skysight-inc/HackerNews huggingface dataset:
So I tweeted some re-uploaded db links before the one mentioned on that site went down. After looking to see where it spread I found yet another site called Leakedin which automatically parses pastes for potential leaks, it recorded and it made a post here: www.leakedin.com/2012/06/06/potential-leak-of-data-urls-list-315/

When reading the title of this HN post I thought someone spotted the Linkedin leak linked on Leakedin, but nope. :(

Oh well here is some mirrors of mirrors:
http://pastie.org/4038632
http://pastebin.com/Phi70Bsj
http://safebin.net/7182
http://tinypaste.com/f7db25b2
This is what LinkedIn's encryption routine should have looked like (Ruby)
How do I securely store and manage 180 passwords?
I assume that you try to limit the number of queries to FlightAware in order to save yourselves money. So I wonder how many you make for a given flight. Obviously you make one when the user enters the flight number, but what about after that?

What if the plane has to circle? Would you be able to tell the user that the flight hadn't landed or is the landing time based solely on the initial FlightAware query?
Don't forget to clean your .bash_history.
A couple points here. You can enter the sha1 hash of your password or your password in plaintext. In the latter case the sha1 is calculated on the client (using JS) before being sent to the server.

Now that we got that out of the way the more interesting pattern here is how easily people will put the plaintext password for a specific site into a webpage that sprung up overnight.

* I know Chris Shiflett is at least trusted in the tech community (has written books and talks at conferences, etc) so it's not about trusting the site but the larger social implications of user behavior.
comcast is actually charging people more than transit rates to get access to their network -- which is why (except for level3, who has a special deal) video on comcast sucks even with large comcast pipes.
Does iOS maps show ads from Google?
First rule of browser games: Screenshots Screenshots Screenshots Screenshots. How are people supposed to get interested in your game if they have no idea what it is?
I can still file a request for copyright violation, but with a more restrictive license I don't need to argue about whether the placement of the attribution is an appropriate one or not.
Can someone with production level Redis experience explain why Redis doesn't scale, while taking into account what this article stated?
Python Eval really is dangerous
Download free "Wanderlust" - (2012) - COMEDY - DVDRip / 1400 / 700mb - ENG
it's a pleasure to hit them!
but they are moving to island-style keyboards: http://www.wired.com/reviews/2012/06/lenovo-thinkpad-x230/

(btw i binded caps lock to ESC with `xmodmap -e 'clear Lock' -e 'keycode 0x42 = Escape'`, much better for VIM)
Best thing I learned from this? "Please confirm that you want that free video and other emails from me" is a much better subject line than the standard "Confirm subscription".
The future of computing is in computers that aren't autistic pedantic literalists when it comes to computing.

Day in and day out, I have to write in a special, blitheringly patronizing language to this machine in order to get it to do anything I want it to do.

Technology is finally reaching the point where we don't have to care so much about our cycles. I would gladly give up 50% efficiency if it meant I could talk shop with my computer in a meaningful way.
The AppBrain library stats page for phonegap lists the top Android apps that are based on Phonegap: http://www.appbrain.com/stats/libraries/details/phonegap/pho...
I'm curious what you mean by "numeric up/down spinners"...can you clarify?
There are ways to improve performance of JQuery Mobile. Tips and tricks. It's a delicate flower. For instance turn of transitions, hovers, etc. Here is a good thread:
https://github.com/jquery/jquery-mobile/issues/4024#issuecom...
Do you have any more information on Melbourne incubators?

I know of AngelCube, is there a 'best' startup community?

I'm still yet to even find a good online forum for startups (nothing like news.ycombinator even)

How do they sell/fail? You mean, no one wants to buy Australian startups because they're usually just not very good?
I answered your question: using a very large "salt" to force a password hash to run more block functions is a bad idea.

Modern password crackers are extremely fast without precomputing anything.
This is true. In particular, a KDF is in no danger from preimage or collision attacks, which are generally the types that show up.
Most desktops, even those with crappy Intel GPUs have superior GPU performance to the best mobile devices. WebGL has poor penetration, but you really don't take much performance hit as long as you don't need to process data in JS, but then again, a modern i5 or i7 is much faster than an ARM on a mobile device, so what you loose in JS performance, you gain in CPU performance.

