skysight-inc/HackerNews huggingface dataset:
I think this hyper-"ironic" everything-bashing when it comes to innovation is a very low variety of discourse.

It's true that most of these social media startups are overvalued garbage that are going to prove themselves to be career graveyards (or sandtraps, at the least) when the tide goes out. And the people who join these unimaginative VC darlings for 0.02% of the pie (with preferences against that equity) are going to lose big time. That said, the reflexive "<X> isn't a real innovation" attitude when X is the solution to a real problem (e.g. self-driving cars, fraud detection, or even well-designed smart-phone interfaces) is a bit annoying. It may not be the flying car, but this X is usually something that came out of a lot of hard work on a problem that's just much more difficult than it seems it "should" be.

I think there's a resentment that builds in a lot of people due to a discrepancy between the real forces that produce technological improvements and the popular press. Reality: technological innovation is slow and incremental, with one seemingly insignificant change making another step possible, and that making another step feasible... until there is eventual macroscopic change, over time. It's gradual and, on the surface, doesn't appear that interesting. Popular depiction, for a contrast: visionary businessmen and "technologists" and "hackers" are driving the future. The backlash against that is that people single out these "visionaries" (many of whom are overrated) and denigrate everything they've accomplished as "not a real innovation". There's truth in the matter of these "visionaries" being overrated, but on the other hand, that doesn't mean that technological progress isn't happening. It's just gradual and unpredictable, and often fails to emerge where we want it. Technological progress actually pushes through on its own terms, rather than being pulled where wanted. For example, human transportation has been stagnant in price and quality (in the US) since 1960. That's a real morale problem on a national scale. But to single out Steve Jobs and Mark Zuckerberg as "not real innovators" because they haven't cured cancer or delivered $40 worldwide airfares is a big of a leap.
Are you working for RDS ? :)
Mirage: Automatic Intelligent Image Loading
You can try it in the regular browser, I noticed that the app (the WebView) has poor performance on some tablets. Need to look into that.
Send me a car to Germany.

(Yeah, we have arguably too much coal here as well, but .. it's changing and the renewable energy changes are a relevant subject in elections)

1: http://uk.reuters.com/article/2012/05/26/us-climate-germany-...
2: https://news.ycombinator.com/item?id=4028019 (the discussion regarding [1])
Electric vehicles are far more efficient than ordinary cars, over 80% including both the charging/uncharging of the batteries and the electric motor. Compare that with the 25% of ordinary cars. Even if all the electricity comes from coal, it is no worse than ordinary cars, since coal fired power plants also are more efficient than gas engines. That means that it is no worse than ordinary cars even in the worst case.

You can argue that to get more people to use public trasport is a bigger win, but to say electric vehicles is a fraud is just wrong.
Sorry I was probably being overly pedantic, I do understand the concepts of REST and the JSON format. I've never seen it as one buzz phrase though.
Interesting circlejerk post
C module?
Also, if that's what should be encouraged, someone might as well put together a simple framework for automating it. Basically, you hard code a list of salts and a list of hash function names (which could also be automatically generated by a tool), and it gives you a new hash function which is the composition of those other functions. There's no reason for everyone to try to do it by hand and risk messing it up in some simple way. And if there were an easy to use framework for doing it, there would be no reason for only larger sites to use it. Using a custom hash function could simply be a best practice.

But honestly, I'd be pretty happy if we could get all sites with 50,000+ users to salt and hash their passwords with any algorithm.
I really wish there was something like this that worked globally, other than PayPal.
5 Million Farmers Sue Monsanto for $7.7 Billion
Can't speak for GitHub, but the criticism of its 404 is wrong. When a repo moves, there is nothing currently in place there to indicate that it has moved from the user standpoint, and if there were, I imagine it could be abused to setup a bunch of accounts and have them all point to one for some lame attempt at SEO. You can't just have one point to another automatically because repo names are not unique and there are repos like "git-scripts" that could be really different from one implementation to another.
Reports say VUPEN has been hacked - 130 0days reportedly in the wild
Link Building Anatomy 2012 Infographic
From the article, "The reason? As with many other cases, such as the ones that led certain farming regions to be known as the ‘suicide belt’, Monsanto has been reportedly taxing the farmers to financial shambles with ridiculous royalty charges."
[Guessing Passwords in] Leaked In
The article says nothing about the engineering technology used to construct what I agree is an impressive vehicle. And it doesn't say anything useful about how Tesla aims to get traction in the electric vehicle sector.

