skysight-inc/HackerNews huggingface dataset:
Current implementations of private browsing just throw everything away at the end of a session. That doesn't prevent cross site tracking during a session. If you start up a browser in private browsing mode, then log in to Facebook and visit some site with a like button on it. Facebook still knows you visited that site. At least, I think that's how it works.
No. Don't use salts. Use Bcrypt.

http://codahale.com/how-to-safely-store-a-password/
You're responding to an argument I never made. I'm not surprised MD5 is used in the wild, nor confused about the reasons why. And hell, it's a step up from plain text, which is probably even more common.

I'm just surprised to read about its deficiencies on Hacker News as if it were news.
Facebook's S-1 filings show that this was inevitable. It outlines the importance of controlling the mobile platform and avoiding the disruption to the desktop platform.
Finding the laser sharp focus with deliberate practice of distractions
Rely on Chandigarh Packers Movers to Pack and Move Your Goods Safely
With more and more people relocating to Chandigarh, the movers and packers industry is flourishing and packing moving services of Movers and Packers in Chandigarh is in demand. Leading Packers and movers in Chandigarh are continuously striving hard to offer efficient yet affordable solutions to diverse relocation needs such as residential relocation, commercial relocation, local household goods shifting, industrial goods shifting, car carrier & transportation, warehousing & storage, pet moving, plant moving, furniture moving, domestic shifting, international shifting etc.
And the best way to tell is to look back from 20 years hence and see...
This is great, but you can't actually configure virtual machines unless you're one of the "select members of the community". So, if you sign up today, on the three month trial, you can't just configure a linux machine and test it.

If you even manage to get to the correct place, which is a Silverlight powered management console - when HTML5 / AJAX would do.

Lots of bloat and lots of cruft and no actual functionality.

http://i.imgur.com/2bNwU.png
and
http://i.imgur.com/2G8Pa.png
Great post, Nick!

I really think this whole case is badly handle by LinkedIn - both in terms of storing the passwords and the PR when the leak was made.
Soon that won't be the case: http://online.wsj.com/article_email/SB1000142405270230350640....
I'm a fan of PasswordMaker. Based on the domain name of the site, a master password (you could still use a tier system where sites of different value have a different master password), and other settings a password gets generated. Each site gets its own password and your passwords are only stored on the target site (i.e., there's no central password manager that stores all your passwords). There are browser extensions that make it easier to use and if you're not on your own browser there's an online JS version available for generating your passwords.
This will hopefully make it much easier to build sites that span multiple clouds or at least can failover to another cloud.
Well, it's the unfortunate result of several trends colliding: little economic opportunity for the youth of the 'lost generations' of the '90s, a largely well educated population, leaning a lot towards technical subjects, cheap internet access, knowledge of the English language, and wide spread regard for laws as guides rather than rigid rules.
I hope that by now everyone here is aware that this is ridiculous advice. Please, please, don't learn about cryptography in order to store passwords. And don't implement your own half baked scheme. Listen to the people who know more about it than you or I ever will, and then use their software.
The Curious Case of Samsung Galaxy S3 Pricing in India
looks good... What do the pro accounts offer and how much do they cost?

I used to use LittleSnapper when I had a mac, but now that I'm on Linux, I just take screenshots of stuff. I'll give it a try.
Thanks for the link. The article states that Tesla hopes to have a next generation Roadster available in 2013 or later. Arguably a production gap, which isn't unheard of even for larger auto makers. It is an awfully long gap though, a few months would be more typical. "Or later" is a little ominous as well.
Any chance you're from Europe? A saying that I appreciate having spent a large chunk of last year in Europe: "Australians/Americans think that 100 years is a long time, while Europeans think that 100 km is a long distance"
akent, on a personal level I am torn on the deleted content issue, I understand both sides of this issue. On one hand this is not content the community want to associate with the site, on the other hand we have no facility for redirecting this to an external home. We are experimenting with special locked questions for many of the historical cases, this is a very tough issue we are trying to solve.
Both Apple and Microsoft started at a time when personal computers barely existed and thus a couple of guys with very little capital could build a computer kit or code a blackjack game in a day.

One key difference its revenue: Allen often mentions how any piece of code brought money to the company, simple apps that are 100% free today would have been sold for tens of millions back then. Same with hardware, which is why Apple could get roughly 1 million (in today's dollars) to leave the garage.

Basically both companies were in the right place at the right time: right before the PC revolution began. A YC-equivalent at that time would've appeared around 1982, after IBM launched the "official" PC with DOS and the ball was already rolling.

That was the time when a lot of other startups appeared, like Amiga, Adobe, Lotus, Silicon Graphics, etc...