Current JS and WebGL performance is well within the range needed to make this work. MapsGL is already rendering a quite large workload, in fact, my intuition is that the 2D rendering, especially with rasterizing label text all over the place, is likely more expensive than navigating an octree and rendering a mesh.
One issue that I have with scrypt and bcrypt for java is that there is no "official" support for the algorithms in java.

When looking at jBCrypt for instance, they're only at version 0.3 with no updates since 2010, makes me really nervous of using it.
/pretty happy/ is a long way away from /ACID/

NoSQL has a place, but IMO that place is not primary data storage (in most cases.)

I asked one large, household-name IT company on a recent interview what they'd do if their DC containing all of their Cassandra nodes went down. Their response was "it doesn't go down" (and if it did, they'd lose data)...
...
...
amateurs.
Actually, for a large enough list of unsalted password hashes, bruteforcing is faster that rainbow tables:

- a rainbow table may require a constant amount of time to reverse 1 hash, but it has to be repeated N times for N passwords.

- when bruteforcing, a password candidate can be checked against N hashes in a constant amount of time (look up the candidate hash in a hash table)

For example if it takes 10 minutes to look up a hash in a very large rainbow table (such as the A5/1 GSM tables published a few years ago), it would take 123 years to attempt to reverse these 6.5M hashes. On the other hand, millions of the leaked SHA1 hashes can be cracked in mere hours on a GPU with oclhashcat which tests billions of candidate hashes per second.
I saw a spam once that said "Is your husband's password compromised? Check it on this site ..." clearly trying to social engineer a spouse into 'doing a favor.'

These people can be very very very evil.
Hacking through Airtime to promote your startup 
It's crazy out here, don't miss this opportunity.
Java under the hood...Javascript in the browser...The APPs built on top of it are entirely browser based, but server-side is all Java.
Least sexy software company ever interviewed on Techzing
New Zealand vs Ireland live stream rugby
New Zealand vs Ireland live stream rugby at Auckland [ Ireland tour of
New Zealand ]
New Zealand vs Ireland
Match schedules:
Head to Head
Date: Sat 9, June 2012
Time: 07:35 GMT
Series: Ireland tour of New Zealand
Location: Auckland
Watch New Zealand vs Ireland live streaming and also watch Ireland
tour of New Zealand live streaming online. You can enjoy this game on
your PC, So why you miss this exciting race? Get the best online
sports coverage on the net directly on your PC
Entering? This is it.
if your userbase is fairly active, you could migrate passwords the next time they login (and store a flag indicating the password "version"), since you'd have the plaintext version during authentication time.

alternatively, you could bcrypt all hashes now, and anytime you authenticate, making sure to MD5/SHA hash the plaintext password before checking the password using bcrypt.

legacy code and especially authentication code that has huge exposure (code path hit during every login and potentially every session auth) is difficult/risky to change once deployed. making things "more secure" has always been a hard sell to management... until a disaster like this happens!
I had noscript enabled and was really confused at first.
64% of CEOs of the top 100 Fortune 500 companies don’t have an MBA.
Other useful facts - http://www.webpronews.com/is-an-mba-worth-it-infographic-201...
Google to Charge Retailers for Product-Search Placements
The Horror of Implicit Globals
There are no known good implementation of scrypt in php (http://stackoverflow.com/questions/10149554/are-there-any-ph...) So I don't know how "production ready" that is considering php is the most popular platform for the web as much as I hate the language.
The link appears to be down now, either it served its nefarious purpose or it's a victim of its own success.
How many bugfixes do you think a hash function needs? Just use jBCrypt.
Thanks for the info. So the "$99 + HDMI Cable" just became ("$99 + HDMI Cable")x4. And then I'll need an antenna (maybe 4 ? Is this roof mounted or behind the TV?) to get my news. So now it's not so easy.