Instead we learn how a wealthy guy can write a cheque on impulse for a very expensive new car "...and then toss it across the table. Everyone was stunned.”.

I don't begrudge the guy his money. I'm sure he's earned it and he gets to decide how to spend it, but the fawning style of this article annoyed me.

Telsa's technology and Telsa the business are totally on-topic for HN, but this article isn't about any of those things.
I think you're missing a "currency" field in the request, particularly since you support both AUD and USD.
I created and use YPassword[^1]

[^1]: http://ypassword.espozito.com/Scratch/en/getit/
Why the Wii U Isn’t the Dinosaur Some Are Making It Out to Be
Firstly, its fantastic to see a service that will hopefully provide a breath of fresh air to a sector that has almost become archaic, and therefore difficult to use, in Australia.

What sort of red-tape has been causing you the most trouble?
Also, are you partnering with one of the banks?
It's worth noting that there's a pwdhash Android app, though not authored by the pwdhash.com creators.
Sixteen Years Ago
Yet, when I look for "python", I'm not interested in snakes. When I look for "eclipse", it's almost sure that I'm not looking for astrological phenomena or (spare me!) books. It's incredibly useful to write "cinema" without having to specify which city I'm obviously in.
The point is: I want to be bubbled. In almost every situation, apart from reading opinions, it is the right thing to do for me.
In my humble opinion, the bubbling effect is overrated and (should be) avoidable with private browsing. Am I wrong?
If your models are simple, it's good

If you rely on model inheritance, or your models have lots of relationships, Django uses the DB really inneficiently

Like, making lots of queries (mostly repeating itself), so a simple thing takes a lot of time.

It's a little bit difficult to explain (you can imagine it was more or less difficult to figure this out as well)
Or you could just be seeing patterns in the static. The Human brain is a fantastic pattern recognition machine, but sometimes the gain gets turned up a little too high in literary analysis classes and our "meaning" radar ends up thinking moisture in the air on a sunny day is an impending class-5 hurricane.
Funny I was about to say the same thing about installing on systems. When you're a systems person or work with many different customers you can't ask them to install a custom shell. Try explaining to the CIO at a major bank why all his linux boxes need fish shell installed.

So we get stuck back at the minimal set of SH syntax that I learned to master some 25 years ago.
EHarmony confirms password breach
The Open-Source Everything Manifesto: Transparency, Truth, and Trust
If you're going to use a password manager, I would recommend 1Password or LastPass.

Other tricks you can apply:

- Use a different password on every website. To help you remember it, you can choose one main password and make variations on it for every website (the variation is based on that website, but don't make it too obvious!)

- I can't tell my password for a specific website if someone points a gun at my head, since I don't know it. I need a QWERTY keyboard to enter my password, because I only remember the flow of the characters I type. I don't remember all the characters.
Message from Germany: Doesn't look like that from here. Our politicians are fighting the wrong battles and loosing most of them as well. I haven't seen a single law passed in the last 10 years that actually enhanced privacy in the real world.
Um. Haven't we known not to use MD5 for years now?
No .. it is Bhutan .. with 8.37% adoption ;)
I second this, in chrome, nip to the webkit developer console and copy the text directly, or copy the html of the section i want and output it on my server, pow, I circumvented your hours of research on this in the space of about 30 seconds.
It's very telling that hardware is outpacing our own cryptographic techniques. I remember reading an article that stated that all passwords will someday be crackable due the advances in Quantum computing.

