bottle isn't full and it isn't raining outside. Apple is giving back money and I don't own an iPhone. Putting two potentially related facts together with an "and" really doesn't prove a point.

[1]: What about the average team? Why is this all-black vs. all-white only?

[2]: What about the overall movement for black and hispanic workers in Silicon Valley? What if they are all starting their own companies? Also, what is the time period for this? Last six months? Last six years? Last six decades?

[3]: Actual video: http://www.andrewnormanwilson.com/private/portfolio/4j7e/704...

Previous discussion: http://news.ycombinator.com/item?id=2500082

[4]: What if it is harder for cameras to detect people of color in low light environments than pale white people? Is this more likely than a systematic and purposeful degradation of technology when used by people of color?
This seems to imply the age of cheap mass produced graphene is upon us - if so, it's a whole new world.
Not working with my iPhone 4. Paired successfully with the game and Safari was showing the accelerometer values(which changed as I moved the phone) but my ship wouldn't move no matter what I did.
Photoshop Tutorial: Create A Wood Chopping Axe.
Today in this Photoshop tutorial we will create a beautiful looking AXE. This is a very easy and simple tutorial; with within few steps you can create a beautiful looking axe icon from scratch.
Actually, the US system is more progressive. It gets a much higher fraction of its revenue from higher income folk than do other countries.

Is there a reference for this? Germany and France have higher top rates, the UK slightly lower. But all three have higher capital gains taxes, which as noted above comprise most of the income for the wealthiest individuals. It seems odd that conservatives would fight so hard against things like universal health care and higher capital gains taxes if in fact they actually lead to less wealth redistribution on the whole. If that were true, the Republican campaign slogan would be 'make America more like Europe'.
Smoke.js - A Framework-Agnostic Styled Alert System For Javascript
Ladies & Gentlemen, Moxie Marlinspike, whose comment should be heading up this whole thread.
"I apologized in this week’s episode to anyone who felt betrayed. I stand by that apology. But understand that if you felt something that connected you with where your devices come from—that is not a lie. That is art."

I have problems with someone re-iterating the sincerity of their apology followed by "but". Standing by an apology means not machine-gunning it with caveats seconds later.

"I told Ira that story should always be subordinate to the truth, and I still believe that. Sometimes I fall short of that goal, but I will never stop trying to achieve it."

The indignation in this statement is toxic. Dishonesty - fabricating facts and then dissembling to cover it up - is not an oopsie that we try and avoid. Trust is a cornerstone of civilization and more so for anyone in a journalist-activist function. Having a position doesn't entitle you to make up facts. Having an audience that should fact-check aggressively doesn't mean you get to actively challenge this faculty.

You assumed we, the audience, were too dumb to get the meaning from the actual facts and so juiced it up in accordance with how much brighter than us you know yourself to be. Now you're playing the victim.

You asked people to open their eyes and think critically. Sorry we didn't stay on the hamster wheel as we were supposed to.
If you have many options, they are easier to retrieve, just call .data('tooltip') and jQuery will do the parsing of the object. Using separate attributes you would have to call .data() for every attribute. Anyway, I guess any of the two methods would be fine! :-)
Inspiration vs. Motivation
Isn't that a self-fulfilling prophecy? If you buying into the "just use bcrypt" idea, how will scrypt ever change the fact that it's not widely available on the web?
Yep. Typed arrays don't have a built-in sort method, and even the built-in array.sort is extremely slow. I ported Dart's dual-pivot quicksort implementation, which reduced the time to sort 1M floats from ~2.5s to ~350ms (timed in Node v0.6.2).

https://github.com/square/tesseract/blob/master/src/quicksor...
The reason I would prefer it is that PBKDF2 is standardized in an RFC with proper test vectors an a reference implementation in C.

Bcrypt and Scrypt do not. We could debate the relative quality of the cryptographers behind them all day, but realistically Bcrypt has had at least one widely-deployed implementation bug that caused a real decrease in strength which can be traced back to a lack of proper test vectors.
He's probably using "smart" in the sense of "accumulated knowledge in a particular space" instead of in the sense of raw mental horsepower. http://news.ycombinator.com/item?id=3583985
Yes. Otherwise `porcelain' and `plumbing' mean nothing at all.
Love this! Thanks for the feedback. While your feedback is at times harsh, this is what makes us better. Please keep it coming.

