skysight-inc/HackerNews huggingface dataset:
Ray was a huge proponent of libraries. If you want to honor the man, go visit your local library today. Check out a book. Shame on you if you don't have a library card, but it's not too late to get one. If you have some money or some books you can donate, help the library out while you're there.
We can tell you we're not, but that doesn't actually confirm anything. (We're really not, though.)

To be safe, you should consider the SHA-1 hash of your LinkedIn password to be public, even if it's not one of these 6.5 million.
It's a great method to get inspiration for potential problems in the B2B space. The challenge however, after you've come up with a solution is the sales. Enterprise sales are notoriously difficult especially due to "big business" culture that creates inefficiencies to solve in the first place.

PG has this to say in his essay (http://paulgraham.com/start.html) :

"Start by writing software for smaller companies, because it's easier to sell to them. It's worth so much to sell stuff to big companies that the people selling them the crap they currently use spend a lot of time and money to do it. And while you can outhack Oracle with one frontal lobe tied behind your back, you can't outsell an Oracle salesman. So if you want to win through better technology, aim at smaller customers."
If they could use a similar process to how aerogel is made, creating a foam structure of the zeolite, then surface area would be considerable.
All good brute-force crackers have such substitution rules builtin.
Simple test: Find something you like in their code and ask them, "Why did you do this?"
I'm curious why they removed openid. This is relevant to a project I'm working on.. are there good reasons not to offer that as a sign-in option?

What are considered current "best practices" in building an account system?
The Future of Computing Technology
Sodium Acetate.

https://en.wikipedia.org/wiki/Sodium_acetate
A Plea to Gem Developers: Please include a Sample Application
" At this time, we’re still unable to confirm that any security breach has occurred ..."

Really? How long does it take to verify that this breach is accurate and sound an alarm?
I think there's a saturated solution of sodium acetate inside. The metal clickie causes the solution to crystallize, which happens to happen exothermically.

(IANAchemist)
My 4 year old 15" MacBook Pro is still working great; though I can't deny I'm yearning for something with more power at this point. If the rumors are true then next week I'll be able to lust after a new model.
I agree with your point about restaurants, but you are not acknowledging the current trend in agriculture. I'm talking about the small "organic-like" farms that want to slaughter on premise or sell homemade items. The meat industry in particular has captured the regulators and use them to keep out competition. The large packers want more regulation, because they can absorb the cost of compliance and the cost of fines for non-compliance when they get slapped on the wrist.
Why is it: http://crackedin.s3-website-us-east-1.amazonaws.com/

Is the east-1 a way they know where I am?
You are using "cowboy coder" dramatically different than thr Dr. Dobbs article. He's talking about the kind of person who leaves bits of their shopping list in a comment in the source code.
Then don't get doe-eyed when served with legal papers after signing a lease which explicitly prohibits the behavior.
The term of art you're looking for is "specific heat".

https://en.wikipedia.org/wiki/Specific_heat

The relevant number for water at 25C is 4.184 joules per gram. But this isn't a strict apples to apples comparison: if you heat and cool zeolite in a vacuum chamber, it'll have a pathetic specific heat. (Like perlite, another foamed mineral, which has a specific heat of something like 0.1) That's because there's a chemical reaction taking place, not pure dumb-matter heating or cooling.

Meanwhile, the energy density of a lithium ion battery is 720 joules per gram, and the energy density of gasoline is 47,200 joules per gram. This does not "solve" energy storage, in any way, shape, or form.
NoSQL: If Only It Were That Easy
Somebody had the password test123. Lol. I'm going to go see what other crazy simple passwords people have used.
Can you give me some examples of how this can be used?
That was my impression. It sounds like he is really just looking at all options to figure out what does and does not work and why. To that extent, he is building and modifying hardware to experiment while also working with manufacturers.
Yes, we seem to disagree about whether there exists a category of people who a) work hard and b) are not "successful" and, if so, are even relevant to the discussion.