By that time we'll all know that your password is "I Love Care Bears 123" :P
You Can Make Video Games
2013 Ford Shelby GT500 Price and Specs
The 2013 Ford Shelby GT500 can do 200 mph. Yes, that is right. We now have a 200-mph Mustang. By deductive reasoning, the Shelby is absurd. And it’s surprising, because the GT500 appears just as we had been considering Ford had gone all yuppie with the Boss 302 — the impressively multidimensional Mustang that’s so well-rounded it might conceivably discover its means into the garage of a BMW owner.
There is an episode of Top Gear where Clarkson shows off his newly purchased Ford Blow-job (or something). And the other presenters move in for the kill. Clarkson clearly knew what was coming ...

- How many miles per gallon do you get?
- Errr..
- Is it 4 miles per gallon?
- And how big is the tank?
- Errr
- Only enough room for 19 gallons?
- Err, yes.
- So thats 76 miles on one tank?
- Err Yes
- And how far away from the office do you live?
- Err, 77 miles.

Yes, Clarkson was willing to buy a car that would need refilling every time he drove to or from the office.

Seriously, do not worry about "only 300 miles and I will need to charge it".
People will buy it, and then go look for a plug in station.
The PBKDF2 protocol allows you to safely brew your own password scrambler using any hash functions you choose. It is equivalent to bcrypt for common purposes, assuming the hash functions you pick are decent.

Here's a question for the people here who actually know wtf they're talking about: if I choose to iterate through a set of hash functions with each pass of PBKDF2 rather than using the same one each time, what effect does that have on the entropy of the system and so on? Would it make it easier to crack, or harder?
Such a toolkit would probably be a good idea.

Tie a card-carrying cryptographer to a chair until he delivers it ?
I wouldn't recommend having the "pretty" part not validated. It can cause some serious issues with google & duplicate content and if someone wants to be malicious they can create a bunch of fake urls that essentially point to the same page, or even worse if they receive enough links they can be indexed at the new "fake" url. A similar thing happened to a newspapers website but I can't recall who of the top of my head.

Another potential solution & my preferred method is whenever a change is made that would affect the url of a page. Update a "legacy" table with the old url and the location of the new url, next time a 404 is going to be thrown do a search against the database & redirect accordingly if a new url is found.
I rolled this approach into https://github.com/leonsmith/django-legacy-url and whilst it's not polished it's by far the easiest & probably most automatic/maintainable solution I have found.
LastPass don't store your passwords per se. Your passwords are SHA256 hashed locally.

I love their system, but I think LastPass don't do a good enough job of explaining the security behind the system to those who are a bit more skeptical.
MD5 is not vulnerable as used in md5crypt.
This looks like a normal news submission to me. The comments aren't bad either, except for yours ;-)
Writing your crypto with C and then calling it from another language such as PHP or Python is fine.
I don't think that "stoopid" is the word. It's more like "strange". Also probably you want to read more about M$ history (and software history) to know why hackers really don't like M$ above all other companies.
That this is upvoted to #1, in 2012, on a site called Hacker News, is probably more notable than the article itself.
I attended Microsoft's free developer camp for Azure and it's worth spending a day if you are looking to use Azure. You will come out of it with a good overview of all its offerings and abilities.

http://www.devcamps.ms/windowsazure
A Geneticist’s Research Turns Personal
I work for stuff.co.nz (biggest news website in New Zealand). You wouldn't believe the amount of 'stuff' in our codebase. :)
I can't tell you how happy I am to see this. I was excited to hear about Braintree expanding to Australia a couple of days ago, but this is much more promising.

Do you have plans to incorporate recurring charges as well?

I've added myself to the invite list.
Are the rates really that high? If so, I must be doing something wrong... .NET developer in Washington DC contracting for a major government agency, and I'm pulling in ~$100/hr (roughly $200K per year). I thought I had a great rate, and most people tell me that I am, so it's a shock for me to see someone could be pulling in $150/hr.
I reinforces my belief in humanity that it did happen, I have been pondering for a long time how to do a "People of Earth, your attention please..." which would reach the necessary audience.
so one thing i have to take into account is i cant get into a ycombinator program
I add my vote for 1Password. Just started using it a few days ago but I think it's very well done.
Well.. you could use firefox maff extension to save webpages locally (and your local could be in the cloud, or on a remote backup). MAFF are just zipped html/css/js/img.
:) They do deserve the praise, Marius
Really, it's more of a management problem than a coding problem. Short-term thinking, bad hiring/outsourcing practices, and poor client expectations management, among others. A framework or language isn't magic pixie dust that will make these problems go away.