On your product feedback—yes to all of it. We'll improve cost/month, SEO, and load times (along with the 148 other tickets on our wish list).

On your adoption points, all I can say is yes it will be difficult and I think you've done a good job focusing on the toughest challenges. Big challenges=big rewards; we're willing to take that risk.

The part I would push back on the hardest is our team. I believe an engineer-centric company will win in this space. Our advisors and investors are helping us with high-level introductions. We can get in the door anywhere, but in the end the product matters and we pride ourselves in building valuable products quickly. Some other companies in our industry pride themselves on being 'built for brokers, by brokers.'

When competing on the web, I'll bet on hackers any day.
It doesn't. Go provides stack allocation and heap allocation. Stack allocation is the default (except for some always-on-heap things), and stack allocation is silently converted to heap allocation when you take the address of an object.

Go's memory management story is basically the same as Java's with the "use escape analysis to place objects on the stack" flag enabled. (To be fair, there is one extra thing that Go provides: the ability to allocate objects inside other objects.)
I doubt that Apple would want to be a phone company - you have to start playing nice with the regulators and the Govenments who licence you.
For anyone that still cares, this has been tweaked. If you attempt to merge a pull request that has changed since you loaded the page, it'll require you to re-review the pull request.
Is that the default? If not, why not?
The point of Android isn't that Google's Marketplace is better, it's that Google's Marketplace is non-exclusive. This is a textbook example of why being locked into a single source of applications is such a horrible idea.
By all means, use different wording when passing this message along if you're worried about hurting the recipient's fee-fees. But you won't be doing them any favors if you change the message to a Stuart Smalley-style "You can do it! You're good enough! You're smart enough! And gosh darn it, people like you!" Because on this specific subject, the odds are very, very, very unlikely that they actually are.
So, is there anyone actually against this change?
I love the idea of supporting space science, ut in a deficit ridden economy, is this extra percent of spending more valuable than health care research, lowering the cost of education or solving world hunger?

Before going to Mars I would like a decent school on my street.
One more example: pseudorandom number generation (non-cryptographic). There are lots of algorithms out there, and lots more you could design, but the Mersenne twister has pretty much become the first-choice algorithm.

Especially with linear congruential generators, it's easy for people who don't know what they're doing to add "extra randomization" that makes the resulting numbers worse than the originals.

It's better for most people to not get fancy and use the standard algorithm.
> By roughly a factor of (5|4000).

Do you have this written up anywhere? Link?
Interesting. You could basically have the same fallback profile of a gas/electric hybrid vehicle.
> "Who could possibly be so stupid as to recommend or use RDP on the open internet knowing the implementation doesn't have granular and well designed privilege separation?"

Can you please advise anything better than RDP?
The crux of it:
"1Password uses PBKDF2 to significantly slow down attackers. Currently this is not available on iOS as we needed to support older devices. The next major release of 1Password will only support iOS 5 and at that time we will be incorporating these additional defences"

This is absolutely unacceptable. Agilebits has long talked about how they use PBKDF2 to secure your passwords, and using anything different on mobile is an abuse of trust.

Agilebits' response is hand-waving. Of course longer passwords are more secure. If we all used 32-character passwords, we wouldn't even need key derivation.

But we expect to use reasonably simple (7-10) character passwords because it's possible to make these secure against cold attacks using math. And when the software you use has in the past described the algorithms it uses, you expect all versions of the software to work in the same manner.

I've long used 1password, and I don't plan to stop using it yet, but this is a serious breach of trust, and I feel less secure in using it now.
Definitely working on that. This is my MVP.
UEFI in two words: "second system". (https://en.wikipedia.org/wiki/Second-system_effect)

BIOS should have gotten smaller, not larger.
Does it have the same poor battery as the original Galaxy Ace? Also disappointing that it still uses ARM11, even if at 1 Ghz. I would've preferred a 800 Mhz Cortex A8 chip. We've been using ARM11 for 10 years. It's time to get rid of it.
I addressed this directly downthread. I don't care whether TweetYourCatFood.com uses bcrypt. Specifically, I care that:

* It's got a reliable Gem for Ruby

* It's got a reliable easy_install package for Python

* It's got a good reliable CPAN entry for Perl

* It's got a Java jar file from a reputable source

* It's got a .NET assembly from a reputable source

And what I'm saying is not that scrypt will be "safe to use" when that happens. scrypt is safe to use now; safer, marginally, than bcrypt. What I'm saying is that when that set of things happens, I will personally stop recommending bcrypt and start recommending scrypt. And I only point that out because I always feel a little bad about not recommending scrypt, which is strictly speaking better than bcrypt.
As long as we've got some smart people hanging around: where does HKDF[1] fit into this? More specifically, when would you use HKDF over scrypt?

