skysight-inc/HackerNews huggingface dataset:
Offer to pay rent in advance. You may even negotiate rent discounts by paying for the whole year in advance.
Of course they can, but the point is that the time and expense is massively increased. Building a rainbow table to run against each separately salted account is way more work than building a single rainbow table and cross referencing it with a giant list of hashes to find some collisions. In general "as long as the reward justifies the time and expense" can be said about any security measure.

Salting has another benefit too: it makes it virtually useless to find a mere password collision.

Say, for example that I use two sites, Spacelook and Squitter, which both use a popular hash called SPARTACUS for their passwords. My password on both sites is "abracadabraSpanishFly_92@prosperity;". An attacker gets into Spacelook's database and does a cross reference with their SPARTACUS rainbow table. I happen to be very unlucky and my nice strong password has a SPARTACUS collision with the very short "a2e34". Now the attacker goes to Squitter, puts in my username and "a2e34" and logs in with no problem even though that's not my password.

Now, suppose that Spacelook and Squitter had each used a different per-site salt (not good enough, but better) when they hashed my password, and this time suppose the attacker builds a custom rainbow table for Spacelook's salt and finds that my salted password collides with salted "fr-_9x32;". If they go to Squitter and try to log in with "fr-_9x32;", Squitter's use of a different salt will cause it to hash differently than my password, and so only my Spacelook account will have been compromised.
Those images of a humanoid form with arms outstretched are eery especially on Good Friday.
Reminds me of the armor in Dune.
Welcome to the new HN. Ever since pg put up his "Kill Hollywood" rant the site has been overrun with script kiddie downloaders.
The New York Times original article on Google X placed a lot of emphasis on the lab's work in robotics. I have a feeling Google will be very interested in this challenge. Keep in mind that Google's self driving car project largely grew out of the 2005 Grand Challenge.

http://www.nytimes.com/2011/11/14/technology/at-google-x-a-t...
You are right, I should clarify this. For the authentication server the time required jumps from close to nothing to a few ms. For the attacker, the time jumps from a few hours or days to a few years or decades. This asymmetry is what I meant when I said that it's a drastically different picture.

Peppering is applicable to all hashing algorithms unlike the specific parameters you mentioned.
In comparison though, there's no way I'd ever be caught wearing either of those. Google's glasses, on the other hand, are unobtrusive enough that I'd probably wear them. Importantly, they don't cover your entire face. Given that the area around the eyes is one of the key areas for facial recognition, I'm surprised how popular the band-style glasses are.
Having a lot of highly skilled applicants is a much better than having a lot of unskilled applicants. In the former situation, you pretty much can't go wrong...even if you use completely arbitrary filters, it doesn't really matter.

This article demonstrates a way to get a lot of highly skilled applicants-that's extremely useful.
I've also done a ton of testing on high traffic forms and reducing forms from 7 to 5 fields had a negligible effect on signups.

Also dont forget the emotional experience of using your site. Hiding fields might make them continue filling it out longer, but it might leave a negative impression on your company for not honestly showing how much work its going to be from the beginning.
Augmented vision technology makes perfect sense for blind and vision impaired users. For example, the latest version of Google Goggles (http://www.google.com/mobile/goggles) performs image recognition on the live camera feed and speaks out the results as it recognizes items such as banknotes. Running the same software on a headset would allow the user to receive an aural interpretation of text or images around them.
Hi Friggybum,

Thank you for your kind comments, and thanks for the offer.

I would love some help with proofreading, my email is julian@bodyhack.com

Many thanks,

Julian.
DCPU-16 implementation in f#
I'll make demo account right now. Thank you
Honestly, there are a lot of crap jobs posing as dream jobs as well. I remember talking to my (female) cousin once and she said to me "People act like it's only good men that are hard to find. The sword cuts both ways." Just because there's a higher ratio of Women to Men doesn't mean that the ratio of good women to not so good women is higher than it is for men. I didn't get what she was saying until I started dating heavily.