At this point I'd prefer to work on a well-managed, professionally coded project written in PHP than one written using <insert-python-framework-du-jour-here> run by idiot managers.
this smacks of a scam...
Good point, when I was looking into Azure about 18 mths ago, you could have a Windows VM but the idea was that it was instantiated and port 80 was called and then it might get thrown away again afterwards. The same may be true for Linux instances, but its an important distinction between this service and AWS/Linode where you can have an instance running long term which has it's own state.
Poonam Pandey Exclusive Images Without Clothes After KKR Won IPL 5
Battlefield 3 Premium Details Officially Unveiled
Looks fantastic. I'm interested already and we don't have an immediate need for the API - but even the web UI looks great.

Very little information on your site, though. Some questions strike me:

- What path does the money take from the customer to the user of your service (e.g. me), and how long does it take to get there?

- What kind of backing/insurance/licenses do you have? If you're a tiny startup, there's risk for users of your system if you go bust and any money in transit disappears.
One, often over-looked reason, that website designers chose simple MD5 or SHA1 hashing (and why many still do) is for portability. Years ago this was more of an issue than it is today. They may wish to change web frameworks, programming languages, service providers, etc. and when doing so they want a simple, easy way to use the hashes they have.

Also, many big service providers still use MD5 or SHA1. I saw a company migrate to Google Mail from an old legacy mail system and part of that was integrating some authentication services too. This was several years ago, but at that time, Google accepted hashes in two formats only... MD5 or SHA1.
Seems like the Twitter logo is evolving towards the Dove logo:
http://www.southernbellaswaystosave.com/wp-content/uploads/2...
Indeed! Just that I couldn't see it on the map, too small! :)
That happened to me as well, and after a particularly extended dive into Robert Frost over a week, I went off to the library information system (this was pre-internet, so lots of swapping disks) and hunted down some interviews with Frost near the end of his life where he stated with some frustration his dislike of the practice of finding hidden symbols or political statements in his poetry. The Mending Wall, for example, is often used in classrooms as a symbolic reference of the Berlin wall, this was not Frost's intentions at all, but was something imagined up when he happened to have read it during a visit to Moscow during the Cold War. Proof in point, modern takes on the same poem no longer conjure up images of an impending Cold War nuclear doom.
Wow! If VUPEN's "product" has been leaked, then it's not worth as much to their clients. I wonder if they'll disclose the whole lot and go looking for more 0day?
Or, you know, bcrypt or PBKDF2 or something...
"just ignore robots.txt?"

how about "fuck you"? I guess it's high time to make honeypots, tarpits and bans common practice.
Retrieve SQL Server Database
Want to retrieve SQL Server database effortlessly? Try SsTools SQL Server database recovery software and retrieve data from SQL Server when virus infection corrupt your essential database.
Oklahoma City Thunder defeat San Antonio Spurs.
I'm really hoping they break out of that model. It's great if you want to run single apps on an instance but it falls down once you look at running a series of clients on the same instance. You need to do some hacking to get the IIS setup for many sites which is how we operate.

Our current proposed structure would be to use AWS for front end and Azure for the DB which isn't ideal but I find AWS far more flexible for our purposes.
It's not supported anymore. YMMV when trying to install it.
Pardon my ignorance, but I never understood what Azure actually is. All I hear is some buzzwords. And this makes it even more confusing.