1. http://eprint.iacr.org/2010/264.pdf
This is a really well written response by Mike, but frankly I'm not convinced. Not in the least. And to accuse Ira Glass of unfair editing (with the dead silences and all) really takes the cake. I think Ira gave Mike every opportunity to come clean, and he didn't. Only when directly confronted with facts contrary to the story did he shift his position, and then only so slightly as to keep his main story intact.

As far as I can tell Mike is only sorry he got caught.
You are basically describing the LXTHW model.
> But then you lose things like the ability for it to auto update

Not at all: http://f-droid.org/
Do you think your background is interwoven in the article content and recommendations?
So they don't want to promote it in the Android Market, but you can still install it from other sources, can't you?

I mean, wouldn't a curated collection in "Play Store" (or whatever it's called) along with the option to download outside apps be the best of both worlds?
I love a certain subset of Perl with a passion bordering on mania. While I wouldn't call it domain specific, I do think it's better defined by the domains it's not well suited for. I wouldn't use Perl for GUI programming for example.

It's kind of a domain anti-specific.
Here is an important tradeoff between speaking and writing. Writing allows the user more room to color the information with their own experiences. For example the words "a very long time" conjures up some concept for a reader -- but when a listener hears "a very long time" from an old person versus a young person they may hear those as two different things. It's important and possibly absent information here that "if [you] didn't say it, [you] didn't say it." Inference is an incredibly powerful tool of persuasion and used often.

Gesture, tone, emphasis, etc... can give an incredible amount of information that people may process quickly and easily. It may alleviate some confusion created by the readers personal interpretation of words.

I think this thread well covers benefits and drawbacks of written versus spoken word. For me, I think of it like I think of various technologies available for a project. There are different tradeoffs and I must consider what I am trying to accomplish, what the pain points are going to be, who my users are, what is available, and make a careful choice.
The 9700 is over 2 years old, but it had a smaller (much less power draw) screen and a slower CPU even by 2 year old Android/iPhone standards. The 9900 has better specs, but still has a small screen and a single-core CPU. If they fix those limitations, the battery life will likely drop to iPhone levels.

I don't really think they can be competitive in applications without fixing the hardware, though.
Abercrombie fitch madrid
1. Read the instructions how to post links on HN

2. Show us the ideas that you didn't kill - those are more interesting.
Is there a reason I should care about LLVM anymore? I mean, I mostly code C and C++ on Linux, where no distros build with LLVM and it isn't yet relevant.

Yawn. LLVM seems nice. When it competes on merit in the big world instead of in a sandbox people will care more I guess. Last I tried building my C++ project with it, it puked on the STL headers.

Use what you like.
it's not necessarily about intelligence per se.

I think "smarter" in this context means more well read about the particular subject of crypto, although people good at that are likely to very intelligence all round too.

A different approach is not necessarily "less secure" it's just that it may have had less people banging on it trying to figure out ways to break it.
There are a couple of links on this page:

http://www.tarsnap.com/scrypt.html
I'd choose neither. I either build something that businesses would buy, or something that would attracts lots and lots of users in a non-saturated market so I can sell advertising. None of those 2 fits the bill.
1. These plots are derived from Thomas Pickety and Emmanuel Saez's famous work, http://elsa.berkeley.edu/~saez/pikettyqje.pdf. Their research has spurred similar analyses around the world, much of which is in the World Top Income Database, http://184.168.89.58/sketch/. It is based on income tax filings, which correspond to the tax unit for each country. In the US, that would be by household.