This world-view may boil down to left vs. right, or populist vs. libertarianist, or what have you, but to claim to know why you saw so many downvotes seems a bit presumptuous when there might be plenty of other explanations.

For all I know, people were turned-away by a perceived arrogance in your opening statement, which has less to do with politics and more to do with tact.
Somebody once said fire was composed of phlogistons. Later, different people said that fire was instead a process of decomposing fuel molecules and a release of visible light due to the energy of the chemical chain reactions taking place inside the flame.

The guy who said "phlogistons" was wrong. So was "just use SHA1" guy.
I never said it was the sole determiner. If you can't talk to people but you can do tech, you can do all right for yourself; if you can talk to people and you can do tech, you can write your own check.

People in tech need this most-- we're way too willing to write off the primary importance that other people have in our lives.
Tried fish yet? I prefer it to zsh ...
They are a supersaturated Sodium acetate solution.
Liquids give off energy when they freeze and take energy in when they melt.

When you heat these and melt them they can stay stable as a saturated liquid until you create a small site for them to start freezing around - they then give off energy when they freeze. The 'clicker' is all that's required to localy concentrate it enough to form a single crystal seed to start the freezing
I don't have cable/satellite. The minimum monthly cost to obtain HBO for me is about $45/month for basic cable, HBO, and a DVR option.

My GF is completely addicted to Game of Thrones, but she openly admits she will not pay $540/year for basically a single season of a show.

All the "but look at all the other content you get" arguments are null, if I were interested in any of that other content, I'd already be paying for it. But we're not.

She can torrent it now and watch it when she likes for free. While she will undoubtedly go buy the DVDs when they're released (she always does), the incentive to watch it "now" as it's being broadcast is worth some amount of money $0<n<$540 for her.

I really don't buy the argument that HBOGo wouldn't make any money if they charged $15/mo for streaming-only access. Nearly everyone I know (none of whom have cable/satellite and HBO now) would gladly pay that price or even marginally higher.
I'm not a math person either, but here's some fodder for someone who is.

Mark Burnett's extensive password collection (which he acknowledges is skewed, because it's largely based on cracked passwords, he only harvests passwords between 3 and 30 chars, etc.). Here's how some of his stats shake out:

* Although my list contains about 6 million username/password combos, the list only contains about 1,300,000 unique passwords.

* Of those, approximately 300,000 of those passwords are used by more than one person; about 1,000,000 only appear once (and a good portion of those are obviously generated by a computer).

* The list of the top 20 passwords rarely changes and 1 out of every 50 people uses one of these passwords.

So it's conceivable that 6M unique passwords could cover a very significant portion of a 120M user namespace.

Ref: http://xato.net/passwords/how-i-collect-passwords
Oh man, the memories. I remember playing the original Doom game with a virtual reality helmet at a gaming convention back in 1994 or so when I was a little kid. It was a tiny convention at a small Finnish town, but I remember seeing same kind of helmets in photographs from CeBITs and E3's in computer magazines.

Does anyone remember a consumer VR helmet circa 1993? It had a helmet with displays of roughly "mode 13h" resolution and a hand held hockey puck with a few buttons? The helmet and the puck had accelerometers and/or inclinometers and/or gyroscopes or something to detect movement.

Head turning affected in-game camera turn and tilting the puck was movement. Puck buttons were fire, change weapon, etc. Proper FPS aiming would have been difficult but Doom's projectile collision detection is 2d anyway :)
Looks awesome. I look forward to playing around with it in Google Earth.
VALVe is also working on something similar: http://blogs.valvesoftware.com/abrash/valve-how-i-got-here-w...
I use Redmine with the Backlogs plugin and a lot of custom issue types.
Not exactly because it doesn't change the design space of CSP, it just offers up a different heat storage mechanism.

To put it differently, if heat storage was the only problem with CSP, and there is already a heat storage solution available (liquid salt) then Zeolite isn't solving a known 'problem'.

You don't need 'indefinite' heat storage for CSP, you really only need a couple of days worth, and we have that already.