Note that none of those companies were as successful as Apple and Microsoft were, in fact some went chapter 11 and disappeared.
How To Make a Trillion Dollars
Tried to read this article, hit some kind of NPR style donation paywall... 0/10, wouldn't click.
Yes. That is the standard behaviour that nearly all sites use, and is perfectly fine.
A funny story. When Bill Gates came to Romania to launch their Microsoft branch here, and before he gave his speech, the president (still in power now) made a "joke" about how pirating Windows has helped Romania tremendously in the IT sector over the years. I'm not a big fan of the president, but to say that before the founder of Microsoft and before a crowd (and on TV, too), takes a lot of guts.
This may be naive, but why isn't the market protecting farmers? Are subsidies involved?

Why don't they just use normal seeds or other seeds? Weren't these limitations known ahead of time? Why did the farmers make a deal with the devil? Why can't they switch back?
Hi.

You make a good point. We've gone to great lengths to ensure this doesn't happen. One of those lengths is that you can export your entire library to Dropbox. This protects you against us failing or being stupid in other ways.

S
How many web login forms (as an example) are doing client side hashing? The only ones I know are of the recent 'test your password in the linkedin leak' variety.

How do you degrade for NoScript users?

And where's the harm in that anyway (assuming TLS)?
Nice easy skip button in the top corner.
No About section?
If you're not on a new line, you can type Ctrl-d twice.
So stackoverflow should remove all links to github? Unwise.
There's no real point to doing this. If you want to stop them being sniffed, send them over SSL.
SpaceX’s worth skyrockets to $4.8 billion after successful mission
I've never seen just OTS, but then I work in an area where it is necessary to distinguish COTS from GOTS ("government..."). If you have no reason to encounter government software, then I suppose there's no reason to specify that you mean commercial.
I see they use the minimalist Metro design even here. Judging the graphical design only, it looks pretty good.
Social Robot - Monitor your websites’ Social Footprints
This was my bought exactly. Like the simplicity, but this looks less like a tech company now.
Fitness trainer gains and loses 70 pounds in 1 year -- on purpose
Guys, this all doesn't parse for me. My password on LinkedIn was 13 characters long, and included symbols (!@#$%^&&*()), numbers, and alphabet characters. A 13-character password like this would imply a search space of (26 + 26 + 10 + 20) ^ 13 = BIG. If a GPU can check 11 billion passwords per second, this implies that someone ran 2.4 x 10^7 GPUs for a month.

We're either looking at someone with a seriously ridiculous password cracking computer (i.e. ASIC-based -- not even FPGAs), a compromise for SHA-1 (very unlikely), or a keylogger/proxy/trojan/etc... I vote for keylogger.

If your password is in this database, I don't think it's because your password was brute-forced.
Auto updating browsers suck for developers... sort of
Of note: we (Fictive Kin, fictivekin.com) created Gimme Bar. We also created LeakedIn (leakedin.org) which is currently sharing the front page.

Thanks for the busy two days of dev-ops scrambling, friends. (-:

Let's try to keep DDoSing to a lower level than yesterday, though, please. (-:

S
I read it as Cheap Off The Shelf.
winetricks is the proper way to do this these days, ies4linux has been deprecated for quite some time.
I imagine in reality one will try and out-race the other to the outcome they want (most likely 2 will beat 1).
Here’s How To Check Whether Your LinkedIn Password Has Been Released
It's my understanding Monsanto isn't a company that relies on free markets. They use lawyers heavily. If their seeds blow from a customer's farm to a non customer's farm and the non customer doesn't actively try to remove the Monsanto seeds, they sue. They are like the seed mafia.
Amazon CloudFront - More PoPs and More Growth
Thanks. So a better implementation should perhaps instantiate a different session for each browser window (sharing the same session for the tabs in the same window). The user should also avoid logging in to any service linked to a known profile.
Because, for some time now, "the market" thinks there is more value in patenting agriculture and making money out of it than in helping agriculture.

And "the market" is right. In the short term :)
And websites that need JavaScript and don't tell you.
It seems like a hit piece. There's no reference to it in any major publication. I have no idea how this politically-charged website and article got on HN.
Why does anyone make a bad business arrangement? Farmers aren't the first entrepreneurs to misunderstand the limitations placed on them by contract, or to accept those limitations in exchange for fast liquidity.
And do they win such claims? Seems to me the farmer whose field was polluted should be able sue for damages instead?
Looking forward to trying the ajax stuff out even though the demo isn't working for me. I've been working with chosen on my current project which works fantastic and the dev is super responsive but I had to make my own control for large, server filtered lists and it looks and feels awful :)
I'm pretty sure no cryptographer will vet it.
"If their seeds blow from a customer's farm to a non customer's farm and the non customer doesn't actively try to remove the Monsanto seeds, they sue"

Got a source for that claim?