In the same regards just because there are more jobs than candidates doesn't mean there isn't just a high ratio of crap jobs. So the same 100 job ads will likely have 1 or 2 great opportunities and 98-99 posers. The candidate's job is just as tough as the recruiter.
So they weeded out the really bad applicants and as a result were left with so many good applicants that they're now in the same situation as the original article.

The original article talks about finding 4-5 people worth talking to out of 100 people, 50 of whom can't fizzbuz.

We were in the situation of 20 interesting people out of 40 candidates, all of whom could fizzbuz.

If it were truly unmanageable, we'd probably have used weak Bayesian filters. E.g., degree, rockstar ninja, etc, all the things Raganwald originally advocated against using. I gather this is what Google and Facebook do.
yes, I put the first salt in database and the second salt under www-root. Hacker who hack the database only will not know the fist salt.
I call BS on this one. I'd even say that this will filter out the top level of folks (†).

If you give me a synthetic puzzle to solve I wouldn't bother applying to your organization. It's much better to craft a problem to the specific domain that your company is dealing with. Then you can test for both domain expertise and problem solving ability in one fell swoop with the extra bonus of it not seeming pointless.

† The important addendum on this is that you're not going to have the top level of folks sending out blind applications unless that person is in the process of making a lateral jump into another sub-field. And even then probably not. But if you give a top applicant a synthetic puzzle after your recruiting contacts them, expect a large portion of them to thumb their nose at you. Similar note on top folks, though this is mostly pedantry -- the top OSS projects aren't on GitHub and similar. The largest and most prestigious of the OSS projects host their repos themselves.
This looks pretty interesting though I had to sign-up to figure out what they offer exactly (for 2 USD/user/month):

* 10GB storage
* Webmail
* POP3/IMAP
* Calendaring
* Groupware
* Mobile Sync
I should point out that diamonds can also make very good semiconductors when properly doped, with very large carrier mobility compared to silicon. We just don't know how to make the necessarily complex patters on them.
For anyone who's wondering what the point of all this is, here are the discussions that help to explain the impetus for this change:

https://mail.mozilla.org/pipermail/rust-dev/2012-February/00...

https://mail.mozilla.org/pipermail/rust-dev/2012-March/00149...

https://github.com/mozilla/rust/issues/1619

As far as I remember it has to do with the prior inability to handle non-local returns and the desire to honor Tennent's Correspondence Principle.
When Do We Draw the Line on NFL Violence?
Facebook Mobile Security Hole Allows Identity Theft (Gareth Wright)
I suspect this comment is largely misunderstood by those responding about the usefulness of such a device to the legally blind.

The point is that it's not subtle as far as PR goes, not that "legally blind people have no use for this thing".
It's gotta be the Death Star hurtling through space...
برنامج عرب غوت تالنت 2012
> only industry ... disrupting every other industry

Why are you surprised that they are trying to save themselves? That's the logical thing for them to do. They have no reason to let the internet destroy them, and every reason to try to prevent that. It sucks for us, because we have to deal with it, but it's a very logical thing for them to do.

It would be better if they learned to coexist with the internet, but most of these industries are not known for being innovative enough to do so.
Check out http://code.google.com/p/go/issues/detail?id=909#c32 and the following comment that agrees with it.

This isn't just a address space leak - it is a real memory leak. On 64-bit the GC may not be so easily fooled as on 32-bit but it can still be fooled and that is a fundamental problem that will result in memory leaks - if I have 2GB RAM VPS - it doesn't help to have 2^64 bits of address space (actually it is more like 2^48 (http://en.wikipedia.org/wiki/X86-64#Virtual_address_space_de... ) - if the GC leaks memory sooner or later my process will be killed by the OS.
Shouldn't it say until it ceases to be less than h?

Your comment supposes that the loop will increment without interference. While you'd hope that was the case, it's not necessarily true.

Obviously with the loop as coded your comment is correct (that'll be the first condition that terminates the loop) but it could raise a question about whether comments should reflect the routine as written or just the section they're immediately referring to.