You prefer talking about consumption inequality, I prefer talking about wealth inequality, but the best data that we have is for income inequality hence the choice in this plot. The defect with measuring income inequality is that it does not directly correspond to each individual's ability to bear the tax burden, which leads to issues of tax fairness. The issue with consumption inequality is that the fraction of income consumed tends to decline with increasing income, so this metric is even less tied to an individual's ability to bear the tax burden.

2. I think you are greatly overstating the importance of the 1986 Tax Reform Act. During the period covered by this plot, the income tax essentially went from
- a low revenue elite tax
- to wartime tax grabs of greater than 70% of income,
- to a permanent tax on the middle class with top marginal rates above 85%,
- to a tax allowing a plethora of deductions,
- to one with our current Reaganesque rates.
There have been huge changes over the years, which are mostly captured in these plots.

3. Income inequality has been rising in many countries, although this is closely related to reductions in top marginal tax rates in each country. It is also related to tax avoidance and treaty shopping by multinationals in a global economy.

In addition to income tax rates, other things that affect income inequality include longevity, birth rates, and the effectiveness of estate taxes since wealth is usually divided amongst children. Also important are capital gains taxes and tax sheltering.

Right now, many modern countries are in a bizarre position where the incidence of income taxes, i.e. tax on net change in wealth per year) is higher on the middle class than on the very wealthy who have greater opportunities to take deductions, reclassify, and move income.
This looks beautiful - congrats!

How did you like working with Fabric.js?
I've been using smart phones since the treo, and used palm devices since around 1999/2000. Since I've lived through all of that I can really appreciate a single source to get everything, manage updates, etc as long as that source is fair and unbiased. That is why I didn't like when amazon launched their own store for android apps. It added a second store you had to run to update apps, and segregated the market, etc. If google keeps heading down this path though I will support a open 3rd party marketplace.
Advertising has been bound to newspapers for a long time. Check out the front page of 1st edition of the Manchester Guardian (now the guardian) from 1821 http://www.guardian.co.uk/news/gallery/2007/jun/08/1?picture...

In those days the business model was to cover the front page with small text ads! (as pointed out by currybet here: http://www.currybet.net/cbet_blog/2009/05/happy-birthday-to-...)
Coming of Age: A Review of The New iPad
"Felt betrayed" should be changed to "was betrayed", then it would be a true apology. Otherwise, it is just a sort of blaming the victim.
"Fixing the Brain With Computers":  conversation with neurosurgeon R. Bucholz
That's because PBKDF2 is the result of a standards process, and bcrypt is the result of the Unix process (bcrypt is the extaction of OpenBSD's password hash function from the late '90s).
It was the lightest weight canvas library I could find. Primarily used the interactive features of it. I had to write my own text extension because Fabric's (canvas's) is pretty primitive.
But just the existence of multiple cargo cults causes damage, because it leads people to assume that "the experts are divided." Which will lead some people to go with the wrong batch of experts, and others to just throw up their hands in confusion and store their passwords in plain text because it's too hard for them to figure out which group of experts is right.

This is a case where unanimity in the message is important. If all the experts say "use A," people will take that to mean there's no debate about the merits of A over B and C, and use A. If some say "use A" while others say "use B" or "use C", some fraction of listeners will give up and use nothing at all.
Seems kind of spammy to link to this blog entry, which doesn't appear to actually provide any information, rather than http://www.jplayer.org/.
The game starts with a landing page (as in the link). After pairing is done then the browser will automatically redirect to the game page. Did that happen for you?
Quick thought experiment: right now, you can go out and buy a portable charger with a battery inside. For $40 or so, you can get one roughly the size of carrying a second smartphone with 5000mAh, which is several full charges for your average smartphone. You can throw it in a purse or spare pocket and have it when you need a charge and you're not near another power source.

It's not fiddly like opening the case of a phone and swapping out the battery, but the big problem with this is having to leave it hooked up while it charges if you're still using your phone. With fast recharge, this would go away. Hook it up for a minute, charge the phone up, unhook it, put it away. Easy peasy.

For me, at least, this would be a huge win. YMMV

Edited to add: with fast recharging, you could also recharge the portable charger itself if you ever come in contact with an outlet. So let's say you have two really long flights with a short layover. Find an outlet for a minute on the layover, recharge the charger, and you now have your charger ready to go for the next flight. Win.