There's an article on huffington post which conflicts with the claim:
http://www.huffingtonpost.com/2012/03/28/monsanto-lawsuit-or...
why is this on HN? for more important and interesting the story is, its not really what i want to read on HN. I already have other sources for that.
I'm so excited to have proper offline maps for Android! I have lots of space left on my SD card, let me fill it with map data please.
Care to back that FUD up with some proof?
Websites should publish sample password hashes
Because not enough people have flagged it.
How To Do Business In The Middle Of Nowhere - BlueSeed
Yep, that's what I meant. The default implementations leave a lot to be desired. Tiny buttons, for one thing, at least on Safari.
I'm living in Romania now and can confirm this. My friends in Germany can only dream about such uplinks. Internetwise, Germany feels like a Second World Country for me now. The rds founder seems like a very smart man. I never met him but I like him already :)

Let's see if Cluj can continue to build and hold the startup scene there.
A better implementation would be one which instantiates a different session not on a per window basis, or even a per tab basis, but on a per "domain in address bar" basis.

And by session, this wouldn't just be the cookie store, it would also be the cache store and everything else which can be manipulated for tracking purposes.

EDIT: I'd also want it clearing between browser restarts too.

If this became (over night) the default standard way for browsers to behave, the vast vast majority of websites (at least 99.9% I'd guess) would continue to work without issue and it would pretty much annihilate nearly all privacy/tracking issues on the web.

Stuff like Google Analytics would continue to be able to work, but wouldn't be able to gather as many different types of information. Advertisers would be able to continue to advertise, but they would lose the ability to track you across sites, which potentially might hit their revenue a bit.
contact me at tobi@shopify.com to get this into Shopify from the beginning. We really need a better partner in Australia
Why a Good Reputation Matters When Working Remotely
I guess I should've mentioned that's it's open source.
https://github.com/jenius/up/
You can see exactly what commands it's running.
Could you add the errors you had into the Issues?
If GM seeds are so horrible for farming business, our cost of living should skyrocket. Farms which don't use GM seeds should benefit. Plus, the farmers should simply pass the price hike to consumers.

The only way this makes sense to me is either GM seeds are subsidized, or a significant % of farms switched all at once.
Are both of these sites (LinkedIn, eHarmony) really assuming that only the hashes posted to the forum thread have been compromised? Isn't that, well, a really really bad assumption?
Technically, at the start of all this crap, if the property rights of the farmers were respected (your crud got in my field, pay up) then this whole chain of events would have gone quite differently.
Difficult hypothetical but Jobs was a control freak. Hard to see him going though the motions of an incubator or accelerator.
you can also check out online beginner lectures for java.
Do you really think of Perl as an obscure language?
I can't help but think that a service like Onlive will play a significant role in this. People will just use Airplay, Smartglass, etc. to get their game on the TV.
Gimmebar pulls a Readability.
When you share content from Gimmebar, it shares a shortlink to the content on Gimmebar, not the source URL.
Sure seems like content/value/traffic theft to me.
Most of the hacker animosity stems from MS' history of using underhand tactics to destroy FOSS and the web. Not compete with, but destroy at all costs. The ill-will this engendered in the community will probably never go away, and rightly so. It arguably set our industry back decades.

http://en.wikipedia.org/wiki/Halloween_Documents
Ohhhh thank goodness! We've been waiting a long time for something like this. It's ridiculous how long it takes to get set up on WPP or eWay with a merchant account.
Here's a link from RT.com (Russia Today): https://rt.com/news/monsanto-brazil-seed-soy-908/

I have no idea if they're trustworthy either, but Wikipedia[1] had this to say about them:

> RT is the second most-watched foreign news channel in the United States, after BBC News and the first most-watched news channel worldwide.

[1] https://en.wikipedia.org/wiki/RT_%28TV_network%29
Another reason I'm glad that I'm married (and faithful)!
Your average farmer doesn't have the resources required to field a lawsuit against a multi-national company.
Microsoft chooses to give enterprise a "miss" for Win8
10 years ago: Mozilla 1.0
Or use NoScript:
http://noscript.net/
I wouldn't, and I'm sure you wouldn't... but there are people who do.

Case in point: OpenERP. Serious business software doing serious business things, so of course they can't use any of those other toy ORMs, they have to spend 5000 lines of code writing their own: http://bazaar.launchpad.net/~openerp/openobject-server/trunk...

Hey, it might not be so great, but at least they have tests for all of that code: http://bazaar.launchpad.net/~openerp/openobject-server/trunk...

Er...

I know of other projects in a similar state, but they're smaller teams or solo coders, so I don't know that they're quite as fair game for finger pointing...
Monsanto: The parable of the sower
http://www.economist.com/node/14904184
> both companies were in the right place at the right time

When looking back on a very successful company, it seems they were all in the right place at the right time. Adding to Microsoft and Apple, Google, Facebook, Twitter
Virgin Mobile Becomes 2nd US Carrier to Offer Prepaid iPhone
> ...consoles may soon become a niche product for highly dedicated, purist consumers.