Or indeed whether comments for something so self evident are even useful or necessary... Something I'd definitely ask in an interview if I was presented with this code, not looking for a specific answer, just looking for some indication that the candidate had (or could come up with) some vaguely informed thoughts on the subject.
If the theory doesn't stand in all cases, then it doesn't stand. It should be "in practice".
That's false. Nobody is ever saying that h(x) is unique, only probability that h(x) = y for any y should be about 1/size of y choice space.
How any software company can cross “The Developer Divide”
I think another over-abused phrase is "smart and gets things done". Thanks for regurgitating Spolsky in your ad. Tell me do you have individual offices for your engineers? No...it's the standard cube farm? Then you don't get to quote Spolsky.
Well, I didn't see anything in the article where Scroble mentioned whether they had glass lenses or not, but did you look at the pictures in the article? There were very clearly no lenses.
4 Signs It's Time to Dump Your Business
Just get it out there and watch carefully how people use it. In the early days of thin traffic I read the raw logs but before long use web analytics.

When you do have an alternate design, try it side by side in an A/B test. It's very difficult to tell a "good" design by looking at it. It's pretty easy to compare and find out for certain. The biggest benefit of A/B testing is that it removes a lot of hesitation and deliberation from the development process.

Although I am a big fan of good design, it's important to note that the opinions of lots of successful people vary greatly

http://www.conversionvoodoo.com/blog/2010/04/increase-your-c...

The more you A/B test the better you will get to know your own audience and what works for your particular product.
How I Lost My Hacker News Name
I think the picture at the top of the article might be from Petman
exactly. how can a five minute visit to a hospital cost $3000 dollars. same insanity.
Yes actually Google hired those that won the 2005 Challenge.
My previous blog post (submitted here yesterday) has two.

http://www.chrisstucchio.com/blog/2012/leaving_academia.html

But I'd suggest that except in special cases, posts with titles like mine are probably not worth reading if you are uninterested in hiring or finding a job.
That is absurd, and I'm surprised it's not illegal.
Salt should be user-specific, requiring construction of many rainbow tables turning this kind of attack ineffective.
If the US didn't invade Japan, anime likely wouldn't exist.
It depends on your philosophical bent.
I hate that too. You have given your facebook data and they still ask for more and you still haven't tried the service yet.
Replace "bandwidth and storage" with "the transportation of raw materials," and torrent software with 3D printing, and you've got yourself an interesting sea change in the manufacturing industry. I wonder if they will lobby with the same intensity that the RIAA and MPAA have.

Reminds me of Cory Doctorow's speech "The coming war on general-purpose computing", which is basically, yes, there will be a massive, more powerful lobby.
http://boingboing.net/2012/01/10/lockdown.html
The write lock does matter. We at 10gen won't say otherwise. A good amount of work in the current and upcoming releases are adding more granularity to the write lock. See current progress in jira https://jira.mongodb.org/browse/SERVER/component/10055

That said, as that blog post clearly demonstrates, the write lock is a red herring in a vast majority of circumstances. In practice it is historically rarely been an issue and even less so with the yielding improvements in 2.0 (which is what that blog post is about). Typically issues are manifested in lack of adequate ram, lack of IO and poor schema design.
"the top OSS projects aren't on GitHub and similar"

True, however if you're a contributor to a top OSS project, you'd tell me that when you apply, and send me an example of one of your contributions that you're particularly proud of (at least I hope you do, otherwise I won't know!)

Puzzles and challenges are useful when the candidate doesn't have any good examples of their work that they're at liberty to share with you. I'm very wary of hiring someone without seeing any of their work. We've been taking this approach for awhile now, and it's worked out well for us.
It seems like this criticism should apply to FizzBuzz too, and that's why I'm inclined to dismiss it. (Specifically: how often does a Java business logic programmer invoke the modulus operator?) But I think I would agree with a more general point of avoiding difficult Project Euler style problems in favor of simpler ones that nevertheless need a written program to solve (or hardcore paper and pencil math skills).
They are, but we software-RAID our EBS drives to get better write throughput, and we put the Write-Ahead Logs (WALs) on a different RAID from the main database, so when you have both of those going on, you need something else to atomically snapshot our PG databases.
The Go runtime does not call malloc(3) for heap, it reserves address space at known high locations (over 2^32) with mmap(2) using the MAP_FIXED flag, and it does so in 16GB increments (or is it just one 16GB allocation? can't remember).