Also, we have a GoogleTV box so I understand the usefulness of a streaming appliance. But it doesn't replace cable. And it doesn't do iTunes but neither do I so I'm cool with that.
Yeah, but once you do that, how do you get the water back out? It sounds like this stuff doesn't do that very easily.
Facebook Inc (FB) IPO: NYSE Blasts NASDAQ
> but it appears that here they meant the traditional absorption

Sorry to add extra "fry" you your brain, but it appears they really did mean "adsorbtion" -> http://en.wikipedia.org/wiki/Zeolite

Which makes a lot of the science understandable. I can't help thinking that by saying "OMG hard science, so here is a massively dumbed down version" they actually made crucial parts of the theory incomprehensible :)

Case in point being; adsorbtion explains later comments about why surface area is important.
Possible? Yes. Typical? No. You basically have to be a "big name" or otherwise have a lot of high-profile, proven solutions that you can showcase if you're charging that much.

Or, work in finance or provide DR consulting to HFT joints. You might also look into government contracts.
Ask HN: Advisor for Credit Cards & Funds Transferring
We're a startup in SD working on a fairly awesome new product, due to be released in a few weeks. However, we're running into a small snag:

Our software gathers funding from many sources and distributes the funds to a designated organizer. We're in need of advice from experienced startups on how to cover the angles, and are also possibly looking for professional legal advice.

If anyone who has been in this area for some time has input or can recommend someone for us to talk to, please let me know at keith [at] appzorz [dawt] com

Cheers :)
Big ups to Michael and MuckRock for getting these files and reporting on them!
No, this isn't it. We're entering an age of higher order technology, where each advancement leads to faster advancement.

In short, we are approaching what many have called the singularity.
So, imagine you've got acceptable VR HMDs? What software would you write for them? Why not start today?

I want an IDE that's like the Bubbles from _Signal to Noise_

I want seamless telepresence for driving mechs

I'm learning faster now because I can have multiple physics and math books along with note-taking software on my iPad. What do good HMDs do for education?

...
Stretching isn't "security through obscurity". It's "security through increasing the attacker's cost by a huge amount while increasing your own cost by a minimal amount".

But don't use stretched SHA1. Use bcrypt or scrypt or PBKDF2, all of which explicitly address this particular concern.
>And while we're at it, mathematicians: stop using variables that rhyme. Bs, Cs, Ds, Es, Ps, Zs, it makes my head hurt.

I had a linear algebra teacher who was (I think) from Ukraine. Roughly all letters rhymed when he said them, and "a", "e", "i" were homophones.
Hacking through Airtime to promote your startup 
It's crazy out here, don't miss it.
www.mediafire.com/?n307hutksjstow3

Click download, copy the URL from your browser into wget/axel/download manager. I get a solid 1mb/s from media fire.
yes I know that this is an old article but I like the conclusion: "The real thing to point out is that if you are being held back from making something super awesome because you can’t choose a database, you are doing it wrong."

Is there any good article about all advantages of nosql and rdbms? Because I think this decision is very hard to make if you have no experience with much data and handling
I like Theroux, he's really smart, and not afraid to ask hard questions. But I think he missed something about the US porn industry. It was sort of the reverse of the MPAA movie industry, in that lots of money went in the bottom, for VHS tapes, magazines, XXX theatres, etc, and very little came out the top. It appears that "actors", "producers" and "directors" were all paid a marginal amount. Were did the rest of the input money go? My guess is to the Mob or to various Mobs, but who really knows? Maybe it was all money-laundering in the first place.
Yes, the choices are moral choices. But by calling it arbitrary, I presume you mean: "Based on random choice or personal whim, rather than any reason or system."

If they are without reason or system, then the can hardly be derived from existing moral systems (that, is morality), or the application of those moral systems to (and lessons learned from) historical circumstance (history).

But by all means carry on with your aggressive point-missing. Would you care to pick this particular nit? Or perhaps a different one?
Thank you very much for showing me this! I can't vote you enough.
Comcast does not operate their own video delivery infrastructure. They contract that out to Akamai. Furthermore, Comcast will happily sell non-transit, A.K.A. paid peering, to all who come. They don't (and never have) sell colocation (DC space). Presumably, Netflix is just going to buy access to the Comcast network, same as every other CDN has done.

http://www.comcast.com/dedicatedinternet/
Looks like you're getting some nice reviews. I do admire the UI. Great job!
I took the last one. I'm very interested in trying PhoneGap. I'll check your app and leave a review. Thanks!
I have to disagree. Marco recently laid out his (very rationale) reasons on why it took so long for Instapaper to hit Android. I encourage you to give it a read - http://www.marco.org/2012/06/06/instapaper-for-android.