It might be interesting to look at the total economic cost of heating these things up in one place, transporting them, and then generating power there. However the heat capacity, even at 4x that of water, means that you've a constant stream of train cars dumping 'charged' pellets into your power plant. While another constant stream is carrying 'spent' pellets back to be recharged. Not to mention that for all of this to work you need to adsorb water so you end up effectively pumping water in the return path. In a CSP setup without a lot of water (say in the desert) this means you need some sort of vapor recovery mechanism to minimize the loss of water.
My 11th grade English teacher tried to explain what every colour in a story meant. "Red is clearly used here to mean ..."
I just downloaded the app, and the designer made excellent design choices. There's an elegant balance of playfulness and utility, tasteful color scheme and font choices and a healthy amount of animated sizzle. Well done!
Coffee keeps winning.
"binladen" was actualy used for a password at linkedin lol!
The Sevens: impressive tech demo combines Twilio with gaming and video
I'm the author of the blog post.. Thanks for taking the time to read it and comment.

You're right, it was a bit of a stretch to label Clippy as tech support. However he was introduced for the purposes of help to the customer, which is the essence of the blog post.

The main take away for the post is that it is important for organizations and its leaders to view customer support as an opportunity to engage their customers and improve their product.
Know Your Tools - Don't Shoot Yourself in the Foot
You've GOT to be kidding me.

"Mr. David A. Ebersman has been Chief Financial Officer of Facebook Inc. since September 2009. Mr. Ebersman oversees Facebook's finance, accounting, investor relations and real estate functions. Prior to joining Facebook, he served as Chief Financial Officer of Genentech Inc., from March 5, 2005 to April 2009 and its Executive Vice President from January 2006 to April 2009. Mr. Ebersman also served as Senior Vice President of Finance at Genentech Inc. from January 5, 2005 to March 2005 and as Senior Vice President of Product Operations from May 2001 to January 4, 2005. He joined Genentech in February 1994 as a Business Development Analyst and served as its Senior Director of Product Development from March 1998 to February 1999, as Vice President of Product Development from February 1999 to May 2001, as Manager of Business Development from February 1995 to February 1996 and as its Director of Business Development from February 1996 to March 1998. Prior to Genentech, he served as a Research Analyst at Oppenheimer & Co. Inc., Research Division. He has been a Director of Castlight Health, Inc. since July 14, 2011. He has been a Director of Intarcia Therapeutics, Inc. since July 2004 and Ironwood Pharmaceuticals Inc. since July 2009. He is a fellow in the Henry Crown Fellowship Program. Mr. Ebersman holds an A.B. in Economics and International Relations from Brown University."
I was mostly interested in hearing what happens on the vendor side after an exploit is disclosed, but you're right.. there wasn't a lot of specifics.
"American kids should be building rockets and robots, not taking standardized tests."

I agree on anything, but the first word. ;)
The author doesn't make a very good case in favor of MBAs (or, in my opinion, college in general). He does, however, make a great case in favor of management and experience working with other people.

Mark Zuckerberg might not have ever run a company, but he clearly knew how to inspire the people he asked to work for him. I think the fact that he had to learn how to at least manage his small team before receiving funding worked well for Facebook, and he grew at a pace that allowed him to continue to learn.

Giving a 19-year-old genius enough funding to do damage before he's ever learned to manage people is a much larger risk than funding a team that has proven it can work together. By the time Mark had gotten that funding power, he had already gone through the trials of managing employees on a small scale.
That works pretty well. And yes, my password is in there.
I'm wondering about the legality of this. If you take an (assumed) stolen dump of sensitive data and turn it into a webservice, could you get in trouble?
Reminds me of the Seinfeld/MovieFone episode...