I won't comment on the DOS concern until I've investigated further.
for simple scripts: doesn't matter

for larger projects: depends on project
美女网
I feel continually obligated to remind people that if there's some aspect of the language that they don't like, they should speak up! :) The devs are always looking for feedback, either on the mailing list, the Github issue tracker, or in #rust on irc.mozilla.org.

That said, perhaps there is something you've missed. I've posted links to the Rust mailing list elsewhere in this thread, could you skim over those and let me know if they address your concerns? Honestly I'm not super-thrilled at this change myself, if only because it makes for loop invocations a bit busier to look at, but I can't say that I fully understand the semantic tradeoffs here.
For those wishing to find a more direct picture of what philosophy can offer to scientists, I'd suggest looking into the work of individuals such as William of Ockham, David Hume, and Carl Popper.
Can someone help me out here with a TL;DR? This is my first exposure ever to any technical aspect of Go, and this discussion makes it sound from this discussion like it doesn't use any tag bits in its pointers, but has its garbage collector run heuristics on the data it examines to see whether it "looks like text" to decide whether to collect it? I know that can't possibly be correct.
Wayland's X11 support is ready (An Experimental GNOME Shell Running On Wayland)
I applied at Company A that had an test similar to an IQ test, and they returned back that I would be better suited to an entirely different job than what I had applied for. It also took them 3 full weeks to get this information back to me, then another 3 months to determine that they wanted to interview me for the original position I had applied for. At that point, I was already working at Company B making 10k more than Company A said I would be eligible to earn after working at their company for 3 years.

Yeah, I'd pretty much say that the IQ test was pointless in this case and luckily that was the only company I had run into using it.

EDIT: Forgot to mention that the test also took 3 hours to go through and had no limit on the questions that you would get. There was no possible way you could finish every question on the test.
Every time fizzbuzz comes up, someone has to post a solution it seems, but why does everyone write such huge fizzbuzz programs?

for(int i=1; i <= 100; i++)
printf((char *[]){"%d\n","Buzz\n","Fizz\n","FizzBuzz\n"}[((i%3==0)<<1)|((i%5)==0)], i);
There is nothing like the energy and vitality you feel when you are building something that you feel passionate about. While I have a sucessful professional career, the small strides that you make with a startup are much more gratifying than even the best day at work. You appreciate this more as you get older.
True true, maybe something like Zaarly or Task Rabbit would be true here?
Part of the trouble is that the best people are well employed and busy working. They are in high demand. They aren't going to do puzzles or beg you for a job. You have to find some way to meet them and convince them to work with you.
The alternative to filler content isn't a better game, it's no game at all. You couldn't make a game like World of Warcraft where the content was all too interesting and varied, so that bots wouldn't work and you wouldn't want them to anyway.

WoW is already one of the most complex pieces of engineering in the world. It's the gaming equivalent of arguing for the Sufficiently Smart Compiler. Strictly speaking games would be better off without it, sure. But you might as well be arguing in favor of fusion power - free energy! No nuclear waste! Etc.

Bots absolutely devastate FPS games. They have bot problems and they're not solved by the games being fun, they're solved by policing by admins. Even if the game has randomness, by god, have you ever seen a bot play? Take a look at this (jump half way through).

http://www.youtube.com/watch?v=Huz5ZROt0j8

A single slice has Headshot! Avenger! Longshot! Execution! Longshot! Headshot! One Shot Kill! Headshot! as quickly as they can come on the screen. A newbie is lucky to get one of those every couple of minutes. An experienced player would not be able to defeat that bot. And this is typical of FPS bots.