Choice quote from the article:
"Simply put, Instapaper needs to be on popular reading devices. That category now includes at least three 7” Android tablets, probably with more to come. I realized last winter that I needed to address this demand, but I couldn’t do it myself. "
Hands on{x}
Apologize, explain what happened, and fix the bug(s).
... or prefix your commands with whitespace to skip ~/.bash_history altogether.
FBML is Deprecated
The concept is that groups developing internet-enabled devices provide a slot for this imp card, which takes care of the heavy lifting of getting online and connected.

It would be very easy to put the power supply to this card under software control on the final host platform.
Actually, no, Comcast's paid peering costs are significantly cheaper than all but the lowest quality transit. In other words, if you just have Cogent, you get what you pay for.
I had that weird/awesome realization moment yesterday after seeing all these x86 tablets and arm laptops all running Win8 / Win8RT. Lines are getting quite blurry, its a great time to be a tech consumer.
Make fixed price bids on stuff you already know how to do or have already done.
Why the Freemium Model Works
Dumb, yet entertaing, iPhone apps
The check of hash to input uses == which will shortcircuit and return quicker as you guess the leading digits allowing you to figure out what the hash is. (i.e. a timing attack)
PaintCode, the drawing app that generates Obj-C, now supports C# and MonoTouch
bug in the code.

return getDigest(password, salt) == digest

getDigest returns a tuple
Here's an attempt[0](by the creator of the Postgres High Perf Book, (and some patches by yours truly)) to automate PG configuration. It's not perfect, but certainly better than OOB settings

0 - https://github.com/gregs1104/pgtune
Hmm, my (short alpha) password isn't in the list.
But would that have great business potential to them? For Amazon, having that infrastructure helped create not just future products (Instant Video, Amazon Music Cloud, Amazon Cloud Drive, the Kindle and Kindle Fire backend systems), but was aligned as an additional revenue source.

You'd have to wonder if enough people would want to use Netflix's technology stack in a way that didn't include distribution on Netflix.
It was a joke, the hint was the use of the word magic.
Well that seems like you are mixing having fun with making fully rational decisions.

From a more scientific position - games like d3 and wow use multiple skinnarian reinforcement mechanism to keep people engaged. Regular schedule reinforcement comes from the xp bar which was made huge so that your regular growth on that is visible. Then variable reinforcement comes from random drops. Getting a shiny new blade is fun because it's useful and makes killing things satisfying. Hence it has value.

There was a really old article (bbc I think) where the op Ed explained one other really important aspect of why games can suck people in : they provide huge fat pipes of data perfectly tuned for the brain to consume.

So that's another reason games and their rewards are so addictive, they are immediate feedback and information in a way the brain craves.

In the end there is no deeper reason. You could ask why people like playing any game with no monetary reward and a luck/loot component. It's just fun.

Status matters only to some sub section of gamers.
Quite a bit more just want to blow stuff up. You should see the corpses of CS players caused by griefers back in the day for example.

Others, such as dwarf fortress or minecraft forums where creating stuff is the key thing and status is secondary or irrelevant.

Similarly during wow, my more hardcore friends soon tired of the base game and meta gamed the auction house instead. At the same time a larger portion didn't care at all for that.
Try to explain how you would actually conduct that timing attack to see why it isn't one.
Chicago, IL - Vaporstream, Inc. - full time local

Our well-funded and fast-rising messaging startup is looking top tech talent and we've got lot's to offer:
all-star colleagues, a sweet salary, and a swank office on the 97th floor of the Willis Tower. In a nutshell, we need

* Systems Engineers: Linux, networking, datacenter operations, etc. Make our stuff work.

* Quality Assurance: Break our stuff and and then let's fix it.

* General Software Engineers: We've got a lot of work in the hopper and need all kinds of programming skillsets.