"Why don't you just tell me your password..."
So LinkedIn... Why are you not using bcrypt to has your passwords?

http://codahale.com/how-to-safely-store-a-password/
LinkedIn admits passwords were stored unsalted
Yes, definitely. I just learned about -p recently, and had been editing the config AND running sysctl -w for way too long.
Photo of restraining order:

https://twitter.com/chrisdannen/status/209798659473285121/ph...
So was mypassword and others. Oh well.
Out of the box, no, as this is frequency data rather than time-domain, but could possibly be configurable in Webkit browsers. For an easier solution, maybe something like: https://github.com/katspaugh/wavesurfer.js
PrivateCore nets $2.25M to build a hardened hypervisor
I made something almost the same (including name!), except all check is done in browser:

http://crackedin.s3-website-us-east-1.amazonaws.com/

And it's hosted on S3 so it is faster :)
Utilizing jQuery UI Animations for Neat Page Effects
> The main reason you need a strong password (assuming lock outs are in place) is because this kind of thing happens.

I think it is just the opposite.

If you assume that password databases get compromised every now and then, then obviously you shouldn't reuse the same password everywhere. Even a strong password could become public if some badly implemented service stores it in plain text.

And if you don't reuse passwords, then they don't need to be strong (i.e. resilient to an off-line attack where billions of possibilities can be tested per second). There is no point in keeping that password safe if the associated service has already been hacked to the point of losing their password database. Therefore, a password that can withstand online guessing attacks is sufficient.
Just out of interest, but how large was the "moderately sized" IN() clause? I am asking, as we are looking at postgresql as an alternative to MySQL, and we have some queries currently with up to 5000 values inside IN()
Oh.. Didn't know anyone already made this - i also made a tool, but it doesn't send your whole hash over the wire (only the last 4 chars). http://olemartin.org/linkedin-passwords/
Netflix begins the deployment of their own content delivery network
From the article:

The USF-UM study was funded by the NIH-designated Florida Alzheimer’s Disease Research Center and the State of Florida.

Presumably these government agencies have records of the grant proposals and funding criteria.

I would also guess that this experiment will be independently valided by other research groups. That may have happened already to some degree. You could find out by examining the manuscript once it comes out. I note with approval that this news aggregator has thoughtfully provided complete bibliographic information.
There is a good XKCD comic that explains this: http://xkcd.com/936/
True Ventures Raises $205M Third Fund
The problem is there aren't many people like you. If they released it at a price they could afford to (say $4.99 per episode, available immediately after air) very few people would buy it and the majority would be pissed that HBO was charging so much. Although you may be happy to pay for it, it could damage their reputation.
Yay for communistic showbiz!!
(remember that most European cinema is largely funded by the State)
For those of you who follow his Twitter account, this is nothing new, but still cool that its getting some official coverage. :)
Not like they couldn't save it as a variable if they wanted. That's just what you see in the UI.
Your password was leaked, but it has not (yet) been cracked. Fingers crossed.
Most of my passwords are written down on a sheet of paper. Even if you knew that the sheet of paper contains some of my passwords, I don't think you'd be able to extract them since there's a layer of encryption between my eyes and my fingers.
Actually by your argument, there is a strong upper bound. Therefore, by basic statistics reasoning, the mean is no longer a remotely valid measure of "average" - mode is much better in this case. Therefore average still constitutes most people. If you strictly are defining "average" to be mean, then sure, everyone is an above mean driver, however if you take average to be defined in a way statistically relevant, then it means "the measure of population that encompasses most of the population - the typical value of the population". (hint, if it is the typical value, most people can't be better than typical, it is definitionally impossible). Basically, I'm taking the long way of telling you to stop being disingenuous if you want to make an argument.
I wonder why people who make this complaint never ever bother to google: "why use bcrypt". It's like they somehow forget they have the best magical oracle to answer questions at their fingertips, which can answer the question better than most people who understand bcrypt could.
That is a straw man argument. Throwing up a smokescreen of "big government Internet clampdown" is not a justification for theft.

Whether or not you agree with their business model is irrelevant. They have a right to protect their content, full stop.
Is MySQL faster at handling IN than PSQL? Just because it says it's not well-supported in PSQL doesn't mean it is in MySQL. I don't know either way, but I'd like to.
In most companies, the CTO or CIO comes nowhere near the kinds of purchasing decisions made by the kinds of companies started by a process like this. There are many tens of dir/it or dir/ops people in almost any Global 2000 company that routinely make six-figure purchasing decisions.