Isn't that the role that high-end gaming PCs fill now? It sounds like he's saying game consoles as we know them are just going to go away.
Eh, why not just bcrypt the SHA1/MD5 hashes? Your auth check will just become bcrypt(SHA1(pass)) rather than bcrypt(pass). You can convert all passwords right away and I don't see any significant downside to it.
"The Runyons say they signed no agreements, and if they were contaminated with the genetically modified seed, it blew over from a neighboring farm.

"Pollination occurs, wind drift occurs. There's just no way to keep their products from landing in our fields," David said.

"What Monsanto is doing across the country is often, and according to farmers, trespassing even, on their land, examining their crops and trying to find some of their patented crops," said Andrew Kimbrell, with the Center For Food Safety. "And if they do, they sue those farmers for their entire crop." "

http://www.cbsnews.com/2100-18563_162-4048288.html
RubyMonk - Interactive Ruby tutorials
I disagree with the 2nd paragraph. Amazon is not a SV company but the are loved by SV. I think the problem goes waayy back to the original ideological differences of Steve Jobs and Bill Gates.

However one thing that might make SV loyalists tick is that the largest software company in the world is not in SV.
So you are a programmer...
Just enter "monsanto sues farmer" into your favourite search engine. The wealth of results, mostly partisan in nature however, would suggest that this is a significant issue.
That looks very cool. The daily reminder email is a great touch.

These are very interesting times for diary-keeping - we're leaving so many more traces of our lives around these days.

The book output option is nice. I'm thinking of this as an option for future versions of Remembary, too. Aren't these books quite big and expensive though? Or is that the point?
Except the gaming equivalent of an audiophile is a PC gamer, constantly fiddling with his "rig" to get THE most high-quality graphics at THE fastest framerate he can manage.

Consoles are like Bose Wave Stereos.
Let's hope the 'gb' in the username is a clue.
I recall reading (can't remember where, I'm afraid) of instances of Monsanto buying up competing seed stocks and destroying them.

Monopoly, in other words.
Vecturia
Foreigners and the right to work in Moldova.
I tend to agree. My phone & laptop can play games, make calls, browse the web, stream media and connect me to my friends, regardless of where I am. Why do I want an expensive hunk of hardware sitting next to my TV (both of which) that I barely use?

Consoles need to offer something different to stand out. I bought a PS3 to play a specific game and because it was the cheapest Blu Ray player at the time. With consoles getting less exclusives & more games I want to play getting distributed to my phone & computer, I can't say the console really offers me anything of worth...
Enterprise SEO Press Release Link Building Tip
Out of curiosity, is there a list of the fastest companies to IPO? (Non-YC companies included)
This Is What an SEO Spammer Looks Like
Simple startpage
That's a Foom, or hard takeoff singularity. Soft takeoff singularity can be done via emulated minds, superhuman but non-recursively-self-improving de novo AI, etc.
Google could store passwords in plain text if they want, because they're never going to leak. I'm only partially joking.
How certificates of proficiency can lift income
http://bcrypt-ruby.rubyforge.org/ - last updated 2009

http://www.mindrot.org/projects/jBCrypt/ - last updated 2010

http://bcrypt.sourceforge.net/ - updated 2002

http://news.ycombinator.com/item?id=601408 - bcrypt is now obsolete

http://stackoverflow.com/questions/615704/preferred-method-o... no mention of it

I'm not saying I disagree, I'm just frustrated that the MOST important thing in the world for web developers (storing passwords) is still the MOST half-assed process.

Where's the super-simple-recently-updated-one-line call? Use bcrypt? What about scrypt? What about salting, md5, sha1, sha256, sha512, blowfish...

Here's what I want:

String value = MrCrypto.encrypt("Pa33W0rd",MrCrypto.SECURE);
//or
String value = MrCrypto.encrypt("Pa33W0rd",MrCrypto.FAST);

boolean matches = MrCrypto.matches("Pa33W0rd", value);

Something like that, updated whenever a better process comes up, seamless, backwards compatible and universally accepted (Something ported to php, ruby, grails, nodejs, java, c#, python etc...). Does that exist?
I can't even scroll the list on iPad not sure if everyone experiencing the same.
Registration of modifications in the company's statutory documents in Moldova
Of course you have to know the salt, but I'm suggesting something like using a different storage medium, so that one vector of attack cannot get both keys- unknown to the attacker.

I should have made that more clear.
Because the market isn't rational. Often it will choose cheap over sensible. This is one of those cases. What Monsanto offers is very cheap. It hasn't been demonstrated to be safe by any independent studies and the company itself is a nightmare to work with but it's cheap. Sometimes that trumps all.
Actually you're right, that makes even more sense.