And what about chess? If computers get much better, one of the most interesting games the world has ever known is going to be ruined (in places where bot detection is not possible).

Maybe other people are learning from your insights, but I've been a full time independent game developer for 7 years (and by that I mean, if the games aren't fun, I don't eat) and I'm left scratching my head.
Not to quip, but surely some of the blame for that confusion has to lie on the cryptography experts who insist on using lung-spasm-inducing hairballs like "PBDKF" (edit: typo there was, I swear, unintentional!) to represent concepts better explained in English as "expensive to compute".
IIRC, there have been two versions of this keyboard. The first included a trackpad. The current does not. Some user comments that I read also seemed to indicate a bit of difference in the flexing of the overall board, between the two models, but I no longer recall those.

The first version was also significantly more expensive.

If I can ask you, how large is the palm rest in front of the keys, on your model?

I was tempted by this model, but I have trouble when the front edge of a keyboard extends so far in front of the keys that it presses against my wrists, particularly when I'm typing on a surface whose height I can't control, e.g. a standard table where my forearms end up pointing somewhat upward instead of being level. (A design that, unfortunately for me, is quite prevalent in laptops, these days.)
As someone has already said here on HN, that since those greedy guys will never stop trying such things, the community must kick them back by taking away their unjustified privileges and "rights", by changing copyright law the way WE ALL WANT IT. I hope that the next initiative involving this big number of people will be about fighting back, not defending.
Rails developer <: programmer. Contrary to Bay Area belief, most programmers are not, in fact, Rails developers.
When everyone is responsible...
The King 2 Hearts: Serial Drama Korea Terbaru Yang Mendapatkan Rating Tertinggi
Fair point. Actually, you've nailed it. C++, for example, isn't some horrible language without purpose. It has a niche that it fills well (although I'd prefer C) but most C++ jobs aren't in that niche.

My experience is that language adjustment is up to a 0.5-point drop (the scale is here: http://michaelochurch.wordpress.com/2012/01/26/the-trajector... ) in an engineer's ability. This is on a 3.0 scale where most engineers are between 1.0 and 2.0, so that's a huge change. Compensation tends to be linear in proficiency but exponential in value-add. 0.5 points is about $50,000 in market pay but a 2-4x (depending on the type of company) difference in productivity.

Sometimes it is worth the drop, such as when one's learning a dramatically new and more effective approach, or solving a fresh class of problem (e.g. real-time software, which is done in C). That isn't the case with enterprise, "pattern"-afflicted Java. Instead of solving the problem appropriately and well because I know how to do it, I have solve problems inappropriately and badly because I don't know the crappy idioms that people invented because they don't have appropriate tools.

On that scale above, I put myself around a 1.7. If I set foot in a typical C++ or Java shop, I'd drop to 1.2 or 1.3. Which means I'd risk falling to the level of a junior programmer and being typecast that way. Which means I wouldn't get the benefit of the doubt if I say, "This project wouldn't be complete shit if we'd done it in an FP language" (in some nicer words, of course). Your first 6 months determine whether you have technical credibility or not. If you don't, you can't blame the tools, even if bad tools are (as they often are) the cause of the problem. The unenlightened tend to think of all tools as equally good (all languages are Turing complete). No, not so. A 3x difference in CPU performance may not matter for most problems, but the 3x difference in human performance that hinges on whether one uses the wrong tools certainly does.

The drop to 1.2 is something I'd tolerate if moving to something genuinely interesting, knowing it'd only take a year to pop back up to the same or even higher level. An example might be high-performance C++ in weather forecasting, bioinformatics, or artificial intelligence. I'd gladly become a junior again for a year for that kind of stuff. On the other hand, most enterprise Java/C++ bullshit isn't really worth learning, not for a creature that has 60 years left to live instead of 600,000 (#ShitYouCantSayAtWork).

So yes, my language bigotry is more directed at the typical C++ or Java job than at the language itself.