To apply, email stephen.tarzia@vaporstream.com.
Yep, in a recent QuakeCon he stated that he's more passionate now and having more fun now than ever. Great guy.
... or $ unset HISTFILE
Desktops have inferior 3d rendering capabilities compared to smart phones? Since when? Any desktop bought in the last 5 years will have an integrated or dedicated graphics chip that can at least match smartphone capabilities in this area. This can be demonstrated easily by using your desktop to browse Nokia's 3d map demo, which is equivalent to what Google is doing here. Whether WebGL is fast enough to do this on it's own is open to debate, but there isn't anything to indicate these 3d maps are particularly demanding for desktops.
I've gotten paid much more than this (though not for sustained periods of time).

I had established clients. I knew their business. I get a call one day asking to fix something trivial. "Ok. But I have to charge you for an hour. I am happy to tell you how to fix it over the phone right now for free. It will just take a few minutes." (I think I was working on something else and didn't want to be bothered).

"No, no. Just fix it. It's fine."

/shrug/

3 minutes later I have a billable hour (which was $150 at the time) ready for invoicing. That comes to an effective rate of $3000/hr.
I remember using Doom with multiple monitors. You could use command line switches to set a monitor to be the left view, and another monitor to be the right view, with your central monitor being the regular view. I only used that set up a few times (not having the network or monitors to do it otherwise) and it was pretty cool.
Wouldn't this be better served by a downloadable SQLite file rather than a web service?
True Ventures III, LP Closes at $205 Million
If the hole that let them in hasn't been closed yet, changing the password will make that password vulnerable, right?
So much for white-boarding it. Fixed, thanks.
Full Show 6/5/12: Walker Buys Recall Election
Don't forget Vonnegut.
Sprint.net has 2600:: (that's their entire address)

Last year Cisco had :c:15c0:d06:f00d in their IP but I think they've changed it.
What was her interpretation?
If your hash is not on that list, it's bad news. There are indications that the hacker published only the hashes he needed help with. The others were more easily decoded.
Let's all be Full-time Open Creatives
Right, but I meant, "Tell me how". I figured it out and dashed off a quick post: http://herdrick.tumblr.com/post/24563032599/display-git-bran...
Blizzard 2.0 for you. Over optimized.
Set this in your .bashrc

HISTCONTROL=ignorespace

Or even better, though unrelated to this topic... Also get it to ignore duplicates that come next to each other.

HISTCONTROL=ignoredups:ignorespace
Analyze, Optimize and Monetize User Engagement in Mobile Apps
I guess I can go either way on the chiclet keyboard. But why would they go back to the tiny delete key?
As the copyright holder, the CC-BY licensing explicitly states "You must attribute the work in the manner specified by the author or licensor".

There's no argument. You decide if it's an appropriate attribution or not. If it's not, they're in violation of your copyright, period.

I agree with the parent that someone who is going to steal your content, is going to do it regardless of the license.

And, remember: if you don't actually register your works with the Copyright Office, you can't sue for damages. All you can do is get them to take it down.
How  That Exercise Increases Your Productivity
That's not a big footprint for an app, especially compared with image assets, app code and CSS bundled alongside.

It also means being able to add more functionality at will without having to rebundle, or worse, work on basic functionality helpers. Just seems like wasted time for such a small improvement. These devices were built to have application code on them.
If you are going to go through all the effort to do it properly, you might as well use a proper comparison function. If nothing else, it reinforces the knowledge that string comparisons can be part of security (which goes overlooked by many).
"Time-Warner"NYSE: TWX and "Time Warner Cable" NYSE: TWC aren't the same company. While TW may not want something, your implication is because it would effect the cable business, which is not at all related to TW, only TWC, a completely separate company.
Someone downmodded you because you messed up your units.

It's 4.184 joules per gram Kelvin. Meaning it stores that much energy for each dress of heat you add to it. If you take water from near freezing to boiling that's 100 degrees of storage - meaning 418.4 joules per gram - which is much more reasonable.

And there is no reason you have to stop at boiling. Storing something at 500 degrees is not impractical, so assuming starting at 20 degrees (room temperature) you can store over 2000 joules per gram. And there are plenty of materials that can handle even higher temperatures.
Not that I disagree with anything, but it is good to keep in mind that Pocket is funded by Google Fund.
edit: Google Ventures
A lot of people <35 don't have cable.