Many of those decisions do percolate to the CIO/CFO level for approval, but there is a world of difference between "purchase approver" and "decision maker". Directly targeting the purchase approver is often a very bad sales strategy.
> There's still some work to be done to bridge that experience onto the TV smoothly

Could you expand on that? The iPad is my wife's not mine so I personally have not used iTunes for at least 5 years. Can you get the experience on the TV, just not smoothly? or are you watching it on your iPad?
We'll support other countries in the future once we've licensed the necessary international data to get good coverage in other countries. Sorry your family member wasn't able to grab it.

We've thought about other ways to build on the app... like tackling leaving for the airport to catch a flight. We might add multi-flight tracking too with swiping between flights as you suggest in the future if enough people want that.

The graphic design was done by my buddies Graham Beer (@grahambeer) and Sean Nelson (@partlysean).
Here's to hoping someone with a name in the industry can finally push through decent consumer VR, and that this will get some attention at E3...

I bought the Sony HMZ-T1 earlier this month hoping that it would be what I was always looking for in terms of home VR (despite the lack of headtracking, which I was going to add with trackIR). However, it was horribly uncomfortable to wear and just didn't give the immersive feel I was looking for.

In looking at the Oculus site it mentions that there is a Kickstarter campaign, but then when I click through to a forum post on it the date he mentioned that was back in 2009. I'd be first to contribute to a decent HMD Kickstarter campaign...
Thinkpads in general are pretty great for "get down to business" use. They're nothing flashy, they don't have to build to a consumer market that demands "thin, light, strong, cheap, beautiful". Lenovo/IBM seems to understand that when someone is using a Thinkpad, they're doing so because there's real, hard work going on. They might be boring to look at with a thickness and weight straight out of 2001, but they get the job done. Standardized hardware without the rush to adopt the latest and greatest flash really helps with the Linux compatibility. Dell Latitude is a close second in that market.

Best thing about every Thinkpad I've used at work is, the Insert/Home/PgUp

Delete/End/PgDn

Always in that order, always in that configuration. I don't want to have to use Fn keys to access things that a consumer might not use, but a power user needs constantly. Only complaint on my current T500 is the lack of a number pad.
Props to @grahambeer he was responsible for much of the app design.
You can also just go to:

http://whatarethesevens.com/

if you're as impatient as I am.
I wonder if you could incorporate a wire mesh into the zeolite to improve the heat distribution.
You're sending the hash, not the password.

DDG supports SSL: https://www.duckduckgo.com/

If you want coverage, generate a few hundred thousand SHA1 hashes along with your password.

Actually, running a trickle query of random SHA1 hashes from your box might be a fun exercise, along with a trickle query of random word tuples (bonus points for using Markov chains to generate statistically probable tuples).
Great job gmaster! :)
I think you are propagating the myth that a scheme can be secure forever.

It's ok if WAP is breakable with cloud computing, because the whole point was to secure it for the next X years so that it takes more than Y dollars to break it. You only need to protect million dollar data enough that it costs 10 million dollars to get it.

If the data is valuable enough and protected heavily enough with crypto, the cheapest way to get it is through a meatspace attack (break-in, abduction, etc).

> WEP was considered "good enough"

Not by security professionals once they saw the effective size of the key. It's the downgrading of what looked like a 64bit key into a 48bit key that was the biggest problem.
I mean server-side (can we check the source for that?). The server could crack the hash, and the server could use various pieces of data (ip address, http headers, etc) to try to figure out more about the password's owner.
This is getting silly, but: what percentage of cases of success would you say should exhibit a crucially significant determiner of success?
I just wanted the list in an easily downloadable format so I can check offline

(easily downloadable == not the rapidshare of russia, something you could wget)

But I submitted the hash of my password and it's there so...
We are looking for OS and security hackers. Contact us at jobs@privatecore.com or visit http://www.privatecore.com/careers.html for more info!