Can some smart people of HackerNews explain that? Is Azure similar to Amazon EC2? Or is it just some lightweight Windows installation on Microsoft-hosted VPS?
PDF link: http://youcanmakevideogames.com/YouCanMakeVideoGames.pdf
Carmack: Consoles could become a niche
On second thought, I can't find any other sources on this story. If VUPEN can keep it quiet then it's not as much of a problem.
Empirically, the way to do really big things seems to be to start with deceptively small things. Want to dominate microcomputer software? Start by writing a Basic interpreter for a machine with a few thousand users. Want to make the universal web site? Start by building a site for Harvard undergrads to stalk one another.

http://paulgraham.com/ambitious.html
Hey, twitter did it with Bootstrap. Javascript is the assembly of the internet so lets get busy re-inventing and then breaking every wheel known to man.
Passwords: What a salt is, and what LinkedIn failed to do
And a population of 3.6% of Romania... I think we can find a 700k pop city in Romania with a higher adoption than that :)
It's pretty easy to migrate users from one hashing algorithm to another when they next log in:

if( user has an old style hash ){
if( password verifies against old style hash ){
add a new style hash
delete the old style hash
log them in
}
} else {
if( password verifies against new style hash ){
log them in
}
}
Roxio | I Need Coupon - Coupon Codes, Promotion Codes, Discount Coupons
The good thing about legislation is you can go after those minority of bad guys. That's what happens when businesses call individuals who are on these privacy lists, they are reported to a regulator and the regulator investigates.
Excellent idea, a hash scheme per site. A multi language framework to help you build your own scheme, one which can be validated by many cryptography-knowledgeable eyes, would improve the chances of this actually happening some day.

It's a pity that seemingly trivial changes on an crypto algorithm can totally obliterate its security.
Works fine in my Chrome!
Indeed, but he's still right and I apologize for my error. But I couldn't really find Bhutan there :)
London, Full-time

Chaffinch is hiring a junior web developer with knowledge of some or all of the following:

HTML, CSS, Javascript, jQuery, Coffeescript, Jade, Stylus, Handlebars, Backbone, Underscore, Node, Express, PHP, CodeIgniter, Amazon AWS.

Remote work is possible, but working from our offices in East London is preferred.

Please send relevant links (e.g. portfolio, github, live work) and at least one code sample of something you're proud of to jobs@chaffin.ch
Apparently Romania is also popular for Cybercrime, http://www.wired.com/magazine/2011/01/ff_hackerville_romania... , related?
There are "reports" they've been hacked? I think perhaps the author means "rumors" and even that is charitable.
One can't help but wonder at the timing of all of this.

Given that Apple has owned Poly9, Placebase and C3 for nearly 3 years and released nothing makes you wonder what they've been up to. I guess it's enough to rattle Google. I think they would be hoping that Apple confines it to iOS and doesn't "do a WebKit" and game change the market.
So when we hired them (just after the start of the project) they worked remotely. They were a small agency who we essentially block-booked for large chunks of time. They would occasionally come to the shared office but not regularly enough to close all the gaps on the project. I estimate that to keep things running reasonably smoothly (and there were still major problems which led to me firing them and hiring brilliant software engineers), I probably spent north of £1k on travel to and from their location to manage them, which was painful both financially (I could be spending that money on almost anything else and it would be better-spent) and emotionally (it's a lot of energy).

Now everyone is in the same room and on the same page. I'm sure there are occasional productivity hits (conversations, phone calls, stand up meetings), but it's a quick "Hey I just deployed this" instead of Email > New Message > everyone@startup.com > I just deployed the XYZ feature we talked about > Send.

It's also more helpful for me to work this way because I am a hands on product manager. We can iterate things very quickly, I can break them and suggest improvements, and we can then iterate them again. Irrespective of whether my benevolent dictatorship is a good way of working, the fact is that I will always work like this and to do that over any kind of distance greater than 5 metres is inefficient and frustrating.
or at least newest. As someone who has tried to integrate Bootstrap into the UI of an existing product I'd say only helps if you don't have a designer. The number of bugs and the amount of code you end up having to deal with isn't worth it in the cases where a native element would have performed better.
Heat shield for spaceships? Imagine on re-entry the outside part is made of a layer of zeolite, heat builds up but is retained on the layer and water is released as vapours ( which can add an extra layer of shielding ).
"I wouldn't recommend having the "pretty" part not validated. It can cause some serious issues with google & duplicate content"

Not if you properly generate and apply canonical links :)